last executing test programs: 8m27.494871189s ago: executing program 3 (id=1889): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat(0xffffffffffffff9c, 0x0, 0x320800d, 0x31) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb01005dfc000000000000000000000000000002"], 0x0, 0xfc5f}, 0x28) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00'}) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, 0x0, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r3, 0x0, 0x8, 0x0) 8m26.02473197s ago: executing program 3 (id=1891): r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x446, 0x21) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c000000262f2b52d7f117e9000000000a00000a08000240000000000d000500727066696c7465720000000051c137ed9dfbbddc12b546df5cf03d814da52689e230a553bafe249d7fb3711ee5a96e2aa5521d3eff6c68e39053400d790a7732dffc2d2e17ff78abcb09b952"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4040010) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f00000000c0)=r2) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) syz_clone(0xc800411, 0x0, 0x0, 0x0, 0x0, 0x0) listns(&(0x7f0000000880)={0x20, 0x0, 0x0, 0xc000000, 0x0, 0x8}, &(0x7f00000008c0)=[0x0], 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet6_int(r0, 0x29, 0x1, &(0x7f0000000180)=0x10000, 0x4) waitid(0x2, 0x0, &(0x7f00000001c0), 0x4, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x0, @private0, 0xe}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000240)="8446e1726819c22bd9147ae93e4c08bd1898f5f1859740831b95516f380c109471625c73b7823c7f87c83be5ae4fd1f8d022bb67be94b690f8e3b48772fed2ca34660bfe54198605fd929797c48a91dbe837ae829b512e1d700a5c1a1640fb10e9b7c65c87280c528d6a492eceb4f510a218a89e76c54205da8a215900e16622910f20146d8c7467d40fa4e6b0bd7f0ef0c5768af1e5f217d0c192b394b91b8682bd94e06e62d1cf8e4952c25a9dc18446046c44cb8f39ff7c08ab0ca6d819a2e77a218b0f", 0xc5}, {&(0x7f0000000380)="16af64e92662751ab33bb8792a966c47bb9cd1e8d43543d1da1ba2363653aeb054984b298976b46cfe7d87c4b90cb4942f14a760605d0299ef5bd77da1e6eed8e853715ea1501ec09f7b46d23d721b650ab1a8e03bd882138d8b85fade3c32f81a296d9d19fd1edc989ea085afdfbff74eb8b1a0ef3ce07a1ce9467323a22d5a18e84adf144f6accb33402bc1e0344cf235a180692eec3cfbf7ab0fdac512476964a11b2fcd8922e80c3faa680c74254dc61994d555b6f9102c07f573c2af7f201aec88eba8e826529f5d04ff595af74054d112d6d745f56b81be156e08e1b9d4a47128bd6f38a4b9af88ab15d344a38ad", 0xf1}, {&(0x7f0000000480)="11f9e5797d2be2ca91bf8b694c355ea411574205b56424bf72f6bfd7adc1e5119a739fc07d886b6f821af8b62b031ac283b677bee0141e8ae31f27d7d43f61c4a45a7e574a761a0be5967e3e039c00097f2767d33de7a4dfaf067a88c77bd266aef81798e47dc5e70e6c3d769aab74cba9191a7f25d03672c17bd5859f3ff906ac704983e30e0be3a34f361a9e2bdc6112597cd30a80a2e3d82a916886e0d1d92a1b15ee1395a66ad5e12f1ee39e4357529aacdc68", 0xb5}, {&(0x7f0000000540)="94ecd43f0ce7ba49bf0c6c0491dd36b228bd47ca1c1846479d265340b4be283debf3baf0d6b6363b8d8c58b6cb35f324697c9bac079c", 0x36}], 0x4, &(0x7f00000005c0)=[@hopopts_2292={{0xc0, 0x29, 0x36, {0xff, 0x14, '\x00', [@generic={0xfe, 0x28, "ccd1047402615512da6a86d8a2f7746b6a070a879126ca588fd3c466f36d8f5e85787ad314d57991"}, @ra={0x5, 0x2, 0x5}, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x10, {0x0, 0x2, 0x40, 0x2, [0x7fffffff]}}, @calipso={0x7, 0x10, {0x2, 0x2, 0x1, 0xfff9, [0x8]}}, @hao={0xc9, 0x10, @local}, @enc_lim={0x4, 0x1, 0x4e}, @calipso={0x7, 0x30, {0x3, 0xa, 0x7b, 0x9, [0xfffffffffffffff9, 0x5, 0x4, 0x57d, 0x1]}}, @ra={0x5, 0x2, 0x8001}, @ra={0x5, 0x2, 0x3}]}}}], 0xc0}}, {{&(0x7f0000000680)={0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c, &(0x7f0000000780)=[{&(0x7f00000006c0)}, {&(0x7f0000000700)="cf8c7e7f2fd5ae3a67eeae4b72c7e4ef687985d347dee904a23262e591e8b49682ceb835837da07029fa314ce0194dd3d920954a8bf7580ceacd", 0x3a}, {&(0x7f0000000740)="ae4cbe061fa377c47ccf0ec23e6349cecc8442d5b85a5e015eff8537fd07d6da1cbe63393b45c9c6", 0x28}], 0x3, &(0x7f00000007c0)}}], 0x3, 0x0) mprotect(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x0) splice(r0, &(0x7f0000000040)=0x10, r3, 0x0, 0x807, 0x0) 8m25.006366961s ago: executing program 3 (id=1897): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xb) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) 8m24.633530218s ago: executing program 3 (id=1899): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) (fail_nth: 3) 8m23.90517418s ago: executing program 3 (id=1900): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) unshare(0x22020400) r1 = socket(0x10, 0x80002, 0x2) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r2, 0x0, 0x2, &(0x7f0000000240)) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0xfffc, 0x9, 0x0, 0x6}, 'syz0\x00', 0x3}) 8m22.70897136s ago: executing program 3 (id=1901): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10) 8m7.216075163s ago: executing program 32 (id=1901): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10) 14.97755034s ago: executing program 4 (id=3089): openat(0xffffffffffffff9c, 0x0, 0x109002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010020"], &(0x7f0000000f80)=""/4090, 0x7a, 0xffa, 0x9}, 0x28) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) fsopen(0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@rand_addr=0x64010100, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {0xfffffffffffffffd, 0x0, 0xfffffffffffffff7, 0x4}, 0x0, 0x6e6bb9, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffffc, 0x6c}, 0x0, @in6=@empty, 0xfffffffc, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newsa={0xfc, 0x16, 0x633, 0x0, 0x80000000, {{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0xffffffffffffffff, 0x0, 0xc1}, {0x4, 0x2}, 0x6, 0x2, 0xa, 0x4, 0x18, 0x19}, [@mark={0xc, 0x15, {0x35075c, 0x1}}]}, 0xfc}}, 0x0) 14.527409499s ago: executing program 0 (id=3091): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000440000004400000004000000020000000000000e040000000100000000000000000000010500000008000000010000000000000c0000000000000000000000030000000003000000020000000b000000006161"], 0x0, 0x60, 0x0, 0x0, 0xffffffff}, 0x28) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x1000, @local, 0x8}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00'}) 13.574641359s ago: executing program 4 (id=3096): r0 = socket(0x10, 0x80002, 0x0) getsockopt(r0, 0x1, 0x2f, &(0x7f0000000540)=""/67, &(0x7f0000000480)=0x43) 13.519304235s ago: executing program 4 (id=3097): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x88002, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000040)=0x2, 0x4) r2 = msgget(0x1, 0x784) msgsnd(r2, &(0x7f0000000240)={0x0, "a1b6c8371d9c71ff9cfdd9dac6a9b44969a85531a475a6c1961064243317505c30d773a07aa1db90efb3cf269f4a57733a2c10a814c351ef11b4dad3489e2ea5a5d1c34a5fa6bccf184aa7cdb9f8f574e4584b53fde372072bc7413774eb914ca53827921edaf2a77f1bab938aa04bb9ab59ef4a18d64ffc8cc457e685c213e7caf523d46cb3e5c0e60ec1cbf0dcd45b"}, 0x98, 0x800) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, 0x0, 0x0, 0x2) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x85}, 0x9}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466ccfff57a000000ad6e911b51818462", 0x26}, {&(0x7f0000000140)="10ef", 0x2}], 0x2}, 0x0) 13.353175242s ago: executing program 0 (id=3098): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0) socket$kcm(0x29, 0x2, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000400)={0x20, 0x1, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0}) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008040}, 0x4040144) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000100)={0x40, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000540)={0x20, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=']) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0) write$sndseq(r2, &(0x7f0000000600)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4}, {}, @raw8={"95a7327277b141a1467c08a8"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {0x5}, @quote={{0x5, 0x5}}}, {0x0, 0x0, 0x0, 0x0, @tick=0xfe, {0x0, 0x8}, {}, @addr={0x1, 0x6}}, {0x1, 0x0, 0x1, 0x0, @tick=0x7fffffff, {0x4, 0x1}, {0x7, 0x8}, @quote={{0x2, 0xd8}, 0x8}}], 0x70) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000000)=']\x00') ioctl$KVM_SET_MSRS(r5, 0xc048aeca, &(0x7f0000000180)={0x5, 0x0, [{0x0, 0x0, 0x3fffffffffffe}, {0x303}, {0x2c, 0x0, 0x100000000}, {0xa11, 0x0, 0x66}, {0x9a7, 0x0, 0xf0a}]}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000001b40)={0x0, 0x8, 0x3, "fe2578"}, 0x0, 0x0}) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 13.189260585s ago: executing program 4 (id=3101): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000003880)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000140)='\f', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40080) sendto$inet(r1, &(0x7f0000000580), 0x0, 0x1000806d, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000001200)=[{{&(0x7f0000000280)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000900)=[{&(0x7f00000008c0)='w', 0x1}], 0x1}}], 0x2, 0x8080) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000240)={r5, 0x1d07}, 0x8) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f00000007c0)=""/191, &(0x7f0000000880)=0xbf) sendmsg$IPCTNL_MSG_CT_NEW(r3, 0x0, 0x0) epoll_pwait2(r0, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, &(0x7f0000000340)={0x77359400}, &(0x7f00000004c0)={[0x5]}, 0x8) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0) 10.404024503s ago: executing program 4 (id=3106): r0 = userfaultfd(0x80001) r1 = creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53049cd) write$binfmt_elf32(r1, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x43, 0x7, 0x4, 0x2, 0x3, 0x1, 0x305, 0x38, 0xce, 0xe, 0xb, 0x20, 0x1, 0x5, 0x5}, [{0x3, 0x8, 0xf3, 0x7362, 0xafb, 0x200004, 0xce1, 0x400}]}, 0xfdd5) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x2000}) write(0xffffffffffffffff, &(0x7f0000000040)="66000000220047000500fc0f8980e8ff06006d20002b1ffec0906849199f90e90101c7bb0000d3e7ff0b317cfdc617ab685b77fa89b5843e9fb69ea04aab8950a19d1cb58605cc23e7c515927d84", 0x4e) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000100)=0x1000420, 0x4) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb0000080006000000000008000500"], 0xd0}}, 0x571f68543cec8180) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r6, 0x4068aea3, &(0x7f0000000080)={0xc0, 0x0, 0x1}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$alg(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@assoc={0x18, 0x117, 0x4, 0x4}], 0x18}, 0x0) recvmmsg(r8, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000a00)}, 0x3}], 0x1, 0x0, 0x0) 8.201924089s ago: executing program 0 (id=3110): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) socket(0x40000000015, 0x5, 0x0) getpid() landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8.18682642s ago: executing program 4 (id=3111): r0 = syz_usb_connect$uac3(0x3, 0x9c, &(0x7f0000000300)=ANY=[@ANYBLOB="12010003000000403512100040000102030109028a000301046008080b0001012430010904000000010130000a2401f5260005000000132403050004030306070000000400010004"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000240)={0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="200dffffffff1674bf01ce974f"], 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x0, 0xe706, 0x4, @mcast2, @mcast2, 0x8, 0x8000, 0x2, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x29, 0xb, 0x9, 0x9, 0x40, @mcast1, @private1, 0x700, 0x8000, 0xcabc, 0x1}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000600), &(0x7f0000000640)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001cc0)=@newqdisc={0x14c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffffe, {0x0, 0x0, 0x0, r2, {0x0, 0x949336911f0d0bb4}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x400, 0x80000000, 0x1, 0x9, 0x3, 0x12, 0x5}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 6.229269656s ago: executing program 2 (id=3118): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00'}) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, 0x0, 0x0) r2 = openat$comedi(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) setresuid(0x0, 0xee00, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r3, 