last executing test programs: 5.547936291s ago: executing program 0 (id=653): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001811ff0000000000000000ffffff0700000000ff0200000000000000000000000000014f194e200018"], 0x52) 5.424827866s ago: executing program 0 (id=654): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1120000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}, {&(0x7f0000000180)="1231da3c6890fc1e07ddb4a573c032f15980b4f595b4e75ebcccfa37079d2742dc5077d3b0d7195981efa3a5d4191c022e2ab96708c1fd05f705b92c7f8844b9c7fdda0c3bcb8188ba06bfdb96a0bbba38d743b56c49875d32d30aa2915d62bb583f8d2f807cc100de647a79e1eaec82c397b6208a185af54d960994e425df698d0709d9e6fcb1f6d5a41ef1ae8fdf788cd6a294b39866ac02c4aab3ad6c0eab30d9d51247eb8a18414d53ac7e17b71b6c03596d7f807338e900c80576e32387b3f68b15c96a", 0xc6}, {&(0x7f0000000400)="a8646c4f971acf6709f647a989a529adcc587e80f9d3fb06b40a198b13cb7a73cd2f4ad54e9e392bec4d6a37729b15da6635154aebfb68ad6d6e54b72bfe4d8997805f0a767c50ae7020169a1b3ecb84803f14daf3ad7ceeb9236c21c3aa7cd9991693cbc1924effe1a9322702a3278fb5fc218e1cf7e873ea77c4f16eaf0c5d2ed11f5acc86e5fcfb8e3746765bbf7b82cdd60ad52bad989a1cc942d29c8c9e6cbc82a1d5d96566636243de89a53e3881d65b7fed8ba184247944683ea1e6972b26b4adfa13280f85e93f7f7aea78f3bdfc0475daa518511b541e02446a43ae848001b6025f49c91d18f980977367c30b8fd1026cc510be", 0xf8}], 0x3}, 0x0) 5.355781894s ago: executing program 0 (id=655): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pipe(&(0x7f0000000040)) r1 = syz_create_resource$binfmt(&(0x7f00000001c0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0x20000000204, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000080)={0x24, 0x2, 0x0, "11010100001400000100b64c0000005c4b7c1500"}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) open_by_handle_at(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="15000000fe00"], 0x1) bind$alg(r2, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r2, 0x0, 0x0, 0x800) recvmsg$qrtr(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000240)=""/36, 0x24}, {&(0x7f0000000200)=""/26, 0x1a}], 0x2, 0x0, 0x0, 0x10000}, 0x38, 0x10121) close_range(r0, 0xffffffffffffffff, 0x0) 5.285105166s ago: executing program 0 (id=656): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) r1 = socket$rds(0x15, 0x5, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x1a, 0xee, 0xbf, 0x10, 0x3fd, 0xebbe, 0xede2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x2, [{{0x9, 0x4, 0x35, 0x0, 0x0, 0xc2, 0xba, 0xa4}}]}}]}}, 0x0) (async) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="000599da1c7ec2d1959ce1f4a25d3fd83ebca101000000f2dc4ad3974f11285fb531ce7fe51673178cff3e3601b6657220c9d69f0336853db2b547ec42cf41835b8d0790a235312b35fce6963d52779456c2a00d03155b1feaa3d90622b680a91025bef9eeda59205c56be0e000000000000d0d4f5d3292b85be0e8a732dec1f7309994cdbec1e4036a1e8b6727100000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x19, 0xa0, 0x40, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x3, 0xc, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0xc1, 0x1, 0x4}}}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x36, 0x7, 0x0, 0x40, 0xd}, 0xf, &(0x7f0000000180)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x5, 0x1, 0x7}]}, 0x3, [{0x49, &(0x7f00000001c0)=@string={0x49, 0x3, "ef93ddc0c8d72db823b45127c3f91bfbe87a8afc0e63030281be3f74b5a48418b284d0da43623a53687641764ffcafa05e6820d7a9005408deb603283a69ffee9dc2791ca7a9ac"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x140a}}, {0x29, &(0x7f0000000280)=@string={0x29, 0x3, "5af3da66b927172b6c12f4b604c71be7abd5532411485c0e7aab6089d54abb3b54ddb4de1dbdbe"}}]}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000002c0)={0x20, 0x14, 0x1, 'M'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.39960108s ago: executing program 0 (id=657): r0 = socket$kcm(0x10, 0x6, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000140)={'pimreg0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001b000)) ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$nl_netfilter(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000540)={0x3a0, 0x9, 0xa, 0x101, 0x70bd2d, 0x25dfdbfe, {0x5}, [@nested={0x358, 0x4, 0x0, 0x1, [@generic="32de93579733522b0719b78cf39dde79ad31592490015de101ea7265ff4d86f1a760c7271b9cf1fe7e971275546652e89a10baacf8ecdcd345c3bd3cbf40a7e9621e3fafda23a2d6a755ac0d8d6da6d95d105c4505070f95800f26b4f3c789f3f89304758379602ff57195af850bc32732bb3606b9b9eab20833269e1c23c735e4f03f562b71d316ebe82ea454d11a14f785025e830eedd440563c153e0a74d6bafe90a2e955ae912ba72bebec582c466615d1a679cd9ee830c7f30b576f34e2eb54cf40cff20a3ab071a5f6c9e7062bc69f94c57668a94f260c02b308a292fb805e0527686db9", @generic="962f7b26f8ebf2100b1be08793a20a8d540f1b4fe0e6d5478ae33cf81f2fd520cfe2b1446e297db0a25d07b1e74a3baeeb781647402bca0dfd7062afc2922809fb9889995828c384b54e7b6462b6c7c3e68a8f98b0124c20da21b46775259e15d29913e11da148355e4a36ff2a5f61f0090d5bb24ff9992dbaff70eb2c9288f6fa5bfe11ed511cb97438defc8ffdd4f2", @generic="bb19ef996e1aeb7d4261900c85c2406da7a5cb458624", @nested={0x4, 0x109}, @generic="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", @nested={0x4, 0x19}, @typed={0x8, 0x14f, 0x0, 0x0, @u32=0x4}, @nested={0x4, 0x39}, @generic="844a70a3e8bd3e40c58f003851db68818c7db522a4b54394c12ce466986ff1f6de79bc32a2718ea22bb1c3cb1adf31cb0a6b17cede8f68702fc0e1bf6e67a583dc294c9f578094205fd896ed64ecf2668005c465e4fc8b871c8ad3a2c1836e210ee9946603222463ae64e65975e53ff83cda8200d80e72a3b06ab9327a033cdecac075d7adc433a95aceac4069819f014848c89574b6324724ae8991ab91493961c34600223994a765d366e064929344eb65f60a"]}, @nested={0x34, 0xec, 0x0, 0x1, [@typed={0x8, 0x135, 0x0, 0x0, @ipv4=@multicast2}, @nested={0x4, 0x358f}, @typed={0x1f, 0x2a, 0x0, 0x0, @str='blkio.bfq.io_service_bytes\x00'}, @nested={0x4, 0xfb}]}]}, 0x3a0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r5 = syz_pidfd_open(r4, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) setns(r5, 0x10000000) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800500030000000000080001400000000108000240000000170900010073797a30000000000900020073797a32"], 0x80}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) r6 = syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0xfffe, 0x0, 0x2}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0xd}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xfe}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x8}}}}}}}]}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafc0d8c560a8447608004000000000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af9219a1e18c488e827c1bbec", 0x89}], 0x1}, 0x0) 3.869117904s ago: executing program 3 (id=666): r0 = syz_open_dev$sndctrl(0x0, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, 0x0) mkdir(0x0, 0xb2) mount(0x0, 0x0, 0x0, 0x0, 0x0) umount2(0x0, 0x4) mount$fuse(0x0, 0x0, 0x0, 0x200800, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 3.675623473s ago: executing program 3 (id=667): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(morus640-generic,crc32-generic)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d8", 0x8b}, {0x0}, {&(0x7f00000005c0)="f2b314c96d50", 0x6}], 0x3}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000034000000040000000000000014000000000000002900000034000000fdffffff0000000008010000000000002900000004000000041d000000000000fe72f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5801409e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad0740000000010e7a01800500000000000000090000000000000004000000000000000600000000000000040000000000000000040000000000000b0000000000000005020a7e00010005020bf4c910fc0200000000000000000000000000000000000000000014000000000000002900000034d800000000000000000000780100000000000029000000360000005e2b000000000000ff3f50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c2000100000100010800000000000000000708000000030000ff0f07100000000002070600ff7f00000000000008c6c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8071800000003040307000000000000000000008000000000000001082bdb86d1ce6a20c20000000000000020000000000000009c9e99cb37000000730000000000000000010000000000001400000000000000290000000b0000000000000200000000180000000000000029000000390000000000000000000000380000000000000029000000390000003a04027000000000ff010000000000000000000000000001ff020000000000000000000000000001"], 0x350}}], 0x1, 0x810) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001880)={0x18, 0x2f, 0x1, 0x70bd2b, 0x25dfdbff, "", [@typed={0x8, 0xe9, 0x0, 0x0, @uid}]}, 0x18}], 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000500)) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede000010000904000202007bec00090506020200020002378d0a090582020002000110"], 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f00000005c0)={0x84, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r7 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x5, 0x3d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb9, 0xa4, 0x8f, 0x10, 0x13b1, 0x42, 0x7c9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x1, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x13, 0x2, 0x2, 0x83, 0x67, 0x16, 0x0, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x3, 0x7f, 0x1001}]}], [{{0x9, 0x5, 0x4, 0x2, 0x200, 0x0, 0xfa}}, {{0x9, 0x5, 0x81, 0x2, 0x40, 0x0, 0x3d, 0x1}}]}}]}}]}}, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(0xffffffffffffffff, 0x4068aea3, &(0x7f00000002c0)) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2.357115555s ago: executing program 2 (id=678): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pipe(&(0x7f0000000040)) r1 = syz_create_resource$binfmt(&(0x7f00000001c0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0x20000000204, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000080)={0x24, 0x2, 0x0, "11010100001400000100b64c0000005c4b7c1500"}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) open_by_handle_at(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="15000000fe00"], 0x1) bind$alg(r2, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) close_range(r0, 0xffffffffffffffff, 0x0) 2.260957723s ago: executing program 2 (id=679): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14}}, 0x5c}, 0x1, 0x5c00}, 0x0) 2.155959162s ago: executing program 2 (id=680): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000100", 0x8) setsockopt(r1, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000100", 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x1b, &(0x7f0000000380)={0x0, 0x5}, &(0x7f0000000180)=0x8) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xc3) ioctl$sock_ax25_SIOCDELRT(r2, 0x890c, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000040)=0x2000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff02000000017c0000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$llc(r4, &(0x7f00000000c0)={0x1a, 0xffff, 0x6d, 0x1, 0x3, 0x8, @multicast}, 0x10) 2.11401771s ago: executing program 2 (id=681): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="410002000100", 0x6) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3}, {}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0x3f8, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0x9, 0x2000000000003ff, 0x2], 0x2000, 0x200206}) ioctl$KVM_CAP_HYPERV_SEND_IPI(r1, 0x4068aea3, &(0x7f00000002c0)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, '\x00', @raw_data=[0x3, 0x3, 0x6, 0xcb, 0x7, 0x55, 0x40, 0x5, 0x20000200, 0x9, 0x8001, 0x5, 0x8, 0x40, 0x1, 0x7ff, 0x334f, 0x4, 0xff, 0xcc8, 0x83, 0x3, 0x9, 0x8000, 0x400, 0x9, 0x89da, 0xfffffffd, 0x9, 0xb, 0xca]}) 1.591814227s ago: executing program 2 (id=683): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0xc0580, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000840)={0x6, 0x0, @ioapic={0xeeee0000, 0x8000, 0x8, 0x8, 0x0, [{0x6, 0xbd, 0xff, '\x00', 0x6}, {0x5, 0x12, 0x2, '\x00', 0x4}, {0x4, 0x46, 0x3c, '\x00', 0x6}, {0x1, 0xfb, 0x1}, {0x8, 0x8, 0xc, '\x00', 0x5}, {0x8, 0x77, 0x1, '\x00', 0x19}, {0x17, 0x5, 0xd6, '\x00', 0x8d}, {0xa, 0x9, 0x1, '\x00', 0x6f}, {0x8, 0xf, 0x9, '\x00', 0x9}, {0x0, 0x3, 0xf, '\x00', 0x8}, {0x6, 0x3, 0xe1, '\x00', 0x5}, {0xfa, 0x46, 0x4, '\x00', 0xdd}, {0x1, 0x80, 0x2, '\x00', 0x5}, {0x80, 0x6, 0x3, '\x00', 0x6}, {0x2, 0x81, 0x7, '\x00', 0xfd}, {0x4, 0x5, 0x2, '\x00', 0xf7}, {0x9, 0x10, 0x8, '\x00', 0x1}, {0xb5, 0x0, 0x9, '\x00', 0xc}, {0xa7, 0x1, 0x3, '\x00', 0x7}, {0xf, 0x3, 0x9, '\x00', 0xd}, {0x8, 0x5, 0x0, '\x00', 0x9}, {0x0, 0x5, 0x0, '\x00', 0xf1}, {0xa, 0x5, 0x2f, '\x00', 0xff}, {0x8}]}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000002300010320bd7002fadbdf250100"], 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0xc004) 1.395382362s ago: executing program 2 (id=684): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x40, 0x12, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000440)={0x40, 0x11, 0x1, '$'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x20, 0x8, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000bc0)={0x14, &(0x7f0000000b40)={0x0, 0xf, 0x67, {0x67, 0x4, "72ae011197b2d336b967976be78ecf2d0d91b02ce5e090b4f2de4da38acb7b35eb6b341a5e8c7066ec68982f64d207cbd03d838306e9aa7808ed65a83bc8172b994e580c7548508c135aff6490df7d4dcd806c432995618f628599949d2fc9580c7589521a"}}, &(0x7f0000000ac0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x402}}}, &(0x7f0000000c40)={0x1c, &(0x7f0000000cc0)={0x0, 0xb, 0xfa, "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"}, &(0x7f0000000e40)={0xa1, 0x1, 0x400, "06aa71c1c3ce71b7b4b1e1bc2704eca34c94cc18ff06ac4b5889e64c9fa64f3c3ac14a5158cc9471000538516d7d914adc12a38b15832d246d7d38b7f32f730b61baef83dd0b20682a7f79916a5a2b35f4b22aeb381c290643c187e9c29e036d63dfad84ac88450f46be2d5f36d2e6e6dbc35a998030a50aaf175b20fb31aead6380a3f711f07e54d838760ebeb2c3eaf9fb8eb813929aebb0b83ca6761f72c6a12a82f2d91e565f48e2d03a83eeea8dfd32cfce1671d979448ad920872c5a12b79772947aeac6c09c458eb2b3c64bcf4888cf17aeeede245c8562b3edc6c9f832487e3b99402b30e6781f0ef651b59001d23ea221cdacc6a73a4b3e4aa0de032ae459dca0fb868441119173b85eaca11af31309f027a0798285ee65402ded961b558232c03bcec377f1d83f5815ef9fc94d1c4ab5e8ac11bfcd86a5949612f2d93e973c1fb3b2f67c79f3c20a0e2a8e956a7444a4b43508ab5be4e3733b1af766218eb47758012aa7d89e6fd76e064703bd8e0b8356ebff1e6f2b213c0b5aedb798b7d2788c24ff2bdd55fafddb6a9212bdcb58d0489b9ffbb5f4a6ab7a814d4175766e37527b9f74fa1974e24f4cb669b52b7ebede279847911ce2e8413c8d84d25cbd86fecaa8c387dad6e5947ecb3318dc24ea40b058b62e38c21423a71a61cd786a7d5778d787c58f9187e60a6c0d3b8102816481e709df8bce91308497bdbecaaa7c257df39ef7cfd6b750b5f785221e5b011bff75f79676c41b7693de9c7a93fab5c7e2cb3875376d491b588710d41b9c13729fd43483d7924216e00775d4030268ac63d9cb4dec40a4070c056d683a08f727bfd81dbc17f3e23bc23139062c3712156ceaba8d180be760de678c333a8dbb23a459b38e253d1627ab40094d0ee7d817c8ec0557c0989fce5536ff5a23cd56a6b0917d6395492a71e7cb4c0141a964f0b0c61e75465f00d7af76ff6b61af8a6158bf60fbe3db13e6bdb095163ad70604ee6e5674f152b5ce271851df6cddee2b087abf1fa7d5089342e24bd70fee14699588902d3df674d80da115f0868bfd18422890c36c06b0f9acab968f2e5b20d8c3cac9d9190fbd7bbd82ca8c8de11c559fc17e7717560211626c8ef7b69946c8dc9cbb85482a8b6646dc676b9242e994eb3e519b29243413138bcf8f10b4dc3fa2854c5391cde4f8a7e1d9b47624d015720a14168b36e1820a37e9c644da047dac00eaae30d0528edcdd254d101c5eb28eee70a9f25839d4f6fabc0e65fbc88ae71c4b8bce7d5305c6758e2698c4cf852988b98bfd552fb2c02f7497974381099c2d0a7026a05755007c36c045e55d9af95c220258ba9a1bcf15988d20d8078c8b0097ff6bbb49192ec06d2422bd2ef1030ddd81962e5d10bbdeb109b1e469122b3358141aa5b1722654a01730df36af08903e85d4e871f6264f"}, &(0x7f0000000c00)}) 1.297328528s ago: executing program 0 (id=685): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x0, 0x2}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) syz_usb_connect(0x5, 0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100335fe6510ca1a8eb232920102030109023200010d019002090432a70201039e0809050806"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) 658.627304ms ago: executing program 1 (id=688): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pipe(&(0x7f0000000040)) r1 = syz_create_resource$binfmt(&(0x7f00000001c0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0x20000000204, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000080)={0x24, 0x2, 0x0, "11010100001400000100b64c0000005c4b7c1500"}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) open_by_handle_at(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="15000000fe00"], 0x1) bind$alg(r2, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) close_range(r0, 0xffffffffffffffff, 0x0) 489.946429ms ago: executing program 3 (id=689): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000100", 0x8) setsockopt(r1, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000100", 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x1b, &(0x7f0000000380)={0x0, 0x5}, &(0x7f0000000180)=0x8) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xc3) ioctl$sock_ax25_SIOCDELRT(r2, 0x890c, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000040)=0x2000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff02000000017c0000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) connect$llc(r4, &(0x7f00000000c0)={0x1a, 0xffff, 0x6d, 0x1, 0x3, 0x8, @multicast}, 0x10) 488.590547ms ago: executing program 1 (id=690): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)={0x28, 0x12, 0x1, 0x70bd26, 0x0, "", [@nested={0x18, 0x1e, 0x0, 0x1, [@nested={0xc, 0xb6, 0x0, 0x1, [@typed={0x8, 0x11d, 0x0, 0x0, @pid}]}, @typed={0x8, 0x1c, 0x0, 0x0, @fd}]}]}, 0x28}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r2, @ANYBLOB="1c005a8018000180140003000800090006000f00000000000d00ff0f"], 0x38}}, 0x0) 380.05447ms ago: executing program 1 (id=691): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="64000000020605000a000000000000021c000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c0007800600044000000000060005400000000008000640"], 