last executing test programs: 7.556449366s ago: executing program 3 (id=650): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f725616b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633b72fad6265a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329dffafc3612e325c1eb4a3ab2e156a97444800", "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"}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000500)={0x2, 0x0, @ioapic={0x10000, 0x8, 0x401, 0x80, 0x0, [{0x5, 0x10, 0xff, '\x00', 0x38}, {0x4, 0x1, 0x7c, '\x00', 0x31}, {0x2, 0xb3, 0x1, '\x00', 0xd}, {0x5, 0x9, 0x10, '\x00', 0x6}, {0x9, 0x7f, 0x4, '\x00', 0x79}, {0x7, 0x80, 0x0, '\x00', 0x6}, {0x4, 0x8, 0x1, '\x00', 0x5}, {0x52, 0x3, 0x3, '\x00', 0x9}, {0xfc, 0x2, 0x8, '\x00', 0xff}, {0xff, 0xb6, 0x9, '\x00', 0x80}, {0x6, 0x8, 0x6, '\x00', 0x1}, {0x1, 0x1, 0x7, '\x00', 0x4}, {0x8, 0xc, 0x5, '\x00', 0x6}, {0x5, 0x10, 0x8c, '\x00', 0x4}, {0x0, 0xc0, 0x7, '\x00', 0x1}, {0x8, 0x2, 0xfa}, {0x7, 0x6, 0x8, '\x00', 0x5}, {0x9, 0x0, 0xfa, '\x00', 0x5}, {0x1, 0x3, 0x6, '\x00', 0x6}, {0xf8, 0x4, 0xa, '\x00', 0xf8}, {0x8, 0x2, 0x1, '\x00', 0xf7}, {0x6, 0x6, 0x1, '\x00', 0xa}, {0x1, 0x0, 0x1, '\x00', 0x18}, {0x12, 0xe, 0x4, '\x00', 0x1}]}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]}) (fail_nth: 6) 6.792583904s ago: executing program 3 (id=653): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f725616b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633b72fad6265a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329dffafc3612e325c1eb4a3ab2e156a97444800", "0615e456c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a704b3952f81c68bb4ceeaad63206f88201638e87c4981cbf9332cbc9c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b44ce1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef69c502c6e1236bd381efd410165988847c1dcb98a18ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043182e88050dfd2a4784a5d1453610fb1f1c2bac36c3ecd3e6fb756ef8880debeef3636afd981d8af4ab119928448f90351aec113335eacf52a18c87738d9679d3acc032a16fbefc64776f363610a15b37bcd36e6a7cba931151b9c9ba5779d550e9ab21603a43a25f3b4895d8dc4f3ce0e7d5e964e888169ea79a0848e9338b3d34d62e963fbf98834f4455419907f0ffdb76373af77a34edee7789f56e7f01bdab9614a0d460f791a06e6cf5243bf2b3a1624a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6760c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b6ff1363ac862a540c7fab584cd051ce7ee951e0f121d43cff75afbdec6bc6f6e8f7db58c8086751320d22ee8582e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141ea4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8baf843fa399907cb526b791c5350ce29204cb6fe50b892a69ec6dbecc28f032a745738faa12c2a34222942fef0ec0511da5fe0b565ceac429da7cc25cfe0320b40a514723e2392a6a361032343edb79fd83cd0a354837153542fd61b3156b54c566036e493250c3a3214738e3cacc24a50d5dfd17d5008b4ca629c3062f3417cb69c48b8b888ae51256bb4e6c68e95a71a00383ad9df263f6a775ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20bcdcf2d12ea0684084ec0d693256e280025b23b5a08b7b1ebe7d41fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8f99424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835e1fcfff1da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ac0210f073765666100976ee1d928893f983580ea47a012144633b98e02c3e81869534ab985eb3a73e0bac892dac949f85db949285a6a7a490b1075467226af23df82d8dd09b7282490fbb3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fd0a440263cf0b304522a324b581ab274e7bdae5994316657b5c0ab0220d9b08739729f7a35d436878c182aec4f08dd161c11ee5b7937fae7835e8bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e61278c871e6dad6ceb89aa4d7245658a63e65cec7b81d307426a60a31cc917844a14e1d9ad83bef1c9f736d1836687c950d1275caece0d46ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d06158390660a52a6e44b524c1e16de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff2c847d6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8528b72e0a149b082c731575b2e2763e67c821ba29eecd8b8c87981c4fb1fbbaaa4e8aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856b2db3fbb2fafb76983eabc51a348e55789e997fa25cbe6e5031bd2e33d4e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe21825e3295774db0c9b1340ea28a96589ba0d9f79aa61b92aea6f704ef7f716d849b8c77e6922e198a086d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948d598980d63c1d7aade89d0637d80a4c102a35eb027a08ef90cc20d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d0292ad912d934574f9d55d2152dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e988869fb5cd9612db97e6cc574444f4b5025ec9827bafc55341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038033b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d16607cd4ede16344e60d8707357e82b1089258c56d851a435e23ce0919825e04471dd61a44c43e87c2959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd7799291969851cd4c3f22b5f870a275a692188dafcf6e89ba87b0eb61011de031fda25fb3349901d40da2bbdb76eda417c9fafd90fb23504ab150ca0033ea1d00000000000086ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328302671fab46613b73daf2ace80aff2f80f6a9d84b82480178cc612aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da269560524ffa0f404b73b946edf900ee958ceba09a051e27a620fb78e7a352c182c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50467a475da76c356c9e031b096867da1dbb89c3a038d475dbcdb2df1278d5dba55c2fb5ba6a9778c2a244198491f0f711cdb2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6ffe0b1067678c748615dae3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f3ed515ac03cfecce67027d579e1226bd7b7381827453550343566508d38790ee838c3bf85c6c91a45e7a44752f57313533a3e82e4042e65d346afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02dff25f5ef1e48133e2a41cd55347bd23dcce57a00189619db629c530dc112d22ac72bce353681264b5175be40b3ba84408d0f56762cc720e96c128447be7128748e185be2640115556bac64d060207e629b0144e501c1c49c6abd15c7982b01e22da2ad04bb28df1a27f31e18040c16406071d798bb40d901d001e22cc5ed870d08702f49f0021814cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6874ea95d946da781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f715917df12df4eedbfcc5805fe8e661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf52479956185a3c5000d18ddce0236d5858c0d8761bca7446e3d30f3e8f48d5e8f86a60cbe46f038b1028ffd35590bdacfeebb86e28d42a923bdc3f9a307b919341a2a7dda096d41070db245c2c424aedd4a4bb9863169454d09f25fd0aa2da7bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040685c756942a0d049ee9863a2e480388f93876f3910ecb3a59fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b52f76add2f956aa02501f5badb94da12595b2bbf88b05dc70caae6766fd3df4f299d0ff71c8787249b255ea49b3d33b3f1a8c9403cb75d64264465c3578538382b23d721f8a49134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa2928736b96c72fa3406a95adfe6b374ffa27001d37d3bbe725e75c257834572026c511f57dce67153a4008f9e75e07ed9237f600005800ee667c137fc78bc4fd4ebf4d228979ab0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b62ee8a5d0fd65b739ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de54835c7551154dfa3be11a0d3b5845ac97b2da84410a652e72cd563acbb2b02bb59370cebaaa80014e3ad280944eae6fbf8d5f85237257bb5b8e5ec3e52dc06f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b41738b7f1a57c867d5b2ee5d72465657593339506fd0c3807cd6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c04f1035a96c6cfbe6f6c2b754581aac02f8a70e698be6e37fd411cf4b76317b47683f6b0f80dfdeef3a9767c7e5c30dff786093a21477431fea0458023953700"}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000500)={0x2, 0x0, @ioapic={0x10000, 0x8, 0x401, 0x80, 0x0, [{0x5, 0x10, 0xff, '\x00', 0x38}, {0x4, 0x1, 0x7c, '\x00', 0x31}, {0x2, 0xb3, 0x1, '\x00', 0xd}, {0x5, 0x9, 0x10, '\x00', 0x6}, {0x9, 0x7f, 0x4, '\x00', 0x79}, {0x7, 0x80, 0x0, '\x00', 0x6}, {0x4, 0x8, 0x1, '\x00', 0x5}, {0x52, 0x3, 0x3, '\x00', 0x9}, {0xfc, 0x2, 0x8, '\x00', 0xff}, {0xff, 0xb6, 0x9, '\x00', 0x80}, {0x6, 0x8, 0x6, '\x00', 0x1}, {0x1, 0x1, 0x7, '\x00', 0x4}, {0x8, 0xc, 0x5, '\x00', 0x6}, {0x5, 0x10, 0x8c, '\x00', 0x4}, {0x0, 0xc0, 0x7, '\x00', 0x1}, {0x8, 0x2, 0xfa}, {0x7, 0x6, 0x8, '\x00', 0x5}, {0x9, 0x0, 0xfa, '\x00', 0x5}, {0x1, 0x3, 0x6, '\x00', 0x6}, {0xf8, 0x4, 0xa, '\x00', 0xf8}, {0x8, 0x2, 0x1, '\x00', 0xf7}, {0x6, 0x6, 0x1, '\x00', 0xa}, {0x1, 0x0, 0x1, '\x00', 0x18}, {0x12, 0xe, 0x4, '\x00', 0x1}]}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x10a, 0x0, 0x6}]}) 6.534263251s ago: executing program 3 (id=655): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000400000109022400010000000009040000010300020009210000000122070009058103"], 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00!\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001500)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000013c0)={0x20, 0x1, 0x3, "a78863"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000002140)=ANY=[@ANYBLOB='@\r\r'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) 4.954334669s ago: executing program 0 (id=666): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x4a, 0x0, 0x84, 0xfffffffe}) r0 = socket$inet(0xa, 0x801, 0x84) (async) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x2, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0xfffffffd) listen(r0, 0x8) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) (async) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1, 0x1, 0x86, 0x10, 0x20f4, 0xe05a, 0x6c6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x2, 0x2, 0xff, 0x5a, 0xa3, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) (async) syz_usb_control_io(r4, 0x0, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x19c5498e, 0x103902) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r5, 0x7) (async) accept4(r1, 0x0, 0x0, 0x800) (async) r6 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r6) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 3.980575537s ago: executing program 0 (id=667): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x68152000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xa0a00, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="830086dd03000a000000142800006c07010033d43afffe800000000000000000000000000010ff020000000000000000000000000001"], 0x340a) 3.978087819s ago: executing program 3 (id=668): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$unix(0x1, 0x1, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000640)={0x20, 0x14, 0x3, "ba844c"}, &(0x7f00000004c0)={0x0, 0xa, 0x1}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000740)={0x20, 0x1, 0x83, "7c82727791a18efbf9c6537ab203eca28ec52296050b9f90174ce3f3fd4deb004dc916e3d073dedb2383aae4fbfe676a209f676f547f811d6d31976b385adad4f3957d388176648e1730d339424b9f62ec38fd8d6bc43fc63c37da4818abb06de5cd39da4571efd2630c9191b141a9045a0f4992479c755a71ee8d62fc641a684cd3ad"}, &(0x7f0000000580)={0x20, 0x3, 0x1, 0xa}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/seq/clients\x00', 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000340)={0x20, 0x0, 0x4, "4039823a"}, 0x0, 0x0, 0x0, 0x0}) 3.429946678s ago: executing program 0 (id=670): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x4) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r1, &(0x7f00000000c0)=""/90, 0x5a) write$ppp(r1, &(0x7f0000000200)="bc", 0x1) 3.144296198s ago: executing program 2 (id=673): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000000)=0x7, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x3, 0x0, 0x80a0000, 0x1000, &(0x7f00001c8000/0x1000)=nil}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x40) r2 = syz_open_dev$audion(&(0x7f0000000040), 0x1, 0x301000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={@rand_addr=0x64010100, 0x0, 0x0, 0x40, 0x0, [{@empty}, {@dev}, {@broadcast}, {@remote}]}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 2.462157993s ago: executing program 1 (id=674): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0x21, &(0x7f0000000400)={&(0x7f0000000280)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x17, {0x0, 0x401, @l2={'ib', 0x3a, 'wg1\x00'}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24008044}, 0x0) 2.37658049s ago: executing program 0 (id=675): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000100)=ANY=[@ANYBLOB="eb00"]) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r5 = fcntl$dupfd(r4, 0x406, r4) sendmsg$IPVS_CMD_GET_CONFIG(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f00000006c0)=@gcm_256={{0x303}, "522c64824fd8a2cf", "5ee411d0586b734f876135c12db17ca1da4cc97855ba27f1b7519ad0cc3c747d", "7f9f4324", "eb97e8534762e91d"}, 0x38) recvmmsg(r5, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}, 0x2004}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/98, 0x62}], 0x1}, 0x4}], 0x2, 0x40000042, 0x0) syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b83c008ec89df20f231e0f01c266b8000000000f23c80f21f866350800e0000f23f80f20d86635080000000f22d8b89d008ec80fc79acd4d0f017e0065660f7e30", 0x41}], 0x1, 0x32, &(0x7f00000000c0)=[@efer={0x2, 0xc02}, @cr0={0x0, 0x80000000}], 0x2) r6 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000101020d"], 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="2e00000010008188040f6fec59acbc0435a181003f00000003010000000000000e000d000d6ed60012801900121f", 0x2e}], 0x1}, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) 2.375510305s ago: executing program 1 (id=676): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000b80), 0x0, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000140)={0x0, 0x0, 0x0}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4004550c, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, 0x4, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x14) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, "207d3d0040b6000900"}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000001800)={0x1354, r5, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_MODES_OURS={0x1194, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x5e, 0x5, "ecb81fac3ae7af6a89ad8e1e1fea696ec202dceb4153c906946c317dad273e5759113ac6f52f7b9d57e1208544a54e6a7f7d96bbe11c807befa03141fae5e8b4d06bbc9533c149254f0143cada2cc0d3a1f407d500c668110853"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x31, 0x5, "fdf4971c8e2424127171f70c1ba9e0142084d1ece3f13be4b1a93c88324d43049a0852f3e1b6314121356772e3"}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_VALUE={0xf4, 0x4, "b6abe02e52287d3f47cbe81a5559fe54e388e10544d85b188049ae254c094445ea1f17f027568eb104f83e61d8c2b7dd82f6be07d3b9eb1d3ef8584edb18404b8e31d6ef58f769e134156d1a75f1b32f4a23b5a2659f28031a176c44d8e67373997c349f76921669bd5a761f803219ef094e4c935f9766267807329d75617f9ef717b47bebae5602a8fdff70a5479da1a3ac002b8ac54854b7eec7ac99bdbc7a77f8d1eb40e66b6a21f819e89b8b2004d7bbc6ae727af08580b6699afce199750537c9f59c311b0719d94fec15cad249945c01903b69f08b16f9295c2d307144ffc786ab3511df76251e2dc740187a16"}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x6}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x7}, @ETHTOOL_A_EEE_MODES_OURS={0xc8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x87, 0x5, "19936f072f0ec0cd7e54cdbca1402d6ac589987bc9d1d929a6d1443375c2cab9e3f1d17716357e4aa349a5520e7178519e6e63bcb5c938c6fe0a54cc44b57036cb2867910128fc5fa86dbbaed5736ff1b7733e2bc374f819a64a633b3e85ce83a6dd293b08b3da96d3595facb8189652abaaff7a05b659ca99ee8230000b79bf7aa8cb"}, @ETHTOOL_A_BITSET_MASK={0x37, 0x5, "9f4ed7756dba16bd5c6bd5a96a79f33b7b0582640b11e0e4cb0171e7a2e85e6c7a1e0951c07096bd469d82127aac3c82b3bcff"}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_MODES_OURS={0xac, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xa0, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@^\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '{\x19\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '[^K}/#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, 'ib'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, 'ib'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8001}]}]}, 0x1354}, 0x1, 0x0, 0x0, 0x1}, 0x8000) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x30, r4, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x17, {0x0, 0x401, @l2={'ib', 0x3a, 'wg1\x00'}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24008044}, 0x0) 2.188695882s ago: executing program 2 (id=677): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x68152000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xa0a00, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000142800006c07010033d43afffe800000000000000000000000000010ff020000000000000000000000000001"], 0x340a) (fail_nth: 6) 2.132059401s ago: executing program 1 (id=678): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000580)=[0x138d, 0x4, 0x11, 0x8, 0x9, 0x1ed, 0x6, 0x3, 0xbb, 0x4, 0x70, 0xfffffffe, 0xfffffff7, 0x1ab, 0xfffffff8], 0x0, 0x4}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000600)={'wlan0\x00'}) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$sock_linger(r6, 0x1, 0x3d, &(0x7f0000000080)={0x1}, 0x8) sendmmsg$sock(r6, &(0x7f00000072c0)=[{{&(0x7f0000000300)=@xdp={0x2c, 0x6, r7, 0x34}, 0x80, 0x0}}], 0x1, 0x8840) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r5, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltclass={0x24, 0x29, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xfff3, 0xffff}, {0x7, 0xd}, {0xb, 0x7}}}, 0x24}}, 0x4000050) r8 = getpgrp(0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f00000001c0)=0xc) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1400) setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000300)={r8, r9, r10}, 0xc) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r11, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000011"], 0x30}], 0x1}, 0x0) 1.618297868s ago: executing program 1 (id=679): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x12, 0x9}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, '\x00', 0x40, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x3a}], @pkt_toobig={0x2, 0x0, 0x0, 0xd93f, {0x4, 0x6, '\x00', 0xf08, 0x2f, 0xb9e02c7ea3376920, @mcast2, @dev={0xfe, 0x80, '\x00', 0x13}, [@hopopts]}}}}}}, 0x76) 1.591004605s ago: executing program 3 (id=680): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x17, {0x0, 0x401, @l2={'ib', 0x3a, 'wg1\x00'}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24008044}, 0x0) (fail_nth: 5) 1.223140241s ago: executing program 2 (id=681): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="2ba52ebd7000fddbdf251b00000006002100"], 0x1c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x40c0) r5 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) write$P9_RWSTAT(r0, &(0x7f0000000940)={0x7, 0x7f, 0x2}, 0x7) write(r5, 0x0, 0x0) 1.116838885s ago: executing program 3 (id=682): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xe8) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100009e173610ef250212000100000000090400000002060000000000800000000000df2a45fb425ddb26e79fd9010761a0d37e21ad2677b7aa614d9edbdf7c028c51fcf450e0f63c42f6d2e71399ba5b8543ef856298f0212616eb77c9918762fb992d7a3cb7d73c8ba042780fb0d35cc3a0cdab06853acf756788e413ecd66d36abb0f7629ea4e5f91b75e69d637ade07c870145d4dfdb2c1081c9609e4072bee08cdb5aa42ad4d4c64d7375b470d7905734df161e0f0a86f16395f49cfd7"], 