0x0, 0x8, 0x0) 5.970941261s ago: executing program 2 (id=3121): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0) socket$kcm(0x29, 0x2, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000400)={0x20, 0x1, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0}) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008040}, 0x4040144) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000100)={0x40, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000540)={0x20, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=']) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0) write$sndseq(r2, &(0x7f0000000600)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4}, {}, @raw8={"95a7327277b141a1467c08a8"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {0x5}, @quote={{0x5, 0x5}}}, {0x0, 0x0, 0x0, 0x0, @tick=0xfe, {0x0, 0x8}, {}, @addr={0x1, 0x6}}, {0x1, 0x0, 0x1, 0x0, @tick=0x7fffffff, {0x4, 0x1}, {0x7, 0x8}, @quote={{0x2, 0xd8}, 0x8}}], 0x70) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000000)=']\x00') ioctl$KVM_SET_MSRS(r5, 0xc048aeca, &(0x7f0000000180)={0x5, 0x0, [{0x0, 0x0, 0x3fffffffffffe}, {0x303}, {0x2c, 0x0, 0x100000000}, {0xa11, 0x0, 0x66}, {0x9a7, 0x0, 0xf0a}]}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000001b40)={0x0, 0x8, 0x3, "fe2578"}, 0x0, 0x0}) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 5.921665239s ago: executing program 5 (id=3122): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f50000000000080000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0x64, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) 5.110342452s ago: executing program 5 (id=3123): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00'}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) 4.902470623s ago: executing program 5 (id=3125): r0 = syz_usb_connect$uac3(0x3, 0x9c, &(0x7f0000000300)=ANY=[@ANYBLOB="12010003000000403512100040000102030109028a000301046008080b0001012430010904000000010130000a2401f526000500000013240305"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x1, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) syz_usb_control_io$uac3(r0, &(0x7f0000000240)={0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="200dffffffff1674bf01ce974f"], 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x0, 0xe706, 0x4, @mcast2, @mcast2, 0x8, 0x8000, 0x2, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x29, 0xb, 0x9, 0x9, 0x40, @mcast1, @private1, 0x700, 0x8000, 0xcabc, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000500)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) 3.877766232s ago: executing program 2 (id=3127): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setresuid(0x0, 0xee00, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r1, 0x0, 0x8, 0x0) 3.844557154s ago: executing program 0 (id=3128): openat(0xffffffffffffff9c, 0x0, 0x109002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010020"], &(0x7f0000000f80)=""/4090, 0x7a, 0xffa, 0x9}, 0x28) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) fsopen(0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newsa={0xfc, 0x16, 0x633, 0x0, 0x80000000, {{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0xffffffffffffffff, 0x0, 0xc1}, {0x4, 0x2}, 0x6, 0x2, 0xa, 0x4, 0x18, 0x19}, [@mark={0xc, 0x15, {0x35075c, 0x1}}]}, 0xfc}}, 0x0) 3.59406781s ago: executing program 1 (id=3130): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00'}) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, 0x0, 0x0) r2 = openat$comedi(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) setresuid(0x0, 0xee00, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r3, 0x0, 0x8, 0x0) 2.528664311s ago: executing program 2 (id=3131): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x31) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000a8c5000000a50000001801000020206405000000000004000f7b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(r0, 0xffffffffffffffff, 0x0) 2.527810361s ago: executing program 5 (id=3132): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {{0x6, 0x0, 0xb}, {0x65}}, [@printk={@lld, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xc, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.275910755s ago: executing program 2 (id=3133): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f50000000000080000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0x64, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) 2.101261032s ago: executing program 1 (id=3134): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@newlink={0x30, 0x10, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x42008, 0x21}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x2000c000) 2.045073258s ago: executing program 5 (id=3135): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000440000004400000004000000020000000000000e040000000100000000000000000000010500000008000000010000000000000c0000000000000000000000030000000003000000020000000b000000006161"], 0x0, 0x60, 0x0, 0x0, 0xffffffff}, 0x28) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r1, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00'}) 2.001672255s ago: executing program 2 (id=3136): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0) socket$kcm(0x29, 0x2, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000400)={0x20, 0x1, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0}) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008040}, 0x4040144) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000100)={0x40, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000540)={0x20, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=']) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0) write$sndseq(r2, &(0x7f0000000600)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4}, {}, @raw8={"95a7327277b141a1467c08a8"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {0x5}, @quote={{0x5, 0x5}}}, {0x0, 0x0, 0x0, 0x0, @tick=0xfe, {0x0, 0x8}, {}, @addr={0x1, 0x6}}, {0x1, 0x0, 0x1, 0x0, @tick=0x7fffffff, {0x4, 0x1}, {0x7, 0x8}, @quote={{0x2, 0xd8}, 0x8}}], 0x70) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000000)=']\x00') ioctl$KVM_SET_MSRS(r5, 0xc048aeca, &(0x7f0000000180)={0x5, 0x0, [{0x0, 0x0, 0x3fffffffffffe}, {0x303}, {0x2c, 0x0, 0x100000000}, {0xa11, 0x0, 0x66}, {0x9a7, 0x0, 0xf0a}]}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000001b40)={0x0, 0x8, 0x3, "fe2578"}, 0x0, 0x0}) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 1.905253277s ago: executing program 5 (id=3137): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) socket(0x40000000015, 0x5, 0x0) getpid() landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.815589324s ago: executing program 1 (id=3138): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1003}, 0x38) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, 0x0, 0x4000000) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000005000000010000000100001304000000020000"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f50000000000080000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0x64, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) 1.622162373s ago: executing program 1 (id=3139): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000003880)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000140)='\f', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40080) sendto$inet(r1, &(0x7f0000000580), 0x0, 0x1000806d, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000001200)=[{{&(0x7f0000000280)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000900)=[{&(0x7f00000008c0)='w', 0x1}], 0x1}}], 0x2, 0x8080) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000240)={r5, 0x1d07}, 0x8) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f00000007c0)=""/191, &(0x7f0000000880)=0xbf) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) epoll_pwait2(r0, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, &(0x7f0000000340)={0x77359400}, &(0x7f00000004c0)={[0x5]}, 0x8) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0) 1.461828091s ago: executing program 0 (id=3140): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x1077, 0x1, 0x1}, 0x18, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r1, 0xf505, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000180)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) sendmsg(0xffffffffffffffff, 0x0, 0x24040805) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020015b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x94) r3 = socket$inet_sctp(0x2, 0x1, 0x84) clock_adjtime(0x0, &(0x7f00000002c0)={0x19b1, 0xc1bdf10000000200, 0x0, 0x0, 0x0, 0xa9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x9, 0x0, 0x0, 0x0, 0x0, 0x200, 0xe73, 0xffffffff}) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000040)=0x7, 0x4) sendmsg$inet(r3, &(0x7f0000001a40)={&(0x7f0000000200)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10, &(0x7f0000001900)=[{&(0x7f0000000240)="e8", 0x1}], 0x1}, 0x20000081) landlock_restrict_self(r2, 0x9) rmdir(&(0x7f0000000080)='./file0\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb0100180000000000000044000000440000000a0000000600000001000000010000000100000005000000000000000000000100000000000023050200000000000011040000000800000000005f515f302e006100"], &(0x7f00000004c0)=""/35, 0x66, 0x23, 0x1, 0xfffffffc}, 0x28) 476.560802ms ago: executing program 0 (id=3141): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000080)=0xc, 0x4) r1 = accept$inet6(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffdc9) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0xf}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) 165.040791ms ago: executing program 1 (id=3142): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x68, 0x24, 0x70b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0xfffffffd, 0xffc00, 0x3, 0x1, 0xfffffffe, 0x9}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x200, 0xfffffffa}}, @TCA_NETEM_CORR={0x10, 0x1, {0x2, 0x7, 0x8}}]}}}]}, 0x68}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001300)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xfffffffb}, @TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x8, 0x2, 0x1, 0x8}, {0x8, 0x0, 0x7, 0x0, 0x0, 0x2}, 0x113, 0x9, 0x1a91}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xa148c427e962834a}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4546cfee17049510}, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r12 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e80)=ANY=[@ANYBLOB="4c0000001000030428bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800900f4ff7591e56e000055e4d60eb1a579a201003db73aadd9cf34759cd9047c026c1c3749ba7e6c0d3290e33d9200144d030000", @ANYRES32=r13, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000540)={'ip6_vti0\x00', 0x0, 0x29, 0xe, 0xf8, 0x8, 0xc, @empty, @loopback, 0x10, 0x7800, 0x3, 0x5}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000600)={'batadv_slave_0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000640)={@private1, 0x0}, &(0x7f0000000680)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000780)={'syztnl1\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x29, 0xc, 0xff, 0xff, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x7, 0x1, 0x8170, 0x4}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000e40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000800)={0x5d4, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0x1dc, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r7}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r13}}}]}}, {{0x8}, {0x1d4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r14}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r15}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r16}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1b5}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x7f, 0x9}, {0x8001, 0x5, 0x0, 0x1000}, {0x5, 0x2, 0x31, 0x2}, {0x4, 0x6, 0x2, 0x2}, {0x6, 0x4, 0xaa, 0xfffffff9}, {0xfff8, 0x3, 0x68, 0x5}, {0xa557, 0x9, 0x3, 0x4}]}}}]}}, {{0x8, 0x1, r17}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x5d4}, 