last executing test programs: 8.315789248s ago: executing program 3 (id=2555): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x8}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r1, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x54, r3, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xa22, 0x2b}}}}, [@key_params=[@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1a482814f2"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "e25351647a"}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x6136bfad27682c9c) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000090000000000000000000000000a0001003b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000500000000000000fbffffffffffffff00000000000000000000000000004000000000000000000200000000000000000200"/112], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r4, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffe, 0x400000, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) clock_getres(0x2, &(0x7f00000009c0)) timerfd_settime(0xffffffffffffffff, 0x4, &(0x7f0000000180)={{0x0, 0x3938700}, {0x77359400}}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff030000000100000000000000000001a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000580bb9ad809d5e1cace81b341139fe3cd4032e8edb12d", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4040c04) syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x110, 0x8c, 0xa7, 0x7c, 0x40, 0x1004, 0x61aa, 0xda2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x95, 0x10, 0x99, "", [{{0x9, 0x4, 0x3, 0xd, 0x0, 0x2, 0x6, 0x0, 0xc}}]}}]}}, 0x0) 5.137720859s ago: executing program 3 (id=2565): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081", 0x7}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)}], 0x1}, 0x4040001) sendmsg$key(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x4001) recvmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x40002042) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x3, 0x2d0, 0x6, &(0x7f0000000640)="7a650e526bd0998268bb5847d9beacc47a22df873eab4b8b91133675482eaa56ace8db59bed9aa07d4e390c7c9f98c462b55612196911e3c4e510ede3efde35eec990f22a76cf752e507c1e2de2920a9fc0790cc176bd2b901e4"}, {0x2, 0x0, 0x1ff, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x0, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40003, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x10000004, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0xa3a, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.769271564s ago: executing program 3 (id=2568): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xe}, 0x1c) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x800) (fail_nth: 8) 4.623369248s ago: executing program 3 (id=2569): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f00000005c0)={0x40, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)={0x40, 0x11, 0xa7, {0xa7, 0x11, "5b14222051cebe3b8924b6a6354cd413aca3e5b204c518c0f86dab5ce711c1ee4c59b0886a01aa5cd3cd1aa67652284038c35ef6494826b7b4aef0e4ece02ffab0350f21634639e6e5a75c8c5832160ba2b78cfaa14baa09ecdf8414951d4ddb807f36bafdce0a743034452e42ff04939b302986fd4454470ec8d55af3d8ac341c16f5c9b2d15d1b5566f35e969337724bf225ef51dadfe1e70789d2a73adf97ff9578f21b"}}, &(0x7f00000001c0)={0x0, 0x3, 0xa7, @string={0xa7, 0x3, "2a46070177633ebb7b70fbadbc4fbb153bc94cb27605bab11d6a88bc3afc9aff491672eecc3e20edef7555b288a69f556edc296705361267bcb11a50ba9d3996af5233162d935789da37a650bd42fa2ac76a29ee3d2fbfe5e61e9c3abfb4728116ec20c2b7bad3b7857f0dd8ee62a263670b8b7ed70ca665c4cfd93cc32b9c6fc1bec108e67d4e010f1cff5f135a64ad0674745f37090b63e3f7210a16ca48901cd1a1920b"}}, &(0x7f0000000280)={0x0, 0xf, 0x1d, {0x5, 0xf, 0x1d, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0xc, 0x0, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xf, 0x8, 0x0, 0x4e}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x1, 0x9, 0x401}]}}, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x2, 0x6, 0x75, "58fc1f15", "1cca5d63"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x3, 0x2, 0x4, 0x1, 0x3, 0x9}}}, &(0x7f0000000a80)={0x84, &(0x7f00000004c0)={0x20, 0x8, 0xc4, "e75efef8976ca69c913dd4995eb44cbb5540e347e46744918aa700de3abb0b5d1cd5c3c630e4abf4c186f7192253a9b1f161865430ddfdcf2649714542707c6151bcdf1e22d687ed65b8249a5acead5aaffa1d8cd9e9befa1a1a8a2822496510e20c703e486730c45758808aae3b3c15f014eb3287aa4bfaa4d72e60bb55e71bcf45998e8787c8cc5a474ac34e42caa028a153e1d3c343e744a50a42243ae7296f1960e2c4b5a470b51f58590bcd9f20b425607d42d475a065b90c2ad76e300acbb434ed"}, &(0x7f00000006c0)={0x0, 0xa, 0x1}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000780)={0x20, 0x0, 0x8, {0x120, 0x10, [0xff0]}}, &(0x7f00000007c0)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000800)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000840)={0x40, 0xb, 0x2, "51ef"}, &(0x7f0000000880)={0x40, 0xf, 0x2, 0x2}, &(0x7f00000008c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000900)={0x40, 0x17, 0x6}, &(0x7f0000000940)={0x40, 0x19, 0x2, "a1f3"}, &(0x7f0000000980)={0x40, 0x1a, 0x2, 0x3}, &(0x7f00000009c0)={0x40, 0x1c, 0x1, 0x7d}, &(0x7f0000000a00)={0x40, 0x1e, 0x1, 0xd8}, &(0x7f0000000a40)={0x40, 0x21, 0x1, 0x8}}) 4.544787886s ago: executing program 1 (id=2571): r0 = syz_clone3(&(0x7f0000001780)={0x51000200, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x8}, &(0x7f0000000680)=""/4096, 0x1000, &(0x7f0000001680)=""/167, &(0x7f0000001740)}, 0x58) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x68, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_IE_PROBE_RESP={0xc, 0x7f, [@gcr_ga={0xbd, 0x6, @broadcast}]}]]}, 0x68}}, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x28, r3, 0x0, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xb, 0x47}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]}, 0x28}}, 0x800) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000002, 0x30, r5, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@loopback, @empty}, 0x8) prlimit64(r0, 0x7, &(0x7f0000000140), 0x0) r7 = syz_io_uring_setup(0x36e2, &(0x7f0000000600)={0x0, 0x5946, 0x400, 0x0, 0x2c5}, 0x0, 0x0, &(0x7f0000000000)=0x0) rt_sigsuspend(&(0x7f00000001c0)={[0x401]}, 0x8) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)={0x58, r10, 0x801, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "88d43ab161e9013bb562ad5ecd"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}]}, 0x58}}, 0x80804) setsockopt$inet6_tcp_int(r9, 0x6, 0x17, &(0x7f0000000240)=0xfdfffffe, 0x4) syz_usb_connect(0x0, 0x62, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d240601010302000100060006092403050503060581092403060102ef050507240405", @ANYRES16=r9, @ANYRESDEC, @ANYRES64=0x0, @ANYRES16=r8, @ANYRESOCT=r7], 0x0) 3.228064681s ago: executing program 0 (id=2575): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000600)="447df50ce4033a7b5ad00b83244c00b711803e7cca2504a2600da98efff9e7d67f87", 0x22}, {&(0x7f00000006c0)='\b', 0x1}, {&(0x7f0000000780)="4274aa814c8f6ea8d8db43178dd2f41ef596a3ca465412910e05cba0f5d97e67886d55be18cac95a1aa093479596c3613670aaf2a3b1edc465bedf", 0x3b}, {&(0x7f0000000880)="a1755527af3bc7c4671ac86bf0a2338efb5db1", 0x13}], 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="ac1414bb0000000000000000140000000000000000000000020000000600000000000000d8000000000000000000000007000000072b52000000000a0101020a010100ac14141b640101020a010102ac1414bbac14143ee000000200000000071731ac14143cac1e0101e0000002ac1414aaffffffff442cdf11ac1e010100000005ffffffff00000002ac1414bb00000006ffffffff000000000000000000000003441435230a01010200000001ffffffff00000007444477937f00000100000007ac1e000100000008ac14143200000005e0000002000000f77f00000100000200ac1414bb00000401ac1414aa0000e7a6ac1414aa"], 0x1a0}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.175921008s ago: executing program 0 (id=2576): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_submit(0x0, 0x2, &(0x7f00000000c0)=[&(0x7f0000000200)={0x3000, 0x0, 0x8, 0x0, 0x0, r0, 0x0}, &(0x7f0000000040)={0x22000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71da", 0x20}], 0x1}}], 0x1, 0x20000044) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) 1.974027088s ago: executing program 2 (id=2579): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c082) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_driver={0x0, 0xfffffffe, 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES64], 0xa8}}, 0x4048010) 1.931963703s ago: executing program 3 (id=2580): io_submit(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000040)={0x22000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000380)}], 0x1}}], 0x1, 0x20000044) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xcb}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) 1.827009698s ago: executing program 2 (id=2581): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r2, 0x4018aee2, &(0x7f0000000040)=@attr_set_pmu={0x0, 0x1, 0x1, &(0x7f0000000000)=0x1ff}) 1.760818197s ago: executing program 2 (id=2582): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001480)={0x28, r1, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "93d9a67ff9"}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000) (fail_nth: 8) 1.611414742s ago: executing program 2 (id=2583): openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_normal', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001040)) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x111000, 0x0) pidfd_send_signal(r0, 0x0, 0x0, 0x2) r1 = socket(0x1e, 0x1, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @loopback, 0xa098}, {0xa, 0x4e21, 0x1000, @local, 0x2}, r3, 0x8401}}, 0x48) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.517911952s ago: executing program 2 (id=2584): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000600)="447df50ce4033a7b5ad00b83244c00b711803e7cca2504a2600da98efff9e7d67f87", 0x22}, {&(0x7f00000006c0)='\b', 0x1}, {&(0x7f0000000780)="4274aa814c8f6ea8d8db43178dd2f41ef596a3ca465412910e05cba0f5d97e67886d55be18cac95a1aa093479596c3613670aaf2a3b1edc465bedf", 0x3b}, {&(0x7f0000000880)="a1755527af3bc7c4671ac86bf0a2338efb5db1", 0x13}], 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="ac1414bb0000000000000000140000000000000000000000020000000600000000000000d8000000000000000000000007000000072b52000000000a0101020a010100ac14141b640101020a010102ac1414bbac14143ee000000200000000071731ac14143cac1e0101e0000002ac1414aaffffffff442cdf11ac1e010100000005ffffffff00000002ac1414bb00000006ffffffff000000000000000000000003441435230a01010200000001ffffffff00000007444477937f00000100000007ac1e000100000008ac14143200000005e0000002000000f77f00000100000200ac1414bb00000401ac1414aa0000e7a6ac1414aa"], 0x1a0}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.457320714s ago: executing program 1 (id=2585): r0 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000000)=@ethtool_cmd={0x1, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000000)) 1.295289745s ago: executing program 0 (id=2586): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x1, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0xe5, 0x8, 0x5}) close_range(r0, r1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x3, 0x2, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 1.12801726s ago: executing program 0 (id=2587): r0 = fsopen(&(0x7f0000000000)='rootfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x6}, 0x14) r2 = fsmount(r0, 0x0, 0x82) fchdir(r2) r3 = fanotify_init(0x1a, 0x800) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0xae03, 0xb6) fanotify_mark(r3, 0x441, 0x8000020, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000080)='!\x7f\x00.\xd8\xbd0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00-\xa4\xfb', 0x6e93ebbbcc0884f2, 0x0, 0x0) 1.04745701s ago: executing program 3 (id=2588): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f00000005c0)={0x40, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)={0x40, 0x11, 0xa7, {0xa7, 0x11, "5b14222051cebe3b8924b6a6354cd413aca3e5b204c518c0f86dab5ce711c1ee4c59b0886a01aa5cd3cd1aa67652284038c35ef6494826b7b4aef0e4ece02ffab0350f21634639e6e5a75c8c5832160ba2b78cfaa14baa09ecdf8414951d4ddb807f36bafdce0a743034452e42ff04939b302986fd4454470ec8d55af3d8ac341c16f5c9b2d15d1b5566f35e969337724bf225ef51dadfe1e70789d2a73adf97ff9578f21b"}}, &(0x7f00000001c0)={0x0, 0x3, 0xa7, @string={0xa7, 0x3, "2a46070177633ebb7b70fbadbc4fbb153bc94cb27605bab11d6a88bc3afc9aff491672eecc3e20edef7555b288a69f556edc296705361267bcb11a50ba9d3996af5233162d935789da37a650bd42fa2ac76a29ee3d2fbfe5e61e9c3abfb4728116ec20c2b7bad3b7857f0dd8ee62a263670b8b7ed70ca665c4cfd93cc32b9c6fc1bec108e67d4e010f1cff5f135a64ad0674745f37090b63e3f7210a16ca48901cd1a1920b"}}, &(0x7f0000000280)={0x0, 0xf, 0x1d, {0x5, 0xf, 0x1d, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0xc, 0x0, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xf, 0x8, 0x0, 0x4e}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x1, 0x9, 0x401}]}}, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x2, 0x6, 0x75, "58fc1f15", "1cca5d63"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x3, 0x2, 0x4, 0x1, 0x3, 0x9}}}, &(0x7f0000000a80)={0x84, &(0x7f00000004c0)={0x20, 0x8, 0xc4, "e75efef8976ca69c913dd4995eb44cbb5540e347e46744918aa700de3abb0b5d1cd5c3c630e4abf4c186f7192253a9b1f161865430ddfdcf2649714542707c6151bcdf1e22d687ed65b8249a5acead5aaffa1d8cd9e9befa1a1a8a2822496510e20c703e486730c45758808aae3b3c15f014eb3287aa4bfaa4d72e60bb55e71bcf45998e8787c8cc5a474ac34e42caa028a153e1d3c343e744a50a42243ae7296f1960e2c4b5a470b51f58590bcd9f20b425607d42d475a065b90c2ad76e300acbb434ed"}, &(0x7f00000006c0)={0x0, 0xa, 0x1}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000780)={0x20, 0x0, 0x8, {0x120, 0x10, [0xff0]}}, &(0x7f00000007c0)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000800)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000840)={0x40, 0xb, 0x2, "51ef"}, &(0x7f0000000880)={0x40, 0xf, 0x2, 0x2}, &(0x7f00000008c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000900)={0x40, 0x17, 0x6}, &(0x7f0000000940)={0x40, 0x19, 0x2, "a1f3"}, &(0x7f0000000980)={0x40, 0x1a, 0x2, 0x3}, &(0x7f00000009c0)={0x40, 0x1c, 0x1, 0x7d}, &(0x7f0000000a00)={0x40, 0x1e, 0x1, 0xd8}, &(0x7f0000000a40)={0x40, 0x21, 0x1, 0x8}}) 947.7768ms ago: executing program 0 (id=2589): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) sendmsg$sock(r2, 0x0, 0x90) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000000)={0xf0000000, 0x79d}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) (fail_nth: 8) 851.586236ms ago: executing program 1 (id=2590): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r2, 0x4018aee2, &(0x7f0000000040)=@attr_set_pmu={0x0, 0x1, 0x1, &(0x7f0000000000)=0x1ff}) 755.671488ms ago: executing program 1 (id=2591): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000040)={r1}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000480)={{0x80a0000, 0xf000, 0xc, 0x80, 0x4, 0x0, 0xa, 0x6, 0x0, 0xb, 0x6, 0xa4}, {0x2000, 0x6000, 0xe, 0x8, 0x5f, 0x0, 0x0, 0x1, 0xf, 0x5, 0xee, 0xf}, {0x8000000, 0xb000, 0x4, 0x8, 0xf0, 0x1, 0x8c, 0x6, 0x7, 0x99, 0xfd, 0x1}, {0x100000, 0x5000, 0x8, 0xe, 0x7, 0x5, 0x1, 0x87, 0x5, 0x2}, {0x10000, 0x8000000, 0xa, 0x0, 0x5, 0x4, 0xf9, 0x6b, 0x5, 0x0, 0xfd, 0x80}, {0xeeee8000, 0xeeef0000, 0xb, 0xf, 0x30, 0x3, 0x9, 0x8, 0x8, 0x7, 0xe, 0x8}, {0xe6ef8000, 0x0, 0x0, 0x3, 0x53, 0x4, 0x0, 0xb9, 0x7, 0x5, 0x6, 0x7}, {0xeeee0000, 0x1332b2000, 0x9, 0x7, 0xfe, 0x0, 0xc, 0x3, 0x0, 0x6, 0xf9, 0x6}, {0x3000, 0x6}, {0x1, 0x3}, 0x2, 0x0, 0x2000, 0x2, 0xd, 0x2000, 0x10000, [0xfffffffffffffffc, 0x4, 0x9, 0xa]}) 603.521084ms ago: executing program 0 (id=2592): socket$kcm(0x10, 0x2, 0x4) r0 = fsmount(0xffffffffffffffff, 0x1, 0x80) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) getpeername$inet(r1, 0x0, &(0x7f0000000040)) syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYRES32], 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4000840) 229.542419ms ago: executing program 1 (id=2593): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0x7f, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0x10000, 0x7, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x1007, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0xffffffff, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x1, 0x408, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x200, 0x1fd, 0x80, 0x3, 0x8, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x401, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x14d, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x8, 0xfffff000, 0x10000, 0x3, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000040000100fcff07000400000003000000100048800c005b8008009600", @ANYRES32=0x0, @ANYBLOB="140001801000000000000b8008000100ac1414bb08000200", @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 215.449635ms ago: executing program 2 (id=2594): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_submit(0x0, 0x2, &(0x7f00000000c0)=[&(0x7f0000000200)={0x3000, 0x0, 0x8, 0x0, 0x0, r0, 0x0}, &(0x7f0000000040)={0x22000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71da", 0x20}], 0x1}}], 0x1, 0x20000044) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) 0s ago: executing program 1 (id=2595): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x103000, 0x0) r1 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x10d4, &(0x7f0000003380)=ANY=[]) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) capset(&(0x7f0000000080)={0x20080522, r2}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd, 