0x64}}, 0x0) 362.953986ms ago: executing program 3 (id=692): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000040)={0x0, 0x0, 0x3007}) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000000c0)={0x0, 0xc9, 0x7d, 0x20203143, 0x0, [0x2], [0x101], [], [0x0, 0x8000005f8]}) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af9219a1e18c488e827c1bbec", 0x89}], 0x1}, 0x24000004) 351.09911ms ago: executing program 1 (id=693): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000007060108000000000000000001000000050001000600"], 0x1c}}, 0x0) 231.614341ms ago: executing program 1 (id=694): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0xfffffffc}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4008843) write$binfmt_aout(r2, &(0x7f0000000a40)={{0x107, 0xf0, 0x9, 0x33a, 0x191, 0x5, 0x39b, 0x3ff}}, 0x20) (async) r3 = dup(r1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='veth1_to_hsr\x00', 0x10) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x7, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7b, 0x9}, 0x9c) (async) write$P9_RSETATTR(r3, &(0x7f0000000140)={0x7, 0x1b, 0x1}, 0x7) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x806, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a30000000002c000000030a01020000000000000000020000000900010073797a30000000000900030073797a320000000020000000020a03000000000000000000020000030c150440000000000000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x58fe7ab67a988db6}, 0x0) (async) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), r3) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100080}, 0xc, &(0x7f00000005c0)={&(0x7f00000003c0)={0x1c, r5, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x4008010) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d3000004ec7e60942775257db5c69e68da4e1073ca4409a50290c87458ee8616cab3691994773939f69040f8f65ef2d10923dd01f7c0757bff7cdcf23f4a065a1a33adefe7490bf67f03d86348002f64173476daee726b822867635174fae4c7c7e796017c2c93d56e4c9a60628bdf6c338b9"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) 211.034108ms ago: executing program 3 (id=695): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c0000007b006bcd9e3fe3dc6e48aa310b6b8703360000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 87.951257ms ago: executing program 1 (id=696): syz_usb_connect$uac1(0x0, 0xa8, &(0x7f00000008c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x0, 0x70, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0x42, 0x24, 0x6, 0x0, 0x0, 0x3, [0x8, 0x0, 0x0]}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x101, 0x6, 0x8, 0x0, 0x10, 0x10}, @extension_unit={0xc, 0x24, 0x8, 0x6, 0x6, 0x8, "9410024849"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x302, 0xfc, 0x5}, @feature_unit={0x9, 0x24, 0x6, 0x5, 0x5, 0x1, [0x5]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x600, 0x40, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x7e}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x3, 0x2, 0x1}}}}}}}]}}, 0x0) (async) setuid(0xee01) r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x40000000) (async, rerun: 64) mount$9p_fd(0x0, 0x0, 0x0, 0x1000, 0x0) (rerun: 64) 0s ago: executing program 3 (id=697): setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xe) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=ANY=[@ANYBLOB="14000000100001000000fffffff000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a300000000033000000080a0300000000000000000002000003090001"], 0x74}}, 0x0) kernel console output (not intermixed with test programs): s an invalid interface number: 88 but max is 0 [ 145.697286][ T5919] usb 1-1: config 2 has no interface number 0 [ 145.703475][ T5919] usb 1-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 145.713488][ T5919] usb 1-1: config 2 interface 88 has no altsetting 0 [ 145.722622][ T5919] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 145.732007][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.740026][ T5919] usb 1-1: Product: syz [ 145.744325][ T5919] usb 1-1: Manufacturer: syz [ 145.748963][ T5919] usb 1-1: SerialNumber: syz [ 145.758875][ T6719] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 145.968364][ T6719] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 146.642712][ T5919] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 146.672454][ T5919] asix 1-1:2.88: probe with driver asix failed with error -71 [ 146.691755][ T5919] usb 1-1: USB disconnect, device number 15 [ 146.791382][ T5916] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 146.944673][ T5916] usb 3-1: Using ep0 maxpacket: 32 [ 146.951306][ T5916] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 146.959437][ T5916] usb 3-1: config 0 has no interface number 0 [ 146.965809][ T5916] usb 3-1: config 0 interface 12 has no altsetting 0 [ 146.977780][ T5916] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 146.987356][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.995497][ T5916] usb 3-1: Product: syz [ 146.999806][ T5916] usb 3-1: Manufacturer: syz [ 147.004549][ T5916] usb 3-1: SerialNumber: syz [ 147.011374][ T5916] usb 3-1: config 0 descriptor?? [ 147.066853][ T5895] usb 4-1: USB disconnect, device number 25 [ 147.335588][ T5876] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 147.366471][ T5876] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 147.499158][ T6739] fido_id[6739]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 147.621703][ T6744] kvm: kvm [6743]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000003a) = 0x0 [ 148.109902][ T6767] netlink: 19 bytes leftover after parsing attributes in process `syz.1.327'. [ 148.471467][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 148.562087][ T5876] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 148.651403][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 148.662727][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.681403][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 148.690511][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.723931][ T5876] usb 4-1: config 0 has an invalid interface number: 237 but max is 0 [ 148.725765][ T9] usb 1-1: config 0 descriptor?? [ 148.741187][ T5876] usb 4-1: config 0 has no interface number 0 [ 148.747755][ T5876] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 148.755045][ T9] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 148.759187][ T5895] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 148.780914][ T5876] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 148.791640][ T5876] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 148.804454][ T5876] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 148.817499][ T5876] usb 4-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6 [ 148.827255][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.836385][ T5876] usb 4-1: Product: syz [ 148.841469][ T5876] usb 4-1: Manufacturer: syz [ 148.846139][ T5876] usb 4-1: SerialNumber: syz [ 148.861966][ T5876] usb 4-1: config 0 descriptor?? [ 148.877468][ T5876] xpad 4-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 148.893920][ T5876] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.237/input/input9 [ 148.964405][ T5895] usb 2-1: config index 0 descriptor too short (expected 65428, got 59) [ 148.982111][ T5895] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 149.000052][ T5895] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 149.011491][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 149.019573][ T5895] usb 2-1: SerialNumber: syz [ 149.084092][ T5876] usb 4-1: USB disconnect, device number 26 [ 149.456514][ T5895] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 149.538875][ T5915] usb 2-1: USB disconnect, device number 26 [ 149.561696][ T5915] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 149.855883][ T5916] f81534 3-1:0.12: f81534_set_register: reg: 1001 data: f1 failed: -71 [ 149.876244][ T5916] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 149.884981][ T5916] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 149.893745][ T5916] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 149.943572][ T5916] usb 3-1: USB disconnect, device number 21 [ 150.061444][ T5876] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 150.206754][ T5915] usb 1-1: USB disconnect, device number 16 [ 150.251341][ T5876] usb 4-1: Using ep0 maxpacket: 8 [ 150.264479][ T5876] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.288061][ T5876] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 150.307640][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.331789][ T5876] usb 4-1: config 0 descriptor?? [ 150.350188][ T5876] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 150.580250][ T6810] netlink: 'syz.2.339': attribute type 6 has an invalid length. [ 150.803341][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 150.906539][ T6820] netlink: 24 bytes leftover after parsing attributes in process `syz.0.342'. [ 151.703628][ T5876] gspca_vc032x: reg_r err -110 [ 151.708559][ T5876] vc032x 4-1:0.0: probe with driver vc032x failed with error -110 [ 151.841549][ T5915] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 151.976941][ T6850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.350'. [ 152.013023][ T5915] usb 1-1: Using ep0 maxpacket: 32 [ 152.020706][ T5915] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 152.042348][ T5915] usb 1-1: config 0 has no interface number 0 [ 152.049401][ T5915] usb 1-1: config 0 interface 12 has no altsetting 0 [ 152.077898][ T5915] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 152.088072][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.096521][ T5915] usb 1-1: Product: syz [ 152.100907][ T5915] usb 1-1: Manufacturer: syz [ 152.107141][ T5915] usb 1-1: SerialNumber: syz [ 152.117711][ T5915] usb 1-1: config 0 descriptor?? [ 152.301393][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 152.461344][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 152.468335][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.479645][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 152.488884][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.500083][ T9] usb 3-1: config 0 descriptor?? [ 152.519334][ T9] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 152.884176][ T5916] usb 4-1: USB disconnect, device number 27 [ 152.955484][ T6862] ======================================================= [ 152.955484][ T6862] WARNING: The mand mount option has been deprecated and [ 152.955484][ T6862] and is ignored by this kernel. Remove the mand [ 152.955484][ T6862] option from the mount to silence this warning. [ 152.955484][ T6862] ======================================================= [ 153.099046][ T6866] netlink: 212356 bytes leftover after parsing attributes in process `syz.1.357'. [ 153.190911][ T6869] overlayfs: missing 'workdir' [ 153.379803][ T6875] FAULT_INJECTION: forcing a failure. [ 153.379803][ T6875] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 153.394367][ T6875] CPU: 1 UID: 0 PID: 6875 Comm: syz.3.361 Not tainted syzkaller #0 PREEMPT(full) [ 153.394395][ T6875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 153.394407][ T6875] Call Trace: [ 153.394414][ T6875] [ 153.394423][ T6875] dump_stack_lvl+0x189/0x250 [ 153.394455][ T6875] ? __pfx____ratelimit+0x10/0x10 [ 153.394481][ T6875] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.394505][ T6875] ? __pfx__printk+0x10/0x10 [ 153.394527][ T6875] ? __might_fault+0xb0/0x130 [ 153.394564][ T6875] should_fail_ex+0x414/0x560 [ 153.394598][ T6875] _copy_from_user+0x2d/0xb0 [ 153.394623][ T6875] ___sys_recvmsg+0x12e/0x510 [ 153.394657][ T6875] ? __pfx____sys_recvmsg+0x10/0x10 [ 153.394711][ T6875] ? __fget_files+0x3a0/0x420 [ 153.394746][ T6875] do_recvmmsg+0x307/0x770 [ 153.394783][ T6875] ? __pfx_do_recvmmsg+0x10/0x10 [ 153.394822][ T6875] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 153.394994][ T6875] __x64_sys_recvmmsg+0x190/0x240 [ 153.395031][ T6875] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 153.395064][ T6875] ? do_syscall_64+0xbe/0xfa0 [ 153.395094][ T6875] do_syscall_64+0xfa/0xfa0 [ 153.395129][ T6875] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.395148][ T6875] ? clear_bhb_loop+0x60/0xb0 [ 153.395173][ T6875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.395192][ T6875] RIP: 0033:0x7f58adb8f6c9 [ 153.395212][ T6875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.395228][ T6875] RSP: 002b:00007f58aea6b038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 153.395250][ T6875] RAX: ffffffffffffffda RBX: 00007f58adde5fa0 RCX: 00007f58adb8f6c9 [ 153.395264][ T6875] RDX: 0000000000000001 RSI: 0000200000001b00 RDI: 0000000000000003 [ 153.395276][ T6875] RBP: 00007f58aea6b090 R08: 0000000000000000 R09: 0000000000000000 [ 153.395288][ T6875] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 153.395300][ T6875] R13: 00007f58adde6038 R14: 00007f58adde5fa0 R15: 00007ffdedc005f8 [ 153.395334][ T6875] [ 153.611790][ T10] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 153.632002][ T5836] Bluetooth: hci1: command 0x0405 tx timeout [ 153.796650][ T10] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 153.816649][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.829079][ T10] usb 2-1: Product: syz [ 153.835853][ T10] usb 2-1: Manufacturer: syz [ 153.840679][ T10] usb 2-1: SerialNumber: syz [ 153.849335][ T10] usb 2-1: config 0 descriptor?? [ 153.858473][ T10] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 154.036539][ T9] gspca_vc032x: reg_w err -71 [ 154.043148][ T9] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 154.055267][ T9] usb 3-1: USB disconnect, device number 22 [ 154.141381][ T793] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 154.293742][ T793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 154.303664][ T793] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 154.313392][ T793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 154.323199][ T793] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 154.333131][ T793] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 154.342356][ T793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.353244][ T793] usb 4-1: config 0 descriptor?? [ 154.724266][ T10] gspca_stk1135: reg_w 0xf err -71 [ 154.735683][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 154.751432][ T10] gspca_stk1135: Sensor write failed [ 154.757240][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 154.764209][ T10] gspca_stk1135: Sensor write failed [ 154.770498][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 154.778149][ T10] gspca_stk1135: Sensor read failed [ 154.783465][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 154.790110][ T10] gspca_stk1135: Sensor read failed [ 154.795404][ T10] gspca_stk1135: Detected sensor type unknown (0x0) [ 154.802302][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 154.808765][ T10] gspca_stk1135: Sensor read failed [ 154.814120][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 154.820513][ T10] gspca_stk1135: Sensor read failed [ 154.827445][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 154.833254][ T53] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 154.836893][ T10] gspca_stk1135: Sensor write failed [ 154.842685][ T53] Bluetooth: hci0: Injecting HCI hardware error event [ 154.849776][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 154.856321][ T53] Bluetooth: hci0: hardware error 0x00 [ 154.865301][ T10] gspca_stk1135: Sensor write failed [ 154.873871][ T10] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 154.887584][ T5915] f81534 1-1:0.12: f81534_set_register: reg: 1001 data: f1 failed: -71 [ 154.897694][ T10] usb 2-1: USB disconnect, device number 27 [ 154.903742][ T5915] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 154.914778][ T5915] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 154.926174][ T5915] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 154.942888][ T5915] usb 1-1: USB disconnect, device number 17 [ 154.981400][ T5916] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 155.131379][ T5916] usb 3-1: Using ep0 maxpacket: 32 [ 155.138533][ T5916] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 155.152733][ T5916] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 155.163378][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 155.171817][ T5916] usb 3-1: Product: syz [ 155.176112][ T5916] usb 3-1: Manufacturer: syz [ 155.181412][ T5916] usb 3-1: SerialNumber: syz [ 155.189653][ T5916] usb 3-1: config 0 descriptor?? [ 155.195635][ T6890] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 155.204480][ T5916] hub 3-1:0.0: bad descriptor, ignoring hub [ 155.210434][ T5916] hub 3-1:0.0: probe with driver hub failed with error -5 [ 155.523047][ T5916] usb 3-1: USB disconnect, device number 23 [ 156.181476][ T5916] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 156.213894][ T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 156.344234][ T5916] usb 2-1: Using ep0 maxpacket: 8 [ 156.353108][ T5916] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.363737][ T5916] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 156.375071][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.383226][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 156.391040][ T10] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 156.410233][ T5916] usb 2-1: config 0 descriptor?? [ 156.425594][ T5916] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 156.432170][ T10] usb 3-1: config 0 has no interface number 0 [ 156.438375][ T10] usb 3-1: config 0 interface 12 has no altsetting 0 [ 156.451429][ T10] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 156.461536][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.469688][ T10] usb 3-1: Product: syz [ 156.474054][ T10] usb 3-1: Manufacturer: syz [ 156.478792][ T10] usb 3-1: SerialNumber: syz [ 156.486390][ T6927] FAULT_INJECTION: forcing a failure. [ 156.486390][ T6927] name failslab, interval 1, probability 0, space 0, times 0 [ 156.489725][ T10] usb 3-1: config 0 descriptor?? [ 156.506566][ T6927] CPU: 1 UID: 0 PID: 6927 Comm: syz.0.379 Not tainted syzkaller #0 PREEMPT(full) [ 156.506592][ T6927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 156.506603][ T6927] Call Trace: [ 156.506611][ T6927] [ 156.506619][ T6927] dump_stack_lvl+0x189/0x250 [ 156.506655][ T6927] ? __pfx____ratelimit+0x10/0x10 [ 156.506680][ T6927] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.506703][ T6927] ? __pfx__printk+0x10/0x10 [ 156.506733][ T6927] ? __pfx___might_resched+0x10/0x10 [ 156.506753][ T6927] ? fs_reclaim_acquire+0x7d/0x100 [ 156.506785][ T6927] should_fail_ex+0x414/0x560 [ 156.506818][ T6927] should_failslab+0xa8/0x100 [ 156.506848][ T6927] __kmalloc_node_track_caller_noprof+0xe2/0x810 [ 156.506875][ T6927] ? ovl_parse_param_lowerdir+0x24e/0xaa0 [ 156.506895][ T6927] ? ovl_parse_param_lowerdir+0xe8/0xaa0 [ 156.506920][ T6927] kstrdup+0x42/0x100 [ 156.506951][ T6927] ovl_parse_param_lowerdir+0x24e/0xaa0 [ 156.506985][ T6927] ? __pfx_ovl_parse_param_lowerdir+0x10/0x10 [ 156.507020][ T6927] ovl_parse_param+0x51b/0xee0 [ 156.507056][ T6927] ? __pfx_ovl_parse_param+0x10/0x10 [ 156.507079][ T6927] ? rcu_is_watching+0x15/0xb0 [ 156.507108][ T6927] ? static_key_count+0x41/0x70 [ 156.507133][ T6927] vfs_parse_fs_param+0x1a9/0x420 [ 156.507160][ T6927] vfs_parse_monolithic_sep+0x25d/0x320 [ 156.507185][ T6927] ? __pfx_ovl_next_opt+0x10/0x10 [ 156.507205][ T6927] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 156.507239][ T6927] ? alloc_fs_context+0x665/0x7d0 [ 156.507273][ T6927] do_new_mount+0x2cb/0xa10 [ 156.507293][ T6927] ? apparmor_capable+0x137/0x1b0 [ 156.507323][ T6927] ? security_capable+0x7e/0x2e0 [ 156.507342][ T6927] ? __pfx_do_new_mount+0x10/0x10 [ 156.507362][ T6927] ? ns_capable+0x8a/0xf0 [ 156.507384][ T6927] ? path_mount+0x628/0xff0 [ 156.507402][ T6927] ? kmem_cache_free+0x19b/0x690 [ 156.507439][ T6927] __se_sys_mount+0x313/0x410 [ 156.507466][ T6927] ? __pfx___se_sys_mount+0x10/0x10 [ 156.507491][ T6927] ? do_syscall_64+0xbe/0xfa0 [ 156.507514][ T6927] ? __x64_sys_mount+0x20/0xc0 [ 156.507538][ T6927] do_syscall_64+0xfa/0xfa0 [ 156.507565][ T6927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.507584][ T6927] ? clear_bhb_loop+0x60/0xb0 [ 156.507607][ T6927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.507624][ T6927] RIP: 0033:0x7f7a0198f6c9 [ 156.507642][ T6927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.507658][ T6927] RSP: 002b:00007f7a02787038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 156.507680][ T6927] RAX: ffffffffffffffda RBX: 00007f7a01be5fa0 RCX: 00007f7a0198f6c9 [ 156.507695][ T6927] RDX: 0000200000000b80 RSI: 0000200000000100 RDI: 0000000000000000 [ 156.507708][ T6927] RBP: 00007f7a02787090 R08: 0000200000000200 R09: 0000000000000000 [ 156.507720][ T6927] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002 [ 156.507732][ T6927] R13: 00007f7a01be6038 R14: 00007f7a01be5fa0 R15: 00007ffdadd96bc8 [ 156.507765][ T6927] [ 156.885150][ T793] hdpvr 4-1:0.0: unexpected answer of status request, len -71 [ 156.898102][ T793] hdpvr 4-1:0.0: device init failed [ 156.904004][ T793] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 156.917587][ T53] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 156.960768][ T793] usb 4-1: USB disconnect, device number 28 [ 157.003693][ T6931] overlay: ./file0 is not a directory [ 157.090894][ T6933] netlink: 'syz.3.382': attribute type 10 has an invalid length. [ 157.165624][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 157.321378][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 157.330742][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 157.339851][ T9] usb 1-1: config 0 has no interface number 0 [ 157.349120][ T9] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 157.358411][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.366602][ T9] usb 1-1: Product: syz [ 157.370888][ T9] usb 1-1: Manufacturer: syz [ 157.375607][ T9] usb 1-1: SerialNumber: syz [ 157.385941][ T9] usb 1-1: config 0 descriptor?? [ 157.397034][ T9] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 157.406229][ T9] usb 1-1: selecting invalid altsetting 1 [ 157.412091][ T9] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 157.425262][ T9] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 157.437163][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 157.446826][ T9] usb 1-1: media controller created [ 157.457099][ T6938] 9p: Bad value for 'wfdno' [ 157.469048][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 157.701529][ T793] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 157.856853][ T793] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 157.866239][ T793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.875614][ T793] usb 4-1: Product: syz [ 157.879833][ T793] usb 4-1: Manufacturer: syz [ 157.884599][ T793] usb 4-1: SerialNumber: syz [ 157.892892][ T793] usb 4-1: config 0 descriptor?? [ 157.902955][ T793] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 158.040104][ T5916] gspca_vc032x: reg_w err -71 [ 158.045152][ T5916] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 158.056102][ T5916] usb 2-1: USB disconnect, device number 28 [ 158.511638][ T9] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 158.518999][ T9] zl10353_read_register: readreg error (reg=127, ret==-110) [ 158.519077][ T6929] usb 1-1: dvb_usb_ce6230: I2C read not implemented [ 158.605005][ T9] usb 1-1: USB disconnect, device number 18 [ 158.805881][ T6944] netlink: 212356 bytes leftover after parsing attributes in process `syz.1.386'. [ 159.143050][ T10] f81534 3-1:0.12: f81534_set_register: reg: 1001 data: f1 failed: -71 [ 159.175187][ T10] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 159.195425][ T10] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 159.211468][ T10] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 159.239380][ T10] usb 3-1: USB disconnect, device number 24 [ 159.441936][ T793] gspca_sunplus: reg_r err -110 [ 159.447172][ T793] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 159.713520][ T793] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 159.781341][ T10] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 159.876377][ T793] usb 1-1: unable to get BOS descriptor or descriptor too short [ 159.885285][ T793] usb 1-1: config 8 has an invalid interface number: 134 but max is 0 [ 159.893941][ T793] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 159.904221][ T793] usb 1-1: config 8 has no interface number 0 [ 159.910331][ T793] usb 1-1: config 8 interface 134 altsetting 2 endpoint 0xE has invalid maxpacket 1535, setting to 1024 [ 159.921758][ T793] usb 1-1: config 8 interface 134 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 159.934875][ T793] usb 1-1: config 8 interface 134 has no altsetting 0 [ 159.944541][ T793] usb 1-1: string descriptor 0 read error: -22 [ 159.950945][ T793] usb 1-1: New USB device found, idVendor=0bb4, idProduct=0a81, bcdDevice=a5.46 [ 159.951342][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 159.961983][ T793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.966954][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 159.987064][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.998097][ T6954] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 160.006227][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 160.015530][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.026794][ T10] usb 2-1: config 0 descriptor?? [ 160.037797][ T10] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 160.161357][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 160.168562][ T9] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 160.176886][ T9] usb 3-1: config 0 has no interface number 0 [ 160.185220][ T9] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 160.194404][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.202723][ T9] usb 3-1: Product: syz [ 160.206984][ T9] usb 3-1: Manufacturer: syz [ 160.211783][ T9] usb 3-1: SerialNumber: syz [ 160.217496][ T793] usb 1-1: USB disconnect, device number 19 [ 160.220394][ T9] usb 3-1: config 0 descriptor?? [ 160.251454][ T9] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 160.282896][ T5876] usb 4-1: USB disconnect, device number 29 [ 160.464750][ T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 160.477680][ T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 160.687305][ T6969] FAULT_INJECTION: forcing a failure. [ 160.687305][ T6969] name failslab, interval 1, probability 0, space 0, times 0 [ 160.700432][ T6969] CPU: 0 UID: 0 PID: 6969 Comm: syz.3.398 Not tainted syzkaller #0 PREEMPT(full) [ 160.700466][ T6969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 160.700478][ T6969] Call Trace: [ 160.700487][ T6969] [ 160.700496][ T6969] dump_stack_lvl+0x189/0x250 [ 160.700527][ T6969] ? __pfx____ratelimit+0x10/0x10 [ 160.700554][ T6969] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.700579][ T6969] ? __pfx__printk+0x10/0x10 [ 160.700606][ T6969] ? __pfx___might_resched+0x10/0x10 [ 160.700628][ T6969] ? fs_reclaim_acquire+0x7d/0x100 [ 160.700662][ T6969] should_fail_ex+0x414/0x560 [ 160.700697][ T6969] should_failslab+0xa8/0x100 [ 160.700728][ T6969] __kmalloc_cache_noprof+0x84/0x700 [ 160.700753][ T6969] ? trace_contention_end+0x39/0x120 [ 160.700776][ T6969] ? vhost_task_create+0xf8/0x320 [ 160.700809][ T6969] vhost_task_create+0xf8/0x320 [ 160.700832][ T6969] ? arch_stack_walk+0xfc/0x150 [ 160.700854][ T6969] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 160.700878][ T6969] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 160.700903][ T6969] ? __pfx_vhost_task_create+0x10/0x10 [ 160.700940][ T6969] ? __pfx_vhost_task_fn+0x10/0x10 [ 160.700989][ T6969] kvm_mmu_post_init_vm+0x14c/0x300 [ 160.701022][ T6969] kvm_arch_vcpu_ioctl_run+0xdc/0x1cb0 [ 160.701061][ T6969] ? __mutex_trylock_common+0x153/0x260 [ 160.701089][ T6969] ? __pfx___mutex_trylock_common+0x10/0x10 [ 160.701114][ T6969] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 160.701155][ T6969] ? rcu_is_watching+0x15/0xb0 [ 160.701180][ T6969] ? trace_contention_end+0x39/0x120 [ 160.701204][ T6969] ? look_up_lock_class+0x74/0x170 [ 160.701234][ T6969] ? register_lock_class+0x51/0x320 [ 160.701259][ T6969] ? __lock_acquire+0xab9/0xd20 [ 160.701312][ T6969] kvm_vcpu_ioctl+0x99a/0xed0 [ 160.701346][ T6969] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 160.701397][ T6969] ? __fget_files+0x2a/0x420 [ 160.701425][ T6969] ? __fget_files+0x3a0/0x420 [ 160.701445][ T6969] ? __fget_files+0x2a/0x420 [ 160.701472][ T6969] ? bpf_lsm_file_ioctl+0x9/0x20 [ 160.701501][ T6969] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 160.701526][ T6969] __se_sys_ioctl+0xfc/0x170 [ 160.701557][ T6969] do_syscall_64+0xfa/0xfa0 [ 160.701584][ T6969] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.701602][ T6969] ? clear_bhb_loop+0x60/0xb0 [ 160.701626][ T6969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.701646][ T6969] RIP: 0033:0x7f58adb8f6c9 [ 160.701663][ T6969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.701680][ T6969] RSP: 002b:00007f58aea6b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 160.701702][ T6969] RAX: ffffffffffffffda RBX: 00007f58adde5fa0 RCX: 00007f58adb8f6c9 [ 160.701716][ T6969] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 160.701727][ T6969] RBP: 00007f58aea6b090 R08: 0000000000000000 R09: 0000000000000000 [ 160.701739][ T6969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.701749][ T6969] R13: 00007f58adde6038 R14: 00007f58adde5fa0 R15: 00007ffdedc005f8 [ 160.701772][ T6969] [ 161.039155][ T6962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.048290][ T6962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.059082][ T6962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.068231][ T6962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.077978][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 161.096290][ T6971] netlink: 44 bytes leftover after parsing attributes in process `syz.0.399'. [ 161.110278][ T6971] netlink: 44 bytes leftover after parsing attributes in process `syz.0.399'. [ 161.110944][ T9] usb 3-1: USB disconnect, device number 25 [ 161.135174][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 161.155240][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 161.170946][ T9] quatech2 3-1:0.51: device disconnected [ 161.345384][ T6976] netlink: 'syz.3.401': attribute type 3 has an invalid length. [ 161.353585][ T6976] netlink: 132 bytes leftover after parsing attributes in process `syz.3.401'. [ 161.712800][ T10] gspca_vc032x: reg_w err -71 [ 161.717740][ T10] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 161.728757][ T10] usb 2-1: USB disconnect, device number 29 [ 161.851438][ T793] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 162.001411][ T793] usb 4-1: Using ep0 maxpacket: 32 [ 162.008194][ T793] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 162.016463][ T793] usb 4-1: config 0 has no interface number 0 [ 162.022822][ T793] usb 4-1: config 0 interface 12 has no altsetting 0 [ 162.033548][ T793] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 162.042923][ T793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.050913][ T793] usb 4-1: Product: syz [ 162.055121][ T793] usb 4-1: Manufacturer: syz [ 162.059727][ T793] usb 4-1: SerialNumber: syz [ 162.066418][ T793] usb 4-1: config 0 descriptor?? [ 162.591401][ T6998] netlink: 2384 bytes leftover after parsing attributes in process `syz.2.411'. [ 163.101467][ T5854] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 163.231617][ T5836] Bluetooth: hci4: command 0x1003 tx timeout [ 163.233049][ T53] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 163.258258][ T5854] usb 3-1: Using ep0 maxpacket: 8 [ 163.266529][ T5854] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.278156][ T5854] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 163.289013][ T5854] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.333493][ T5854] usb 3-1: config 0 descriptor?? [ 163.362518][ T5854] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 163.971495][ T10] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 164.123410][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 164.133370][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 164.146905][ T10] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 164.156192][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.164271][ T10] usb 2-1: Product: syz [ 164.168458][ T10] usb 2-1: Manufacturer: syz [ 164.173175][ T10] usb 2-1: SerialNumber: syz [ 164.180622][ T10] usb 2-1: config 0 descriptor?? [ 164.182489][ T5895] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 164.194605][ T7035] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 164.202107][ T7035] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 164.350872][ T5854] gspca_vc032x: reg_r err -32 [ 164.355826][ T5854] vc032x 3-1:0.0: probe with driver vc032x failed with error -32 [ 164.363815][ T5895] usb 1-1: Using ep0 maxpacket: 8 [ 164.374418][ T5895] usb 1-1: config 0 interface 0 has no altsetting 0 [ 164.381176][ T5895] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 164.390364][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.402276][ T5895] usb 1-1: config 0 descriptor?? [ 164.417959][ T30] audit: type=1326 audit(1762507098.331:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7033 comm="syz.1.423" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb56df8f6c9 code=0x0 [ 164.468397][ T7037] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 164.476505][ T7037] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 164.735294][ T793] f81534 4-1:0.12: f81534_set_register: reg: 1001 data: f1 failed: -71 [ 164.743906][ T793] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 164.751767][ T793] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 164.759521][ T793] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 164.780486][ T793] usb 4-1: USB disconnect, device number 30 [ 164.828531][ T5895] kone 0003:1E7D:2CED.