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@private=0xa010101, 0x0, 0x0, 0x4e21}, {@in=@broadcast, 0x0, 0x33}, @in6=@remote, {}, {0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x40000, 0x10000}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @XFRMA_SET_MARK={0x8}]}, 0x140}}, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000100)={0x14, 0x0, 0x0}, &(0x7f0000000400)={0x44, &(0x7f0000000140)={0x40, 0xf, 0x15, "8e392ff0b29edb00aef77968124bb47f976f876f7a"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0xb00b, 0xf031, 0x4, 0x0, 0x3, 0x6, 0x40, 0x80, 0x3, 0x2a, 0xfe, 0xe6}}, 0x0, 0x0, 0x0, 0x0}) 1.055771469s ago: executing program 2 (id=683): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x101}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="3de6", 0x2}], 0x1}}], 0x1, 0x48819) sendto$inet6(r0, &(0x7f00000003c0)="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"/4105, 0xffffffffffffff59, 0x0, 0x0, 0x1b) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000893000/0x2000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/162, 0x9f, 0x1, 0x0}, &(0x7f0000000180)=0x40) (fail_nth: 6) 1.008642695s ago: executing program 1 (id=684): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) request_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000100)='\\\\@}\x01\x00\x00@\xf5\xe2\xdbE\xc0P\x02\xe0\xf2\xaa\xe6\x00\x00\x00\x00\x00\x00\x00\xd0\xa1B\x80\xd3\xcc\x06D\a\x00\x00\x00\x00\x00\x00\x04)\'\x03t\xcd\xe8\xd0u\x01\xff\x01\xd1', 0xfffffffffffffffe) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000940)={0x2020}, 0x2020) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0x3, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0x0, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x0, 0x9, 0x1, 0x2, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0x10, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0x1, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x4, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x9, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0xfff, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x8a, 0x1, 0x80000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x5, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) readv(r2, &(0x7f0000001900)=[{0x0, 0xea}], 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd000012000000000000fe8000000000000000000000000000aaff0200000000000000000000004000013a00000000000000020090780000d93f640000000f081116ff0200000000000000000000000900000000000000000000000000000000125d0000000000000016000000000000002da82a0817911610e7367a8b82ddd215151fe9d7025d733bf0dff5083b18c232d8344f54461712c2ea6a626389c829cedc9f83aa3bc91975bee534d8b82bf8857874cf1b81dfd152c6b65723a8cc9bf03b677c760ab8c30a50a8a6d219183bf5fb68b1490812e4d4bbc4c644e466fce1c724309ffab28df86323bb2bb5cb9d367e704499a8961a16a070d7dd93a7f89d821f21ed79bd29cc0ed61aec5ca998d602eeebf5ce4e0e7a408292a9a1b41d0a963bde4199d2579bca10c163a18e9b2ce236688087fdc86a0d97bd2d846ee4bd59898dbce47dd6316e0d"], 0x7e) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) 148.432385ms ago: executing program 2 (id=685): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000030000000160a0102000b000000000000010000000900020073797a30000000000900010073797a300000000004000380140000001000019ca6ec389e4b1935c6580678725b0000000000000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000380)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000640)={{r0}, r1, 0xa, @inherit={0x58, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000002000000000000000400000000000000ff0100000000000014000000000000000e000000000000000d00000000000000e2430c0000000000010000000100000002000000000000000300000000000000"]}, @name="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"}) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='securityfs\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040), 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff18, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c913000180f0ffffeb", 0x1dd}], 0x1}, 0x0) r2 = socket(0x10, 0x80002, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c00071bab0925000900070007ab08000c000000f0007e93210001c000000000000000000000000000039915fa2c1ec28670e9889bb94b46fe0000000a0002", 0xff82) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100), 0xc}], 0x492492492492856, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x2000000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x102) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000000, 0x3032, 0xffffffffffffffff, 0x0) write$char_usb(r5, &(0x7f0000000040)="e2", 0x2250) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r7) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001740)=ANY=[@ANYBLOB="070000006587a4bf8b6caae026a10d1808d8f2943e4465b101590b1bea6834920d25f4af6c1f7f5c97fcc9", @ANYRES16=r8, @ANYRES32=r3], 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r6, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="a400eaae", @ANYRES16=r8, @ANYBLOB="080326bd7000fedbdf25080000000800030007000000080004000b000000080002000100000008000400ffffffff0800030001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001840)=ANY=[@ANYRESDEC=r3, @ANYBLOB="0aaf4b5bbef82302085745c6d3e8349589546dabb0301fc820fac3739d582ce14f7735a387e34a41199ec8dff01afbdbda17f68271ad9d4e63cdad17f420665d84d3902277d4532ab233f80cbe15cc78d940280384527b9fcc6571d8770fcf6c8ee4034ae19a19a96d0439cf8db564fbaa803c2c050a7582ddfe01b2944e041fa31da82c5030240ea69da882b8396af8f195ffed1ff1d4d08cc1d61a30e63e40bd385faf7dc35775c8b968a43ee5724f4766b826d91f0d8f90553f308406ddbbf266e6d772bce9"], 0xa8}, 0x1, 0x0, 0x0, 0x400d0}, 0x0) mkdir(&(0x7f0000001780)='./file2\x00', 0x4) socket$inet6_sctp(0xa, 0x801, 0x84) 97.826911ms ago: executing program 0 (id=686): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0x88}, 0x15, 0x3, 'wlc\x00', 0x1, 0x0, 0x7b}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x3, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0xe0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 66.700904ms ago: executing program 1 (id=687): r0 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40002) r3 = fcntl$dupfd(r1, 0x0, r2) read$FUSE(r3, 0x0, 0xf5) 417.038µs ago: executing program 2 (id=688): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) (async) r2 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r2, 0x0, 0x0) (async, rerun: 32) listen(r0, 0x0) (async, rerun: 32) r3 = accept(r0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r3) (async) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0xfff, 0x800}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000300)=@assoc_value={r4, 0x3}, 0x8) (async) ppoll(&(0x7f0000000340)=[{r0, 0x10419}, {r3, 0x4}], 0x2, &(0x7f0000000380), &(0x7f00000003c0)={[0x1]}, 0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) (async, rerun: 64) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (rerun: 64) memfd_create(&(0x7f0000000000)='/dev/rnullb0\x00', 0xd) (async) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r5, 0x800442d2, 0x0) (async, rerun: 32) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x9cd5, 0x20, 0x0, 0x271}, 0x0, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r6 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) (async) ioctl$KVM_CAP_VM_TYPES(r7, 0x4068aea3, &(0x7f0000000400)={0xeb, 0x0, 0xe}) (async) bind$unix(r3, &(0x7f0000000480)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) accept4(r5, &(0x7f0000000580)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, &(0x7f00000000c0)=0xb1, 0x80000) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x77, 0x912, 0x0, 0x2, 0x0, 0x4002004c8, 0x1004, 0x45c5, 0x4, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x80000004000000, 0x200000000c], 0x80a0000, 0x2010d3}) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8"]) 0s ago: executing program 0 (id=689): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$unix(0x1, 0x1, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000640)={0x20, 0x14, 0x4, "ba844c3e"}, 0x0, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000740)={0x20, 0x1, 0x83, "7c82727791a18efbf9c6537ab203eca28ec52296050b9f90174ce3f3fd4deb004dc916e3d073dedb2383aae4fbfe676a209f676f547f811d6d31976b385adad4f3957d388176648e1730d339424b9f62ec38fd8d6bc43fc63c37da4818abb06de5cd39da4571efd2630c9191b141a9045a0f4992479c755a71ee8d62fc641a684cd3ad"}, &(0x7f0000000580)={0x20, 0x3, 0x1, 0xa}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/seq/clients\x00', 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000340)={0x20, 0x0, 0x4, "4039823a"}, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): 0 [ 167.558125][ T7160] ? do_syscall_64+0xa0/0xfa0 [ 167.558144][ T7160] ? __fget_files+0x2a/0x420 [ 167.558161][ T7160] ? __fget_files+0x3a0/0x420 [ 167.558178][ T7160] ? __fget_files+0x2a/0x420 [ 167.558203][ T7160] __x64_sys_getsockopt+0x1a5/0x250 [ 167.558213][ T1841] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.558221][ T7160] ? do_syscall_64+0xa0/0xfa0 [ 167.558243][ T7160] ? do_syscall_64+0xa0/0xfa0 [ 167.558263][ T7160] do_syscall_64+0xfa/0xfa0 [ 167.558279][ T7160] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.558292][ T7160] ? clear_bhb_loop+0x60/0xb0 [ 167.558311][ T7160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.558326][ T7160] RIP: 0033:0x7f2e93d8f6c9 [ 167.558342][ T7160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.558357][ T7160] RSP: 002b:00007f2e94cea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 167.558374][ T7160] RAX: ffffffffffffffda RBX: 00007f2e93fe6090 RCX: 00007f2e93d8f6c9 [ 167.558387][ T7160] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 167.558396][ T7160] RBP: 00007f2e94cea090 R08: 0000200000000180 R09: 0000000000000000 [ 167.558406][ T7160] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 167.558416][ T7160] R13: 00007f2e93fe6128 R14: 00007f2e93fe6090 R15: 00007fff2aa691a8 [ 167.558445][ T7160] [ 167.565150][ T5888] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 167.580638][ T1841] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.586848][ T5888] usb 2-1: media controller created [ 167.606041][ T1841] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 167.656845][ T5888] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 167.692765][ T7126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.901034][ T1841] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 167.917993][ T7126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.937610][ T1841] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.953413][ T1841] usb 1-1: config 0 descriptor?? [ 168.284983][ T5888] zl10353_read_register: readreg error (reg=127, ret==0) [ 168.292108][ T5888] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 168.300139][ T7126] dtv5100: wlen = 0, aborting. [ 168.312955][ T5888] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 168.334118][ T5888] usb 2-1: USB disconnect, device number 43 [ 168.389527][ T1841] microsoft 0003:045E:07DA.001F: invalid report_size 4899 [ 168.410796][ T1841] microsoft 0003:045E:07DA.001F: item 0 2 1 7 parsing failed [ 168.435819][ T1841] microsoft 0003:045E:07DA.001F: parse failed [ 168.441886][ T5888] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 168.454140][ T1841] microsoft 0003:045E:07DA.001F: probe with driver microsoft failed with error -22 [ 168.496829][ T7163] input: syz1 as /devices/virtual/input/input41 [ 168.527947][ T7163] netlink: zone id is out of range [ 168.533153][ T7163] netlink: set zone limit has 8 unknown bytes [ 168.599848][ T1841] usb 1-1: USB disconnect, device number 39 [ 168.606809][ T5824] Bluetooth: hci2: SCO packet too small [ 168.631550][ T7167] input: syz1 as /devices/virtual/input/input42 [ 168.784675][ T43] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 168.935311][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 168.953394][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.971797][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.992162][ T43] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 169.004848][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.030539][ T43] usb 3-1: config 0 descriptor?? [ 169.049184][ T43] hub 3-1:0.0: USB hub found [ 169.251846][ T43] hub 3-1:0.0: 1 port detected [ 169.585387][ T7182] FAULT_INJECTION: forcing a failure. [ 169.585387][ T7182] name failslab, interval 1, probability 0, space 0, times 0 [ 169.598951][ T7182] CPU: 1 UID: 0 PID: 7182 Comm: syz.0.475 Not tainted syzkaller #0 PREEMPT(full) [ 169.598976][ T7182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 169.598987][ T7182] Call Trace: [ 169.598994][ T7182] [ 169.599001][ T7182] dump_stack_lvl+0x189/0x250 [ 169.599026][ T7182] ? __pfx____ratelimit+0x10/0x10 [ 169.599051][ T7182] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.599071][ T7182] ? __pfx__printk+0x10/0x10 [ 169.599091][ T7182] ? __lock_acquire+0xab9/0xd20 [ 169.599119][ T7182] should_fail_ex+0x414/0x560 [ 169.599147][ T7182] should_failslab+0xa8/0x100 [ 169.599170][ T7182] kmem_cache_alloc_noprof+0x88/0x700 [ 169.599189][ T7182] ? dst_alloc+0x105/0x170 [ 169.599213][ T7182] dst_alloc+0x105/0x170 [ 169.599237][ T7182] ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 169.599262][ T7182] ? ip_route_output_key_hash+0xc1/0x280 [ 169.599282][ T7182] ip_route_output_key_hash+0x174/0x280 [ 169.599299][ T7182] ? __lock_acquire+0xab9/0xd20 [ 169.599317][ T7182] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 169.599354][ T7182] ip_route_output_flow+0x2a/0x150 [ 169.599377][ T7182] ? security_sk_classify_flow+0x70/0x180 [ 169.599404][ T7182] udp_sendmsg+0x142e/0x2170 [ 169.599439][ T7182] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 169.599460][ T7182] ? __pfx_udp_sendmsg+0x10/0x10 [ 169.599496][ T7182] ? get_random_u32+0x155/0x940 [ 169.599524][ T7182] ? register_lock_class+0x51/0x320 [ 169.599538][ T7182] ? get_random_u32+0x155/0x940 [ 169.599559][ T7182] ? __lock_acquire+0xab9/0xd20 [ 169.599585][ T7182] udpv6_sendmsg+0xc1c/0x2510 [ 169.599616][ T7182] ? udp_lib_get_port+0x164b/0x1b10 [ 169.599637][ T7182] ? udp_lib_get_port+0x164b/0x1b10 [ 169.599655][ T7182] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 169.599678][ T7182] ? __lock_acquire+0xab9/0xd20 [ 169.599718][ T7182] ? __local_bh_enable_ip+0x12d/0x1c0 [ 169.599736][ T7182] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 169.599762][ T7182] ? inet_send_prepare+0x1b9/0x270 [ 169.599785][ T7182] ? inet_send_prepare+0x1b9/0x270 [ 169.599808][ T7182] ? inet6_sendmsg+0xe4/0x120 [ 169.599833][ T7182] __sock_sendmsg+0xe5/0x270 [ 169.599861][ T7182] ____sys_sendmsg+0x505/0x830 [ 169.599888][ T7182] ? __pfx_____sys_sendmsg+0x10/0x10 [ 169.599919][ T7182] ? import_iovec+0x74/0xa0 [ 169.599942][ T7182] ___sys_sendmsg+0x21f/0x2a0 [ 169.599964][ T7182] ? __pfx____sys_sendmsg+0x10/0x10 [ 169.600009][ T7182] ? __fget_files+0x2a/0x420 [ 169.600025][ T7182] ? __fget_files+0x3a0/0x420 [ 169.600055][ T7182] __x64_sys_sendmsg+0x19b/0x260 [ 169.600078][ T7182] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 169.600105][ T7182] ? __pfx_ksys_write+0x10/0x10 [ 169.600123][ T7182] ? do_syscall_64+0xbe/0xfa0 [ 169.600146][ T7182] do_syscall_64+0xfa/0xfa0 [ 169.600165][ T7182] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.600181][ T7182] ? clear_bhb_loop+0x60/0xb0 [ 169.600200][ T7182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.600215][ T7182] RIP: 0033:0x7fb5ae98f6c9 [ 169.600230][ T7182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.600244][ T7182] RSP: 002b:00007fb5acbf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.600260][ T7182] RAX: ffffffffffffffda RBX: 00007fb5aebe5fa0 RCX: 00007fb5ae98f6c9 [ 169.600268][ T7182] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004 [ 169.600276][ T7182] RBP: 00007fb5acbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 169.600286][ T7182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.600296][ T7182] R13: 00007fb5aebe6038 R14: 00007fb5aebe5fa0 R15: 00007ffd971890e8 [ 169.600327][ T7182] [ 170.038560][ T7188] FAULT_INJECTION: forcing a failure. [ 170.038560][ T7188] name failslab, interval 1, probability 0, space 0, times 0 [ 170.056438][ T7188] CPU: 1 UID: 0 PID: 7188 Comm: syz.3.478 Not tainted syzkaller #0 PREEMPT(full) [ 170.056463][ T7188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 170.056474][ T7188] Call Trace: [ 170.056481][ T7188] [ 170.056488][ T7188] dump_stack_lvl+0x189/0x250 [ 170.056514][ T7188] ? __pfx____ratelimit+0x10/0x10 [ 170.056535][ T7188] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.056555][ T7188] ? __pfx__printk+0x10/0x10 [ 170.056579][ T7188] ? __pfx___might_resched+0x10/0x10 [ 170.056597][ T7188] ? fs_reclaim_acquire+0x7d/0x100 [ 170.056624][ T7188] should_fail_ex+0x414/0x560 [ 170.056652][ T7188] should_failslab+0xa8/0x100 [ 170.056685][ T7188] __kmalloc_noprof+0xdf/0x800 [ 170.056706][ T7188] ? alloc_pipe_info+0x1fd/0x4d0 [ 170.056729][ T7188] alloc_pipe_info+0x1fd/0x4d0 [ 170.056749][ T7188] splice_direct_to_actor+0xa5d/0xcc0 [ 170.056771][ T7188] ? __lock_acquire+0xab9/0xd20 [ 170.056801][ T7188] ? __pfx_aa_file_perm+0x10/0x10 [ 170.056821][ T7188] ? __lock_acquire+0xab9/0xd20 [ 170.056838][ T7188] ? __pfx_direct_splice_actor+0x10/0x10 [ 170.056856][ T7188] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 170.056887][ T7188] do_splice_direct+0x181/0x270 [ 170.056909][ T7188] ? __pfx_do_splice_direct+0x10/0x10 [ 170.056925][ T7188] ? common_file_perm+0x1b5/0x230 [ 170.056944][ T7188] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 170.056966][ T7188] ? bpf_lsm_file_permission+0x9/0x20 [ 170.056989][ T7188] ? security_file_permission+0x75/0x290 [ 170.057014][ T7188] ? rw_verify_area+0x255/0x4d0 [ 170.057042][ T7188] do_sendfile+0x4da/0x7e0 [ 170.057062][ T7188] ? __pfx_vfs_write+0x10/0x10 [ 170.057085][ T7188] ? __pfx_do_sendfile+0x10/0x10 [ 170.057105][ T7188] ? __fget_files+0x3a0/0x420 [ 170.057135][ T7188] __se_sys_sendfile64+0x13e/0x190 [ 170.057157][ T7188] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 170.057181][ T7188] ? do_syscall_64+0xbe/0xfa0 [ 170.057206][ T7188] do_syscall_64+0xfa/0xfa0 [ 170.057228][ T7188] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.057245][ T7188] ? clear_bhb_loop+0x60/0xb0 [ 170.057266][ T7188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.057283][ T7188] RIP: 0033:0x7f2e93d8f6c9 [ 170.057298][ T7188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.057312][ T7188] RSP: 002b:00007f2e94d0b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 170.057331][ T7188] RAX: ffffffffffffffda RBX: 00007f2e93fe5fa0 RCX: 00007f2e93d8f6c9 [ 170.057344][ T7188] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 170.057354][ T7188] RBP: 00007f2e94d0b090 R08: 0000000000000000 R09: 0000000000000000 [ 170.057364][ T7188] R10: 000000007ffff004 R11: 0000000000000246 R12: 0000000000000001 [ 170.057375][ T7188] R13: 00007f2e93fe6038 R14: 00007f2e93fe5fa0 R15: 00007fff2aa691a8 [ 170.057406][ T7188] [ 170.464083][ T977] hub 3-1:0.0: activate --> -90 [ 170.577162][ T7189] netlink: 'syz.0.477': attribute type 21 has an invalid length. [ 170.585052][ T7189] netlink: 132 bytes leftover after parsing attributes in process `syz.0.477'. [ 170.774872][ T5842] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 170.824664][ T5888] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 170.926589][ T5842] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 170.934290][ T5842] usb 4-1: can't read configurations, error -61 [ 170.984678][ T5888] usb 2-1: Using ep0 maxpacket: 16 [ 170.991757][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.007902][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.018004][ T5888] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 171.037402][ T5888] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 171.046759][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.057753][ T5888] usb 2-1: config 0 descriptor?? [ 171.064678][ T5842] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 171.075973][ T1841] usb 3-1: USB disconnect, device number 36 [ 171.236997][ T5842] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 171.245465][ T5842] usb 4-1: can't read configurations, error -61 [ 171.252026][ T5842] usb usb4-port1: attempt power cycle [ 171.394628][ T977] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 171.471578][ T5888] microsoft 0003:045E:07DA.0020: invalid report_size 4899 [ 171.480669][ T5888] microsoft 0003:045E:07DA.0020: item 0 2 1 7 parsing failed [ 171.489601][ T5888] microsoft 0003:045E:07DA.0020: parse failed [ 171.495808][ T5888] microsoft 0003:045E:07DA.0020: probe with driver microsoft failed with error -22 [ 171.544937][ T977] usb 1-1: Using ep0 maxpacket: 8 [ 171.553309][ T977] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 171.562477][ T977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.570503][ T977] usb 1-1: Product: syz [ 171.574707][ T977] usb 1-1: Manufacturer: syz [ 171.579296][ T977] usb 1-1: SerialNumber: syz [ 171.587740][ T977] usb 1-1: config 0 descriptor?? [ 171.601814][ T977] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 171.610030][ T977] pctv452e: pctv452e_power_ctrl: 1 [ 171.610030][ T977] [ 171.614722][ T5842] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 171.618088][ T977] usb 1-1: selecting invalid altsetting 3 [ 171.630857][ T977] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 171.630857][ T977] [ 171.641577][ T977] dvb-usb: bulk message failed: -22 (5/0) [ 171.650268][ T977] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 171.659467][ T5842] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 171.659501][ T5842] usb 4-1: can't read configurations, error -61 [ 171.674827][ T977] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 171.681523][ T5888] usb 2-1: USB disconnect, device number 44 [ 171.683184][ T5824] Bluetooth: hci3: SCO packet too small [ 171.697564][ T977] usb 1-1: media controller created [ 171.702815][ T977] dvb-usb: bulk message failed: -22 (8/0) [ 171.708727][ T977] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 171.717466][ T977] dvb-usb: MAC address reading failed. [ 171.731790][ T977] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 171.767685][ T977] DVB: Unable to find symbol stb0899_attach() [ 171.773769][ T977] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 171.789507][ T5842] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 171.812391][ T7208] dvb-usb: bulk message failed: -22 (7/0) [ 171.818994][ T7208] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 171.828803][ T5842] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 171.838530][ T5842] usb 4-1: can't read configurations, error -61 [ 171.844926][ T977] rc_core: IR keymap rc-tt-1500 not found [ 171.846238][ T5842] usb usb4-port1: unable to enumerate USB device [ 171.851038][ T977] Registered IR keymap rc-empty [ 171.863766][ T977] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 171.875737][ T977] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input43 [ 171.887721][ T977] dvb-usb: schedule remote query interval to 100 msecs. [ 171.895820][ T977] pctv452e: pctv452e_power_ctrl: 0 [ 171.895820][ T977] [ 171.903115][ T977] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 171.915760][ T977] usb 1-1: USB disconnect, device number 40 [ 171.981468][ T977] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 172.175653][ T5888] kernel read not supported for file /dsp (pid: 5888 comm: kworker/0:5) [ 172.302723][ T7225] netlink: 12 bytes leftover after parsing attributes in process `syz.1.490'. [ 172.432495][ T7229] netlink: 'syz.1.492': attribute type 21 has an invalid length. [ 172.440517][ T7229] netlink: 132 bytes leftover after parsing attributes in process `syz.1.492'. [ 172.454819][ T5888] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 172.607924][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.618985][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.629162][ T5888] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 172.638291][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.646362][ T5842] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 172.656467][ T5888] usb 3-1: config 0 descriptor?? [ 172.806668][ T5842] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.818523][ T5842] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.828582][ T5842] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 172.837780][ T5842] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.848206][ T5842] usb 1-1: config 0 descriptor?? [ 173.068548][ T5888] cp2112 0003:10C4:EA90.0021: unknown main item tag 0x0 [ 173.077897][ T5888] cp2112 0003:10C4:EA90.0021: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 173.258755][ T5842] cp2112 0003:10C4:EA90.0022: unknown main item tag 0x0 [ 173.269332][ T5888] cp2112 0003:10C4:EA90.0021: Part Number: 0x82 Device Version: 0xFE [ 173.278015][ T5842] cp2112 0003:10C4:EA90.0022: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 173.439945][ T7240] FAULT_INJECTION: forcing a failure. [ 173.439945][ T7240] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.453596][ T7240] CPU: 1 UID: 0 PID: 7240 Comm: syz.1.496 Not tainted syzkaller #0 PREEMPT(full) [ 173.453621][ T7240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 173.453631][ T7240] Call Trace: [ 173.453638][ T7240] [ 173.453645][ T7240] dump_stack_lvl+0x189/0x250 [ 173.453671][ T7240] ? __pfx____ratelimit+0x10/0x10 [ 173.453692][ T7240] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.453711][ T7240] ? __pfx__printk+0x10/0x10 [ 173.453744][ T7240] should_fail_ex+0x414/0x560 [ 173.453771][ T7240] _copy_to_user+0x31/0xb0 [ 173.453792][ T7240] simple_read_from_buffer+0xe1/0x170 [ 173.453815][ T7240] proc_fail_nth_read+0x1b3/0x220 [ 173.453842][ T7240] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 173.453869][ T7240] ? rw_verify_area+0x2a6/0x4d0 [ 173.453892][ T7240] ? __lock_acquire+0xab9/0xd20 [ 173.453908][ T7240] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 173.453932][ T7240] vfs_read+0x200/0xa30 [ 173.453947][ T7240] ? fdget_pos+0x247/0x320 [ 173.453970][ T7240] ? __pfx___mutex_lock+0x10/0x10 [ 173.453992][ T7240] ? __pfx_vfs_read+0x10/0x10 [ 173.454010][ T7240] ? __fget_files+0x2a/0x420 [ 173.454033][ T7240] ? __fget_files+0x3a0/0x420 [ 173.454057][ T7240] ? __fget_files+0x2a/0x420 [ 173.454084][ T7240] ksys_read+0x145/0x250 [ 173.454103][ T7240] ? __pfx_ksys_read+0x10/0x10 [ 173.454123][ T7240] ? do_syscall_64+0xbe/0xfa0 [ 173.454148][ T7240] do_syscall_64+0xfa/0xfa0 [ 173.454168][ T7240] ? irqentry_exit+0x10f/0x640 [ 173.454187][ T7240] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.454202][ T7240] ? clear_bhb_loop+0x60/0xb0 [ 173.454222][ T7240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.454237][ T7240] RIP: 0033:0x7f37c378e0dc [ 173.454253][ T7240] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 173.454266][ T7240] RSP: 002b:00007f37c4711030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 173.454283][ T7240] RAX: ffffffffffffffda RBX: 00007f37c39e5fa0 RCX: 00007f37c378e0dc [ 173.454294][ T7240] RDX: 000000000000000f RSI: 00007f37c47110a0 RDI: 0000000000000004 [ 173.454304][ T7240] RBP: 00007f37c4711090 R08: 0000000000000000 R09: 0000000000000000 [ 173.454313][ T7240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.454323][ T7240] R13: 00007f37c39e6038 R14: 00007f37c39e5fa0 R15: 00007ffde551c9b8 [ 173.454353][ T7240] [ 173.725853][ T5842] cp2112 0003:10C4:EA90.0022: Part Number: 0x82 Device Version: 0xFE [ 174.014798][ T5913] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 174.074771][ T1841] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 174.128513][ T7219] cp2112 0003:10C4:EA90.0021: Error starting transaction: -38 [ 174.140160][ T5888] cp2112 0003:10C4:EA90.0021: error reading lock byte: -71 [ 174.167839][ T5888] usb 3-1: USB disconnect, device number 37 [ 174.174898][ T5913] usb 2-1: Using ep0 maxpacket: 16 [ 174.187955][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.203885][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.214610][ T1841] usb 4-1: device descriptor read/64, error -71 [ 174.218538][ T5913] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 174.234171][ T5913] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 174.248298][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.264400][ T5913] usb 2-1: config 0 descriptor?? [ 174.331074][ T5842] cp2112 0003:10C4:EA90.0022: error reading lock byte: -71 [ 174.343049][ T5842] usb 1-1: USB disconnect, device number 41 [ 174.474721][ T1841] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 174.604628][ T1841] usb 4-1: device descriptor read/64, error -71 [ 174.680319][ T5913] microsoft 0003:045E:07DA.0023: invalid report_size 4899 [ 174.698656][ T5913] microsoft 0003:045E:07DA.0023: item 0 2 1 7 parsing failed [ 174.708007][ T5913] microsoft 0003:045E:07DA.0023: parse failed [ 174.714232][ T5913] microsoft 0003:045E:07DA.0023: probe with driver microsoft failed with error -22 [ 174.737498][ T1841] usb usb4-port1: attempt power cycle [ 174.766120][ T7253] FAULT_INJECTION: forcing a failure. [ 174.766120][ T7253] name failslab, interval 1, probability 0, space 0, times 0 [ 174.779078][ T7253] CPU: 1 UID: 0 PID: 7253 Comm: syz.2.500 Not tainted syzkaller #0 PREEMPT(full) [ 174.779093][ T7253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 174.779100][ T7253] Call Trace: [ 174.779104][ T7253] [ 174.779109][ T7253] dump_stack_lvl+0x189/0x250 [ 174.779125][ T7253] ? __pfx____ratelimit+0x10/0x10 [ 174.779138][ T7253] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.779149][ T7253] ? __pfx__printk+0x10/0x10 [ 174.779163][ T7253] ? __pfx___might_resched+0x10/0x10 [ 174.779177][ T7253] should_fail_ex+0x414/0x560 [ 174.779193][ T7253] should_failslab+0xa8/0x100 [ 174.779209][ T7253] __kmalloc_noprof+0xdf/0x800 [ 174.779221][ T7253] ? vb2_core_reqbufs+0x97f/0x1420 [ 174.779237][ T7253] vb2_core_reqbufs+0x97f/0x1420 [ 174.779246][ T7253] ? do_syscall_64+0xfa/0xfa0 [ 174.779262][ T7253] ? trace_contention_end+0x39/0x120 [ 174.779274][ T7253] ? __mutex_lock+0x335/0x1350 [ 174.779290][ T7253] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 174.779306][ T7253] ? vb2_verify_memory_type+0x1fc/0x570 [ 174.779317][ T7253] vb2_ioctl_reqbufs+0x4c0/0x830 [ 174.779336][ T7253] __video_do_ioctl+0xa59/0xc10 [ 174.779353][ T7253] ? __pfx___video_do_ioctl+0x10/0x10 [ 174.779371][ T7253] video_usercopy+0x82d/0x1450 [ 174.779387][ T7253] ? __pfx___video_do_ioctl+0x10/0x10 [ 174.779398][ T7253] ? __pfx_video_usercopy+0x10/0x10 [ 174.779418][ T7253] ? __fget_files+0x3a0/0x420 [ 174.779431][ T7253] v4l2_ioctl+0x18d/0x1e0 [ 174.779442][ T7253] ? __pfx_v4l2_ioctl+0x10/0x10 [ 174.779452][ T7253] __se_sys_ioctl+0xfc/0x170 [ 174.779467][ T7253] do_syscall_64+0xfa/0xfa0 [ 174.779479][ T7253] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.779489][ T7253] ? clear_bhb_loop+0x60/0xb0 [ 174.779501][ T7253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.779510][ T7253] RIP: 0033:0x7fbc2ab8f6c9 [ 174.779520][ T7253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.779527][ T7253] RSP: 002b:00007fbc2ba18038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 174.779538][ T7253] RAX: ffffffffffffffda RBX: 00007fbc2ade5fa0 RCX: 00007fbc2ab8f6c9 [ 174.779545][ T7253] RDX: 0000200000000040 RSI: 00000000c0145608 RDI: 0000000000000003 [ 174.779552][ T7253] RBP: 00007fbc2ba18090 R08: 0000000000000000 R09: 0000000000000000 [ 174.779558][ T7253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.779563][ T7253] R13: 00007fbc2ade6038 R14: 00007fbc2ade5fa0 R15: 00007ffec691bfa8 [ 174.779580][ T7253] [ 175.050628][ T5824] Bluetooth: hci3: SCO packet too small [ 175.072807][ T977] usb 2-1: USB disconnect, device number 45 [ 175.312119][ T7267] batadv_slave_1: entered promiscuous mode [ 175.319371][ T7267] batadv_slave_1: left promiscuous mode [ 175.334769][ T1841] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 175.357386][ T1841] usb 4-1: device descriptor read/8, error -71 [ 175.434619][ T5913] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 175.564651][ T977] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 175.594660][ T1841] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 175.601970][ T5913] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.614913][ T5913] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 175.625202][ T1841] usb 4-1: device descriptor read/8, error -71 [ 175.628558][ T5913] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 175.640632][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 175.649876][ T5913] usb 3-1: SerialNumber: syz [ 175.717740][ T977] usb 1-1: Using ep0 maxpacket: 16 [ 175.725218][ T977] usb 1-1: config 4 has an invalid interface number: 131 but max is 0 [ 175.733525][ T977] usb 1-1: config 4 has no interface number 0 [ 175.740222][ T1841] usb usb4-port1: unable to enumerate USB device [ 175.746862][ T977] usb 1-1: config 4 interface 131 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 175.757849][ T977] usb 1-1: config 4 interface 131 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 175.768136][ T977] usb 1-1: config 4 interface 131 has no altsetting 0 [ 175.777310][ T977] usb 1-1: New USB device found, idVendor=05ef, idProduct=8884, bcdDevice=53.db [ 175.787597][ T977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.795705][ T977] usb 1-1: Product: syz [ 175.799877][ T977] usb 1-1: Manufacturer: syz [ 175.804462][ T977] usb 1-1: SerialNumber: syz [ 175.813055][ T7267] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 175.821856][ T7267] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 175.869319][ T5913] usb 3-1: 0:2 : does not exist [ 175.888802][ T5913] usb 3-1: USB disconnect, device number 38 [ 175.910554][ T5823] udevd[5823]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 175.964885][ T5842] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 176.032192][ T5914] usb 1-1: USB disconnect, device number 42 [ 176.116430][ T5842] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 176.124471][ T5842] usb 2-1: config 0 has no interface number 0 [ 176.133315][ T5842] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 176.142452][ T5842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.150574][ T5842] usb 2-1: Product: syz [ 176.154875][ T5842] usb 2-1: Manufacturer: syz [ 176.159520][ T5842] usb 2-1: SerialNumber: syz [ 176.168266][ T5842] usb 2-1: config 0 descriptor?? [ 176.384823][ T5842] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 176.405437][ T5842] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 176.416714][ T5842] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 176.425194][ T5842] usb 2-1: media controller created [ 176.449271][ T5842] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 176.536483][ T7279] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 176.547385][ T7279] block device autoloading is deprecated and will be removed. [ 176.560594][ T7278] netlink: 40 bytes leftover after parsing attributes in process `syz.2.510'. [ 176.580385][ T5842] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 176.665741][ T5842] usb 2-1: USB disconnect, device number 46 [ 176.985630][ T7296] tipc: Failed to obtain node identity [ 176.992403][ T7296] tipc: Enabling of bearer rejected, failed to enable media [ 177.194603][ T977] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 177.244812][ T7308] FAULT_INJECTION: forcing a failure. [ 177.244812][ T7308] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.259137][ T7308] CPU: 0 UID: 0 PID: 7308 Comm: syz.3.517 Not tainted syzkaller #0 PREEMPT(full) [ 177.259159][ T7308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 177.259168][ T7308] Call Trace: [ 177.259175][ T7308] [ 177.259183][ T7308] dump_stack_lvl+0x189/0x250 [ 177.259207][ T7308] ? __pfx____ratelimit+0x10/0x10 [ 177.259228][ T7308] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.259248][ T7308] ? __pfx__printk+0x10/0x10 [ 177.259268][ T7308] ? __might_fault+0xb0/0x130 [ 177.259307][ T7308] should_fail_ex+0x414/0x560 [ 177.259337][ T7308] _copy_from_user+0x2d/0xb0 [ 177.259358][ T7308] ___sys_sendmsg+0x158/0x2a0 [ 177.259382][ T7308] ? __pfx____sys_sendmsg+0x10/0x10 [ 177.259439][ T7308] ? __fget_files+0x2a/0x420 [ 177.259457][ T7308] ? __fget_files+0x3a0/0x420 [ 177.259486][ T7308] __x64_sys_sendmsg+0x19b/0x260 [ 177.259511][ T7308] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 177.259542][ T7308] ? __pfx_ksys_write+0x10/0x10 [ 177.259562][ T7308] ? do_syscall_64+0xbe/0xfa0 [ 177.259587][ T7308] do_syscall_64+0xfa/0xfa0 [ 177.259608][ T7308] ? irqentry_exit+0x10f/0x640 [ 177.259626][ T7308] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.259643][ T7308] ? clear_bhb_loop+0x60/0xb0 [ 177.259663][ T7308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.259685][ T7308] RIP: 0033:0x7f2e93d8f6c9 [ 177.259701][ T7308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.259715][ T7308] RSP: 002b:00007f2e94cc9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.259733][ T7308] RAX: ffffffffffffffda RBX: 00007f2e93fe6180 RCX: 00007f2e93d8f6c9 [ 177.259746][ T7308] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 000000000000000e [ 177.259757][ T7308] RBP: 00007f2e94cc9090 