0x0, 0x6a, 0x1000}) unshare(0x22020600) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000140)=@ethtool_rxfh_indir={0x38, 0x3, [0x286, 0x3, 0x9]}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000340)={'tunl0\x00', 0x0}) ioctl$TIOCCONS(r0, 0x541d) kernel console output (not intermixed with test programs): ce=61.23 [ 406.346216][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.393856][ T5342] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 406.523790][ T5342] usb 1-1: device descriptor read/64, error -71 [ 406.573581][ T32] usb 2-1: GET_CAPABILITIES returned 0 [ 406.573630][ T32] usbtmc 2-1:16.0: can't read capabilities [ 406.633996][ T5342] usb usb1-port1: attempt power cycle [ 406.775825][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 406.780404][ T32] usb 2-1: USB disconnect, device number 70 [ 406.993526][ T5342] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 407.014809][ T5342] usb 1-1: device descriptor read/8, error -71 [ 407.188010][ T32] usb 4-1: USB disconnect, device number 35 [ 407.254775][ T5342] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 407.275814][ T5342] usb 1-1: device descriptor read/8, error -71 [ 407.384112][ T5342] usb usb1-port1: unable to enumerate USB device [ 407.673045][ T5342] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 407.826529][ T5342] usb 2-1: unable to get BOS descriptor or descriptor too short [ 407.827397][ T5342] usb 2-1: not running at top speed; connect to a high speed hub [ 407.831064][ T5342] usb 2-1: config 127 has an invalid interface number: 243 but max is 0 [ 407.831090][ T5342] usb 2-1: config 127 has no interface number 0 [ 407.831133][ T5342] usb 2-1: config 127 interface 243 altsetting 5 endpoint 0xC has invalid wMaxPacketSize 0 [ 407.831157][ T5342] usb 2-1: config 127 interface 243 has no altsetting 0 [ 407.865726][ T5342] usb 2-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice=b1.3c [ 407.865757][ T5342] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.865778][ T5342] usb 2-1: Product: syz [ 407.865793][ T5342] usb 2-1: Manufacturer: syz [ 407.865808][ T5342] usb 2-1: SerialNumber: syz [ 409.117296][ T5342] usb 2-1: USB disconnect, device number 71 [ 409.304023][ T9] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 409.398484][T12440] FAULT_INJECTION: forcing a failure. [ 409.398484][T12440] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 409.398524][T12440] CPU: 0 UID: 0 PID: 12440 Comm: syz.0.2397 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 409.398553][T12440] Tainted: [L]=SOFTLOCKUP [ 409.398561][T12440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 409.398574][T12440] Call Trace: [ 409.398583][T12440] [ 409.398592][T12440] dump_stack_lvl+0xe8/0x150 [ 409.398623][T12440] should_fail_ex+0x46b/0x600 [ 409.398655][T12440] _copy_from_user+0x2d/0xb0 [ 409.398687][T12440] hci_sock_setsockopt+0x5fa/0xad0 [ 409.398715][T12440] ? __fget_files+0x2a/0x420 [ 409.398744][T12440] ? __pfx_aa_sk_perm+0x10/0x10 [ 409.398772][T12440] ? __pfx_hci_sock_setsockopt+0x10/0x10 [ 409.398800][T12440] ? aa_sock_opt_perm+0x131/0x1f0 [ 409.398833][T12440] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 409.398863][T12440] ? __pfx_hci_sock_setsockopt+0x10/0x10 [ 409.398893][T12440] do_sock_setsockopt+0x17c/0x1b0 [ 409.398927][T12440] __x64_sys_setsockopt+0x143/0x1b0 [ 409.398958][T12440] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.398982][T12440] do_syscall_64+0x15f/0xf80 [ 409.399002][T12440] ? trace_irq_disable+0x3b/0x140 [ 409.399032][T12440] ? clear_bhb_loop+0x40/0x90 [ 409.399057][T12440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.399079][T12440] RIP: 0033:0x7fc8b4f3cdd9 [ 409.399099][T12440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.399117][T12440] RSP: 002b:00007fc8b318e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 409.399140][T12440] RAX: ffffffffffffffda RBX: 00007fc8b51b5fa0 RCX: 00007fc8b4f3cdd9 [ 409.399156][T12440] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 409.399169][T12440] RBP: 00007fc8b318e090 R08: 0000000000000004 R09: 0000000000000000 [ 409.399183][T12440] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.399197][T12440] R13: 00007fc8b51b6038 R14: 00007fc8b51b5fa0 R15: 00007fff87826f38 [ 409.399230][T12440] [ 409.484862][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.484899][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.484939][ T9] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 409.484965][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.499531][ T9] usb 4-1: config 0 descriptor?? [ 410.142024][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 410.142148][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 410.143457][ T5342] usb 1-1: new full-speed USB device number 86 using dummy_hcd [ 410.173913][ T9] usb 4-1: USB disconnect, device number 36 [ 410.191158][ T5598] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 410.299887][ T5342] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 410.299920][ T5342] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.299942][ T5342] usb 1-1: Product: syz [ 410.299958][ T5342] usb 1-1: Manufacturer: syz [ 410.299974][ T5342] usb 1-1: SerialNumber: syz [ 410.306680][ T5342] usb 1-1: config 0 descriptor?? [ 410.363557][ T5598] usb 3-1: Using ep0 maxpacket: 8 [ 410.365865][ T5598] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 410.365895][ T5598] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 410.365922][ T5598] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 410.365948][ T5598] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 410.365990][ T5598] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 410.366015][ T5598] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.516032][ T5342] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 410.576749][ T5598] usb 3-1: GET_CAPABILITIES returned 0 [ 410.576799][ T5598] usbtmc 3-1:16.0: can't read capabilities [ 410.797660][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 410.800849][ T5700] usb 3-1: USB disconnect, device number 81 [ 411.147216][ T5342] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 411.195899][T12454] FAULT_INJECTION: forcing a failure. [ 411.195899][T12454] name fail_iommufd, interval 1, probability 0, space 0, times 1 [ 411.196001][T12454] CPU: 1 UID: 0 PID: 12454 Comm: syz.3.2402 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 411.196018][T12454] Tainted: [L]=SOFTLOCKUP [ 411.196022][T12454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 411.196030][T12454] Call Trace: [ 411.196035][T12454] [ 411.196041][T12454] dump_stack_lvl+0xe8/0x150 [ 411.196060][T12454] should_fail_ex+0x46b/0x600 [ 411.196079][T12454] pfn_reader_user_pin+0x24b/0x11a0 [ 411.196098][T12454] ? __pfx_pfn_reader_user_pin+0x10/0x10 [ 411.196113][T12454] ? interval_tree_double_span_iter_next+0x329/0x4a0 [ 411.196134][T12454] pfn_reader_next+0x8be/0x2910 [ 411.196150][T12454] ? pfn_reader_next+0x502/0x2910 [ 411.196175][T12454] ? __pfx_pfn_reader_next+0x10/0x10 [ 411.196185][T12454] ? rcu_is_watching+0x15/0xb0 [ 411.196203][T12454] ? interval_tree_span_iter_first+0xea/0xd70 [ 411.196221][T12454] pfn_reader_first+0x8c6/0xc40 [ 411.196235][T12454] iopt_pages_rw_slow+0x12b/0x550 [ 411.196251][T12454] ? rcu_is_watching+0x15/0xb0 [ 411.196278][T12454] ? __pfx_iopt_pages_rw_slow+0x10/0x10 [ 411.196305][T12454] ? rt_mutex_slowlock+0x1fd/0x780 [ 411.196322][T12454] ? iommufd_access_rw+0x146/0x4e0 [ 411.196335][T12454] ? iommufd_access_rw+0x146/0x4e0 [ 411.196348][T12454] iopt_pages_rw_access+0x442/0x8d0 [ 411.196366][T12454] ? __pfx_iopt_pages_rw_access+0x10/0x10 [ 411.196379][T12454] ? interval_tree_iter_first+0x1d0/0x1f0 [ 411.196393][T12454] ? iopt_area_contig_init+0x17c/0x220 [ 411.196408][T12454] iommufd_access_rw+0x332/0x4e0 [ 411.196425][T12454] ? __pfx_iommufd_access_rw+0x10/0x10 [ 411.196443][T12454] iommufd_test+0x4bf5/0x6160 [ 411.196462][T12454] ? __lock_acquire+0x6b5/0x2d10 [ 411.196475][T12454] ? __pfx_iommufd_test+0x10/0x10 [ 411.196493][T12454] ? tomoyo_path_number_perm+0x219/0x630 [ 411.196511][T12454] ? tomoyo_path_number_perm+0x219/0x630 [ 411.196531][T12454] ? __might_fault+0xaf/0x130 [ 411.196548][T12454] ? __might_fault+0xaf/0x130 [ 411.196575][T12454] iommufd_fops_ioctl+0x4b8/0x5d0 [ 411.196593][T12454] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 411.196612][T12454] ? __fget_files+0x2a/0x420 [ 411.196630][T12454] ? __fget_files+0x2a/0x420 [ 411.196645][T12454] ? bpf_lsm_file_ioctl+0x9/0x20 [ 411.196658][T12454] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 411.196675][T12454] __se_sys_ioctl+0xff/0x170 [ 411.196692][T12454] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.196705][T12454] do_syscall_64+0x15f/0xf80 [ 411.196717][T12454] ? trace_irq_disable+0x3b/0x140 [ 411.196733][T12454] ? clear_bhb_loop+0x40/0x90 [ 411.196748][T12454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.196760][T12454] RIP: 0033:0x7fdfc59dcdd9 [ 411.196773][T12454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.196783][T12454] RSP: 002b:00007fdfc3c0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 411.196797][T12454] RAX: ffffffffffffffda RBX: 00007fdfc5c56090 RCX: 00007fdfc59dcdd9 [ 411.196806][T12454] RDX: 0000200000001200 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 411.196814][T12454] RBP: 00007fdfc3c0d090 R08: 0000000000000000 R09: 0000000000000000 [ 411.196822][T12454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.196833][T12454] R13: 00007fdfc5c56128 R14: 00007fdfc5c56090 R15: 00007ffdfde1dac8 [ 411.196851][T12454] [ 411.486635][T12458] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2404'. [ 411.695416][ T5342] usb 2-1: new low-speed USB device number 72 using dummy_hcd [ 411.845260][T12472] FAULT_INJECTION: forcing a failure. [ 411.845260][T12472] name failslab, interval 1, probability 0, space 0, times 0 [ 411.845299][T12472] CPU: 0 UID: 0 PID: 12472 Comm: syz.3.2409 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 411.845325][T12472] Tainted: [L]=SOFTLOCKUP [ 411.845337][T12472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 411.845349][T12472] Call Trace: [ 411.845357][T12472] [ 411.845366][T12472] dump_stack_lvl+0xe8/0x150 [ 411.845397][T12472] should_fail_ex+0x46b/0x600 [ 411.845431][T12472] should_failslab+0xa8/0x100 [ 411.845470][T12472] __kmalloc_node_noprof+0xe7/0x7f0 [ 411.845501][T12472] ? alloc_slab_obj_exts+0xbf/0x250 [ 411.845533][T12472] alloc_slab_obj_exts+0xbf/0x250 [ 411.845563][T12472] __memcg_slab_post_alloc_hook+0x5e5/0xed0 [ 411.845615][T12472] kmem_cache_alloc_noprof+0x3f4/0x680 [ 411.845643][T12472] ? inet_bind2_bucket_create+0x34/0x510 [ 411.845676][T12472] inet_bind2_bucket_create+0x34/0x510 [ 411.845708][T12472] inet_csk_get_port+0xf4b/0x1710 [ 411.845741][T12472] ? inet_csk_get_port+0xbe1/0x1710 [ 411.845791][T12472] ? inet_csk_get_port+0x5f0/0x1710 [ 411.845825][T12472] inet_csk_listen_start+0x176/0x390 [ 411.845851][T12472] __inet_listen_sk+0x2d2/0x5d0 [ 411.845889][T12472] ? __pfx___inet_listen_sk+0x10/0x10 [ 411.845920][T12472] ? __local_bh_enable+0x1e1/0x2f0 [ 411.845956][T12472] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 411.845983][T12472] ? lockdep_hardirqs_on+0x7a/0x110 [ 411.846021][T12472] mptcp_listen+0x23a/0x610 [ 411.846051][T12472] __x64_sys_listen+0x1cd/0x240 [ 411.846078][T12472] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.846101][T12472] do_syscall_64+0x15f/0xf80 [ 411.846120][T12472] ? trace_irq_disable+0x3b/0x140 [ 411.846151][T12472] ? clear_bhb_loop+0x40/0x90 [ 411.846177][T12472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.846199][T12472] RIP: 0033:0x7fdfc59dcdd9 [ 411.846219][T12472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.846237][T12472] RSP: 002b:00007fdfc3c2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 411.846260][T12472] RAX: ffffffffffffffda RBX: 00007fdfc5c55fa0 RCX: 00007fdfc59dcdd9 [ 411.846275][T12472] RDX: 0000000000000000 RSI: 00000000fffffffc RDI: 0000000000000004 [ 411.846289][T12472] RBP: 00007fdfc3c2e090 R08: 0000000000000000 R09: 0000000000000000 [ 411.846303][T12472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.846317][T12472] R13: 00007fdfc5c56038 R14: 00007fdfc5c55fa0 R15: 00007ffdfde1dac8 [ 411.846353][T12472] [ 411.859169][ T5342] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 411.859207][ T5342] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.859228][ T5342] usb 2-1: config 0 has no interface number 0 [ 411.859268][ T5342] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 411.859289][ T5342] usb 2-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 411.859328][ T5342] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 411.859351][ T5342] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.871376][ T5342] usb 2-1: config 0 descriptor?? [ 411.887696][ T5342] ldusb 2-1:0.55: Interrupt in endpoint not found [ 412.101301][ T5342] usb 2-1: USB disconnect, device number 72 [ 412.243674][ T5685] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 412.403481][ T5685] usb 4-1: Using ep0 maxpacket: 32 [ 412.405467][ T5685] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 412.405496][ T5685] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 412.405521][ T5685] usb 4-1: config 0 interface 0 has no altsetting 0 [ 412.408129][ T5685] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 412.408159][ T5685] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.408178][ T5685] usb 4-1: Product: syz [ 412.408194][ T5685] usb 4-1: Manufacturer: syz [ 412.408209][ T5685] usb 4-1: SerialNumber: syz [ 412.413842][ T5685] usb 4-1: config 0 descriptor?? [ 412.839298][ T5685] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 412.898551][ T9] usb 1-1: USB disconnect, device number 86 [ 413.216033][T12490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2416'. [ 413.310382][T12474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.313547][ T9] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 413.313567][T12474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.458015][ T5685] gs_usb 4-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 413.493568][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 413.497507][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 413.497538][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 413.497565][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 413.497591][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 413.497632][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 413.497657][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.519708][ T5685] gs_usb 4-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 413.543239][ T5685] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 413.594671][ T5685] usb 4-1: USB disconnect, device number 37 [ 413.699362][T12496] binder: 12495:12496 unknown command 0 [ 413.699386][T12496] binder: 12495:12496 ioctl c0306201 2000000001c0 returned -22 [ 413.814182][ T9] usb 1-1: GET_CAPABILITIES returned 0 [ 413.814234][ T9] usbtmc 1-1:16.0: can't read capabilities [ 414.032545][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 414.046220][ T32] usb 1-1: USB disconnect, device number 87 [ 414.373474][ T5598] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 414.521991][T12510] netlink: 'syz.2.2424': attribute type 13 has an invalid length. [ 414.522016][T12510] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2424'. [ 414.528835][ T5598] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 414.528867][ T5598] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.528889][ T5598] usb 4-1: Product: syz [ 414.528904][ T5598] usb 4-1: Manufacturer: syz [ 414.528920][ T5598] usb 4-1: SerialNumber: syz [ 414.600749][ T5598] usb 4-1: config 0 descriptor?? [ 414.707315][T12512] FAULT_INJECTION: forcing a failure. [ 414.707315][T12512] name failslab, interval 1, probability 0, space 0, times 0 [ 414.707353][T12512] CPU: 1 UID: 0 PID: 12512 Comm: syz.2.2425 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 414.707381][T12512] Tainted: [L]=SOFTLOCKUP [ 414.707388][T12512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 414.707401][T12512] Call Trace: [ 414.707409][T12512] [ 414.707419][T12512] dump_stack_lvl+0xe8/0x150 [ 414.707448][T12512] should_fail_ex+0x46b/0x600 [ 414.707480][T12512] should_failslab+0xa8/0x100 [ 414.707510][T12512] kmem_cache_alloc_noprof+0x87/0x680 [ 414.707538][T12512] ? alloc_pid+0x1ae/0x1310 [ 414.707573][T12512] alloc_pid+0x1ae/0x1310 [ 414.707608][T12512] ? __lock_acquire+0x6b5/0x2d10 [ 414.707631][T12512] ? __pfx_alloc_pid+0x10/0x10 [ 414.707671][T12512] ? lockdep_hardirqs_on+0x7a/0x110 [ 414.707702][T12512] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 414.707733][T12512] ? fpu_clone+0x33c/0xb60 [ 414.707773][T12512] ? __asan_memcpy+0x40/0x70 [ 414.707797][T12512] ? copy_thread+0x74f/0x9a0 [ 414.707828][T12512] copy_process+0x21d9/0x4450 [ 414.707873][T12512] ? copy_process+0xd87/0x4450 [ 414.707911][T12512] ? __pfx_copy_process+0x10/0x10 [ 414.707960][T12512] vhost_task_create+0x1f9/0x380 [ 414.707982][T12512] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 