last executing test programs: 11.562974154s ago: executing program 2 (id=203): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000000000)={0x7, {"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", 0x1000}}, 0x1006) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000a40)={0x34, &(0x7f0000000800)={0x20, 0x8}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000940)={0x0, 0x8, 0x1}, 0x0, 0x0, &(0x7f0000000a00)={0x20, 0x0, 0x1, 0x7}}) 9.696539249s ago: executing program 3 (id=209): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000680)={0x20, 0x0, 0x4, "0c8ac451"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002a00)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000440)={0x0, 0x15, 0x4, "01496a43"}, 0x0, 0x0, 0x0, 0x0}) 8.584772943s ago: executing program 2 (id=211): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)={0x34, r2, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xfa}]}, 0x34}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) 8.48063391s ago: executing program 2 (id=212): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)={{0x12, 0x1, 0x672, 0x7, 0xc2, 0xdc, 0x8, 0x1b80, 0xe309, 0x4be6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0xb, 0xc0, 0x10, 0x8, "", [{{0x9, 0x4, 0x90, 0x9b, 0x1, 0x69, 0xe0, 0x51, 0x0, [], [{{0x9, 0x5, 0x0, 0xc, 0x200, 0x7, 0xc5, 0x2, [@generic={0x7, 0x5, "ea7eaf666e"}]}}]}}]}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) (async) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f00000002c0)={0xc9, 0x0, 0xc}) syz_usb_connect(0x0, 0x5a, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0, @ANYRES32, @ANYRES64, @ANYRES8=r1, @ANYRES32=r0, @ANYRESOCT=r0, @ANYRES32=r0, @ANYRESDEC=r0, @ANYRES8=r1], 0x0) 7.746491355s ago: executing program 1 (id=214): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) (fail_nth: 3) 7.656577682s ago: executing program 1 (id=216): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)={0x40, 0xf, 0xf8, "0c2d824cd48902d9ef6e7a0560d76e24f392be3a28fcefb4e6ee418e360e000000c4d7f78c004c47e17a35af91a1426ccf30a9dd02c3e9c80a4d9a257863ebf779dffca0eb5b3da153da8f054db4d02297f8e1eb6d70951b4252782400f458e77dc21d86e68366c8aa0a7a171bf1d08cb0196e881ae9ad4d37c05a37a57646702dd1fb2e6b5387127b6642801a80000000710ab0d000000000e82dc8bd735d5f9302ab40a12d3b2680ab07a90ed60d60d7e9e3398630242810d6f56834514624973b98052c99c76d6ef3e18e2d522e1b1d0352206ec1b48e39a7604122a23c134c1fd9ba56270fd3847bf81a3f82339ca91ececfc5ea622e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 7.284851292s ago: executing program 3 (id=217): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="1203006d04ae08581101020301090212000d0000000009040000000000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x2, 0x2721, 0x0, &(0x7f0000000000)) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000840)={0x44, &(0x7f00000002c0)={0x40, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0x81, 0x0, 0x0) 6.420149961s ago: executing program 0 (id=218): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000980)={0x14, &(0x7f00000008c0)={0x0, 0x7, 0x79, {0x79, 0xe, "22e9a678a65e3f4e8416b97b3cb54484107d2d324488dda9f186516a99a47529852ea6f866b8cb86108d56d494e9b4232b94fffbbefd076d5e34659d831d5bcffe0d89f73e173d78ee9b426d9a9387b4da88d301a8e340cdabba330b6b002cf8ffafda09b45d1ec5bf94cc7794743266a179aafa624f1c"}}, &(0x7f0000000940)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000b00)={0x1c, &(0x7f00000009c0)={0x20, 0x0, 0xa4, "01347fc7f4ffa6b5c6b91438afe695131e5ef7d24fbbf609d6f115b5a3b43bc06ae229009e8cb789b7715130585ce6094b33e217539e7ab3fece3c79339d743380ca4009e8a280c1532bd498e61cdcb92d4aec8649b984e839ff959c9e9a6a3f4162d374a1649da7962e038f608dd24ce689456661da32ee0ea2fab98ce93b98f5e432c9dd8a930d30d654b115e3279a1ddb874348daf8cfa3360154841047c5290bb244"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x4}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b04, 0x0) 5.265350821s ago: executing program 2 (id=219): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}], [{@context={'context', 0x3d, 'sysadm_u'}}, {@euid_lt={'euid<', r0}}, {@euid_eq={'euid', 0x3d, r0}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="01000000000400000000000000400000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES8=r4, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000002"], 0x48}}, 0x40000) r5 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x85}, 0x4008011) accept(r5, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) 4.226220573s ago: executing program 3 (id=220): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)={0x34, r2, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xfa}]}, 0x34}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) 4.134820247s ago: executing program 3 (id=221): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x11, &(0x7f0000000000)=[{&(0x7f0000000780)={0x114, 0x36, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x7}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x4000080}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getpeername(r2, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0}, 0x20000000) r5 = socket$kcm(0x23, 0x5, 0x0) listen(r5, 0x800) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r7, &(0x7f0000000380)={0x23, 0x0, 0x58}, 0x10) fcntl$dupfd(0xffffffffffffffff, 0x0, r7) accept4(r5, 0x0, 0x0, 0x80000) r8 = dup(r3) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 4.0010359s ago: executing program 2 (id=222): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000280)={0x14, &(0x7f0000000180)={0x0, 0x0, 0x27, {0x27, 0x2, "154b5704b18f6fec94d2b70422177112541dd63a123f2560d33fe27028498f3a5c797115ba"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x1c, &(0x7f0000000380)={0x0, 0x3, 0x6b, "d00efb15cf4e8d0676e63719e8ea1948aa7fe81e6774ba136b67c0315dd00a265794302b75f291004525840fea5611c00f582d4b1c27fcd92e3ba26ffa537bd0f94122eb18852d8048d6031a7b2f9be3cf78e682b2b98f6e401409d30e01b1a431a329b316cf3d493bbd53"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x9c}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x1}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x48, r2, 0x917, 0xa7, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3f}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x48}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="560f04000e00b5b70070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 3.466746126s ago: executing program 1 (id=223): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_usb_connect(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010003f6fdd140402090b975f601020301090224000201005004090400f700c873b808090504105802030d580904"], &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f00000007c0)={0xa, 0x4e23, 0x0, @loopback, 0x1170}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8055) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x2002, 0x0) close(0x3) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)={0x40, 0xf, 0x4, "b5b70070"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 3.349283201s ago: executing program 0 (id=224): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000080)={0x8, {"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", 0x1000}}, 0x1006) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac0000000000e4ff00", "90be8b1c55080021000c547d03d8a0f4bd00", [0x0, 0x6]}}) 3.213228519s ago: executing program 0 (id=225): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000680)={0x20, 0x0, 0x4, "0c8ac451"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002a00)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000440)={0x0, 0x15, 0x4, "01496a43"}, 0x0, 0x0, 0x0, 0x0}) 2.864859944s ago: executing program 3 (id=226): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12011001000000086d0418c2000000000001090224000100008000090400000903000100092104000001222800090581034000000bfe60e7fabf2c43735eceb89c01f1f2c7a72400dbad1d32386e01c5fb8838e007aba865dfc533207e5075f7812633f5582d9436d83e4a20d32bdef73df8063fd6448d245b65b796109aa4e1ac88fd0ff97163520250980bd1296f220b0347ee79217f37e118c409172ebfe23924ba076936269c55"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="5c0021280000002822f70ba38103000000000000f0d70000cb4fdca0560fb30d54f33ee44fbf6fad3f0808"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000500)={{0x12, 0x1, 0x10, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xd, 0x90, 0x9, "", [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x2, 0xe, 0xd}}}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x250, 0x5, 0x6, 0x8, 0x8, 0x5}, 0x10d, &(0x7f0000000580)={0x5, 0xf, 0x10d, 0x3, [@generic={0xfb, 0x10, 0xb, "2877abbf5ca3ad94b72cbc5bcd2fbfcdd6a86ca19a4b8c86bb63490442290c94440c6f69c5e2907dff1799f32e5062c2626ac9e1762a9bffb21f74c4824fafaf0658501d9a73dab14b70b6d69e3d777534a3d0bdd5259e85ed39a3d4fd61dc5b8ca0f68b40ce451939063a4070abfade247d6a08fcad65a126bd06ad0c569287b4cc6c0158c0f7455cb182156eb5c512f5b7d851a2005a3ded3bed4f42d46ebe8f819499142ebe53761d25521d3dd66ae61f5055184176b72bbc7328489669c5295933c0a486ba17c069b4798e320a199b1ee4a11f96d1bf34a7c46db49b7a2b11d360a0d8ae06c5c5db824ec50fd42a68f3b4ec990d5e4d"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0xb, 0x1, 0x8001}, @ptm_cap={0x3}]}, 0x2, [{0x23, &(0x7f0000000240)=ANY=[@ANYBLOB="2303cd09744f89c0e197596b32657a245fe1d68a837c8939311a8b438c85af783d2e6286b199a484ea57d0"]}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x40c}}]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) socket$kcm(0x2d, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0x7, 0x10a00) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000080)=0x8000000) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r5 = userfaultfd(0x80801) ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000180)={0x1, 0x3, 0x220, 0x4000}) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x3}) getpgrp(0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x3) fremovexattr(r4, &(0x7f0000000280)=@known='trusted.overlay.nlink\x00') ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2}) r6 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)="55000020007f2fb72d14b2a4a27193021c0020005e7a7726969e419b9848a3c728f1afa823ff0100010100005a35cee0c90dacb8d15cc0e15c9f79e583de0d32d6ed9098d12ce9c95d92fb3867580000000000f9a22fce40549423cb7fe9da26c83032d2815ddebb9763486eba5f01e99fb7f60fa5e28cd5dc9b3a8a9286547ea96db892f911c511bfc4c3f700604350b2b10ab0c0690d655e2c9950970d28391b6c61280b55dd4d59444adfb3a31981e172ec7b330b", 0xb6}], 0x1}, 0x0) socket$phonet(0x23, 0x2, 0x1) 1.881695264s ago: executing program 2 (id=227): utimes(&(0x7f0000000480)='./cgroup\x00', &(0x7f0000000500)={{0x0, 0xea60}}) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x220040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffc, 0xf9, 0x8000, 0x0, "7a58beca3900000000000000000000000200"}) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280), 0x800000, &(0x7f0000000440)=ANY=[@ANYBLOB='trandno=\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',cache=loose,\x00']) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000000)) syz_usb_connect$uac2(0x1, 0x92, &(0x7f0000001c00)=ANY=[@ANYBLOB="1201100300000010410e4942400001020301090280000301044003080b0002010b205509040000000101200009240109000e2000010b24160102060004000b001c24030201010301070600d709e56b2aefcab4fe5104017d7c92f4b7000001022000090401010101022000dc563ba398dbc7b40a0825010336094e0025e1b4e12cb4924f0009040201010102200009058209"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x7, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x480a}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x44f}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0xc07}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x81d}}, {0x5c, &(0x7f00000001c0)=@string={0x5c, 0x3, "84a8b46f3d92a2fe43ef1e32e4c425dcb49cfb6663091ecc982652c8a6847e42e6a67899087d274dd6847f86ccdc184b9431fe37bd97f4e44f83dc1cb72a8e391173db9adb94dffae7b118c812b961a4a4d27801f5c58be0621d"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc0c}}, {0x65, &(0x7f0000000300)=@string={0x65, 0x3, "100e2b86b2b1a3fee1e77ad0977b2806737a6d1d6254c98328d9957fd01b2fcbbe4a6ea77b03a729b6d88d7700648044d67738d3fa885519f93c08691b641bf01b82381c6f0a315bd102cb3104006be25cdcc5918eb0af5978edb1f0e6588808549666"}}]}) 1.604997083s ago: executing program 1 (id=228): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01"], 0x6c}}, 0x4000000) r2 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ee0ff540991100b038e5010203010902240001000000000904"], 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$pppl2tp(0x18, 0x1, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000080)=""/234, 0xea) lseek(r3, 0x3, 0x1) getdents64(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f00000018c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x74, r4, 0xbbf10b4e3b0032, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xfffd}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x40}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r5], 0xc4}}, 0x0) r6 = syz_usb_connect$midi(0x0, 0xa9, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x582, 0x80, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x97, 0x1, 0x1, 0xb, 0x40, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x4, 0x1, 0x3, 0x0, 0x65, [@midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x4, 0x3}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x5, 0x4}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0xa2, 0x5}, @ms_header={0x7, 0x24, 0x1, 0x4, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x0, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x9, 0x7}], [{{0x9, 0x5, 0x80, 0x0, 0x200, 0x6, 0x9, 0x7, {0x14, 0x25, 0x1, 0x10, "3e43116ad0768337d1285389e33d6423"}}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x0, 0x5, 0xc, {0x7, 0x25, 0x1, 0x3, "fccb2d"}}}, {{0x9, 0x5, 0xc, 0x4, 0x10, 0xd0, 0x3, 0xa9, {0xe, 0x25, 0x1, 0xa, "5d22ca8ac5a2101f24e4"}}}, {{0x9, 0x5, 0x9, 0xc, 0x400, 0x6, 0x40, 0x5, {0x11, 0x25, 0x1, 0xd, "942499aab8e16803b292418bf6"}}}]}}}}}]}}, &(0x7f00000017c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x40, 0x0, 0x1, 0x0, 0x18}, 0x2b, &(0x7f00000002c0)=ANY=[@ANYRES16=r2], 0x3, [{0xd3, &(0x7f0000001900)=@string={0xd3, 0x3, "da53d789e58d7c7d24f07886799771085db652789467d1dae78e06345f9a6e8bc8738b19cef9f1b63c2ee7c551452565c3a7d30dfd7147774a916263abbeca99301a9eb37316a8f481b5161ee54de10eadfd540e121ed54ac990d6607d859a76bf4fdfa3e7660322a2906e35c01348620fcc622e7a3941585883d37f8a1d33594fd03e39a8ffc94e70725edb4261d2b8e147ea1748466721124af52b5b83cee074809e2e12af1c5a8de5fb2cbfd55643c6e59b2fd9e3ce7c7db513712382be7b1a1f2051ff1486c7df0f0fe5b728e1a3bf"}}, {0x7c, &(0x7f00000001c0)=@string={0x7c, 0x3, "91b3797b7c5a83fc1f969c222bea8f41dce15d6c25ae62e4e0ac70a94a799b9adb89a9a18b3e43350cac7252a819d96d14a99ec134f4291aacc572c68a584ad4fa032ffafdea8f29699216513aba8ba5d2a1231189d50f1e1cb4af48492aa5402eda0cc67fd4dbf880d17772c05f0aff6da9f6474649cc62a688"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x1c01}}]}) r7 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r7, 0xc0884123, &(0x7f0000000000)) syz_usb_connect$uac2(0x4, 0xd5, &(0x7f0000000fc0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x17cc, 0x1011, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc3, 0x3, 0x1, 0x9, 0x80, 0x3, {0x8, 0xb, 0x1, 0x2, 0x1, 0xff, 0x20, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x5, 0x6, 0x21, 0x4}, [@extension_unit={0x7, 0x24, 0x9, 0x2, 0xf7a4, 0x7}, @feature_unit={0x11, 0x24, 0x6, 0x4, 0x4, [0x1, 0x9, 0x2, 0x74046ed953679766, 0x2, 0xf]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x5, 0x8a, 0x7, 0xbf}, @as_header={0x10, 0x24, 0x1, 0x5, 0x81, 0x2, 0x5, 0x2, 0x26, 0x50}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x400, 0x3ff, 0x5, "c4"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x3, 0x36, 0x7f, {0x8, 0x25, 0x1, 0x2, 0x3, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x7d, 0x3, 0x8, 0xf, "1e4684d2ff96aa5e"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x1, 0x3, 0x5, 0x7, "def553133a3782"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x7, 0x7, 0x7, {0x8, 0x25, 0x1, 0xc3, 0xc, 0x5, 0xfe08}}}}}}}}]}}, &(0x7f0000001680)={0xa, &(0x7f00000010c0)={0xa, 0x6, 0x250, 0x9, 0x4, 0x0, 0x20, 0x2}, 0x5, &(0x7f0000001100)={0x5, 0xf, 0x5}, 0xa, [{0x4, &(0x7f0000001140)=@lang_id={0x4, 0x3, 0xfad83943f178713d}}, {0x4c, &(0x7f0000001180)=@string={0x4c, 0x3, "709aeb8061cbc1b5ed8187d17894bc81bad484bd3bffe974785cb050a1bd2f8377995f3ee195eeae9bfac0ca5c4222ba37c1694d43dd664462c5fda1898d3377fdbd6c705f24ccf09ef8"}}, {0xde, &(0x7f0000001200)=@string={0xde, 0x3, "0a99676367072c3bb1bd234bb24e623c8222663233058b22cebe88aaf0c3b08f7298b51873bb45d1ae5a8e276468ea35893261b7a6fccacbb17d93891cad2a6e347f189ec6187f11e594a9af9d88a4398bee60741844bc8cde6c06b6dd9ecfa7af7bd0875b2ee3e92381595cd1bf1f76e8c4fee630741256274e635534fd90171c954cbe3dd6128a4d4995d95f732b8bf30ebbba1ab1e5f3ab44e0381255ef0b5dd42fd2448ee198566e7ab0534a76ee240f33a938f01aff6350f688b2e500bea0e58ad2d26aa5221600ced115a0ddc4e0be83ef9ee41c8f58a31234"}}, {0x79, &(0x7f0000001300)=@string={0x79, 0x3, "d309373f6351cb84a1699c346539830e6fa806bd932e4f3776573949a7bfa5fd0da4d33acd6b1bfd7d9f67df9402827b59a205ed6bc252cb561e98ab3997c8840244e6df498b68e73c67147785b0abd2c1480041b13663f2b4512c24da475f2523c0f6bc585e8ff89fe18701ed2913c38537d7856c6328"}}, {0xc3, &(0x7f0000001380)=@string={0xc3, 0x3, "2b971996da5839d148ff1bcbbf7f57284ed2e99bbafe11baa8f9a5b78f14273f8ae08925aff11d2cb54611ecd1ac7b3a61ad1ae9c35a8a8ce41deade53aa6b5bfe93ab1cf7cda4edf8a73906e57c6254ba08cc94088d3ad90a0c341893befe09d77ef3d86ece5cfaa254e62f1d66a863103de4737e6ee36315e5a67689f1d8cc3f7b27c3fa7d1516c682871e82ff0572d9d3dfeeab353868da3306e09523a709974864d22edc9c46bb9691a77b5dee65c40d071598f82435058e21097f0470e073"}}, {0x10, &(0x7f0000001480)=@string={0x10, 0x3, "5f41ed5437cb27066e3a69691a40"}}, {0xfc, &(0x7f00000014c0)=@string={0xfc, 0x3, "383a03e1fc3171baa86ae2942a96431e177bc5b7b1f2b5b10dbe5ce28f3156e0254e2ef1551943716b34ad2be99fdeb1a815e68ce3a1522868193cfc0d8b3e5c6bcdd9536a701ad8dd458151d272cd0079a80046b678902abf6abb8667981af780f88f805bc92964d0e299026221a30bf6027e870348f4ff381f997c6be6e8a98585a50d9b59012361b748658fe968bdf32fb671f090be294e66b7d654ffd00cf87c3492739ba6f4285a7abf3dacb9769f32ef0b63504bf7cb6e367eb497c7fcb92dccffbb115a61e530b41d7e79c74a7289755a4576f17f866d7305d8158c60bbf9e19e0310d46582adeca06acb8fda27a421d7501a11bd3731"}}, {0x4, &(0x7f00000015c0)=@lang_id={0x4, 0x3, 0x381b}}, {0x29, &(0x7f0000001600)=@string={0x29, 0x3, "e61940bcdb6d7d3096aa3db7da8b9ae829716e4ff11cf0fa9975560bcc01b6c9fec1fc23cbcd59"}}, {0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0x42c}}]}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000001740)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58) syz_usb_control_io$sierra_net(r6, &(0x7f0000000440)={0x14, &(0x7f0000000300)={0x0, 0x22, 0x98, {0x98, 