R08: 0000000000000000 R09: 0000000000000000 [ 177.259767][ T7308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.259777][ T7308] R13: 00007f2e93fe6218 R14: 00007f2e93fe6180 R15: 00007fff2aa691a8 [ 177.259811][ T7308] [ 177.743904][ T7310] FAULT_INJECTION: forcing a failure. [ 177.743904][ T7310] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.744662][ T5842] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 177.781019][ T977] usb 1-1: Using ep0 maxpacket: 16 [ 177.787894][ T7310] CPU: 1 UID: 0 PID: 7310 Comm: syz.2.519 Not tainted syzkaller #0 PREEMPT(full) [ 177.787917][ T7310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 177.787927][ T7310] Call Trace: [ 177.787934][ T7310] [ 177.787942][ T7310] dump_stack_lvl+0x189/0x250 [ 177.787968][ T7310] ? __pfx____ratelimit+0x10/0x10 [ 177.787989][ T7310] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.788002][ T7310] ? __pfx__printk+0x10/0x10 [ 177.788020][ T7310] should_fail_ex+0x414/0x560 [ 177.788037][ T7310] _copy_to_user+0x31/0xb0 [ 177.788049][ T7310] simple_read_from_buffer+0xe1/0x170 [ 177.788063][ T7310] proc_fail_nth_read+0x1b3/0x220 [ 177.788079][ T7310] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 177.788094][ T7310] ? rw_verify_area+0x2a6/0x4d0 [ 177.788107][ T7310] ? __lock_acquire+0xab9/0xd20 [ 177.788116][ T7310] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 177.788130][ T7310] vfs_read+0x200/0xa30 [ 177.788138][ T7310] ? fdget_pos+0x247/0x320 [ 177.788151][ T7310] ? __pfx___mutex_lock+0x10/0x10 [ 177.788164][ T7310] ? __pfx_vfs_read+0x10/0x10 [ 177.788173][ T7310] ? __fget_files+0x2a/0x420 [ 177.788186][ T7310] ? __fget_files+0x3a0/0x420 [ 177.788195][ T7310] ? __fget_files+0x2a/0x420 [ 177.788210][ T7310] ksys_read+0x145/0x250 [ 177.788220][ T7310] ? __pfx_ksys_read+0x10/0x10 [ 177.788231][ T7310] ? do_syscall_64+0xbe/0xfa0 [ 177.788245][ T7310] do_syscall_64+0xfa/0xfa0 [ 177.788257][ T7310] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.788266][ T7310] ? clear_bhb_loop+0x60/0xb0 [ 177.788278][ T7310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.788287][ T7310] RIP: 0033:0x7fbc2ab8e0dc [ 177.788297][ T7310] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 177.788305][ T7310] RSP: 002b:00007fbc2ba18030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 177.788316][ T7310] RAX: ffffffffffffffda RBX: 00007fbc2ade5fa0 RCX: 00007fbc2ab8e0dc [ 177.788323][ T7310] RDX: 000000000000000f RSI: 00007fbc2ba180a0 RDI: 0000000000000005 [ 177.788329][ T7310] RBP: 00007fbc2ba18090 R08: 0000000000000000 R09: 0000000000000000 [ 177.788335][ T7310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.788341][ T7310] R13: 00007fbc2ade6038 R14: 00007fbc2ade5fa0 R15: 00007ffec691bfa8 [ 177.788357][ T7310] [ 177.792027][ T977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.894698][ T5842] usb 2-1: device descriptor read/64, error -71 [ 177.897433][ T977] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 178.049322][ T977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.077244][ T977] usb 1-1: config 0 descriptor?? [ 178.204818][ T5842] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 178.334652][ T5842] usb 2-1: device descriptor read/64, error -71 [ 178.445829][ T5914] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 178.453889][ T5842] usb usb2-port1: attempt power cycle [ 178.606628][ T5914] usb 3-1: unable to get BOS descriptor or descriptor too short [ 178.617078][ T5914] usb 3-1: not running at top speed; connect to a high speed hub [ 178.627211][ T5914] usb 3-1: config 1 has an invalid interface descriptor of length 5, skipping [ 178.636229][ T5914] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.649264][ T5914] usb 3-1: config 1 has 3 interfaces, different from the descriptor's value: 19 [ 178.659625][ T5914] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 59, changing to 4 [ 178.671001][ T5914] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 178.684785][ T5914] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 178.693849][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.701956][ T5914] usb 3-1: Product: syz [ 178.706290][ T5914] usb 3-1: Manufacturer: syz [ 178.711073][ T5914] usb 3-1: SerialNumber: syz [ 178.795251][ T5842] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 178.825798][ T5842] usb 2-1: device descriptor read/8, error -71 [ 178.928839][ T7314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.943308][ T7314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.972511][ T5914] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 179.009894][ T5914] usb 3-1: USB disconnect, device number 39 [ 179.060263][ T5823] udevd[5823]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 179.066307][ T5842] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 179.105332][ T5842] usb 2-1: device descriptor read/8, error -71 [ 179.224932][ T5842] usb usb2-port1: unable to enumerate USB device [ 179.397166][ T977] usbhid 1-1:0.0: can't add hid device: -71 [ 179.403202][ T977] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 179.457613][ T977] usb 1-1: USB disconnect, device number 43 [ 179.639069][ T7348] program syz.2.526 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 179.981282][ T7363] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1420284373 (5681137492 ns) > initial count (657219872 ns). Using initial count to start timer. [ 180.064661][ T977] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 180.214662][ T977] usb 3-1: Using ep0 maxpacket: 32 [ 180.221919][ T977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.244160][ T977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.272043][ T977] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 180.282041][ T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.296003][ T977] usb 3-1: config 0 descriptor?? [ 180.326416][ T977] hub 3-1:0.0: USB hub found [ 180.382258][ T7376] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 180.394947][ T7376] netlink: 'syz.3.533': attribute type 41 has an invalid length. [ 180.510490][ T977] hub 3-1:0.0: 1 port detected [ 180.927507][ T7392] netlink: 'syz.1.538': attribute type 10 has an invalid length. [ 180.962589][ T7392] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 181.004964][ T7392] syzkaller1: entered promiscuous mode [ 181.010466][ T7392] syzkaller1: entered allmulticast mode [ 181.118332][ T5926] hub 3-1:0.0: activate --> -90 [ 181.144605][ T5842] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 181.297548][ T5842] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 181.308570][ T5842] usb 4-1: config 0 interface 0 has no altsetting 0 [ 181.318175][ T5842] usb 4-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.00 [ 181.331080][ T5842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.352787][ T5842] usb 4-1: config 0 descriptor?? [ 181.360589][ T7389] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 181.674671][ T977] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 181.728518][ T5914] usb 3-1: USB disconnect, device number 40 [ 181.781936][ T7389] input: syz1 as /devices/virtual/input/input44 [ 181.790237][ T7390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.812846][ T5842] saitek 0003:0738:1709.0024: unknown main item tag 0x0 [ 181.821091][ T5842] saitek 0003:0738:1709.0024: item fetching failed at offset 3/5 [ 181.831480][ T5842] saitek 0003:0738:1709.0024: parse failed [ 181.835371][ T977] usb 1-1: Using ep0 maxpacket: 32 [ 181.837491][ T5842] saitek 0003:0738:1709.0024: probe with driver saitek failed with error -22 [ 181.853925][ T977] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 181.869332][ T977] usb 1-1: config 0 has no interface number 0 [ 181.875970][ T977] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 181.887433][ T977] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 181.901839][ T977] usb 1-1: config 0 interface 255 has no altsetting 0 [ 181.910978][ T977] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 181.920108][ T977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.929181][ T977] usb 1-1: Product: syz [ 181.933360][ T977] usb 1-1: Manufacturer: syz [ 181.938001][ T977] usb 1-1: SerialNumber: syz [ 181.944671][ T977] usb 1-1: config 0 descriptor?? [ 182.373746][ T7401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.386284][ T7401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.396138][ T7407] tipc: Failed to obtain node identity [ 182.403360][ T7407] tipc: Enabling of bearer rejected, failed to enable media [ 182.413811][ T977] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 182.462988][ T7411] netlink: 40 bytes leftover after parsing attributes in process `syz.1.547'. [ 182.540911][ T7413] tipc: Failed to obtain node identity [ 182.550367][ T7413] tipc: Enabling of bearer rejected, failed to enable media [ 182.832461][ T977] gspca_stk1135: reg_w 0x3 err -71 [ 182.839989][ T977] gspca_stk1135: serial bus timeout: status=0x00 [ 182.848624][ T977] gspca_stk1135: Sensor write failed [ 182.854155][ T977] gspca_stk1135: serial bus timeout: status=0x00 [ 182.860711][ T977] gspca_stk1135: Sensor write failed [ 182.867023][ T977] gspca_stk1135: serial bus timeout: status=0x00 [ 182.873515][ T977] gspca_stk1135: Sensor read failed [ 182.879063][ T977] gspca_stk1135: serial bus timeout: status=0x00 [ 182.885857][ T977] gspca_stk1135: Sensor read failed [ 182.891079][ T977] gspca_stk1135: Detected sensor type unknown (0x0) [ 182.897767][ T977] gspca_stk1135: serial bus timeout: status=0x00 [ 182.904105][ T977] gspca_stk1135: Sensor read failed [ 182.909615][ T977] gspca_stk1135: serial bus timeout: status=0x00 [ 182.916090][ T977] gspca_stk1135: Sensor read failed [ 182.921310][ T977] gspca_stk1135: serial bus timeout: status=0x00 [ 182.927826][ T977] gspca_stk1135: Sensor write failed [ 182.933146][ T977] gspca_stk1135: serial bus timeout: status=0x00 [ 182.939662][ T977] gspca_stk1135: Sensor write failed [ 182.945093][ T977] stk1135 1-1:0.255: probe with driver stk1135 failed with error -71 [ 182.970946][ T977] usb 1-1: USB disconnect, device number 44 [ 183.000285][ T5914] usb 4-1: USB disconnect, device number 49 [ 183.150126][ T7430] FAULT_INJECTION: forcing a failure. [ 183.150126][ T7430] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.163878][ T7430] CPU: 1 UID: 0 PID: 7430 Comm: syz.1.553 Not tainted syzkaller #0 PREEMPT(full) [ 183.163902][ T7430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 183.163912][ T7430] Call Trace: [ 183.163919][ T7430] [ 183.163926][ T7430] dump_stack_lvl+0x189/0x250 [ 183.163958][ T7430] ? __pfx____ratelimit+0x10/0x10 [ 183.163976][ T7430] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.163993][ T7430] ? __pfx__printk+0x10/0x10 [ 183.164011][ T7430] ? __might_fault+0xb0/0x130 [ 183.164042][ T7430] should_fail_ex+0x414/0x560 [ 183.164068][ T7430] _copy_from_iter+0x1de/0x1790 [ 183.164088][ T7430] ? rcu_is_watching+0x15/0xb0 [ 183.164111][ T7430] ? __pfx__copy_from_iter+0x10/0x10 [ 183.164128][ T7430] ? __build_skb_around+0x262/0x3f0 [ 183.164149][ T7430] ? netlink_sendmsg+0x642/0xb30 [ 183.164165][ T7430] ? skb_put+0x11b/0x210 [ 183.164187][ T7430] netlink_sendmsg+0x6b2/0xb30 [ 183.164215][ T7430] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.164236][ T7430] ? aa_sock_msg_perm+0xf1/0x1d0 [ 183.164255][ T7430] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 183.164276][ T7430] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.164297][ T7430] __sock_sendmsg+0x21c/0x270 [ 183.164325][ T7430] ____sys_sendmsg+0x505/0x830 [ 183.164352][ T7430] ? __pfx_____sys_sendmsg+0x10/0x10 [ 183.164381][ T7430] ? import_iovec+0x74/0xa0 [ 183.164402][ T7430] ___sys_sendmsg+0x21f/0x2a0 [ 183.164432][ T7430] ? __pfx____sys_sendmsg+0x10/0x10 [ 183.164486][ T7430] ? __fget_files+0x2a/0x420 [ 183.164506][ T7430] ? __fget_files+0x3a0/0x420 [ 183.164532][ T7430] __x64_sys_sendmsg+0x19b/0x260 [ 183.164556][ T7430] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 183.164586][ T7430] ? __pfx_ksys_write+0x10/0x10 [ 183.164607][ T7430] ? do_syscall_64+0xbe/0xfa0 [ 183.164631][ T7430] do_syscall_64+0xfa/0xfa0 [ 183.164652][ T7430] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.164667][ T7430] ? clear_bhb_loop+0x60/0xb0 [ 183.164685][ T7430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.164700][ T7430] RIP: 0033:0x7f37c378f6c9 [ 183.164721][ T7430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.164734][ T7430] RSP: 002b:00007f37c4711038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 183.164755][ T7430] RAX: ffffffffffffffda RBX: 00007f37c39e5fa0 RCX: 00007f37c378f6c9 [ 183.164767][ T7430] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 183.164778][ T7430] RBP: 00007f37c4711090 R08: 0000000000000000 R09: 0000000000000000 [ 183.164787][ T7430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.164798][ T7430] R13: 00007f37c39e6038 R14: 00007f37c39e5fa0 R15: 00007ffde551c9b8 [ 183.164826][ T7430] [ 183.565335][ T5926] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 183.582010][ T7434] binder: BINDER_SET_CONTEXT_MGR already set [ 183.588355][ T7434] binder: 7433:7434 ioctl 4018620d 200000000100 returned -16 [ 183.735414][ T1841] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 183.743207][ T5926] usb 3-1: Using ep0 maxpacket: 32 [ 183.751977][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.763945][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.774869][ T5926] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 183.783923][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.794494][ T7442] FAULT_INJECTION: forcing a failure. [ 183.794494][ T7442] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.809068][ T5926] usb 3-1: config 0 descriptor?? [ 183.825573][ T5926] hub 3-1:0.0: USB hub found [ 183.832496][ T7442] CPU: 1 UID: 0 PID: 7442 Comm: syz.0.557 Not tainted syzkaller #0 PREEMPT(full) [ 183.832520][ T7442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 183.832535][ T7442] Call Trace: [ 183.832542][ T7442] [ 183.832549][ T7442] dump_stack_lvl+0x189/0x250 [ 183.832575][ T7442] ? __pfx____ratelimit+0x10/0x10 [ 183.832596][ T7442] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.832616][ T7442] ? __pfx__printk+0x10/0x10 [ 183.832636][ T7442] ? __might_fault+0xb0/0x130 [ 183.832670][ T7442] should_fail_ex+0x414/0x560 [ 183.832698][ T7442] _copy_to_iter+0x1de/0x1790 [ 183.832713][ T7442] ? __lock_acquire+0xab9/0xd20 [ 183.832745][ T7442] ? __lock_acquire+0xab9/0xd20 [ 183.832761][ T7442] ? __pfx__copy_to_iter+0x10/0x10 [ 183.832792][ T7442] __skb_datagram_iter+0x41a/0x990 [ 183.832817][ T7442] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 183.832848][ T7442] skb_copy_datagram_iter+0xc5/0x230 [ 183.832874][ T7442] tcp_recvmsg_locked+0xeb4/0x3650 [ 183.832937][ T7442] ? __lock_acquire+0xab9/0xd20 [ 183.832955][ T7442] ? __pfx_tcp_recvmsg_locked+0x10/0x10 [ 183.832983][ T7442] ? process_measurement+0x3d8/0x1a40 [ 183.833008][ T7442] ? ima_match_policy+0x115/0x21e0 [ 183.833043][ T7442] ? process_measurement+0x72d/0x1a40 [ 183.833070][ T7442] ? up_write+0x1c4/0x420 [ 183.833099][ T7442] ? import_ubuf+0xfb/0x1d0 [ 183.833121][ T7442] tcp_zerocopy_receive+0x800/0x21d0 [ 183.833153][ T7442] ? __pfx_process_measurement+0x10/0x10 [ 183.833190][ T7442] ? __pfx_tcp_zerocopy_receive+0x10/0x10 [ 183.833256][ T7442] ? __local_bh_enable_ip+0x12d/0x1c0 [ 183.833275][ T7442] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 183.833306][ T7442] do_tcp_getsockopt+0x1dd0/0x2680 [ 183.833346][ T7442] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 183.833368][ T7442] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 183.833392][ T7442] ? __might_fault+0xb0/0x130 [ 183.833414][ T7442] ? _parse_integer_limit+0x1ae/0x1f0 [ 183.833437][ T7442] ? aa_label_sk_perm+0x4cc/0x630 [ 183.833465][ T7442] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 183.833514][ T7442] ? __lock_acquire+0xab9/0xd20 [ 183.833559][ T7442] tcp_getsockopt+0x83/0x130 [ 183.833581][ T7442] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 183.833598][ T7442] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 183.833614][ T7442] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 183.833633][ T7442] do_sock_getsockopt+0x372/0x450 [ 183.833657][ T7442] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 183.833677][ T7442] ? do_syscall_64+0xa0/0xfa0 [ 183.833696][ T7442] ? __fget_files+0x2a/0x420 [ 183.833714][ T7442] ? __fget_files+0x3a0/0x420 [ 183.833731][ T7442] ? __fget_files+0x2a/0x420 [ 183.833757][ T7442] __x64_sys_getsockopt+0x1a5/0x250 [ 183.833774][ T7442] ? do_syscall_64+0xa0/0xfa0 [ 183.833794][ T7442] ? do_syscall_64+0xa0/0xfa0 [ 183.833814][ T7442] do_syscall_64+0xfa/0xfa0 [ 183.833833][ T7442] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.833849][ T7442] ? clear_bhb_loop+0x60/0xb0 [ 183.833869][ T7442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.833884][ T7442] RIP: 0033:0x7fb5ae98f6c9 [ 183.833900][ T7442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.833913][ T7442] RSP: 002b:00007fb5acbd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 183.833931][ T7442] RAX: ffffffffffffffda RBX: 00007fb5aebe6090 RCX: 00007fb5ae98f6c9 [ 183.833944][ T7442] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 183.833954][ T7442] RBP: 00007fb5acbd5090 R08: 0000200000000180 R09: 0000000000000000 [ 183.833965][ T7442] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 183.833976][ T7442] R13: 00007fb5aebe6128 R14: 00007fb5aebe6090 R15: 00007ffd971890e8 [ 183.834007][ T7442] [ 184.213096][ T5926] hub 3-1:0.0: 1 port detected [ 184.218233][ T1841] usb 2-1: Using ep0 maxpacket: 16 [ 184.228759][ T1841] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 184.237883][ T1841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.245958][ T1841] usb 2-1: Product: syz [ 184.250156][ T1841] usb 2-1: Manufacturer: syz [ 184.254853][ T1841] usb 2-1: SerialNumber: syz [ 184.261777][ T1841] usb 2-1: config 0 descriptor?? [ 184.479345][ T7451] input: syz1 as /devices/virtual/input/input45 [ 184.550629][ T7451] netlink: 12 bytes leftover after parsing attributes in process `syz.3.561'. [ 184.674759][ T1841] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 184.685968][ T1841] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 184.697405][ T1841] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 184.705720][ T1841] usb 2-1: media controller created [ 184.723428][ T1841] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 184.839937][ T5926] hub 3-1:0.0: activate --> -90 [ 184.884622][ T5914] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 185.044608][ T5914] usb 1-1: Using ep0 maxpacket: 16 [ 185.058726][ T5914] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 185.068167][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.077757][ T5914] usb 1-1: Product: syz [ 185.082517][ T5914] usb 1-1: Manufacturer: syz [ 185.088654][ T5914] usb 1-1: SerialNumber: syz [ 185.108842][ T5914] usb 1-1: config 0 descriptor?? [ 185.294902][ T1841] zl10353_read_register: readreg error (reg=127, ret==0) [ 185.302064][ T7432] dtv5100: wlen = 0, aborting. [ 185.308118][ T1841] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 185.318183][ T1841] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 185.332181][ T1841] usb 2-1: USB disconnect, device number 51 [ 185.417587][ T1841] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 185.452892][ T977] usb 3-1: USB disconnect, device number 41 [ 185.528954][ T5914] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 185.543483][ T5914] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 185.555386][ T5914] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 185.563353][ T5914] usb 1-1: media controller created [ 185.585039][ T5914] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 185.656644][ T7457] netlink: 132 bytes leftover after parsing attributes in process `syz.3.563'. [ 185.737457][ T5914] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 185.748712][ T5914] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 185.792455][ T7463] netlink: 68 bytes leftover after parsing attributes in process `syz.3.565'. [ 185.881059][ T7467] tipc: Enabling of bearer rejected, failed to enable media [ 185.941642][ T7453] dtv5100: wlen = 0, aborting. [ 185.958646][ T5914] usb 1-1: USB disconnect, device number 45 [ 186.062132][ T5914] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 186.126115][ T7478] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 186.135833][ T7474] tipc: Enabling of bearer rejected, failed to enable media [ 186.145257][ T7474] FAULT_INJECTION: forcing a failure. [ 186.145257][ T7474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.158987][ T7474] CPU: 1 UID: 0 PID: 7474 Comm: syz.2.570 Not tainted syzkaller #0 PREEMPT(full) [ 186.159010][ T7474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 186.159020][ T7474] Call Trace: [ 186.159028][ T7474] [ 186.159035][ T7474] dump_stack_lvl+0x189/0x250 [ 186.159059][ T7474] ? __pfx____ratelimit+0x10/0x10 [ 186.159080][ T7474] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.159100][ T7474] ? __pfx__printk+0x10/0x10 [ 186.159121][ T7474] ? __might_fault+0xb0/0x130 [ 186.159160][ T7474] should_fail_ex+0x414/0x560 [ 186.159188][ T7474] _copy_from_user+0x2d/0xb0 [ 186.159209][ T7474] ___sys_sendmsg+0x158/0x2a0 [ 186.159233][ T7474] ? __pfx____sys_sendmsg+0x10/0x10 [ 186.159291][ T7474] ? __fget_files+0x2a/0x420 [ 186.159309][ T7474] ? __fget_files+0x3a0/0x420 [ 186.159337][ T7474] __x64_sys_sendmsg+0x19b/0x260 [ 186.159361][ T7474] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 186.159392][ T7474] ? __pfx_ksys_write+0x10/0x10 [ 186.159413][ T7474] ? do_syscall_64+0xbe/0xfa0 [ 186.159438][ T7474] do_syscall_64+0xfa/0xfa0 [ 186.159459][ T7474] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.159475][ T7474] ? clear_bhb_loop+0x60/0xb0 [ 186.159496][ T7474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.159512][ T7474] RIP: 0033:0x7fbc2ab8f6c9 [ 186.159527][ T7474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.159541][ T7474] RSP: 002b:00007fbc2ba18038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.159558][ T7474] RAX: ffffffffffffffda RBX: 00007fbc2ade5fa0 RCX: 00007fbc2ab8f6c9 [ 186.159571][ T7474] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 186.159581][ T7474] RBP: 00007fbc2ba18090 R08: 0000000000000000 R09: 0000000000000000 [ 186.159591][ T7474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.159602][ T7474] R13: 00007fbc2ade6038 R14: 00007fbc2ade5fa0 R15: 00007ffec691bfa8 [ 186.159631][ T7474] [ 186.438117][ T7483] loop9: detected capacity change from 0 to 8 [ 186.452648][ T5823] Dev loop9: unable to read RDB block 8 [ 186.458822][ T5823] loop9: unable to read partition table [ 186.468863][ T5823] loop9: partition table beyond EOD, truncated [ 186.500146][ T7483] Dev loop9: unable to read RDB block 8 [ 186.507891][ T7483] loop9: unable to read partition table [ 186.513787][ T7483] loop9: partition table beyond EOD, truncated [ 186.520982][ T7483] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 186.534815][ T5926] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 186.611981][ T7489] FAULT_INJECTION: forcing a failure. [ 186.611981][ T7489] name failslab, interval 1, probability 0, space 0, times 0 [ 186.635032][ T7489] CPU: 1 UID: 0 PID: 7489 Comm: syz.3.576 Not tainted syzkaller #0 PREEMPT(full) [ 186.635057][ T7489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 186.635067][ T7489] Call Trace: [ 186.635075][ T7489] [ 186.635089][ T7489] dump_stack_lvl+0x189/0x250 [ 186.635115][ T7489] ? __pfx____ratelimit+0x10/0x10 [ 186.635141][ T7489] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.635161][ T7489] ? __pfx__printk+0x10/0x10 [ 186.635187][ T7489] ? __pfx___might_resched+0x10/0x10 [ 186.635204][ T7489] ? fs_reclaim_acquire+0x7d/0x100 [ 186.635230][ T7489] should_fail_ex+0x414/0x560 [ 186.635259][ T7489] should_failslab+0xa8/0x100 [ 186.635283][ T7489] kmem_cache_alloc_node_noprof+0x8c/0x710 [ 186.635303][ T7489] ? __pfx_tcp_current_mss+0x10/0x10 [ 186.635327][ T7489] ? __alloc_skb+0x112/0x2d0 [ 186.635350][ T7489] __alloc_skb+0x112/0x2d0 [ 186.635373][ T7489] tcp_stream_alloc_skb+0x3d/0x350 [ 186.635397][ T7489] tcp_sendmsg_locked+0x1c7f/0x5540 [ 186.635471][ T7489] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 186.635489][ T7489] ? __local_bh_enable_ip+0x12d/0x1c0 [ 186.635511][ T7489] ? __local_bh_enable_ip+0x12d/0x1c0 [ 186.635542][ T7489] tcp_sendmsg+0x2f/0x50 [ 186.635561][ T7489] __sock_sendmsg+0x19c/0x270 [ 186.635589][ T7489] sock_sendmsg+0x158/0x230 [ 186.635616][ T7489] ? __pfx_sock_sendmsg+0x10/0x10 [ 186.635653][ T7489] ? __asan_memset+0x22/0x50 [ 186.635672][ T7489] ? iov_iter_bvec+0xb8/0x180 [ 186.635693][ T7489] splice_to_socket+0x8f5/0xf00 [ 186.635736][ T7489] ? __pfx_splice_to_socket+0x10/0x10 [ 186.635752][ T7489] ? current_time+0x222/0x370 [ 186.635799][ T7489] ? touch_atime+0xf1/0x6d0 [ 186.635838][ T7489] ? __pfx_splice_to_socket+0x10/0x10 [ 186.635856][ T7489] direct_splice_actor+0x101/0x160 [ 186.635878][ T7489] splice_direct_to_actor+0x5a8/0xcc0 [ 186.635918][ T7489] ? __pfx_direct_splice_actor+0x10/0x10 [ 186.635937][ T7489] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 186.635966][ T7489] do_splice_direct+0x181/0x270 [ 186.635987][ T7489] ? __pfx_do_splice_direct+0x10/0x10 [ 186.636003][ T7489] ? common_file_perm+0x1b5/0x230 [ 186.636023][ T7489] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 186.636045][ T7489] ? bpf_lsm_file_permission+0x9/0x20 [ 186.636067][ T7489] ? security_file_permission+0x75/0x290 [ 186.636099][ T7489] ? rw_verify_area+0x255/0x4d0 [ 186.636127][ T7489] do_sendfile+0x4da/0x7e0 [ 186.636147][ T7489] ? __pfx_vfs_write+0x10/0x10 [ 186.636170][ T7489] ? __pfx_do_sendfile+0x10/0x10 [ 186.636190][ T7489] ? __fget_files+0x3a0/0x420 [ 186.636220][ T7489] __se_sys_sendfile64+0x13e/0x190 [ 186.636243][ T7489] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 186.636267][ T7489] ? do_syscall_64+0xbe/0xfa0 [ 186.636291][ T7489] do_syscall_64+0xfa/0xfa0 [ 186.636312][ T7489] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.636328][ T7489] ? clear_bhb_loop+0x60/0xb0 [ 186.636349][ T7489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.636365][ T7489] RIP: 0033:0x7f2e93d8f6c9 [ 186.636381][ T7489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.636395][ T7489] RSP: 002b:00007f2e94d0b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 186.636412][ T7489] RAX: ffffffffffffffda RBX: 00007f2e93fe5fa0 RCX: 00007f2e93d8f6c9 [ 186.636424][ T7489] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 186.636435][ T7489] RBP: 00007f2e94d0b090 R08: 0000000000000000 R09: 0000000000000000 [ 186.636445][ T7489] R10: 000000007ffff004 R11: 0000000000000246 R12: 0000000000000001 [ 186.636456][ T7489] R13: 00007f2e93fe6038 R14: 00007f2e93fe5fa0 R15: 00007fff2aa691a8 [ 186.636487][ T7489] [ 187.026338][ T5926] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.036880][ T5926] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 187.046935][ T5926] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 187.056064][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.072748][ T5926] usb 2-1: config 0 descriptor?? [ 187.183287][ T7499] overlayfs: missing 'workdir' [ 187.334303][ T7502] Mount JFS Failure: -22 [ 187.340020][ T7502] jfs_mount failed w/return code = -22 [ 187.364701][ T5914] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 187.524587][ T5914] usb 3-1: Using ep0 maxpacket: 32 [ 187.532412][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.543526][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.555297][ T5914] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 187.566385][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.577604][ T5914] usb 3-1: config 0 descriptor?? [ 187.593330][ T5914] hub 3-1:0.0: USB hub found [ 187.790938][ T5914] hub 3-1:0.0: 1 port detected [ 187.971929][ T7514] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 188.345553][ T3484] Bluetooth: Invalid byte 5e after esc byte [ 188.405156][ T5914] hub 3-1:0.0: activate --> -90 [ 188.605896][ T3484] Bluetooth: Error in BCSP hdr checksum [ 188.674651][ T5888] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 188.834585][ T5888] usb 1-1: Using ep0 maxpacket: 8 [ 188.843202][ T5888] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 188.852490][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.860546][ T5888] usb 1-1: Product: syz [ 188.865834][ T5888] usb 1-1: Manufacturer: syz [ 188.870480][ T5888] usb 1-1: SerialNumber: syz [ 188.878177][ T5888] usb 1-1: config 0 descriptor?? [ 188.886133][ T5888] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 188.895048][ T5888] pctv452e: pctv452e_power_ctrl: 1 [ 188.895048][ T5888] [ 188.902457][ T5888] usb 1-1: selecting invalid altsetting 3 [ 188.908287][ T5888] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 188.908287][ T5888] [ 188.918724][ T5888] dvb-usb: bulk message failed: -22 (5/0) [ 188.926920][ T5888] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 188.936779][ T5888] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 188.945285][ T5888] usb 1-1: media controller created [ 188.950535][ T5888] dvb-usb: bulk message failed: -22 (8/0) [ 188.956305][ T5888] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 188.964246][ T5888] dvb-usb: MAC address reading failed. [ 188.978035][ T5888] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 189.014390][ T5926] usb 3-1: USB disconnect, device number 42 [ 189.027335][ T5888] DVB: Unable to find symbol stb0899_attach() [ 189.033441][ T5888] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 189.087358][ T7524] dvb-usb: bulk message failed: -22 (7/0) [ 189.093528][ T7524] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 189.102186][ T5888] rc_core: IR keymap rc-tt-1500 not found [ 189.114268][ T5888] Registered IR keymap rc-empty [ 189.134833][ T5888] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 189.143232][ T1841] usb 2-1: USB disconnect, device number 52 [ 189.158511][ T5888] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input46 [ 189.187691][ T5888] dvb-usb: schedule remote query interval to 100 msecs. [ 189.196888][ T5888] pctv452e: pctv452e_power_ctrl: 0 [ 189.196888][ T5888] [ 189.197156][ T7528] Mount JFS Failure: -22 [ 189.204194][ T5888] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 189.209615][ T7528] jfs_mount failed w/return code = -22 [ 189.222465][ T5888] usb 1-1: USB disconnect, device number 46 [ 189.310716][ T5888] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 189.613376][ T7542] FAULT_INJECTION: forcing a failure. [ 189.613376][ T7542] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.630122][ T7542] CPU: 1 UID: 0 PID: 7542 Comm: syz.2.591 Not tainted syzkaller #0 PREEMPT(full) [ 189.630148][ T7542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 189.630159][ T7542] Call Trace: [ 189.630166][ T7542] [ 189.630173][ T7542] dump_stack_lvl+0x189/0x250 [ 189.630197][ T7542] ? __pfx____ratelimit+0x10/0x10 [ 189.630217][ T7542] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.630238][ T7542] ? __pfx__printk+0x10/0x10 [ 189.630257][ T7542] ? __might_fault+0xb0/0x130 [ 189.630287][ T7542] should_fail_ex+0x414/0x560 [ 189.630313][ T7542] _copy_from_iter+0x1de/0x1790 [ 189.630334][ T7542] ? rcu_is_watching+0x15/0xb0 [ 189.630360][ T7542] ? __pfx__copy_from_iter+0x10/0x10 [ 189.630378][ T7542] ? __build_skb_around+0x262/0x3f0 [ 189.630401][ T7542] ? netlink_sendmsg+0x642/0xb30 [ 189.630418][ T7542] ? skb_put+0x11b/0x210 [ 189.630440][ T7542] netlink_sendmsg+0x6b2/0xb30 [ 189.630469][ T7542] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.630492][ T7542] ? aa_sock_msg_perm+0xf1/0x1d0 [ 189.630513][ T7542] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 189.630543][ T7542] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.630561][ T7542] __sock_sendmsg+0x21c/0x270 [ 189.630588][ T7542] ____sys_sendmsg+0x505/0x830 [ 189.630614][ T7542] ? __pfx_____sys_sendmsg+0x10/0x10 [ 189.630643][ T7542] ? import_iovec+0x74/0xa0 [ 189.630665][ T7542] ___sys_sendmsg+0x21f/0x2a0 [ 189.630688][ T7542] ? __pfx____sys_sendmsg+0x10/0x10 [ 189.630743][ T7542] ? __fget_files+0x2a/0x420 [ 189.630760][ T7542] ? __fget_files+0x3a0/0x420 [ 189.630788][ T7542] __x64_sys_sendmsg+0x19b/0x260 [ 189.630811][ T7542] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 189.630842][ T7542] ? __pfx_ksys_write+0x10/0x10 [ 189.630861][ T7542] ? do_syscall_64+0xbe/0xfa0 [ 189.630886][ T7542] do_syscall_64+0xfa/0xfa0 [ 189.630907][ T7542] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.630924][ T7542] ? clear_bhb_loop+0x60/0xb0 [ 189.630945][ T7542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.630961][ T7542] RIP: 0033:0x7fbc2ab8f6c9 [ 189.630976][ T7542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.630991][ T7542] RSP: 002b:00007fbc2ba18038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.631010][ T7542] RAX: ffffffffffffffda RBX: 00007fbc2ade5fa0 RCX: 00007fbc2ab8f6c9 [ 189.631022][ T7542] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 189.631032][ T7542] RBP: 00007fbc2ba18090 R08: 0000000000000000 R09: 0000000000000000 [ 189.631042][ T7542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.631051][ T7542] R13: 00007fbc2ade6038 R14: 00007fbc2ade5fa0 R15: 00007ffec691bfa8 [ 189.631085][ T7542] [ 189.966049][ T7546] netlink: 12 bytes leftover after parsing attributes in process `syz.0.593'. [ 190.144947][ T5824] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 190.145112][ T5829] Bluetooth: hci4: command 0x1003 tx timeout [ 190.331694][ T7578] dummy0: entered promiscuous mode [ 190.357710][ T7578] dummy0: entered allmulticast mode [ 190.388059][ T7579] tipc: Enabled bearer , priority 0 [ 190.479184][ T7582] Mount JFS Failure: -22 [ 190.494899][ T5908] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 190.504611][ T7582] jfs_mount failed w/return code = -22 [ 190.663689][ T7593] Can't find a SQUASHFS superblock on nullb0 [ 190.670649][ T5908] usb 3-1: Using ep0 maxpacket: 8 [ 190.697225][ T5908] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 190.706609][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.714684][ T5908] usb 3-1: Product: syz [ 190.724993][ T5908] usb 3-1: Manufacturer: syz [ 190.735938][ T5908] usb 3-1: SerialNumber: syz [ 190.747144][ T5914] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 190.765327][ T5908] usb 3-1: config 0 descriptor?? [ 190.779370][ T5908] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 190.797743][ T5908] pctv452e: pctv452e_power_ctrl: 1 [ 190.797743][ T5908] [ 190.806029][ T5908] usb 3-1: selecting invalid altsetting 3 [ 190.811742][ T5908] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 190.811742][ T5908] [ 190.822291][ T5908] dvb-usb: bulk message failed: -22 (5/0) [ 190.830046][ T5908] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 190.842023][ T5908] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 190.850455][ T5908] usb 3-1: media controller created [ 190.855736][ T5908] dvb-usb: bulk message failed: -22 (8/0) [ 190.861463][ T5908] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 190.869472][ T5908] dvb-usb: MAC address reading failed. [ 190.882059][ T5908] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 190.914679][ T5914] usb 4-1: Using ep0 maxpacket: 32 [ 190.922112][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.933595][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.941129][ T5908] DVB: Unable to find symbol stb0899_attach() [ 190.944880][ T5914] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 190.956617][ T5908] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 190.959440][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.979278][ T5914] usb 4-1: config 0 descriptor?? [ 190.995395][ T5914] hub 4-1:0.0: USB hub found [ 191.026320][ T1841] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 191.034033][ T5926] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 191.045271][ T5908] rc_core: IR keymap rc-tt-1500 not found [ 191.051000][ T5908] Registered IR keymap rc-empty [ 191.057940][ T5908] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 191.069717][ T5908] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input47 [ 191.082915][ T5908] dvb-usb: schedule remote query interval to 100 msecs. [ 191.089986][ T5908] pctv452e: pctv452e_power_ctrl: 0 [ 191.089986][ T5908] [ 191.097572][ T5908] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 191.110567][ T5908] usb 3-1: USB disconnect, device number 43 [ 191.149009][ T5908] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 191.197773][ T5914] hub 4-1:0.0: 1 port detected [ 191.200140][ T1841] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 191.214448][ T1841] usb 2-1: config 1 has no interface number 0 [ 191.220707][ T1841] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 191.232574][ T1841] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 191.244884][ T1841] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 191.254779][ T5926] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.264904][ T1841] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0xF has an invalid bInterval 32, changing to 9 [ 191.275988][ T5926] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 191.289449][ T5926] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 