414.708010][T12512] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 414.708041][T12512] ? __pfx_vhost_task_create+0x10/0x10 [ 414.708071][T12512] ? __pfx_vhost_task_fn+0x10/0x10 [ 414.708097][T12512] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 414.708130][T12512] ? lockdep_hardirqs_on+0x7a/0x110 [ 414.708160][T12512] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 414.708189][T12512] ? mutex_lock_nested+0x152/0x1d0 [ 414.708212][T12512] ? kvm_mmu_post_init_vm+0x8f/0x2d0 [ 414.708245][T12512] kvm_mmu_post_init_vm+0x147/0x2d0 [ 414.708279][T12512] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 414.708316][T12512] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 414.708343][T12512] ? do_raw_spin_lock+0x12b/0x2f0 [ 414.708383][T12512] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 414.708412][T12512] ? lockdep_hardirqs_on+0x7a/0x110 [ 414.708443][T12512] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 414.708472][T12512] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 414.708504][T12512] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 414.708531][T12512] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 414.708561][T12512] ? lockdep_hardirqs_on+0x7a/0x110 [ 414.708587][T12512] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 414.708616][T12512] ? rt_write_unlock+0x190/0x230 [ 414.708644][T12512] kvm_vcpu_ioctl+0xa65/0xfe0 [ 414.708679][T12512] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 414.708728][T12512] ? __fget_files+0x2a/0x420 [ 414.708755][T12512] ? __fget_files+0x2a/0x420 [ 414.708775][T12512] ? __fget_files+0x3a6/0x420 [ 414.708797][T12512] ? __fget_files+0x2a/0x420 [ 414.708823][T12512] ? bpf_lsm_file_ioctl+0x9/0x20 [ 414.708846][T12512] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 414.708872][T12512] __se_sys_ioctl+0xff/0x170 [ 414.708898][T12512] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.708926][T12512] do_syscall_64+0x15f/0xf80 [ 414.708943][T12512] ? trace_irq_disable+0x3b/0x140 [ 414.708971][T12512] ? clear_bhb_loop+0x40/0x90 [ 414.708997][T12512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.709017][T12512] RIP: 0033:0x7f4fca83cdd9 [ 414.709036][T12512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.709053][T12512] RSP: 002b:00007f4fc8a8e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 414.709073][T12512] RAX: ffffffffffffffda RBX: 00007f4fcaab5fa0 RCX: 00007f4fca83cdd9 [ 414.709089][T12512] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 414.709102][T12512] RBP: 00007f4fc8a8e090 R08: 0000000000000000 R09: 0000000000000000 [ 414.709114][T12512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.709127][T12512] R13: 00007f4fcaab6038 R14: 00007f4fcaab5fa0 R15: 00007ffc9e4df488 [ 414.709167][T12512] [ 414.788146][T12517] FAULT_INJECTION: forcing a failure. [ 414.788146][T12517] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 414.788188][T12517] CPU: 1 UID: 0 PID: 12517 Comm: syz.1.2427 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 414.788216][T12517] Tainted: [L]=SOFTLOCKUP [ 414.788224][T12517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 414.788236][T12517] Call Trace: [ 414.788244][T12517] [ 414.788252][T12517] dump_stack_lvl+0xe8/0x150 [ 414.788281][T12517] should_fail_ex+0x46b/0x600 [ 414.788310][T12517] _copy_from_iter+0x1d3/0x1670 [ 414.788342][T12517] ? sock_alloc_send_pskb+0x8a2/0x9a0 [ 414.788368][T12517] ? __pfx__copy_from_iter+0x10/0x10 [ 414.788402][T12517] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 414.788425][T12517] skb_copy_datagram_from_iter+0xf5/0x710 [ 414.788447][T12517] ? dev_get_by_index+0x22/0x2f0 [ 414.788467][T12517] ? skb_put+0x11b/0x210 [ 414.788496][T12517] packet_sendmsg+0x35be/0x4fd0 [ 414.788541][T12517] ? __lock_acquire+0x6b5/0x2d10 [ 414.788569][T12517] ? __lock_acquire+0x6b5/0x2d10 [ 414.788601][T12517] ? __pfx_packet_sendmsg+0x10/0x10 [ 414.788631][T12517] ? aa_sk_perm+0x703/0x950 [ 414.788666][T12517] ? __pfx_aa_sk_perm+0x10/0x10 [ 414.788691][T12517] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 414.788726][T12517] ? aa_sock_msg_perm+0x122/0x200 [ 414.788754][T12517] ? __pfx_packet_sendmsg+0x10/0x10 [ 414.788780][T12517] sock_sendmsg_nosec+0x112/0x150 [ 414.788805][T12517] __sys_sendto+0x402/0x590 [ 414.788836][T12517] ? __pfx___sys_sendto+0x10/0x10 [ 414.788884][T12517] ? ksys_write+0x248/0x270 [ 414.788913][T12517] ? __pfx_ksys_write+0x10/0x10 [ 414.788944][T12517] __x64_sys_sendto+0xde/0x100 [ 414.788972][T12517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.788994][T12517] do_syscall_64+0x15f/0xf80 [ 414.789016][T12517] ? trace_irq_disable+0x3b/0x140 [ 414.789044][T12517] ? clear_bhb_loop+0x40/0x90 [ 414.789069][T12517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.789089][T12517] RIP: 0033:0x7f302677cdd9 [ 414.789108][T12517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.789127][T12517] RSP: 002b:00007f30249d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 414.789149][T12517] RAX: ffffffffffffffda RBX: 00007f30269f5fa0 RCX: 00007f302677cdd9 [ 414.789170][T12517] RDX: 0000000000000036 RSI: 0000200000000240 RDI: 0000000000000003 [ 414.789183][T12517] RBP: 00007f30249d6090 R08: 0000200000000200 R09: 0000000000000014 [ 414.789197][T12517] R10: 0000000020044800 R11: 0000000000000246 R12: 0000000000000001 [ 414.789211][T12517] R13: 00007f30269f6038 R14: 00007f30269f5fa0 R15: 00007ffe65da4bf8 [ 414.789242][T12517] [ 414.808444][ T5598] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 415.295659][ T5342] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 415.412338][ T5598] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 415.425321][ T5685] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 415.443551][ T5342] usb 1-1: Using ep0 maxpacket: 16 [ 415.451447][ T5342] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 415.451466][ T5342] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 415.455445][ T5342] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 415.455477][ T5342] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.455497][ T5342] usb 1-1: Product: syz [ 415.455511][ T5342] usb 1-1: Manufacturer: syz [ 415.455525][ T5342] usb 1-1: SerialNumber: syz [ 415.482002][ T5342] usb 1-1: 0:2 : does not exist [ 415.575957][ T5685] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.575978][ T5685] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.576002][ T5685] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 415.576017][ T5685] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.582782][ T5685] usb 2-1: config 0 descriptor?? [ 415.690864][ T5342] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 415.867362][ T5342] usb 1-1: USB disconnect, device number 88 [ 416.012970][ T5685] cp2112 0003:10C4:EA90.0007: unknown global tag 0xe [ 416.012996][ T5685] cp2112 0003:10C4:EA90.0007: item 0 1 1 14 parsing failed [ 416.015796][ T5685] cp2112 0003:10C4:EA90.0007: parse failed [ 416.015960][ T5685] cp2112 0003:10C4:EA90.0007: probe with driver cp2112 failed with error -22 [ 416.017702][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 416.204477][ T5342] usb 2-1: USB disconnect, device number 73 [ 416.343502][ T5685] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 416.493470][ T5685] usb 3-1: Using ep0 maxpacket: 8 [ 416.496134][ T5685] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 416.496164][ T5685] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 416.496190][ T5685] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 416.496214][ T5685] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 416.496256][ T5685] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 416.496280][ T5685] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.710067][ T5685] usb 3-1: GET_CAPABILITIES returned 0 [ 416.710099][ T5685] usbtmc 3-1:16.0: can't read capabilities [ 416.913013][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 416.915646][ T5598] usb 3-1: USB disconnect, device number 82 [ 416.936335][ T1328] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 417.024444][T12547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.024867][T12547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.169741][ T5342] usb 4-1: USB disconnect, device number 38 [ 417.244597][ T5685] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 417.405396][ T5685] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 417.405431][ T5685] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.405452][ T5685] usb 2-1: Product: syz [ 417.405468][ T5685] usb 2-1: Manufacturer: syz [ 417.405484][ T5685] usb 2-1: SerialNumber: syz [ 417.411076][ T5685] usb 2-1: config 0 descriptor?? [ 417.463115][ T5685] ch341 2-1:0.0: ch341-uart converter detected [ 417.618081][ T5685] usb 2-1: failed to receive control message: -71 [ 417.618143][ T5685] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 417.650151][ T5685] usb 2-1: USB disconnect, device number 74 [ 417.662912][ T5685] ch341 2-1:0.0: device disconnected [ 417.786236][ T5598] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 417.954797][ T5598] usb 4-1: Using ep0 maxpacket: 8 [ 417.967284][ T5598] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 417.967331][ T5598] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 417.967358][ T5598] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 417.967382][ T5598] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 417.967426][ T5598] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 417.967451][ T5598] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.048266][T12569] Bluetooth: MGMT ver 1.23 [ 418.206529][T12574] FAULT_INJECTION: forcing a failure. [ 418.206529][T12574] name failslab, interval 1, probability 0, space 0, times 0 [ 418.206567][T12574] CPU: 0 UID: 0 PID: 12574 Comm: syz.0.2445 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 418.206608][T12574] Tainted: [L]=SOFTLOCKUP [ 418.206616][T12574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 418.206630][T12574] Call Trace: [ 418.206639][T12574] [ 418.206648][T12574] dump_stack_lvl+0xe8/0x150 [ 418.206678][T12574] should_fail_ex+0x46b/0x600 [ 418.206710][T12574] should_failslab+0xa8/0x100 [ 418.206740][T12574] kmem_cache_alloc_noprof+0x87/0x680 [ 418.206767][T12574] ? lockdep_hardirqs_on+0x7a/0x110 [ 418.206797][T12574] ? do_getname+0x2e/0x250 [ 418.206823][T12574] do_getname+0x2e/0x250 [ 418.206842][T12574] ? getname_flags+0x11/0x20 [ 418.206865][T12574] do_sys_openat2+0xca/0x200 [ 418.206893][T12574] ? __pfx_do_sys_openat2+0x10/0x10 [ 418.206918][T12574] ? ksys_write+0x248/0x270 [ 418.206947][T12574] ? __pfx_ksys_write+0x10/0x10 [ 418.206979][T12574] __x64_sys_openat+0x138/0x170 [ 418.207006][T12574] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.207028][T12574] do_syscall_64+0x15f/0xf80 [ 418.207048][T12574] ? trace_irq_disable+0x3b/0x140 [ 418.207076][T12574] ? clear_bhb_loop+0x40/0x90 [ 418.207101][T12574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.207121][T12574] RIP: 0033:0x7fc8b4f3cdd9 [ 418.207141][T12574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.207159][T12574] RSP: 002b:00007fc8b316d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 418.207180][T12574] RAX: ffffffffffffffda RBX: 00007fc8b51b6090 RCX: 00007fc8b4f3cdd9 [ 418.207196][T12574] RDX: 0000000000000000 RSI: 0000200000004280 RDI: ffffffffffffff9c [ 418.207210][T12574] RBP: 00007fc8b316d090 R08: 0000000000000000 R09: 0000000000000000 [ 418.207224][T12574] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 418.207237][T12574] R13: 00007fc8b51b6128 R14: 00007fc8b51b6090 R15: 00007fff87826f38 [ 418.207269][T12574] [ 418.231324][ T5598] usb 4-1: GET_CAPABILITIES returned 0 [ 418.231389][ T5598] usbtmc 4-1:16.0: can't read capabilities [ 418.444455][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 418.446265][ T5598] usb 4-1: USB disconnect, device number 39 [ 418.773498][ T5685] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 418.803595][ T9] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 418.937826][ T5685] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 418.937861][ T5685] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.937882][ T5685] usb 3-1: Product: syz [ 418.937898][ T5685] usb 3-1: Manufacturer: syz [ 418.937914][ T5685] usb 3-1: SerialNumber: syz [ 418.945632][ T5685] usb 3-1: config 0 descriptor?? [ 418.963508][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 418.966810][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 418.966839][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 418.966864][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 418.966889][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 418.966930][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 418.966954][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.155819][ T5685] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 419.238028][ T9] usb 2-1: GET_CAPABILITIES returned 0 [ 419.238075][ T9] usbtmc 2-1:16.0: can't read capabilities [ 419.453045][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 419.477076][ T5342] usb 2-1: USB disconnect, device number 75 [ 419.534955][T12591] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2452'. [ 419.726028][ T5598] usb 1-1: new full-speed USB device number 89 using dummy_hcd [ 419.880260][ T5598] usb 1-1: unable to get BOS descriptor or descriptor too short [ 419.881002][ T5598] usb 1-1: not running at top speed; connect to a high speed hub [ 419.899396][ T5598] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 419.899423][ T5598] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 419.925527][ T5598] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 419.925561][ T5598] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.925582][ T5598] usb 1-1: Product: syz [ 419.925597][ T5598] usb 1-1: Manufacturer: syz [ 419.925613][ T5598] usb 1-1: SerialNumber: syz [ 420.189100][ T5685] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 420.207803][ T5685] usb 3-1: USB disconnect, device number 83 [ 420.355255][ T5763] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 420.358411][ T5598] usb 1-1: 0:2 : does not exist [ 420.358459][ T5598] usb 1-1: unit 0 not found! [ 420.393050][ T5598] usb 1-1: USB disconnect, device number 89 [ 420.505580][ T5763] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 420.505631][ T5763] usb 2-1: config 0 interface 0 has no altsetting 0 [ 420.508040][ T5763] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 420.508071][ T5763] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.508091][ T5763] usb 2-1: Product: syz [ 420.508105][ T5763] usb 2-1: Manufacturer: syz [ 420.508116][ T5763] usb 2-1: SerialNumber: syz [ 420.511632][ T5763] usb 2-1: config 0 descriptor?? [ 420.522136][ T5763] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 420.531178][ T5763] dvb-usb: will use the device's hardware PID filter (table count: 8). [ 420.532194][ T5763] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 420.532248][ T5763] usb 2-1: media controller created [ 420.539864][ T5763] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 420.588515][ T5763] DVB: Unable to find symbol tda10046_attach() [ 420.588532][ T5763] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 420.588547][ T5763] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 420.737596][ T5812] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 420.782291][ T5763] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 420.790803][ T5763] usb 2-1: USB disconnect, device number 76 [ 420.835563][ T60] Bluetooth: hci4: unexpected event for opcode 0x1009 [ 420.903564][ T5812] usb 4-1: Using ep0 maxpacket: 8 [ 420.908836][ T5812] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 420.908868][ T5812] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 420.908895][ T5812] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 420.908920][ T5812] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 420.908963][ T5812] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 420.908988][ T5812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.015564][T12609] FAULT_INJECTION: forcing a failure. [ 421.015564][T12609] name failslab, interval 1, probability 0, space 0, times 0 [ 421.015592][T12609] CPU: 1 UID: 0 PID: 12609 Comm: syz.2.2459 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 421.015609][T12609] Tainted: [L]=SOFTLOCKUP [ 421.015614][T12609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 421.015621][T12609] Call Trace: [ 421.015629][T12609] [ 421.015637][T12609] dump_stack_lvl+0xe8/0x150 [ 421.015669][T12609] should_fail_ex+0x46b/0x600 [ 421.015701][T12609] should_failslab+0xa8/0x100 [ 421.015733][T12609] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 421.015753][T12609] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 421.015769][T12609] ? dup_task_struct+0x52/0x840 [ 421.015789][T12609] dup_task_struct+0x52/0x840 [ 421.015814][T12609] ? rt_spin_unlock+0x160/0x200 [ 421.015841][T12609] copy_process+0x89b/0x4450 [ 421.015892][T12609] ? __pfx_copy_process+0x10/0x10 [ 421.015933][T12609] vhost_task_create+0x1f9/0x380 [ 421.015957][T12609] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 421.015985][T12609] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 421.016015][T12609] ? __pfx_vhost_task_create+0x10/0x10 [ 421.016046][T12609] ? __pfx_vhost_task_fn+0x10/0x10 [ 421.016070][T12609] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 421.016089][T12609] ? lockdep_hardirqs_on+0x7a/0x110 [ 421.016107][T12609] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 421.016129][T12609] ? mutex_lock_nested+0x152/0x1d0 [ 421.016153][T12609] ? kvm_mmu_post_init_vm+0x8f/0x2d0 [ 421.016188][T12609] kvm_mmu_post_init_vm+0x147/0x2d0 [ 421.016222][T12609] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 421.016248][T12609] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 421.016263][T12609] ? do_raw_spin_lock+0x12b/0x2f0 [ 421.016287][T12609] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 421.016338][T12609] ? lockdep_hardirqs_on+0x7a/0x110 [ 421.016368][T12609] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 421.016398][T12609] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 421.016419][T12609] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 421.016434][T12609] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 421.016452][T12609] ? lockdep_hardirqs_on+0x7a/0x110 [ 421.016480][T12609] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 421.016510][T12609] ? rt_write_unlock+0x190/0x230 [ 421.016540][T12609] kvm_vcpu_ioctl+0xa65/0xfe0 [ 421.016573][T12609] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 421.016600][T12609] ? __fget_files+0x2a/0x420 [ 421.016616][T12609] ? __fget_files+0x2a/0x420 [ 421.016636][T12609] ? __fget_files+0x3a6/0x420 [ 421.016658][T12609] ? __fget_files+0x2a/0x420 [ 421.016686][T12609] ? bpf_lsm_file_ioctl+0x9/0x20 [ 421.016707][T12609] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 421.016736][T12609] __se_sys_ioctl+0xff/0x170 [ 421.016754][T12609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.016767][T12609] do_syscall_64+0x15f/0xf80 [ 421.016778][T12609] ? trace_irq_disable+0x3b/0x140 [ 421.016801][T12609] ? clear_bhb_loop+0x40/0x90 [ 421.016826][T12609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.016848][T12609] RIP: 0033:0x7f4fca83cdd9 [ 421.016868][T12609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.016885][T12609] RSP: 002b:00007f4fc8a6d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 421.016905][T12609] RAX: ffffffffffffffda RBX: 00007f4fcaab6090 RCX: 00007f4fca83cdd9 [ 421.016914][T12609] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 421.016922][T12609] RBP: 00007f4fc8a6d090 R08: 0000000000000000 R09: 0000000000000000 [ 421.016930][T12609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.016938][T12609] R13: 00007f4fcaab6128 R14: 00007f4fcaab6090 R15: 00007ffc9e4df488 [ 421.016959][T12609] [ 421.171668][ T5812] usb 4-1: GET_CAPABILITIES returned 0 [ 421.171715][ T5812] usbtmc 4-1:16.0: can't read capabilities [ 421.403217][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 421.425818][ T5763] usb 4-1: USB disconnect, device number 40 [ 421.483747][T12618] FAULT_INJECTION: forcing a failure. [ 421.483747][T12618] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 421.483785][T12618] CPU: 1 UID: 0 PID: 12618 Comm: syz.1.2462 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 421.483814][T12618] Tainted: [L]=SOFTLOCKUP [ 421.483822][T12618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 421.483835][T12618] Call Trace: [ 421.483843][T12618] [ 421.483852][T12618] dump_stack_lvl+0xe8/0x150 [ 421.483882][T12618] should_fail_ex+0x46b/0x600 [ 421.483913][T12618] _copy_from_user+0x2d/0xb0 [ 421.483944][T12618] do_sys_poll+0x2a0/0xf50 [ 421.483980][T12618] ? __lock_acquire+0x6b5/0x2d10 [ 421.484000][T12618] ? __pfx_do_sys_poll+0x10/0x10 [ 421.484028][T12618] ? aa_file_perm+0x192/0x15f0 [ 421.484136][T12618] ? set_user_sigmask+0xcd/0x1c0 [ 421.484164][T12618] ? __pfx_set_user_sigmask+0x10/0x10 [ 421.484191][T12618] ? rt_mutex_slowunlock+0x1cb/0x300 [ 421.484217][T12618] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 421.484249][T12618] __se_sys_ppoll+0x209/0x2b0 [ 421.484271][T12618] ? fput+0xa0/0xd0 [ 421.484297][T12618] ? __pfx___se_sys_ppoll+0x10/0x10 [ 421.484320][T12618] ? __pfx_ksys_write+0x10/0x10 [ 421.484357][T12618] ? __x64_sys_ppoll+0x20/0xc0 [ 421.484379][T12618] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.484400][T12618] do_syscall_64+0x15f/0xf80 [ 421.484418][T12618] ? trace_irq_disable+0x3b/0x140 [ 421.484446][T12618] ? clear_bhb_loop+0x40/0x90 [ 421.484471][T12618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.484490][T12618] RIP: 0033:0x7f302677cdd9 [ 421.484509][T12618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.484528][T12618] RSP: 002b:00007f30249b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 421.484555][T12618] RAX: ffffffffffffffda RBX: 00007f30269f6090 RCX: 00007f302677cdd9 [ 421.484570][T12618] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 421.484584][T12618] RBP: 00007f30249b5090 R08: 0000000000000000 R09: 0000000000000000 [ 421.484597][T12618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.484609][T12618] R13: 00007f30269f6128 R14: 00007f30269f6090 R15: 00007ffe65da4bf8 [ 421.484638][T12618] [ 421.485153][T12613] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 421.860562][T12626] FAULT_INJECTION: forcing a failure. [ 421.860562][T12626] name failslab, interval 1, probability 0, space 0, times 0 [ 421.860587][T12626] CPU: 0 UID: 0 PID: 12626 Comm: syz.2.2473 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 421.860604][T12626] Tainted: [L]=SOFTLOCKUP [ 421.860609][T12626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 421.860616][T12626] Call Trace: [ 421.860621][T12626] [ 421.860627][T12626] dump_stack_lvl+0xe8/0x150 [ 421.860644][T12626] should_fail_ex+0x46b/0x600 [ 421.860662][T12626] should_failslab+0xa8/0x100 [ 421.860680][T12626] kmem_cache_alloc_noprof+0x87/0x680 [ 421.860697][T12626] ? skb_clone+0x212/0x3a0 [ 421.860716][T12626] skb_clone+0x212/0x3a0 [ 421.860735][T12626] __netlink_deliver_tap+0x424/0x8b0 [ 421.860757][T12626] ? netlink_deliver_tap+0x2e/0x1b0 [ 421.860774][T12626] netlink_deliver_tap+0x19c/0x1b0 [ 421.860791][T12626] netlink_unicast+0x754/0x920 [ 421.860810][T12626] netlink_sendmsg+0x813/0xb40 [ 421.860831][T12626] ? __pfx_netlink_sendmsg+0x10/0x10 [ 421.860849][T12626] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 421.860870][T12626] ? aa_sock_msg_perm+0x122/0x200 [ 421.860888][T12626] ? __pfx_netlink_sendmsg+0x10/0x10 [ 421.860903][T12626] sock_sendmsg_nosec+0x112/0x150 [ 421.860921][T12626] ____sys_sendmsg+0x55c/0x870 [ 421.860941][T12626] ? __pfx_____sys_sendmsg+0x10/0x10 [ 421.860969][T12626] ? import_iovec+0x73/0xa0 [ 421.860989][T12626] ___sys_sendmsg+0x2a5/0x360 [ 421.861013][T12626] ? __lock_acquire+0x6b5/0x2d10 [ 421.861027][T12626] ? __pfx____sys_sendmsg+0x10/0x10 [ 421.861061][T12626] ? __fget_files+0x2a/0x420 [ 421.861074][T12626] ? __fget_files+0x3a6/0x420 [ 421.861093][T12626] __x64_sys_sendmsg+0x1c3/0x2a0 [ 421.861111][T12626] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 421.861133][T12626] ? __pfx_ksys_write+0x10/0x10 [ 421.861154][T12626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.861166][T12626] do_syscall_64+0x15f/0xf80 [ 421.861178][T12626] ? trace_irq_disable+0x3b/0x140 [ 421.861196][T12626] ? clear_bhb_loop+0x40/0x90 [ 421.861210][T12626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.861222][T12626] RIP: 0033:0x7f4fca83cdd9 [ 421.861235][T12626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.861251][T12626] RSP: 002b:00007f4fc8a8e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 421.861265][T12626] RAX: ffffffffffffffda RBX: 00007f4fcaab5fa0 RCX: 00007f4fca83cdd9 [ 421.861274][T12626] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 421.861282][T12626] RBP: 00007f4fc8a8e090 R08: 0000000000000000 R09: 0000000000000000 [ 421.861290][T12626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.861298][T12626] R13: 00007f4fcaab6038 R14: 00007f4fcaab5fa0 R15: 00007ffc9e4df488 [ 421.861315][T12626] [ 421.968481][ T5812] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 422.123627][ T5812] usb 2-1: Using ep0 maxpacket: 8 [ 422.171410][ T5812] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 422.171444][ T5812] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 422.171471][ T5812] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 422.171497][ T5812] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 422.171540][ T5812] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 422.171565][ T5812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.303582][ T5763] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 422.394778][ T5598] usb 1-1: new full-speed USB device number 90 using dummy_hcd [ 422.419185][ T5812] usb 2-1: GET_CAPABILITIES returned 0 [ 422.419217][ T5812] usbtmc 2-1:16.0: can't read capabilities [ 422.463538][ T5763] usb 3-1: Using ep0 maxpacket: 8 [ 422.469661][ T5763] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 422.469698][ T5763] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 422.469723][ T5763] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 422.469749][ T5763] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 422.469791][ T5763] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 422.469814][ T5763] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.558483][ T5598] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 422.558572][ T5598] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.558586][ T5598] usb 1-1: Product: syz [ 422.558595][ T5598] usb 1-1: Manufacturer: syz [ 422.558603][ T5598] usb 1-1: SerialNumber: syz [ 422.565253][ T5598] usb 1-1: config 0 descriptor?? [ 422.631066][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 422.632667][ T5841] usb 2-1: USB disconnect, device number 77 [ 422.686861][ T5763] usb 3-1: GET_CAPABILITIES returned 0 [ 422.686966][ T5763] usbtmc 3-1:16.0: can't read capabilities [ 422.805295][ T5598] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 422.891835][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 422.910760][ T5841] usb 3-1: USB disconnect, device number 84 [ 423.043832][ T5700] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 423.204084][ T5700] usb 4-1: Using ep0 maxpacket: 32 [ 423.206868][ T5700] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 423.206896][ T5700] usb 4-1: config 0 has no interface number 0 [ 423.206944][ T5700] usb 4-1: config 0 interface 12 has no altsetting 0 [ 423.209350][ T5700] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 423.209368][ T5700] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.209383][ T5700] usb 4-1: Product: syz [ 423.209564][ T5700] usb 4-1: Manufacturer: syz [ 423.209582][ T5700] usb 4-1: SerialNumber: syz [ 423.216920][ T5700] usb 4-1: config 0 descriptor?? [ 423.529641][T12645] tipc: Enabling of bearer rejected, media not registered [ 423.814271][ T5598] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 423.843026][ T5598] usb 1-1: USB disconnect, device number 90 [ 424.074572][ T5700] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 424.074630][ T5700] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 424.074648][ T5700] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 424.074737][ T5700] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 424.119969][ T5700] usb 4-1: USB disconnect, device number 41 [ 424.383520][ T32] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 424.523521][ T32] usb 3-1: device descriptor read/64, error -71 [ 424.663509][ T5598] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 424.717591][T12675] syz.3.2485(12675): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 424.735568][ T5763] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 424.763604][ T32] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 424.813761][ T5598] usb 1-1: Using ep0 maxpacket: 8 [ 424.815566][ T5598] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 424.815593][ T5598] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 424.815617][ T5598] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 424.815631][ T5598] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 424.815656][ T5598] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 424.815670][ T5598] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.893564][ T5763] usb 2-1: Using ep0 maxpacket: 8 [ 424.911494][ T5763] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 424.911582][ T5763] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 424.911610][ T5763] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 424.911636][ T5763] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 424.911679][ T5763] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 424.911756][ T5763] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.974747][ T32] usb 3-1: device descriptor read/64, error -71 [ 425.027675][ T5598] usb 1-1: GET_CAPABILITIES returned 0 [ 425.027722][ T5598] usbtmc 1-1:16.0: can't read capabilities [ 425.084688][ T32] usb usb3-port1: attempt power cycle [ 425.137791][ T5763] usb 2-1: GET_CAPABILITIES returned 0 [ 425.137842][ T5763] usbtmc 2-1:16.0: can't read capabilities [ 425.181580][T12680] input: syz0 as /devices/virtual/input/input28 [ 425.260402][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 425.269978][ T5598] usb 1-1: USB disconnect, device number 91 [ 425.358364][ T5763] usb 2-1: USB disconnect, device number 78 [ 425.425527][ T32] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 425.447232][ T32] usb 3-1: device descriptor read/8, error -71 [ 425.683768][ T32] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 425.704360][ T32] usb 3-1: device descriptor read/8, error -71 [ 425.813804][ T32] usb usb3-port1: unable to enumerate USB device [ 426.308236][T12708] gfs2: not a GFS2 filesystem [ 426.336494][T12708] KVM: debugfs: duplicate directory 12708-10 [ 426.366859][T12710] binder: 12709:12710 unknown command 0 [ 426.366875][T12710] binder: 12709:12710 ioctl c0306201 2000000001c0 returned -22 [ 426.368867][T12710] binder_alloc: 12709: binder_alloc_buf, no vma [ 426.368931][T12710] FAULT_INJECTION: forcing a failure. [ 426.368931][T12710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 426.368951][T12710] CPU: 1 UID: 0 PID: 12710 Comm: syz.0.2496 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 426.368968][T12710] Tainted: [L]=SOFTLOCKUP [ 426.368972][T12710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 426.368979][T12710] Call Trace: [ 426.368984][T12710] [ 426.368990][T12710] dump_stack_lvl+0xe8/0x150 [ 426.369009][T12710] should_fail_ex+0x46b/0x600 [ 426.369028][T12710] _copy_to_user+0x31/0xb0 [ 426.369047][T12710] simple_read_from_buffer+0xe1/0x170 [ 426.369064][T12710] proc_fail_nth_read+0x1be/0x230 [ 426.369081][T12710] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 426.369097][T12710] ? rw_verify_area+0x2ac/0x4e0 [ 426.369114][T12710] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 426.369129][T12710] vfs_read+0x212/0xa80 [ 426.369149][T12710] ? __pfx_vfs_read+0x10/0x10 [ 426.369165][T12710] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 426.369184][T12710] ? lockdep_hardirqs_on+0x7a/0x110 [ 426.369202][T12710] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 426.369219][T12710] ? mutex_lock_nested+0x152/0x1d0 [ 426.369234][T12710] ? fdget_pos+0x252/0x320 [ 426.369252][T12710] ksys_read+0x156/0x270 [ 426.369269][T12710] ? __pfx_ksys_read+0x10/0x10 [ 426.369289][T12710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.369302][T12710] do_syscall_64+0x15f/0xf80 [ 426.369313][T12710] ? trace_irq_disable+0x3b/0x140 [ 426.369330][T12710] ? clear_bhb_loop+0x40/0x90 [ 426.369345][T12710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.369357][T12710] RIP: 0033:0x7fc8b4efd60e [ 426.369369][T12710] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 426.369380][T12710] RSP: 002b:00007fc8b318dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 426.369393][T12710] RAX: ffffffffffffffda RBX: 00007fc8b318e6c0 RCX: 00007fc8b4efd60e [ 426.369402][T12710] RDX: 000000000000000f RSI: 00007fc8b318e0a0 RDI: 0000000000000006 [ 426.369410][T12710] RBP: 00007fc8b318e090 R08: 0000000000000000 R09: 0000000000000000 [ 426.369418][T12710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.369426][T12710] R13: 00007fc8b51b6038 R14: 00007fc8b51b5fa0 R15: 00007fff87826f38 [ 426.369443][T12710] [ 426.423466][ T5598] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 426.643523][ T60] Bluetooth: hci4: command 0x0405 tx timeout [ 426.753516][ T5598] usb 2-1: Using ep0 maxpacket: 32 [ 426.758945][ T5598] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 426.758978][ T5598] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.801123][ T5598] usb 2-1: config 0 descriptor?? [ 426.812950][ T5598] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 426.983480][ T32] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 427.023475][ T5685] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 427.142137][ T32] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 427.142297][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.142321][ T32] usb 4-1: Product: syz [ 427.142337][ T32] usb 4-1: Manufacturer: syz [ 427.142352][ T32] usb 4-1: SerialNumber: syz [ 427.161002][ T32] usb 4-1: config 0 descriptor?? [ 427.173547][ T5685] usb 1-1: Using ep0 