0x1, 0x0, 0x0, 0x4000}, 0x24000011) ioctl$TIOCGSOFTCAR(r1, 0x5414, &(0x7f0000000040)) 0s ago: executing program 1 (id=3143): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00'}) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, 0x0, 0x0) r2 = openat$comedi(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) setresuid(0x0, 0xee00, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r3, 0x0, 0x8, 0x0) kernel console output (not intermixed with test programs): ndpoint zero, skipping [ 1011.047423][ T9] usb 1-1: config 186 interface 154 altsetting 13 has a duplicate endpoint with address 0x4, skipping [ 1011.047463][ T9] usb 1-1: config 186 interface 68 altsetting 2 has a duplicate endpoint with address 0xB, skipping [ 1011.047487][ T9] usb 1-1: config 186 interface 68 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1011.047510][ T9] usb 1-1: config 186 interface 68 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1011.047533][ T9] usb 1-1: config 186 interface 68 altsetting 2 has a duplicate endpoint with address 0xD, skipping [ 1011.047557][ T9] usb 1-1: config 186 interface 68 altsetting 2 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 1011.047601][ T9] usb 1-1: config 186 interface 77 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 1011.047626][ T9] usb 1-1: config 186 interface 77 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 1011.047650][ T9] usb 1-1: config 186 interface 77 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 1011.047676][ T9] usb 1-1: config 186 interface 77 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 1011.047700][ T9] usb 1-1: config 186 interface 77 altsetting 1 has a duplicate endpoint with address 0xD, skipping [ 1011.047737][ T9] usb 1-1: config 186 interface 95 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 1011.047761][ T9] usb 1-1: config 186 interface 95 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 1011.047785][ T9] usb 1-1: config 186 interface 154 has no altsetting 0 [ 1011.047803][ T9] usb 1-1: config 186 interface 68 has no altsetting 0 [ 1011.047819][ T9] usb 1-1: config 186 interface 77 has no altsetting 0 [ 1011.047839][ T9] usb 1-1: config 186 interface 95 has no altsetting 0 [ 1011.058472][ T9] usb 1-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=18.ab [ 1011.058504][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.058525][ T9] usb 1-1: Product: 섓ሞ佝轀ㄔů比蟁㈰➺ᛞ읺⑽厡嘥鏾젾촽睼앴䏇Ჹ昭趙㨟뎨ꈨ⥶칐䈿ხ᠍쌠셲ᴐꘛ吭芯慄㘽设₏䟍⼮ꘟ줅ộ귂쒥懧嘜绱렛퉗䃋톻襃阓适鸧糜ꐑ쳖儼䐏邿ぞ쵙릩ᒞ猪퀐⢺碫ꢥ䳑੸趾灅 [ 1011.058559][ T9] usb 1-1: Manufacturer: 繺瘎펽븭ᚨﻆ仂顎휛貵欴桃僦䳭쇷赲腖誚袓歠ᗙ甌ꮔ껛ꠡ銕愮㈠琉⎫ [ 1011.058582][ T9] usb 1-1: SerialNumber: 譇䫞燜휚杷⟦꺇崞휏諴泵恉䫎䃈ޗ끇锗Ё⯆须たἶ荅呐㷐쏝灲퐏횂䓝Ⲍ䛪喝薤땿ꚴ戴㶫瘬啋劢戝榓綧仓∙ꟴ墍ꖆ‚⌎踕꒗༇ꅀﲔ癋ᯥ⯤Ⱐ嗨窻ຶ칱㑵糸झ퓣∘䔯ᵓ냔쒲攨㨦콹龎卪䧥怦¶㔌굫뾝⾌뛶婏࣏ᯆ南쉷┗긄撗눐路쮞弻⦂䤔履᪢s뺝墤 [ 1011.331890][T13695] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1011.331924][T13695] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.331947][T13695] usb 3-1: Product: syz [ 1011.331962][T13695] usb 3-1: Manufacturer: syz [ 1011.331978][T13695] usb 3-1: SerialNumber: syz [ 1011.563295][T13695] usb 3-1: config 0 descriptor?? [ 1011.583051][T13695] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1011.704896][T11804] ums-usbat 6-1:2.43: USB Mass Storage device detected [ 1011.730025][T11804] ums-usbat 6-1:2.43: Quirks match for vid 0781 pid 0005: 1 [ 1011.862523][T11804] ums-usbat 6-1:2.43: probe with driver ums-usbat failed with error -5 [ 1011.883407][T11804] usb 6-1: USB disconnect, device number 23 [ 1012.084218][ T9] videodev: could not get a free minor [ 1012.084236][ T9] dsbr100 1-1:186.68: couldn't register video device [ 1012.084579][ T9] dsbr100 1-1:186.68: probe with driver dsbr100 failed with error -23 [ 1012.119357][ T9] hub 1-1:186.77: Invalid hub with more than one config or interface [ 1012.119519][ T9] hub 1-1:186.77: probe with driver hub failed with error -22 [ 1012.141909][ T9] videodev: could not get a free minor [ 1012.141981][ T9] dsbr100 1-1:186.77: couldn't register video device [ 1012.142311][ T9] dsbr100 1-1:186.77: probe with driver dsbr100 failed with error -23 [ 1012.179507][ T9] videodev: could not get a free minor [ 1012.179525][ T9] dsbr100 1-1:186.95: couldn't register video device [ 1012.179862][ T9] dsbr100 1-1:186.95: probe with driver dsbr100 failed with error -23 [ 1012.214943][ T9] usb 1-1: USB disconnect, device number 87 [ 1012.752037][T13695] gspca_stk1135: reg_w 0x5 err -110 [ 1012.753094][T13695] gspca_stk1135: serial bus timeout: status=0x00 [ 1012.753109][T13695] gspca_stk1135: Sensor write failed [ 1012.753153][T13695] gspca_stk1135: serial bus timeout: status=0x00 [ 1012.753165][T13695] gspca_stk1135: Sensor write failed [ 1012.753196][T13695] gspca_stk1135: serial bus timeout: status=0x00 [ 1012.753208][T13695] gspca_stk1135: Sensor read failed [ 1012.753242][T13695] gspca_stk1135: serial bus timeout: status=0x00 [ 1012.753252][T13695] gspca_stk1135: Sensor read failed [ 1012.753262][T13695] gspca_stk1135: Detected sensor type unknown (0x0) [ 1012.753306][T13695] gspca_stk1135: serial bus timeout: status=0x00 [ 1012.753318][T13695] gspca_stk1135: Sensor read failed [ 1012.753356][T13695] gspca_stk1135: serial bus timeout: status=0x00 [ 1012.753366][T13695] gspca_stk1135: Sensor read failed [ 1012.753405][T13695] gspca_stk1135: serial bus timeout: status=0x00 [ 1012.753416][T13695] gspca_stk1135: Sensor write failed [ 1012.753454][T13695] gspca_stk1135: serial bus timeout: status=0x00 [ 1012.753466][T13695] gspca_stk1135: Sensor write failed [ 1012.757989][T13695] stk1135 3-1:0.0: probe with driver stk1135 failed with error -110 [ 1014.242850][ T11] usb 3-1: USB disconnect, device number 87 [ 1014.602662][T14955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2836'. [ 1015.030748][T14958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2845'. [ 1015.877937][T11804] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1016.082850][T11804] usb 6-1: Using ep0 maxpacket: 32 [ 1017.032414][T11804] usb 6-1: config 186 has an invalid interface number: 154 but max is 3 [ 1017.032448][T11804] usb 6-1: config 186 has an invalid interface number: 68 but max is 3 [ 1017.032470][T11804] usb 6-1: config 186 has an invalid interface association descriptor of length 6, skipping [ 1017.032492][T11804] usb 6-1: config 186 has an invalid interface number: 77 but max is 3 [ 1017.032514][T11804] usb 6-1: config 186 has an invalid interface number: 95 but max is 3 [ 1017.032536][T11804] usb 6-1: config 186 has no interface number 0 [ 1017.032554][T11804] usb 6-1: config 186 has no interface number 1 [ 1017.032573][T11804] usb 6-1: config 186 has no interface number 2 [ 1017.032592][T11804] usb 6-1: config 186 has no interface number 3 [ 1017.032697][T11804] usb 6-1: config 186 interface 154 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 1017.032721][T11804] usb 6-1: config 186 interface 154 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 1017.032748][T11804] usb 6-1: config 186 interface 154 altsetting 13 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 1017.032779][T11804] usb 6-1: config 186 interface 154 altsetting 13 has a duplicate endpoint with address 0x6, skipping [ 1017.032805][T11804] usb 6-1: config 186 interface 154 altsetting 13 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 1017.032833][T11804] usb 6-1: config 186 interface 154 altsetting 13 has a duplicate endpoint with address 0x3, skipping [ 1017.032857][T11804] usb 6-1: config 186 interface 154 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 1017.032879][T11804] usb 6-1: config 186 interface 154 altsetting 13 has a duplicate endpoint with address 0x4, skipping [ 1017.032919][T11804] usb 6-1: config 186 interface 68 altsetting 2 has a duplicate endpoint with address 0xB, skipping [ 1017.032942][T11804] usb 6-1: config 186 interface 68 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1017.032964][T11804] usb 6-1: config 186 interface 68 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1017.032987][T11804] usb 6-1: config 186 interface 68 altsetting 2 has a duplicate endpoint with address 0xD, skipping [ 1017.033012][T11804] usb 6-1: config 186 interface 68 altsetting 2 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 1017.033055][T11804] usb 6-1: config 186 interface 77 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 1017.033079][T11804] usb 6-1: config 186 interface 77 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 1017.033103][T11804] usb 6-1: config 186 interface 77 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 1017.033128][T11804] usb 6-1: config 186 interface 77 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 1017.033159][T11804] usb 6-1: config 186 interface 77 altsetting 1 has a duplicate endpoint with address 0xD, skipping [ 1017.033198][T11804] usb 6-1: config 186 interface 95 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 1017.033222][T11804] usb 6-1: config 186 interface 95 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 1017.033246][T11804] usb 6-1: config 186 interface 154 has no altsetting 0 [ 1017.033265][T11804] usb 6-1: config 186 interface 68 has no altsetting 0 [ 1017.033285][T11804] usb 6-1: config 186 interface 77 has no altsetting 0 [ 1017.033304][T11804] usb 6-1: config 186 interface 95 has no altsetting 0 [ 1017.036509][T11804] usb 6-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=18.ab [ 1017.036541][T11804] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.036564][T11804] usb 6-1: Product: 섓ሞ佝轀ㄔů比蟁㈰➺ᛞ읺⑽厡嘥鏾젾촽睼앴䏇Ჹ昭趙㨟뎨ꈨ⥶칐䈿ხ᠍쌠셲ᴐꘛ吭芯慄㘽设₏䟍⼮ꘟ줅ộ귂쒥懧嘜绱렛퉗䃋톻襃阓适鸧糜ꐑ쳖儼䐏邿ぞ쵙릩ᒞ猪퀐⢺碫ꢥ䳑੸趾灅 [ 1017.036597][T11804] usb 6-1: Manufacturer: 繺瘎펽븭ᚨﻆ仂顎휛貵欴桃僦䳭쇷赲腖誚袓歠ᗙ甌ꮔ껛ꠡ銕愮㈠琉⎫ [ 1017.036617][T11804] usb 6-1: SerialNumber: 譇䫞燜휚杷⟦꺇崞휏諴泵恉䫎䃈ޗ끇锗Ё⯆须たἶ荅呐㷐쏝灲퐏횂䓝Ⲍ䛪喝薤땿ꚴ戴㶫瘬啋劢戝榓綧仓∙ꟴ墍ꖆ‚⌎踕꒗༇ꅀﲔ癋ᯥ⯤Ⱐ嗨窻ຶ칱㑵糸झ퓣∘䔯ᵓ냔쒲攨㨦콹龎卪䧥怦¶㔌굫뾝⾌뛶婏࣏ᯆ南쉷┗긄撗눐路쮞弻⦂䤔履᪢s뺝墤 [ 1019.177910][T11804] videodev: could not get a free minor [ 1019.177927][T11804] dsbr100 6-1:186.68: couldn't register video device [ 1019.178536][T11804] dsbr100 6-1:186.68: probe with driver dsbr100 failed with error -23 [ 1019.215676][T11804] hub 6-1:186.77: Invalid hub with more than one config or interface [ 1019.215737][T11804] hub 6-1:186.77: probe with driver hub failed with error -22 [ 1019.240455][T11804] videodev: could not get a free minor [ 1019.240472][T11804] dsbr100 6-1:186.77: couldn't register video device [ 1019.240710][T11804] dsbr100 6-1:186.77: probe with driver dsbr100 failed with error -23 [ 1019.269970][T11804] videodev: could not get a free minor [ 1019.269987][T11804] dsbr100 6-1:186.95: couldn't register video device [ 1019.270215][T11804] dsbr100 6-1:186.95: probe with driver dsbr100 failed with error -23 [ 1019.298645][T11804] usb 6-1: USB disconnect, device number 24 [ 1021.512570][T11804] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1021.633597][T11900] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 1021.726319][T11804] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1021.760036][T11804] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1021.760064][T11804] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1021.879628][T11804] usb 5-1: string descriptor 0 read error: -22 [ 1021.879909][T11804] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1021.879975][T11804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.999218][T11900] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1021.999291][T11900] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.999355][T11900] usb 6-1: Product: syz [ 1021.999413][T11900] usb 6-1: Manufacturer: syz [ 1021.999431][T11900] usb 6-1: SerialNumber: syz [ 1022.301715][T11900] usb 6-1: config 0 descriptor?? [ 1022.521756][T11900] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1022.524505][T11804] usb 5-1: selecting invalid altsetting 1 [ 1023.000730][T15042] netlink: 4456 bytes leftover after parsing attributes in process `syz.0.2872'. [ 1023.141066][T11804] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1023.292721][ T11] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1023.442754][ T9] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1023.472698][ T11] usb 