191.298720][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.308394][ T1841] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 191.318121][ T1841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.327375][ T5926] usb 1-1: config 0 descriptor?? [ 191.335912][ T5926] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 191.343241][ T1841] usb 2-1: Product: syz [ 191.348449][ T1841] usb 2-1: Manufacturer: syz [ 191.353052][ T1841] usb 2-1: SerialNumber: syz [ 191.368539][ T7597] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 191.376350][ T7597] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 191.585644][ T7597] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 191.593040][ T7597] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 191.604972][ T1841] usb 2-1: No status endpoint found [ 191.784648][ T1841] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 191.806486][ T5914] hub 4-1:0.0: activate --> -90 [ 191.822758][ T5926] usb 2-1: USB disconnect, device number 53 [ 191.936941][ T1841] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.948064][ T1841] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.958218][ T1841] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 191.968318][ T1841] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.978775][ T1841] usb 3-1: config 0 descriptor?? [ 192.401609][ T1841] cp2112 0003:10C4:EA90.0025: unknown main item tag 0x0 [ 192.407446][ T7604] program syz.1.608 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 192.420994][ T1841] cp2112 0003:10C4:EA90.0025: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 192.422278][ T5888] usb 4-1: USB disconnect, device number 50 [ 192.550642][ T7607] netlink: 'syz.1.609': attribute type 83 has an invalid length. [ 192.595835][ T1841] cp2112 0003:10C4:EA90.0025: Part Number: 0x82 Device Version: 0xFE [ 192.864601][ T5926] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 193.027811][ T5926] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 193.038576][ T5926] usb 2-1: config 0 has no interface number 0 [ 193.048325][ T5926] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 193.057465][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.065760][ T5926] usb 2-1: Product: syz [ 193.069942][ T5926] usb 2-1: Manufacturer: syz [ 193.074637][ T5926] usb 2-1: SerialNumber: syz [ 193.081493][ T5926] usb 2-1: config 0 descriptor?? [ 193.194602][ T5888] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 193.203991][ T7601] cp2112 0003:10C4:EA90.0025: Error starting transaction: -38 [ 193.212835][ T1841] cp2112 0003:10C4:EA90.0025: error reading lock byte: -71 [ 193.227012][ T1841] usb 3-1: USB disconnect, device number 44 [ 193.292388][ T5926] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 193.303225][ T5926] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 193.313811][ T5926] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 193.321883][ T5926] usb 2-1: media controller created [ 193.334165][ T5926] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 193.349613][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.361014][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.371397][ T5888] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 193.380628][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.391099][ T5888] usb 4-1: config 0 descriptor?? [ 193.769548][ T5908] usb 1-1: USB disconnect, device number 47 [ 193.811061][ T5888] cp2112 0003:10C4:EA90.0026: unknown main item tag 0x0 [ 193.824145][ T5888] cp2112 0003:10C4:EA90.0026: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 193.943367][ T7622] FAULT_INJECTION: forcing a failure. [ 193.943367][ T7622] name failslab, interval 1, probability 0, space 0, times 0 [ 193.956585][ T7622] CPU: 1 UID: 0 PID: 7622 Comm: syz.0.614 Not tainted syzkaller #0 PREEMPT(full) [ 193.956609][ T7622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 193.956619][ T7622] Call Trace: [ 193.956627][ T7622] [ 193.956634][ T7622] dump_stack_lvl+0x189/0x250 [ 193.956660][ T7622] ? __pfx____ratelimit+0x10/0x10 [ 193.956680][ T7622] ? __pfx_dump_stack_lvl+0x10/0x10 [ 193.956700][ T7622] ? __pfx__printk+0x10/0x10 [ 193.956726][ T7622] ? __pfx___might_resched+0x10/0x10 [ 193.956743][ T7622] ? fs_reclaim_acquire+0x7d/0x100 [ 193.956771][ T7622] should_fail_ex+0x414/0x560 [ 193.956797][ T7622] should_failslab+0xa8/0x100 [ 193.956822][ T7622] __kmalloc_noprof+0xdf/0x800 [ 193.956841][ T7622] ? __vb2_queue_alloc+0x29d/0x15a0 [ 193.956864][ T7622] __vb2_queue_alloc+0x29d/0x15a0 [ 193.956892][ T7622] ? vid_out_queue_setup+0xb1d/0x12b0 [ 193.956928][ T7622] vb2_core_reqbufs+0xc31/0x1420 [ 193.956946][ T7622] ? do_syscall_64+0xfa/0xfa0 [ 193.956984][ T7622] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 193.957012][ T7622] ? vb2_verify_memory_type+0x1fc/0x570 [ 193.957034][ T7622] vb2_ioctl_reqbufs+0x4c0/0x830 [ 193.957120][ T7622] __video_do_ioctl+0xa59/0xc10 [ 193.957150][ T7622] ? __pfx___video_do_ioctl+0x10/0x10 [ 193.957185][ T7622] video_usercopy+0x82d/0x1450 [ 193.957216][ T7622] ? __pfx___video_do_ioctl+0x10/0x10 [ 193.957235][ T7622] ? __pfx_video_usercopy+0x10/0x10 [ 193.957270][ T7622] ? __fget_files+0x3a0/0x420 [ 193.957293][ T7622] v4l2_ioctl+0x18d/0x1e0 [ 193.957313][ T7622] ? __pfx_v4l2_ioctl+0x10/0x10 [ 193.957332][ T7622] __se_sys_ioctl+0xfc/0x170 [ 193.957359][ T7622] do_syscall_64+0xfa/0xfa0 [ 193.957380][ T7622] ? irqentry_exit+0x10f/0x640 [ 193.957398][ T7622] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.957415][ T7622] ? clear_bhb_loop+0x60/0xb0 [ 193.957436][ T7622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.957452][ T7622] RIP: 0033:0x7fb5ae98f6c9 [ 193.957468][ T7622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.957482][ T7622] RSP: 002b:00007fb5acbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 193.957500][ T7622] RAX: ffffffffffffffda RBX: 00007fb5aebe5fa0 RCX: 00007fb5ae98f6c9 [ 193.957512][ T7622] RDX: 0000200000000040 RSI: 00000000c0145608 RDI: 0000000000000003 [ 193.957523][ T7622] RBP: 00007fb5acbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 193.957533][ T7622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.957544][ T7622] R13: 00007fb5aebe6038 R14: 00007fb5aebe5fa0 R15: 00007ffd971890e8 [ 193.957575][ T7622] [ 194.222339][ T1841] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 194.239018][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.246870][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.266608][ T5888] cp2112 0003:10C4:EA90.0026: Part Number: 0x82 Device Version: 0xFE [ 194.414613][ T1841] usb 3-1: Using ep0 maxpacket: 8 [ 194.416349][ T1841] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.416380][ T1841] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.416401][ T1841] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 194.416441][ T1841] usb 3-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 194.416463][ T1841] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.420266][ T1841] usb 3-1: config 0 descriptor?? [ 194.831811][ T1841] elecom 0003:056E:00FE.0027: unknown main item tag 0x0 [ 194.831848][ T1841] elecom 0003:056E:00FE.0027: unknown main item tag 0x0 [ 194.831876][ T1841] elecom 0003:056E:00FE.0027: unknown main item tag 0x0 [ 194.831902][ T1841] elecom 0003:056E:00FE.0027: unknown main item tag 0x0 [ 194.831927][ T1841] elecom 0003:056E:00FE.0027: unknown main item tag 0x0 [ 194.831953][ T1841] elecom 0003:056E:00FE.0027: unknown main item tag 0x0 [ 194.831979][ T1841] elecom 0003:056E:00FE.0027: unknown main item tag 0x0 [ 194.832005][ T1841] elecom 0003:056E:00FE.0027: unknown main item tag 0x0 [ 194.837350][ T1841] elecom 0003:056E:00FE.0027: hidraw1: USB HID v0.00 Device [HID 056e:00fe] on usb-dummy_hcd.2-1/input0 [ 194.899755][ T5888] cp2112 0003:10C4:EA90.0026: error reading lock byte: -71 [ 194.934084][ T5888] usb 4-1: USB disconnect, device number 51 [ 195.047636][ T7614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.048065][ T7614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.070969][ T10] usb 3-1: USB disconnect, device number 45 [ 195.614693][ T10] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 195.632079][ T5926] usb 2-1: USB disconnect, device number 54 [ 195.664631][ T1841] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 195.796230][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.810578][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.821549][ T10] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 195.832167][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.838439][ T1841] usb 4-1: Using ep0 maxpacket: 32 [ 195.845263][ T10] usb 1-1: config 0 descriptor?? [ 195.874339][ T1841] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 195.882895][ T1841] usb 4-1: config 0 has no interface number 0 [ 195.889700][ T1841] usb 4-1: config 0 interface 12 has no altsetting 0 [ 195.901643][ T1841] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 195.911115][ T1841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.920275][ T1841] usb 4-1: Product: syz [ 195.924488][ T1841] usb 4-1: Manufacturer: syz [ 195.931200][ T1841] usb 4-1: SerialNumber: syz [ 195.940995][ T1841] usb 4-1: config 0 descriptor?? [ 196.057036][ T5926] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 196.210291][ T1841] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 196.219943][ T5926] usb 2-1: Using ep0 maxpacket: 32 [ 196.231512][ T1841] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 196.244201][ T1841] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 196.253270][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.261202][ T10] cp2112 0003:10C4:EA90.0028: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 196.279620][ T1841] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 196.290969][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.312940][ T53] Bluetooth: hci0: command 0x0406 tx timeout [ 196.320152][ T5827] Bluetooth: hci3: command 0x0406 tx timeout [ 196.320176][ T5831] Bluetooth: hci2: command 0x0406 tx timeout [ 196.326423][ T53] Bluetooth: hci1: command 0x0406 tx timeout [ 196.354006][ T1841] usb 4-1: USB disconnect, device number 52 [ 196.377451][ T5926] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 196.413645][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.442901][ T5926] usb 2-1: config 0 descriptor?? [ 196.448264][ T10] cp2112 0003:10C4:EA90.0028: Part Number: 0x82 Device Version: 0xFE [ 196.463381][ T5926] hub 2-1:0.0: USB hub found [ 196.661151][ T5926] hub 2-1:0.0: 1 port detected [ 196.670923][ T7659] netlink: 16 bytes leftover after parsing attributes in process `syz.2.624'. [ 196.925852][ T7664] FAULT_INJECTION: forcing a failure. [ 196.925852][ T7664] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.940205][ T7664] CPU: 1 UID: 0 PID: 7664 Comm: syz.2.626 Not tainted syzkaller #0 PREEMPT(full) [ 196.940230][ T7664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 196.940241][ T7664] Call Trace: [ 196.940248][ T7664] [ 196.940255][ T7664] dump_stack_lvl+0x189/0x250 [ 196.940281][ T7664] ? __pfx____ratelimit+0x10/0x10 [ 196.940302][ T7664] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.940322][ T7664] ? __pfx__printk+0x10/0x10 [ 196.940355][ T7664] should_fail_ex+0x414/0x560 [ 196.940384][ T7664] _copy_to_user+0x31/0xb0 [ 196.940405][ T7664] simple_read_from_buffer+0xe1/0x170 [ 196.940429][ T7664] proc_fail_nth_read+0x1b3/0x220 [ 196.940452][ T7664] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 196.940478][ T7664] ? rw_verify_area+0x2a6/0x4d0 [ 196.940500][ T7664] ? __lock_acquire+0xab9/0xd20 [ 196.940516][ T7664] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 196.940541][ T7664] vfs_read+0x200/0xa30 [ 196.940556][ T7664] ? fdget_pos+0x247/0x320 [ 196.940579][ T7664] ? __pfx___mutex_lock+0x10/0x10 [ 196.940600][ T7664] ? __pfx_vfs_read+0x10/0x10 [ 196.940618][ T7664] ? __fget_files+0x2a/0x420 [ 196.940641][ T7664] ? __fget_files+0x3a0/0x420 [ 196.940658][ T7664] ? __fget_files+0x2a/0x420 [ 196.940686][ T7664] ksys_read+0x145/0x250 [ 196.940705][ T7664] ? __pfx_ksys_read+0x10/0x10 [ 196.940725][ T7664] ? do_syscall_64+0xbe/0xfa0 [ 196.940749][ T7664] do_syscall_64+0xfa/0xfa0 [ 196.940770][ T7664] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.940786][ T7664] ? clear_bhb_loop+0x60/0xb0 [ 196.940807][ T7664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.940823][ T7664] RIP: 0033:0x7fbc2ab8e0dc [ 196.940838][ T7664] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 196.940852][ T7664] RSP: 002b:00007fbc2ba18030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 196.940872][ T7664] RAX: ffffffffffffffda RBX: 00007fbc2ade5fa0 RCX: 00007fbc2ab8e0dc [ 196.940885][ T7664] RDX: 000000000000000f RSI: 00007fbc2ba180a0 RDI: 0000000000000004 [ 196.940896][ T7664] RBP: 00007fbc2ba18090 R08: 0000000000000000 R09: 0000000000000000 [ 196.940906][ T7664] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 196.940917][ T7664] R13: 00007fbc2ade6038 R14: 00007fbc2ade5fa0 R15: 00007ffec691bfa8 [ 196.940948][ T7664] [ 197.192051][ T7637] FAULT_INJECTION: forcing a failure. [ 197.192051][ T7637] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.205283][ T7637] CPU: 1 UID: 0 PID: 7637 Comm: syz.0.618 Not tainted syzkaller #0 PREEMPT(full) [ 197.205306][ T7637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 197.205317][ T7637] Call Trace: [ 197.205325][ T7637] [ 197.205332][ T7637] dump_stack_lvl+0x189/0x250 [ 197.205358][ T7637] ? __pfx____ratelimit+0x10/0x10 [ 197.205379][ T7637] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.205399][ T7637] ? __pfx__printk+0x10/0x10 [ 197.205418][ T7637] ? __might_fault+0xb0/0x130 [ 197.205451][ T7637] should_fail_ex+0x414/0x560 [ 197.205479][ T7637] _copy_from_user+0x2d/0xb0 [ 197.205499][ T7637] i2cdev_ioctl+0x11a/0x820 [ 197.205521][ T7637] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 197.205548][ T7637] ? __fget_files+0x2a/0x420 [ 197.205571][ T7637] ? bpf_lsm_file_ioctl+0x9/0x20 [ 197.205594][ T7637] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 197.205616][ T7637] __se_sys_ioctl+0xfc/0x170 [ 197.205642][ T7637] do_syscall_64+0xfa/0xfa0 [ 197.205662][ T7637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.205678][ T7637] ? clear_bhb_loop+0x60/0xb0 [ 197.205697][ T7637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.205711][ T7637] RIP: 0033:0x7fb5ae98f6c9 [ 197.205726][ T7637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.205739][ T7637] RSP: 002b:00007fb5acbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 197.205758][ T7637] RAX: ffffffffffffffda RBX: 00007fb5aebe5fa0 RCX: 00007fb5ae98f6c9 [ 197.205770][ T7637] RDX: 00002000000001c0 RSI: 0000000000000720 RDI: 0000000000000004 [ 197.205782][ T7637] RBP: 00007fb5acbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 197.205792][ T7637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.205801][ T7637] R13: 00007fb5aebe6038 R14: 00007fb5aebe5fa0 R15: 00007ffd971890e8 [ 197.205831][ T7637] [ 197.206541][ T10] cp2112 0003:10C4:EA90.0028: error reading lock byte: -71 [ 197.394878][ T1841] hub 2-1:0.0: activate --> -90 [ 197.408023][ T10] usb 1-1: USB disconnect, device number 48 [ 197.497470][ T7670] FAULT_INJECTION: forcing a failure. [ 197.497470][ T7670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.511322][ T7670] CPU: 1 UID: 0 PID: 7670 Comm: syz.3.629 Not tainted syzkaller #0 PREEMPT(full) [ 197.511346][ T7670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 197.511356][ T7670] Call Trace: [ 197.511363][ T7670] [ 197.511370][ T7670] dump_stack_lvl+0x189/0x250 [ 197.511395][ T7670] ? __pfx____ratelimit+0x10/0x10 [ 197.511416][ T7670] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.511436][ T7670] ? __pfx__printk+0x10/0x10 [ 197.511456][ T7670] ? __might_fault+0xb0/0x130 [ 197.511487][ T7670] should_fail_ex+0x414/0x560 [ 197.511515][ T7670] _copy_from_iter+0x1de/0x1790 [ 197.511530][ T7670] ? aa_file_perm+0x139/0x1540 [ 197.511550][ T7670] ? aa_file_perm+0x44c/0x1540 [ 197.511570][ T7670] ? _parse_integer_limit+0x1ae/0x1f0 [ 197.511600][ T7670] ? __pfx__copy_from_iter+0x10/0x10 [ 197.511615][ T7670] ? __lock_acquire+0xab9/0xd20 [ 197.511635][ T7670] ? __pfx_aa_file_perm+0x10/0x10 [ 197.511660][ T7670] ? iov_iter_advance+0x8b/0x1c0 [ 197.511679][ T7670] vhost_chr_write_iter+0x22c/0xad0 [ 197.511713][ T7670] ? __pfx_vhost_chr_write_iter+0x10/0x10 [ 197.511735][ T7670] ? common_file_perm+0x1b5/0x230 [ 197.511759][ T7670] ? security_file_permission+0x75/0x290 [ 197.511792][ T7670] vfs_write+0x5c9/0xb30 [ 197.511814][ T7670] ? __pfx_vhost_vsock_chr_write_iter+0x10/0x10 [ 197.511834][ T7670] ? __pfx_vfs_write+0x10/0x10 [ 197.511861][ T7670] ? __fget_files+0x2a/0x420 [ 197.511889][ T7670] ksys_write+0x145/0x250 [ 197.511908][ T7670] ? __pfx_ksys_write+0x10/0x10 [ 197.511928][ T7670] ? do_syscall_64+0xbe/0xfa0 [ 197.511959][ T7670] do_syscall_64+0xfa/0xfa0 [ 197.511980][ T7670] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.511997][ T7670] ? clear_bhb_loop+0x60/0xb0 [ 197.512018][ T7670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.512035][ T7670] RIP: 0033:0x7f2e93d8f6c9 [ 197.512050][ T7670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.512064][ T7670] RSP: 002b:00007f2e94d0b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 197.512082][ T7670] RAX: ffffffffffffffda RBX: 00007f2e93fe5fa0 RCX: 00007f2e93d8f6c9 [ 197.512094][ T7670] RDX: 0000000000000048 RSI: 0000200000000280 RDI: 0000000000000003 [ 197.512105][ T7670] RBP: 00007f2e94d0b090 R08: 0000000000000000 R09: 0000000000000000 [ 197.512115][ T7670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.512125][ T7670] R13: 00007f2e93fe6038 R14: 00007f2e93fe5fa0 R15: 00007fff2aa691a8 [ 197.512154][ T7670] [ 197.780497][ T5926] hub 2-1:0.0: hub_ext_port_status failed (err = 3) [ 197.787459][ T1841] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 197.944586][ T1841] usb 3-1: Using ep0 maxpacket: 32 [ 197.951532][ T1841] usb 3-1: config 0 has an invalid interface number: 220 but max is 0 [ 197.959984][ T1841] usb 3-1: config 0 has no interface number 0 [ 197.966146][ T1841] usb 3-1: config 0 interface 220 has no altsetting 0 [ 197.998613][ T1841] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice= f.70 [ 198.008834][ T1841] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.016887][ T1841] usb 3-1: Product: syz [ 198.021049][ T1841] usb 3-1: Manufacturer: syz [ 198.034585][ T1841] usb 3-1: SerialNumber: syz [ 198.042004][ T1841] usb 3-1: config 0 descriptor?? [ 198.059665][ T1841] adutux 3-1:0.220: interrupt endpoints not found [ 198.085058][ T1841] usb 2-1: USB disconnect, device number 55 [ 198.634623][ T1841] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 