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.0-1/input0 [ 164.859960][ T7045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.870814][ T7045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.887333][ T10] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 164.984602][ T5895] kone 0003:1E7D:2CED.0004: couldn't init struct kone_device [ 165.007849][ T5895] kone 0003:1E7D:2CED.0004: couldn't install mouse [ 165.029956][ T5895] kone 0003:1E7D:2CED.0004: probe with driver kone failed with error -5 [ 165.067108][ T5895] usb 1-1: USB disconnect, device number 20 [ 165.594992][ T7071] netlink: 19 bytes leftover after parsing attributes in process `syz.3.433'. [ 165.935149][ T5916] usb 3-1: USB disconnect, device number 26 [ 166.191702][ T980] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 166.341989][ T980] usb 4-1: Using ep0 maxpacket: 32 [ 166.355481][ T980] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 166.366325][ T980] usb 4-1: config 0 has no interface number 0 [ 166.373629][ T980] usb 4-1: config 0 interface 12 has no altsetting 0 [ 166.385712][ T980] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 166.395495][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.403759][ T980] usb 4-1: Product: syz [ 166.408020][ T980] usb 4-1: Manufacturer: syz [ 166.412862][ T980] usb 4-1: SerialNumber: syz [ 166.420164][ T980] usb 4-1: config 0 descriptor?? [ 166.521440][ T793] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 166.619644][ T7095] netlink: 'syz.2.446': attribute type 6 has an invalid length. [ 166.678090][ T10] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 166.696096][ T793] usb 1-1: Using ep0 maxpacket: 8 [ 166.710556][ T793] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.719717][ T10] usb 2-1: USB disconnect, device number 30 [ 166.751418][ T793] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 166.790023][ T793] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 166.831351][ T793] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 166.861101][ T793] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 166.884419][ T793] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 166.894611][ T793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 166.895779][ T7100] netlink: 12 bytes leftover after parsing attributes in process `syz.2.449'. [ 166.906831][ T793] usb 1-1: Product: syz [ 166.916756][ T793] usb 1-1: Manufacturer: syz [ 166.922193][ T793] usb 1-1: SerialNumber: syz [ 166.931395][ T793] usb 1-1: config 0 descriptor?? [ 167.140305][ T793] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 167.149255][ T793] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 167.221437][ T10] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 167.341108][ T793] radio-si470x 1-1:0.0: software version 0, hardware version 0 [ 167.349763][ T793] radio-si470x 1-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 167.365934][ T793] radio-si470x 1-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 167.381421][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 167.389182][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.402309][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 167.412206][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.425860][ T10] usb 2-1: config 0 descriptor?? [ 167.461907][ T10] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 167.543940][ T793] radio-si470x 1-1:0.0: submitting int urb failed (-90) [ 168.061348][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 168.221368][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 168.229176][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x38, changing to 0x8 [ 168.240729][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 206, changing to 7 [ 168.251871][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 57747, setting to 1024 [ 168.263390][ T9] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 168.272858][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.286576][ T9] usb 3-1: config 0 descriptor?? [ 168.297321][ T9] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 168.348740][ T793] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 168.358564][ T793] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -22 [ 168.377239][ T793] usb 1-1: USB disconnect, device number 21 [ 168.452860][ T10] gspca_vc032x: reg_r err -32 [ 168.457842][ T10] vc032x 2-1:0.0: probe with driver vc032x failed with error -32 [ 169.102038][ T980] f81534 4-1:0.12: f81534_set_register: reg: 1001 data: f1 failed: -71 [ 169.111956][ T980] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 169.119392][ T980] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 169.128382][ T980] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 169.147095][ T980] usb 4-1: USB disconnect, device number 31 [ 169.899124][ T5854] usb 2-1: USB disconnect, device number 31 [ 170.271382][ T5854] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 170.291473][ T10] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 170.423566][ T5854] usb 2-1: config 0 has an invalid interface number: 16 but max is 0 [ 170.431936][ T5854] usb 2-1: config 0 has no interface number 0 [ 170.438410][ T5854] usb 2-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 170.441353][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 170.448687][ T5854] usb 2-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 170.457133][ T10] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 170.466006][ T5854] usb 2-1: New USB device found, idVendor=067b, idProduct=0612, bcdDevice=e0.77 [ 170.474546][ T10] usb 1-1: config 0 has no interface number 0 [ 170.482015][ T5854] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.490359][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 170.495499][ T5854] usb 2-1: Product: syz [ 170.505658][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.517230][ T10] usb 1-1: Product: syz [ 170.522062][ T10] usb 1-1: Manufacturer: syz [ 170.526823][ T5854] usb 2-1: Manufacturer: syz [ 170.532125][ T10] usb 1-1: SerialNumber: syz [ 170.536085][ T5854] usb 2-1: SerialNumber: syz [ 170.539858][ T10] usb 1-1: config 0 descriptor?? [ 170.553177][ T10] smsc95xx v2.0.0 [ 170.561410][ T5854] usb 2-1: config 0 descriptor?? [ 170.577489][ T7135] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 170.590013][ T7135] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 170.823813][ T5854] pl2303 2-1:0.16: required interrupt-in endpoint missing [ 170.826040][ T980] usb 3-1: USB disconnect, device number 27 [ 170.864730][ T9] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 170.897390][ T5854] usb 2-1: USB disconnect, device number 32 [ 170.967764][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 170.977664][ T7144] netlink: 212356 bytes leftover after parsing attributes in process `syz.2.466'. [ 170.989055][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 171.051600][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 171.067423][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.081497][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 171.090861][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.108616][ T9] usb 4-1: config 0 descriptor?? [ 171.126297][ T9] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 171.171873][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 171.184712][ T10] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 171.207423][ T10] usb 1-1: USB disconnect, device number 22 [ 171.385385][ T7154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.396907][ T7154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.461950][ T9] gspca_vc032x: reg_r err -32 [ 171.474085][ T9] vc032x 4-1:0.0: probe with driver vc032x failed with error -32 [ 171.541408][ T5916] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 171.691362][ T5916] usb 3-1: Using ep0 maxpacket: 32 [ 171.697970][ T5916] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 171.706443][ T5916] usb 3-1: config 0 has no interface number 0 [ 171.714873][ T5916] usb 3-1: config 0 interface 12 has no altsetting 0 [ 171.727554][ T5916] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 171.750058][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.760014][ T5916] usb 3-1: Product: syz [ 171.768281][ T5916] usb 3-1: Manufacturer: syz [ 171.774362][ T5916] usb 3-1: SerialNumber: syz [ 171.782471][ T793] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 171.783937][ T5916] usb 3-1: config 0 descriptor?? [ 171.797322][ T7159] overlayfs: workdir and upperdir must reside under the same mount [ 171.951449][ T793] usb 2-1: Using ep0 maxpacket: 8 [ 171.958529][ T793] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.968951][ T793] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 171.978397][ T793] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.989599][ T793] usb 2-1: config 0 descriptor?? [ 171.999055][ T793] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 172.171357][ T5854] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 172.321362][ T5854] usb 1-1: Using ep0 maxpacket: 8 [ 172.328575][ T5854] usb 1-1: config 4 has an invalid interface number: 27 but max is 0 [ 172.336964][ T5854] usb 1-1: config 4 has no interface number 0 [ 172.345774][ T5854] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 172.355002][ T5854] usb 1-1: New USB device strings: Mfr=8, Product=12, SerialNumber=3 [ 172.363208][ T5854] usb 1-1: Product: syz [ 172.367433][ T5854] usb 1-1: Manufacturer: syz [ 172.372423][ T5854] usb 1-1: SerialNumber: syz [ 172.391967][ T5854] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 172.663228][ T5854] vp7045: USB control message 'out' went wrong. [ 172.672406][ T5854] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 172.692111][ T5854] dvbdev: DVB: registering new adapter (DigitalNow TinyUSB 2 DVB-t Receiver) [ 172.701222][ T5854] usb 1-1: media controller created [ 172.709745][ T5854] vp7045: USB control message 'out' went wrong. [ 172.716649][ T5854] dvb-usb: MAC address reading failed. [ 172.736634][ T5854] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 172.786396][ T5854] vp7045: USB control message 'out' went wrong. [ 172.799546][ T5854] vp7045: USB control message 'out' went wrong. [ 172.807049][ T7170] FAULT_INJECTION: forcing a failure. [ 172.807049][ T7170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.807858][ T5854] vp7045: USB control message 'out' went wrong. [ 172.824619][ T7170] CPU: 0 UID: 0 PID: 7170 Comm: syz.0.474 Not tainted syzkaller #0 PREEMPT(full) [ 172.824646][ T7170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 172.824658][ T7170] Call Trace: [ 172.824665][ T7170] [ 172.824674][ T7170] dump_stack_lvl+0x189/0x250 [ 172.824702][ T7170] ? __pfx____ratelimit+0x10/0x10 [ 172.824730][ T7170] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.824752][ T7170] ? __pfx__printk+0x10/0x10 [ 172.824773][ T7170] ? __might_fault+0xb0/0x130 [ 172.824814][ T7170] should_fail_ex+0x414/0x560 [ 172.824846][ T7170] _copy_to_iter+0x1de/0x1790 [ 172.824868][ T7170] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 172.824891][ T7170] ? lockdep_hardirqs_on+0x9c/0x150 [ 172.824919][ T7170] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 172.824942][ T7170] ? __pfx__copy_to_iter+0x10/0x10 [ 172.824962][ T7170] ? remove_wait_queue+0x33/0x120 [ 172.824991][ T7170] ? sk_wait_data+0x404/0x4a0 [ 172.825024][ T7170] __skb_datagram_iter+0x41a/0x990 [ 172.825052][ T7170] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 172.825088][ T7170] skb_copy_datagram_iter+0xc5/0x230 [ 172.825118][ T7170] mptcp_recvmsg+0x59e/0x20b0 [ 172.825179][ T7170] ? __pfx_mptcp_recvmsg+0x10/0x10 [ 172.825212][ T7170] ? __lock_acquire+0xab9/0xd20 [ 172.825232][ T7170] ? aa_sk_perm+0x81c/0x950 [ 172.825254][ T7170] ? __pfx_mptcp_recvmsg+0x10/0x10 [ 172.825276][ T7170] inet6_recvmsg+0x237/0x6b0 [ 172.825303][ T7170] ? __pfx_aa_sk_perm+0x10/0x10 [ 172.825319][ T7170] ? __lock_acquire+0xab9/0xd20 [ 172.825339][ T7170] ? __pfx_inet6_recvmsg+0x10/0x10 [ 172.825368][ T7170] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 172.825391][ T7170] ? security_socket_recvmsg+0x7e/0x2e0 [ 172.825419][ T7170] sock_recvmsg+0x105/0x270 [ 172.825442][ T7170] ____sys_recvmsg+0x1c9/0x460 [ 172.825476][ T7170] ? __pfx_____sys_recvmsg+0x10/0x10 [ 172.825518][ T7170] ? import_iovec+0x74/0xa0 [ 172.825542][ T7170] ___sys_recvmsg+0x1b5/0x510 [ 172.825573][ T7170] ? __pfx____sys_recvmsg+0x10/0x10 [ 172.825624][ T7170] ? __fget_files+0x3a0/0x420 [ 172.825656][ T7170] do_recvmmsg+0x307/0x770 [ 172.825690][ T7170] ? __pfx_do_recvmmsg+0x10/0x10 [ 172.825727][ T7170] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 172.825771][ T7170] __x64_sys_recvmmsg+0x190/0x240 [ 172.825815][ T7170] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 172.825845][ T7170] ? do_syscall_64+0xbe/0xfa0 [ 172.825873][ T7170] do_syscall_64+0xfa/0xfa0 [ 172.825898][ T7170] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.825915][ T7170] ? clear_bhb_loop+0x60/0xb0 [ 172.825937][ T7170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.825955][ T7170] RIP: 0033:0x7f7a0198f6c9 [ 172.825972][ T7170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.825987][ T7170] RSP: 002b:00007f7a02787038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 172.826008][ T7170] RAX: ffffffffffffffda RBX: 00007f7a01be5fa0 RCX: 00007f7a0198f6c9 [ 172.826021][ T7170] RDX: 0000000000000001 RSI: 0000200000001b00 RDI: 0000000000000003 [ 172.826032][ T7170] RBP: 00007f7a02787090 R08: 0000000000000000 R09: 0000000000000000 [ 172.826043][ T7170] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 172.826055][ T7170] R13: 00007f7a01be6038 R14: 00007f7a01be5fa0 R15: 00007ffdadd96bc8 [ 172.826086][ T7170] [ 173.156963][ T793] gspca_vc032x: reg_r err -32 [ 173.161951][ T793] vc032x 2-1:0.0: probe with driver vc032x failed with error -32 [ 173.171016][ T5854] usb 1-1: DVB: registering adapter 1 frontend 0 (Twinhan VP7045/46 USB DVB-T)... [ 173.182320][ T5854] dvbdev: dvb_create_media_entity: media entity 'Twinhan VP7045/46 USB DVB-T' registered. [ 173.331363][ T5854] rc_core: IR keymap rc-twinhan1027 not found [ 173.337529][ T5854] Registered IR keymap rc-empty [ 173.345044][ T5854] rc rc0: DigitalNow TinyUSB 2 DVB-t Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 173.377377][ T5854] input: DigitalNow TinyUSB 2 DVB-t Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input10 [ 173.397542][ T5854] dvb-usb: schedule remote query interval to 400 msecs. [ 173.405995][ T5854] vp7045: USB control message 'out' went wrong. [ 173.413518][ T5854] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver successfully initialized and connected. [ 173.446386][ T5854] usb 1-1: USB disconnect, device number 23 [ 173.607449][ T5854] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver successfully deinitialized and disconnected. [ 173.941414][ T5854] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 174.093121][ T5854] usb 1-1: config 0 has an invalid interface number: 16 but max is 0 [ 174.101458][ T5854] usb 1-1: config 0 has no interface number 0 [ 174.107605][ T5854] usb 1-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 174.119043][ T5854] usb 1-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 174.132222][ T5854] usb 1-1: New USB device found, idVendor=067b, idProduct=0612, bcdDevice=e0.77 [ 174.141544][ T5854] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.149686][ T5854] usb 1-1: Product: syz [ 174.153938][ T5854] usb 1-1: Manufacturer: syz [ 174.158561][ T5854] usb 1-1: SerialNumber: syz [ 174.166103][ T5854] usb 1-1: config 0 descriptor?? [ 174.172132][ T7183] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 174.179798][ T7183] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 174.398327][ T5854] pl2303 1-1:0.16: required interrupt-in endpoint missing [ 174.418167][ T5854] usb 1-1: USB disconnect, device number 24 [ 174.494923][ T793] usb 4-1: USB disconnect, device number 32 [ 174.568768][ T5895] usb 2-1: USB disconnect, device number 33 [ 174.600973][ T5916] f81534 3-1:0.12: f81534_set_register: reg: 1001 data: f1 failed: -71 [ 174.622748][ T5916] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 174.630160][ T5916] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 174.649642][ T5916] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 174.665758][ T5916] usb 3-1: USB disconnect, device number 28 [ 174.961423][ T5895] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 175.076389][ T7201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.487'. [ 175.135532][ T5895] usb 2-1: too many endpoints for config 0 interface 0 altsetting 48: 48, using maximum allowed: 30 [ 175.135583][ T5895] usb 2-1: config 0 interface 0 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 175.135612][ T5895] usb 2-1: config 0 interface 0 has no altsetting 0 [ 175.135647][ T5895] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 175.135671][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.140260][ T5895] usb 2-1: config 0 descriptor?? [ 175.246682][ T7205] FAULT_INJECTION: forcing a failure. [ 175.246682][ T7205] name failslab, interval 1, probability 0, space 0, times 0 [ 175.246719][ T7205] CPU: 0 UID: 0 PID: 7205 Comm: syz.2.489 Not tainted syzkaller #0 PREEMPT(full) [ 175.246742][ T7205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 175.246754][ T7205] Call Trace: [ 175.246771][ T7205] [ 175.246780][ T7205] dump_stack_lvl+0x189/0x250 [ 175.246810][ T7205] ? __pfx____ratelimit+0x10/0x10 [ 175.246837][ T7205] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.246862][ T7205] ? __pfx__printk+0x10/0x10 [ 175.246893][ T7205] ? __pfx___might_resched+0x10/0x10 [ 175.246914][ T7205] ? fs_reclaim_acquire+0x7d/0x100 [ 175.246945][ T7205] should_fail_ex+0x414/0x560 [ 175.246979][ T7205] should_failslab+0xa8/0x100 [ 175.247009][ T7205] __kmalloc_node_track_caller_noprof+0xe2/0x810 [ 175.247035][ T7205] ? ovl_parse_param_lowerdir+0x24e/0xaa0 [ 175.247058][ T7205] ? ovl_parse_param_lowerdir+0xe8/0xaa0 [ 175.247083][ T7205] kstrdup+0x42/0x100 [ 175.247111][ T7205] ovl_parse_param_lowerdir+0x24e/0xaa0 [ 175.247143][ T7205] ? __pfx_ovl_parse_param_lowerdir+0x10/0x10 [ 175.247177][ T7205] ovl_parse_param+0x51b/0xee0 [ 175.247204][ T7205] ? __pfx_ovl_parse_param+0x10/0x10 [ 175.247226][ T7205] ? rcu_is_watching+0x15/0xb0 [ 175.247254][ T7205] ? static_key_count+0x41/0x70 [ 175.247280][ T7205] vfs_parse_fs_param+0x1a9/0x420 [ 175.247309][ T7205] vfs_parse_monolithic_sep+0x25d/0x320 [ 175.247335][ T7205] ? __pfx_ovl_next_opt+0x10/0x10 [ 175.247357][ T7205] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 175.247390][ T7205] ? alloc_fs_context+0x665/0x7d0 [ 175.247425][ T7205] do_new_mount+0x2cb/0xa10 [ 175.247445][ T7205] ? apparmor_capable+0x137/0x1b0 [ 175.247476][ T7205] ? security_capable+0x7e/0x2e0 [ 175.247497][ T7205] ? __pfx_do_new_mount+0x10/0x10 [ 175.247517][ T7205] ? ns_capable+0x8a/0xf0 [ 175.247538][ T7205] ? path_mount+0x628/0xff0 [ 175.247557][ T7205] ? kmem_cache_free+0x19b/0x690 [ 175.247595][ T7205] __se_sys_mount+0x313/0x410 [ 175.247624][ T7205] ? __pfx___se_sys_mount+0x10/0x10 [ 175.247652][ T7205] ? do_syscall_64+0xbe/0xfa0 [ 175.247675][ T7205] ? __x64_sys_mount+0x20/0xc0 [ 175.247699][ T7205] do_syscall_64+0xfa/0xfa0 [ 175.247726][ T7205] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.247746][ T7205] ? clear_bhb_loop+0x60/0xb0 [ 175.247780][ T7205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.247799][ T7205] RIP: 0033:0x7f5c9018f6c9 [ 175.247817][ T7205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.247834][ T7205] RSP: 002b:00007f5c91092038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 175.247857][ T7205] RAX: ffffffffffffffda RBX: 00007f5c903e5fa0 RCX: 00007f5c9018f6c9 [ 175.247872][ T7205] RDX: 0000200000000b80 RSI: 0000200000000100 RDI: 0000000000000000 [ 175.247886][ T7205] RBP: 00007f5c91092090 R08: 0000200000000200 R09: 0000000000000000 [ 175.247898][ T7205] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002 [ 175.247910][ T7205] R13: 00007f5c903e6038 R14: 00007f5c903e5fa0 R15: 00007fffa26fd488 [ 175.247945][ T7205] [ 175.460528][ T5895] usb 2-1: string descriptor 0 read error: -71 [ 175.462668][ T5895] cp210x 2-1:0.0: cp210x converter detected [ 175.464628][ T5895] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 175.464659][ T5895] cp210x 2-1:0.0: querying part number failed [ 175.471386][ T5895] usb 2-1: cp210x converter now attached to ttyUSB0 [ 175.571540][ T5916] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 175.575971][ T5895] usb 2-1: USB disconnect, device number 34 [ 175.731409][ T5916] usb 1-1: Using ep0 maxpacket: 8 [ 175.735057][ T5895] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 175.735616][ T5916] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.735673][ T5916] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 175.735698][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.735711][ T5895] cp210x 2-1:0.0: device disconnected [ 175.762745][ T5916] usb 1-1: config 0 descriptor?? [ 175.799262][ T5916] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 175.957388][ T7218] netlink: 'syz.3.493': attribute type 10 has an invalid length. [ 176.108819][ T7222] netlink: 'syz.1.495': attribute type 27 has an invalid length. [ 176.429413][ T7232] netlink: 212356 bytes leftover after parsing attributes in process `syz.3.500'. [ 176.461367][ T980] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 176.631983][ T980] usb 2-1: Using ep0 maxpacket: 32 [ 176.638950][ T980] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 176.647223][ T980] usb 2-1: config 0 has no interface number 0 [ 176.653439][ T980] usb 2-1: config 0 interface 12 has no altsetting 0 [ 176.665686][ T980] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 176.678870][ T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.687144][ T980] usb 2-1: Product: syz [ 176.691583][ T980] usb 2-1: Manufacturer: syz [ 176.696203][ T980] usb 2-1: SerialNumber: syz [ 176.704505][ T980] usb 2-1: config 0 descriptor?? [ 176.761480][ T10] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 176.773284][ T793] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 176.818422][ T5916] gspca_vc032x: reg_r err -32 [ 176.823347][ T5916] vc032x 1-1:0.0: probe with driver vc032x failed with error -32 [ 176.911404][ T793] usb 4-1: device descriptor read/64, error -71 [ 176.931410][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 176.938590][ T10] usb 3-1: config 0 has an invalid descriptor of length 37, skipping remainder of the config [ 176.948988][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEF, changing to 0x8F [ 176.960596][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 1 [ 176.970613][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 176.984809][ T10] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 176.994310][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 177.002777][ T10] usb 3-1: SerialNumber: syz [ 177.010272][ T10] usb 3-1: config 0 descriptor?? [ 177.016683][ T7234] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 177.026064][ T10] hso 3-1:0.0: Can't find BULK OUT endpoint [ 177.161595][ T793] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 177.291452][ T793] usb 4-1: device descriptor read/64, error -71 [ 177.368502][ T5895] usb 3-1: USB disconnect, device number 29 [ 177.401956][ T793] usb usb4-port1: attempt power cycle [ 177.741411][ T793] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 177.762025][ T793] usb 4-1: device descriptor read/8, error -71 [ 178.001369][ T793] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 178.024475][ T793] usb 4-1: device descriptor read/8, error -71 [ 178.083548][ T7241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.504'. [ 178.132748][ T793] usb usb4-port1: unable to enumerate USB device [ 178.144440][ T7244] overlayfs: workdir and upperdir must be separate subtrees [ 178.361547][ T9] usb 1-1: USB disconnect, device number 25 [ 178.558127][ T30] audit: type=1804 audit(1762507112.471:3): pid=7254 uid=60928 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.509" name="/newroot/130/cgroup.controllers" dev="tmpfs" ino=700 res=1 errno=0 [ 178.608035][ T30] audit: type=1800 audit(1762507112.471:4): pid=7254 uid=60928 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.509" name="cgroup.controllers" dev="tmpfs" ino=700 res=0 errno=0 [ 178.888753][ T7264] comedi comedi3: comedi_config --init_data is deprecated [ 178.984553][ T7266] FAULT_INJECTION: forcing a failure. [ 178.984553][ T7266] name failslab, interval 1, probability 0, space 0, times 0 [ 178.997793][ T7266] CPU: 1 UID: 0 PID: 7266 Comm: syz.2.514 Not tainted syzkaller #0 PREEMPT(full) [ 178.997814][ T7266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 178.997825][ T7266] Call Trace: [ 178.997834][ T7266] [ 178.997842][ T7266] dump_stack_lvl+0x189/0x250 [ 178.997873][ T7266] ? __pfx____ratelimit+0x10/0x10 [ 178.997897][ T7266] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.997921][ T7266] ? __pfx__printk+0x10/0x10 [ 178.997938][ T7266] ? __pfx___might_resched+0x10/0x10 [ 178.997952][ T7266] ? fs_reclaim_acquire+0x7d/0x100 [ 178.997972][ T7266] should_fail_ex+0x414/0x560 [ 178.998004][ T7266] should_failslab+0xa8/0x100 [ 178.998034][ T7266] __kmalloc_cache_noprof+0x84/0x700 [ 178.998056][ T7266] ? trace_contention_end+0x39/0x120 [ 178.998078][ T7266] ? vhost_task_create+0xf8/0x320 [ 178.998097][ T7266] vhost_task_create+0xf8/0x320 [ 178.998111][ T7266] ? arch_stack_walk+0xfc/0x150 [ 178.998122][ T7266] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 178.998143][ T7266] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 178.998168][ T7266] ? __pfx_vhost_task_create+0x10/0x10 [ 178.998201][ T7266] ? __pfx_vhost_task_fn+0x10/0x10 [ 178.998249][ T7266] kvm_mmu_post_init_vm+0x14c/0x300 [ 178.998279][ T7266] kvm_arch_vcpu_ioctl_run+0xdc/0x1cb0 [ 178.998316][ T7266] ? __mutex_trylock_common+0x153/0x260 [ 178.998343][ T7266] ? __pfx___mutex_trylock_common+0x10/0x10 [ 178.998367][ T7266] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 178.998396][ T7266] ? rcu_is_watching+0x15/0xb0 [ 178.998413][ T7266] ? trace_contention_end+0x39/0x120 [ 178.998435][ T7266] ? look_up_lock_class+0x74/0x170 [ 178.998453][ T7266] ? register_lock_class+0x51/0x320 [ 178.998479][ T7266] ? __lock_acquire+0xab9/0xd20 [ 178.998532][ T7266] kvm_vcpu_ioctl+0x99a/0xed0 [ 178.998561][ T7266] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 178.998590][ T7266] ? __fget_files+0x2a/0x420 [ 178.998606][ T7266] ? __fget_files+0x3a0/0x420 [ 178.998623][ T7266] ? __fget_files+0x2a/0x420 [ 178.998658][ T7266] ? bpf_lsm_file_ioctl+0x9/0x20 [ 178.998685][ T7266] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 178.998709][ T7266] __se_sys_ioctl+0xfc/0x170 [ 178.998729][ T7266] do_syscall_64+0xfa/0xfa0 [ 178.998745][ T7266] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.998757][ T7266] ? clear_bhb_loop+0x60/0xb0 [ 178.998775][ T7266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.998794][ T7266] RIP: 0033:0x7f5c9018f6c9 [ 178.998813][ T7266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.998830][ T7266] RSP: 002b:00007f5c91092038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 178.998852][ T7266] RAX: ffffffffffffffda RBX: 00007f5c903e5fa0 RCX: 00007f5c9018f6c9 [ 178.998867][ T7266] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 178.998875][ T7266] RBP: 00007f5c91092090 R08: 0000000000000000 R09: 0000000000000000 [ 178.998883][ T7266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.998890][ T7266] R13: 00007f5c903e6038 R14: 00007f5c903e5fa0 R15: 00007fffa26fd488 [ 178.998913][ T7266] [ 179.211451][ T10] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 179.434827][ T980] f81534 2-1:0.12: f81534_set_register: reg: 1001 data: f1 failed: -71 [ 179.443776][ T980] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 179.452940][ T980] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 179.460662][ T980] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 179.474940][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.486846][ T980] usb 2-1: USB disconnect, device number 35 [ 179.494162][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.512309][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.522581][ T10] usb 1-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 179.532307][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.547262][ T10] usb 1-1: config 0 descriptor?? [ 179.561193][ T10] rndis_host 1-1:0.0: skipping garbage [ 179.567558][ T10] usb 1-1: bad CDC descriptors [ 179.651992][ T5895] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 179.761956][ T7264] netlink: 'syz.0.513': attribute type 39 has an invalid length. [ 179.787581][ T980] usb 1-1: USB disconnect, device number 26 [ 179.821411][ T5895] usb 3-1: Using ep0 maxpacket: 8 [ 179.828313][ T5895] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.839364][ T5895] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 179.848699][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.859051][ T5895] usb 3-1: config 0 descriptor?? [ 179.867995][ T5895] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 180.106701][ T7280] netlink: 'syz.3.520': attribute type 3 has an invalid length. [ 180.115891][ T7280] netlink: 132 bytes leftover after parsing attributes in process `syz.3.520'. [ 180.378765][ T7291] input: syz1 as /devices/virtual/input/input11 [ 180.451385][ T980] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 180.648065][ T980] usb 4-1: unable to get BOS descriptor or descriptor too short [ 180.658074][ T980] usb 4-1: not running at top speed; connect to a high speed hub [ 180.675388][ T980] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 180.694823][ T980] usb 4-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=74.1b [ 180.704392][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.715850][ T980] usb 4-1: Product: syz [ 180.720292][ T980] usb 4-1: Manufacturer: syz [ 180.730915][ T980] usb 4-1: SerialNumber: syz [ 180.887592][ T5895] gspca_vc032x: reg_r err -32 [ 180.892504][ T5895] vc032x 3-1:0.0: probe with driver vc032x failed with error -32 [ 180.971386][ T5854] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 181.053417][ T980] usb 4-1: USB disconnect, device number 37 [ 181.134900][ T5854] usb 1-1: config 0 has an invalid interface number: 16 but max is 0 [ 181.146541][ T5854] usb 1-1: config 0 has no interface number 0 [ 181.153099][ T5854] usb 1-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 181.163282][ T5854] usb 1-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 181.175944][ T5854] usb 1-1: New USB device found, idVendor=067b, idProduct=0612, bcdDevice=e0.77 [ 181.185626][ T5854] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.194502][ T5854] usb 1-1: Product: syz [ 181.198819][ T5854] usb 1-1: Manufacturer: syz [ 181.203940][ T5854] usb 1-1: SerialNumber: syz [ 181.212278][ T5854] usb 1-1: config 0 descriptor?? [ 181.220027][ T7295] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 181.229362][ T7295] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 181.447013][ T5854] pl2303 1-1:0.16: required interrupt-in endpoint missing [ 181.463726][ T5854] usb 1-1: USB disconnect, device number 27 [ 181.521883][ T980] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 181.671372][ T980] usb 2-1: Using ep0 maxpacket: 32 [ 181.678789][ T980] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 181.687117][ T980] usb 2-1: config 0 has no interface number 0 [ 181.693440][ T980] usb 2-1: config 0 interface 12 has no altsetting 0 [ 181.702669][ T980] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 181.711948][ T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.720025][ T980] usb 2-1: Product: syz [ 181.724741][ T980] usb 2-1: Manufacturer: syz [ 181.729418][ T980] usb 2-1: SerialNumber: syz [ 181.737372][ T980] usb 2-1: config 0 descriptor?? [ 182.421296][ T793] usb 3-1: USB disconnect, device number 30 [ 182.741601][ T5854] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 182.755989][ T7316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 182.901361][ T5854] usb 1-1: Using ep0 maxpacket: 8 [ 182.908550][ T5854] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.918865][ T5854] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 182.928008][ T5854] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.939831][ T5854] usb 1-1: config 0 descriptor?? [ 182.951733][ T5854] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 182.971591][ T10] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 183.124201][ T10] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 183.132539][ T10] usb 4-1: config 0 has no interface number 0 [ 183.138832][ T10] usb 4-1: config 0 interface 41 has no altsetting 0 [ 183.150769][ T10] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 183.160600][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.169139][ T10] usb 4-1: Product: syz [ 183.173470][ T10] usb 4-1: Manufacturer: syz [ 183.178112][ T10] usb 4-1: SerialNumber: syz [ 183.186211][ T10] usb 4-1: config 0 descriptor?? [ 183.451400][ T10] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 183.476115][ T10] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 183.526435][ T10] usb 4-1: USB disconnect, device number 38 [ 183.838629][ T7333] kvm: apic: phys broadcast and lowest prio [ 183.931502][ T10] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 183.965284][ T5854] gspca_vc032x: reg_r err -32 [ 183.970138][ T5854] vc032x 1-1:0.0: probe with driver vc032x failed with error -32 [ 184.083619][ T10] usb 4-1: config 0 has an invalid interface number: 16 but max is 0 [ 184.093708][ T10] usb 4-1: config 0 has no interface number 0 [ 184.099905][ T10] usb 4-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 184.111581][ T10] usb 4-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 184.126385][ T10] usb 4-1: New USB device found, idVendor=067b, idProduct=0612, bcdDevice=e0.77 [ 184.136057][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.144218][ T10] usb 4-1: Product: syz [ 184.149873][ T10] usb 4-1: Manufacturer: syz [ 184.154637][ T10] usb 4-1: SerialNumber: syz [ 184.172309][ T10] usb 4-1: config 0 descriptor?? [ 184.180355][ T7326] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 184.197348][ T7326] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 184.417486][ T10] pl2303 4-1:0.16: required interrupt-in endpoint missing [ 184.434536][ T10] usb 4-1: USB disconnect, device number 39 [ 184.581376][ T5915] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 184.597895][ T980] f81534 2-1:0.12: f81534_set_register: reg: 1001 data: f1 failed: -71 [ 184.606462][ T980] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 184.614982][ T980] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 184.622718][ T980] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 184.635444][ T980] usb 2-1: USB disconnect, device number 36 [ 184.733573][ T5915] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.743946][ T5915] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.755072][ T5915] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.764897][ T5915] usb 3-1: config 1 interface 1 altsetting 157 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 184.778536][ T5915] usb 3-1: config 1 interface 1 has no altsetting 0 [ 184.787174][ T5915] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 184.796324][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.804389][ T5915] usb 3-1: Product: syz [ 184.808568][ T5915] usb 3-1: Manufacturer: syz [ 184.813280][ T5915] usb 3-1: SerialNumber: syz [ 184.825011][ T5915] usb 3-1: selecting invalid altsetting 0 [ 184.831771][ T5915] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 184.843768][ T5915] usb 3-1: selecting invalid altsetting 0 [ 184.849520][ T5915] usbtest 3-1:1.1: probe with driver usbtest failed with error -22 [ 185.033474][ T7342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.048611][ T7346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.050851][ T7342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.069891][ T7346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.284265][ T7357] netlink: 19 bytes leftover after parsing attributes in process `syz.3.552'. [ 185.500162][ T43] usb 1-1: USB disconnect, device number 28 [ 185.532950][ T5915] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 185.695693][ T5915] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 185.705153][ T10] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 185.712885][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.720872][ T5915] usb 2-1: Product: syz [ 185.725325][ T5915] usb 2-1: Manufacturer: syz [ 185.730061][ T5915] usb 2-1: SerialNumber: syz [ 185.738198][ T5915] usb 2-1: config 0 descriptor?? [ 185.883507][ T10] usb 4-1: config 0 has an invalid interface number: 16 but max is 0 [ 185.891853][ T10] usb 4-1: config 0 has no interface number 0 [ 185.898026][ T10] usb 4-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 185.908321][ T10] usb 4-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 185.924166][ T10] usb 4-1: New USB device found, idVendor=067b, idProduct=0612, bcdDevice=e0.77 [ 185.933347][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.941521][ T10] usb 4-1: Product: syz [ 185.945764][ T10] usb 4-1: Manufacturer: syz [ 185.950614][ T10] usb 4-1: SerialNumber: syz [ 185.958726][ T10] usb 4-1: config 0 descriptor?? [ 185.965320][ T7365] raw-gadget.5 gadget.3: fail, usb_ep_enable returned -22 [ 185.972791][ T7365] raw-gadget.5 gadget.3: fail, usb_ep_enable returned -22 [ 185.981534][ T43] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 186.131371][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 186.138826][ T43] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 186.147044][ T43] usb 1-1: config 0 has no interface number 0 [ 186.153297][ T43] usb 1-1: config 0 interface 12 has no altsetting 0 [ 186.157277][ T5915] airspy 2-1:0.0: usb_control_msg() failed -71 request 0a [ 186.168434][ T5915] airspy 2-1:0.0: Could not detect board [ 186.175116][ T5915] airspy 2-1:0.0: probe with driver airspy failed with error -71 [ 186.186470][ T43] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 186.198465][ T10] pl2303 4-1:0.16: required interrupt-in endpoint missing [ 186.215360][ T5915] usb 2-1: USB disconnect, device number 37 [ 186.224026][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.228629][ T10] usb 4-1: USB disconnect, device number 40 [ 186.240393][ T43] usb 1-1: Product: syz [ 186.245234][ T43] usb 1-1: Manufacturer: syz [ 186.250711][ T43] usb 1-1: SerialNumber: syz [ 186.265608][ T43] usb 1-1: config 0 descriptor?? [ 186.825478][ T7376] capability: warning: `syz.3.560' uses deprecated v2 capabilities in a way that may be insecure [ 187.101527][ T5854] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 187.261450][ T5854] usb 4-1: Using ep0 maxpacket: 32 [ 187.272095][ T5854] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 187.280280][ T5854] usb 4-1: config 0 has no interface number 0 [ 187.286734][ T5854] usb 4-1: config 0 interface 12 has no altsetting 0 [ 187.291505][ T10] usb 3-1: USB disconnect, device number 31 [ 187.297111][ T5854] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 187.309620][ T5854] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.330527][ T5854] usb 4-1: Product: syz [ 187.335408][ T5854] usb 4-1: Manufacturer: syz [ 187.340104][ T5854] usb 4-1: SerialNumber: syz [ 187.352420][ T5854] usb 4-1: config 0 descriptor?? [ 187.726485][ T7393] netlink: 'syz.2.566': attribute type 6 has an invalid length. [ 188.041645][ T5876] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 188.203259][ T5876] usb 3-1: Using ep0 maxpacket: 16 [ 188.210226][ T5876] usb 3-1: config 4 has an invalid interface number: 131 but max is 0 [ 188.218517][ T5876] usb 3-1: config 4 has no interface number 0 [ 188.224711][ T5876] usb 3-1: config 4 interface 131 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 188.234697][ T5876] usb 3-1: config 4 interface 131 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 188.244762][ T5876] usb 3-1: config 4 interface 131 has no altsetting 0 [ 188.255134][ T5876] usb 3-1: New USB device found, idVendor=05ef, idProduct=8884, bcdDevice=53.db [ 188.264368][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.272529][ T5876] usb 3-1: Product: syz [ 188.276745][ T5876] usb 3-1: Manufacturer: syz [ 188.281596][ T5876] usb 3-1: SerialNumber: syz [ 188.291168][ T7395] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 188.298735][ T7395] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 188.513538][ T5915] usb 3-1: USB disconnect, device number 32 [ 189.127914][ T43] f81534 1-1:0.12: f81534_set_register: reg: 1001 data: f1 failed: -71 [ 189.140808][ T43] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 189.151522][ T43] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 189.159272][ T43] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 189.198935][ T43] usb 1-1: USB disconnect, device number 29 [ 189.431379][ T5915] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 189.605232][ T5915] usb 2-1: unable to get BOS descriptor or descriptor too short [ 189.635326][ T5915] usb 2-1: config 114 has an invalid interface number: 227 but max is 0 [ 189.643840][ T5915] usb 2-1: config 114 has no interface number 0 [ 189.651960][ T5915] usb 2-1: config 114 interface 227 altsetting 4 endpoint 0x1 has an invalid bInterval 126, changing to 10 [ 189.668577][ T5915] usb 2-1: config 114 interface 227 has no altsetting 0 [ 189.683363][ T5915] usb 2-1: New USB device found, idVendor=0499, idProduct=1051, bcdDevice=69.2d [ 189.696605][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.707845][ T5915] usb 2-1: Product: syz [ 189.721399][ T5915] usb 2-1: Manufacturer: syz [ 189.726069][ T5915] usb 2-1: SerialNumber: syz [ 189.959163][ T5915] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 189.975825][ T5915] usb 2-1: invalid MIDI in EP 0 [ 189.999863][ T5854] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 190.013682][ T5854] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 190.021046][ T5854] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 190.030504][ T5854] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 190.053687][ T5854] usb 4-1: USB disconnect, device number 41 [ 190.218326][ T5915] snd-usb-audio 2-1:114.227: probe with driver snd-usb-audio failed with error -22 [ 190.248958][ T5915] usb 2-1: USB disconnect, device number 38 [ 190.290001][ T5838] udevd[5838]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:114.227/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 190.520146][ T7431] netlink: 212356 bytes leftover after parsing attributes in process `syz.2.581'. [ 190.667455][ T7437] overlayfs: workdir and upperdir must reside under the same mount [ 190.881417][ T5915] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 190.907636][ T7445] FAULT_INJECTION: forcing a failure. [ 190.907636][ T7445] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.921969][ T7445] CPU: 1 UID: 0 PID: 7445 Comm: syz.2.588 Not tainted syzkaller #0 PREEMPT(full) [ 190.921999][ T7445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 190.922011][ T7445] Call Trace: [ 190.922019][ T7445] [ 190.922028][ T7445] dump_stack_lvl+0x189/0x250 [ 190.922060][ T7445] ? __pfx____ratelimit+0x10/0x10 [ 190.922087][ T7445] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.922111][ T7445] ? __pfx__printk+0x10/0x10 [ 190.922151][ T7445] should_fail_ex+0x414/0x560 [ 190.922186][ T7445] _copy_to_user+0x31/0xb0 [ 190.922213][ T7445] simple_read_from_buffer+0xe1/0x170 [ 190.922241][ T7445] proc_fail_nth_read+0x1b3/0x220 [ 190.922274][ T7445] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 190.922307][ T7445] ? rw_verify_area+0x2a6/0x4d0 [ 190.922336][ T7445] ? __lock_acquire+0xab9/0xd20 [ 190.922354][ T7445] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 190.922381][ T7445] vfs_read+0x200/0xa30 [ 190.922404][ T7445] ? fdget_pos+0x247/0x320 [ 190.922425][ T7445] ? __pfx___mutex_lock+0x10/0x10 [ 190.922449][ T7445] ? __pfx_vfs_read+0x10/0x10 [ 190.922474][ T7445] ? __fget_files+0x2a/0x420 [ 190.922495][ T7445] ? __fget_files+0x3a0/0x420 [ 190.922511][ T7445] ? __fget_files+0x2a/0x420 [ 190.922537][ T7445] ksys_read+0x145/0x250 [ 190.922554][ T7445] ? __pfx_ksys_read+0x10/0x10 [ 190.922572][ T7445] ? do_syscall_64+0xbe/0xfa0 [ 190.922598][ T7445] do_syscall_64+0xfa/0xfa0 [ 190.922620][ T7445] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.922636][ T7445] ? clear_bhb_loop+0x60/0xb0 [ 190.922655][ T7445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.922670][ T7445] RIP: 0033:0x7f5c9018e0dc [ 190.922685][ T7445] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 190.922700][ T7445] RSP: 002b:00007f5c91092030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 190.922718][ T7445] RAX: ffffffffffffffda RBX: 00007f5c903e5fa0 RCX: 00007f5c9018e0dc [ 190.922730][ T7445] RDX: 000000000000000f RSI: 00007f5c910920a0 RDI: 0000000000000004 [ 190.922740][ T7445] RBP: 00007f5c91092090 R08: 0000000000000000 R09: 0000000000000000 [ 190.922750][ T7445] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 190.922760][ T7445] R13: 00007f5c903e6038 R14: 00007f5c903e5fa0 R15: 00007fffa26fd488 [ 190.922788][ T7445] [ 191.181342][ T5915] usb 4-1: Using ep0 maxpacket: 32 [ 191.190168][ T5915] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 191.198824][ T5915] usb 4-1: config 0 has no interface number 0 [ 191.205713][ T5915] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 191.221497][ T5916] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 191.256236][ T5915] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 191.288689][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.332746][ T5915] usb 4-1: Product: syz [ 191.336984][ T5915] usb 4-1: Manufacturer: syz [ 191.346650][ T5915] usb 4-1: SerialNumber: syz [ 191.386518][ T5916] usb 2-1: Using ep0 maxpacket: 32 [ 191.390073][ T5915] usb 4-1: config 0 descriptor?? [ 191.393610][ T5916] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 191.393643][ T5916] usb 2-1: config 0 has no interface number 0 [ 191.393691][ T5916] usb 2-1: config 0 interface 12 has no altsetting 0 [ 191.403689][ T5916] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 191.403724][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.403746][ T5916] usb 2-1: Product: syz [ 191.403763][ T5916] usb 2-1: Manufacturer: syz [ 191.403779][ T5916] usb 2-1: SerialNumber: syz [ 191.409876][ T5915] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 191.409915][ T5915] em28xx 4-1:0.132: Video interface 132 found: [ 191.415216][ T5916] usb 2-1: config 0 descriptor?? [ 191.781740][ T980] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 191.805708][ T5915] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 191.951818][ T980] usb 3-1: Using ep0 maxpacket: 8 [ 191.961953][ T980] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.972479][ T980] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 191.981881][ T980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.009000][ T980] usb 3-1: config 0 descriptor?? [ 192.025294][ T980] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 192.100330][ T5915] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 192.109617][ T5915] em28xx 4-1:0.132: board has no eeprom [ 192.173764][ T5915] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 192.182872][ T5915] em28xx 4-1:0.132: analog set to bulk mode. [ 192.189286][ T10] em28xx 4-1:0.132: Registering V4L2 extension [ 192.209135][ T5915] usb 4-1: USB disconnect, device number 42 [ 192.234584][ T5915] em28xx 4-1:0.132: Disconnecting em28xx [ 192.449009][ T10] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 192.457775][ T10] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 192.465505][ T10] em28xx 4-1:0.132: No AC97 audio processor [ 192.478352][ T10] usb 4-1: Decoder not found [ 192.483295][ T10] em28xx 4-1:0.132: failed to create media graph [ 192.490956][ T10] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 192.520985][ T10] em28xx 4-1:0.132: Remote control support is not available for this card. [ 192.541492][ T5915] em28xx 4-1:0.132: Closing input extension [ 192.556642][ T5915] em28xx 4-1:0.132: Freeing device [ 192.696609][ T7486] FAULT_INJECTION: forcing a failure. [ 192.696609][ T7486] name failslab, interval 1, probability 0, space 0, times 0 [ 192.709357][ T7486] CPU: 1 UID: 0 PID: 7486 Comm: syz.3.604 Not tainted syzkaller #0 PREEMPT(full) [ 192.709385][ T7486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 192.709396][ T7486] Call Trace: [ 192.709405][ T7486] [ 192.709414][ T7486] dump_stack_lvl+0x189/0x250 [ 192.709444][ T7486] ? __pfx____ratelimit+0x10/0x10 [ 192.709469][ T7486] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.709493][ T7486] ? __pfx__printk+0x10/0x10 [ 192.709522][ T7486] ? __pfx___might_resched+0x10/0x10 [ 192.709542][ T7486] ? fs_reclaim_acquire+0x7d/0x100 [ 192.709572][ T7486] should_fail_ex+0x414/0x560 [ 192.709600][ T7486] should_failslab+0xa8/0x100 [ 192.709618][ T7486] __kmalloc_node_track_caller_noprof+0xe2/0x810 [ 192.709644][ T7486] ? ovl_parse_param_lowerdir+0x547/0xaa0 [ 192.709673][ T7486] kstrdup+0x42/0x100 [ 192.709703][ T7486] ovl_parse_param_lowerdir+0x547/0xaa0 [ 192.709732][ T7486] ? __pfx_ovl_parse_param_lowerdir+0x10/0x10 [ 192.709752][ T7486] ovl_parse_param+0x51b/0xee0 [ 192.709768][ T7486] ? __pfx_ovl_parse_param+0x10/0x10 [ 192.709785][ T7486] ? rcu_is_watching+0x15/0xb0 [ 192.709814][ T7486] ? static_key_count+0x41/0x70 [ 192.709838][ T7486] vfs_parse_fs_param+0x1a9/0x420 [ 192.709865][ T7486] vfs_parse_monolithic_sep+0x25d/0x320 [ 192.709887][ T7486] ? __pfx_ovl_next_opt+0x10/0x10 [ 192.709900][ T7486] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 192.709919][ T7486] ? alloc_fs_context+0x665/0x7d0 [ 192.709945][ T7486] do_new_mount+0x2cb/0xa10 [ 192.709964][ T7486] ? apparmor_capable+0x137/0x1b0 [ 192.709994][ T7486] ? security_capable+0x7e/0x2e0 [ 192.710014][ T7486] ? __pfx_do_new_mount+0x10/0x10 [ 192.710032][ T7486] ? ns_capable+0x8a/0xf0 [ 192.710047][ T7486] ? path_mount+0x628/0xff0 [ 192.710057][ T7486] ? kmem_cache_free+0x19b/0x690 [ 192.710078][ T7486] __se_sys_mount+0x313/0x410 [ 192.710101][ T7486] ? __pfx___se_sys_mount+0x10/0x10 [ 192.710127][ T7486] ? do_syscall_64+0xbe/0xfa0 [ 192.710151][ T7486] ? __x64_sys_mount+0x20/0xc0 [ 192.710174][ T7486] do_syscall_64+0xfa/0xfa0 [ 192.710197][ T7486] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.710209][ T7486] ? clear_bhb_loop+0x60/0xb0 [ 192.710222][ T7486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.710234][ T7486] RIP: 0033:0x7f58adb8f6c9 [ 192.710249][ T7486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.710266][ T7486] RSP: 002b:00007f58aea6b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 192.710288][ T7486] RAX: ffffffffffffffda RBX: 00007f58adde5fa0 RCX: 00007f58adb8f6c9 [ 192.710302][ T7486] RDX: 0000200000000b80 RSI: 0000200000000100 RDI: 0000000000000000 [ 192.710315][ T7486] RBP: 00007f58aea6b090 R08: 0000200000000200 R09: 0000000000000000 [ 192.710327][ T7486] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002 [ 192.710338][ T7486] R13: 00007f58adde6038 R14: 00007f58adde5fa0 R15: 00007ffdedc005f8 [ 192.710361][ T7486] [ 193.003293][ T5854] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 193.161350][ T5854] usb 1-1: Using ep0 maxpacket: 16 [ 193.170144][ T5854] usb 1-1: config 0 has an invalid interface number: 103 but max is 0 [ 193.179701][ T5854] usb 1-1: config 0 has no interface number 0 [ 193.186159][ T5854] usb 1-1: config 0 interface 103 has no altsetting 0 [ 193.196503][ T5854] usb 1-1: New USB device found, idVendor=2770, idProduct=9051, bcdDevice=f4.a9 [ 193.205677][ T5854] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.214122][ T5854] usb 1-1: Product: syz [ 193.218357][ T5854] usb 1-1: Manufacturer: syz [ 193.223126][ T5854] usb 1-1: SerialNumber: syz [ 193.236677][ T5854] usb 1-1: config 0 descriptor?? [ 193.261483][ T5854] gspca_main: sq905c-2.14.0 probing 2770:9051 [ 193.450355][ T7483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.459996][ T7483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.473921][ T7483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.483304][ T7483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.495023][ T5854] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 193.504213][ T5854] sq905c 1-1:0.103: Get version command failed [ 193.510497][ T5854] sq905c 1-1:0.103: probe with driver sq905c failed with error -71 [ 193.521863][ T5854] usb 1-1: USB disconnect, device number 30 [ 193.523507][ T5915] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 193.642558][ T980] gspca_vc032x: reg_w err -71 [ 193.647489][ T980] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 193.658515][ T980] usb 3-1: USB disconnect, device number 33 [ 193.691424][ T5915] usb 4-1: Using ep0 maxpacket: 16 [ 193.698497][ T5915] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 193.712405][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 193.725759][ T5915] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 193.734857][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.742961][ T5915] usb 4-1: Product: syz [ 193.747203][ T5915] usb 4-1: Manufacturer: syz [ 193.752156][ T5915] usb 4-1: SerialNumber: syz [ 193.759634][ T5915] usb 4-1: config 0 descriptor?? [ 193.768020][ T5915] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 193.777488][ T5915] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 194.190338][ T7495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.218982][ T7495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.252760][ T7496] tmpfs: Bad value for 'mpol' [ 194.293634][ T5916] f81534 2-1:0.12: f81534_set_register: reg: 1001 data: f1 failed: -71 [ 194.309075][ T5916] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 194.330149][ T5916] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 194.351787][ T5916] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 194.376599][ T5916] usb 2-1: USB disconnect, device number 39 [ 194.412148][ T5915] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 194.418946][ T5915] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 194.441837][ T5915] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 