0x0, "2990bc4fdb91b293e71774fc3653228ef352c9ee5dc6a2320a1c5aa721018317442869847c78ec94487dc3f7dc0d2327b135302fb6eec984e3dafb6edd7f8b87baf9ad305cd4145dc4ab3ed31bb49396be2c614d7e76430977b9660aac10ab4b2c0f6a5348eb179013f6e7c650a7ce183eebefb463f2734eb122f3e11ba1ef23bec60ec4acc3e36418397fbb510aaa7fed4f23b4a0c9"}}, &(0x7f00000003c0)={0x0, 0x3, 0x3d, @string={0x3d, 0x3, "2ca0b6e1ebab5938dae1a5408a39bdf094e3418770fff2a5d4dd685c58697175fa798f091cb84065a0c95de28b829b124db51bba751b7d536a11d4"}}}, &(0x7f00000009c0)={0x1c, &(0x7f0000000480)={0x40, 0x15, 0xba, "e1985e544fdb7b809ef171ceb52e31bd527f215babef25d8eaa06ed48a2ba914914287c495e16353dd7a13c0020a718ead363ffe625cbd8152dc81a34b53c3a77fc11cf1ca5d5dd65bf5a838669d4af54fccc4d0e957cb6b7dd50ad266d2617fb3fa657e972e07affe996fd168760e8f7a98da7cb10e8c222af77ea6de3dd29ed13f127a183732ddf465d8f278b4a6f1cc2420b17fa39514120b677ded6d51dbde43327b0a2010bb7e9b459167cd6b19c1539de42d26b2fab8b0"}, &(0x7f0000000540)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000980)}) syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0xc0, 0x2, "", [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x7, 0x1, 0x3, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x1, 0x4, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x8, 0x9, 0xa}}]}}}]}}]}}, &(0x7f0000000f00)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x310, 0x0, 0x0, 0x6, 0x10, 0x6}, 0x2d, &(0x7f0000000a40)={0x5, 0xf, 0x2d, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x1a, 0x2, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x4, 0x2, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "5a49c99679871253147e7f455c8a4edf"}]}, 0x9, [{0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x412}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x415}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x814}}, {0x40, &(0x7f0000000b40)=@string={0x40, 0x3, "eba77be48d960ce1ba6747e33bcce14a231159823fd82097966e8b34c10d476d718aec16d5b6b25ac57b5cf15cc95e7ef2c97ec3a32e043eac090b880c32"}}, {0xea, &(0x7f0000000b80)=@string={0xea, 0x3, "47e732b6115b70b17a979efd1b43b8a03590bfc45f5ccdce4242d3cf4c376f148628cb4cf1e6d903c6d1c158bc0002ea661d3afda6640dd7be8e87765b15fe904572d3cfa4819878e6f7b6d4a7eb1e8cce0e63f8d88b72d45181590b6a6f99dcca3907d44c0d4f17521c58a11be60ae30b97e3baeed2609aa80c0146edd157f0f61de088b9eedf5b185a49ffcd23411bb48ab6d1e3134a522718cbff0c82badc38b315f56ea344468225f7dc94d4da32573f52f9e1b0fd3320222f16ed31c579d7654875241d086cb31ea0845e2ff52a1483a94f48eaa60eac708df67b115841878e5668ec1c0c41"}}, {0xd0, &(0x7f0000000c80)=@string={0xd0, 0x3, "07f94d5c8e0542f6391e27bba2253cc83e26ec438c4447c94085c40cdfeca8da59b1bb9650505289094a7e1846c560d0c31e43dd748723429c3f9cf994d656137adc58a375b8d117ac1d15da8cc1689210f959f0a1eaff93005cc3c4012143e27242198976470adffbce9f8414814e01090f4ebcca106d21790ccb5fe835c539a8f1bda768b0d0555b4a870efd1d4afb7a43d816fd28a45f887c1950bf5889775473e0f93c4ba9c52f54199a0b7575c94c5aaed25a494403b87bbb240f32891b4cff0b9c235edd40a4456c7331c6"}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x820}}, {0xa2, &(0x7f0000000dc0)=@string={0xa2, 0x3, "e6a312ccc177eea470f7eb129e056c525c52c0e4fc08ecd65fd591f8f95ef4cb1765f50de4f857a8a9e5aac663f5c336e5a3bb13e509a913873eaae6dce4480e63d318e113a7ecf2c8570c3318941b2eb74f30ebfb2c9382d495492c5d310df0502db9e5271083e21da182b6951eb9b128735e07dc44c79e67f32e5928129692090f71a3eb3f5a5b8fbcfc1ea529ab9c0be4cff680c70c0f778900bb2d586650"}}, {0x7c, &(0x7f0000000e80)=@string={0x7c, 0x3, "9c92b9a944de7c8f6fcaef484f0d33b881fca9bd78e673b4a1b62e5f1158cf55d94afd64a9f550facf086c5f3ba7d736b49e75e5b852cd0cf02b5ea83b1150df1c61e8d928bd355221d0758ccc3c7e1a9cf9b429c944a3f7aaeb90bc9889ccd2e1c91f1a8fd8cac9d4c8f8ad8eaf1313af4845956714cb9a57f3"}}]}) 991.544735ms ago: executing program 0 (id=229): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)={0x34, r2, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xfa}]}, 0x34}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) 961.397892ms ago: executing program 0 (id=230): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000200)={0xf030000, 0x1, 0xfffffffe, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f909, 0x7fff, '\x00', @value64=0x2}}) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000040), 0x10) writev(r3, &(0x7f0000000780)=[{&(0x7f0000000200)="0e", 0x1}], 0x1) r4 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d00010000600009040080020300000009210604000122050009058103200009080709050203"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000019080)=@abs={0x1, 0x0, 0x4e20}, 0x6e) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f000001fac0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc", 0x40}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="88000000020601080000000000000000050000000900020073797a3000000000050004000000000012000300686173683a6e65742c706f72740000004c0007800500140000000000050015000500000008000940000000f805001500070000001800018014000240ff01000000000000000000000000000108001740000003ff08001740ffffffff59ae9f5bf78461d46d73a87a4584a0a9b9c09a66d0dfe09ab2324187fa635b96c560f54644b86ff2656bec01be373551d20844b9bdaa53b9533b04cb92a6"], 0x88}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500211dff000401a8001600a4000140200007", 0x3b}], 0x1}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfe33) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000280)={0x0, 0xf412}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000300)={0x0, 0x1, 0x1, 0x810, r9}, &(0x7f0000000340)=0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) ioctl$KVM_RUN(r10, 0xae80, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000380)={0x2c, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\b', @ANYBLOB="f98f671c05b283ef04fcd57fffa4e5bab03630a5fc6bd228ce15de11fc104ec66b1bf9315961e129d6966fbd21cae478040264a3b51e82c33f7fc38d3b265a82e077edcc777ca62aee478b1574b87818dded23aeafff5d17c4ffe97f70961b39ce1c2524327bb91d64ca46c9f7d341a31abb11ca369f581a2017a9d0eb4cac52c4b608086507fce669094c2b5e5dfeac6b09fa95233ac19790c6ea1dfef67b3036672c0b2f9957328bc3b62062a86a1334b7ae"], 0x0, 0x0, 0x0, 0x0}, 0x0) 781.258183ms ago: executing program 0 (id=231): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)={0x40, 0xf, 0xf8, "0c2d824cd48902d9ef6e7a0560d76e24f392be3a28fcefb4e6ee418e360e000000c4d7f78c004c47e17a35af91a1426ccf30a9dd02c3e9c80a4d9a257863ebf779dffca0eb5b3da153da8f054db4d02297f8e1eb6d70951b4252782400f458e77dc21d86e68366c8aa0a7a171bf1d08cb0196e881ae9ad4d37c05a37a57646702dd1fb2e6b5387127b6642801a80000000710ab0d000000000e82dc8bd735d5f9302ab40a12d3b2680ab07a90ed60d60d7e9e3398630242810d6f56834514624973b98052c99c76d6ef3e18e2d522e1b1d0352206ec1b48e39a7604122a23c134c1fd9ba56270fd3847bf81a3f82339ca91ececfc5ea622e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0x81, 0x0, 0x0) 580.82363ms ago: executing program 3 (id=232): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000980)={0x14, &(0x7f00000008c0)={0x0, 0x7, 0x79, {0x79, 0xe, "22e9a678a65e3f4e8416b97b3cb54484107d2d324488dda9f186516a99a47529852ea6f866b8cb86108d56d494e9b4232b94fffbbefd076d5e34659d831d5bcffe0d89f73e173d78ee9b426d9a9387b4da88d301a8e340cdabba330b6b002cf8ffafda09b45d1ec5bf94cc7794743266a179aafa624f1c"}}, &(0x7f0000000940)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000b00)={0x1c, &(0x7f00000009c0)={0x20, 0x0, 0xa4, "01347fc7f4ffa6b5c6b91438afe695131e5ef7d24fbbf609d6f115b5a3b43bc06ae229009e8cb789b7715130585ce6094b33e217539e7ab3fece3c79339d743380ca4009e8a280c1532bd498e61cdcb92d4aec8649b984e839ff959c9e9a6a3f4162d374a1649da7962e038f608dd24ce689456661da32ee0ea2fab98ce93b98f5e432c9dd8a930d30d654b115e3279a1ddb874348daf8cfa3360154841047c5290bb244"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x4}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b04, 0x0) 194.640893ms ago: executing program 1 (id=233): mkdir(&(0x7f0000000540)='./file0\x00', 0x108) r0 = fanotify_init(0x1a, 0x800) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) fanotify_mark(r0, 0x441, 0x4800001a, r1, 0x0) r2 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xa0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}]}], {0x14}}, 0xb0}}, 0x4008800) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0xa0401, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) fallocate(r2, 0x0, 0x1, 0x1001f0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) 0s ago: executing program 1 (id=234): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x11, &(0x7f0000000000)=[{&(0x7f0000000780)={0x114, 0x36, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x7}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x4000080}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getpeername(r2, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0}, 0x20000000) r5 = socket$kcm(0x23, 0x5, 0x0) listen(r5, 0x800) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r7, &(0x7f0000000380)={0x23, 0x0, 0x58}, 0x10) fcntl$dupfd(0xffffffffffffffff, 0x0, r7) accept4(r5, 0x0, 0x0, 0x80000) r8 = dup(r3) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) kernel console output (not intermixed with test programs): usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 98.947064][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 98.947084][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.963645][ T5835] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 99.030772][ T10] usb 4-1: config 0 descriptor?? [ 99.031555][ T6036] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 99.092198][ T5885] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.092252][ T5885] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 99.092275][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.097847][ T5885] usb 1-1: config 0 descriptor?? [ 99.121488][ T5885] pwc: Askey VC010 type 2 USB webcam detected. [ 99.264618][ T5835] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 99.264648][ T5835] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 99.264727][ T5835] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 99.264753][ T5835] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 99.264793][ T5835] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 99.264813][ T5835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.350495][ T5835] usb 2-1: config 0 descriptor?? [ 99.354343][ T6042] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 99.531539][ T10] plantronics 0003:047F:FFFF.0003: reserved main item tag 0xd [ 99.594587][ T5885] pwc: recv_control_msg error -32 req 02 val 2b00 [ 99.795246][ T6046] input: syz1 as /devices/virtual/input/input13 [ 99.800456][ T5885] pwc: recv_control_msg error -32 req 02 val 2c00 [ 99.811889][ T10] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 99.834948][ T5885] pwc: recv_control_msg error -32 req 04 val 1000 [ 99.841225][ T5885] pwc: recv_control_msg error -32 req 04 val 1300 [ 99.841867][ T5885] pwc: recv_control_msg error -32 req 04 val 1400 [ 99.844233][ T5885] pwc: recv_control_msg error -32 req 02 val 2000 [ 99.845049][ T5885] pwc: recv_control_msg error -32 req 02 val 2100 [ 99.873349][ T5885] pwc: recv_control_msg error -32 req 04 val 1500 [ 99.876383][ T5885] pwc: recv_control_msg error -32 req 02 val 2500 [ 99.877319][ T5885] pwc: recv_control_msg error -32 req 02 val 2400 [ 99.932701][ T6048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.947684][ T5835] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xd [ 99.958808][ T6048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.014071][ T5835] plantronics 0003:047F:FFFF.0004: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 100.045214][ T6048] FAULT_INJECTION: forcing a failure. [ 100.045214][ T6048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.045236][ T6048] CPU: 1 UID: 0 PID: 6048 Comm: syz.3.34 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 100.045248][ T6048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 100.045254][ T6048] Call Trace: [ 100.045259][ T6048] [ 100.045266][ T6048] dump_stack_lvl+0xe8/0x150 [ 100.045283][ T6048] should_fail_ex+0x46b/0x600 [ 100.045301][ T6048] _copy_to_user+0x31/0xb0 [ 100.045313][ T6048] simple_read_from_buffer+0xe1/0x170 [ 100.045328][ T6048] proc_fail_nth_read+0x1be/0x230 [ 100.045344][ T6048] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 100.045358][ T6048] ? rw_verify_area+0x2ac/0x4e0 [ 100.045372][ T6048] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 100.045385][ T6048] vfs_read+0x212/0xa80 [ 100.045403][ T6048] ? __pfx_vfs_read+0x10/0x10 [ 100.045418][ T6048] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 100.045433][ T6048] ? lockdep_hardirqs_on+0x7a/0x110 [ 100.045446][ T6048] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 100.045459][ T6048] ? mutex_lock_nested+0x152/0x1d0 [ 100.045469][ T6048] ? fdget_pos+0x252/0x320 [ 100.045486][ T6048] ksys_read+0x156/0x270 [ 100.045502][ T6048] ? __pfx_ksys_read+0x10/0x10 [ 100.045526][ T6048] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.045545][ T6048] do_syscall_64+0x15f/0xf80 [ 100.045565][ T6048] ? trace_irq_disable+0x3b/0x140 [ 100.045577][ T6048] ? clear_bhb_loop+0x40/0x90 [ 100.045591][ T6048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.045608][ T6048] RIP: 0033:0x7f9bdeccd60e [ 100.045624][ T6048] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 100.045638][ T6048] RSP: 002b:00007f9bdcf44fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 100.045657][ T6048] RAX: ffffffffffffffda RBX: 00007f9bdcf456c0 RCX: 00007f9bdeccd60e [ 100.045669][ T6048] RDX: 000000000000000f RSI: 00007f9bdcf450a0 RDI: 0000000000000006 [ 100.045681][ T6048] RBP: 00007f9bdcf45090 R08: 0000000000000000 R09: 0000000000000000 [ 100.045691][ T6048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.045701][ T6048] R13: 00007f9bdef86128 R14: 00007f9bdef86090 R15: 00007ffe55d0f248 [ 100.045731][ T6048] [ 100.079339][ T5885] pwc: recv_control_msg error -32 req 02 val 2900 [ 100.088721][ T5885] pwc: recv_control_msg error -32 req 02 val 2800 [ 100.270465][ T6042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.351936][ T5885] pwc: recv_control_msg error -71 req 04 val 1200 [ 100.382486][ T32] usb 4-1: USB disconnect, device number 7 [ 100.511020][ T6042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.515063][ T5885] pwc: Registered as video103. [ 100.560564][ T5885] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input15 [ 100.604302][ T5835] usb 2-1: USB disconnect, device number 6 [ 100.856725][ T5885] usb 1-1: USB disconnect, device number 4 [ 101.178334][ T32] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 101.328163][ T32] usb 4-1: Using ep0 maxpacket: 32 [ 101.342265][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.342297][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.342333][ T32] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 101.342355][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.367938][ T32] usb 4-1: config 0 descriptor?? [ 101.394468][ T32] hub 4-1:0.0: USB hub found [ 101.456822][ T5885] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 101.616502][ T5885] usb 1-1: Using ep0 maxpacket: 32 [ 101.625249][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.625269][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.625328][ T5885] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 101.625342][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.655814][ T32] hub 4-1:0.0: 1 port detected [ 101.665741][ T5835] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 101.733533][ T5885] usb 1-1: config 0 descriptor?? [ 101.807569][ T5885] hub 1-1:0.0: USB hub found [ 101.845787][ T5835] usb 2-1: Using ep0 maxpacket: 16 [ 101.847975][ T5835] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 101.848000][ T5835] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 101.848021][ T5835] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 101.848040][ T5835] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 101.848059][ T5835] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 101.848078][ T5835] usb 2-1: config 0 has no interface number 0 [ 101.848177][ T5835] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 101.848204][ T5835] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 101.848226][ T5835] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 101.848260][ T5835] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 101.848286][ T5835] usb 2-1: config 0 interface 125 has no altsetting 0 [ 101.848303][ T5835] usb 2-1: config 0 interface 125 has no altsetting 2 [ 101.854671][ T5835] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 101.854697][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.854716][ T5835] usb 2-1: Product: syz [ 101.854729][ T5835] usb 2-1: Manufacturer: syz [ 101.854742][ T5835] usb 2-1: SerialNumber: syz [ 102.015116][ T5885] hub 1-1:0.0: 1 port detected [ 102.015491][ T5835] usb 2-1: config 0 descriptor?? [ 102.051615][ T5835] usb 2-1: selecting invalid altsetting 2 [ 102.259203][ T6068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.261915][ T6068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.271451][ T5226] hub 4-1:0.0: hub_ext_port_status failed (err = 2) [ 102.272997][ T6068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.307814][ T6068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.316066][ T6068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.319512][ T6068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.525377][ C0] usb 2-1: async_complete: urb error -71 [ 102.525628][ C0] usb 2-1: async_complete: urb error -71 [ 102.525711][ C0] usb 2-1: async_complete: urb error -71 [ 102.525795][ C0] usb 2-1: async_complete: urb error -71 [ 102.552301][ T5835] get_1284_register: usb error -71 [ 102.576892][ T5835] usb 2-1: USB disconnect, device number 7 [ 102.672511][ T5885] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 102.674854][ T5885] usb 1-1: USB disconnect, device number 5 [ 102.766589][ T6080] input: syz1 as /devices/virtual/input/input16 [ 102.783236][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 102.936001][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 102.940132][ T9] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 102.940158][ T9] usb 3-1: config 0 has no interface number 0 [ 102.943643][ T9] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 102.943671][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.943690][ T9] usb 3-1: Product: syz [ 102.943704][ T9] usb 3-1: Manufacturer: syz [ 102.943714][ T9] usb 3-1: SerialNumber: syz [ 102.955289][ T9] usb 3-1: config 0 descriptor?? [ 103.007660][ T9] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 103.231369][ T6076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.233400][ T6076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.316083][ T5885] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 103.465735][ T5885] usb 2-1: Using ep0 maxpacket: 32 [ 103.469500][ T5885] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 103.469532][ T5885] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 103.469554][ T5885] usb 2-1: config 0 interface 0 has no altsetting 0 [ 103.469585][ T5885] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 103.469606][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.529960][ T5885] usb 2-1: config 0 descriptor?? [ 103.685952][ T37] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 103.868951][ T37] usb 1-1: unable to get BOS descriptor or descriptor too short [ 103.870514][ T37] usb 1-1: config 86 has an invalid interface number: 76 but max is 0 [ 103.870539][ T37] usb 1-1: config 86 has no interface number 0 [ 103.870569][ T37] usb 1-1: config 86 interface 76 has no altsetting 0 [ 103.933568][ T37] usb 1-1: New USB device found, idVendor=05ac, idProduct=024c, bcdDevice=44.b5 [ 103.933598][ T37] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.933894][ T5835] usb 4-1: USB disconnect, device number 8 [ 103.934145][ T37] usb 1-1: Product: syz [ 103.934161][ T37] usb 1-1: Manufacturer: syz [ 103.934174][ T37] usb 1-1: SerialNumber: syz [ 104.010616][ T6094] FAULT_INJECTION: forcing a failure. [ 104.010616][ T6094] name failslab, interval 1, probability 0, space 0, times 0 [ 104.010708][ T6094] CPU: 1 UID: 0 PID: 6094 Comm: syz.3.52 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 104.010725][ T6094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 104.010733][ T6094] Call Trace: [ 104.010739][ T6094] [ 104.010746][ T6094] dump_stack_lvl+0xe8/0x150 [ 104.010768][ T6094] should_fail_ex+0x46b/0x600 [ 104.010792][ T6094] ? __pfx_ovl_alloc_inode+0x10/0x10 [ 104.010817][ T6094] should_failslab+0xa8/0x100 [ 104.010840][ T6094] ? __pfx_ovl_alloc_inode+0x10/0x10 [ 104.010859][ T6094] kmem_cache_alloc_lru_noprof+0x8b/0x680 [ 104.010878][ T6094] ? ovl_alloc_inode+0x2c/0xa0 [ 104.010901][ T6094] ? __pfx_ovl_alloc_inode+0x10/0x10 [ 104.010920][ T6094] ovl_alloc_inode+0x2c/0xa0 [ 104.010942][ T6094] ? __pfx_ovl_alloc_inode+0x10/0x10 [ 104.010961][ T6094] alloc_inode+0x6a/0x1b0 [ 104.010976][ T6094] ? __pfx_ovl_inode_test+0x10/0x10 [ 104.010989][ T6094] ? __pfx_ovl_inode_set+0x10/0x10 [ 104.011002][ T6094] iget5_locked+0x4a/0xa0 [ 104.011023][ T6094] ovl_get_trap_inode+0x89/0x1c0 [ 104.011038][ T6094] ovl_fill_super+0x3124/0x5e20 [ 104.011087][ T6094] ? __pfx_ovl_fill_super+0x10/0x10 [ 104.011107][ T6094] ? __lock_acquire+0x6b5/0x2cf0 [ 104.011132][ T6094] ? __lock_acquire+0x6b5/0x2cf0 [ 104.011157][ T6094] ? __lock_acquire+0x6b5/0x2cf0 [ 104.011176][ T6094] ? do_raw_spin_lock+0x12b/0x2f0 [ 104.011201][ T6094] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 104.011222][ T6094] ? lockdep_hardirqs_on+0x7a/0x110 [ 104.011241][ T6094] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 104.011261][ T6094] ? rt_mutex_slowunlock+0x1cb/0x300 [ 104.011280][ T6094] ? __raw_spin_lock_init+0x45/0x100 [ 104.011311][ T6094] ? sget_fc+0x962/0xa40 [ 104.011332][ T6094] ? __pfx_set_anon_super_fc+0x10/0x10 [ 104.011350][ T6094] ? __pfx_ovl_fill_super+0x10/0x10 [ 104.011370][ T6094] get_tree_nodev+0xbb/0x150 [ 104.011400][ T6094] vfs_get_tree+0x92/0x2a0 [ 104.011422][ T6094] do_new_mount+0x341/0xd30 [ 104.011437][ T6094] ? apparmor_capable+0x126/0x170 [ 104.011457][ T6094] ? __pfx_do_new_mount+0x10/0x10 [ 104.011473][ T6094] ? ns_capable+0x89/0xe0 [ 104.011489][ T6094] ? path_mount+0x690/0x10e0 [ 104.011504][ T6094] ? user_path_at+0xd4/0x160 [ 104.011526][ T6094] ? user_path_at+0xd4/0x160 [ 104.011545][ T6094] __se_sys_mount+0x31d/0x420 [ 104.011567][ T6094] ? __pfx___se_sys_mount+0x10/0x10 [ 104.011589][ T6094] ? __x64_sys_mount+0x20/0xc0 [ 104.011604][ T6094] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.011619][ T6094] do_syscall_64+0x15f/0xf80 [ 104.011639][ T6094] ? trace_irq_disable+0x3b/0x140 [ 104.011656][ T6094] ? clear_bhb_loop+0x40/0x90 [ 104.011672][ T6094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.011686][ T6094] RIP: 0033:0x7f9bded0cdd9 [ 104.011701][ T6094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.011712][ T6094] RSP: 002b:00007f9bdcf45028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 104.011727][ T6094] RAX: ffffffffffffffda RBX: 00007f9bdef86090 RCX: 00007f9bded0cdd9 [ 104.011737][ T6094] RDX: 0000200000000040 RSI: 0000200000000100 RDI: 0000000000000000 [ 104.011746][ T6094] RBP: 00007f9bdcf45090 R08: 0000200000000200 R09: 0000000000000000 [ 104.011756][ T6094] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002 [ 104.011764][ T6094] R13: 00007f9bdef86128 R14: 00007f9bdef86090 R15: 00007ffe55d0f248 [ 104.011788][ T6094] [ 104.024775][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 104.245513][ T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 104.365352][ T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 104.436353][ T9] usb 3-1: USB disconnect, device number 5 [ 104.542576][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 104.735014][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 104.743220][ T9] quatech2 3-1:0.51: device disconnected [ 104.999333][ T37] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:86.76/input/input17 [ 105.224391][ T5180] bcm5974 1-1:86.76: could not read from device [ 105.262889][ T37] usb 1-1: USB disconnect, device number 6 [ 105.515746][ T9] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 105.741651][ T9] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 105.741679][ T9] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 105.741697][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 105.741762][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 53796, setting to 64 [ 105.769748][ T9] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 105.769778][ T9] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 105.769797][ T9] usb 4-1: Product: syz [ 105.769810][ T9] usb 4-1: Manufacturer: syz [ 105.784213][ T6119] input: syz1 as /devices/virtual/input/input18 [ 106.002496][ T5885] usbhid 2-1:0.0: can't add hid device: -71 [ 106.002617][ T5885] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 106.030848][ T6107] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 106.093046][ T5885] usb 2-1: USB disconnect, device number 8 [ 106.113242][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 106.113261][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 106.119089][ T5835] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 106.184377][ T9] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 106.184400][ T9] cdc_wdm 4-1:1.0: Unknown control protocol [ 106.242055][ T9] usb 4-1: USB disconnect, device number 9 [ 106.261115][ T5835] usb 3-1: device descriptor read/64, error -71 [ 106.513926][ T5835] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 106.645831][ T5835] usb 3-1: device descriptor read/64, error -71 [ 106.705811][ T822] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 106.756267][ T5835] usb usb3-port1: attempt power cycle [ 106.864127][ T822] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.864180][ T822] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 106.864203][ T822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.875015][ T822] usb 1-1: config 0 descriptor?? [ 106.876982][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 106.919138][ T822] pwc: Askey VC010 type 2 USB webcam detected. [ 107.066596][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 107.068781][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.068823][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.068888][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 107.068900][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.076937][ T10] usb 2-1: config 0 descriptor?? [ 107.096803][ T5835] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 107.108895][ T5885] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 107.119321][ T5835] usb 3-1: device descriptor read/8, error -71 [ 107.160907][ T10] hub 2-1:0.0: USB hub found [ 107.295717][ T5885] usb 4-1: Using ep0 maxpacket: 32 [ 107.299591][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.299623][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.299660][ T5885] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 107.299683][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.321942][ T822] pwc: recv_control_msg error -32 req 02 val 2b00 [ 107.324083][ T822] pwc: recv_control_msg error -32 req 02 val 2700 [ 107.325581][ T822] pwc: recv_control_msg error -32 req 02 val 2c00 [ 107.333817][ T822] pwc: recv_control_msg error -32 req 04 val 1000 [ 107.335872][ T822] pwc: recv_control_msg error -32 req 04 val 1300 [ 107.337637][ T822] pwc: recv_control_msg error -32 req 04 val 1400 [ 107.339763][ T822] pwc: recv_control_msg error -32 req 02 val 2000 [ 107.341114][ T822] pwc: recv_control_msg error -32 req 02 val 2100 [ 107.342494][ T822] pwc: recv_control_msg error -32 req 04 val 1500 [ 107.359771][ T822] pwc: recv_control_msg error -32 req 02 val 2500 [ 107.361699][ T822] pwc: recv_control_msg error -32 req 02 val 2400 [ 107.363380][ T5885] usb 4-1: config 0 descriptor?? [ 107.375460][ T5835] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 107.392570][ T10] hub 2-1:0.0: 1 port detected [ 107.404601][ T5835] usb 3-1: device descriptor read/8, error -71 [ 107.455007][ T5885] hub 4-1:0.0: USB hub found [ 107.506201][ T5835] usb usb3-port1: unable to enumerate USB device [ 107.565757][ T822] pwc: recv_control_msg error -32 req 02 val 2900 [ 107.567078][ T822] pwc: recv_control_msg error -32 req 02 val 2800 [ 107.605730][ T5885] hub 4-1:0.0: 1 port detected [ 107.775055][ T822] pwc: recv_control_msg error -71 req 04 val 1200 [ 107.812348][ T822] pwc: Registered as video103. [ 107.836382][ T822] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input19 [ 107.860203][ T822] usb 1-1: USB disconnect, device number 7 [ 108.011196][ T5835] usb 2-1: USB disconnect, device number 9 [ 108.011267][ T10] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 108.223076][ T5885] hub 4-1:0.0: hub_ext_port_status failed (err = 3) [ 108.606760][ T5835] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 108.770844][ T5835] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 108.791976][ T5835] usb 1-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=ca.fb [ 108.792005][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.792023][ T5835] usb 1-1: Product: syz [ 108.792036][ T5835] usb 1-1: Manufacturer: syz [ 108.792048][ T5835] usb 1-1: SerialNumber: syz [ 108.845279][ T6158] FAULT_INJECTION: forcing a failure. [ 108.845279][ T6158] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.845311][ T6158] CPU: 1 UID: 0 PID: 6158 Comm: syz.1.64 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 108.845330][ T6158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 108.845340][ T6158] Call Trace: [ 108.845347][ T6158] [ 108.845354][ T6158] dump_stack_lvl+0xe8/0x150 [ 108.845382][ T6158] should_fail_ex+0x46b/0x600 [ 108.845413][ T6158] _copy_from_user+0x2d/0xb0 [ 108.845432][ T6158] input_event_from_user+0xb1/0x290 [ 108.845458][ T6158] ? __pfx_input_event_from_user+0x10/0x10 [ 108.845488][ T6158] ? rt_spin_unlock+0x160/0x200 [ 108.845511][ T6158] evdev_write+0x2ca/0x4c0 [ 108.845534][ T6158] ? __lock_acquire+0x6b5/0x2cf0 [ 108.845561][ T6158] ? __pfx_evdev_write+0x10/0x10 [ 108.845590][ T6158] ? rw_verify_area+0x25b/0x4e0 [ 108.845613][ T6158] ? __pfx_evdev_write+0x10/0x10 [ 108.845636][ T6158] vfs_write+0x2a3/0xba0 [ 108.845676][ T6158] ? __pfx_vfs_write+0x10/0x10 [ 108.845702][ T6158] ? __fget_files+0x2a/0x420 [ 108.845727][ T6158] ? __fget_files+0x2a/0x420 [ 108.845748][ T6158] ? __fget_files+0x3a6/0x420 [ 108.845768][ T6158] ? __fget_files+0x2a/0x420 [ 108.845796][ T6158] ksys_write+0x156/0x270 [ 108.845823][ T6158] ? __pfx_ksys_write+0x10/0x10 [ 108.845855][ T6158] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.845875][ T6158] do_syscall_64+0x15f/0xf80 [ 108.845897][ T6158] ? trace_irq_disable+0x3b/0x140 [ 108.845918][ T6158] ? clear_bhb_loop+0x40/0x90 [ 108.845939][ T6158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.845957][ T6158] RIP: 0033:0x7fbfea57cdd9 [ 108.845975][ T6158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.845989][ T6158] RSP: 002b:00007fbfe87d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 108.846008][ T6158] RAX: ffffffffffffffda RBX: 00007fbfea7f5fa0 RCX: 00007fbfea57cdd9 [ 108.846021][ T6158] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 108.846032][ T6158] RBP: 00007fbfe87d6090 R08: 0000000000000000 R09: 0000000000000000 [ 108.846042][ T6158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.846050][ T6158] R13: 00007fbfea7f6038 R14: 00007fbfea7f5fa0 R15: 00007ffe60ebc768 [ 108.846072][ T6158] [ 109.121287][ T6161] input: syz1 as /devices/virtual/input/input20 [ 109.140226][ T5835] usb 1-1: USB disconnect, device number 8 [ 109.373433][ T6168] netlink: 220 bytes leftover after parsing attributes in process `syz.1.68'. [ 109.373905][ T6168] unsupported nla_type 224 [ 109.390355][ T6168] netlink: 220 bytes leftover after parsing attributes in process `syz.1.68'. [ 109.509623][ T6173] loop8: detected capacity change from 0 to 7 [ 109.563128][ T6173] Dev loop8: unable to read RDB block 7 [ 109.563170][ T6173] loop8: unable to read partition table [ 109.563350][ T6173] loop8: partition table beyond EOD, truncated [ 109.563388][ T6173] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 109.725760][ T5835] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 109.892596][ T5835] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.892653][ T5835] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 109.892677][ T5835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.926426][ T5835] usb 2-1: config 0 descriptor?? [ 109.946197][ T5835] pwc: Askey VC010 type 2 USB webcam detected. [ 109.969933][ T37] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 110.007789][ T5226] usb 4-1: USB disconnect, device number 10 [ 110.115707][ T37] usb 3-1: Using ep0 maxpacket: 32 [ 110.146517][ T37] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.146555][ T37] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.146592][ T37] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 110.146614][ T37] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.161916][ T37] usb 3-1: config 0 descriptor?? [ 110.208615][ T37] hub 3-1:0.0: USB hub found [ 110.347242][ T5835] pwc: recv_control_msg error -32 req 02 val 2b00 [ 110.380643][ T37] hub 3-1:0.0: 1 port detected [ 110.549156][ T5835] pwc: recv_control_msg error -32 req 02 val 2c00 [ 110.555464][ T5835] pwc: recv_control_msg error -32 req 04 val 1000 [ 110.569266][ T5835] pwc: recv_control_msg error -32 req 04 val 1300 [ 110.570053][ T5835] pwc: recv_control_msg error -32 req 04 val 1400 [ 110.570809][ T5835] pwc: recv_control_msg error -32 req 02 val 2000 [ 110.571550][ T5835] pwc: recv_control_msg error -32 req 02 val 2100 [ 110.572322][ T5835] pwc: recv_control_msg error -32 req 04 val 1500 [ 110.572996][ T5835] pwc: recv_control_msg error -32 req 02 val 2500 [ 110.573770][ T5835] pwc: recv_control_msg error -32 req 02 val 2400 [ 110.775569][ T5835] pwc: recv_control_msg error -32 req 02 val 2900 [ 110.783672][ T5835] pwc: recv_control_msg error -32 req 02 val 2800 [ 110.994987][ T5835] pwc: recv_control_msg error -71 req 04 val 1200 [ 110.996544][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 110.996855][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 110.997152][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 110.998016][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 110.998110][ T37] hub 3-1:0.0: hub_ext_port_status failed (err = -32) [ 111.018619][ T37] usb 3-1: USB disconnect, device number 10 [ 111.062129][ T5835] pwc: Registered as video103. [ 111.080785][ T5835] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input21 [ 111.104293][ T5835] usb 2-1: USB disconnect, device number 10 [ 111.304124][ T6192] input: syz1 as /devices/virtual/input/input22 [ 111.856222][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 111.925789][ T5226] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 111.935836][ T5885] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 112.031687][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.031736][ T9] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 112.031758][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.037760][ T9] usb 2-1: config 0 descriptor?? [ 112.072542][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 112.075990][ T5226] usb 4-1: Using ep0 maxpacket: 16 [ 112.086150][ T5885] usb 3-1: Using ep0 maxpacket: 32 [ 112.092697][ T5226] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 112.092722][ T5226] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 112.093117][ T5226] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 112.093137][ T5226] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 112.093155][ T5226] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 112.093174][ T5226] usb 4-1: config 0 has no interface number 0 [ 112.093216][ T5226] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 112.093806][ T5226] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 112.093829][ T5226] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 112.093864][ T5226] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 112.094251][ T5226] usb 4-1: config 0 interface 125 has no altsetting 0 [ 112.094270][ T5226] usb 4-1: config 0 interface 125 has no altsetting 2 [ 112.104452][ T5226] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 112.104480][ T5226] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.104499][ T5226] usb 4-1: Product: syz [ 112.104718][ T5226] usb 4-1: Manufacturer: syz [ 112.104734][ T5226] usb 4-1: SerialNumber: syz [ 112.117085][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.117116][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.117152][ T5885] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 112.117174][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.117955][ T5226] usb 4-1: config 0 descriptor?? [ 112.132253][ T5226] usb 4-1: selecting invalid altsetting 2 [ 112.144758][ T5885] usb 3-1: config 0 descriptor?? [ 112.205335][ T5885] hub 3-1:0.0: USB hub found [ 112.365155][ T5885] hub 3-1:0.0: 1 port detected [ 112.449557][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 112.450442][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 112.503763][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 112.504951][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 112.519554][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 112.721855][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 112.722656][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 112.723839][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 112.753297][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 112.754009][ T9] pwc: recv_control_msg error -32 req 02 val 2400 [ 112.754822][ T9] pwc: recv_control_msg error -32 req 02 val 2600 [ 112.792609][ T6197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.813125][ T6197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.814361][ T9] pwc: recv_control_msg error -32 req 02 val 2900 [ 112.815367][ T9] pwc: recv_control_msg error -32 req 02 val 2800 [ 112.984925][ T5885] hub 3-1:0.0: hub_ext_port_status failed (err = 3) [ 113.219574][ T5226] get_1284_register timeout [ 113.237435][ C1] usb 4-1: async_complete: urb error -104 [ 113.250574][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 113.263359][ T9] pwc: Registered as video103. [ 113.294766][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input23 [ 113.294877][ T6209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.349812][ T6209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.366137][ T9] usb 2-1: USB disconnect, device number 11 [ 113.638957][ T5885] usb 4-1: USB disconnect, device number 11 [ 113.717289][ T5835] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 113.868748][ T5835] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 113.868780][ T5835] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 113.868803][ T5835] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 113.868817][ T5835] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 113.868840][ T5835] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 113.868852][ T5835] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.871719][ T5835] usb 1-1: config 0 descriptor?? [ 113.872552][ T6214] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 114.194130][ T6220] input: syz1 as /devices/virtual/input/input24 [ 114.291605][ T5835] plantronics 0003:047F:FFFF.0005: reserved main item tag 0xd [ 114.327848][ T5835] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 114.558912][ T6214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.559439][ T6214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.583422][ T9] usb 1-1: USB disconnect, device number 9 [ 114.602135][ T6225] Bluetooth: hci4: Frame reassembly failed (-84) [ 114.670618][ T1436] Bluetooth: hci4: Frame reassembly failed (-84) [ 114.680076][ T1436] Bluetooth: hci4: Frame reassembly failed (-84) [ 114.795904][ T822] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 114.867232][ T10] usb 3-1: USB disconnect, device number 11 [ 114.891774][ T6229] process 'syz.2.89' launched './file1' with NULL argv: empty string added [ 114.908597][ T6229] ======================================================= [ 114.908597][ T6229] WARNING: The mand mount option has been deprecated and [ 114.908597][ T6229] and is ignored by this kernel. Remove the mand [ 114.908597][ T6229] option from the mount to silence this warning. [ 114.908597][ T6229] ======================================================= [ 114.949829][ T822] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.949880][ T822] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 114.949902][ T822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.968075][ T822] usb 4-1: config 0 descriptor?? [ 114.980758][ T822] pwc: Askey VC010 type 2 USB webcam detected. [ 115.315873][ T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 115.382728][ T822] pwc: recv_control_msg error -32 req 02 val 2b00 [ 115.485830][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 115.501131][ T10] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 115.501155][ T10] usb 3-1: config 0 has no interface number 0 [ 115.503530][ T10] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 115.503546][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.503590][ T10] usb 3-1: Product: syz [ 115.503598][ T10] usb 3-1: Manufacturer: syz [ 115.503605][ T10] usb 3-1: SerialNumber: syz [ 115.522648][ T10] usb 3-1: config 0 descriptor?? [ 115.536186][ T10] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 115.565893][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 115.583916][ T822] pwc: recv_control_msg error -32 req 02 val 2c00 [ 115.593813][ T822] pwc: recv_control_msg error -32 req 04 val 1000 [ 115.594399][ T822] pwc: recv_control_msg error -32 req 04 val 1300 [ 115.604329][ T822] pwc: recv_control_msg error -32 req 04 val 1400 [ 115.606733][ T822] pwc: recv_control_msg error -32 req 02 val 2000 [ 115.608345][ T822] pwc: recv_control_msg error -32 req 02 val 2100 [ 115.609627][ T822] pwc: recv_control_msg error -32 req 04 val 1500 [ 115.610684][ T822] pwc: recv_control_msg error -32 req 02 val 2500 [ 115.611675][ T822] pwc: recv_control_msg error -32 req 02 val 2400 [ 115.725839][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 115.733754][ T9] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 115.736225][ T9] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 115.736386][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.736450][ T9] usb 1-1: Product: syz [ 115.736464][ T9] usb 1-1: Manufacturer: syz [ 115.736477][ T9] usb 1-1: SerialNumber: syz [ 115.806560][ T6234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.807069][ T6234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.814336][ T822] pwc: recv_control_msg error -32 req 02 val 2900 [ 115.817941][ T822] pwc: recv_control_msg error -32 req 02 val 2800 [ 115.830397][ T9] ch9200 1-1:2.0: probe with driver ch9200 failed with error -22 [ 116.028680][ T822] pwc: recv_control_msg error -71 req 04 val 1200 [ 116.029831][ T37] usb 1-1: USB disconnect, device number 10 [ 116.100664][ T822] pwc: Registered as video103. [ 116.134493][ T822] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input26 [ 116.167371][ T6247] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.90'. [ 116.214495][ T822] usb 4-1: USB disconnect, device number 12 [ 116.323964][ T10] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 116.441146][ T6249] loop5: detected capacity change from 0 to 7 [ 116.448115][ T10] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 116.459023][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 116.479130][ T6249] loop5: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 116.479171][ T6249] loop5: partition table partially beyond EOD, truncated [ 116.509966][ T6249] loop5: p1 size 650043498 extends beyond EOD, truncated [ 116.520140][ T10] usb 3-1: USB disconnect, device number 12 [ 116.560247][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 116.578885][ T5144] Bluetooth: hci4: command 0x1003 tx timeout [ 116.580220][ T5840] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 116.666475][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 116.667226][ T10] quatech2 3-1:0.51: device disconnected [ 116.690588][ T6249] loop5: p2 start 191791756 is beyond EOD, truncated [ 116.982614][ T5836] udevd[5836]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 117.064020][ T6259] input: syz1 as /devices/virtual/input/input27 [ 117.215832][ T37] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 117.366231][ T37] usb 4-1: Using ep0 maxpacket: 32 [ 117.368358][ T37] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.368387][ T37] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.368425][ T37] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 117.368447][ T37] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.374908][ T37] usb 4-1: config 0 descriptor?? [ 117.439379][ T37] hub 4-1:0.0: USB hub found [ 117.619138][ T37] hub 4-1:0.0: 1 port detected [ 117.735220][ T6278] FAULT_INJECTION: forcing a failure. [ 117.735220][ T6278] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 117.735473][ T6278] CPU: 1 UID: 0 PID: 6278 Comm: syz.2.105 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 117.735496][ T6278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 117.735510][ T6278] Call Trace: [ 117.735517][ T6278] [ 117.735525][ T6278] dump_stack_lvl+0xe8/0x150 [ 117.735553][ T6278] should_fail_ex+0x46b/0x600 [ 117.735584][ T6278] prepare_alloc_pages+0x22a/0x6b0 [ 117.735618][ T6278] __alloc_frozen_pages_noprof+0x12f/0x380 [ 117.735649][ T6278] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 117.735681][ T6278] ? __pfx_policy_nodemask+0x10/0x10 [ 117.735709][ T6278] ? __lock_acquire+0x6b5/0x2cf0 [ 117.735739][ T6278] alloc_pages_mpol+0xd1/0x380 [ 117.735769][ T6278] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 117.735798][ T6278] vma_alloc_folio_noprof+0xe1/0x1e0 [ 117.735828][ T6278] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 117.735857][ T6278] ? __pte_offset_map+0x29/0x200 [ 117.735887][ T6278] do_pte_missing+0x822/0x2950 [ 117.735921][ T6278] handle_mm_fault+0xdb5/0x14c0 [ 117.735950][ T6278] ? handle_mm_fault+0xed/0x14c0 [ 117.735977][ T6278] ? __pfx_handle_mm_fault+0x10/0x10 [ 117.736002][ T6278] ? follow_page_pte+0xbc8/0xe40 [ 117.736042][ T6278] ? __pfx_follow_page_pte+0x10/0x10 [ 117.736073][ T6278] __get_user_pages+0x168f/0x2570 [ 117.736124][ T6278] __gup_longterm_locked+0xdcf/0x1630 [ 117.736158][ T6278] ? sanity_check_pinned_pages+0x7af/0x870 [ 117.736189][ T6278] gup_fast_fallback+0x1cf3/0x2040 [ 117.736240][ T6278] ? __pfx_gup_fast_fallback+0x10/0x10 [ 117.736268][ T6278] ? is_valid_gup_args+0x11f/0x200 [ 117.736294][ T6278] ? pin_user_pages_fast+0x4d/0xb0 [ 117.736320][ T6278] iov_iter_extract_pages+0x37b/0x5f0 [ 117.736348][ T6278] iov_iter_extract_bvecs+0xb1/0x920 [ 117.736368][ T6278] ? rcu_preempt_deferred_qs_irqrestore+0x856/0xc60 [ 117.736406][ T6278] bio_iov_iter_get_pages+0x346/0x930 [ 117.736437][ T6278] __blkdev_direct_IO+0x680/0xfa0 [ 117.736481][ T6278] ? __pfx___blkdev_direct_IO+0x10/0x10 [ 117.736516][ T6278] ? iov_npages+0x170/0x290 [ 117.736536][ T6278] blkdev_direct_IO+0x122a/0x17a0 [ 117.736560][ T6278] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 117.736593][ T6278] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 117.736617][ T6278] ? current_time+0x22a/0x370 [ 117.736642][ T6278] ? __pfx_current_time+0x10/0x10 [ 117.736665][ T6278] ? aa_file_perm+0x51a/0x15f0 [ 117.736691][ T6278] ? aa_file_perm+0x192/0x15f0 [ 117.736720][ T6278] ? atime_needs_update+0x56b/0x6d0 [ 117.736747][ T6278] ? touch_atime+0xf1/0x6b0 [ 117.736771][ T6278] ? __pfx_aa_file_perm+0x10/0x10 [ 117.736797][ T6278] ? kiocb_write_and_wait+0xae/0x1b0 [ 117.736819][ T6278] blkdev_read_iter+0x244/0x440 [ 117.736851][ T6278] do_iter_readv_writev+0x62b/0x8d0 [ 117.736880][ T6278] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 117.736916][ T6278] ? rw_verify_area+0x2ac/0x4e0 [ 117.736945][ T6278] vfs_readv+0x292/0x850 [ 117.736974][ T6278] ? __pfx_vfs_readv+0x10/0x10 [ 117.737006][ T6278] ? __fget_files+0x2a/0x420 [ 117.737037][ T6278] ? __fget_files+0x3a6/0x420 [ 117.737057][ T6278] ? __fget_files+0x2a/0x420 [ 117.737086][ T6278] __se_sys_preadv2+0x187/0x2b0 [ 117.737115][ T6278] ? __pfx___se_sys_preadv2+0x10/0x10 [ 117.737147][ T6278] ? __x64_sys_preadv2+0x20/0xc0 [ 117.737173][ T6278] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.737193][ T6278] do_syscall_64+0x15f/0xf80 [ 117.737214][ T6278] ? trace_irq_disable+0x3b/0x140 [ 117.737235][ T6278] ? clear_bhb_loop+0x40/0x90 [ 117.737258][ T6278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.737277][ T6278] RIP: 0033:0x7f87418fcdd9 [ 117.737293][ T6278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.737308][ T6278] RSP: 002b:00007f873fb56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 117.737326][ T6278] RAX: ffffffffffffffda RBX: 00007f8741b75fa0 RCX: 00007f87418fcdd9 [ 117.737340][ T6278] RDX: 0000000000000002 RSI: 0000200000000080 RDI: 0000000000000003 [ 117.737352][ T6278] RBP: 00007f873fb56090 R08: 0000000000000000 R09: 0000000000000000 [ 117.737364][ T6278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 117.737375][ T6278] R13: 00007f8741b76038 R14: 00007f8741b75fa0 R15: 00007ffc758cfb68 [ 117.737402][ T6278] [ 117.768200][ T6280] ieee802154 phy0 wpan0: encryption failed: -22 [ 117.932662][ T5226] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 118.065720][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 118.215770][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 118.217337][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 118.219278][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 118.219293][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.219303][ T9] usb 2-1: Product: syz [ 118.219310][ T9] usb 2-1: Manufacturer: syz [ 118.219317][ T9] usb 2-1: SerialNumber: syz [ 118.224847][ T9] usb 2-1: config 0 descriptor?? [ 118.243072][ T9] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 118.276421][ T5885] hub 4-1:0.0: hub_ext_port_status failed (err = 3) [ 118.297405][ T5226] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.297457][ T5226] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 118.297480][ T5226] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.302287][ T5226] usb 1-1: config 0 descriptor?? [ 118.347279][ T5226] pwc: Askey VC010 type 2 USB webcam detected. [ 118.511844][ T6285] input: syz1 as /devices/virtual/input/input28 [ 118.714091][ T5226] pwc: recv_control_msg error -32 req 02 val 2b00 [ 118.929732][ T5226] pwc: recv_control_msg error -32 req 02 val 2c00 [ 118.957374][ T5226] pwc: recv_control_msg error -32 req 04 val 1000 [ 118.958047][ T5226] pwc: recv_control_msg error -32 req 04 val 1300 [ 118.958688][ T5226] pwc: recv_control_msg error -32 req 04 val 1400 [ 118.959505][ T5226] pwc: recv_control_msg error -32 req 02 val 2000 [ 118.960149][ T5226] pwc: recv_control_msg error -32 req 02 val 2100 [ 118.961172][ T5226] pwc: recv_control_msg error -32 req 04 val 1500 [ 118.961945][ T5226] pwc: recv_control_msg error -32 req 02 val 2500 [ 118.962577][ T5226] pwc: recv_control_msg error -32 req 02 val 2400 [ 119.164980][ T5226] pwc: recv_control_msg error -32 req 02 val 2900 [ 119.173370][ T5226] pwc: recv_control_msg error -32 req 02 val 2800 [ 119.393667][ T5226] pwc: recv_control_msg error -71 req 04 val 1200 [ 119.412736][ T5226] pwc: Registered as video103. [ 119.423837][ T5226] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input29 [ 119.471098][ T5226] usb 1-1: USB disconnect, device number 11 [ 119.789437][ T6297] netlink: 'syz.2.112': attribute type 44 has an invalid length. [ 119.838059][ T6299] FAULT_INJECTION: forcing a failure. [ 119.838059][ T6299] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.838097][ T6299] CPU: 1 UID: 0 PID: 6299 Comm: syz.2.113 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 119.838113][ T6299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 119.838122][ T6299] Call Trace: [ 119.838127][ T6299] [ 119.838133][ T6299] dump_stack_lvl+0xe8/0x150 [ 119.838155][ T6299] should_fail_ex+0x46b/0x600 [ 119.838179][ T6299] _copy_from_user+0x2d/0xb0 [ 119.838194][ T6299] input_event_from_user+0xb1/0x290 [ 119.838215][ T6299] ? __pfx_input_event_from_user+0x10/0x10 [ 119.838238][ T6299] ? rt_spin_unlock+0x160/0x200 [ 119.838256][ T6299] evdev_write+0x2ca/0x4c0 [ 119.838273][ T6299] ? __lock_acquire+0x6b5/0x2cf0 [ 119.838294][ T6299] ? __pfx_evdev_write+0x10/0x10 [ 119.838315][ T6299] ? rw_verify_area+0x25b/0x4e0 [ 119.838334][ T6299] ? __pfx_evdev_write+0x10/0x10 [ 119.838352][ T6299] vfs_write+0x2a3/0xba0 [ 119.838377][ T6299] ? __pfx_vfs_write+0x10/0x10 [ 119.838397][ T6299] ? __fget_files+0x2a/0x420 [ 119.838416][ T6299] ? __fget_files+0x2a/0x420 [ 119.838431][ T6299] ? __fget_files+0x3a6/0x420 [ 119.838446][ T6299] ? __fget_files+0x2a/0x420 [ 119.838468][ T6299] ksys_write+0x156/0x270 [ 119.838489][ T6299] ? __pfx_ksys_write+0x10/0x10 [ 119.838525][ T6299] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.838540][ T6299] do_syscall_64+0x15f/0xf80 [ 119.838557][ T6299] ? trace_irq_disable+0x3b/0x140 [ 119.838572][ T6299] ? clear_bhb_loop+0x40/0x90 [ 119.838589][ T6299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.838603][ T6299] RIP: 0033:0x7f87418fcdd9 [ 119.838624][ T6299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.838635][ T6299] RSP: 002b:00007f873fb56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 119.838657][ T6299] RAX: ffffffffffffffda RBX: 00007f8741b75fa0 RCX: 00007f87418fcdd9 [ 119.838667][ T6299] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 119.838675][ T6299] RBP: 00007f873fb56090 R08: 0000000000000000 R09: 0000000000000000 [ 119.838683][ T6299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 119.838692][ T6299] R13: 00007f8741b76038 R14: 00007f8741b75fa0 R15: 00007ffc758cfb68 [ 119.838714][ T6299] [ 120.188629][ T6302] capability: warning: `syz.2.114' uses 32-bit capabilities (legacy support in use) [ 120.259129][ T822] usb 4-1: USB disconnect, device number 13 [ 120.310256][ T9] gspca_zc3xx: i2c_w status error 0c [ 120.425948][ T5226] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 120.578041][ T5226] usb 3-1: Using ep0 maxpacket: 8 [ 120.580486][ T5226] usb 3-1: config 5 has an invalid interface number: 91 but max is 0 [ 120.580510][ T5226] usb 3-1: config 5 has no interface number 0 [ 120.580671][ T5226] usb 3-1: config 5 interface 91 has no altsetting 0 [ 120.583521][ T5226] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=ef.b4 [ 120.583546][ T5226] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.583565][ T5226] usb 3-1: Product: syz [ 120.583578][ T5226] usb 3-1: Manufacturer: syz [ 120.583592][ T5226] usb 3-1: SerialNumber: syz [ 120.857172][ T6302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.859425][ T6302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.896626][ T5226] ftdi_sio 3-1:5.91: FTDI USB Serial Device converter detected [ 120.901419][ T5226] ftdi_sio ttyUSB0: unknown device type: 0xefb4 [ 120.923737][ T5226] usb 3-1: USB disconnect, device number 13 [ 120.935811][ T9] gspca_zc3xx: reg_r err -32 [ 120.940424][ T5226] ftdi_sio 3-1:5.91: device disconnected [ 121.032481][ T6308] input: syz1 as /devices/virtual/input/input30 [ 121.387903][ T822] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 121.515920][ T5894] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 121.526067][ T9] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 121.526160][ T9] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 121.535846][ T822] usb 1-1: Using ep0 maxpacket: 32 [ 121.554276][ T822] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.554306][ T822] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.554328][ T822] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 121.554341][ T822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.572588][ T822] usb 1-1: config 0 descriptor?? [ 121.580416][ T822] hub 1-1:0.0: USB hub found [ 121.677397][ T5894] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 121.677427][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.688027][ T5894] usb 4-1: config 0 descriptor?? [ 121.754028][ T5894] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 121.790419][ T822] hub 1-1:0.0: 1 port detected [ 121.940488][ T6321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.122'. [ 122.395214][ T822] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 122.412704][ T1028] usb 1-1: Failed to suspend device, error -71 [ 122.415477][ T5893] usb 1-1: USB disconnect, device number 12 [ 122.683128][ T822] usb 2-1: USB disconnect, device number 12 [ 123.187140][ T37] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 123.278554][ T5894] usb 4-1: USB disconnect, device number 14 [ 123.347899][ T37] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.347953][ T37] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 123.347978][ T37] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.405861][ T37] usb 3-1: config 0 descriptor?? [ 123.425452][ T37] pwc: Askey VC010 type 2 USB webcam detected. [ 123.462369][ T6341] input: syz1 as /devices/virtual/input/input31 [ 123.721710][ T6344] FAULT_INJECTION: forcing a failure. [ 123.721710][ T6344] name failslab, interval 1, probability 0, space 0, times 0 [ 123.721744][ T6344] CPU: 0 UID: 0 PID: 6344 Comm: syz.0.129 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 123.721760][ T6344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 123.721767][ T6344] Call Trace: [ 123.721772][ T6344] [ 123.721776][ T6344] dump_stack_lvl+0xe8/0x150 [ 123.721792][ T6344] should_fail_ex+0x46b/0x600 [ 123.721818][ T6344] should_failslab+0xa8/0x100 [ 123.721847][ T6344] __kmalloc_noprof+0xdf/0x7b0 [ 123.721873][ T6344] ? tomoyo_encode+0x28b/0x550 [ 123.721907][ T6344] tomoyo_encode+0x28b/0x550 [ 123.721932][ T6344] tomoyo_realpath_from_path+0x58d/0x5d0 [ 123.721954][ T6344] tomoyo_check_open_permission+0x229/0x470 [ 123.721968][ T6344] ? tomoyo_check_open_permission+0x1d3/0x470 [ 123.721988][ T6344] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 123.722014][ T6344] ? __asan_memset+0x22/0x50 [ 123.722063][ T6344] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 123.722088][ T6344] ? tomoyo_file_open+0x166/0x220 [ 123.722111][ T6344] security_file_open+0xa9/0x240 [ 123.722134][ T6344] do_dentry_open+0x4c0/0x13e0 [ 123.722159][ T6344] ? vfs_open+0x31/0x350 [ 123.722185][ T6344] vfs_open+0x3b/0x350 [ 123.722207][ T6344] dentry_open+0x61/0xa0 [ 123.722228][ T6344] ovl_dir_read+0x85/0x4a0 [ 123.722258][ T6344] ? __pfx_ovl_dir_read+0x10/0x10 [ 123.722280][ T6344] ? ovl_check_d_type_supported+0xba/0x150 [ 123.722296][ T6344] ovl_check_d_type_supported+0xc5/0x150 [ 123.722319][ T6344] ? __pfx_ovl_check_d_type_supported+0x10/0x10 [ 123.722343][ T6344] ? __pfx_ovl_check_d_type+0x10/0x10 [ 123.722381][ T6344] ? rt_spin_unlock+0x160/0x200 [ 123.722407][ T6344] ovl_fill_super+0x3b6f/0x5e20 [ 123.722444][ T6344] ? __pfx_ovl_fill_super+0x10/0x10 [ 123.722459][ T6344] ? __lock_acquire+0x6b5/0x2cf0 [ 123.722496][ T6344] ? __lock_acquire+0x6b5/0x2cf0 [ 123.722528][ T6344] ? __lock_acquire+0x6b5/0x2cf0 [ 123.722555][ T6344] ? do_raw_spin_lock+0x12b/0x2f0 [ 123.722583][ T6344] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 123.722598][ T6344] ? lockdep_hardirqs_on+0x7a/0x110 [ 123.722612][ T6344] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 123.722625][ T6344] ? rt_mutex_slowunlock+0x1cb/0x300 [ 123.722646][ T6344] ? __raw_spin_lock_init+0x45/0x100 [ 123.722681][ T6344] ? sget_fc+0x962/0xa40 [ 123.722708][ T6344] ? __pfx_set_anon_super_fc+0x10/0x10 [ 123.722732][ T6344] ? __pfx_ovl_fill_super+0x10/0x10 [ 123.722751][ T6344] get_tree_nodev+0xbb/0x150 [ 123.722767][ T6344] vfs_get_tree+0x92/0x2a0 [ 123.722783][ T6344] do_new_mount+0x341/0xd30 [ 123.722796][ T6344] ? apparmor_capable+0x126/0x170 [ 123.722821][ T6344] ? __pfx_do_new_mount+0x10/0x10 [ 123.722843][ T6344] ? ns_capable+0x89/0xe0 [ 123.722865][ T6344] ? path_mount+0x690/0x10e0 [ 123.722885][ T6344] ? user_path_at+0xd4/0x160 [ 123.722909][ T6344] ? user_path_at+0xd4/0x160 [ 123.722923][ T6344] __se_sys_mount+0x31d/0x420 [ 123.722938][ T6344] ? __pfx___se_sys_mount+0x10/0x10 [ 123.722953][ T6344] ? __x64_sys_mount+0x20/0xc0 [ 123.722972][ T6344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.722993][ T6344] do_syscall_64+0x15f/0xf80 [ 123.723016][ T6344] ? trace_irq_disable+0x3b/0x140 [ 123.723038][ T6344] ? clear_bhb_loop+0x40/0x90 [ 123.723061][ T6344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.723075][ T6344] RIP: 0033:0x7f9db9cccdd9 [ 123.723086][ T6344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.723094][ T6344] RSP: 002b:00007f9db7f26028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 123.723105][ T6344] RAX: ffffffffffffffda RBX: 00007f9db9f45fa0 RCX: 00007f9db9cccdd9 [ 123.723113][ T6344] RDX: 0000200000000040 RSI: 0000200000000100 RDI: 0000000000000000 [ 123.723121][ T6344] RBP: 00007f9db7f26090 R08: 0000200000000200 R09: 0000000000000000 [ 123.723132][ T6344] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002 [ 123.723143][ T6344] R13: 00007f9db9f46038 R14: 00007f9db9f45fa0 R15: 00007fff4db8af18 [ 123.723174][ T6344] [ 123.723200][ T6344] ERROR: Out of memory at tomoyo_realpath_from_path. [ 123.844090][ T6347] netlink: 'syz.3.131': attribute type 29 has an invalid length. [ 123.915782][ T37] pwc: recv_control_msg error -32 req 02 val 2b00 [ 124.163968][ T37] pwc: recv_control_msg error -32 req 02 val 2c00 [ 124.177268][ T37] pwc: recv_control_msg error -32 req 04 val 1000 [ 124.177948][ T37] pwc: recv_control_msg error -32 req 04 val 1300 [ 124.178592][ T37] pwc: recv_control_msg error -32 req 04 val 1400 [ 124.179231][ T37] pwc: recv_control_msg error -32 req 02 val 2000 [ 124.182843][ T37] pwc: recv_control_msg error -32 req 02 val 2100 [ 124.209787][ T37] pwc: recv_control_msg error -32 req 04 val 1500 [ 124.213579][ T37] pwc: recv_control_msg error -32 req 02 val 2500 [ 124.214319][ T37] pwc: recv_control_msg error -32 req 02 val 2400 [ 124.235371][ T6358] loop5: detected capacity change from 0 to 7 [ 124.300308][ T6358] loop5: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 124.300352][ T6358] loop5: partition table partially beyond EOD, truncated [ 124.300567][ T6358] loop5: p1 size 650043498 extends beyond EOD, truncated [ 124.344197][ T6358] loop5: p2 start 191791756 is beyond EOD, truncated [ 124.423563][ T37] pwc: recv_control_msg error -32 req 02 val 2900 [ 124.435279][ T37] pwc: recv_control_msg error -32 req 02 val 2800 [ 124.524813][ T5836] udevd[5836]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 124.617197][ T32] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 124.645022][ T37] pwc: recv_control_msg error -71 req 04 val 1200 [ 124.668546][ T37] pwc: Registered as video103. [ 124.680869][ T37] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input32 [ 124.707244][ T37] usb 3-1: USB disconnect, device number 14 [ 124.761299][ T6370] input: syz1 as /devices/virtual/input/input33 [ 124.785692][ T32] usb 2-1: Using ep0 maxpacket: 32 [ 124.789832][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.789862][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.789895][ T32] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 124.789916][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.860749][ T32] usb 2-1: config 0 descriptor?? [ 124.882010][ T32] hub 2-1:0.0: USB hub found [ 125.005908][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 125.077744][ T32] hub 2-1:0.0: 1 port detected [ 125.139011][ T6378] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 125.139011][ T6378] The task syz.3.139 (6378) triggered the difference, watch for misbehavior. [ 125.157122][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 125.171082][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 125.192879][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 125.192898][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.192909][ T10] usb 1-1: Product: syz [ 125.192916][ T10] usb 1-1: Manufacturer: syz [ 125.192924][ T10] usb 1-1: SerialNumber: syz [ 125.199857][ T1470] Bluetooth: (null): Invalid header checksum [ 125.224600][ T10] usb 1-1: config 0 descriptor?? [ 125.251013][ T10] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 125.294170][ T1470] Bluetooth: (null): Invalid header checksum [ 125.387792][ T70] Bluetooth: (null): Invalid header checksum [ 125.391463][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 125.496088][ T70] Bluetooth: (null): Invalid header checksum [ 125.546573][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 125.551894][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.551917][ T9] usb 4-1: config 0 has no interfaces? [ 125.587444][ T9] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 125.587464][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.587476][ T9] usb 4-1: Product: syz [ 125.587489][ T9] usb 4-1: Manufacturer: syz [ 125.587556][ T9] usb 4-1: SerialNumber: syz [ 125.652376][ T1028] Bluetooth: (null): Invalid header checksum [ 125.667967][ T5894] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 125.684768][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 125.685097][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 125.685412][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 125.685754][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 125.693678][ T37] hub 2-1:0.0: hub_ext_port_status failed (err = -32) [ 125.726429][ T190] usb 2-1: Failed to suspend device, error -71 [ 125.763877][ T5940] usb 2-1: USB disconnect, device number 13 [ 125.784484][ T1470] Bluetooth: (null): Invalid header checksum [ 125.802641][ T9] usb 4-1: config 0 descriptor?? [ 125.851254][ T190] Bluetooth: (null): Invalid header checksum [ 125.856749][ T5894] usb 3-1: Using ep0 maxpacket: 16 [ 125.870181][ T5894] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 125.870205][ T5894] usb 3-1: config 0 has no interface number 0 [ 125.877808][ T5894] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 125.877835][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.877854][ T5894] usb 3-1: Product: syz [ 125.877921][ T5894] usb 3-1: Manufacturer: syz [ 125.877935][ T5894] usb 3-1: SerialNumber: syz [ 125.896513][ T5894] usb 3-1: config 0 descriptor?? [ 125.920668][ T5894] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 125.957974][ T1470] Bluetooth: (null): Invalid header checksum [ 126.020741][ T6378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.022336][ T6378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.024934][ T6378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.036318][ T6378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.076074][ T190] Bluetooth: (null): Invalid header checksum [ 126.186860][ T1028] Bluetooth: (null): Invalid header checksum [ 126.299851][ T190] Bluetooth: (null): Invalid header checksum [ 126.406643][ T1028] Bluetooth: (null): Invalid header checksum [ 126.518249][ T70] Bluetooth: (null): Invalid header checksum [ 126.627323][ T70] Bluetooth: (null): Invalid header checksum [ 126.753648][ T5894] gspca_spca1528: reg_w err -71 [ 126.753827][ T5894] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 126.758249][ T70] Bluetooth: (null): Invalid header checksum [ 126.806068][ T5894] usb 3-1: USB disconnect, device number 15 [ 126.866546][ T70] Bluetooth: (null): Invalid header checksum [ 126.949817][ T6385] netlink: 'syz.1.142': attribute type 1 has an invalid length. [ 126.949837][ T6385] netlink: 'syz.1.142': attribute type 3 has an invalid length. [ 126.949849][ T6385] netlink: 224 bytes leftover after parsing attributes in process `syz.1.142'. [ 126.981055][ T6385] netlink: 'syz.1.142': attribute type 2 has an invalid length. [ 127.019592][ T70] Bluetooth: (null): Invalid header checksum [ 127.096317][ T1436] Bluetooth: (null): Invalid header checksum [ 127.216785][ T1470] Bluetooth: (null): Invalid header checksum [ 127.338832][ T190] Bluetooth: (null): Invalid header checksum [ 127.420866][ T6387] FAULT_INJECTION: forcing a failure. [ 127.420866][ T6387] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 127.420900][ T6387] CPU: 1 UID: 0 PID: 6387 Comm: syz.2.143 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 127.420922][ T6387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 127.420932][ T6387] Call Trace: [ 127.420939][ T6387] [ 127.420945][ T6387] dump_stack_lvl+0xe8/0x150 [ 127.420961][ T6387] should_fail_ex+0x46b/0x600 [ 127.420986][ T6387] prepare_alloc_pages+0x22a/0x6b0 [ 127.421021][ T6387] __alloc_frozen_pages_noprof+0x12f/0x380 [ 127.421052][ T6387] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 127.421085][ T6387] ? __pfx_policy_nodemask+0x10/0x10 [ 127.421113][ T6387] ? __lock_acquire+0x6b5/0x2cf0 [ 127.421139][ T6387] alloc_pages_mpol+0xd1/0x380 [ 127.421169][ T6387] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 127.421198][ T6387] vma_alloc_folio_noprof+0xe1/0x1e0 [ 127.421229][ T6387] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 127.421258][ T6387] ? __pte_offset_map+0x29/0x200 [ 127.421279][ T6387] do_pte_missing+0x822/0x2950 [ 127.421296][ T6387] handle_mm_fault+0xdb5/0x14c0 [ 127.421324][ T6387] ? handle_mm_fault+0xed/0x14c0 [ 127.421353][ T6387] ? __pfx_handle_mm_fault+0x10/0x10 [ 127.421378][ T6387] ? follow_page_pte+0xbc8/0xe40 [ 127.421411][ T6387] ? __pfx_follow_page_pte+0x10/0x10 [ 127.421432][ T6387] __get_user_pages+0x168f/0x2570 [ 127.421459][ T6387] __gup_longterm_locked+0xdcf/0x1630 [ 127.421490][ T6387] ? sanity_check_pinned_pages+0x7af/0x870 [ 127.421522][ T6387] gup_fast_fallback+0x1cf3/0x2040 [ 127.421576][ T6387] ? __pfx_gup_fast_fallback+0x10/0x10 [ 127.421591][ T6387] ? is_valid_gup_args+0x11f/0x200 [ 127.421605][ T6387] ? pin_user_pages_fast+0x4d/0xb0 [ 127.421620][ T6387] iov_iter_extract_pages+0x37b/0x5f0 [ 127.421640][ T6387] iov_iter_extract_bvecs+0xb1/0x920 [ 127.421669][ T6387] ? bio_associate_blkg+0x6d/0x230 [ 127.421699][ T6387] bio_iov_iter_get_pages+0x346/0x930 [ 127.421732][ T6387] __blkdev_direct_IO+0x680/0xfa0 [ 127.421761][ T6387] ? __pfx___blkdev_direct_IO+0x10/0x10 [ 127.421780][ T6387] ? iov_npages+0x170/0x290 [ 127.421790][ T6387] blkdev_direct_IO+0x122a/0x17a0 [ 127.421813][ T6387] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 127.421852][ T6387] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 127.421877][ T6387] ? current_time+0x22a/0x370 [ 127.421904][ T6387] ? __pfx_current_time+0x10/0x10 [ 127.421920][ T6387] ? aa_file_perm+0x51a/0x15f0 [ 127.421936][ T6387] ? aa_file_perm+0x192/0x15f0 [ 127.421953][ T6387] ? atime_needs_update+0x56b/0x6d0 [ 127.421980][ T6387] ? touch_atime+0xf1/0x6b0 [ 127.422004][ T6387] ? __pfx_aa_file_perm+0x10/0x10 [ 127.422031][ T6387] ? kiocb_write_and_wait+0xae/0x1b0 [ 127.422054][ T6387] blkdev_read_iter+0x244/0x440 [ 127.422079][ T6387] do_iter_readv_writev+0x62b/0x8d0 [ 127.422096][ T6387] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 127.422128][ T6387] ? rw_verify_area+0x2ac/0x4e0 [ 127.422156][ T6387] vfs_readv+0x292/0x850 [ 127.422183][ T6387] ? __pfx_vfs_readv+0x10/0x10 [ 127.422217][ T6387] ? __fget_files+0x2a/0x420 [ 127.422243][ T6387] ? __fget_files+0x3a6/0x420 [ 127.422259][ T6387] ? __fget_files+0x2a/0x420 [ 127.422288][ T6387] __se_sys_preadv2+0x187/0x2b0 [ 127.422317][ T6387] ? __pfx___se_sys_preadv2+0x10/0x10 [ 127.422351][ T6387] ? __x64_sys_preadv2+0x20/0xc0 [ 127.422378][ T6387] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.422396][ T6387] do_syscall_64+0x15f/0xf80 [ 127.422410][ T6387] ? trace_irq_disable+0x3b/0x140 [ 127.422421][ T6387] ? clear_bhb_loop+0x40/0x90 [ 127.422442][ T6387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.422461][ T6387] RIP: 0033:0x7f87418fcdd9 [ 127.422479][ T6387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.422494][ T6387] RSP: 002b:00007f873fb56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 127.422513][ T6387] RAX: ffffffffffffffda RBX: 00007f8741b75fa0 RCX: 00007f87418fcdd9 [ 127.422527][ T6387] RDX: 0000000000000002 RSI: 0000200000000080 RDI: 0000000000000003 [ 127.422538][ T6387] RBP: 00007f873fb56090 R08: 0000000000000000 R09: 0000000000000000 [ 127.422544][ T6387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 127.422551][ T6387] R13: 00007f8741b76038 R14: 00007f8741b75fa0 R15: 00007ffc758cfb68 [ 127.422580][ T6387] [ 127.725582][ T190] Bluetooth: (null): Invalid header checksum [ 127.736346][ T1470] Bluetooth: (null): Invalid header checksum [ 127.752139][ T1470] Bluetooth: (null): Invalid header checksum [ 127.889315][ T10] gspca_zc3xx: reg_r err -32 [ 127.913894][ T1470] Bluetooth: (null): Invalid header checksum [ 127.914049][ T1470] Bluetooth: (null): Invalid header checksum [ 128.019908][ T70] Bluetooth: (null): Invalid header checksum [ 128.089000][ T5940] usb 4-1: USB disconnect, device number 15 [ 128.245769][ T32] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 128.313588][ T6396] input: syz1 as /devices/virtual/input/input34 [ 128.363943][ T6398] FAULT_INJECTION: forcing a failure. [ 128.363943][ T6398] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.363975][ T6398] CPU: 1 UID: 0 PID: 6398 Comm: syz.1.148 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 128.364000][ T6398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 128.364010][ T6398] Call Trace: [ 128.364018][ T6398] [ 128.364025][ T6398] dump_stack_lvl+0xe8/0x150 [ 128.364052][ T6398] should_fail_ex+0x46b/0x600 [ 128.364083][ T6398] _copy_from_user+0x2d/0xb0 [ 128.364103][ T6398] ____sys_sendmsg+0x30d/0x870 [ 128.364136][ T6398] ? __pfx_____sys_sendmsg+0x10/0x10 [ 128.364170][ T6398] ? import_iovec+0x73/0xa0 [ 128.364192][ T6398] ___sys_sendmsg+0x2a5/0x360 [ 128.364217][ T6398] ? __lock_acquire+0x6b5/0x2cf0 [ 128.364246][ T6398] ? __pfx____sys_sendmsg+0x10/0x10 [ 128.364301][ T6398] ? __fget_files+0x2a/0x420 [ 128.364322][ T6398] ? __fget_files+0x3a6/0x420 [ 128.364353][ T6398] __x64_sys_sendmsg+0x1c3/0x2a0 [ 128.364381][ T6398] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 128.364414][ T6398] ? __pfx_ksys_write+0x10/0x10 [ 128.364447][ T6398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.364467][ T6398] do_syscall_64+0x15f/0xf80 [ 128.364490][ T6398] ? trace_irq_disable+0x3b/0x140 [ 128.364511][ T6398] ? clear_bhb_loop+0x40/0x90 [ 128.364534][ T6398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.364553][ T6398] RIP: 0033:0x7fbfea57cdd9 [ 128.364570][ T6398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.364585][ T6398] RSP: 002b:00007fbfe87d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.364604][ T6398] RAX: ffffffffffffffda RBX: 00007fbfea7f5fa0 RCX: 00007fbfea57cdd9 [ 128.364618][ T6398] RDX: 0000000000008000 RSI: 0000200000000000 RDI: 0000000000000003 [ 128.364630][ T6398] RBP: 00007fbfe87d6090 R08: 0000000000000000 R09: 0000000000000000 [ 128.364642][ T6398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.364653][ T6398] R13: 00007fbfea7f6038 R14: 00007fbfea7f5fa0 R15: 00007ffe60ebc768 [ 128.364689][ T6398] [ 128.408765][ T32] usb 3-1: Using ep0 maxpacket: 32 [ 128.436307][ T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.436338][ T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.436374][ T32] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 128.436397][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.453461][ T32] usb 3-1: config 0 descriptor?? [ 128.485784][ T10] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 128.485878][ T10] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 128.701605][ T32] hub 3-1:0.0: USB hub found [ 128.704162][ T32] hub 3-1:0.0: 1 port detected [ 129.126979][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 129.306050][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 129.306080][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.306099][ T10] usb 4-1: Product: syz [ 129.306113][ T10] usb 4-1: Manufacturer: syz [ 129.306126][ T10] usb 4-1: SerialNumber: syz [ 129.333841][ T5885] hub 3-1:0.0: activate --> -90 [ 129.385811][ T32] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 129.539362][ T32] usb 2-1: config 0 has no interfaces? [ 129.542200][ T32] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 129.542227][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.542246][ T32] usb 2-1: Product: syz [ 129.542310][ T32] usb 2-1: Manufacturer: syz [ 129.542324][ T32] usb 2-1: SerialNumber: syz [ 129.555040][ T32] usb 2-1: config 0 descriptor?? [ 129.669468][ T32] usb 1-1: USB disconnect, device number 13 [ 129.727308][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 129.727385][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 129.783510][ T6415] netlink: 'syz.0.154': attribute type 1 has an invalid length. [ 129.783531][ T6415] netlink: 'syz.0.154': attribute type 3 has an invalid length. [ 129.783541][ T6415] netlink: 224 bytes leftover after parsing attributes in process `syz.0.154'. [ 129.790599][ T37] usb 3-1: USB disconnect, device number 16 [ 129.841199][ T6416] netlink: 'syz.0.154': attribute type 2 has an invalid length. [ 130.871640][ T6424] loop5: detected capacity change from 0 to 7 [ 130.877661][ T6424] loop5: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 130.877695][ T6424] loop5: partition table partially beyond EOD, truncated [ 130.878369][ T6424] loop5: p1 size 650043498 extends beyond EOD, truncated [ 130.893063][ T6424] loop5: p2 start 191791756 is beyond EOD, truncated [ 130.944025][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 130.945522][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 130.960928][ T5945] udevd[5945]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 131.105163][ T6428] input: syz1 as /devices/virtual/input/input35 [ 131.183979][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000118. ret = -EPROTO [ 131.184050][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 131.185007][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 131.219227][ T10] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 131.238208][ T10] usb 4-1: USB disconnect, device number 16 [ 131.285422][ T6431] FAULT_INJECTION: forcing a failure. [ 131.285422][ T6431] name failslab, interval 1, probability 0, space 0, times 0 [ 131.285455][ T6431] CPU: 0 UID: 0 PID: 6431 Comm: syz.2.161 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 131.285476][ T6431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 131.285486][ T6431] Call Trace: [ 131.285493][ T6431] [ 131.285501][ T6431] dump_stack_lvl+0xe8/0x150 [ 131.285527][ T6431] should_fail_ex+0x46b/0x600 [ 131.285559][ T6431] should_failslab+0xa8/0x100 [ 131.285593][ T6431] __kmalloc_noprof+0xdf/0x7b0 [ 131.285623][ T6431] ? kfree+0x4d/0x6c0 [ 131.285643][ T6431] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 131.285672][ T6431] tomoyo_realpath_from_path+0xe3/0x5d0 [ 131.285699][ T6431] ? tomoyo_domain+0xd7/0x130 [ 131.285720][ T6431] ? tomoyo_path_number_perm+0x219/0x630 [ 131.285742][ T6431] tomoyo_path_number_perm+0x246/0x630 [ 131.285765][ T6431] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 131.285788][ T6431] ? __lock_acquire+0x6b5/0x2cf0 [ 131.285814][ T6431] ? do_raw_spin_lock+0x12b/0x2f0 [ 131.285863][ T6431] ? __fget_files+0x2a/0x420 [ 131.285887][ T6431] ? __fget_files+0x2a/0x420 [ 131.285905][ T6431] ? __fget_files+0x3a6/0x420 [ 131.285922][ T6431] ? __fget_files+0x2a/0x420 [ 131.285942][ T6431] security_file_ioctl+0xc3/0x2a0 [ 131.285963][ T6431] __se_sys_ioctl+0x47/0x170 [ 131.285985][ T6431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.286001][ T6431] do_syscall_64+0x15f/0xf80 [ 131.286022][ T6431] ? clear_bhb_loop+0x40/0x90 [ 131.286040][ T6431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.286055][ T6431] RIP: 0033:0x7f87418fcdd9 [ 131.286070][ T6431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.286081][ T6431] RSP: 002b:00007f873fb56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 131.286097][ T6431] RAX: ffffffffffffffda RBX: 00007f8741b75fa0 RCX: 00007f87418fcdd9 [ 131.286108][ T6431] RDX: 0000000000000000 RSI: 0000000000005437 RDI: 0000000000000003 [ 131.286118][ T6431] RBP: 00007f873fb56090 R08: 0000000000000000 R09: 0000000000000000 [ 131.286127][ T6431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.286136][ T6431] R13: 00007f8741b76038 R14: 00007f8741b75fa0 R15: 00007ffc758cfb68 [ 131.286159][ T6431] [ 131.297573][ T6431] ERROR: Out of memory at tomoyo_realpath_from_path. [ 131.545311][ T6435] block nbd2: NBD_DISCONNECT [ 131.815854][ T10] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 131.968913][ T6442] netlink: 'syz.0.166': attribute type 1 has an invalid length. [ 131.968926][ T6442] netlink: 'syz.0.166': attribute type 3 has an invalid length. [ 131.968933][ T6442] netlink: 224 bytes leftover after parsing attributes in process `syz.0.166'. [ 132.007524][ T6442] netlink: 'syz.0.166': attribute type 2 has an invalid length. [ 132.007641][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 132.008913][ T10] usb 3-1: config 3 has an invalid interface number: 81 but max is 0 [ 132.008935][ T10] usb 3-1: config 3 has no interface number 0 [ 132.008976][ T10] usb 3-1: config 3 interface 81 altsetting 6 endpoint 0xD has invalid wMaxPacketSize 0 [ 132.008998][ T10] usb 3-1: config 3 interface 81 altsetting 6 endpoint 0xC has invalid maxpacket 1413, setting to 64 [ 132.009023][ T10] usb 3-1: config 3 interface 81 has no altsetting 0 [ 132.011197][ T10] usb 3-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=e5.ba [ 132.011222][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.011233][ T10] usb 3-1: Product: syz [ 132.011240][ T10] usb 3-1: Manufacturer: syz [ 132.011247][ T10] usb 3-1: SerialNumber: syz [ 132.017794][ T6435] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 132.075762][ T5885] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 132.222997][ T32] usb 2-1: USB disconnect, device number 14 [ 132.240049][ T5885] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 132.240075][ T5885] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 132.240125][ T5885] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=86.34 [ 132.240162][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.271060][ T5885] usb 4-1: config 0 descriptor?? [ 132.296989][ T5885] usb 4-1: Waiting for MOTU Microbook II to boot up... [ 132.297013][ T5885] usb 4-1: failed setting the sample rate for Motu MicroBook II: -22 [ 132.297055][ T5885] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 132.525766][ T6440] overlayfs: statfs failed on './file0' [ 132.566354][ T32] usb 4-1: USB disconnect, device number 17 [ 132.685783][ T5894] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 132.756831][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.777664][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.996744][ T5894] usb 2-1: Using ep0 maxpacket: 16 [ 132.999706][ T5894] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 132.999869][ T5894] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 132.999935][ T5894] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 132.999953][ T5894] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 132.999970][ T5894] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 132.999997][ T5894] usb 2-1: config 0 has no interface number 0 [ 133.000040][ T5894] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 133.000114][ T5894] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 133.000132][ T5894] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 133.000159][ T5894] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 133.000186][ T5894] usb 2-1: config 0 interface 125 has no altsetting 0 [ 133.000204][ T5894] usb 2-1: config 0 interface 125 has no altsetting 2 [ 133.002121][ T5894] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 133.002137][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.002147][ T5894] usb 2-1: Product: syz [ 133.002155][ T5894] usb 2-1: Manufacturer: syz [ 133.002162][ T5894] usb 2-1: SerialNumber: syz [ 133.008857][ T5894] usb 2-1: config 0 descriptor?? [ 133.017651][ T5894] usb 2-1: selecting invalid altsetting 2 [ 133.228922][ T10] redrat3 3-1:3.81: Couldn't find all endpoints [ 133.259286][ T10] usb 3-1: USB disconnect, device number 17 [ 133.415165][ T6450] FAULT_INJECTION: forcing a failure. [ 133.415165][ T6450] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.415188][ T6450] CPU: 1 UID: 0 PID: 6450 Comm: syz.3.168 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 133.415209][ T6450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 133.415220][ T6450] Call Trace: [ 133.415228][ T6450] [ 133.415236][ T6450] dump_stack_lvl+0xe8/0x150 [ 133.415263][ T6450] should_fail_ex+0x46b/0x600 [ 133.415297][ T6450] _copy_from_user+0x2d/0xb0 [ 133.415313][ T6450] input_event_from_user+0xb1/0x290 [ 133.415329][ T6450] ? __pfx_input_event_from_user+0x10/0x10 [ 133.415346][ T6450] ? rt_spin_unlock+0x160/0x200 [ 133.415364][ T6450] evdev_write+0x2ca/0x4c0 [ 133.415388][ T6450] ? __lock_acquire+0x6b5/0x2cf0 [ 133.415423][ T6450] ? __pfx_evdev_write+0x10/0x10 [ 133.415453][ T6450] ? rw_verify_area+0x25b/0x4e0 [ 133.415478][ T6450] ? __pfx_evdev_write+0x10/0x10 [ 133.415492][ T6450] vfs_write+0x2a3/0xba0 [ 133.415510][ T6450] ? __pfx_vfs_write+0x10/0x10 [ 133.415528][ T6450] ? __fget_files+0x2a/0x420 [ 133.415554][ T6450] ? __fget_files+0x2a/0x420 [ 133.415574][ T6450] ? __fget_files+0x3a6/0x420 [ 133.415599][ T6450] ? __fget_files+0x2a/0x420 [ 133.415626][ T6450] ksys_write+0x156/0x270 [ 133.415651][ T6450] ? __pfx_ksys_write+0x10/0x10 [ 133.415683][ T6450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.415703][ T6450] do_syscall_64+0x15f/0xf80 [ 133.415725][ T6450] ? trace_irq_disable+0x3b/0x140 [ 133.415746][ T6450] ? clear_bhb_loop+0x40/0x90 [ 133.415770][ T6450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.415789][ T6450] RIP: 0033:0x7f9bded0cdd9 [ 133.415807][ T6450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.415822][ T6450] RSP: 002b:00007f9bdcf66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 133.415835][ T6450] RAX: ffffffffffffffda RBX: 00007f9bdef85fa0 RCX: 00007f9bded0cdd9 [ 133.415842][ T6450] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 133.415849][ T6450] RBP: 00007f9bdcf66090 R08: 0000000000000000 R09: 0000000000000000 [ 133.415855][ T6450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.415861][ T6450] R13: 00007f9bdef86038 R14: 00007f9bdef85fa0 R15: 00007ffe55d0f248 [ 133.415883][ T6450] [ 133.677642][ T32] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 133.762878][ T6459] input: syz1 as /devices/virtual/input/input36 [ 133.828467][ T32] usb 1-1: Using ep0 maxpacket: 8 [ 133.830928][ T32] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 133.833496][ T32] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 133.833523][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.833543][ T32] usb 1-1: Product: syz [ 133.833556][ T32] usb 1-1: Manufacturer: syz [ 133.833571][ T32] usb 1-1: SerialNumber: syz [ 133.847038][ T32] usb 1-1: config 0 descriptor?? [ 133.878060][ T32] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 134.095826][ T5894] get_1284_register timeout [ 134.095978][ C0] usb 2-1: async_complete: urb error -104 [ 134.096086][ C0] usb 2-1: async_complete: urb error -104 [ 134.222201][ T37] usb 2-1: USB disconnect, device number 15 [ 134.257873][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 134.405777][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 134.441838][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.441870][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.441907][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 134.441930][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.493937][ T9] usb 3-1: config 0 descriptor?? [ 134.511491][ T9] hub 3-1:0.0: USB hub found [ 134.621678][ T6469] FAULT_INJECTION: forcing a failure. [ 134.621678][ T6469] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 134.621716][ T6469] CPU: 1 UID: 0 PID: 6469 Comm: syz.3.175 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 134.621738][ T6469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 134.621749][ T6469] Call Trace: [ 134.621757][ T6469] [ 134.621765][ T6469] dump_stack_lvl+0xe8/0x150 [ 134.621783][ T6469] should_fail_ex+0x46b/0x600 [ 134.621801][ T6469] prepare_alloc_pages+0x22a/0x6b0 [ 134.621827][ T6469] __alloc_frozen_pages_noprof+0x12f/0x380 [ 134.621859][ T6469] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 134.621892][ T6469] ? __pfx_policy_nodemask+0x10/0x10 [ 134.621920][ T6469] ? __lock_acquire+0x6b5/0x2cf0 [ 134.621942][ T6469] alloc_pages_mpol+0xd1/0x380 [ 134.621959][ T6469] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 134.621976][ T6469] vma_alloc_folio_noprof+0xe1/0x1e0 [ 134.622002][ T6469] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 134.622038][ T6469] ? __pte_offset_map+0x29/0x200 [ 134.622069][ T6469] do_pte_missing+0x822/0x2950 [ 134.622099][ T6469] handle_mm_fault+0xdb5/0x14c0 [ 134.622116][ T6469] ? handle_mm_fault+0xed/0x14c0 [ 134.622131][ T6469] ? __pfx_handle_mm_fault+0x10/0x10 [ 134.622146][ T6469] ? follow_page_pte+0xbc8/0xe40 [ 134.622178][ T6469] ? __pfx_follow_page_pte+0x10/0x10 [ 134.622215][ T6469] __get_user_pages+0x168f/0x2570 [ 134.622264][ T6469] __gup_longterm_locked+0xdcf/0x1630 [ 134.622285][ T6469] ? sanity_check_pinned_pages+0x7af/0x870 [ 134.622302][ T6469] gup_fast_fallback+0x1cf3/0x2040 [ 134.622348][ T6469] ? __pfx_gup_fast_fallback+0x10/0x10 [ 134.622376][ T6469] ? is_valid_gup_args+0x11f/0x200 [ 134.622402][ T6469] ? pin_user_pages_fast+0x4d/0xb0 [ 134.622426][ T6469] iov_iter_extract_pages+0x37b/0x5f0 [ 134.622441][ T6469] iov_iter_extract_bvecs+0xb1/0x920 [ 134.622457][ T6469] ? bio_associate_blkg+0x6d/0x230 [ 134.622474][ T6469] bio_iov_iter_get_pages+0x346/0x930 [ 134.622505][ T6469] __blkdev_direct_IO+0x680/0xfa0 [ 134.622551][ T6469] ? __pfx___blkdev_direct_IO+0x10/0x10 [ 134.622587][ T6469] ? iov_npages+0x170/0x290 [ 134.622599][ T6469] blkdev_direct_IO+0x122a/0x17a0 [ 134.622612][ T6469] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 134.622631][ T6469] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 134.622648][ T6469] ? current_time+0x22a/0x370 [ 134.622675][ T6469] ? __pfx_current_time+0x10/0x10 [ 134.622700][ T6469] ? aa_file_perm+0x51a/0x15f0 [ 134.622728][ T6469] ? aa_file_perm+0x192/0x15f0 [ 134.622756][ T6469] ? atime_needs_update+0x56b/0x6d0 [ 134.622772][ T6469] ? touch_atime+0xf1/0x6b0 [ 134.622785][ T6469] ? __pfx_aa_file_perm+0x10/0x10 [ 134.622800][ T6469] ? kiocb_write_and_wait+0xae/0x1b0 [ 134.622821][ T6469] blkdev_read_iter+0x244/0x440 [ 134.622852][ T6469] do_iter_readv_writev+0x62b/0x8d0 [ 134.622880][ T6469] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 134.622912][ T6469] ? rw_verify_area+0x2ac/0x4e0 [ 134.622938][ T6469] vfs_readv+0x292/0x850 [ 134.622965][ T6469] ? __pfx_vfs_readv+0x10/0x10 [ 134.622998][ T6469] ? __fget_files+0x2a/0x420 [ 134.623032][ T6469] ? __fget_files+0x3a6/0x420 [ 134.623053][ T6469] ? __fget_files+0x2a/0x420 [ 134.623079][ T6469] __se_sys_preadv2+0x187/0x2b0 [ 134.623096][ T6469] ? __pfx___se_sys_preadv2+0x10/0x10 [ 134.623114][ T6469] ? __x64_sys_preadv2+0x20/0xc0 [ 134.623132][ T6469] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.623152][ T6469] do_syscall_64+0x15f/0xf80 [ 134.623175][ T6469] ? trace_irq_disable+0x3b/0x140 [ 134.623197][ T6469] ? clear_bhb_loop+0x40/0x90 [ 134.623220][ T6469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.623239][ T6469] RIP: 0033:0x7f9bded0cdd9 [ 134.623252][ T6469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.623261][ T6469] RSP: 002b:00007f9bdcf66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 134.623275][ T6469] RAX: ffffffffffffffda RBX: 00007f9bdef85fa0 RCX: 00007f9bded0cdd9 [ 134.623282][ T6469] RDX: 0000000000000002 RSI: 0000200000000080 RDI: 0000000000000003 [ 134.623289][ T6469] RBP: 00007f9bdcf66090 R08: 0000000000000000 R09: 0000000000000000 [ 134.623299][ T6469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 134.623310][ T6469] R13: 00007f9bdef86038 R14: 00007f9bdef85fa0 R15: 00007ffe55d0f248 [ 134.623340][ T6469] [ 134.737049][ T9] hub 3-1:0.0: 1 port detected [ 135.205768][ T37] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 135.358076][ T37] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 134, changing to 11 [ 135.358111][ T37] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42666, setting to 1024 [ 135.358344][ T37] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 135.358366][ T37] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.373984][ T37] usb 2-1: config 0 descriptor?? [ 135.377119][ T6471] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 135.515512][ T9] hub 3-1:0.0: activate --> -90 [ 135.717114][ T9] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 135.728943][ T5940] usb 3-1: USB disconnect, device number 18 [ 135.735990][ T12] usb 3-1: Failed to suspend device, error -19 [ 135.810921][ T37] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 135.811113][ T37] cm6533_jd 0003:0D8C:0022.0006: item fetching failed at offset 4/5 [ 135.819984][ T37] cm6533_jd 0003:0D8C:0022.0006: parse failed [ 135.821530][ T37] cm6533_jd 0003:0D8C:0022.0006: probe with driver cm6533_jd failed with error -22 [ 135.884836][ T32] gspca_zc3xx: i2c_w status error 0c [ 136.503576][ T32] gspca_zc3xx: reg_r err -32 [ 136.640733][ T5226] usb 2-1: USB disconnect, device number 16 [ 136.716785][ T6485] input: syz1 as /devices/virtual/input/input37 [ 136.806644][ T5885] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 136.968697][ T5885] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 136.968730][ T5885] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 136.972138][ T5885] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 136.972165][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.972185][ T5885] usb 3-1: Product: syz [ 136.972199][ T5885] usb 3-1: Manufacturer: syz [ 136.972213][ T5885] usb 3-1: SerialNumber: syz [ 136.995443][ T5885] usb 3-1: config 0 descriptor?? [ 137.006343][ T6478] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 137.006511][ T6478] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 137.087814][ T32] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 137.087965][ T32] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 137.209509][ T6478] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 137.209752][ T6478] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 137.485833][ T5940] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 137.564450][ T32] usb 1-1: USB disconnect, device number 14 [ 137.600974][ T6500] FAULT_INJECTION: forcing a failure. [ 137.600974][ T6500] name failslab, interval 1, probability 0, space 0, times 0 [ 137.601007][ T6500] CPU: 0 UID: 0 PID: 6500 Comm: syz.0.187 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 137.601028][ T6500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 137.601039][ T6500] Call Trace: [ 137.601047][ T6500] [ 137.601054][ T6500] dump_stack_lvl+0xe8/0x150 [ 137.601081][ T6500] should_fail_ex+0x46b/0x600 [ 137.601119][ T6500] should_failslab+0xa8/0x100 [ 137.601150][ T6500] kmem_cache_alloc_noprof+0x87/0x680 [ 137.601166][ T6500] ? rcu_is_watching+0x15/0xb0 [ 137.601182][ T6500] ? security_file_alloc+0x34/0x310 [ 137.601208][ T6500] security_file_alloc+0x34/0x310 [ 137.601231][ T6500] init_file+0x96/0x2d0 [ 137.601256][ T6500] alloc_empty_file_noaccount+0x40/0xd0 [ 137.601280][ T6500] kernel_tmpfile_open+0x2a/0x90 [ 137.601304][ T6500] ovl_fill_super+0x3c75/0x5e20 [ 137.601337][ T6500] ? __pfx_ovl_fill_super+0x10/0x10 [ 137.601355][ T6500] ? __lock_acquire+0x6b5/0x2cf0 [ 137.601386][ T6500] ? __lock_acquire+0x6b5/0x2cf0 [ 137.601418][ T6500] ? __lock_acquire+0x6b5/0x2cf0 [ 137.601446][ T6500] ? do_raw_spin_lock+0x12b/0x2f0 [ 137.601471][ T6500] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 137.601486][ T6500] ? lockdep_hardirqs_on+0x7a/0x110 [ 137.601499][ T6500] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 137.601513][ T6500] ? rt_mutex_slowunlock+0x1cb/0x300 [ 137.601536][ T6500] ? __raw_spin_lock_init+0x45/0x100 [ 137.601570][ T6500] ? sget_fc+0x962/0xa40 [ 137.601597][ T6500] ? __pfx_set_anon_super_fc+0x10/0x10 [ 137.601621][ T6500] ? __pfx_ovl_fill_super+0x10/0x10 [ 137.601640][ T6500] get_tree_nodev+0xbb/0x150 [ 137.601655][ T6500] vfs_get_tree+0x92/0x2a0 [ 137.601671][ T6500] do_new_mount+0x341/0xd30 [ 137.601685][ T6500] ? apparmor_capable+0x126/0x170 [ 137.601710][ T6500] ? __pfx_do_new_mount+0x10/0x10 [ 137.601738][ T6500] ? ns_capable+0x89/0xe0 [ 137.601761][ T6500] ? path_mount+0x690/0x10e0 [ 137.601785][ T6500] ? user_path_at+0xd4/0x160 [ 137.601805][ T6500] ? user_path_at+0xd4/0x160 [ 137.601819][ T6500] __se_sys_mount+0x31d/0x420 [ 137.601834][ T6500] ? __pfx___se_sys_mount+0x10/0x10 [ 137.601854][ T6500] ? __x64_sys_mount+0x20/0xc0 [ 137.601874][ T6500] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.601895][ T6500] do_syscall_64+0x15f/0xf80 [ 137.601920][ T6500] ? trace_irq_disable+0x3b/0x140 [ 137.601942][ T6500] ? clear_bhb_loop+0x40/0x90 [ 137.601963][ T6500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.601975][ T6500] RIP: 0033:0x7f9db9cccdd9 [ 137.601987][ T6500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.601996][ T6500] RSP: 002b:00007f9db7f26028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 137.602008][ T6500] RAX: ffffffffffffffda RBX: 00007f9db9f45fa0 RCX: 00007f9db9cccdd9 [ 137.602020][ T6500] RDX: 0000200000000040 RSI: 0000200000000100 RDI: 0000000000000000 [ 137.602032][ T6500] RBP: 00007f9db7f26090 R08: 0000200000000200 R09: 0000000000000000 [ 137.602045][ T6500] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002 [ 137.602056][ T6500] R13: 00007f9db9f46038 R14: 00007f9db9f45fa0 R15: 00007fff4db8af18 [ 137.602087][ T6500] [ 137.602348][ T6500] overlayfs: upper fs does not support tmpfile. [ 137.645746][ T5940] usb 4-1: Using ep0 maxpacket: 32 [ 137.668755][ T5940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.668787][ T5940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.668824][ T5940] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 137.668846][ T5940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.692669][ T5940] usb 4-1: config 0 descriptor?? [ 137.695431][ T5885] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 137.700491][ T5940] hub 4-1:0.0: USB hub found [ 137.928717][ T5940] hub 4-1:0.0: 1 port detected [ 138.292347][ T5885] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 138.397474][ T5885] dm9601 3-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet, 36:7e:7a:d1:5f:5d [ 138.402335][ T5885] usb 3-1: USB disconnect, device number 19 [ 138.408485][ T5885] dm9601 3-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet [ 138.537225][ T5940] hub 4-1:0.0: activate --> -90 [ 138.751001][ C0] raw-gadget.2 gadget.3: ignoring, device is not running [ 138.752234][ C0] raw-gadget.2 gadget.3: ignoring, device is not running [ 138.752541][ C0] raw-gadget.2 gadget.3: ignoring, device is not running [ 138.753702][ T5940] hub 4-1:0.0: hub_ext_port_status failed (err = -32) [ 138.806520][ T5226] usb 4-1: USB disconnect, device number 18 [ 139.015728][ T32] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 139.125763][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 139.166790][ T32] usb 2-1: unable to get BOS descriptor or descriptor too short [ 139.167307][ T32] usb 2-1: not running at top speed; connect to a high speed hub [ 139.168482][ T32] usb 2-1: config 251 has an invalid descriptor of length 38, skipping remainder of the config [ 139.168506][ T32] usb 2-1: config 251 has 0 interfaces, different from the descriptor's value: 1 [ 139.170607][ T32] usb 2-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.00 [ 139.170629][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.170639][ T32] usb 2-1: Product: syz [ 139.170647][ T32] usb 2-1: Manufacturer: syz [ 139.170654][ T32] usb 2-1: SerialNumber: syz [ 139.280833][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 139.282453][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.282474][ T9] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 139.282514][ T9] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 139.282554][ T9] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 139.282588][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 139.282613][ T9] usb 1-1: config 1 interface 1 has no altsetting 0 [ 139.289344][ T9] usb 1-1: string descriptor 0 read error: -22 [ 139.289474][ T9] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 139.289498][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.463747][ T32] usb 2-1: USB disconnect, device number 17 [ 139.572599][ T6520] No source specified [ 139.797065][ T5226] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 139.835811][ T5940] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 139.898814][ T9] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 139.898843][ T9] usb 1-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 139.898861][ T9] usb 1-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 139.975845][ T5226] usb 4-1: Using ep0 maxpacket: 8 [ 139.981005][ T5226] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 140.024813][ T5940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.024847][ T5940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9216, setting to 1024 [ 140.059321][ T5940] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 140.059350][ T5940] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 140.059369][ T5940] usb 3-1: Manufacturer: syz [ 140.076782][ T5226] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 140.076811][ T5226] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.076830][ T5226] usb 4-1: Product: syz [ 140.076844][ T5226] usb 4-1: Manufacturer: syz [ 140.076858][ T5226] usb 4-1: SerialNumber: syz [ 140.132352][ T5940] usb 3-1: config 0 descriptor?? [ 140.194666][ T5226] usb 4-1: config 0 descriptor?? [ 140.252527][ T5226] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 140.605586][ T6525] fuse: Unknown parameter 'ö:' [ 140.870977][ T9] usb 1-1: USB disconnect, device number 15 [ 141.784074][ T5940] uclogic 0003:256C:006D.0007: failed retrieving string descriptor #100: -71 [ 141.784121][ T5940] uclogic 0003:256C:006D.0007: failed retrieving pen parameters: -71 [ 141.784136][ T5940] uclogic 0003:256C:006D.0007: failed probing pen v1 parameters: -71 [ 141.784187][ T5940] uclogic 0003:256C:006D.0007: failed probing parameters: -71 [ 141.784268][ T5940] uclogic 0003:256C:006D.0007: probe with driver uclogic failed with error -71 [ 141.845900][ T5940] usb 3-1: USB disconnect, device number 20 [ 142.235760][ T5893] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 142.291677][ T5226] gspca_zc3xx: i2c_w status error 0c [ 142.392432][ T5893] usb 2-1: unable to get BOS descriptor or descriptor too short [ 142.393854][ T5893] usb 2-1: not running at top speed; connect to a high speed hub [ 142.396976][ T5893] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 142.397007][ T5893] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 142.416018][ T5893] usb 2-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 142.416046][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.416115][ T5893] usb 2-1: Product: syz [ 142.416130][ T5893] usb 2-1: Manufacturer: syz [ 142.416143][ T5893] usb 2-1: SerialNumber: syz [ 142.509791][ T6538] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 142.718636][ T6538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.719743][ T6538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.751839][ T5893] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 142.751917][ T5893] usb 2-1: MIDIStreaming interface descriptor not found [ 142.887235][ T37] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 142.900572][ T5226] gspca_zc3xx: reg_r err -32 [ 142.964146][ T5893] usb 2-1: USB disconnect, device number 18 [ 143.035745][ T37] usb 3-1: Using ep0 maxpacket: 8 [ 143.040542][ T37] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 143.040566][ T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.040577][ T37] usb 3-1: Product: syz [ 143.040584][ T37] usb 3-1: Manufacturer: syz [ 143.040592][ T37] usb 3-1: SerialNumber: syz [ 143.131122][ T37] usb 3-1: config 0 descriptor?? [ 143.235747][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 143.347898][ T37] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 143.385824][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 143.387854][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.387883][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.387918][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 143.387939][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.395375][ T9] usb 1-1: config 0 descriptor?? [ 143.485958][ T5226] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 143.486020][ T5226] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 143.498372][ T9] hub 1-1:0.0: USB hub found [ 143.623096][ T9] hub 1-1:0.0: 1 port detected [ 143.950292][ T5940] usb 4-1: USB disconnect, device number 19 [ 144.234384][ T9] hub 1-1:0.0: activate --> -90 [ 144.441356][ T9] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 144.442696][ T5894] usb 1-1: USB disconnect, device number 16 [ 144.443933][ T1028] usb 1-1: Failed to suspend device, error -19 [ 144.526135][ T5893] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 144.678006][ T5893] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.678042][ T5893] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 144.678055][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.687224][ T5893] usb 2-1: config 0 descriptor?? [ 144.700895][ T5893] pwc: Askey VC010 type 2 USB webcam detected. [ 144.776128][ T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 144.862801][ T37] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 144.870496][ T37] usb 3-1: USB disconnect, device number 21 [ 144.936893][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 144.939775][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.939807][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.939845][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 144.939869][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.992152][ T10] usb 4-1: config 0 descriptor?? [ 145.018305][ T10] hub 4-1:0.0: USB hub found [ 145.100392][ T6564] netlink: 'syz.0.210': attribute type 1 has an invalid length. [ 145.100644][ T6564] netlink: 'syz.0.210': attribute type 3 has an invalid length. [ 145.100663][ T6564] netlink: 224 bytes leftover after parsing attributes in process `syz.0.210'. [ 145.123688][ T5893] pwc: recv_control_msg error -32 req 02 val 2b00 [ 145.139759][ T6564] netlink: 'syz.0.210': attribute type 2 has an invalid length. [ 145.219337][ T10] hub 4-1:0.0: 1 port detected [ 145.325319][ T5893] pwc: recv_control_msg error -32 req 02 val 2c00 [ 145.343602][ T5893] pwc: recv_control_msg error -32 req 04 val 1000 [ 145.344264][ T5893] pwc: recv_control_msg error -32 req 04 val 1300 [ 145.345050][ T5893] pwc: recv_control_msg error -32 req 04 val 1400 [ 145.346729][ T5893] pwc: recv_control_msg error -32 req 02 val 2000 [ 145.372910][ T5893] pwc: recv_control_msg error -32 req 02 val 2100 [ 145.373869][ T5893] pwc: recv_control_msg error -32 req 04 val 1500 [ 145.374481][ T5893] pwc: recv_control_msg error -32 req 02 val 2500 [ 145.375122][ T5893] pwc: recv_control_msg error -32 req 02 val 2400 [ 145.580593][ T5893] pwc: recv_control_msg error -32 req 02 val 2900 [ 145.585471][ T5893] pwc: recv_control_msg error -32 req 02 val 2800 [ 145.690831][ T6571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.692513][ T6571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.790687][ T5893] pwc: recv_control_msg error -71 req 04 val 1200 [ 145.808435][ T5893] pwc: Registered as video103. [ 145.814000][ T5893] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input38 [ 145.830219][ T10] hub 4-1:0.0: activate --> -90 [ 145.836331][ T5893] usb 2-1: USB disconnect, device number 19 [ 145.917282][ T37] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 146.045794][ T37] usb 3-1: device descriptor read/64, error -71 [ 146.228732][ T5893] usb 4-1: USB disconnect, device number 20 [ 146.286057][ T37] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 146.393663][ T6576] FAULT_INJECTION: forcing a failure. [ 146.393663][ T6576] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.393695][ T6576] CPU: 1 UID: 0 PID: 6576 Comm: syz.1.214 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 146.393716][ T6576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 146.393726][ T6576] Call Trace: [ 146.393733][ T6576] [ 146.393741][ T6576] dump_stack_lvl+0xe8/0x150 [ 146.393766][ T6576] should_fail_ex+0x46b/0x600 [ 146.393798][ T6576] _copy_to_user+0x31/0xb0 [ 146.393819][ T6576] simple_read_from_buffer+0xe1/0x170 [ 146.393852][ T6576] proc_fail_nth_read+0x1be/0x230 [ 146.393878][ T6576] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 146.393903][ T6576] ? rw_verify_area+0x2ac/0x4e0 [ 146.393928][ T6576] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 146.393952][ T6576] vfs_read+0x212/0xa80 [ 146.393985][ T6576] ? __pfx_vfs_read+0x10/0x10 [ 146.394012][ T6576] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 146.394036][ T6576] ? lockdep_hardirqs_on+0x7a/0x110 [ 146.394059][ T6576] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 146.394081][ T6576] ? mutex_lock_nested+0x152/0x1d0 [ 146.394099][ T6576] ? fdget_pos+0x252/0x320 [ 146.394126][ T6576] ksys_read+0x156/0x270 [ 146.394153][ T6576] ? __pfx_ksys_read+0x10/0x10 [ 146.394177][ T6576] ? __pfx_tty_ioctl+0x10/0x10 [ 146.394203][ T6576] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.394222][ T6576] do_syscall_64+0x15f/0xf80 [ 146.394244][ T6576] ? trace_irq_disable+0x3b/0x140 [ 146.394264][ T6576] ? clear_bhb_loop+0x40/0x90 [ 146.394288][ T6576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.394306][ T6576] RIP: 0033:0x7fbfea53d60e [ 146.394324][ T6576] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 146.394339][ T6576] RSP: 002b:00007fbfe87d5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 146.394359][ T6576] RAX: ffffffffffffffda RBX: 00007fbfe87d66c0 RCX: 00007fbfea53d60e [ 146.394372][ T6576] RDX: 000000000000000f RSI: 00007fbfe87d60a0 RDI: 0000000000000004 [ 146.394383][ T6576] RBP: 00007fbfe87d6090 R08: 0000000000000000 R09: 0000000000000000 [ 146.394395][ T6576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.394406][ T6576] R13: 00007fbfea7f6038 R14: 00007fbfea7f5fa0 R15: 00007ffe60ebc768 [ 146.394437][ T6576] [ 146.416027][ T37] usb 3-1: device descriptor read/64, error -71 [ 146.526229][ T37] usb usb3-port1: attempt power cycle [ 146.705814][ T32] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 146.857801][ T32] usb 2-1: Using ep0 maxpacket: 8 [ 146.867038][ T37] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 146.884158][ T32] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 146.886891][ T37] usb 3-1: device descriptor read/8, error -71 [ 146.895005][ T6580] netlink: 48 bytes leftover after parsing attributes in process `syz.0.215'. [ 146.919149][ T32] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 146.919178][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.919197][ T32] usb 2-1: Product: syz [ 146.919210][ T32] usb 2-1: Manufacturer: syz [ 146.919224][ T32] usb 2-1: SerialNumber: syz [ 146.927313][ T32] usb 2-1: config 0 descriptor?? [ 146.948295][ T32] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 147.125846][ T37] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 147.149141][ T37] usb 3-1: device descriptor read/8, error -71 [ 147.155805][ T5893] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 147.256071][ T37] usb usb3-port1: unable to enumerate USB device [ 147.285805][ T5893] usb 4-1: device descriptor read/64, error -71 [ 147.565844][ T5893] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 147.695871][ T5893] usb 4-1: device descriptor read/64, error -71 [ 147.811607][ T5893] usb usb4-port1: attempt power cycle [ 147.935817][ T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 148.065767][ T10] usb 1-1: device descriptor read/64, error -71 [ 148.155939][ T5893] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 148.181791][ T5893] usb 4-1: device descriptor read/8, error -71 [ 148.305706][ T10] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 148.415728][ T5893] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 148.435706][ T10] usb 1-1: device descriptor read/64, error -71 [ 148.436273][ T5893] usb 4-1: device descriptor read/8, error -71 [ 148.546233][ T10] usb usb1-port1: attempt power cycle [ 148.549376][ T5893] usb usb4-port1: unable to enumerate USB device [ 148.822852][ T6589] overlay: Unknown parameter 'context' [ 148.895737][ T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 148.916374][ T10] usb 1-1: device descriptor read/8, error -71 [ 148.985018][ T32] gspca_zc3xx: i2c_w status error 0c [ 149.085919][ T5893] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 149.155728][ T10] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 149.176499][ T10] usb 1-1: device descriptor read/8, error -71 [ 149.235724][ T5893] usb 3-1: Using ep0 maxpacket: 8 [ 149.242012][ T5893] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 149.242042][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.242097][ T5893] usb 3-1: Product: syz [ 149.242105][ T5893] usb 3-1: Manufacturer: syz [ 149.242113][ T5893] usb 3-1: SerialNumber: syz [ 149.287054][ T5893] usb 3-1: config 0 descriptor?? [ 149.296826][ T10] usb usb1-port1: unable to enumerate USB device [ 149.507947][ T5893] dvb_usb_rtl28xxu 3-1:0.0: chip type detection failed -71 [ 149.508011][ T5893] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 149.537121][ T5893] usb 3-1: USB disconnect, device number 26 [ 149.588300][ T32] gspca_zc3xx: reg_r err -32 [ 149.988373][ T6594] netlink: 'syz.3.221': attribute type 1 has an invalid length. [ 149.988386][ T6594] netlink: 'syz.3.221': attribute type 3 has an invalid length. [ 149.988393][ T6594] netlink: 224 bytes leftover after parsing attributes in process `syz.3.221'. [ 150.001906][ T6594] netlink: 'syz.3.221': attribute type 2 has an invalid length. [ 150.175777][ T32] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 150.175854][ T32] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 150.335792][ T10] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 150.508733][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.508798][ T10] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 150.508821][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.513456][ T10] usb 3-1: config 0 descriptor?? [ 150.552879][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 150.620696][ T32] usb 2-1: USB disconnect, device number 20 [ 150.772874][ T6602] loop5: detected capacity change from 0 to 7 [ 150.773998][ T6602] loop5: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 150.774028][ T6602] loop5: partition table partially beyond EOD, truncated [ 150.774242][ T6602] loop5: p1 size 650043498 extends beyond EOD, truncated [ 150.777088][ T6602] loop5: p2 start 191791756 is beyond EOD, truncated [ 150.850534][ T5836] udevd[5836]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 150.930537][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 151.025803][ T32] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 151.134095][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 151.136750][ T5893] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 151.155319][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 151.157487][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 151.168709][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 151.170006][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 151.173239][ T10] pwc: recv_control_msg error -32 req 02 val 2100 [ 151.173786][ T10] pwc: recv_control_msg error -32 req 04 val 1500 [ 151.174301][ T10] pwc: recv_control_msg error -32 req 02 val 2500 [ 151.174821][ T10] pwc: recv_control_msg error -32 req 02 val 2400 [ 151.219268][ T32] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.219313][ T32] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 151.219326][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.227772][ T32] usb 2-1: config 0 descriptor?? [ 151.267497][ T32] pwc: Askey VC010 type 2 USB webcam detected. [ 151.300685][ T5893] usb 1-1: Using ep0 maxpacket: 32 [ 151.307580][ T5893] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.307612][ T5893] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.307647][ T5893] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 151.307726][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.353138][ T5893] usb 1-1: config 0 descriptor?? [ 151.378373][ T10] pwc: recv_control_msg error -32 req 02 val 2900 [ 151.379013][ T5893] hub 1-1:0.0: USB hub found [ 151.379043][ T10] pwc: recv_control_msg error -32 req 02 val 2800 [ 151.565815][ T5893] hub 1-1:0.0: 1 port detected [ 151.614256][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 151.628256][ T10] pwc: Registered as video103. [ 151.641093][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input39 [ 151.656053][ T5885] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 151.667831][ T32] pwc: recv_control_msg error -32 req 02 val 2b00 [ 151.678376][ T6600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.698545][ T6600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.698563][ T10] usb 3-1: USB disconnect, device number 27 [ 151.753928][ T32] pwc: recv_control_msg error -32 req 02 val 2700 [ 151.803969][ T32] pwc: recv_control_msg error -71 req 02 val 2c00 [ 151.807122][ T32] pwc: recv_control_msg error -71 req 04 val 1000 [ 151.810025][ T32] pwc: recv_control_msg error -71 req 04 val 1300 [ 151.811958][ T32] pwc: recv_control_msg error -71 req 04 val 1400 [ 151.814520][ T32] pwc: recv_control_msg error -71 req 02 val 2000 [ 151.818550][ T5885] usb 4-1: Using ep0 maxpacket: 8 [ 151.819486][ T32] pwc: recv_control_msg error -71 req 02 val 2100 [ 151.820399][ T32] pwc: recv_control_msg error -71 req 04 val 1500 [ 151.821640][ T32] pwc: recv_control_msg error -71 req 02 val 2500 [ 151.822652][ T32] pwc: recv_control_msg error -71 req 02 val 2400 [ 151.823078][ T32] pwc: recv_control_msg error -71 req 02 val 2600 [ 151.824905][ T32] pwc: recv_control_msg error -71 req 02 val 2900 [ 151.825352][ T32] pwc: recv_control_msg error -71 req 02 val 2800 [ 151.827978][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.828008][ T5885] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 151.828048][ T5885] usb 4-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 151.828069][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.833311][ T32] pwc: recv_control_msg error -71 req 04 val 1100 [ 151.834048][ T32] pwc: recv_control_msg error -71 req 04 val 1200 [ 151.982129][ T5885] usb 4-1: config 0 descriptor?? [ 151.984519][ T32] pwc: Registered as video103. [ 151.992402][ T32] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input40 [ 152.083342][ T32] usb 2-1: USB disconnect, device number 21 [ 152.172802][ T37] hub 1-1:0.0: activate --> -90 [ 152.483395][ T6615] netlink: 88 bytes leftover after parsing attributes in process `syz.1.228'. [ 152.576888][ T5940] usb 1-1: USB disconnect, device number 21 [ 152.605830][ T10] usb 3-1: new low-speed USB device number 28 using dummy_hcd [ 152.608300][ T6606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.619081][ T6606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.755722][ T10] usb 3-1: Invalid ep0 maxpacket: 16 [ 152.755776][ T32] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 152.822078][ T6606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.823083][ T6606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.905761][ T10] usb 3-1: new low-speed USB device number 29 using dummy_hcd [ 152.917619][ T32] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.919869][ T32] usb 2-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 152.919885][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.919895][ T32] usb 2-1: Product: syz [ 152.919903][ T32] usb 2-1: Manufacturer: syz [ 152.919910][ T32] usb 2-1: SerialNumber: syz [ 152.924487][ T32] usb 2-1: config 0 descriptor?? [ 152.990437][ T5885] usbhid 4-1:0.0: can't add hid device: -71 [ 152.990558][ T5885] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 153.002674][ T5885] usb 4-1: USB disconnect, device number 25 [ 153.076113][ T10] usb 3-1: Invalid ep0 maxpacket: 16 [ 153.076513][ T10] usb usb3-port1: attempt power cycle [ 153.270912][ T6615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.271859][ T6615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.359413][ T9] usb 2-1: USB disconnect, device number 22 [ 153.435963][ T10] usb 3-1: new low-speed USB device number 30 using dummy_hcd [ 153.466368][ T10] usb 3-1: Invalid ep0 maxpacket: 16 [ 153.566091][ T5940] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 153.615789][ T10] usb 3-1: new low-speed USB device number 31 using dummy_hcd [ 153.636396][ T10] usb 3-1: Invalid ep0 maxpacket: 16 [ 153.636847][ T10] usb usb3-port1: unable to enumerate USB device [ 153.716204][ T5940] usb 1-1: Using ep0 maxpacket: 8 [ 153.717824][ T5940] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 153.720404][ T5940] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 153.720430][ T5940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.720450][ T5940] usb 1-1: Product: syz [ 153.720463][ T5940] usb 1-1: Manufacturer: syz [ 153.720473][ T5940] usb 1-1: SerialNumber: syz [ 153.725207][ T5940] usb 1-1: config 0 descriptor?? [ 153.776521][ T5835] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 153.793793][ T5940] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 153.905836][ T5835] usb 4-1: device descriptor read/64, error -71 [ 154.167215][ T5835] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 154.197400][ T6632] netlink: 'syz.1.234': attribute type 1 has an invalid length. [ 154.197419][ T6632] netlink: 'syz.1.234': attribute type 3 has an invalid length. [ 154.197432][ T6632] netlink: 224 bytes leftover after parsing attributes in process `syz.1.234'. [ 154.240801][ T6632] netlink: 'syz.1.234': attribute type 2 has an invalid length. [ 154.298623][ T5835] usb 4-1: device descriptor read/64, error -71 [ 154.305290][ C1] [ 154.305300][ C1] ====================================================== [ 154.305308][ C1] WARNING: possible circular locking dependency detected [ 154.305327][ C1] syzkaller #0 Not tainted [ 154.305337][ C1] ------------------------------------------------------ [ 154.305344][ C1] syz.1.234/6633 is trying to acquire lock: [ 154.305354][ C1] ffff88805d2f5a20 (slock-AF_PHONET){+...}-{3:3}, at: __sk_receive_skb+0x1f1/0x9e0 [ 154.305389][ C1] [ 154.305389][ C1] but task is already holding lock: [ 154.305392][ C1] ffff88805d2f48a0 (slock-AF_PHONET/1){+.+.}-{3:3}, at: __sk_receive_skb+0x1bf/0x9e0 [ 154.305416][ C1] [ 154.305416][ C1] which lock already depends on the new lock. [ 154.305416][ C1] [ 154.305421][ C1] [ 154.305421][ C1] the existing dependency chain (in reverse order) is: [ 154.305427][ C1] [ 154.305427][ C1] -> #1 (slock-AF_PHONET/1){+.+.}-{3:3}: [ 154.305455][ C1] rt_spin_lock_nested+0x81/0x3f0 [ 154.305476][ C1] __sk_receive_skb+0x1bf/0x9e0 [ 154.305495][ C1] pep_do_rcv+0x685/0xaa0 [ 154.305512][ C1] __sk_receive_skb+0x962/0x9e0 [ 154.305529][ C1] phonet_rcv+0x781/0xc40 [ 154.305536][ C1] process_backlog+0x5e1/0xc60 [ 154.305546][ C1] __napi_poll+0xab/0x550 [ 154.305555][ C1] net_rx_action+0x696/0xe00 [ 154.305564][ C1] handle_softirqs+0x1de/0x6d0 [ 154.305573][ C1] __local_bh_enable_ip+0x170/0x2b0 [ 154.305585][ C1] __dev_queue_xmit+0x1eaf/0x3900 [ 154.305604][ C1] ip6_output+0x340/0x550 [ 154.305627][ C1] NF_HOOK+0x177/0x4f0 [ 154.305641][ C1] mld_sendpack+0x8b4/0xe40 [ 154.305655][ C1] mld_ifc_work+0x835/0xe70 [ 154.305678][ C1] process_one_work+0x9a3/0x1710 [ 154.305693][ C1] worker_thread+0xba8/0x11e0 [ 154.305706][ C1] kthread+0x388/0x470 [ 154.305724][ C1] ret_from_fork+0x514/0xb70 [ 154.305742][ C1] ret_from_fork_asm+0x1a/0x30 [ 154.305761][ C1] [ 154.305761][ C1] -> #0 (slock-AF_PHONET){+...}-{3:3}: [ 154.305786][ C1] __lock_acquire+0x15a5/0x2cf0 [ 154.305808][ C1] lock_acquire+0x106/0x350 [ 154.305827][ C1] rt_spin_lock+0x83/0x400 [ 154.305843][ C1] __sk_receive_skb+0x1f1/0x9e0 [ 154.305862][ C1] phonet_rcv+0x781/0xc40 [ 154.305876][ C1] process_backlog+0x5e1/0xc60 [ 154.305894][ C1] __napi_poll+0xab/0x550 [ 154.305911][ C1] net_rx_action+0x696/0xe00 [ 154.305930][ C1] handle_softirqs+0x1de/0x6d0 [ 154.305946][ C1] __local_bh_enable_ip+0x170/0x2b0 [ 154.305964][ C1] netif_rx+0xb9/0xf0 [ 154.305985][ C1] pn_send+0x62a/0x8e0 [ 154.305999][ C1] pn_skb_send+0x218/0x530 [ 154.306013][ C1] pipe_snd_status+0x1f1/0x320 [ 154.306038][ C1] pipe_do_rcv+0xf15/0x16a0 [ 154.306055][ C1] __sk_receive_skb+0x962/0x9e0 [ 154.306074][ C1] pep_do_rcv+0x685/0xaa0 [ 154.306091][ C1] __release_sock+0x2a9/0x3d0 [ 154.306107][ C1] release_sock+0x1be/0x290 [ 154.306126][ C1] pep_sock_accept+0xd47/0x11e0 [ 154.306143][ C1] pn_socket_accept+0xc1/0x310 [ 154.306166][ C1] do_accept+0x6ca/0x930 [ 154.306185][ C1] __sys_accept4+0x139/0x230 [ 154.306204][ C1] __x64_sys_accept4+0x9a/0xb0 [ 154.306222][ C1] do_syscall_64+0x15f/0xf80 [ 154.306244][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.306262][ C1] [ 154.306262][ C1] other info that might help us debug this: [ 154.306262][ C1] [ 154.306268][ C1] Possible unsafe locking scenario: [ 154.306268][ C1] [ 154.306274][ C1] CPU0 CPU1 [ 154.306280][ C1] ---- ---- [ 154.306286][ C1] lock(slock-AF_PHONET/1); [ 154.306303][ C1] lock(slock-AF_PHONET); [ 154.306317][ C1] lock(slock-AF_PHONET/1); [ 154.306335][ C1] lock(slock-AF_PHONET); [ 154.306347][ C1] [ 154.306347][ C1] *** DEADLOCK *** [ 154.306347][ C1] [ 154.306352][ C1] 6 locks held by syz.1.234/6633: [ 154.306363][ C1] #0: ffff88805d2f6398 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: pep_sock_accept+0x107/0x11e0 [ 154.306408][ C1] #1: ffff88805d2f48a0 (slock-AF_PHONET/1){+.+.}-{3:3}, at: __sk_receive_skb+0x1bf/0x9e0 [ 154.306457][ C1] #2: ffffffff8e3c81c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock_nested+0x1de/0x3f0 [ 154.306501][ C1] #3: ffff88805d2f4958 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: pep_do_rcv+0x685/0xaa0 [ 154.306545][ C1] #4: ffffffff8e3c81c0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 154.306587][ C1] #5: ffffffff8e3c81c0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x271/0xc60 [ 154.306632][ C1] [ 154.306632][ C1] stack backtrace: [ 154.306643][ C1] CPU: 1 UID: 0 PID: 6633 Comm: syz.1.234 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 154.306664][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 154.306675][ C1] Call Trace: [ 154.306682][ C1] [ 154.306690][ C1] dump_stack_lvl+0xe8/0x150 [ 154.306710][ C1] print_circular_bug+0x2e1/0x300 [ 154.306738][ C1] check_noncircular+0x12e/0x150 [ 154.306766][ C1] __lock_acquire+0x15a5/0x2cf0 [ 154.306796][ C1] ? __sk_receive_skb+0x1f1/0x9e0 [ 154.306816][ C1] lock_acquire+0x106/0x350 [ 154.306838][ C1] ? __sk_receive_skb+0x1f1/0x9e0 [ 154.306860][ C1] ? sk_filter_trim_cap+0x8f1/0xce0 [ 154.306883][ C1] rt_spin_lock+0x83/0x400 [ 154.306902][ C1] ? __sk_receive_skb+0x1f1/0x9e0 [ 154.306924][ C1] ? __pfx_sk_filter_trim_cap+0x10/0x10 [ 154.306944][ C1] ? __pfx_rt_spin_lock+0x10/0x10 [ 154.306964][ C1] ? pn_find_sock_by_sa+0x94/0x510 [ 154.306990][ C1] __sk_receive_skb+0x1f1/0x9e0 [ 154.307014][ C1] phonet_rcv+0x781/0xc40 [ 154.307037][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 154.307064][ C1] ? __pfx_phonet_rcv+0x10/0x10 [ 154.307083][ C1] ? process_backlog+0x271/0xc60 [ 154.307103][ C1] ? process_backlog+0x271/0xc60 [ 154.307122][ C1] ? __pfx_phonet_rcv+0x10/0x10 [ 154.307140][ C1] process_backlog+0x5e1/0xc60 [ 154.307167][ C1] __napi_poll+0xab/0x550 [ 154.307187][ C1] net_rx_action+0x696/0xe00 [ 154.307213][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 154.307233][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 154.307258][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 154.307286][ C1] ? enqueue_to_backlog+0x340/0xcb0 [ 154.307309][ C1] handle_softirqs+0x1de/0x6d0 [ 154.307330][ C1] __local_bh_enable_ip+0x170/0x2b0 [ 154.307350][ C1] netif_rx+0xb9/0xf0 [ 154.307374][ C1] pn_send+0x62a/0x8e0 [ 154.307393][ C1] pn_skb_send+0x218/0x530 [ 154.307412][ C1] pipe_snd_status+0x1f1/0x320 [ 154.307431][ C1] ? __pfx_pipe_snd_status+0x10/0x10 [ 154.307452][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 154.307476][ C1] pipe_do_rcv+0xf15/0x16a0 [ 154.307496][ C1] ? __pfx_pipe_do_rcv+0x10/0x10 [ 154.307517][ C1] ? __pfx_pipe_do_rcv+0x10/0x10 [ 154.307536][ C1] ? pep_do_rcv+0x685/0xaa0 [ 154.307555][ C1] __sk_receive_skb+0x962/0x9e0 [ 154.307579][ C1] pep_do_rcv+0x685/0xaa0 [ 154.307599][ C1] ? __pfx_pep_do_rcv+0x10/0x10 [ 154.307619][ C1] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 154.307636][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 154.307659][ C1] ? __pfx_pep_do_rcv+0x10/0x10 [ 154.307677][ C1] __release_sock+0x2a9/0x3d0 [ 154.307695][ C1] ? __release_sock+0xa4/0x3d0 [ 154.307713][ C1] release_sock+0x1be/0x290 [ 154.307733][ C1] ? release_sock+0x2f/0x290 [ 154.307753][ C1] pep_sock_accept+0xd47/0x11e0 [ 154.307775][ C1] ? __pfx_pep_sock_accept+0x10/0x10 [ 154.307793][ C1] ? aa_sk_perm+0x703/0x950 [ 154.307820][ C1] ? __pfx_aa_sk_perm+0x10/0x10 [ 154.307845][ C1] pn_socket_accept+0xc1/0x310 [ 154.307872][ C1] do_accept+0x6ca/0x930 [ 154.307895][ C1] ? __pfx_do_accept+0x10/0x10 [ 154.307924][ C1] __sys_accept4+0x139/0x230 [ 154.307946][ C1] ? __pfx___sys_accept4+0x10/0x10 [ 154.307967][ C1] ? __fget_files+0x2a/0x420 [ 154.307992][ C1] __x64_sys_accept4+0x9a/0xb0 [ 154.308014][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.308039][ C1] do_syscall_64+0x15f/0xf80 [ 154.308061][ C1] ? trace_irq_disable+0x3b/0x140 [ 154.308082][ C1] ? clear_bhb_loop+0x40/0x90 [ 154.308101][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.308120][ C1] RIP: 0033:0x7fbfea57cdd9 [ 154.308137][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.308154][ C1] RSP: 002b:00007fbfe87b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 154.308172][ C1] RAX: ffffffffffffffda RBX: 00007fbfea7f6090 RCX: 00007fbfea57cdd9 [ 154.308186][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 154.308197][ C1] RBP: 00007fbfea612d69 R08: 0000000000000000 R09: 0000000000000000 [ 154.308209][ C1] R10: 0000000000080000 R11: 0000000000000246 R12: 0000000000000000 [ 154.308221][ C1] R13: 00007fbfea7f6128 R14: 00007fbfea7f6090 R15: 00007ffe60ebc768 [ 154.308240][ C1] [ 154.425828][ T5835] usb usb4-port1: attempt power cycle [ 154.915720][ T5835] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 154.936878][ T5835] usb 4-1: device descriptor read/8, error -71 [ 155.245713][ T5835] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 155.277215][ T5835] usb 4-1: device descriptor read/8, error -71 [ 155.395854][ T5835] usb usb4-port1: unable to enumerate USB device [ 155.800012][ T5940] gspca_zc3xx: i2c_w status error 0c [ 156.402581][ T5940] gspca_zc3xx: reg_r err -32 [ 156.985708][ T5940] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 156.985788][ T5940] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 157.767694][ T32] usb 1-1: USB disconnect, device number 22