maxpacket: 8 [ 427.188255][ T5685] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 427.188285][ T5685] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 427.188311][ T5685] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 427.188336][ T5685] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 427.188378][ T5685] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 427.188403][ T5685] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.194797][ T32] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 427.241021][ T32] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 427.244383][ T32] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 427.244439][ T32] usb 4-1: media controller created [ 427.380158][ T32] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 427.436678][ T5685] usb 1-1: GET_CAPABILITIES returned 0 [ 427.436736][ T5685] usbtmc 1-1:16.0: can't read capabilities [ 427.504259][ T32] DVB: Unable to find symbol mt352_attach() [ 427.541293][ T32] DVB: Unable to find symbol nxt6000_attach() [ 427.541309][ T32] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 427.545921][ T32] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input29 [ 427.578518][ T32] dvb-usb: schedule remote query interval to 1000 msecs. [ 427.578541][ T32] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 427.578557][ T32] dvb-usb: bulk message failed: -22 (7/0) [ 427.578574][ T32] dvb-usb: bulk message failed: -22 (7/0) [ 427.595498][ T32] usb 4-1: USB disconnect, device number 42 [ 427.644517][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 427.644634][ T5342] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 427.678366][ T5700] usb 1-1: USB disconnect, device number 92 [ 427.834526][ T5342] usb 3-1: Using ep0 maxpacket: 8 [ 427.837054][ T5342] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 427.837083][ T5342] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 427.837110][ T5342] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 427.837134][ T5342] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 427.837178][ T5342] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 427.837203][ T5342] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.967833][ T32] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 428.052161][ T5342] usb 3-1: GET_CAPABILITIES returned 0 [ 428.052210][ T5342] usbtmc 3-1:16.0: can't read capabilities [ 428.270772][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 428.286273][ T5812] usb 3-1: USB disconnect, device number 89 [ 428.354659][T12727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2503'. [ 428.437808][ T5598] gspca_vc032x: reg_w err -71 [ 428.437839][ T5598] gspca_vc032x: I2c Bus Busy Wait 00 [ 428.437850][ T5598] gspca_vc032x: I2c Bus Busy Wait 00 [ 428.437871][ T5598] gspca_vc032x: I2c Bus Busy Wait 00 [ 428.437881][ T5598] gspca_vc032x: I2c Bus Busy Wait 00 [ 428.437891][ T5598] gspca_vc032x: I2c Bus Busy Wait 00 [ 428.437901][ T5598] gspca_vc032x: I2c Bus Busy Wait 00 [ 428.437911][ T5598] gspca_vc032x: I2c Bus Busy Wait 00 [ 428.437920][ T5598] gspca_vc032x: I2c Bus Busy Wait 00 [ 428.437929][ T5598] gspca_vc032x: I2c Bus Busy Wait 00 [ 428.437938][ T5598] gspca_vc032x: I2c Bus Busy Wait 00 [ 428.437948][ T5598] gspca_vc032x: I2c Bus Busy Wait 00 [ 428.437957][ T5598] gspca_vc032x: I2c Bus Busy Wait 00 [ 428.437967][ T5598] gspca_vc032x: I2c Bus Busy Wait 00 [ 428.437976][ T5598] gspca_vc032x: I2c Bus Busy Wait 00 [ 428.437985][ T5598] gspca_vc032x: I2c Bus Busy Wait 00 [ 428.437995][ T5598] gspca_vc032x: I2c Bus Busy Wait 00 [ 428.438004][ T5598] gspca_vc032x: I2c Bus Busy Wait 00 [ 428.438013][ T5598] gspca_vc032x: I2c Bus Busy Wait 00 [ 428.438022][ T5598] gspca_vc032x: Unknown sensor... [ 428.439423][ T5598] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 428.560221][ T5598] usb 2-1: USB disconnect, device number 79 [ 428.603565][ T32] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 428.753545][ T32] usb 4-1: Using ep0 maxpacket: 8 [ 428.755490][ T32] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 428.755525][ T32] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 428.755550][ T32] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 428.755564][ T32] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 428.755618][ T32] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 428.755632][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.965524][ T32] usb 4-1: GET_CAPABILITIES returned 0 [ 428.965554][ T32] usbtmc 4-1:16.0: can't read capabilities [ 429.685590][ T32] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 429.803506][ T5812] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 429.837378][ T32] usb 2-1: unable to get BOS descriptor or descriptor too short [ 429.837903][ T32] usb 2-1: not running at top speed; connect to a high speed hub [ 429.839045][ T32] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 429.839069][ T32] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 429.841305][ T32] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 429.841336][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.841357][ T32] usb 2-1: Product: syz [ 429.841373][ T32] usb 2-1: Manufacturer: syz [ 429.841387][ T32] usb 2-1: SerialNumber: syz [ 429.995398][ T5812] usb 3-1: Using ep0 maxpacket: 16 [ 429.998521][ T5812] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 429.998553][ T5812] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 430.013508][ T5812] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 430.013541][ T5812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.013564][ T5812] usb 3-1: Product: syz [ 430.013580][ T5812] usb 3-1: Manufacturer: syz [ 430.013595][ T5812] usb 3-1: SerialNumber: syz [ 430.070789][ T5812] usb 3-1: config 0 descriptor?? [ 430.086839][ T5812] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 430.086876][ T5812] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 430.349388][ C1] raw-gadget.2 gadget.1: ignoring, device is not running [ 430.349736][ C1] raw-gadget.2 gadget.1: ignoring, device is not running [ 430.363992][ T32] usb 2-1: 0:2 : does not exist [ 430.364073][ T32] usb 2-1: unit 0 not found! [ 430.473235][ T32] usb 2-1: USB disconnect, device number 80 [ 430.533748][ T5763] usb 1-1: new full-speed USB device number 93 using dummy_hcd [ 430.552748][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 430.735949][ T5763] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.736006][ T5763] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 430.736030][ T5763] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 430.736070][ T5763] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 430.736094][ T5763] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.740732][ T5763] usb 1-1: config 0 descriptor?? [ 430.908917][ T5812] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 430.909861][ T5812] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 430.955694][ T5763] ath6kl: Failed to submit usb control message: -71 [ 430.967105][ T5763] ath6kl: unable to send the bmi data to the device: -71 [ 430.967487][ T5763] ath6kl: Unable to send get target info: -71 [ 430.995965][ T5763] ath6kl: Failed to init ath6kl core: -71 [ 431.034934][ T5763] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 431.057927][ T5763] usb 1-1: USB disconnect, device number 93 [ 431.362878][ T32] usb 4-1: USB disconnect, device number 43 [ 431.530968][ T5812] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 431.733690][ T5763] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 431.753677][ T32] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 431.884582][ T32] usb 4-1: device descriptor read/64, error -71 [ 431.903590][ T5763] usb 2-1: Using ep0 maxpacket: 8 [ 431.908500][ T5763] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 431.908530][ T5763] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 431.908943][ T5763] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 431.908971][ T5763] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 431.909012][ T5763] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 431.909036][ T5763] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.123563][ T32] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 432.138477][ T5812] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 432.138984][ T5812] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 432.139465][ T5812] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 432.139937][ T5812] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 432.185303][ T5812] usb 3-1: USB disconnect, device number 90 [ 432.202506][ T5763] usb 2-1: GET_CAPABILITIES returned 0 [ 432.202562][ T5763] usbtmc 2-1:16.0: can't read capabilities [ 432.256559][ T32] usb 4-1: device descriptor read/64, error -71 [ 432.363895][ T32] usb usb4-port1: attempt power cycle [ 432.404922][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 432.407841][ T5700] usb 2-1: USB disconnect, device number 81 [ 432.703545][ T32] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 432.726315][ T32] usb 4-1: device descriptor read/8, error -71 [ 432.731171][T12783] netlink: 'syz.2.2524': attribute type 4 has an invalid length. [ 432.731193][T12783] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2524'. [ 432.731887][T12784] netlink: 'syz.2.2524': attribute type 4 has an invalid length. [ 432.731898][T12784] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2524'. [ 433.033645][ T32] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 433.055315][ T32] usb 4-1: device descriptor read/8, error -71 [ 433.164050][ T32] usb usb4-port1: unable to enumerate USB device [ 433.223521][ T5812] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 433.353506][ T5812] usb 2-1: device descriptor read/64, error -71 [ 433.624964][ T5812] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 433.753891][ T5812] usb 2-1: device descriptor read/64, error -71 [ 433.864870][ T5812] usb usb2-port1: attempt power cycle [ 434.205423][ T5812] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 434.225436][ T5812] usb 2-1: device descriptor read/8, error -71 [ 434.314089][T12808] tmpfs: Bad value for 'nr_inodes' [ 434.474373][ T5812] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 434.483526][ T32] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 434.501041][ T5812] usb 2-1: device descriptor read/8, error -71 [ 434.593559][ T5763] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 434.608760][ T5812] usb usb2-port1: unable to enumerate USB device [ 434.643865][ T32] usb 1-1: Using ep0 maxpacket: 16 [ 434.645500][ T32] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 434.645526][ T32] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 434.649897][ T32] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 434.649927][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.649948][ T32] usb 1-1: Product: syz [ 434.649964][ T32] usb 1-1: Manufacturer: syz [ 434.649978][ T32] usb 1-1: SerialNumber: syz [ 434.719144][ T32] usb 1-1: 0:2 : does not exist [ 434.743450][ T5763] usb 3-1: Using ep0 maxpacket: 8 [ 434.745665][ T5763] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 434.745696][ T5763] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 434.745723][ T5763] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 434.745748][ T5763] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 434.745791][ T5763] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 434.745808][ T5763] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.893463][ T5685] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 434.923591][ T32] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 434.961826][ T5763] usb 3-1: GET_CAPABILITIES returned 0 [ 434.961876][ T5763] usbtmc 3-1:16.0: can't read capabilities [ 434.990932][ T32] usb 1-1: USB disconnect, device number 94 [ 435.055618][ T5685] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 435.055652][ T5685] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.055669][ T5685] usb 4-1: Product: syz [ 435.055677][ T5685] usb 4-1: Manufacturer: syz [ 435.055686][ T5685] usb 4-1: SerialNumber: syz [ 435.083508][ T5685] usb 4-1: config 0 descriptor?? [ 435.119861][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 435.186851][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 435.191432][ T5700] usb 3-1: USB disconnect, device number 91 [ 435.306933][ T5685] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 435.774586][ T5700] usb 1-1: new full-speed USB device number 95 using dummy_hcd [ 435.927067][ T5700] usb 1-1: unable to get BOS descriptor or descriptor too short [ 435.928048][ T5700] usb 1-1: not running at top speed; connect to a high speed hub [ 435.929318][ T5700] usb 1-1: config 1 has an invalid descriptor of length 37, skipping remainder of the config [ 435.929383][ T5700] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 435.982921][ T5700] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 435.982943][ T5700] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.983013][ T5700] usb 1-1: Product: syz [ 435.983029][ T5700] usb 1-1: Manufacturer: syz [ 435.983044][ T5700] usb 1-1: SerialNumber: syz [ 436.133519][ T32] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 436.216767][T12822] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 436.263610][ T32] usb 3-1: device descriptor read/64, error -71 [ 436.271369][ T5700] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 436.307271][ T5700] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 436.315440][ T5685] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 436.329300][ T5685] usb 4-1: USB disconnect, device number 48 [ 436.503566][ T32] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 436.602187][ T5700] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 436.609436][ T5700] usb 1-1: USB disconnect, device number 95 [ 436.634083][ T32] usb 3-1: device descriptor read/64, error -71 [ 436.658933][ T5765] udevd[5765]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 436.743790][ T32] usb usb3-port1: attempt power cycle [ 437.083999][ T32] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 437.109008][ T32] usb 3-1: device descriptor read/8, error -71 [ 437.203505][ T5812] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 437.343452][ T32] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 437.363411][ T5812] usb 4-1: config 0 has an invalid interface number: 127 but max is 0 [ 437.363437][ T5812] usb 4-1: config 0 has no interface number 0 [ 437.363469][ T5812] usb 4-1: config 0 interface 127 has no altsetting 0 [ 437.365272][ T32] usb 3-1: device descriptor read/8, error -71 [ 437.370491][ T5812] usb 4-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=fe.2d [ 437.370523][ T5812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.370546][ T5812] usb 4-1: Product: syz [ 437.370562][ T5812] usb 4-1: Manufacturer: syz [ 437.370576][ T5812] usb 4-1: SerialNumber: syz [ 437.382062][ T5812] usb 4-1: config 0 descriptor?? [ 437.473949][ T32] usb usb3-port1: unable to enumerate USB device [ 437.609281][ T5812] redrat3 4-1:0.127: Couldn't find all endpoints [ 437.644935][ T5812] usb 4-1: USB disconnect, device number 49 [ 437.955171][ T5763] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 438.123668][ T5763] usb 2-1: Using ep0 maxpacket: 8 [ 438.125709][ T5763] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 438.125736][ T5763] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 438.125751][ T5763] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 438.125765][ T5763] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 438.125790][ T5763] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 438.125803][ T5763] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.336913][ T5763] usb 2-1: GET_CAPABILITIES returned 0 [ 438.336972][ T5763] usbtmc 2-1:16.0: can't read capabilities [ 438.539549][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 438.551875][ T5342] usb 2-1: USB disconnect, device number 86 [ 438.713607][ T32] usb 1-1: new full-speed USB device number 96 using dummy_hcd [ 438.895401][ T32] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 438.895435][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.895458][ T32] usb 1-1: Product: syz [ 438.895474][ T32] usb 1-1: Manufacturer: syz [ 438.895490][ T32] usb 1-1: SerialNumber: syz [ 438.902817][ T32] usb 1-1: config 0 descriptor?? [ 439.110879][ T32] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 439.751682][T12864] binder: 12863:12864 ioctl 80045510 0 returned -22 [ 439.944294][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.944383][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.053683][ T5763] usb 3-1: new full-speed USB device number 96 using dummy_hcd [ 440.126196][ T32] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 440.141145][ T32] usb 1-1: USB disconnect, device number 96 [ 440.216108][ T5763] usb 3-1: config 0 has an invalid interface number: 200 but max is 0 [ 440.216140][ T5763] usb 3-1: config 0 has no interface number 0 [ 440.216176][ T5763] usb 3-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 440.216192][ T5763] usb 3-1: config 0 interface 200 altsetting 2 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 