194.450301][ T5915] em28xx 4-1:0.0: No AC97 audio processor [ 194.491999][ T5915] usb 4-1: USB disconnect, device number 43 [ 194.499527][ T5915] em28xx 4-1:0.0: Disconnecting em28xx [ 194.525139][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.532023][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.542919][ T7507] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 194.550018][ T7507] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 194.575093][ T5915] em28xx 4-1:0.0: Freeing device [ 194.608742][ T7507] vhci_hcd vhci_hcd.0: Device attached [ 194.639540][ T7510] vhci_hcd: connection closed [ 194.642307][ T13] vhci_hcd vhci_hcd.3: stop threads [ 194.669176][ T13] vhci_hcd vhci_hcd.3: release socket [ 194.677253][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 195.623719][ T7530] FAULT_INJECTION: forcing a failure. [ 195.623719][ T7530] name failslab, interval 1, probability 0, space 0, times 0 [ 195.663132][ T5854] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 195.671062][ T7530] CPU: 0 UID: 0 PID: 7530 Comm: syz.2.619 Not tainted syzkaller #0 PREEMPT(full) [ 195.671093][ T7530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 195.671106][ T7530] Call Trace: [ 195.671115][ T7530] [ 195.671124][ T7530] dump_stack_lvl+0x189/0x250 [ 195.671155][ T7530] ? __pfx____ratelimit+0x10/0x10 [ 195.671183][ T7530] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.671208][ T7530] ? __pfx__printk+0x10/0x10 [ 195.671244][ T7530] ? __pfx___might_resched+0x10/0x10 [ 195.671266][ T7530] ? fs_reclaim_acquire+0x7d/0x100 [ 195.671299][ T7530] should_fail_ex+0x414/0x560 [ 195.671332][ T7530] should_failslab+0xa8/0x100 [ 195.671361][ T7530] __kmalloc_cache_node_noprof+0x88/0x6f0 [ 195.671385][ T7530] ? __get_vm_area_node+0x13f/0x300 [ 195.671412][ T7530] __get_vm_area_node+0x13f/0x300 [ 195.671439][ T7530] __vmalloc_node_range_noprof+0x365/0x1640 [ 195.671462][ T7530] ? copy_process+0x4ea/0x3930 [ 195.671487][ T7530] ? percpu_ref_get_many+0x19/0x140 [ 195.671517][ T7530] ? percpu_ref_get_many+0x19/0x140 [ 195.671545][ T7530] ? __memcg_slab_post_alloc_hook+0x517/0x7d0 [ 195.671576][ T7530] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 195.671667][ T7530] ? memcpy_and_pad+0x48/0x80 [ 195.671697][ T7530] __vmalloc_node_noprof+0xc2/0x110 [ 195.671720][ T7530] ? copy_process+0x4ea/0x3930 [ 195.671737][ T7530] ? copy_process+0x4ea/0x3930 [ 195.671760][ T7530] dup_task_struct+0x3d4/0x830 [ 195.671779][ T7530] ? lockdep_hardirqs_on+0x9c/0x150 [ 195.671807][ T7530] copy_process+0x4ea/0x3930 [ 195.671854][ T7530] ? __pfx_copy_process+0x10/0x10 [ 195.671888][ T7530] vhost_task_create+0x1ce/0x320 [ 195.671911][ T7530] ? arch_stack_walk+0xfc/0x150 [ 195.671930][ T7530] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 195.671953][ T7530] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 195.671975][ T7530] ? __pfx_vhost_task_create+0x10/0x10 [ 195.672007][ T7530] ? __pfx_vhost_task_fn+0x10/0x10 [ 195.672059][ T7530] kvm_mmu_post_init_vm+0x14c/0x300 [ 195.672088][ T7530] kvm_arch_vcpu_ioctl_run+0xdc/0x1cb0 [ 195.672123][ T7530] ? __mutex_trylock_common+0x153/0x260 [ 195.672149][ T7530] ? __pfx___mutex_trylock_common+0x10/0x10 [ 195.672172][ T7530] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 195.672200][ T7530] ? rcu_is_watching+0x15/0xb0 [ 195.672222][ T7530] ? trace_contention_end+0x39/0x120 [ 195.672243][ T7530] ? look_up_lock_class+0x74/0x170 [ 195.672270][ T7530] ? register_lock_class+0x51/0x320 [ 195.672294][ T7530] ? __lock_acquire+0xab9/0xd20 [ 195.672343][ T7530] kvm_vcpu_ioctl+0x99a/0xed0 [ 195.672374][ T7530] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 195.672421][ T7530] ? __fget_files+0x2a/0x420 [ 195.672446][ T7530] ? __fget_files+0x3a0/0x420 [ 195.672465][ T7530] ? __fget_files+0x2a/0x420 [ 195.672488][ T7530] ? bpf_lsm_file_ioctl+0x9/0x20 [ 195.672515][ T7530] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 195.672538][ T7530] __se_sys_ioctl+0xfc/0x170 [ 195.672566][ T7530] do_syscall_64+0xfa/0xfa0 [ 195.672591][ T7530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.672617][ T7530] ? clear_bhb_loop+0x60/0xb0 [ 195.672640][ T7530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.672657][ T7530] RIP: 0033:0x7f5c9018f6c9 [ 195.672674][ T7530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.672690][ T7530] RSP: 002b:00007f5c91092038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 195.672711][ T7530] RAX: ffffffffffffffda RBX: 00007f5c903e5fa0 RCX: 00007f5c9018f6c9 [ 195.672724][ T7530] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 195.672735][ T7530] RBP: 00007f5c91092090 R08: 0000000000000000 R09: 0000000000000000 [ 195.672746][ T7530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.672757][ T7530] R13: 00007f5c903e6038 R14: 00007f5c903e5fa0 R15: 00007fffa26fd488 [ 195.672790][ T7530] [ 195.675234][ T7530] syz.2.619: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 195.863455][ T5854] usb 1-1: Using ep0 maxpacket: 32 [ 195.873319][ T7530] ,cpuset= [ 195.918260][ T5854] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.959828][ T7530] /,mems_allowed=0-1 [ 196.247594][ T7530] CPU: 0 UID: 0 PID: 7530 Comm: syz.2.619 Not tainted syzkaller #0 PREEMPT(full) [ 196.247622][ T7530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 196.247643][ T7530] Call Trace: [ 196.247651][ T7530] [ 196.247660][ T7530] dump_stack_lvl+0x189/0x250 [ 196.247692][ T7530] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 196.247725][ T7530] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.247751][ T7530] ? __pfx__printk+0x10/0x10 [ 196.247776][ T7530] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 196.247808][ T7530] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 196.247849][ T7530] warn_alloc+0x214/0x310 [ 196.247884][ T7530] ? __pfx_warn_alloc+0x10/0x10 [ 196.247912][ T7530] ? __get_vm_area_node+0x13f/0x300 [ 196.247943][ T7530] ? __get_vm_area_node+0x2b5/0x300 [ 196.247977][ T7530] __vmalloc_node_range_noprof+0x38a/0x1640 [ 196.248010][ T7530] ? percpu_ref_get_many+0x19/0x140 [ 196.248043][ T7530] ? percpu_ref_get_many+0x19/0x140 [ 196.248076][ T7530] ? __memcg_slab_post_alloc_hook+0x517/0x7d0 [ 196.248111][ T7530] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 196.248146][ T7530] ? memcpy_and_pad+0x48/0x80 [ 196.248180][ T7530] __vmalloc_node_noprof+0xc2/0x110 [ 196.248205][ T7530] ? copy_process+0x4ea/0x3930 [ 196.248226][ T7530] ? copy_process+0x4ea/0x3930 [ 196.248252][ T7530] dup_task_struct+0x3d4/0x830 [ 196.248275][ T7530] ? lockdep_hardirqs_on+0x9c/0x150 [ 196.248307][ T7530] copy_process+0x4ea/0x3930 [ 196.248361][ T7530] ? __pfx_copy_process+0x10/0x10 [ 196.248399][ T7530] vhost_task_create+0x1ce/0x320 [ 196.248425][ T7530] ? arch_stack_walk+0xfc/0x150 [ 196.248445][ T7530] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 196.248471][ T7530] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 196.248497][ T7530] ? __pfx_vhost_task_create+0x10/0x10 [ 196.248534][ T7530] ? __pfx_vhost_task_fn+0x10/0x10 [ 196.248584][ T7530] kvm_mmu_post_init_vm+0x14c/0x300 [ 196.248617][ T7530] kvm_arch_vcpu_ioctl_run+0xdc/0x1cb0 [ 196.248667][ T7530] ? __mutex_trylock_common+0x153/0x260 [ 196.248697][ T7530] ? __pfx___mutex_trylock_common+0x10/0x10 [ 196.248729][ T7530] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 196.248761][ T7530] ? rcu_is_watching+0x15/0xb0 [ 196.248786][ T7530] ? trace_contention_end+0x39/0x120 [ 196.248810][ T7530] ? look_up_lock_class+0x74/0x170 [ 196.248840][ T7530] ? register_lock_class+0x51/0x320 [ 196.248868][ T7530] ? __lock_acquire+0xab9/0xd20 [ 196.248923][ T7530] kvm_vcpu_ioctl+0x99a/0xed0 [ 196.248958][ T7530] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 196.249012][ T7530] ? __fget_files+0x2a/0x420 [ 196.249041][ T7530] ? __fget_files+0x3a0/0x420 [ 196.249062][ T7530] ? __fget_files+0x2a/0x420 [ 196.249089][ T7530] ? bpf_lsm_file_ioctl+0x9/0x20 [ 196.249118][ T7530] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 196.249145][ T7530] __se_sys_ioctl+0xfc/0x170 [ 196.249178][ T7530] do_syscall_64+0xfa/0xfa0 [ 196.249207][ T7530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.249227][ T7530] ? clear_bhb_loop+0x60/0xb0 [ 196.249253][ T7530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.249273][ T7530] RIP: 0033:0x7f5c9018f6c9 [ 196.249292][ T7530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.249309][ T7530] RSP: 002b:00007f5c91092038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 196.249331][ T7530] RAX: ffffffffffffffda RBX: 00007f5c903e5fa0 RCX: 00007f5c9018f6c9 [ 196.249345][ T7530] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 196.249358][ T7530] RBP: 00007f5c91092090 R08: 0000000000000000 R09: 0000000000000000 [ 196.249371][ T7530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.249383][ T7530] R13: 00007f5c903e6038 R14: 00007f5c903e5fa0 R15: 00007fffa26fd488 [ 196.249420][ T7530] [ 196.249513][ T7530] Mem-Info: [ 196.395536][ T5854] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.581348][ T5915] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 196.604392][ T7530] active_anon:19925 inactive_anon:0 isolated_anon:0 [ 196.604392][ T7530] active_file:11867 inactive_file:39962 isolated_file:0 [ 196.604392][ T7530] unevictable:768 dirty:108 writeback:0 [ 196.604392][ T7530] slab_reclaimable:10391 slab_unreclaimable:93167 [ 196.604392][ T7530] mapped:34361 shmem:15101 pagetables:1264 [ 196.604392][ T7530] sec_pagetables:0 bounce:0 [ 196.604392][ T7530] kernel_misc_reclaimable:0 [ 196.604392][ T7530] free:1319458 free_pcp:12924 free_cma:0 [ 196.771336][ T7530] Node 0 active_anon:84200kB inactive_anon:0kB active_file:49568kB inactive_file:159648kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:140044kB dirty:428kB writeback:0kB shmem:63368kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11544kB pagetables:4812kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 196.809370][ T5854] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 196.814618][ T5915] usb 2-1: Using ep0 maxpacket: 32 [ 196.819025][ T5854] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.851404][ T5854] usb 1-1: config 0 descriptor?? [ 196.863270][ T5915] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 196.879185][ T5854] hub 1-1:0.0: USB hub found [ 196.891453][ T5915] usb 2-1: config 0 has no interface number 0 [ 196.897729][ T5915] usb 2-1: config 0 interface 12 has no altsetting 0 [ 196.916638][ T7530] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 196.958587][ T5915] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 196.989130][ T7530] Node 0 DMA free:15328kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:32kB free_cma:0kB [ 196.990171][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.071427][ T5915] usb 2-1: Product: syz [ 197.084771][ T5915] usb 2-1: Manufacturer: syz [ 197.089433][ T5915] usb 2-1: SerialNumber: syz [ 197.090512][ T7530] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 197.100530][ T7530] Node 0 [ 197.104578][ T5854] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 197.117100][ T5915] usb 2-1: config 0 descriptor?? [ 197.151747][ T7530] DMA32 free:1361604kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:99628kB inactive_anon:0kB active_file:50304kB inactive_file:159648kB unevictable:1536kB writepending:428kB zspages:0kB present:3129332kB managed:2551448kB mlocked:0kB bounce:0kB free_pcp:31348kB local_pcp:17244kB free_cma:0kB [ 197.294217][ T7530] lowmem_reserve[]: 0 0 0 0 0 [ 197.309572][ T7530] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 197.359595][ T5854] hid-generic 0003:046D:C31C.0005: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 197.412899][ T7530] lowmem_reserve[]: 0 0 0 0 0 [ 197.418015][ T7530] Node 1 Normal free:3881500kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19232kB local_pcp:11936kB free_cma:0kB [ 197.531385][ T7530] lowmem_reserve[]: 0 0 0 0 0 [ 197.551368][ T7530] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 197.681353][ T7530] Node 0 DMA32: 721*4kB (UME) 933*8kB (UE) 306*16kB (UE) 73*32kB (UE) 4*64kB (UME) 2*128kB (ME) 5*256kB (UME) 0*512kB 3*1024kB (UME) 1*2048kB (U) 320*4096kB (M) = 1335212kB [ 197.729597][ T7530] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 197.751579][ T7530] Node 1 Normal: 237*4kB (UME) 51*8kB (UME) 37*16kB [ 197.771375][ T5916] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 197.781300][ T7530] (UME) 86*32kB (UME) 35*64kB (UME) 10*128kB (UME) 4*256kB (ME) 3*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 944*4096kB (M) = 3881500kB [ 197.830598][ T7530] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 197.871387][ T7530] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 197.901863][ T980] usb 1-1: USB disconnect, device number 31 [ 197.929806][ T7530] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 197.976773][ T7530] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 197.987311][ T5916] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.003926][ T5916] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 198.014715][ T7530] 85651 total pagecache pages [ 198.019979][ T7530] 0 pages in swap cache [ 198.024468][ T7530] Free swap = 124996kB [ 198.028769][ T7530] Total swap = 124996kB [ 198.033344][ T7530] 2097051 pages RAM [ 198.037273][ T7530] 0 pages HighMem/MovableOnly [ 198.042580][ T7530] 427419 pages reserved [ 198.046865][ T7530] 0 pages cma reserved [ 198.053249][ T5916] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 198.062577][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.070637][ T5916] usb 4-1: Product: syz [ 198.089805][ T5916] usb 4-1: Manufacturer: syz [ 198.094583][ T5916] usb 4-1: SerialNumber: syz [ 198.332646][ T7550] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 198.965172][ T7550] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 199.174444][ T5916] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 199.181119][ T5916] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 199.188729][ T5916] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 199.375317][ T5916] cdc_ncm 4-1:1.0: setting tx_max = 88 [ 199.389034][ T5916] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 199.581551][ T5916] usb 4-1: USB disconnect, device number 44 [ 199.589563][ T5916] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 200.236538][ T5915] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 200.248542][ T5915] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 200.256788][ T5915] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 200.265405][ T5915] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 200.289957][ T5915] usb 2-1: USB disconnect, device number 40 [ 202.273283][ T7621] netlink: 'syz.0.644': attribute type 6 has an invalid length. [ 202.382831][ T43] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 202.543457][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.554844][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.564954][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 202.578157][ T43] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 202.587401][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.601901][ T43] usb 2-1: config 0 descriptor?? [ 202.661510][ T5916] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 202.821923][ T5916] usb 1-1: Using ep0 maxpacket: 32 [ 202.845733][ T5916] usb 1-1: config 0 has an invalid interface number: 66 but max is 0 [ 202.857475][ T5916] usb 1-1: config 0 has no interface number 0 [ 202.870423][ T5916] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 202.892037][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.900242][ T5916] usb 1-1: Product: syz [ 202.904572][ T5916] usb 1-1: Manufacturer: syz [ 202.909285][ T5916] usb 1-1: SerialNumber: syz [ 202.922755][ T5916] usb 1-1: config 0 descriptor?? [ 203.043350][ T7617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.056041][ T7617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.079033][ T43] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 203.097094][ T43] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 203.116385][ T43] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 203.135007][ T43] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 203.154000][ T43] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 203.172563][ T43] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 203.190476][ T43] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 203.208474][ T43] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 203.223695][ T43] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 203.241324][ T43] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 203.283399][ T43] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 203.328005][ T5916] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 203.336086][ T5916] dvb-usb: bulk message failed: -22 (2/0) [ 203.361697][ T5916] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 203.375725][ T43] usb 2-1: USB disconnect, device number 41 [ 203.382026][ T5916] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 203.382105][ T5916] usb 1-1: media controller created [ 203.414678][ T5916] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 203.446455][ T7631] fido_id[7631]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 203.508468][ T5916] cxusb: set interface failed [ 203.521321][ T5916] dvb-usb: bulk message failed: -22 (1/0) [ 203.566028][ T7623] cxusb: i2c rd: len=223 is too big! [ 203.566028][ T7623] [ 203.677963][ T5916] DVB: Unable to find symbol lgdt330x_attach() [ 203.695005][ T5916] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 203.831539][ T5916] rc_core: IR keymap rc-dvico-portable not found [ 203.837930][ T5916] Registered