198.776404][ T10] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 198.804578][ T1841] usb 1-1: Using ep0 maxpacket: 32 [ 198.811690][ T1841] usb 1-1: config 9 has an invalid interface number: 61 but max is 0 [ 198.821312][ T1841] usb 1-1: config 9 has no interface number 0 [ 198.827794][ T1841] usb 1-1: config 9 interface 61 has no altsetting 0 [ 198.836791][ T1841] usb 1-1: New USB device found, idVendor=08ca, idProduct=0103, bcdDevice=32.dd [ 198.848040][ T1841] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.856138][ T1841] usb 1-1: Product: syz [ 198.860303][ T1841] usb 1-1: Manufacturer: syz [ 198.865574][ T1841] usb 1-1: SerialNumber: syz [ 198.937270][ T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 198.947349][ T10] usb 2-1: config 0 has no interface number 0 [ 198.956536][ T10] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 198.965702][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.973722][ T10] usb 2-1: Product: syz [ 198.978295][ T10] usb 2-1: Manufacturer: syz [ 198.982899][ T10] usb 2-1: SerialNumber: syz [ 198.992757][ T10] usb 2-1: config 0 descriptor?? [ 199.046576][ T7697] tipc: Failed to obtain node identity [ 199.052466][ T7697] tipc: Enabling of bearer rejected, failed to enable media [ 199.085988][ T1841] gspca_main: spca500-2.14.0 probing 08ca:0103 [ 199.108988][ T1841] usb 1-1: USB disconnect, device number 49 [ 199.272130][ T10] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 199.283121][ T10] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 199.309069][ T10] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 199.327348][ T10] usb 2-1: media controller created [ 199.377669][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 199.428490][ T7699] tipc: Failed to obtain node identity [ 199.434914][ T7699] tipc: Enabling of bearer rejected, failed to enable media [ 199.473032][ T10] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 199.547858][ T10] usb 2-1: USB disconnect, device number 56 [ 200.048164][ T7712] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1420284373 (5681137492 ns) > initial count (657219872 ns). Using initial count to start timer. [ 200.107034][ T5888] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 200.157478][ T7715] FAULT_INJECTION: forcing a failure. [ 200.157478][ T7715] name failslab, interval 1, probability 0, space 0, times 0 [ 200.170421][ T7715] CPU: 0 UID: 0 PID: 7715 Comm: syz.3.641 Not tainted syzkaller #0 PREEMPT(full) [ 200.170445][ T7715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 200.170455][ T7715] Call Trace: [ 200.170462][ T7715] [ 200.170469][ T7715] dump_stack_lvl+0x189/0x250 [ 200.170494][ T7715] ? __pfx____ratelimit+0x10/0x10 [ 200.170515][ T7715] ? __pfx_dump_stack_lvl+0x10/0x10 [ 200.170535][ T7715] ? __pfx__printk+0x10/0x10 [ 200.170561][ T7715] ? __pfx___might_resched+0x10/0x10 [ 200.170579][ T7715] ? fs_reclaim_acquire+0x7d/0x100 [ 200.170606][ T7715] should_fail_ex+0x414/0x560 [ 200.170633][ T7715] should_failslab+0xa8/0x100 [ 200.170659][ T7715] kmem_cache_alloc_node_noprof+0x8c/0x710 [ 200.170681][ T7715] ? __alloc_skb+0x112/0x2d0 [ 200.170706][ T7715] __alloc_skb+0x112/0x2d0 [ 200.170735][ T7715] netlink_sendmsg+0x5c6/0xb30 [ 200.170766][ T7715] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.170790][ T7715] ? aa_sock_msg_perm+0xf1/0x1d0 [ 200.170812][ T7715] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 200.170834][ T7715] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.170856][ T7715] __sock_sendmsg+0x21c/0x270 [ 200.170884][ T7715] ____sys_sendmsg+0x505/0x830 [ 200.170911][ T7715] ? __pfx_____sys_sendmsg+0x10/0x10 [ 200.170941][ T7715] ? import_iovec+0x74/0xa0 [ 200.170964][ T7715] ___sys_sendmsg+0x21f/0x2a0 [ 200.170988][ T7715] ? __pfx____sys_sendmsg+0x10/0x10 [ 200.171045][ T7715] ? __fget_files+0x2a/0x420 [ 200.171063][ T7715] ? __fget_files+0x3a0/0x420 [ 200.171092][ T7715] __x64_sys_sendmsg+0x19b/0x260 [ 200.171116][ T7715] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 200.171147][ T7715] ? __pfx_ksys_write+0x10/0x10 [ 200.171168][ T7715] ? do_syscall_64+0xbe/0xfa0 [ 200.171193][ T7715] do_syscall_64+0xfa/0xfa0 [ 200.171214][ T7715] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.171231][ T7715] ? clear_bhb_loop+0x60/0xb0 [ 200.171251][ T7715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.171266][ T7715] RIP: 0033:0x7f2e93d8f6c9 [ 200.171282][ T7715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.171295][ T7715] RSP: 002b:00007f2e94cc9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.171313][ T7715] RAX: ffffffffffffffda RBX: 00007f2e93fe6180 RCX: 00007f2e93d8f6c9 [ 200.171326][ T7715] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 000000000000000e [ 200.171336][ T7715] RBP: 00007f2e94cc9090 R08: 0000000000000000 R09: 0000000000000000 [ 200.171346][ T7715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.171357][ T7715] R13: 00007f2e93fe6218 R14: 00007f2e93fe6180 R15: 00007fff2aa691a8 [ 200.171385][ T7715] [ 200.710156][ T5888] usb 1-1: Using ep0 maxpacket: 8 [ 200.718723][ T5888] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 200.729585][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.743287][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.744444][ T5926] usb 3-1: USB disconnect, device number 46 [ 200.794289][ T5888] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 200.808349][ T5888] usb 1-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 200.827787][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.875915][ T5888] usb 1-1: config 0 descriptor?? [ 201.077326][ T7725] netlink: 1072 bytes leftover after parsing attributes in process `syz.3.646'. [ 201.087834][ T7725] netlink: 280 bytes leftover after parsing attributes in process `syz.3.646'. [ 201.105646][ T10] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 201.274687][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 201.292815][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.305606][ T7704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.320514][ T7704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.328397][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.346780][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 201.367511][ T7704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.389600][ T7704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.402341][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.432258][ T10] usb 2-1: config 0 descriptor?? [ 201.460150][ T5888] usbhid 1-1:0.0: can't add hid device: -71 [ 201.466618][ T5888] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 201.480466][ T10] hub 2-1:0.0: USB hub found [ 201.498487][ T5888] usb 1-1: USB disconnect, device number 50 [ 201.686511][ T10] hub 2-1:0.0: 1 port detected [ 201.858338][ T7739] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1420284373 (5681137492 ns) > initial count (657219872 ns). Using initial count to start timer. [ 201.879475][ T7739] FAULT_INJECTION: forcing a failure. [ 201.879475][ T7739] name failslab, interval 1, probability 0, space 0, times 0 [ 201.899577][ T7739] CPU: 1 UID: 0 PID: 7739 Comm: syz.3.650 Not tainted syzkaller #0 PREEMPT(full) [ 201.899608][ T7739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 201.899617][ T7739] Call Trace: [ 201.899623][ T7739] [ 201.899630][ T7739] dump_stack_lvl+0x189/0x250 [ 201.899655][ T7739] ? __pfx____ratelimit+0x10/0x10 [ 201.899674][ T7739] ? __pfx_dump_stack_lvl+0x10/0x10 [ 201.899693][ T7739] ? __pfx__printk+0x10/0x10 [ 201.899716][ T7739] ? __pfx___might_resched+0x10/0x10 [ 201.899734][ T7739] ? fs_reclaim_acquire+0x7d/0x100 [ 201.899761][ T7739] should_fail_ex+0x414/0x560 [ 201.899788][ T7739] should_failslab+0xa8/0x100 [ 201.899812][ T7739] __kmalloc_cache_noprof+0x84/0x700 [ 201.899832][ T7739] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 201.899855][ T7739] ? kvm_hv_vcpu_init+0x86/0xaf0 [ 201.899881][ T7739] kvm_hv_vcpu_init+0x86/0xaf0 [ 201.899905][ T7739] kvm_hv_set_msr_common+0xe3/0x3480 [ 201.899931][ T7739] ? stack_depot_save_flags+0x40/0x860 [ 201.899956][ T7739] ? __pfx_kvm_hv_set_msr_common+0x10/0x10 [ 201.899979][ T7739] ? kasan_save_track+0x4f/0x80 [ 201.899998][ T7739] ? kasan_save_track+0x3e/0x80 [ 201.900014][ T7739] ? __kasan_kmalloc+0x93/0xb0 [ 201.900033][ T7739] ? __kmalloc_node_track_caller_noprof+0x571/0x810 [ 201.900056][ T7739] kvm_set_msr_common+0x1e34/0x41c0 [ 201.900078][ T7739] ? __pfx_kvm_set_msr_common+0x10/0x10 [ 201.900105][ T7739] vmx_set_msr+0x15d8/0x2830 [ 201.900124][ T7739] ? __lock_acquire+0xab9/0xd20 [ 201.900152][ T7739] __kvm_set_msr+0x62c/0xac0 [ 201.900181][ T7739] ? __pfx___kvm_set_msr+0x10/0x10 [ 201.900211][ T7739] ? __pfx_do_set_msr+0x10/0x10 [ 201.900229][ T7739] kvm_set_msr_ignored_check+0x2a/0x390 [ 201.900252][ T7739] ? __pfx_do_set_msr+0x10/0x10 [ 201.900268][ T7739] msr_io+0x423/0x8d0 [ 201.900289][ T7739] ? __pfx_do_set_msr+0x10/0x10 [ 201.900307][ T7739] ? __pfx_msr_io+0x10/0x10 [ 201.900333][ T7739] kvm_arch_vcpu_ioctl+0x6f7/0x2a70 [ 201.900352][ T7739] ? kvm_arch_vcpu_ioctl+0x6bd/0x2a70 [ 201.900372][ T7739] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 201.900388][ T7739] ? __lock_acquire+0xab9/0xd20 [ 201.900424][ T7739] ? is_bpf_text_address+0x26/0x2b0 [ 201.900450][ T7739] ? is_bpf_text_address+0x292/0x2b0 [ 201.900471][ T7739] ? is_bpf_text_address+0x26/0x2b0 [ 201.900495][ T7739] ? kernel_text_address+0xa5/0xe0 [ 201.900519][ T7739] ? __kernel_text_address+0xd/0x40 [ 201.900541][ T7739] ? unwind_get_return_address+0x4d/0x90 [ 201.900560][ T7739] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 201.900584][ T7739] ? arch_stack_walk+0xfc/0x150 [ 201.900626][ T7739] ? __pfx_stack_trace_save+0x10/0x10 [ 201.900652][ T7739] ? stack_depot_save_flags+0x40/0x860 [ 201.900692][ T7739] ? __lock_acquire+0xab9/0xd20 [ 201.900718][ T7739] ? __mutex_trylock_common+0x153/0x260 [ 201.900743][ T7739] ? __pfx___mutex_trylock_common+0x10/0x10 [ 201.900768][ T7739] ? rcu_is_watching+0x15/0xb0 [ 201.900790][ T7739] ? trace_contention_end+0x39/0x120 [ 201.900810][ T7739] ? __mutex_lock+0x335/0x1350 [ 201.900839][ T7739] ? kasan_quarantine_put+0xdd/0x220 [ 201.900859][ T7739] ? lockdep_hardirqs_on+0x9c/0x150 [ 201.900880][ T7739] ? kvm_vcpu_ioctl+0x22e/0xe90 [ 201.900904][ T7739] ? __pfx___mutex_lock+0x10/0x10 [ 201.900926][ T7739] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 201.900948][ T7739] ? do_vfs_ioctl+0xbe8/0x1430 [ 201.900970][ T7739] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 201.900988][ T7739] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 201.901014][ T7739] kvm_vcpu_ioctl+0x74d/0xe90 [ 201.901042][ T7739] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 201.901087][ T7739] ? __fget_files+0x2a/0x420 [ 201.901111][ T7739] ? __fget_files+0x3a0/0x420 [ 201.901128][ T7739] ? __fget_files+0x2a/0x420 [ 201.901150][ T7739] ? bpf_lsm_file_ioctl+0x9/0x20 [ 201.901174][ T7739] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 201.901195][ T7739] __se_sys_ioctl+0xfc/0x170 [ 201.901220][ T7739] do_syscall_64+0xfa/0xfa0 [ 201.901241][ T7739] ? irqentry_exit+0x10f/0x640 [ 201.901259][ T7739] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.901276][ T7739] ? clear_bhb_loop+0x60/0xb0 [ 201.901296][ T7739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.901312][ T7739] RIP: 0033:0x7f2e93d8f6c9 [ 201.901328][ T7739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.901342][ T7739] RSP: 002b:00007f2e94d0b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 201.901360][ T7739] RAX: ffffffffffffffda RBX: 00007f2e93fe5fa0 RCX: 00007f2e93d8f6c9 [ 201.901372][ T7739] RDX: 00002000000004c0 RSI: 000000004008ae89 RDI: 0000000000000005 [ 201.901383][ T7739] RBP: 00007f2e94d0b090 R08: 0000000000000000 R09: 0000000000000000 [ 201.901393][ T7739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.901403][ T7739] R13: 00007f2e93fe6038 R14: 00007f2e93fe5fa0 R15: 00007fff2aa691a8 [ 201.901436][ T7739] [ 202.612657][ T5888] hub 2-1:0.0: activate --> -90 [ 202.686399][ T7750] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1420284373 (5681137492 ns) > initial count (657219872 ns). Using initial count to start timer. [ 202.820896][ T5888] hub 2-1:0.0: hub_ext_port_status failed (err = 3) [ 202.829637][ T5829] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 203.134784][ T5926] usb 2-1: USB disconnect, device number 57 [ 203.144999][ T5888] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 203.156410][ T10] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 203.304762][ T5888] usb 1-1: Using ep0 maxpacket: 16 [ 203.312766][ T5888] usb 1-1: config 0 has no interfaces? [ 203.320929][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.335637][ T5888] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 203.345038][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.357551][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=222 [ 203.366166][ T5888] usb 1-1: SerialNumber: syz [ 203.373576][ T10] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 203.383592][ T5888] usb 1-1: config 0 descriptor?? [ 203.389276][ T10] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 203.397510][ T10] usb 4-1: Manufacturer: syz [ 203.412223][ T10] usb 4-1: config 0 descriptor?? [ 203.605695][ T5926] usb 1-1: USB disconnect, device number 51 [ 203.833593][ T10] hid_parser_main: 63 callbacks suppressed [ 203.833616][ T10] pyra 0003:1E7D:2CF6.0029: unknown main item tag 0x0 [ 203.852263][ T10] pyra 0003:1E7D:2CF6.0029: unknown main item tag 0x0 [ 203.860632][ T10] pyra 0003:1E7D:2CF6.0029: unknown main item tag 0x0 [ 203.870557][ T10] pyra 0003:1E7D:2CF6.0029: unknown main item tag 0x0 [ 203.878082][ T10] pyra 0003:1E7D:2CF6.0029: unknown main item tag 0x0 [ 203.885861][ T10] pyra 0003:1E7D:2CF6.0029: unknown main item tag 0x0 [ 203.892665][ T10] pyra 0003:1E7D:2CF6.0029: unknown main item tag 0x0 [ 203.903488][ T10] pyra 0003:1E7D:2CF6.0029: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 204.024637][ T5926] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 204.178579][ T5926] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 204.192149][ T5926] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 204.207499][ T5926] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 204.219140][ T5926] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 204.230208][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.245148][ T7775] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 204.377965][ T7784] netlink: 36 bytes leftover after parsing attributes in process `syz.2.664'. [ 204.634628][ T977] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 204.734681][ T5842] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 204.804576][ T977] usb 3-1: Using ep0 maxpacket: 32 [ 204.811352][ T977] usb 3-1: config 0 has an invalid interface number: 66 but max is 0 [ 204.819525][ T977] usb 3-1: config 0 has no interface number 0 [ 204.827579][ T977] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 204.836743][ T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.838986][ T10] pyra 0003:1E7D:2CF6.0029: couldn't init struct pyra_device [ 204.844812][ T977] usb 3-1: Product: syz [ 204.844830][ T977] usb 3-1: Manufacturer: syz [ 204.844843][ T977] usb 3-1: SerialNumber: syz [ 204.847594][ T977] usb 3-1: config 0 descriptor?? [ 204.873415][ T10] pyra 0003:1E7D:2CF6.0029: couldn't install mouse [ 204.876888][ T977] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 204.887543][ T977] dvb-usb: bulk message failed: -22 (2/0) [ 204.888127][ T10] pyra 0003:1E7D:2CF6.0029: probe with driver pyra failed with error -71 [ 204.895990][ T977] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 204.902124][ T5842] usb 1-1: Using ep0 maxpacket: 16 [ 204.913189][ T977] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 204.920475][ T5842] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 204.925022][ T977] usb 3-1: media controller created [ 204.938665][ T10] usb 4-1: USB disconnect, device number 53 [ 204.944869][ T5842] usb 1-1: config 1 has no interface number 0 [ 204.950981][ T5842] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 204.974047][ T5842] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 204.978342][ T977] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 204.996795][ T5842] usb 1-1: config 1 interface 105 has no altsetting 0 [ 205.006452][ T5842] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 205.016885][ T5842] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.025449][ T5842] usb 1-1: Product: syz [ 205.029830][ T5842] usb 1-1: Manufacturer: syz [ 205.034435][ T5842] usb 1-1: SerialNumber: syz [ 205.039993][ T977] cxusb: set interface failed [ 205.049470][ T977] dvb-usb: bulk message failed: -22 (1/0) [ 205.055680][ T7789] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 205.069991][ T7789] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 205.078529][ T7784] cxusb: i2c rd: len=223 is too big! [ 205.078529][ T7784] [ 205.078592][ T7790] fido_id[7790]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 205.116096][ T977] DVB: Unable to find symbol lgdt330x_attach() [ 205.122892][ T977] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 205.205836][ T977] rc_core: IR keymap rc-dvico-portable not found [ 205.212262][ T977] Registered IR keymap rc-empty [ 205.219869][ T977] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 205.231586][ T977] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input49 [ 205.243894][ T977] dvb-usb: schedule remote query interval to 100 msecs. [ 205.251042][ T977] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 205.276998][ T977] usb 3-1: USB disconnect, device number 47 [ 205.345754][ T977] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 205.355938][ T5842] aqc111 1-1:1.105: probe with driver aqc111 failed with error -71 [ 205.390430][ T5842] usb 1-1: USB disconnect, device number 52 [ 205.646709][ T5926] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 205.659177][ T5926] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input48 [ 205.704920][ T5888] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 205.884827][ T5888] usb 4-1: Using ep0 maxpacket: 32 [ 205.899716][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.917028][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.948017][ T5888] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 205.958588][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.999157][ T5888] usb 4-1: config 0 descriptor?? [ 206.009916][ T5888] hub 4-1:0.0: USB hub found [ 206.217852][ T5888] hub 4-1:0.0: 1 port detected [ 206.835563][ T5888] hub 4-1:0.0: activate --> -90 [ 206.920411][ T5926] usb 2-1: USB disconnect, device