2-1: Using ep0 maxpacket: 32 [ 1023.481181][ T11] usb 2-1: config 186 has an invalid interface number: 154 but max is 3 [ 1023.481216][ T11] usb 2-1: config 186 has an invalid interface number: 68 but max is 3 [ 1023.481240][ T11] usb 2-1: config 186 has an invalid interface association descriptor of length 6, skipping [ 1023.481263][ T11] usb 2-1: config 186 has an invalid interface number: 77 but max is 3 [ 1023.481285][ T11] usb 2-1: config 186 has an invalid interface number: 95 but max is 3 [ 1023.481307][ T11] usb 2-1: config 186 has no interface number 0 [ 1023.481327][ T11] usb 2-1: config 186 has no interface number 1 [ 1023.481340][ T11] usb 2-1: config 186 has no interface number 2 [ 1023.481369][ T11] usb 2-1: config 186 has no interface number 3 [ 1023.481457][ T11] usb 2-1: config 186 interface 154 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 1023.481485][ T11] usb 2-1: config 186 interface 154 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 1023.481506][ T11] usb 2-1: config 186 interface 154 altsetting 13 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 1023.481548][ T11] usb 2-1: config 186 interface 154 altsetting 13 has a duplicate endpoint with address 0x6, skipping [ 1023.481575][ T11] usb 2-1: config 186 interface 154 altsetting 13 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 1023.481606][ T11] usb 2-1: config 186 interface 154 altsetting 13 has a duplicate endpoint with address 0x3, skipping [ 1023.481629][ T11] usb 2-1: config 186 interface 154 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 1023.481651][ T11] usb 2-1: config 186 interface 154 altsetting 13 has a duplicate endpoint with address 0x4, skipping [ 1023.481686][ T11] usb 2-1: config 186 interface 68 altsetting 2 has a duplicate endpoint with address 0xB, skipping [ 1023.481724][ T11] usb 2-1: config 186 interface 68 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1023.481758][ T11] usb 2-1: config 186 interface 68 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1023.481784][ T11] usb 2-1: config 186 interface 68 altsetting 2 has a duplicate endpoint with address 0xD, skipping [ 1023.481819][ T11] usb 2-1: config 186 interface 68 altsetting 2 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 1023.481863][ T11] usb 2-1: config 186 interface 77 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 1023.481891][ T11] usb 2-1: config 186 interface 77 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 1023.481917][ T11] usb 2-1: config 186 interface 77 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 1023.481945][ T11] usb 2-1: config 186 interface 77 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 1023.481971][ T11] usb 2-1: config 186 interface 77 altsetting 1 has a duplicate endpoint with address 0xD, skipping [ 1023.482229][ T11] usb 2-1: config 186 interface 95 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 1023.482257][ T11] usb 2-1: config 186 interface 95 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 1023.482284][ T11] usb 2-1: config 186 interface 154 has no altsetting 0 [ 1023.482306][ T11] usb 2-1: config 186 interface 68 has no altsetting 0 [ 1023.482326][ T11] usb 2-1: config 186 interface 77 has no altsetting 0 [ 1023.482350][ T11] usb 2-1: config 186 interface 95 has no altsetting 0 [ 1023.490828][ T11] usb 2-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=18.ab [ 1023.490889][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.490954][ T11] usb 2-1: Product: 섓ሞ佝轀ㄔů比蟁㈰➺ᛞ읺⑽厡嘥鏾젾촽睼앴䏇Ჹ昭趙㨟뎨ꈨ⥶칐䈿ხ᠍쌠셲ᴐꘛ吭芯慄㘽设₏䟍⼮ꘟ줅ộ귂쒥懧嘜绱렛퉗䃋톻襃阓适鸧糜ꐑ쳖儼䐏邿ぞ쵙릩ᒞ猪퀐⢺碫ꢥ䳑੸趾灅 [ 1023.490988][ T11] usb 2-1: Manufacturer: 繺瘎펽븭ᚨﻆ仂顎휛貵欴桃僦䳭쇷赲腖誚袓歠ᗙ甌ꮔ껛ꠡ銕愮㈠琉⎫ [ 1023.491018][ T11] usb 2-1: SerialNumber: 譇䫞燜휚杷⟦꺇崞휏諴泵恉䫎䃈ޗ끇锗Ё⯆须たἶ荅呐㷐쏝灲퐏횂䓝Ⲍ䛪喝薤땿ꚴ戴㶫瘬啋劢戝榓綧仓∙ꟴ墍ꖆ‚⌎踕꒗༇ꅀﲔ癋ᯥ⯤Ⱐ嗨窻ຶ칱㑵糸झ퓣∘䔯ᵓ냔쒲攨㨦콹龎卪䧥怦¶㔌굫뾝⾌뛶婏࣏ᯆ南쉷┗긄撗눐路쮞弻⦂䤔履᪢s뺝墤 [ 1023.613067][T11900] gspca_stk1135: reg_w 0x5 err -110 [ 1023.614129][T11900] gspca_stk1135: serial bus timeout: status=0x00 [ 1023.614147][T11900] gspca_stk1135: Sensor write failed [ 1023.614214][T11900] gspca_stk1135: serial bus timeout: status=0x00 [ 1023.614228][T11900] gspca_stk1135: Sensor write failed [ 1023.614272][T11900] gspca_stk1135: serial bus timeout: status=0x00 [ 1023.614284][T11900] gspca_stk1135: Sensor read failed [ 1023.614326][T11900] gspca_stk1135: serial bus timeout: status=0x00 [ 1023.614339][T11900] gspca_stk1135: Sensor read failed [ 1023.614348][T11900] gspca_stk1135: Detected sensor type unknown (0x0) [ 1023.614396][T11900] gspca_stk1135: serial bus timeout: status=0x00 [ 1023.614410][T11900] gspca_stk1135: Sensor read failed [ 1023.614447][T11900] gspca_stk1135: serial bus timeout: status=0x00 [ 1023.614459][T11900] gspca_stk1135: Sensor read failed [ 1023.614526][T11900] gspca_stk1135: serial bus timeout: status=0x00 [ 1023.614540][T11900] gspca_stk1135: Sensor write failed [ 1023.614575][T11900] gspca_stk1135: serial bus timeout: status=0x00 [ 1023.614588][T11900] gspca_stk1135: Sensor write failed [ 1023.614719][T11900] stk1135 6-1:0.0: probe with driver stk1135 failed with error -110 [ 1023.624008][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 1024.044786][ T9] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1024.044814][ T9] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1024.044875][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1024.044903][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 1024.044920][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.129879][ T9] usb 1-1: config 0 descriptor?? [ 1024.276558][T11900] usb 6-1: USB disconnect, device number 25 [ 1024.335535][T15042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1024.337245][T15042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1024.375221][T13695] usb 5-1: USB disconnect, device number 116 [ 1024.590956][ T9] magicmouse 0003:05AC:0269.0011: ignoring exceeding usage max [ 1024.601757][ T9] magicmouse 0003:05AC:0269.0011: unknown main item tag 0x0 [ 1024.601796][ T9] magicmouse 0003:05AC:0269.0011: unknown main item tag 0x0 [ 1024.601829][ T9] magicmouse 0003:05AC:0269.0011: unknown main item tag 0x0 [ 1024.601856][ T9] magicmouse 0003:05AC:0269.0011: unknown main item tag 0x0 [ 1024.601884][ T9] magicmouse 0003:05AC:0269.0011: unknown main item tag 0x0 [ 1024.601911][ T9] magicmouse 0003:05AC:0269.0011: unknown main item tag 0x0 [ 1024.601987][ T9] magicmouse 0003:05AC:0269.0011: item fetching failed at offset 24/40 [ 1024.623903][ T9] magicmouse 0003:05AC:0269.0011: magicmouse hid parse failed [ 1024.624030][ T9] magicmouse 0003:05AC:0269.0011: probe with driver magicmouse failed with error -22 [ 1024.680314][ T11] videodev: could not get a free minor [ 1024.680333][ T11] dsbr100 2-1:186.68: couldn't register video device [ 1024.680576][ T11] dsbr100 2-1:186.68: probe with driver dsbr100 failed with error -23 [ 1024.716772][ T11] hub 2-1:186.77: Invalid hub with more than one config or interface [ 1024.716817][ T11] hub 2-1:186.77: probe with driver hub failed with error -22 [ 1024.720924][ T11] videodev: could not get a free minor [ 1024.720938][ T11] dsbr100 2-1:186.77: couldn't register video device [ 1024.721079][ T11] dsbr100 2-1:186.77: probe with driver dsbr100 failed with error -23 [ 1024.756587][ T11] videodev: could not get a free minor [ 1024.756603][ T11] dsbr100 2-1:186.95: couldn't register video device [ 1024.758807][ T11] dsbr100 2-1:186.95: probe with driver dsbr100 failed with error -23 [ 1024.791323][ T11] usb 2-1: USB disconnect, device number 62 [ 1024.805451][T11804] usb 1-1: USB disconnect, device number 88 [ 1025.583736][T11804] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1025.777701][ T5885] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1026.216297][T11804] usb 3-1: Using ep0 maxpacket: 8 [ 1026.228457][T11804] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1026.228518][T11804] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1026.228544][T11804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.273506][T11804] usb 3-1: config 0 descriptor?? [ 1026.281760][T11804] iowarrior 3-1:0.0: no interrupt-in endpoint found [ 1026.467449][ T5885] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1026.467489][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.467516][ T5885] usb 5-1: Product: syz [ 1026.467536][ T5885] usb 5-1: Manufacturer: syz [ 1026.467555][ T5885] usb 5-1: SerialNumber: syz [ 1026.535586][ T5885] usb 5-1: config 0 descriptor?? [ 1026.751153][ T5885] usb 5-1: ignoring: probably an ADSL modem [ 1026.867885][T15079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2884'. [ 1026.936715][T11900] usb 3-1: USB disconnect, device number 88 [ 1027.073019][T15084] netlink: 'syz.2.2889': attribute type 3 has an invalid length. [ 1027.160726][ T5885] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1027.229723][T15086] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2890'. [ 1027.392939][T11900] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1027.542927][T11900] usb 3-1: Using ep0 maxpacket: 8 [ 1027.549690][T11900] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 1027.549724][T11900] usb 3-1: config 0 has no interface number 0 [ 1027.552334][T11900] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1027.552368][T11900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.552391][T11900] usb 3-1: Product: syz [ 1027.552409][T11900] usb 3-1: Manufacturer: syz [ 1027.552427][T11900] usb 3-1: SerialNumber: syz [ 1027.621721][T11900] usb 3-1: config 0 descriptor?? [ 1027.693126][ T9] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1027.906901][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1028.398553][T11900] uvcvideo 3-1:0.31: Found Unit with invalid ID 0 [ 1028.441854][ T9] usb 6-1: config 186 has an invalid interface number: 154 but max is 3 [ 1028.442254][ T9] usb 6-1: config 186 has an invalid interface number: 68 but max is 3 [ 1028.442408][ T9] usb 6-1: config 186 has an invalid interface association descriptor of length 6, skipping [ 1028.442546][ T9] usb 6-1: config 186 has an invalid interface number: 77 but max is 3 [ 1028.442765][ T9] usb 6-1: config 186 has an invalid interface number: 95 but max is 3 [ 1028.445451][ T9] usb 6-1: config 186 has no interface number 0 [ 1028.446650][ T9] usb 6-1: config 186 has no interface number 1 [ 1028.447839][ T9] usb 6-1: config 186 has no interface number 2 [ 1028.448017][ T9] usb 6-1: config 186 has no interface number 3 [ 1028.512958][ T9] usb 6-1: config 186 interface 154 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 1028.513233][ T9] usb 6-1: config 186 interface 154 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 1028.513339][ T9] usb 6-1: config 186 interface 154 altsetting 13 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 1028.513434][ T9] usb 6-1: config 186 interface 154 altsetting 13 has a duplicate endpoint with address 0x6, skipping [ 1028.513516][ T9] usb 6-1: config 186 interface 154 altsetting 13 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 1028.513604][ T9] usb 6-1: config 186 interface 154 altsetting 13 has a duplicate endpoint with address 0x3, skipping [ 1028.513659][ T9] usb 6-1: config 186 interface 154 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 1028.513683][ T9] usb 6-1: config 186 interface 154 altsetting 13 has a duplicate endpoint with address 0x4, skipping [ 1028.513855][ T9] usb 6-1: config 186 interface 68 altsetting 2 has a duplicate endpoint with address 0xB, skipping [ 1028.513937][ T9] usb 6-1: config 186 interface 68 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1028.514008][ T9] usb 6-1: config 186 interface 68 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1028.514071][ T9] usb 6-1: config 186 interface 68 altsetting 2 has a duplicate endpoint with address 0xD, skipping [ 1028.514154][ T9] usb 6-1: config 186 interface 68 altsetting 2 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 1028.514300][ T9] usb 6-1: config 186 interface 77 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 1028.514374][ T9] usb 6-1: config 186 interface 77 