IR keymap rc-empty [ 203.845565][ T5916] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 203.862215][ T5916] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input12 [ 203.884423][ T5916] dvb-usb: schedule remote query interval to 100 msecs. [ 203.891686][ T5916] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 203.905780][ T5916] usb 1-1: USB disconnect, device number 32 [ 204.009528][ T5916] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 204.211462][ T43] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 204.231398][ T5876] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 204.361416][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 204.377157][ T43] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 204.378332][ T7641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.651'. [ 204.385336][ T5876] usb 2-1: Using ep0 maxpacket: 32 [ 204.385529][ T43] usb 3-1: config 0 has no interface number 0 [ 204.388661][ T43] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 204.415522][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.423918][ T5876] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 204.432230][ T5876] usb 2-1: config 0 has no interface number 0 [ 204.439030][ T43] usb 3-1: Product: syz [ 204.443842][ T5876] usb 2-1: config 0 interface 12 has no altsetting 0 [ 204.451899][ T43] usb 3-1: Manufacturer: syz [ 204.456784][ T43] usb 3-1: SerialNumber: syz [ 204.465337][ T5876] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 204.481998][ T43] usb 3-1: config 0 descriptor?? [ 204.487359][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.496194][ T5876] usb 2-1: Product: syz [ 204.503625][ T43] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 204.510769][ T5876] usb 2-1: Manufacturer: syz [ 204.515878][ T5876] usb 2-1: SerialNumber: syz [ 204.525715][ T5876] usb 2-1: config 0 descriptor?? [ 204.726165][ T7647] netlink: 'syz.0.654': attribute type 5 has an invalid length. [ 205.101399][ T980] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 205.252044][ T980] usb 1-1: Using ep0 maxpacket: 32 [ 205.265329][ T980] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 205.278953][ T980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 205.290017][ T980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 205.299980][ T980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 205.311169][ T980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 205.331530][ T43] gspca_spca1528: reg_w err -71 [ 205.337202][ T980] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 205.347391][ T980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.355975][ T980] usb 1-1: Product: syz [ 205.360173][ T980] usb 1-1: Manufacturer: syz [ 205.362203][ T43] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 205.376708][ T980] usb 1-1: SerialNumber: syz [ 205.378887][ T43] usb 3-1: USB disconnect, device number 34 [ 205.393960][ T980] usb 1-1: config 0 descriptor?? [ 205.559832][ T7639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.569202][ T7639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.605277][ T7651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.617065][ T7651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.618410][ T7653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.634445][ T7653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.661934][ T980] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 205.681901][ T980] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 205.694187][ T980] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 205.717420][ T980] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 205.724887][ T980] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 205.733965][ T980] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 205.741628][ T980] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 205.754233][ T980] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 205.771616][ T980] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 205.799621][ T980] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 205.806850][ T980] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 205.824234][ T980] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 205.836674][ T980] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 205.852038][ T980] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 205.868823][ T980] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 205.890963][ T980] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 205.913106][ T980] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 205.937248][ T980] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 205.963647][ T980] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 205.981048][ T980] input input13: Timeout waiting for response from device. [ 206.011516][ T980] usb 1-1: USB disconnect, device number 33 [ 206.447746][ T980] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 206.485946][ T7681] netlink: 'syz.2.668': attribute type 10 has an invalid length. [ 206.535501][ T7682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.667'. [ 206.618157][ T980] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.641431][ T980] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 206.664959][ T980] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 206.686729][ T980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.701613][ T980] usb 1-1: Product: syz [ 206.711621][ T980] usb 1-1: Manufacturer: syz [ 206.725143][ T980] usb 1-1: SerialNumber: syz [ 206.811473][ T5854] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 206.957604][ T7658] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 206.981383][ T5854] usb 4-1: Using ep0 maxpacket: 32 [ 206.987559][ T5854] usb 4-1: no configurations [ 206.993127][ T5854] usb 4-1: can't read configurations, error -22 [ 207.131887][ T5854] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 207.292530][ T5854] usb 4-1: Using ep0 maxpacket: 32 [ 207.300014][ T5854] usb 4-1: no configurations [ 207.305039][ T5854] usb 4-1: can't read configurations, error -22 [ 207.313592][ T5854] usb usb4-port1: attempt power cycle [ 207.415445][ T5876] f81534 2-1:0.12: f81534_set_register: reg: 1001 data: f1 failed: -71 [ 207.434026][ T5876] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 207.453199][ T5876] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 207.460911][ T5876] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 207.482872][ T5876] usb 2-1: USB disconnect, device number 42 [ 207.573291][ T7658] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 207.651420][ T5854] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 207.673628][ T5854] usb 4-1: Using ep0 maxpacket: 32 [ 207.679784][ T5854] usb 4-1: no configurations [ 207.684986][ T5854] usb 4-1: can't read configurations, error -22 [ 207.783716][ T980] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 207.790415][ T980] cdc_ncm 1-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 207.808396][ T980] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 207.821926][ T5854] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 207.842281][ T5854] usb 4-1: Using ep0 maxpacket: 32 [ 207.848704][ T5854] usb 4-1: no configurations [ 207.854305][ T5854] usb 4-1: can't read configurations, error -22 [ 207.874757][ T5854] usb usb4-port1: unable to enumerate USB device [ 207.984587][ T980] cdc_ncm 1-1:1.0: setting tx_max = 88 [ 208.027576][ T980] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 208.136296][ T7718] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 208.165856][ T7718] kvm: pic: non byte read [ 208.172315][ T7718] kvm: pic: single mode not supported [ 208.172453][ T7718] kvm: pic: level sensitive irq not supported [ 208.178431][ T7718] kvm: pic: non byte read [ 208.204117][ T7718] kvm: pic: non byte read [ 208.223257][ T980] usb 1-1: USB disconnect, device number 34 [ 208.232405][ T7718] kvm: pic: non byte read [ 208.248835][ T980] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 208.321605][ T5876] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 208.501654][ T5876] usb 2-1: Using ep0 maxpacket: 16 [ 208.513937][ T5876] usb 2-1: config 1 has an invalid interface number: 57 but max is 0 [ 208.532807][ T5876] usb 2-1: config 1 has no interface number 0 [ 208.547478][ T5876] usb 2-1: config 1 interface 57 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 208.570576][ T5876] usb 2-1: config 1 interface 57 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 208.614758][ T5876] usb 2-1: config 1 interface 57 has no altsetting 0 [ 208.624911][ T5876] usb 2-1: New USB device found, idVendor=045e, idProduct=0439, bcdDevice=72.31 [ 208.636490][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.644787][ T5876] usb 2-1: Product: syz [ 208.649209][ T5876] usb 2-1: Manufacturer: syz [ 208.654167][ T5876] usb 2-1: SerialNumber: syz [ 208.664453][ T7719] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 208.672836][ T7719] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 208.683322][ T5876] ipaq 2-1:1.57: PocketPC PDA converter detected [ 208.898344][ T5876] usb 2-1: PocketPC PDA converter now attached to ttyUSB0 [ 209.041435][ T980] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 209.088388][ T7751] input: syz0 as /devices/virtual/input/input14 [ 209.158110][ T5876] usb 2-1: USB disconnect, device number 43 [ 209.186710][ T5915] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 209.190093][ T5876] ipaq ttyUSB0: PocketPC PDA converter now disconnected from ttyUSB0 [ 209.194656][ T980] usb 3-1: Using ep0 maxpacket: 32 [ 209.208449][ T5876] ipaq 2-1:1.57: device disconnected [ 209.247940][ T980] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 209.263824][ T980] usb 3-1: config 0 has no interface number 0 [ 209.275276][ T980] usb 3-1: config 0 interface 12 has no altsetting 0 [ 209.294363][ T980] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 209.310582][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.326436][ T980] usb 3-1: Product: syz [ 209.330844][ T980] usb 3-1: Manufacturer: syz [ 209.335620][ T980] usb 3-1: SerialNumber: syz [ 209.353094][ T980] usb 3-1: config 0 descriptor?? [ 209.394395][ T5915] usb 1-1: Using ep0 maxpacket: 16 [ 209.403677][ T5915] usb 1-1: unable to get BOS descriptor or descriptor too short [ 209.416510][ T5915] usb 1-1: config 13 has an invalid interface number: 50 but max is 0 [ 209.431531][ T5915] usb 1-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 209.448422][ T5915] usb 1-1: config 13 has no interface number 0 [ 209.474332][ T5915] usb 1-1: config 13 interface 50 altsetting 167 endpoint 0x8 has invalid wMaxPacketSize 0 [ 209.495980][ T5915] usb 1-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 0 [ 209.534175][ T5915] usb 1-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 209.554824][ T5915] usb 1-1: config 13 interface 50 has no altsetting 0 [ 209.568248][ T5915] usb 1-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 209.578458][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.586777][ T5915] usb 1-1: Product: syz [ 209.591206][ T5915] usb 1-1: Manufacturer: syz [ 209.597650][ T5915] usb 1-1: SerialNumber: syz [ 209.946667][ T7777] netlink: 12 bytes leftover after parsing attributes in process `syz.1.694'. [ 210.174210][ T7784] ------------[ cut here ]------------ [ 210.179832][ T7784] WARNING: ./include/linux/ns_common.h:311 at nsproxy_ns_active_put+0xa19/0xd30, CPU#0: syz.1.696/7784 [ 210.191067][ T7784] Modules linked in: [ 210.193763][ T7786] netlink: 19 bytes leftover after parsing attributes in process `syz.3.697'. [ 210.195176][ T7784] CPU: 0 UID: 60929 PID: 7784 Comm: syz.1.696 Not tainted syzkaller #0 PREEMPT(full) [ 210.213633][ T7784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 210.223806][ T7784] RIP: 0010:nsproxy_ns_active_put+0xa19/0xd30 [ 210.230022][ T7784] Code: 0f 0b 90 e9 71 fc ff ff e8 a4 ec 76 ff 90 0f 0b 90 e9 ab fc ff ff e8 96 ec 76 ff 90 0f 0b 90 e9 41 fd ff ff e8 88 ec 76 ff 90 <0f> 0b 90 e9 64 fd ff ff e8 7a ec 76 ff 90 0f 0b 90 e9 98 fd ff ff [ 210.250030][ T7784] RSP: 0018:ffffc900039cfd38 EFLAGS: 00010293 [ 210.256261][ T7784] RAX: ffffffff824ae3a8 RBX: ffff888027ca60d0 RCX: ffff888029a39e80 [ 210.264348][ T7784] RDX: 0000000000000000 RSI: 00000000effffff8 RDI: 00000000effffff8 [ 210.272596][ T7784] RBP: 00000000effffff8 R08: ffffffff8e36cbcb R09: 1ffffffff1c6d979 [ 210.280602][ T7784] R10: dffffc0000000000 R11: fffffbfff1c6d97a R12: dffffc0000000000 [ 210.288836][ T7784] R13: 1ffffffff1c6d965 R14: ffffffff8e36cb00 R15: ffffffff8e36cb28 [ 210.297218][ T7784] FS: 00007fb56ee206c0(0000) GS:ffff888125a79000(0000) knlGS:0000000000000000 [ 210.306261][ T7784] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 210.313009][ T7784] CR2: 00007fb56edffd58 CR3: 0000000077c88000 CR4: 00000000003526f0 [ 210.321016][ T7784] Call Trace: [ 210.324399][ T7784] [ 210.327375][ T7784] free_nsproxy+0x26/0x560 [ 210.331990][ T7784] __se_sys_setns+0x1268/0x17d0 [ 210.337020][ T7784] ? irqentry_exit+0x5ba/0x640 [ 210.341874][ T7784] ? __se_sys_setns+0x565/0x17d0 [ 210.346894][ T7784] ? __pfx___se_sys_setns+0x10/0x10 [ 210.352187][ T7784] ? do_syscall_64+0xbe/0xfa0 [ 210.356953][ T7784] do_syscall_64+0xfa/0xfa0 [ 210.361574][ T7784] ? irqentry_exit+0x10f/0x640 [ 210.366423][ T7784] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.372715][ T7784] ? clear_bhb_loop+0x60/0xb0 [ 210.377565][ T7784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.383594][ T7784] RIP: 0033:0x7fb56df8f6c9 [ 210.388113][ T7784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.391365][ T5876] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 210.407875][ T7784] RSP: 002b:00007fb56ee20038 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 210.407914][ T7784] RAX: ffffffffffffffda RBX: 00007fb56e1e6090 RCX: 00007fb56df8f6c9 [ 210.407931][ T7784] RDX: 0000000000000000 RSI: 0000000040000000 RDI: 0000000000000004 [ 210.407945][ T7784] RBP: 00007fb56e011f91 R08: 0000000000000000 R09: 0000000000000000 [ 210.407960][ T7784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.407973][ T7784] R13: 00007fb56e1e6128 R14: 00007fb56e1e6090 R15: 00007fff8bfd9f28 [ 210.464575][ T7784] [ 210.467634][ T7784] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 210.474921][ T7784] CPU: 0 UID: 60929 PID: 7784 Comm: syz.1.696 Not tainted syzkaller #0 PREEMPT(full) [ 210.484481][ T7784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 210.494561][ T7784] Call Trace: [ 210.497865][ T7784] [ 210.500823][ T7784] dump_stack_lvl+0x99/0x250 [ 210.505429][ T7784] ? __asan_memcpy+0x40/0x70 [ 210.510038][ T7784] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.515243][ T7784] ? __pfx__printk+0x10/0x10 [ 210.519850][ T7784] vpanic+0x237/0x6d0 [ 210.523851][ T7784] ? __pfx_vpanic+0x10/0x10 [ 210.528357][ T7784] ? is_bpf_text_address+0x26/0x2b0 [ 210.533578][ T7784] panic+0xb9/0xc0 [ 210.537306][ T7784] ? __pfx_panic+0x10/0x10 [ 210.541827][ T7784] __warn+0x334/0x4c0 [ 210.545886][ T7784] ? nsproxy_ns_active_put+0xa19/0xd30 [ 210.551475][ T7784] ? nsproxy_ns_active_put+0xa19/0xd30 [ 210.556954][ T7784] report_bug+0x2be/0x4f0 [ 210.561390][ T7784] ? nsproxy_ns_active_put+0xa19/0xd30 [ 210.566873][ T7784] ? nsproxy_ns_active_put+0xa19/0xd30 [ 210.572440][ T7784] ? nsproxy_ns_active_put+0xa1b/0xd30 [ 210.578000][ T7784] handle_bug+0x84/0x160 [ 210.582254][ T7784] exc_invalid_op+0x1a/0x50 [ 210.586769][ T7784] asm_exc_invalid_op+0x1a/0x20 [ 210.591754][ T7784] RIP: 0010:nsproxy_ns_active_put+0xa19/0xd30 [ 210.598098][ T7784] Code: 0f 0b 90 e9 71 fc ff ff e8 a4 ec 76 ff 90 0f 0b 90 e9 ab fc ff ff e8 96 ec 76 ff 90 0f 0b 90 e9 41 fd ff ff e8 88 ec 76 ff 90 <0f> 0b 90 e9 64 fd ff ff e8 7a ec 76 ff 90 0f 0b 90 e9 98 fd ff ff [ 210.617898][ T7784] RSP: 0018:ffffc900039cfd38 EFLAGS: 00010293 [ 210.623983][ T7784] RAX: ffffffff824ae3a8 RBX: ffff888027ca60d0 RCX: ffff888029a39e80 [ 210.631968][ T7784] RDX: 0000000000000000 RSI: 00000000effffff8 RDI: 00000000effffff8 [ 210.639986][ T7784] RBP: 00000000effffff8 R08: ffffffff8e36cbcb R09: 1ffffffff1c6d979 [ 210.648052][ T7784] R10: dffffc0000000000 R11: fffffbfff1c6d97a R12: dffffc0000000000 [ 210.656155][ T7784] R13: 1ffffffff1c6d965 R14: ffffffff8e36cb00 R15: ffffffff8e36cb28 [ 210.664142][ T7784] ? nsproxy_ns_active_put+0xa18/0xd30 [ 210.669616][ T7784] ? nsproxy_ns_active_put+0xa18/0xd30 [ 210.675105][ T7784] free_nsproxy+0x26/0x560 [ 210.679563][ T7784] __se_sys_setns+0x1268/0x17d0 [ 210.684460][ T7784] ? irqentry_exit+0x5ba/0x640 [ 210.689245][ T7784] ? __se_sys_setns+0x565/0x17d0 [ 210.694201][ T7784] ? __pfx___se_sys_setns+0x10/0x10 [ 210.699502][ T7784] ? do_syscall_64+0xbe/0xfa0 [ 210.704197][ T7784] do_syscall_64+0xfa/0xfa0 [ 210.708717][ T7784] ? irqentry_exit+0x10f/0x640 [ 210.713497][ T7784] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.719574][ T7784] ? clear_bhb_loop+0x60/0xb0 [ 210.724272][ T7784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.730175][ T7784] RIP: 0033:0x7fb56df8f6c9 [ 210.734682][ T7784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.755201][ T7784] RSP: 002b:00007fb56ee20038 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 210.763638][ T7784] RAX: ffffffffffffffda RBX: 00007fb56e1e6090 RCX: 00007fb56df8f6c9 [ 210.771620][ T7784] RDX: 0000000000000000 RSI: 0000000040000000 RDI: 0000000000000004 [ 210.779624][ T7784] RBP: 00007fb56e011f91 R08: 0000000000000000 R09: 0000000000000000 [ 210.787602][ T7784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.795613][ T7784] R13: 00007fb56e1e6128 R14: 00007fb56e1e6090 R15: 00007fff8bfd9f28 [ 210.803693][ T7784] [ 210.806880][ T7784] Kernel Offset: disabled [ 210.811203][ T7784] Rebooting in 86400 seconds..