440.216208][ T5763] usb 3-1: config 0 interface 200 has no altsetting 0 [ 440.222857][ T5763] usb 3-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 440.222889][ T5763] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.222911][ T5763] usb 3-1: Product: syz [ 440.222927][ T5763] usb 3-1: Manufacturer: syz [ 440.222942][ T5763] usb 3-1: SerialNumber: syz [ 440.282477][ T5763] usb 3-1: config 0 descriptor?? [ 440.433543][ T5342] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 440.504874][ T5610] Bluetooth: hci4: Unable to find connection with handle 0x00c9 [ 440.506489][T12864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.507196][T12864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.540912][ T5763] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.200/input/input30 [ 440.543186][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.543502][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.543803][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.544028][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.544255][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.544482][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.544706][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.544943][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.545164][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.545388][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.545610][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.545834][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.546056][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.546280][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.546518][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.546751][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.546982][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.547209][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.547436][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.547660][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.547883][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.548113][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.548340][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.548561][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.548797][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.549032][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.549257][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.549479][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.549713][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.549953][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.550177][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.550405][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.550630][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.550855][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.551081][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.551303][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.551527][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.551759][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.551988][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.552209][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.552438][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.552665][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.552907][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.553143][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.553492][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.553957][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.554188][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.554419][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.554661][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.554890][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.555115][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.555335][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.555559][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.555809][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.556034][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.556259][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.556481][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.556707][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.556939][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.557162][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.557391][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.557613][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.557835][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.558057][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.558280][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.558504][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.558734][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.558958][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.559180][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.559402][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.559626][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.559849][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.560076][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.560305][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.560533][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.560760][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.560981][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.561206][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.561434][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.561658][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.561879][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.562112][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.562332][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.562557][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.562795][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.563015][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.563250][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.563588][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.563810][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.564041][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.564258][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.564473][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.564691][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.564921][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.565150][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.565373][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.565595][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.565817][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.566056][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.566279][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.566500][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.566729][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.566951][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.567175][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.567398][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.567625][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.567848][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.568071][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.568291][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.568529][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.568757][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.568986][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.569227][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.569449][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.569674][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.569896][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.570118][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.570345][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.570575][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.570808][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.571033][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.571255][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.571481][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.571705][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.571935][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.572163][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.572387][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.572612][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.572838][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.573059][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.573282][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.573534][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.573768][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.573991][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.574211][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.574431][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.574675][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.574918][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.575142][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.575366][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.575603][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.575830][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.576052][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.576277][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.576498][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.576720][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.576952][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.577177][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.577399][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.577624][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.577849][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.578079][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.578311][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.578547][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.578776][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.579003][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.579225][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.579446][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.579674][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.579901][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.580124][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.580346][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.580570][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.580798][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.581025][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.581265][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.581486][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.581731][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.581955][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.582176][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.582396][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.582616][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.582841][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.583065][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.583287][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.583553][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.583785][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.584006][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.584231][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.584455][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.584675][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.584902][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.585123][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.585344][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.585580][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.586476][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.587291][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.587526][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.587757][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.587982][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.588206][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.588431][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.588659][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 440.588895][ C1] usb 3-1: hanwang_irq - urb shutting down with status: -2 [ 440.667540][ T5763] usb 3-1: USB disconnect, device number 96 [ 440.693434][ T5342] usb 4-1: device descriptor read/64, error -71 [ 440.943460][ T5342] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 441.295466][ T5342] usb 4-1: device descriptor read/64, error -71 [ 441.343460][ T5841] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 441.430948][ T5342] usb usb4-port1: attempt power cycle [ 441.503499][ T5841] usb 1-1: Using ep0 maxpacket: 8 [ 441.507157][ T5841] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 441.507213][ T5841] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 441.507236][ T5841] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 441.507260][ T5841] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 441.507284][ T5841] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 441.507857][ T5841] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 441.507884][ T5841] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.723590][ T5763] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 441.736064][ T5841] usb 1-1: usb_control_msg returned -32 [ 441.736114][ T5841] usbtmc 1-1:16.0: can't read capabilities [ 441.759190][ T5841] usb 1-1: USB disconnect, device number 97 [ 441.883490][ T5763] usb 3-1: Using ep0 maxpacket: 8 [ 441.886362][ T5763] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 441.886391][ T5763] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 441.886416][ T5763] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 441.886441][ T5763] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 441.886483][ T5763] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 441.886506][ T5763] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.113474][ T5342] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 442.133584][ T5763] usb 3-1: GET_CAPABILITIES returned 0 [ 442.133632][ T5763] usbtmc 3-1:16.0: can't read capabilities [ 442.135471][ T5342] usb 4-1: device descriptor read/8, error -71 [ 442.337528][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 442.363291][ T5841] usb 3-1: USB disconnect, device number 97 [ 442.373487][ T5342] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 442.394026][ T5342] usb 4-1: device descriptor read/8, error -71 [ 442.503766][ T5342] usb usb4-port1: unable to enumerate USB device [ 442.559397][T12891] hpfs: hpfs_map_sector(): read error [ 443.204142][T12900] FAULT_INJECTION: forcing a failure. [ 443.204142][T12900] name failslab, interval 1, probability 0, space 0, times 0 [ 443.204198][T12900] CPU: 0 UID: 0 PID: 12900 Comm: syz.1.2567 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 443.204227][T12900] Tainted: [L]=SOFTLOCKUP [ 443.204234][T12900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 443.204241][T12900] Call Trace: [ 443.204247][T12900] [ 443.204253][T12900] dump_stack_lvl+0xe8/0x150 [ 443.204273][T12900] should_fail_ex+0x46b/0x600 [ 443.204292][T12900] should_failslab+0xa8/0x100 [ 443.204311][T12900] kmem_cache_alloc_noprof+0x87/0x680 [ 443.204327][T12900] ? __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 443.204345][T12900] __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 443.204366][T12900] mmu_topup_memory_caches+0x21/0x170 [ 443.204384][T12900] kvm_mmu_load+0x9d/0x2320 [ 443.204399][T12900] ? kvm_msr_allowed+0x9a/0x490 [ 443.204415][T12900] ? kvm_msr_allowed+0x9a/0x490 [ 443.204434][T12900] ? vmx_set_intercept_for_msr+0x2ea/0x3e0 [ 443.204453][T12900] ? kvm_apic_has_interrupt+0x73c/0x770 [ 443.204478][T12900] ? vmx_recalc_intercepts+0xec4/0x1b10 [ 443.204500][T12900] vcpu_run+0x5c84/0x7860 [ 443.204517][T12900] ? vcpu_run+0x6cf1/0x7860 [ 443.204557][T12900] ? __pfx_vcpu_run+0x10/0x10 [ 443.204569][T12900] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 443.204583][T12900] ? vmx_set_nmi_mask+0x120/0x280 [ 443.204601][T12900] kvm_arch_vcpu_ioctl_run+0x11e6/0x20d0 [ 443.204623][T12900] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 443.204635][T12900] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 443.204650][T12900] ? do_raw_spin_lock+0x12b/0x2f0 [ 443.204673][T12900] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 443.204691][T12900] ? lockdep_hardirqs_on+0x7a/0x110 [ 443.204709][T12900] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 443.204727][T12900] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 443.204745][T12900] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 