number 58 [ 206.926464][ C1] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 206.984404][ T7818] tipc: Failed to obtain node identity [ 206.990191][ T7818] tipc: Enabling of bearer rejected, failed to enable media [ 207.036393][ T5888] hub 4-1:0.0: hub_ext_port_status failed (err = 3) [ 207.138927][ T7824] tipc: Failed to obtain node identity [ 207.144482][ T7824] tipc: Enabling of bearer rejected, failed to enable media [ 207.303400][ T7830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.678'. [ 207.306895][ T7826] FAULT_INJECTION: forcing a failure. [ 207.306895][ T7826] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 207.327740][ T5926] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 207.348864][ T5888] usb 4-1: USB disconnect, device number 54 [ 207.355250][ T7826] CPU: 0 UID: 0 PID: 7826 Comm: syz.2.677 Not tainted syzkaller #0 PREEMPT(full) [ 207.355273][ T7826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 207.355283][ T7826] Call Trace: [ 207.355291][ T7826] [ 207.355298][ T7826] dump_stack_lvl+0x189/0x250 [ 207.355323][ T7826] ? __pfx____ratelimit+0x10/0x10 [ 207.355344][ T7826] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.355364][ T7826] ? __pfx__printk+0x10/0x10 [ 207.355386][ T7826] ? fs_reclaim_acquire+0x7d/0x100 [ 207.355416][ T7826] should_fail_ex+0x414/0x560 [ 207.355446][ T7826] prepare_alloc_pages+0x22b/0x650 [ 207.355476][ T7826] __alloc_frozen_pages_noprof+0x123/0x370 [ 207.355504][ T7826] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 207.355532][ T7826] ? rcu_is_watching+0x15/0xb0 [ 207.355556][ T7826] ? policy_nodemask+0x27c/0x720 [ 207.355585][ T7826] alloc_pages_mpol+0x232/0x4a0 [ 207.355614][ T7826] alloc_pages_noprof+0xa9/0x190 [ 207.355640][ T7826] alloc_skb_with_frags+0x233/0x890 [ 207.355676][ T7826] sock_alloc_send_pskb+0x84d/0x980 [ 207.355716][ T7826] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 207.355735][ T7826] ? is_bpf_text_address+0x26/0x2b0 [ 207.355762][ T7826] ? __lock_acquire+0xab9/0xd20 [ 207.355778][ T7826] ? iov_iter_advance+0x8b/0x1c0 [ 207.355796][ T7826] tun_get_user+0xa43/0x3e90 [ 207.355827][ T7826] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 207.355847][ T7826] ? aa_file_perm+0x44c/0x1540 [ 207.355866][ T7826] ? __pfx_tun_get_user+0x10/0x10 [ 207.355889][ T7826] ? save_netdev_trace_buffer+0x4a0/0x5a0 [ 207.355913][ T7826] ? ref_tracker_alloc+0x318/0x460 [ 207.355934][ T7826] ? tun_get+0x157/0x2f0 [ 207.355947][ T7826] ? tun_chr_write_iter+0x60/0x210 [ 207.355963][ T7826] ? ksys_write+0x145/0x250 [ 207.355979][ T7826] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 207.356008][ T7826] ? tun_get+0x1c/0x2f0 [ 207.356031][ T7826] ? tun_get+0x1c/0x2f0 [ 207.356047][ T7826] ? tun_get+0x1c/0x2f0 [ 207.356075][ T7826] tun_chr_write_iter+0x113/0x210 [ 207.356095][ T7826] vfs_write+0x5c9/0xb30 [ 207.356116][ T7826] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 207.356135][ T7826] ? __pfx_vfs_write+0x10/0x10 [ 207.356162][ T7826] ? __fget_files+0x2a/0x420 [ 207.356190][ T7826] ksys_write+0x145/0x250 [ 207.356209][ T7826] ? __pfx_ksys_write+0x10/0x10 [ 207.356229][ T7826] ? do_syscall_64+0xbe/0xfa0 [ 207.356254][ T7826] do_syscall_64+0xfa/0xfa0 [ 207.356276][ T7826] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.356292][ T7826] ? clear_bhb_loop+0x60/0xb0 [ 207.356313][ T7826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.356330][ T7826] RIP: 0033:0x7fbc2ab8f6c9 [ 207.356345][ T7826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.356360][ T7826] RSP: 002b:00007fbc2ba18038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 207.356378][ T7826] RAX: ffffffffffffffda RBX: 00007fbc2ade5fa0 RCX: 00007fbc2ab8f6c9 [ 207.356390][ T7826] RDX: 000000000000340a RSI: 0000200000000300 RDI: 0000000000000003 [ 207.356400][ T7826] RBP: 00007fbc2ba18090 R08: 0000000000000000 R09: 0000000000000000 [ 207.356409][ T7826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.356418][ T7826] R13: 00007fbc2ade6038 R14: 00007fbc2ade5fa0 R15: 00007ffec691bfa8 [ 207.356445][ T7826] [ 207.576655][ T5926] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.696726][ T5926] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 207.705717][ T5926] usb 1-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 207.718623][ T5926] usb 1-1: config 1 interface 0 has no altsetting 0 [ 207.727363][ T5926] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 207.737658][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.752716][ T5926] usb 1-1: Product: syz [ 207.757210][ T5926] usb 1-1: Manufacturer: syz [ 207.761810][ T5926] usb 1-1: SerialNumber: syz [ 207.888454][ T7835] FAULT_INJECTION: forcing a failure. [ 207.888454][ T7835] name failslab, interval 1, probability 0, space 0, times 0 [ 207.910676][ T7835] CPU: 0 UID: 0 PID: 7835 Comm: syz.3.680 Not tainted syzkaller #0 PREEMPT(full) [ 207.910701][ T7835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 207.910712][ T7835] Call Trace: [ 207.910719][ T7835] [ 207.910726][ T7835] dump_stack_lvl+0x189/0x250 [ 207.910755][ T7835] ? __pfx____ratelimit+0x10/0x10 [ 207.910774][ T7835] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.910793][ T7835] ? __pfx__printk+0x10/0x10 [ 207.910809][ T7835] ? save_netdev_trace_buffer+0x4b5/0x5a0 [ 207.910841][ T7835] should_fail_ex+0x414/0x560 [ 207.910869][ T7835] should_failslab+0xa8/0x100 [ 207.910896][ T7835] kmem_cache_alloc_noprof+0x88/0x700 [ 207.910917][ T7835] ? skb_clone+0x212/0x3a0 [ 207.910943][ T7835] skb_clone+0x212/0x3a0 [ 207.910975][ T7835] __netlink_deliver_tap+0x424/0x8b0 [ 207.911009][ T7835] ? netlink_deliver_tap+0x2e/0x1b0 [ 207.911031][ T7835] netlink_deliver_tap+0x19c/0x1b0 [ 207.911051][ T7835] netlink_unicast+0x7fa/0x9e0 [ 207.911075][ T7835] ? __pfx_netlink_unicast+0x10/0x10 [ 207.911093][ T7835] ? netlink_sendmsg+0x642/0xb30 [ 207.911109][ T7835] ? skb_put+0x11b/0x210 [ 207.911131][ T7835] netlink_sendmsg+0x805/0xb30 [ 207.911161][ T7835] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.911185][ T7835] ? aa_sock_msg_perm+0xf1/0x1d0 [ 207.911204][ T7835] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 207.911224][ T7835] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.911246][ T7835] __sock_sendmsg+0x21c/0x270 [ 207.911272][ T7835] ____sys_sendmsg+0x505/0x830 [ 207.911299][ T7835] ? __pfx_____sys_sendmsg+0x10/0x10 [ 207.911328][ T7835] ? import_iovec+0x74/0xa0 [ 207.911350][ T7835] ___sys_sendmsg+0x21f/0x2a0 [ 207.911373][ T7835] ? __pfx____sys_sendmsg+0x10/0x10 [ 207.911432][ T7835] ? __fget_files+0x2a/0x420 [ 207.911449][ T7835] ? __fget_files+0x3a0/0x420 [ 207.911476][ T7835] __x64_sys_sendmsg+0x19b/0x260 [ 207.911498][ T7835] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 207.911527][ T7835] ? __pfx_ksys_write+0x10/0x10 [ 207.911547][ T7835] ? do_syscall_64+0xbe/0xfa0 [ 207.911572][ T7835] do_syscall_64+0xfa/0xfa0 [ 207.911594][ T7835] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.911610][ T7835] ? clear_bhb_loop+0x60/0xb0 [ 207.911631][ T7835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.911646][ T7835] RIP: 0033:0x7f2e93d8f6c9 [ 207.911663][ T7835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.911678][ T7835] RSP: 002b:00007f2e94d0b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.911696][ T7835] RAX: ffffffffffffffda RBX: 00007f2e93fe5fa0 RCX: 00007f2e93d8f6c9 [ 207.911707][ T7835] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 207.911718][ T7835] RBP: 00007f2e94d0b090 R08: 0000000000000000 R09: 0000000000000000 [ 207.911728][ T7835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.911737][ T7835] R13: 00007f2e93fe6038 R14: 00007f2e93fe5fa0 R15: 00007fff2aa691a8 [ 207.911767][ T7835] [ 208.217260][ T7822] netlink: 'syz.0.675': attribute type 13 has an invalid length. [ 208.227442][ T7835] tipc: Failed to obtain node identity [ 208.232994][ T7835] tipc: Enabling of bearer rejected, failed to enable media [ 208.245127][ T7822] macvtap0: entered promiscuous mode [ 208.263927][ T7822] macvtap0: refused to change device tx_queue_len [ 208.412575][ T7846] FAULT_INJECTION: forcing a failure. [ 208.412575][ T7846] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.413977][ T7844] input: syz1 as /devices/virtual/input/input50 [ 208.425966][ T7846] CPU: 0 UID: 0 PID: 7846 Comm: syz.2.683 Not tainted syzkaller #0 PREEMPT(full) [ 208.425988][ T7846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 208.425997][ T7846] Call Trace: [ 208.426004][ T7846] [ 208.426011][ T7846] dump_stack_lvl+0x189/0x250 [ 208.426036][ T7846] ? __pfx____ratelimit+0x10/0x10 [ 208.426056][ T7846] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.426075][ T7846] ? __pfx__printk+0x10/0x10 [ 208.426105][ T7846] should_fail_ex+0x414/0x560 [ 208.426132][ T7846] _copy_to_user+0x31/0xb0 [ 208.426153][ T7846] copy_to_sockptr+0x5e/0xa0 [ 208.426178][ T7846] do_tcp_getsockopt+0x1f13/0x2680 [ 208.426209][ T7846] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 208.426231][ T7846] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 208.426253][ T7846] ? __might_fault+0xb0/0x130 [ 208.426274][ T7846] ? _parse_integer_limit+0x1ae/0x1f0 [ 208.426295][ T7846] ? aa_label_sk_perm+0x4cc/0x630 [ 208.426321][ T7846] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 208.426366][ T7846] ? __lock_acquire+0xab9/0xd20 [ 208.426407][ T7846] tcp_getsockopt+0x83/0x130 [ 208.426429][ T7846] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 208.426445][ T7846] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 208.426460][ T7846] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 208.426478][ T7846] do_sock_getsockopt+0x372/0x450 [ 208.426501][ T7846] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 208.426520][ T7846] ? do_syscall_64+0xa0/0xfa0 [ 208.426539][ T7846] ? __fget_files+0x2a/0x420 [ 208.426556][ T7846] ? __fget_files+0x3a0/0x420 [ 208.426572][ T7846] ? __fget_files+0x2a/0x420 [ 208.426597][ T7846] __x64_sys_getsockopt+0x1a5/0x250 [ 208.426615][ T7846] ? do_syscall_64+0xa0/0xfa0 [ 208.426650][ T7846] ? do_syscall_64+0xa0/0xfa0 [ 208.426673][ T7846] do_syscall_64+0xfa/0xfa0 [ 208.426694][ T7846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.426709][ T7846] ? clear_bhb_loop+0x60/0xb0 [ 208.426730][ T7846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.426745][ T7846] RIP: 0033:0x7fbc2ab8f6c9 [ 208.426761][ T7846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.426775][ T7846] RSP: 002b:00007fbc2b9f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 208.426792][ T7846] RAX: ffffffffffffffda RBX: 00007fbc2ade6090 RCX: 00007fbc2ab8f6c9 [ 208.426804][ T7846] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 208.426814][ T7846] RBP: 00007fbc2b9f7090 R08: 0000200000000180 R09: 0000000000000000 [ 208.426824][ T7846] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 208.426835][ T7846] R13: 00007fbc2ade6128 R14: 00007fbc2ade6090 R15: 00007ffec691bfa8 [ 208.426864][ T7846] [ 208.515414][ T10] usb 1-1: USB disconnect, device number 53 [ 208.764731][ T5888] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 208.914569][ T5888] usb 4-1: Using ep0 maxpacket: 16 [ 208.921059][ T5888] usb 4-1: no configurations [ 208.925971][ T5888] usb 4-1: can't read configurations, error -22 [ 209.054701][ T5888] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 209.224864][ T5888] usb 4-1: Using ep0 maxpacket: 16 [ 209.230843][ T5888] usb 4-1: no configurations [ 209.238676][ T5888] usb 4-1: can't read configurations, error -22 [ 209.252310][ T7850] netlink: 176 bytes leftover after parsing attributes in process `syz.2.685'. [ 209.260036][ T5888] usb usb4-port1: attempt power cycle [ 209.262129][ T7850] netlink: 176 bytes leftover after parsing attributes in process `syz.2.685'. [ 209.418643][ T7859] ------------[ cut here ]------------ [ 209.424198][ T7859] WARNING: ./include/linux/ns_common.h:311 at nsproxy_ns_active_put+0xa19/0xd30, CPU#0: syz.2.688/7859 [ 209.435423][ T7859] Modules linked in: [ 209.439374][ T7859] CPU: 0 UID: 0 PID: 7859 Comm: syz.2.688 Not tainted syzkaller #0 PREEMPT(full) [ 209.449123][ T7859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 209.459407][ T7859] RIP: 0010:nsproxy_ns_active_put+0xa19/0xd30 [ 209.465586][ T7859] Code: 0f 0b 90 e9 71 fc ff ff e8 d4 08 77 ff 90 0f 0b 90 e9 ab fc ff ff e8 c6 08 77 ff 90 0f 0b 90 e9 41 fd ff ff e8 b8 08 77 ff 90 <0f> 0b 90 e9 64 fd ff ff e8 aa 08 77 ff 90 0f 0b 90 e9 98 fd ff ff [ 209.485786][ T7859] RSP: 0018:ffffc900036a7d38 EFLAGS: 00010293 [ 209.492499][ T7859] RAX: ffffffff824ac5e8 RBX: ffff888059d2a208 RCX: ffff888034c98000 [ 209.500693][ T7859] RDX: 0000000000000000 RSI: 00000000effffff8 RDI: 00000000effffff8 [ 209.508724][ T7859] RBP: 00000000effffff8 R08: ffffffff8e36cbcb R09: 1ffffffff1c6d979 [ 209.516744][ T7859] R10: dffffc0000000000 R11: fffffbfff1c6d97a R12: dffffc0000000000 [ 209.517497][ T7857] ------------[ cut here ]------------ [ 209.524740][ T7859] R13: 1ffffffff1c6d965 R14: ffffffff8e36cb00 R15: ffffffff8e36cb28 [ 209.524757][ T7859] FS: 00007fbc2b9f76c0(0000) GS:ffff888125a7c000(0000) knlGS:0000000000000000 [ 209.524773][ T7859] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 209.524786][ T7859] CR2: 0000200000000080 CR3: 0000000078a3e000 CR4: 00000000003526f0 [ 209.524801][ T7859] Call Trace: [ 209.524809][ T7859] [ 209.524821][ T7859] free_nsproxy+0x26/0x560 [ 209.530299][ T7857] WARNING: ./include/linux/ns_common.h:288 at alloc_pid+0xad6/0xc70, CPU#1: syz.2.688/7857 [ 209.538515][ T7859] __se_sys_setns+0x1268/0x17d0 [ 209.547242][ T7857] Modules linked in: [ 209.547263][ T7857] CPU: 1 UID: 0 PID: 7857 Comm: syz.2.688 Not tainted syzkaller #0 PREEMPT(full) [ 209.547283][ T7857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 209.547295][ T7857] RIP: 0010:alloc_pid+0xad6/0xc70 [ 209.547317][ T7857] Code: cc e8 ee d4 34 00 be 02 00 00 00 eb 0a e8 e2 d4 34 00 be 01 00 00 00 48 89 df e8 55 82 0c 03 e9 84 fa ff ff e8 cb d4 34 00 90 <0f> 0b 90 e9 2c fd ff ff e8 bd d4 34 00 90 0f 0b 90 e9 5b fd ff ff [ 209.553881][ T7859] ? __pfx_do_sys_openat2+0x10/0x10 [ 209.561997][ T7857] RSP: 0018:ffffc90003387938 EFLAGS: 00010293 [ 209.565231][ T7859] ? __pfx___se_sys_setns+0x10/0x10 [ 209.568122][ T7857] [ 209.568130][ T7857] RAX: ffffffff818cf9d5 RBX: ffff8880227ec168 RCX: ffff888043e8db80 [ 209.573025][ T7859] ? do_syscall_64+0xbe/0xfa0 [ 209.573055][ T7859] do_syscall_64+0xfa/0xfa0 [ 209.573078][ T7859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.573096][ T7859] ? clear_bhb_loop+0x60/0xb0 [ 209.573119][ T7859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.573136][ T7859] RIP: 0033:0x7fbc2ab90ef7 [ 209.573153][ T7859] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 34 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.573169][ T7859] RSP: 002b:00007fbc2b9f6fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 209.573189][ T7859] RAX: ffffffffffffffda RBX: 0000000000000011 RCX: 00007fbc2ab90ef7 [ 209.583627][ T7857] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 209.596643][ T7859] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000c9 [ 209.596662][ T7859] RBP: 00007fbc2ac11f91 R08: 0000000000000000 R09: 0000000000000000 [ 209.596674][ T7859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 209.596686][ T7859] R13: 00007fbc2ade6128 R14: 00007fbc2ade6090 R15: 00007ffec691bfa8 [ 209.596718][ T7859] [ 209.596729][ T7859] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 209.596743][ T7859] CPU: 0 UID: 0 PID: 7859 Comm: syz.2.688 Not tainted syzkaller #0 PREEMPT(full) [ 209.596763][ T7859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 209.596774][ T7859] Call Trace: [ 209.596781][ T7859] [ 209.596789][ T7859] dump_stack_lvl+0x99/0x250 [ 209.596814][ T7859] ? __asan_memcpy+0x40/0x70 [ 209.596836][ T7859] ? __pfx_dump_stack_lvl+0x10/0x10 [ 209.596866][ T7859] ? __pfx__printk+0x10/0x10 [ 209.596895][ T7859] vpanic+0x237/0x6d0 [ 209.596909][ T7859] ? __pfx_vpanic+0x10/0x10 [ 209.596924][ T7859] ? is_bpf_text_address+0x26/0x2b0 [ 209.596957][ T7859] panic+0xb9/0xc0 [ 209.596971][ T7859] ? __pfx_panic+0x10/0x10 [ 209.597001][ T7859] __warn+0x334/0x4c0 [ 209.597015][ T7859] ? nsproxy_ns_active_put+0xa19/0xd30 [ 209.597039][ T7859] ? nsproxy_ns_active_put+0xa19/0xd30 [ 209.597058][ T7859] report_bug+0x2be/0x4f0 [ 209.597077][ T7859] ? nsproxy_ns_active_put+0xa19/0xd30 [ 209.597098][ T7859] ? nsproxy_ns_active_put+0xa19/0xd30 [ 209.597117][ T7859] ? nsproxy_ns_active_put+0xa1b/0xd30 [ 209.597136][ T7859] handle_bug+0x84/0x160 [ 209.597159][ T7859] exc_invalid_op+0x1a/0x50 [ 209.597183][ T7859] asm_exc_invalid_op+0x1a/0x20 [ 209.597198][ T7859] RIP: 0010:nsproxy_ns_active_put+0xa19/0xd30 [ 209.597219][ T7859] Code: 0f 0b 90 e9 71 fc ff ff e8 d4 08 77 ff 90 0f 0b 90 e9 ab fc ff ff e8 c6 08 77 ff 90 0f 0b 90 e9 41 fd ff ff e8 b8 08 77 ff 90 <0f> 0b 90 e9 64 fd ff ff e8 aa 08 77 ff 90 0f 0b 90 e9 98 fd ff ff [ 209.597233][ T7859] RSP: 0018:ffffc900036a7d38 EFLAGS: 00010293 [ 209.597249][ T7859] RAX: ffffffff824ac5e8 RBX: ffff888059d2a208 RCX: ffff888034c98000 [ 209.597263][ T7859] RDX: 0000000000000000 RSI: 00000000effffff8 RDI: 00000000effffff8 [ 209.597274][ T7859] RBP: 00000000effffff8 R08: ffffffff8e36cbcb R09: 1ffffffff1c6d979 [ 209.597285][ T7859] R10: dffffc0000000000 R11: fffffbfff1c6d97a R12: dffffc0000000000 [ 209.597298][ T7859] R13: 1ffffffff1c6d965 R14: ffffffff8e36cb00 R15: ffffffff8e36cb28 [ 209.597319][ T7859] ? nsproxy_ns_active_put+0xa18/0xd30 [ 209.597345][ T7859] ? nsproxy_ns_active_put+0xa18/0xd30 [ 209.597368][ T7859] free_nsproxy+0x26/0x560 [ 209.597388][ T7859] __se_sys_setns+0x1268/0x17d0 [ 209.597409][ T7859] ? __pfx_do_sys_openat2+0x10/0x10 [ 209.597438][ T7859] ? __pfx___se_sys_setns+0x10/0x10 [ 209.597463][ T7859] ? do_syscall_64+0xbe/0xfa0 [ 209.597486][ T7859] do_syscall_64+0xfa/0xfa0 [ 209.597505][ T7859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.597520][ T7859] ? clear_bhb_loop+0x60/0xb0 [ 209.597540][ T7859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.597557][ T7859] RIP: 0033:0x7fbc2ab90ef7 [ 209.597574][ T7859] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 34 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.597589][ T7859] RSP: 002b:00007fbc2b9f6fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 209.597604][ T7859] RAX: ffffffffffffffda RBX: 0000000000000011 RCX: 00007fbc2ab90ef7 [ 209.597615][ T7859] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000c9 [ 209.597625][ T7859] RBP: 00007fbc2ac11f91 R08: 0000000000000000 R09: 0000000000000000 [ 209.597636][ T7859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 209.597647][ T7859] R13: 00007fbc2ade6128 R14: 00007fbc2ade6090 R15: 00007ffec691bfa8 [ 209.597677][ T7859] [ 209.597943][ T7859] Kernel Offset: disabled