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 1028.514437][ T9] usb 6-1: config 186 interface 77 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 1028.514465][ T9] usb 6-1: config 186 interface 77 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 1028.514516][ T9] usb 6-1: config 186 interface 77 altsetting 1 has a duplicate endpoint with address 0xD, skipping [ 1028.514626][ T9] usb 6-1: config 186 interface 95 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 1028.514706][ T9] usb 6-1: config 186 interface 95 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 1028.514781][ T9] usb 6-1: config 186 interface 154 has no altsetting 0 [ 1028.514826][ T9] usb 6-1: config 186 interface 68 has no altsetting 0 [ 1028.514885][ T9] usb 6-1: config 186 interface 77 has no altsetting 0 [ 1028.514956][ T9] usb 6-1: config 186 interface 95 has no altsetting 0 [ 1028.647686][ T9] usb 6-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=18.ab [ 1028.647940][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.648004][ T9] usb 6-1: Product: 섓ሞ佝轀ㄔů比蟁㈰➺ᛞ읺⑽厡嘥鏾젾촽睼앴䏇Ჹ昭趙㨟뎨ꈨ⥶칐䈿ხ᠍쌠셲ᴐꘛ吭芯慄㘽设₏䟍⼮ꘟ줅ộ귂쒥懧嘜绱렛퉗䃋톻襃阓适鸧糜ꐑ쳖儼䐏邿ぞ쵙릩ᒞ猪퀐⢺碫ꢥ䳑੸趾灅 [ 1028.648091][ T9] usb 6-1: Manufacturer: 繺瘎펽븭ᚨﻆ仂顎휛貵欴桃僦䳭쇷赲腖誚袓歠ᗙ甌ꮔ껛ꠡ銕愮㈠琉⎫ [ 1028.648148][ T9] usb 6-1: SerialNumber: 譇䫞燜휚杷⟦꺇崞휏諴泵恉䫎䃈ޗ끇锗Ё⯆须たἶ荅呐㷐쏝灲퐏횂䓝Ⲍ䛪喝薤땿ꚴ戴㶫瘬啋劢戝榓綧仓∙ꟴ墍ꖆ‚⌎踕꒗༇ꅀﲔ癋ᯥ⯤Ⱐ嗨窻ຶ칱㑵糸झ퓣∘䔯ᵓ냔쒲攨㨦콹龎卪䧥怦¶㔌굫뾝⾌뛶婏࣏ᯆ南쉷┗긄撗눐路쮞弻⦂䤔履᪢s뺝墤 [ 1028.874031][T11900] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1028.874421][T11900] uvcvideo 3-1:0.31: No valid video chain found. [ 1028.898493][T11900] usb 3-1: USB disconnect, device number 89 [ 1029.012418][T15100] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2896'. [ 1029.042801][T15100] program syz.1.2896 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1029.168832][ T11] usb 5-1: USB disconnect, device number 117 [ 1029.370926][T15108] netlink: 'syz.0.2897': attribute type 3 has an invalid length. [ 1029.371016][T15108] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2897'. [ 1029.514023][ T9] videodev: could not get a free minor [ 1029.514040][ T9] dsbr100 6-1:186.68: couldn't register video device [ 1029.514279][ T9] dsbr100 6-1:186.68: probe with driver dsbr100 failed with error -23 [ 1029.520151][T15114] FAULT_INJECTION: forcing a failure. [ 1029.520151][T15114] name failslab, interval 1, probability 0, space 0, times 0 [ 1029.520193][T15114] CPU: 1 UID: 0 PID: 15114 Comm: syz.2.2902 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1029.520223][T15114] Tainted: [L]=SOFTLOCKUP [ 1029.520233][T15114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1029.520247][T15114] Call Trace: [ 1029.520256][T15114] [ 1029.520266][T15114] dump_stack_lvl+0xe8/0x150 [ 1029.520302][T15114] should_fail_ex+0x467/0x600 [ 1029.520333][T15114] should_failslab+0xa8/0x100 [ 1029.520381][T15114] __kmalloc_noprof+0xfe/0x780 [ 1029.520417][T15114] ? rcu_is_watching+0x15/0xb0 [ 1029.520451][T15114] ? tomoyo_realpath_from_path+0xef/0x640 [ 1029.520484][T15114] ? tomoyo_realpath_from_path+0xef/0x640 [ 1029.520526][T15114] tomoyo_realpath_from_path+0xef/0x640 [ 1029.520571][T15114] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1029.520606][T15114] tomoyo_path_number_perm+0x246/0x5f0 [ 1029.520659][T15114] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1029.520692][T15114] ? __lock_acquire+0x683/0x2ce0 [ 1029.520738][T15114] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1029.520761][T15114] ? hook_file_ioctl+0x1f3/0x600 [ 1029.520785][T15114] ? lockdep_hardirqs_on+0x7a/0x110 [ 1029.520828][T15114] ? __fget_files+0x2a/0x420 [ 1029.520860][T15114] ? __fget_files+0x2a/0x420 [ 1029.520892][T15114] ? __fget_files+0x3a8/0x420 [ 1029.520919][T15114] ? __fget_files+0x2a/0x420 [ 1029.520953][T15114] security_file_ioctl+0xc3/0x2a0 [ 1029.520986][T15114] __se_sys_ioctl+0x47/0x170 [ 1029.521020][T15114] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.521045][T15114] do_syscall_64+0x174/0x580 [ 1029.521070][T15114] ? clear_bhb_loop+0x40/0x90 [ 1029.521098][T15114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.521120][T15114] RIP: 0033:0x7efcec22ce59 [ 1029.521145][T15114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1029.521165][T15114] RSP: 002b:00007efcea486028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1029.521187][T15114] RAX: ffffffffffffffda RBX: 00007efcec4a5fa0 RCX: 00007efcec22ce59 [ 1029.521209][T15114] RDX: 0000200000000040 RSI: 0000000080045400 RDI: 0000000000000003 [ 1029.521224][T15114] RBP: 00007efcea486090 R08: 0000000000000000 R09: 0000000000000000 [ 1029.521237][T15114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1029.521251][T15114] R13: 00007efcec4a6038 R14: 00007efcec4a5fa0 R15: 00007fff5700c288 [ 1029.521285][T15114] [ 1029.521320][T15114] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1029.523180][T11900] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1029.574316][ T9] hub 6-1:186.77: Invalid hub with more than one config or interface [ 1029.574361][ T9] hub 6-1:186.77: probe with driver hub failed with error -22 [ 1029.622518][ T9] videodev: could not get a free minor [ 1029.622534][ T9] dsbr100 6-1:186.77: couldn't register video device [ 1029.628555][ T9] dsbr100 6-1:186.77: probe with driver dsbr100 failed with error -23 [ 1029.753140][T11900] usb 2-1: Using ep0 maxpacket: 8 [ 1029.763740][ T37] kauditd_printk_skb: 29 callbacks suppressed [ 1029.763760][ T37] audit: type=1326 audit(1782554325.344:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15107 comm="syz.4.2898" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45a34ce59 code=0x7fc00000 [ 1029.765072][ T9] videodev: could not get a free minor [ 1029.765092][ T9] dsbr100 6-1:186.95: couldn't register video device [ 1029.774407][ T9] dsbr100 6-1:186.95: probe with driver dsbr100 failed with error -23 [ 1029.799050][T11900] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1029.799110][T11900] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1029.799136][T11900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.986454][ T9] usb 6-1: USB disconnect, device number 26 [ 1030.020894][T11900] usb 2-1: config 0 descriptor?? [ 1030.048667][T11900] iowarrior 2-1:0.0: no interrupt-in endpoint found [ 1030.110576][T15123] wlan0 speed is unknown, defaulting to 1000 [ 1030.110697][T15123] wlan0 speed is unknown, defaulting to 1000 [ 1030.208845][ T37] audit: type=1326 audit(1782554325.784:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15107 comm="syz.4.2898" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45a34ce59 code=0x7fc00000 [ 1030.211186][ T37] audit: type=1326 audit(1782554325.784:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15107 comm="syz.4.2898" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc45a34ce59 code=0x7fc00000 [ 1030.216715][ T37] audit: type=1326 audit(1782554325.784:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15107 comm="syz.4.2898" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45a34ce59 code=0x7fc00000 [ 1030.242964][ T37] audit: type=1326 audit(1782554325.794:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15107 comm="syz.4.2898" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45a34ce59 code=0x7fc00000 [ 1030.243353][ T37] audit: type=1326 audit(1782554325.824:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15107 comm="syz.4.2898" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45a34ce59 code=0x7fc00000 [ 1030.249103][ T37] audit: type=1326 audit(1782554325.824:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15107 comm="syz.4.2898" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45a34ce59 code=0x7fc00000 [ 1030.249549][ T37] audit: type=1326 audit(1782554325.824:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15107 comm="syz.4.2898" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45a34ce59 code=0x7fc00000 [ 1030.249854][ T37] audit: type=1326 audit(1782554325.824:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15107 comm="syz.4.2898" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45a34ce59 code=0x7fc00000 [ 1030.250169][ T37] audit: type=1326 audit(1782554325.824:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15107 comm="syz.4.2898" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45a34ce59 code=0x7fc00000 [ 1031.463186][T15123] wlan0 speed is unknown, defaulting to 1000 [ 1031.539330][T15136] 9p: Bad value for 'rfdno' [ 1031.607697][T15123] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1031.607743][T15123] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1031.607790][T15123] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1031.763280][T15137] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2905'. [ 1031.915863][T15123] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1031.996082][T15123] wlan0 speed is unknown, defaulting to 1000 [ 1032.020588][T15123] wlan0 speed is unknown, defaulting to 1000 [ 1032.032991][T15123] wlan0 speed is unknown, defaulting to 1000 [ 1032.041279][T15123] wlan0 speed is unknown, defaulting to 1000 [ 1032.128648][T15123] wlan0 speed is unknown, defaulting to 1000 [ 1032.133508][T11804] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1032.283194][T11804] usb 6-1: Using ep0 maxpacket: 16 [ 1032.286919][T11804] usb 6-1: config index 0 descriptor too short (expected 51443, got 18) [ 1032.324912][T11804] usb 6-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=de.06 [ 1032.324946][T11804] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.324968][T11804] usb 6-1: Product: syz [ 1032.324984][T11804] usb 6-1: Manufacturer: syz [ 1032.325000][T11804] usb 6-1: SerialNumber: syz [ 1032.378195][T11804] usb 6-1: config 0 descriptor?? [ 1032.408058][T11804] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1032.408943][ T9] usb 2-1: USB disconnect, device number 63 [ 1032.657296][T11804] gspca_spca501: reg write: error -71 [ 1032.657316][T11804] spca501 6-1:0.0: Reg write failed for 0x02,0x0f,0x05 [ 1032.657409][T11804] spca501 6-1:0.0: probe with driver spca501 failed with error -22 [ 1032.695407][T11804] usb 6-1: USB disconnect, device number 27 [ 1032.753337][ T11] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1032.922680][ T11] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1032.922717][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.922740][ T11] usb 1-1: Product: syz [ 1032.922756][ T11] usb 1-1: Manufacturer: syz [ 1032.922772][ T11] usb 1-1: SerialNumber: syz [ 1032.959572][T15159] loop8: detected capacity change from 0 to 7 [ 1032.962100][ T11] usb 1-1: config 0 descriptor?? [ 1033.160860][T15159] Dev loop8: unable to read RDB block 7 [ 1033.160912][T15159] loop8: unable to read partition table [ 1033.185367][T15159] loop8: partition table beyond EOD, truncated [ 1033.185442][T15159] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1034.294697][ T11] usb 1-1: ignoring: probably an ADSL modem [ 1034.319502][ T11] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1034.546774][T15176] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2920'. [ 1035.293422][ T11] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1035.533366][ T11] usb 3-1: Using ep0 maxpacket: 8 [ 1035.811748][ T11] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1035.811804][ T11] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1035.811867][ T11] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1035.811891][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.754835][ T11] usb 3-1: config 0 descriptor?? [ 1036.768886][ T11] iowarrior 3-1:0.0: no interrupt-in endpoint found [ 1036.882085][ T9] usb 1-1: USB disconnect, device number 89 [ 1038.333840][T11804] usb 3-1: USB disconnect, device number 90 [ 1038.500611][T15218] netlink: 4456 bytes leftover after parsing attributes in process `syz.4.2934'. [ 1039.053548][ T9] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1039.067570][ T37] kauditd_printk_skb: 38 callbacks suppressed [ 1039.067635][ T37] audit: type=1326 audit(1782554334.643:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15221 comm="syz.0.2936" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66f020ce59 