443.204763][T12900] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 443.204781][T12900] ? rt_write_unlock+0x190/0x230 [ 443.204797][T12900] kvm_vcpu_ioctl+0xa65/0xfe0 [ 443.204817][T12900] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 443.204844][T12900] ? __fget_files+0x2a/0x420 [ 443.204859][T12900] ? __fget_files+0x2a/0x420 [ 443.204872][T12900] ? __fget_files+0x3a6/0x420 [ 443.204886][T12900] ? __fget_files+0x2a/0x420 [ 443.204901][T12900] ? bpf_lsm_file_ioctl+0x9/0x20 [ 443.204914][T12900] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 443.204931][T12900] __se_sys_ioctl+0xff/0x170 [ 443.204948][T12900] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.204961][T12900] do_syscall_64+0x15f/0xf80 [ 443.204972][T12900] ? trace_irq_disable+0x3b/0x140 [ 443.204988][T12900] ? clear_bhb_loop+0x40/0x90 [ 443.205003][T12900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.205015][T12900] RIP: 0033:0x7f302677cdd9 [ 443.205028][T12900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.205038][T12900] RSP: 002b:00007f30249d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 443.205052][T12900] RAX: ffffffffffffffda RBX: 00007f30269f5fa0 RCX: 00007f302677cdd9 [ 443.205061][T12900] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 443.205069][T12900] RBP: 00007f30249d6090 R08: 0000000000000000 R09: 0000000000000000 [ 443.205077][T12900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.205084][T12900] R13: 00007f30269f6038 R14: 00007f30269f5fa0 R15: 00007ffe65da4bf8 [ 443.205101][T12900] [ 443.223592][ T5685] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 443.388639][ T5685] usb 3-1: unable to get BOS descriptor or descriptor too short [ 443.459705][ T5685] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 443.459738][ T5685] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.459759][ T5685] usb 3-1: Product: syz [ 443.459775][ T5685] usb 3-1: Manufacturer: syz [ 443.459791][ T5685] usb 3-1: SerialNumber: syz [ 443.633651][ T9] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 443.717417][ T5685] usb 3-1: selecting invalid altsetting 1 [ 443.718240][ T5685] usb 3-1: unit 6 not found! [ 443.718986][ T5685] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 443.743131][ T5685] usb 3-1: selecting invalid altsetting 1 [ 443.751862][ T5685] usb 3-1: unit 6 not found! [ 443.756454][T12914] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2572'. [ 443.790652][ T5685] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 443.801313][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 443.804836][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 443.804866][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 443.810580][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 443.810608][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.810628][ T9] usb 4-1: Product: syz [ 443.810645][ T9] usb 4-1: Manufacturer: syz [ 443.810660][ T9] usb 4-1: SerialNumber: syz [ 443.837832][ T9] usb 4-1: config 0 descriptor?? [ 443.871470][ T5685] usb 3-1: selecting invalid altsetting 1 [ 443.872188][ T5685] usb 3-1: unit 6 not found! [ 443.890405][ T9] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 443.890438][ T9] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 443.958137][ T5685] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 443.976347][ T5685] usb 3-1: USB disconnect, device number 98 [ 444.046653][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 444.472529][ T9] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 444.473052][ T9] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 444.703499][ T5685] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 444.853528][ T5685] usb 3-1: Using ep0 maxpacket: 8 [ 444.857305][ T5685] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 444.857337][ T5685] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 444.857362][ T5685] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 444.857386][ T5685] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 444.857429][ T5685] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 444.857454][ T5685] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.072168][ T5685] usb 3-1: GET_CAPABILITIES returned 0 [ 445.072215][ T5685] usbtmc 3-1:16.0: can't read capabilities [ 445.097350][ T9] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 445.276285][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 445.277512][ T5841] usb 3-1: USB disconnect, device number 99 [ 445.503612][ T9] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 445.507064][ T9] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 445.507414][ T9] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 445.507777][ T9] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 445.508133][ T9] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 445.521754][ T9] usb 4-1: USB disconnect, device number 54 [ 445.873835][T12932] FAULT_INJECTION: forcing a failure. [ 445.873835][T12932] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 445.873873][T12932] CPU: 0 UID: 0 PID: 12932 Comm: syz.2.2577 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 445.873901][T12932] Tainted: [L]=SOFTLOCKUP [ 445.873909][T12932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 445.873921][T12932] Call Trace: [ 445.873929][T12932] [ 445.873937][T12932] dump_stack_lvl+0xe8/0x150 [ 445.873990][T12932] should_fail_ex+0x46b/0x600 [ 445.874019][T12932] _copy_from_user+0x2d/0xb0 [ 445.874050][T12932] ___sys_sendmsg+0x1c6/0x360 [ 445.874079][T12932] ? __lock_acquire+0x6b5/0x2d10 [ 445.874104][T12932] ? __pfx____sys_sendmsg+0x10/0x10 [ 445.874167][T12932] ? __fget_files+0x2a/0x420 [ 445.874189][T12932] ? __fget_files+0x3a6/0x420 [ 445.874229][T12932] __x64_sys_sendmsg+0x1c3/0x2a0 [ 445.874262][T12932] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 445.874300][T12932] ? __pfx_ksys_write+0x10/0x10 [ 445.874340][T12932] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.874363][T12932] do_syscall_64+0x15f/0xf80 [ 445.874382][T12932] ? trace_irq_disable+0x3b/0x140 [ 445.874412][T12932] ? clear_bhb_loop+0x40/0x90 [ 445.874437][T12932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.874458][T12932] RIP: 0033:0x7f4fca83cdd9 [ 445.874478][T12932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.874496][T12932] RSP: 002b:00007f4fc8a8e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 445.874518][T12932] RAX: ffffffffffffffda RBX: 00007f4fcaab5fa0 RCX: 00007f4fca83cdd9 [ 445.874534][T12932] RDX: 0000000004048010 RSI: 0000200000000080 RDI: 0000000000000003 [ 445.874549][T12932] RBP: 00007f4fc8a8e090 R08: 0000000000000000 R09: 0000000000000000 [ 445.874562][T12932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.874575][T12932] R13: 00007f4fcaab6038 R14: 00007f4fcaab5fa0 R15: 00007ffc9e4df488 [ 445.874607][T12932] [ 445.966211][T12934] netlink: 'syz.2.2578': attribute type 20 has an invalid length. [ 446.293975][T12945] FAULT_INJECTION: forcing a failure. [ 446.293975][T12945] name failslab, interval 1, probability 0, space 0, times 0 [ 446.294013][T12945] CPU: 0 UID: 0 PID: 12945 Comm: syz.2.2582 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 446.294041][T12945] Tainted: [L]=SOFTLOCKUP [ 446.294049][T12945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 446.294061][T12945] Call Trace: [ 446.294069][T12945] [ 446.294078][T12945] dump_stack_lvl+0xe8/0x150 [ 446.294107][T12945] should_fail_ex+0x46b/0x600 [ 446.294138][T12945] should_failslab+0xa8/0x100 [ 446.294169][T12945] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 446.294202][T12945] ? __alloc_skb+0x1d0/0x7d0 [ 446.294227][T12945] ? lockdep_hardirqs_on+0x7a/0x110 [ 446.294261][T12945] __alloc_skb+0x1d0/0x7d0 [ 446.294287][T12945] ? netlink_ack_tlv_len+0x6c/0x210 [ 446.294320][T12945] netlink_ack+0x146/0xa50 [ 446.294345][T12945] ? __pfx_genl_rcv_msg+0x10/0x10 [ 446.294365][T12945] ? ref_tracker_free+0x673/0x820 [ 446.294390][T12945] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 446.294415][T12945] ? __pfx_nl80211_post_doit+0x10/0x10 [ 446.294442][T12945] ? ____sys_sendmsg+0x55c/0x870 [ 446.294469][T12945] ? ___sys_sendmsg+0x2a5/0x360 [ 446.294509][T12945] netlink_rcv_skb+0x2b6/0x4b0 [ 446.294538][T12945] ? __pfx_genl_rcv_msg+0x10/0x10 [ 446.294561][T12945] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 446.294611][T12945] genl_rcv+0x28/0x40 [ 446.294630][T12945] netlink_unicast+0x780/0x920 [ 446.294667][T12945] netlink_sendmsg+0x813/0xb40 [ 446.294705][T12945] ? __pfx_netlink_sendmsg+0x10/0x10 [ 446.294736][T12945] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 446.294773][T12945] ? aa_sock_msg_perm+0x122/0x200 [ 446.294803][T12945] ? __pfx_netlink_sendmsg+0x10/0x10 [ 446.294832][T12945] sock_sendmsg_nosec+0x112/0x150 [ 446.294857][T12945] ____sys_sendmsg+0x55c/0x870 [ 446.294892][T12945] ? __pfx_____sys_sendmsg+0x10/0x10 [ 446.294931][T12945] ? import_iovec+0x73/0xa0 [ 446.294964][T12945] ___sys_sendmsg+0x2a5/0x360 [ 446.294993][T12945] ? __lock_acquire+0x6b5/0x2d10 [ 446.295018][T12945] ? __pfx____sys_sendmsg+0x10/0x10 [ 446.295083][T12945] ? __fget_files+0x2a/0x420 [ 446.295107][T12945] ? __fget_files+0x3a6/0x420 [ 446.295141][T12945] __x64_sys_sendmsg+0x1c3/0x2a0 [ 446.295178][T12945] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 446.295218][T12945] ? __pfx_ksys_write+0x10/0x10 [ 446.295254][T12945] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.295278][T12945] do_syscall_64+0x15f/0xf80 [ 446.295296][T12945] ? trace_irq_disable+0x3b/0x140 [ 446.295326][T12945] ? clear_bhb_loop+0x40/0x90 [ 446.295351][T12945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.295372][T12945] RIP: 0033:0x7f4fca83cdd9 [ 446.295391][T12945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.295410][T12945] RSP: 002b:00007f4fc8a8e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 446.295433][T12945] RAX: ffffffffffffffda RBX: 00007f4fcaab5fa0 RCX: 00007f4fca83cdd9 [ 446.295449][T12945] RDX: 0000000004000000 RSI: 0000200000001540 RDI: 0000000000000003 [ 446.295463][T12945] RBP: 00007f4fc8a8e090 R08: 0000000000000000 R09: 0000000000000000 [ 446.295477][T12945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.295490][T12945] R13: 00007f4fcaab6038 R14: 00007f4fcaab5fa0 R15: 00007ffc9e4df488 [ 446.295523][T12945] [ 447.117596][T12963] FAULT_INJECTION: forcing a failure. [ 447.117596][T12963] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 447.117622][T12963] CPU: 0 UID: 0 PID: 12963 Comm: syz.0.2589 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 447.117640][T12963] Tainted: [L]=SOFTLOCKUP [ 447.117645][T12963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 447.117652][T12963] Call Trace: [ 447.117657][T12963] [ 447.117663][T12963] dump_stack_lvl+0xe8/0x150 [ 447.117682][T12963] should_fail_ex+0x46b/0x600 [ 447.117701][T12963] prepare_alloc_pages+0x22a/0x6b0 [ 447.117723][T12963] __alloc_frozen_pages_noprof+0x12f/0x380 [ 447.117743][T12963] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 447.117760][T12963] ? __alloc_frozen_pages_noprof+0x1de/0x380 [ 447.117779][T12963] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 447.117798][T12963] ? __pfx_policy_nodemask+0x10/0x10 [ 447.117819][T12963] __alloc_pages_noprof+0x10/0x100 [ 447.117847][T12963] alloc_pages_bulk_noprof+0x67e/0x890 [ 447.117864][T12963] ? alloc_pages_mpol+0x2ae/0x380 [ 447.117883][T12963] ? alloc_pages_noprof+0x161/0x2f0 [ 447.117903][T12963] __kasan_populate_vmalloc+0xc1/0x1d0 [ 447.117918][T12963] ? rt_spin_unlock+0x160/0x200 [ 447.117935][T12963] alloc_vmap_area+0xd47/0x1480 [ 447.117958][T12963] ? __pfx_alloc_vmap_area+0x10/0x10 [ 447.117974][T12963] ? __kmalloc_cache_node_noprof+0x27d/0x6c0 [ 447.117991][T12963] ? __get_vm_area_node+0x171/0x350 [ 447.118006][T12963] ? copy_process+0x89b/0x4450 [ 447.118023][T12963] __get_vm_area_node+0x226/0x350 [ 447.118041][T12963] __vmalloc_node_range_noprof+0x36a/0x1750 [ 447.118057][T12963] ? copy_process+0x89b/0x4450 [ 447.118072][T12963] ? percpu_ref_get_many+0x19/0x140 [ 447.118107][T12963] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 447.118125][T12963] ? rcu_is_watching+0x15/0xb0 [ 447.118138][T12963] ? memcpy_and_pad+0x48/0x80 [ 447.118154][T12963] __vmalloc_node_noprof+0xc2/0x100 [ 447.118170][T12963] ? copy_process+0x89b/0x4450 [ 447.118185][T12963] ? copy_process+0x89b/0x4450 [ 447.118202][T12963] dup_task_struct+0x298/0x840 [ 447.118218][T12963] ? rt_spin_unlock+0x160/0x200 [ 447.118233][T12963] copy_process+0x89b/0x4450 [ 447.118280][T12963] ? __pfx_copy_process+0x10/0x10 [ 447.118319][T12963] vhost_task_create+0x1f9/0x380 [ 447.118341][T12963] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 447.118367][T12963] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 447.118384][T12963] ? __pfx_vhost_task_create+0x10/0x10 [ 447.118401][T12963] ? __pfx_vhost_task_fn+0x10/0x10 [ 447.118415][T12963] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 447.118433][T12963] ? lockdep_hardirqs_on+0x7a/0x110 [ 447.118451][T12963] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 447.118468][T12963] ? mutex_lock_nested+0x152/0x1d0 [ 447.118482][T12963] ? kvm_mmu_post_init_vm+0x8f/0x2d0 [ 447.118502][T12963] kvm_mmu_post_init_vm+0x147/0x2d0 [ 447.118521][T12963] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 447.118542][T12963] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 447.118557][T12963] ? do_raw_spin_lock+0x12b/0x2f0 [ 447.118580][T12963] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 447.118597][T12963] ? lockdep_hardirqs_on+0x7a/0x110 [ 447.118614][T12963] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 447.118632][T12963] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 447.118650][T12963] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 447.118665][T12963] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 447.118683][T12963] ? lockdep_hardirqs_on+0x7a/0x110 [ 447.118700][T12963] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 447.118717][T12963] ? rt_write_unlock+0x190/0x230 [ 447.118734][T12963] kvm_vcpu_ioctl+0xa65/0xfe0 [ 447.118754][T12963] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 447.118780][T12963] ? __fget_files+0x2a/0x420 [ 447.118796][T12963] ? __fget_files+0x2a/0x420 [ 447.118809][T12963] ? __fget_files+0x3a6/0x420 [ 447.118822][T12963] ? __fget_files+0x2a/0x420 [ 447.118843][T12963] ? bpf_lsm_file_ioctl+0x9/0x20 [ 447.118857][T12963] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 447.118874][T12963] __se_sys_ioctl+0xff/0x170 [ 447.118891][T12963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.118904][T12963] do_syscall_64+0x15f/0xf80 [ 447.118915][T12963] ? trace_irq_disable+0x3b/0x140 [ 447.118932][T12963] ? clear_bhb_loop+0x40/0x90 [ 447.118946][T12963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.118958][T12963] RIP: 0033:0x7fc8b4f3cdd9 [ 447.118971][T12963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.118982][T12963] RSP: 002b:00007fc8b318e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 447.119000][T12963] RAX: ffffffffffffffda RBX: 00007fc8b51b5fa0 RCX: 00007fc8b4f3cdd9 [ 447.119009][T12963] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 447.119017][T12963] RBP: 00007fc8b318e090 R08: 0000000000000000 R09: 0000000000000000 [ 447.119025][T12963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.119033][T12963] R13: 00007fc8b51b6038 R14: 00007fc8b51b5fa0 R15: 00007fff87826f38 [ 447.119050][T12963] [ 447.119232][T12963] syz.0.2589: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 447.119325][T12963] CPU: 0 UID: 0 PID: 12963 Comm: syz.0.2589 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 447.119341][T12963] Tainted: [L]=SOFTLOCKUP [ 447.119345][T12963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 447.119352][T12963] Call Trace: [ 447.119357][T12963] [ 447.119362][T12963] dump_stack_lvl+0xe8/0x150 [ 447.119377][T12963] warn_alloc+0x24c/0x270 [ 447.119401][T12963] ? kasan_quarantine_put+0xbb/0x1f0 [ 447.119429][T12963] ? __pfx_warn_alloc+0x10/0x10 [ 447.119457][T12963] ? __get_vm_area_node+0x23f/0x350 [ 447.119480][T12963] ? __get_vm_area_node+0x171/0x350 [ 447.119503][T12963] ? copy_process+0x89b/0x4450 [ 447.119520][T12963] ? __get_vm_area_node+0x23f/0x350 [ 447.119539][T12963] __vmalloc_node_range_noprof+0x38f/0x1750 [ 447.119554][T12963] ? percpu_ref_get_many+0x19/0x140 [ 447.119586][T12963] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 447.119608][T12963] ? rcu_is_watching+0x15/0xb0 [ 447.119622][T12963] ? memcpy_and_pad+0x48/0x80 [ 447.119638][T12963] __vmalloc_node_noprof+0xc2/0x100 [ 447.119654][T12963] ? copy_process+0x89b/0x4450 [ 447.119669][T12963] ? copy_process+0x89b/0x4450 [ 447.119686][T12963] dup_task_struct+0x298/0x840 [ 447.119702][T12963] ? rt_spin_unlock+0x160/0x200 [ 447.119718][T12963] copy_process+0x89b/0x4450 [ 447.119749][T12963] ? __pfx_copy_process+0x10/0x10 [ 447.119772][T12963] vhost_task_create+0x1f9/0x380 [ 447.119785][T12963] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 447.119802][T12963] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 447.119820][T12963] ? __pfx_vhost_task_create+0x10/0x10 [ 447.119842][T12963] ? __pfx_vhost_task_fn+0x10/0x10 [ 447.119857][T12963] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 447.119875][T12963] ? lockdep_hardirqs_on+0x7a/0x110 [ 447.119892][T12963] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 447.119910][T12963] ? mutex_lock_nested+0x152/0x1d0 [ 447.119923][T12963] ? kvm_mmu_post_init_vm+0x8f/0x2d0 [ 447.119943][T12963] kvm_mmu_post_init_vm+0x147/0x2d0 [ 447.119969][T12963] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 447.119989][T12963] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 447.120004][T12963] ? do_raw_spin_lock+0x12b/0x2f0 [ 447.120027][T12963] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 447.120044][T12963] ? lockdep_hardirqs_on+0x7a/0x110 [ 447.120061][T12963] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 447.120081][T12963] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 447.120099][T12963] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 447.120115][T12963] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 447.120132][T12963] ? lockdep_hardirqs_on+0x7a/0x110 [ 447.120149][T12963] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 447.120166][T12963] ? rt_write_unlock+0x190/0x230 [ 447.120183][T12963] kvm_vcpu_ioctl+0xa65/0xfe0 [ 447.120202][T12963] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 447.120229][T12963] ? __fget_files+0x2a/0x420 [ 447.120244][T12963] ? __fget_files+0x2a/0x420 [ 447.120257][T12963] ? __fget_files+0x3a6/0x420 [ 447.120270][T12963] ? __fget_files+0x2a/0x420 [ 447.120286][T12963] ? bpf_lsm_file_ioctl+0x9/0x20 [ 447.120298][T12963] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 447.120315][T12963] __se_sys_ioctl+0xff/0x170 [ 447.120332][T12963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.120344][T12963] do_syscall_64+0x15f/0xf80 [ 447.120356][T12963] ? trace_irq_disable+0x3b/0x140 [ 447.120372][T12963] ? clear_bhb_loop+0x40/0x90 [ 447.120387][T12963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.120399][T12963] RIP: 0033:0x7fc8b4f3cdd9 [ 447.120411][T12963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 [ 447.120411][T12963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.120421][T12963] RSP: 002b:00007fc8b318e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 447.120434][T12963] RAX: ffffffffffffffda RBX: 00007fc8b51b5fa0 RCX: 00007fc8b4f3cdd9 [ 447.120443][T12963] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 447.120451][T12963] RBP: 00007fc8b318e090 R08: 0000000000000000 R09: 0000000000000000 [ 447.120459][T12963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.120466][T12963] R13: 00007fc8b51b6038 R14: 00007fc8b51b5fa0 R15: 00007fff87826f38 [ 447.120484][T12963] [ 447.120559][T12963] Mem-Info: [ 447.120573][T12963] active_anon:42359 inactive_anon:0 isolated_anon:0 [ 447.120573][T12963] active_file:0 inactive_file:56455 isolated_file:0 [ 447.120573][T12963] unevictable:768 dirty:253 writeback:0 [ 447.120573][T12963] slab_reclaimable:11935 slab_unreclaimable:96409 [ 447.120573][T12963] mapped:25652 shmem:37530 pagetables:1178 [ 447.120573][T12963] sec_pagetables:3 bounce:0 [ 447.120573][T12963] kernel_misc_reclaimable:0 [ 447.120573][T12963] free:1293377 free_pcp:1978 free_cma:0 [ 447.120625][T12963] Node 0 active_anon:169436kB inactive_anon:0kB active_file:0kB inactive_file:225624kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:102608kB dirty:1012kB writeback:0kB shmem:148584kB kernel_stack:12480kB pagetables:4568kB sec_pagetables:12kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 447.120672][T12963] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 447.120699][T12963] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 447.120736][T12963] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 447.120756][T12963] Node 0 DMA32 free:1212256kB boost:0kB min:3912kB low:6436kB high:8960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:169436kB inactive_anon:0kB active_file:0kB inactive_file:225624kB unevictable:1536kB writepending:1012kB zspages:0kB present:3129332kB managed:2552752kB mlocked:0kB bounce:0kB free_pcp:7904kB local_pcp:5684kB free_cma:0kB [ 447.120789][T12963] lowmem_reserve[]: 0 0 0 0 0 [ 447.120807][T12963] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:896kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB [ 447.120843][T12963] lowmem_reserve[]: 0 0 0 0 0 [ 447.120862][T12963] Node 1 Normal free:3945892kB boost:0kB min:6372kB low:10480kB high:14588kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 447.120894][T12963] lowmem_reserve[]: 0 0 0 0 0 [ 447.120913][T12963] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 447.121371][T12963] Node 0 DMA32: 874*4kB (UM) 724*8kB (UME) 239*16kB (UM) 176*32kB (UME) 141*64kB (UME) 92*128kB (UME) 45*256kB (UM) 22*512kB (UME) 7*1024kB (M) 6*2048kB (UME) 276*4096kB (UM) = 1212280kB [ 447.121457][T12963] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 447.121510][T12963] Node 1 Normal: 3*4kB (UM) 5*8kB (UM) 9*16kB (UM) 13*32kB (UM) 7*64kB (UM) 7*128kB (UM) 2*256kB (UM) 4*512kB (UM) 1*1024kB (M) 2*2048kB (UM) 961*4096kB (M) = 3945892kB [ 447.121593][T12963] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 447.121610][T12963] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 447.121619][T12963] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 447.121629][T12963] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 447.121638][T12963] 93981 total pagecache pages [ 447.121647][T12963] 0 pages in swap cache [ 447.121652][T12963] Free swap = 124996kB [ 447.121659][T12963] Total swap = 124996kB [ 447.121667][T12963] 2097051 pages RAM [ 447.121674][T12963] 0 pages HighMem/MovableOnly [ 447.121681][T12963] 427025 pages reserved [ 447.121689][T12963] 0 pages cma reserved [ 447.246207][ T5763] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 447.425430][ T5763] usb 4-1: Using ep0 maxpacket: 16 [ 447.429856][ T5763] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 447.429889][ T5763] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 447.433766][ T5763] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 447.433825][ T5763] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.433847][ T5763] usb 4-1: Product: syz [ 447.433863][ T5763] usb 4-1: Manufacturer: syz [ 447.433878][ T5763] usb 4-1: SerialNumber: syz [ 447.469061][ T5763] usb 4-1: config 0 descriptor?? [ 447.508104][ T5763] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 447.508140][ T5763] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 447.763598][ T9] usb 1-1: new full-speed USB device number 98 using dummy_hcd [ 447.898015][T12973] netlink: 'syz.1.2593': attribute type 1 has an invalid length. [ 447.926578][ T9] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 447.926607][ T9] usb 1-1: config 0 has no interface number 0 [ 447.926649][ T9] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 447.926675][ T9] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 447.926703][ T9] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 447.932381][ T9] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 447.932412][ T9] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 447.932433][ T9] usb 1-1: Product: syz [ 447.932449][ T9] usb 1-1: SerialNumber: syz [ 447.962181][ T5800] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 447.974077][ T9] usb 1-1: config 0 descriptor?? [ 447.977432][T12970] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 448.016959][ T9] cm109 1-1:0.8: invalid payload size 64, expected 4 [ 448.031881][ T9] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input31 [ 448.069949][ T9] ------------[ cut here ]------------ [ 448.069982][ T9] URB ffff8880352cec00 submitted while active [ 448.070003][ T9] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x7b/0x18c0, CPU#0: kworker/0:0/9 [ 448.070044][ T9] Modules linked in: [ 448.070067][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 448.070098][ T9] Tainted: [L]=SOFTLOCKUP [ 448.070106][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 448.070121][ T9] Workqueue: usb_hub_wq hub_event [ 448.070148][ T9] RIP: 0010:usb_submit_urb+0x7e/0x18c0 [ 448.070171][ T9] Code: 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 f7 0c 65 fb 49 83 3e 00 74 40 e8 ec 72 fb fa 48 8d 3d 45 b8 ef 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 d1 72 fb fa eb 05 e8 ca 72 [ 448.070190][ T9] RSP: 0018:ffffc900000e6b90 EFLAGS: 00010287 [ 448.070209][ T9] RAX: ffffffff86c9a934 RBX: ffff8880352cec00 RCX: 0000000000100000 [ 448.070226][ T9] RDX: ffffc90018c0c000 RSI: ffff8880352cec00 RDI: ffffffff8fb96180 [ 448.070243][ T9] RBP: 000000000000000f R08: ffffffff8facd3f7 R09: 1ffffffff1f59a7e [ 448.070260][ T9] R10: dffffc0000000000 R11: fffffbfff1f59a7f R12: 0000000000000cc0 [ 448.070277][ T9] R13: ffff888025dc7848 R14: ffff8880352cec08 R15: dffffc0000000000 [ 448.070294][ T9] FS: 0000000000000000(0000) GS:ffff888125cc7000(0000) knlGS:0000000000000000 [ 448.070313][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 448.070329][ T9] CR2: 00007f302752da08 CR3: 0000000045682000 CR4: 00000000003526f0 [ 448.070349][ T9] Call Trace: [ 448.070358][ T9] [ 448.070369][ T9] ? lockdep_hardirqs_on+0x7a/0x110 [ 448.070404][ T9] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 448.070439][ T9] ? mutex_lock_nested+0x152/0x1d0 [ 448.070465][ T9] ? cm109_input_open+0x97/0x480 [ 448.070504][ T9] cm109_input_open+0x1fb/0x480 [ 448.070543][ T9] input_open_device+0x1f8/0x3b0 [ 448.070578][ T9] kbd_connect+0xf6/0x150 [ 448.070614][ T9] input_register_device+0xce0/0x1140 [ 448.070656][ T9] cm109_usb_probe+0x11a2/0x16a0 [ 448.070713][ T9] usb_probe_interface+0x659/0xc70 [ 448.070764][ T9] ? __pfx_usb_probe_interface+0x10/0x10 [ 448.070792][ T9] really_probe+0x267/0xaf0 [ 448.070834][ T9] __driver_probe_device+0x1e2/0x350 [ 448.070870][ T9] driver_probe_device+0x4f/0x240 [ 448.070907][ T9] __device_attach_driver+0x270/0x410 [ 448.070945][ T9] bus_for_each_drv+0x25b/0x2f0 [ 448.070971][ T9] ? __pfx___device_attach_driver+0x10/0x10 [ 448.071005][ T9] ? __pfx_bus_for_each_drv+0x10/0x10 [ 448.071031][ T9] ? rt_spin_unlock+0x160/0x200 [ 448.071067][ T9] __device_attach+0x2c8/0x450 [ 448.071102][ T9] ? __pfx___device_attach+0x10/0x10 [ 448.071135][ T9] ? rt_spin_unlock+0x160/0x200 [ 448.071169][ T9] device_initial_probe+0xa1/0xd0 [ 448.071204][ T9] bus_probe_device+0x12d/0x220 [ 448.071235][ T9] device_add+0x7ec/0xb90 [ 448.071269][ T9] usb_set_configuration+0x1a87/0x2110 [ 448.071324][ T9] usb_generic_driver_probe+0x8d/0x150 [ 448.071355][ T9] usb_probe_device+0x1c4/0x3b0 [ 448.071388][ T9] ? __pfx_usb_probe_device+0x10/0x10 [ 448.071427][ T9] really_probe+0x267/0xaf0 [ 448.071489][ T9] __driver_probe_device+0x1e2/0x350 [ 448.071526][ T9] driver_probe_device+0x4f/0x240 [ 448.071564][ T9] __device_attach_driver+0x270/0x410 [ 448.071602][ T9] bus_for_each_drv+0x25b/0x2f0 [ 448.071630][ T9] ? __pfx___device_attach_driver+0x10/0x10 [ 448.071664][ T9] ? __pfx_bus_for_each_drv+0x10/0x10 [ 448.071691][ T9] ? rt_spin_unlock+0x160/0x200 [ 448.071727][ T9] __device_attach+0x2c8/0x450 [ 448.071779][ T9] ? __pfx___device_attach+0x10/0x10 [ 448.071810][ T9] ? rt_spin_unlock+0x160/0x200 [ 448.071846][ T9] device_initial_probe+0xa1/0xd0 [ 448.071882][ T9] bus_probe_device+0x12d/0x220 [ 448.071911][ T9] device_add+0x7ec/0xb90 [ 448.071947][ T9] usb_new_device+0x9f8/0x16e0 [ 448.071985][ T9] ? __pfx_usb_new_device+0x10/0x10 [ 448.072019][ T9] hub_event+0x2a49/0x4f60 [ 448.072100][ T9] ? __pfx_hub_event+0x10/0x10 [ 448.072126][ T9] ? process_one_work+0x8be/0x1630 [ 448.072169][ T9] ? process_one_work+0x8be/0x1630 [ 448.072196][ T9] process_one_work+0x98b/0x1630 [ 448.072247][ T9] ? __pfx_process_one_work+0x10/0x10 [ 448.072274][ T9] ? do_raw_spin_lock+0x12b/0x2f0 [ 448.072323][ T9] worker_thread+0xb49/0x1140 [ 448.072382][ T9] kthread+0x388/0x470 [ 448.072405][ T9] ? __pfx_worker_thread+0x10/0x10 [ 448.072432][ T9] ? __pfx_kthread+0x10/0x10 [ 448.072457][ T9] ret_from_fork+0x514/0xb70 [ 448.072486][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 448.072511][ T9] ? __switch_to+0xc79/0x1410 [ 448.072548][ T9] ? __pfx_kthread+0x10/0x10 [ 448.072572][ T9] ret_from_fork_asm+0x1a/0x30 [ 448.072619][ T9] [ 448.072643][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 448.072663][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 448.072693][ T9] Tainted: [L]=SOFTLOCKUP [ 448.072701][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 448.072716][ T9] Workqueue: usb_hub_wq hub_event [ 448.072741][ T9] Call Trace: [ 448.072757][ T9] [ 448.072766][ T9] vpanic+0x56c/0xa60 [ 448.072799][ T9] ? __pfx__printk+0x10/0x10 [ 448.072823][ T9] ? __pfx_vpanic+0x10/0x10 [ 448.072852][ T9] ? is_bpf_text_address+0x292/0x2b0 [ 448.072875][ T9] ? is_bpf_text_address+0x26/0x2b0 [ 448.072906][ T9] panic+0xc5/0xd0 [ 448.072936][ T9] ? __pfx_panic+0x10/0x10 [ 448.072977][ T9] ? ret_from_fork_asm+0x1a/0x30 [ 448.073010][ T9] __warn+0x315/0x4c0 [ 448.073040][ T9] ? usb_submit_urb+0x7b/0x18c0 [ 448.073064][ T9] ? usb_submit_urb+0x7b/0x18c0 [ 448.073088][ T9] __report_bug+0x29a/0x540 [ 448.073118][ T9] ? usb_submit_urb+0x7b/0x18c0 [ 448.073141][ T9] ? __pfx___report_bug+0x10/0x10 [ 448.073160][ T9] ? add_lock_to_list+0xc7/0x100 [ 448.073207][ T9] report_bug_entry+0x19a/0x290 [ 448.073230][ T9] ? usb_submit_urb+0x7e/0x18c0 [ 448.073250][ T9] ? usb_submit_urb+0x83/0x18c0 [ 448.073271][ T9] handle_bug+0xce/0x200 [ 448.073297][ T9] exc_invalid_op+0x1a/0x50 [ 448.073321][ T9] asm_exc_invalid_op+0x1a/0x20 [ 448.073346][ T9] RIP: 0010:usb_submit_urb+0x7e/0x18c0 [ 448.073367][ T9] Code: 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 f7 0c 65 fb 49 83 3e 00 74 40 e8 ec 72 fb fa 48 8d 3d 45 b8 ef 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 d1 72 fb fa eb 05 e8 ca 72 [ 448.073386][ T9] RSP: 0018:ffffc900000e6b90 EFLAGS: 00010287 [ 448.073405][ T9] RAX: ffffffff86c9a934 RBX: ffff8880352cec00 RCX: 0000000000100000 [ 448.073423][ T9] RDX: ffffc90018c0c000 RSI: ffff8880352cec00 RDI: ffffffff8fb96180 [ 448.073440][ T9] RBP: 000000000000000f R08: ffffffff8facd3f7 R09: 1ffffffff1f59a7e [ 448.073457][ T9] R10: dffffc0000000000 R11: fffffbfff1f59a7f R12: 0000000000000cc0 [ 448.073474][ T9] R13: ffff888025dc7848 R14: ffff8880352cec08 R15: dffffc0000000000 [ 448.073501][ T9] ? usb_submit_urb+0x74/0x18c0 [ 448.073531][ T9] ? lockdep_hardirqs_on+0x7a/0x110 [ 448.073564][ T9] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 448.073598][ T9] ? mutex_lock_nested+0x152/0x1d0 [ 448.073624][ T9] ? cm109_input_open+0x97/0x480 [ 448.073662][ T9] cm109_input_open+0x1fb/0x480 [ 448.073701][ T9] input_open_device+0x1f8/0x3b0 [ 448.073767][ T9] kbd_connect+0xf6/0x150 [ 448.073804][ T9] input_register_device+0xce0/0x1140 [ 448.073847][ T9] cm109_usb_probe+0x11a2/0x16a0 [ 448.073904][ T9] usb_probe_interface+0x659/0xc70 [ 448.073947][ T9] ? __pfx_usb_probe_interface+0x10/0x10 [ 448.073975][ T9] really_probe+0x267/0xaf0 [ 448.074014][ T9] __driver_probe_device+0x1e2/0x350 [ 448.074049][ T9] driver_probe_device+0x4f/0x240 [ 448.074086][ T9] __device_attach_driver+0x270/0x410 [ 448.074123][ T9] bus_for_each_drv+0x25b/0x2f0 [ 448.074150][ T9] ? __pfx___device_attach_driver+0x10/0x10 [ 448.074184][ T9] ? __pfx_bus_for_each_drv+0x10/0x10 [ 448.074211][ T9] ? rt_spin_unlock+0x160/0x200 [ 448.074246][ T9] __device_attach+0x2c8/0x450 [ 448.074280][ T9] ? __pfx___device_attach+0x10/0x10 [ 448.074313][ T9] ? rt_spin_unlock+0x160/0x200 [ 448.074349][ T9] device_initial_probe+0xa1/0xd0 [ 448.074383][ T9] bus_probe_device+0x12d/0x220 [ 448.074414][ T9] device_add+0x7ec/0xb90 [ 448.074448][ T9] usb_set_configuration+0x1a87/0x2110 [ 448.074505][ T9] usb_generic_driver_probe+0x8d/0x150 [ 448.074536][ T9] usb_probe_device+0x1c4/0x3b0 [ 448.074569][ T9] ? __pfx_usb_probe_device+0x10/0x10 [ 448.074596][ T9] really_probe+0x267/0xaf0 [ 448.074636][ T9] __driver_probe_device+0x1e2/0x350 [ 448.074672][ T9] driver_probe_device+0x4f/0x240 [ 448.074708][ T9] __device_attach_driver+0x270/0x410 [ 448.074752][ T9] bus_for_each_drv+0x25b/0x2f0 [ 448.074781][ T9] ? __pfx___device_attach_driver+0x10/0x10 [ 448.074818][ T9] ? __pfx_bus_for_each_drv+0x10/0x10 [ 448.074845][ T9] ? rt_spin_unlock+0x160/0x200 [ 448.074881][ T9] __device_attach+0x2c8/0x450 [ 448.074916][ T9] ? __pfx___device_attach+0x10/0x10 [ 448.074948][ T9] ? rt_spin_unlock+0x160/0x200 [ 448.074985][ T9] device_initial_probe+0xa1/0xd0 [ 448.075018][ T9] bus_probe_device+0x12d/0x220 [ 448.075049][ T9] device_add+0x7ec/0xb90 [ 448.075083][ T9] usb_new_device+0x9f8/0x16e0 [ 448.075120][ T9] ? __pfx_usb_new_device+0x10/0x10 [ 448.075155][ T9] hub_event+0x2a49/0x4f60 [ 448.075234][ T9] ? __pfx_hub_event+0x10/0x10 [ 448.075261][ T9] ? process_one_work+0x8be/0x1630 [ 448.075303][ T9] ? process_one_work+0x8be/0x1630 [ 448.075331][ T9] process_one_work+0x98b/0x1630 [ 448.075383][ T9] ? __pfx_process_one_work+0x10/0x10 [ 448.075410][ T9] ? do_raw_spin_lock+0x12b/0x2f0 [ 448.075459][ T9] worker_thread+0xb49/0x1140 [ 448.075525][ T9] kthread+0x388/0x470 [ 448.075549][ T9] ? __pfx_worker_thread+0x10/0x10 [ 448.075577][ T9] ? __pfx_kthread+0x10/0x10 [ 448.075602][ T9] ret_from_fork+0x514/0xb70 [ 448.075632][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 448.075658][ T9] ? __switch_to+0xc79/0x1410 [ 448.075693][ T9] ? __pfx_kthread+0x10/0x10 [ 448.075718][ T9] ret_from_fork_asm+0x1a/0x30 [ 448.075772][ T9] [ 448.076169][ T9] Kernel Offset: disabled