code=0x7fc00000 [ 1039.121103][T15233] netlink: 4456 bytes leftover after parsing attributes in process `syz.5.2940'. [ 1039.205555][T15234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2932'. [ 1039.223529][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1039.226456][ T9] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1039.226491][ T9] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1039.226520][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1039.226556][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 1039.226581][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.264931][ T11] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1039.295984][ T9] usb 5-1: config 0 descriptor?? [ 1039.433647][ T5884] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1039.459286][ T11] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1039.459378][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.459402][ T11] usb 3-1: Product: syz [ 1039.459417][ T11] usb 3-1: Manufacturer: syz [ 1039.459433][ T11] usb 3-1: SerialNumber: syz [ 1039.517765][T15218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1039.527249][T15218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1039.557808][ T11] usb 3-1: config 0 descriptor?? [ 1039.593816][ T5884] usb 6-1: Using ep0 maxpacket: 8 [ 1039.596359][ T5884] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1039.596395][ T5884] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1039.596424][ T5884] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1039.596460][ T5884] usb 6-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 1039.596494][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.625539][ T5884] usb 6-1: config 0 descriptor?? [ 1039.662999][ T37] audit: type=1326 audit(1782554335.233:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15221 comm="syz.0.2936" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66f020ce59 code=0x7fc00000 [ 1039.683390][ T37] audit: type=1326 audit(1782554335.243:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15221 comm="syz.0.2936" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f66f020ce59 code=0x7fc00000 [ 1039.684878][ T37] audit: type=1326 audit(1782554335.263:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15221 comm="syz.0.2936" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66f020ce59 code=0x7fc00000 [ 1039.687246][ T37] audit: type=1326 audit(1782554335.263:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15221 comm="syz.0.2936" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66f020ce59 code=0x7fc00000 [ 1039.721591][ T37] audit: type=1326 audit(1782554335.263:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15221 comm="syz.0.2936" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66f020ce59 code=0x7fc00000 [ 1039.722498][ T37] audit: type=1326 audit(1782554335.293:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15221 comm="syz.0.2936" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66f020ce59 code=0x7fc00000 [ 1039.746556][ T37] audit: type=1326 audit(1782554335.303:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15221 comm="syz.0.2936" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66f020ce59 code=0x7fc00000 [ 1039.749321][ T37] audit: type=1326 audit(1782554335.323:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15221 comm="syz.0.2936" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66f020ce59 code=0x7fc00000 [ 1039.780582][ T37] audit: type=1326 audit(1782554335.323:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15221 comm="syz.0.2936" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66f020ce59 code=0x7fc00000 [ 1039.910888][ T11] usb 3-1: ignoring: probably an ADSL modem [ 1039.923791][ T9] magicmouse 0003:05AC:0269.0012: ignoring exceeding usage max [ 1039.928077][ T9] magicmouse 0003:05AC:0269.0012: unknown main item tag 0x0 [ 1039.928114][ T9] magicmouse 0003:05AC:0269.0012: unknown main item tag 0x0 [ 1039.928144][ T9] magicmouse 0003:05AC:0269.0012: unknown main item tag 0x0 [ 1039.928226][ T9] magicmouse 0003:05AC:0269.0012: unknown main item tag 0x0 [ 1039.928256][ T9] magicmouse 0003:05AC:0269.0012: unknown main item tag 0x0 [ 1039.928282][ T9] magicmouse 0003:05AC:0269.0012: unknown main item tag 0x0 [ 1039.928432][ T9] magicmouse 0003:05AC:0269.0012: item fetching failed at offset 24/40 [ 1039.929687][ T9] magicmouse 0003:05AC:0269.0012: magicmouse hid parse failed [ 1039.929832][ T9] magicmouse 0003:05AC:0269.0012: probe with driver magicmouse failed with error -22 [ 1040.068897][T15233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1040.087703][T15233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1040.165999][T11804] usb 5-1: USB disconnect, device number 118 [ 1040.321391][ T11] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1040.376508][ T5884] magicmouse 0003:05AC:0269.0013: ignoring exceeding usage max [ 1040.395942][ T5884] magicmouse 0003:05AC:0269.0013: unknown main item tag 0x0 [ 1040.395980][ T5884] magicmouse 0003:05AC:0269.0013: unknown main item tag 0x0 [ 1040.396009][ T5884] magicmouse 0003:05AC:0269.0013: unknown main item tag 0x0 [ 1040.396037][ T5884] magicmouse 0003:05AC:0269.0013: unknown main item tag 0x0 [ 1040.396138][ T5884] magicmouse 0003:05AC:0269.0013: item fetching failed at offset 24/40 [ 1040.419332][ T5884] magicmouse 0003:05AC:0269.0013: magicmouse hid parse failed [ 1040.419678][ T5884] magicmouse 0003:05AC:0269.0013: probe with driver magicmouse failed with error -22 [ 1040.535997][ T11] usb 6-1: USB disconnect, device number 28 [ 1041.716591][ T5885] usb 3-1: USB disconnect, device number 91 [ 1042.628982][ T11] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1042.874161][ T11] usb 1-1: Using ep0 maxpacket: 8 [ 1042.885412][ T11] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1042.885563][ T11] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1042.885668][ T11] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1042.885696][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.176586][ T11] usb 1-1: config 0 descriptor?? [ 1043.525364][ T11] iowarrior 1-1:0.0: no interrupt-in endpoint found [ 1043.863982][T14755] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1044.074082][T14755] usb 5-1: Using ep0 maxpacket: 32 [ 1044.080608][T14755] usb 5-1: config index 0 descriptor too short (expected 13339, got 27) [ 1044.080679][T14755] usb 5-1: config 108 has an invalid descriptor of length 32, skipping remainder of the config [ 1044.080760][T14755] usb 5-1: config 108 has 0 interfaces, different from the descriptor's value: 32 [ 1044.091622][T14755] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1044.091702][T14755] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1044.091803][T14755] usb 5-1: Product: syz [ 1044.091856][T14755] usb 5-1: Manufacturer: syz [ 1044.091874][T14755] usb 5-1: SerialNumber: syz [ 1044.224086][ T5706] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1044.483821][ T5706] usb 2-1: Using ep0 maxpacket: 16 [ 1044.486265][ T5706] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 1044.637861][ T5706] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=de.06 [ 1044.637896][ T5706] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.638270][ T5706] usb 2-1: Product: syz [ 1044.638653][ T5706] usb 2-1: Manufacturer: syz [ 1044.638813][ T5706] usb 2-1: SerialNumber: syz [ 1045.827017][ T5706] usb 2-1: config 0 descriptor?? [ 1048.632629][T14755] usb 5-1: USB disconnect, device number 119 [ 1048.708390][ T5706] usb 2-1: can't set config #0, error -71 [ 1049.889478][ T5706] usb 2-1: USB disconnect, device number 64 [ 1050.257977][ T11] usb 1-1: USB disconnect, device number 90 [ 1050.964105][ T5884] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1051.220406][ T5884] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1051.277113][ T5884] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1051.277234][ T5884] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1051.289861][ T5884] usb 6-1: string descriptor 0 read error: -22 [ 1051.289976][ T5884] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1051.289997][ T5884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.757426][ T9] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1051.934487][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1052.118717][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1052.118755][ T9] usb 2-1: config 0 has no interfaces? [ 1052.320171][ T9] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1052.320257][ T9] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1052.320317][ T9] usb 2-1: Product: syz [ 1052.320334][ T9] usb 2-1: Manufacturer: syz [ 1052.320394][ T9] usb 2-1: SerialNumber: syz [ 1052.674577][ T9] usb 2-1: config 0 descriptor?? [ 1053.084582][ T5706] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1053.400047][ T5706] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1053.400119][ T5706] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.400179][ T5706] usb 5-1: Product: syz [ 1053.400197][ T5706] usb 5-1: Manufacturer: syz [ 1053.400271][ T5706] usb 5-1: SerialNumber: syz [ 1055.648451][ T5706] usb 5-1: config 0 descriptor?? [ 1056.565218][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1056.565296][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1057.186714][T14755] usb 2-1: USB disconnect, device number 65 [ 1057.740551][ T5706] usb 5-1: can't set config #0, error -71 [ 1057.870467][ T5706] usb 5-1: USB disconnect, device number 120 [ 1058.060773][ T5884] usb 6-1: can't set config #1, error -71 [ 1058.082298][ T5884] usb 6-1: USB disconnect, device number 29 [ 1058.815877][T11804] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1058.964410][T11804] usb 3-1: Using ep0 maxpacket: 8 [ 1058.967081][T11804] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1058.967137][T11804] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1058.967183][T11804] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1058.967208][T11804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.972111][T11804] usb 3-1: config 0 descriptor?? [ 1058.988797][T11804] iowarrior 3-1:0.0: no interrupt-in endpoint found [ 1061.115552][T14755] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1061.269550][T14755] usb 1-1: Using ep0 maxpacket: 32 [ 1061.277251][T14755] usb 1-1: config index 0 descriptor too short (expected 13339, got 27) [ 1061.277298][T14755] usb 1-1: config 108 has an invalid descriptor of length 32, skipping remainder of the config [ 1061.277361][T14755] usb 1-1: config 108 has 0 interfaces, different from the descriptor's value: 32 [ 1061.285621][T14755] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1061.285665][T14755] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1061.285728][T14755] usb 1-1: Product: syz [ 1061.285745][T14755] usb 1-1: Manufacturer: syz [ 1061.285816][T14755] usb 1-1: SerialNumber: syz [ 1061.540627][ T5706] usb 3-1: USB disconnect, device number 92 [ 1065.373831][T14755] usb 1-1: USB disconnect, device number 91 [ 1067.074316][T15355] 9pnet_fd: Insufficient options for proto=fd [ 1067.161120][T15358] FAULT_INJECTION: forcing a failure. [ 1067.161120][T15358] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1067.161160][T15358] CPU: 0 UID: 0 PID: 15358 Comm: syz.1.2976 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1067.161189][T15358] Tainted: [L]=SOFTLOCKUP [ 1067.161198][T15358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1067.161211][T15358] Call Trace: [ 1067.161220][T15358] [ 1067.161229][T15358] dump_stack_lvl+0xe8/0x150 [ 1067.161274][T15358] should_fail_ex+0x467/0x600 [ 1067.161306][T15358] _copy_from_user+0x2d/0xb0 [ 1067.161339][T15358] kstrtouint_from_user+0xd6/0x180 [ 1067.161451][T15358] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1067.161475][T15358] ? __lock_acquire+0x683/0x2ce0 [ 1067.161523][T15358] proc_fail_nth_write+0x8e/0x210 [ 1067.161557][T15358] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1067.161594][T15358] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1067.161624][T15358] vfs_write+0x29f/0xbb0 [ 1067.161670][T15358] ? __pfx_vfs_write+0x10/0x10 [ 1067.161706][T15358] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1067.161731][T15358] ? lockdep_hardirqs_on+0x7a/0x110 [ 1067.161754][T15358] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1067.161779][T15358] ? mutex_lock_nested+0x152/0x1d0 [ 1067.161807][T15358] ? fdget_pos+0x252/0x320 [ 1067.161858][T15358] ksys_write+0x156/0x270 [ 1067.161895][T15358] ? __pfx_ksys_write+0x10/0x10 [ 1067.161947][T15358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.161973][T15358] do_syscall_64+0x174/0x580 [ 1067.161996][T15358] ? trace_irq_disable+0x3b/0x140 [ 1067.162024][T15358] ? clear_bhb_loop+0x40/0x90 [ 1067.162052][T15358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.162074][T15358] RIP: 0033:0x7f734974d68e [ 1067.162096][T15358] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1067.162117][T15358] RSP: 002b:00007f73479ddfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1067.162140][T15358] RAX: ffffffffffffffda RBX: 00007f73479de6c0 RCX: 00007f734974d68e [ 1067.162156][T15358] RDX: 0000000000000001 RSI: 00007f73479de0a0 RDI: 0000000000000004 [ 1067.162170][T15358] RBP: 00007f73479de090 R08: 0000000000000000 R09: 0000000000000000 [ 1067.162183][T15358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1067.162196][T15358] R13: 00007f7349a06038 R14: 00007f7349a05fa0 R15: 00007ffcf807ecd8 [ 1067.162232][T15358] [ 1067.574737][T11900] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1067.672323][T15364] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2979'. [ 1067.672463][T15364] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1067.672478][T15364] IPv6: NLM_F_CREATE should be set when creating new route [ 1067.704705][T11900] usb 3-1: device descriptor read/64, error -71 [ 1068.062140][T15370] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2982'. [ 1068.062165][T15370] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2982'. [ 1068.864748][T11900] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1068.995013][T11900] usb 3-1: device descriptor read/64, error -71 [ 1069.110525][T11900] usb usb3-port1: attempt power cycle [ 1069.134751][T14755] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1069.294793][T14755] usb 1-1: Using ep0 maxpacket: 8 [ 1069.297610][T14755] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1069.297656][T14755] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1069.297682][T14755] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.352184][T14755] usb 1-1: config 0 descriptor?? [ 1069.367874][T14755] iowarrior 1-1:0.0: no interrupt-in endpoint found [ 1069.444706][T11900] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1069.740191][T11900] usb 3-1: device descriptor read/8, error -71 [ 1069.975215][T11900] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1070.010282][T11900] usb 3-1: device descriptor read/8, error -71 [ 1070.440800][T11900] usb usb3-port1: unable to enumerate USB device [ 1071.882828][T15401] FAULT_INJECTION: forcing a failure. [ 1071.882828][T15401] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1071.882859][T15401] CPU: 1 UID: 0 PID: 15401 Comm: syz.2.2992 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1071.882883][T15401] Tainted: [L]=SOFTLOCKUP [ 1071.882889][T15401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1071.882900][T15401] Call Trace: [ 1071.882906][T15401] [ 1071.882913][T15401] dump_stack_lvl+0xe8/0x150 [ 1071.882939][T15401] should_fail_ex+0x467/0x600 [ 1071.882961][T15401] _copy_to_user+0x31/0xb0 [ 1071.882985][T15401] simple_read_from_buffer+0xe1/0x170 [ 1071.883012][T15401] proc_fail_nth_read+0x1be/0x230 [ 1071.883037][T15401] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1071.883060][T15401] ? rw_verify_area+0x250/0x4d0 [ 1071.883084][T15401] ? __fget_files+0x2a/0x420 [ 1071.883105][T15401] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1071.883125][T15401] vfs_read+0x219/0xa90 [ 1071.883156][T15401] ? __pfx_vfs_read+0x10/0x10 [ 1071.883183][T15401] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1071.883201][T15401] ? lockdep_hardirqs_on+0x7a/0x110 [ 1071.883217][T15401] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1071.883233][T15401] ? mutex_lock_nested+0x152/0x1d0 [ 1071.883254][T15401] ? fdget_pos+0x252/0x320 [ 1071.883281][T15401] ksys_read+0x156/0x270 [ 1071.883307][T15401] ? __pfx_ksys_read+0x10/0x10 [ 1071.883345][T15401] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.883363][T15401] do_syscall_64+0x174/0x580 [ 1071.883379][T15401] ? trace_irq_disable+0x3b/0x140 [ 1071.883400][T15401] ? clear_bhb_loop+0x40/0x90 [ 1071.883420][T15401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.883435][T15401] RIP: 0033:0x7efcec1ed68e [ 1071.883451][T15401] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1071.883464][T15401] RSP: 002b:00007efcea485fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1071.883481][T15401] RAX: ffffffffffffffda RBX: 00007efcea4866c0 RCX: 00007efcec1ed68e [ 1071.883493][T15401] RDX: 000000000000000f RSI: 00007efcea4860a0 RDI: 0000000000000004 [ 1071.883503][T15401] RBP: 00007efcea486090 R08: 0000000000000000 R09: 0000000000000000 [ 1071.883513][T15401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1071.883523][T15401] R13: 00007efcec4a6038 R14: 00007efcec4a5fa0 R15: 00007fff5700c288 [ 1071.883548][T15401] [ 1072.927907][ T5885] usb 1-1: USB disconnect, device number 92 [ 1073.001901][T15407] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2993'. [ 1073.001990][T15407] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1073.001999][T15407] IPv6: NLM_F_CREATE should be set when creating new route [ 1073.274278][T15411] netlink: 4456 bytes leftover after parsing attributes in process `syz.2.2995'. [ 1073.575008][ T5706] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1074.794946][ T5706] usb 3-1: Using ep0 maxpacket: 8 [ 1074.799929][ T5706] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1074.799967][ T5706] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1074.799996][ T5706] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1074.800033][ T5706] usb 3-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 1074.800057][ T5706] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.815167][ T5706] usb 3-1: config 0 descriptor?? [ 1075.033320][T15411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1075.047063][T15411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1075.263129][ T5706] magicmouse 0003:05AC:0269.0014: ignoring exceeding usage max [ 1075.281329][ T5706] hid_parser_main: 2 callbacks suppressed [ 1075.281358][ T5706] magicmouse 0003:05AC:0269.0014: unknown main item tag 0x0 [ 1075.281390][ T5706] magicmouse 0003:05AC:0269.0014: unknown main item tag 0x0 [ 1075.281418][ T5706] magicmouse 0003:05AC:0269.0014: unknown main item tag 0x0 [ 1075.281445][ T5706] magicmouse 0003:05AC:0269.0014: unknown main item tag 0x0 [ 1075.281473][ T5706] magicmouse 0003:05AC:0269.0014: unknown main item tag 0x0 [ 1075.281508][ T5706] magicmouse 0003:05AC:0269.0014: unknown main item tag 0x0 [ 1075.281594][ T5706] magicmouse 0003:05AC:0269.0014: item fetching failed at offset 24/40 [ 1075.282623][ T5706] magicmouse 0003:05AC:0269.0014: magicmouse hid parse failed [ 1075.392679][ T5706] magicmouse 0003:05AC:0269.0014: probe with driver magicmouse failed with error -22 [ 1075.460108][ T5885] usb 3-1: USB disconnect, device number 97 [ 1075.581190][T15439] SQUASHFS error: Failed to read block 0x0: -5 [ 1075.581256][T15439] unable to read squashfs_super_block [ 1075.614905][T14755] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1075.765004][T15443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3000'. [ 1075.769617][T14755] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1075.776151][T14755] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1075.776227][T14755] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1075.806575][T14755] usb 1-1: string descriptor 0 read error: -22 [ 1075.806990][T14755] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1075.807052][T14755] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.864868][ T37] kauditd_printk_skb: 9 callbacks suppressed [ 1075.864887][ T37] audit: type=1326 audit(1782554371.432:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15441 comm="syz.5.3007" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7a98ce59 code=0x7fc00000 [ 1075.943722][T14755] usb 1-1: selecting invalid altsetting 1 [ 1076.506882][ T37] audit: type=1326 audit(1782554372.082:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15441 comm="syz.5.3007" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7a98ce59 code=0x7fc00000 [ 1076.506940][ T37] audit: type=1326 audit(1782554372.082:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15441 comm="syz.5.3007" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5a7a98ce59 code=0x7fc00000 [ 1076.506991][ T37] audit: type=1326 audit(1782554372.082:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15441 comm="syz.5.3007" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7a98ce59 code=0x7fc00000 [ 1076.507040][ T37] audit: type=1326 audit(1782554372.082:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15441 comm="syz.5.3007" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7a98ce59 code=0x7fc00000 [ 1076.507098][ T37] audit: type=1326 audit(1782554372.082:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15441 comm="syz.5.3007" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7a98ce59 code=0x7fc00000 [ 1076.507147][ T37] audit: type=1326 audit(1782554372.082:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15441 comm="syz.5.3007" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7a98ce59 code=0x7fc00000 [ 1076.507195][ T37] audit: type=1326 audit(1782554372.082:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15441 comm="syz.5.3007" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7a98ce59 code=0x7fc00000 [ 1076.507244][ T37] audit: type=1326 audit(1782554372.082:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15441 comm="syz.5.3007" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7a98ce59 code=0x7fc00000 [ 1076.507291][ T37] audit: type=1326 audit(1782554372.082:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15441 comm="syz.5.3007" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7a98ce59 code=0x7fc00000 [ 1076.761625][T14755] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1077.815128][T14755] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1078.772494][T14755] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1078.789141][T14755] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1078.789228][T14755] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1078.908912][T14755] usb 3-1: string descriptor 0 read error: -22 [ 1078.909030][T14755] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1078.909050][T14755] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.970226][T14755] usb 3-1: selecting invalid altsetting 1 [ 1078.970795][T14755] usb 3-1: unit 3 not found! [ 1079.022349][ T8994] usb 1-1: USB disconnect, device number 93 [ 1079.154472][T14755] usb 3-1: cannot request logical cluster ID: 0 (err: -32) [ 1079.154494][T14755] usb 3-1: invalid MIXER UNIT descriptor 6 [ 1079.179668][T15458] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3011'. [ 1079.438114][T14755] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -32 [ 1079.514981][T14755] usb 3-1: USB disconnect, device number 98 [ 1079.585462][T15471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3015'. [ 1079.585481][T15471] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3015'. [ 1079.772793][T15478] netlink: 4456 bytes leftover after parsing attributes in process `syz.1.3018'. [ 1079.785002][ T5885] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1079.937359][ T5885] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1079.938594][ T5885] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1079.938620][ T5885] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1079.943125][ T5885] usb 6-1: string descriptor 0 read error: -22 [ 1079.943246][ T5885] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1079.943266][ T5885] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.021963][ T5885] usb 6-1: selecting invalid altsetting 1 [ 1080.022850][ T5885] usb 6-1: unit 3 not found! [ 1080.055169][ T5884] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1080.205066][ T5884] usb 2-1: Using ep0 maxpacket: 8 [ 1080.207803][ T5884] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1080.208065][ T5884] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1080.208104][ T5884] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1080.208141][ T5884] usb 2-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 1080.208225][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.269801][ T5885] usb 6-1: cannot request logical cluster ID: 0 (err: -32) [ 1080.269829][ T5885] usb 6-1: invalid MIXER UNIT descriptor 6 [ 1080.321743][ T5884] usb 2-1: config 0 descriptor?? [ 1080.342416][T15490] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3016'. [ 1080.432368][T15485] lo speed is unknown, defaulting to 1000 [ 1080.448090][T15485] wlan0 speed is unknown, defaulting to 1000 [ 1080.569060][T15478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1080.594518][T15478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1080.665107][ T8994] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1080.839399][ T8994] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1080.841140][ T8994] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1080.841167][ T8994] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1080.903300][ T8994] usb 5-1: string descriptor 0 read error: -22 [ 1080.903449][ T8994] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1080.903476][ T8994] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.963790][ T5884] magicmouse 0003:05AC:0269.0015: ignoring exceeding usage max [ 1080.976336][ T5884] magicmouse 0003:05AC:0269.0015: unknown main item tag 0x0 [ 1080.976372][ T5884] magicmouse 0003:05AC:0269.0015: unknown main item tag 0x0 [ 1080.976400][ T5884] magicmouse 0003:05AC:0269.0015: unknown main item tag 0x0 [ 1080.976428][ T5884] magicmouse 0003:05AC:0269.0015: unknown main item tag 0x0 [ 1080.976456][ T5884] magicmouse 0003:05AC:0269.0015: unknown main item tag 0x0 [ 1080.976484][ T5884] magicmouse 0003:05AC:0269.0015: unknown main item tag 0x0 [ 1080.977275][ T5884] magicmouse 0003:05AC:0269.0015: item fetching failed at offset 24/40 [ 1080.982214][ T5885] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -32 [ 1081.007226][ T5884] magicmouse 0003:05AC:0269.0015: magicmouse hid parse failed [ 1081.007539][ T5884] magicmouse 0003:05AC:0269.0015: probe with driver magicmouse failed with error -22 [ 1081.157893][ T5885] usb 6-1: USB disconnect, device number 30 [ 1081.267735][ T5884] usb 2-1: USB disconnect, device number 66 [ 1081.290764][ T8994] usb 5-1: selecting invalid altsetting 1 [ 1081.291904][ T8994] usb 5-1: unit 3 not found! [ 1081.291925][ T8994] usb 5-1: unit 6 not found! [ 1081.551810][ T8994] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1081.695125][ T5885] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1081.855604][ T5885] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1081.857909][ T5885] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1081.857934][ T5885] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1081.864541][ T5885] usb 6-1: string descriptor 0 read error: -22 [ 1081.864659][ T5885] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1081.864684][ T5885] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.955359][ T5885] usb 6-1: selecting invalid altsetting 1 [ 1083.084014][ T5885] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1083.440666][T14755] usb 5-1: USB disconnect, device number 121 [ 1083.785102][ T5884] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1083.895256][T14755] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1083.947219][ T5884] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1083.948457][ T5884] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1083.948483][ T5884] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1083.951876][ T5884] usb 3-1: string descriptor 0 read error: -22 [ 1083.951992][ T5884] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1083.952010][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.071377][ T5884] usb 3-1: selecting invalid altsetting 1 [ 1084.072221][ T5884] usb 3-1: unit 3 not found! [ 1084.088220][T14755] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1084.088252][T14755] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1084.091372][T14755] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1084.091403][T14755] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.091424][T14755] usb 5-1: Product: syz [ 1084.091439][T14755] usb 5-1: Manufacturer: syz [ 1084.091464][T14755] usb 5-1: SerialNumber: syz [ 1084.155808][T14755] usb 5-1: config 0 descriptor?? [ 1084.173739][T14755] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1084.229473][ T5884] usb 3-1: cannot request logical cluster ID: 0 (err: -32) [ 1084.229503][ T5884] usb 3-1: invalid MIXER UNIT descriptor 6 [ 1084.469354][ T5884] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -32 [ 1084.551230][ T5884] usb 3-1: USB disconnect, device number 99 [ 1084.620591][ T5706] usb 6-1: USB disconnect, device number 31 [ 1084.986355][ T37] kauditd_printk_skb: 38 callbacks suppressed [ 1084.986376][ T37] audit: type=1326 audit(1782554380.561:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15519 comm="syz.5.3032" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7a98ce59 code=0x7fc00000 [ 1085.034925][T15510] autofs: Bad value for 'fd' [ 1085.035301][ T5884] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1085.185345][T11900] usb 1-1: new full-speed USB device number 94 using dummy_hcd [ 1085.185704][ T5884] usb 3-1: Using ep0 maxpacket: 8 [ 1085.190442][ T5884] usb 3-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 1085.190471][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 1085.190492][ T5884] usb 3-1: Product: syz [ 1085.190509][ T5884] usb 3-1: Manufacturer: syz [ 1085.190520][ T5884] usb 3-1: SerialNumber: syz [ 1085.222206][ T5884] usb 3-1: config 0 descriptor?? [ 1085.269396][ T5884] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 1085.343469][T11900] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1085.343561][T11900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.343587][T11900] usb 1-1: Product: syz [ 1085.343599][T11900] usb 1-1: Manufacturer: syz [ 1085.343615][T11900] usb 1-1: SerialNumber: syz [ 1085.412364][T11900] usb 1-1: config 0 descriptor?? [ 1085.454566][T11900] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1085.480001][T15518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1085.494777][T15518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1085.538967][ T36] usb 5-1: USB disconnect, device number 122 [ 1085.625937][ T37] audit: type=1326 audit(1782554381.201:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15519 comm="syz.5.3032" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7a98ce59 code=0x7fc00000 [ 1085.627305][ T37] audit: type=1326 audit(1782554381.201:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15519 comm="syz.5.3032" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5a7a98ce59 code=0x7fc00000 [ 1085.627698][ T37] audit: type=1326 audit(1782554381.201:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15519 comm="syz.5.3032" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7a98ce59 code=0x7fc00000 [ 1085.628076][ T37] audit: type=1326 audit(1782554381.201:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15519 comm="syz.5.3032" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7a98ce59 code=0x7fc00000 [ 1085.630143][ T37] audit: type=1326 audit(1782554381.201:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15519 comm="syz.5.3032" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7a98ce59 code=0x7fc00000 [ 1085.653016][ T37] audit: type=1326 audit(1782554381.211:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15519 comm="syz.5.3032" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7a98ce59 code=0x7fc00000 [ 1085.681587][ T37] audit: type=1326 audit(1782554381.211:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15519 comm="syz.5.3032" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7a98ce59 code=0x7fc00000 [ 1085.774980][ T37] audit: type=1326 audit(1782554381.261:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15519 comm="syz.5.3032" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7a98ce59 code=0x7fc00000 [ 1085.804073][ T5884] gspca_sn9c2028: read1 error -110 [ 1085.845736][ T5884] gspca_sn9c2028: read1 error -32 [ 1085.847532][ T5884] gspca_sn9c2028: read1 error -32 [ 1085.848853][ T5884] sn9c2028 3-1:0.0: probe with driver sn9c2028 failed with error -32 [ 1085.853437][ T37] audit: type=1326 audit(1782554381.381:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15519 comm="syz.5.3032" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7a98ce59 code=0x7fc00000 [ 1085.895174][T14755] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1086.066624][T14755] usb 2-1: Using ep0 maxpacket: 8 [ 1086.098831][T14755] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1086.098868][T14755] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1086.098894][T14755] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1086.098929][T14755] usb 2-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 1086.098953][T14755] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.158299][T14755] usb 2-1: config 0 descriptor?? [ 1086.418860][ T5706] usb 3-1: USB disconnect, device number 100 [ 1086.605439][T11900] gspca_stk1135: reg_w 0x5 err -110 [ 1086.606495][T11900] gspca_stk1135: serial bus timeout: status=0x00 [ 1086.606511][T11900] gspca_stk1135: Sensor write failed [ 1086.606551][T11900] gspca_stk1135: serial bus timeout: status=0x00 [ 1086.606638][T11900] gspca_stk1135: Sensor write failed [ 1086.606678][T11900] gspca_stk1135: serial bus timeout: status=0x00 [ 1086.606691][T11900] gspca_stk1135: Sensor read failed [ 1086.606729][T11900] gspca_stk1135: serial bus timeout: status=0x00 [ 1086.606740][T11900] gspca_stk1135: Sensor read failed [ 1086.606755][T11900] gspca_stk1135: Detected sensor type unknown (0x0) [ 1086.606794][T11900] gspca_stk1135: serial bus timeout: status=0x00 [ 1086.606804][T11900] gspca_stk1135: Sensor read failed [ 1086.606841][T11900] gspca_stk1135: serial bus timeout: status=0x00 [ 1086.606852][T11900] gspca_stk1135: Sensor read failed [ 1086.606885][T11900] gspca_stk1135: serial bus timeout: status=0x00 [ 1086.606896][T11900] gspca_stk1135: Sensor write failed [ 1086.615357][T11900] gspca_stk1135: serial bus timeout: status=0x00 [ 1086.615380][T11900] gspca_stk1135: Sensor write failed [ 1086.615477][T11900] stk1135 1-1:0.0: probe with driver stk1135 failed with error -110 [ 1086.753064][T14755] itetech 0003:048D:8595.0016: unknown main item tag 0x0 [ 1086.753102][T14755] itetech 0003:048D:8595.0016: unknown main item tag 0x0 [ 1086.753132][T14755] itetech 0003:048D:8595.0016: unknown main item tag 0x0 [ 1086.753158][T14755] itetech 0003:048D:8595.0016: unknown main item tag 0x0 [ 1086.753192][T14755] itetech 0003:048D:8595.0016: unknown main item tag 0x0 [ 1086.753220][T14755] itetech 0003:048D:8595.0016: unknown main item tag 0x0 [ 1086.753249][T14755] itetech 0003:048D:8595.0016: unknown main item tag 0x0 [ 1086.753277][T14755] itetech 0003:048D:8595.0016: unknown main item tag 0x0 [ 1086.753303][T14755] itetech 0003:048D:8595.0016: unknown main item tag 0x0 [ 1086.753330][T14755] itetech 0003:048D:8595.0016: unknown main item tag 0x0 [ 1086.839733][T14755] itetech 0003:048D:8595.0016: hidraw0: USB HID v0.77 Device [HID 048d:8595] on usb-dummy_hcd.1-1/input0 [ 1086.997655][T11900] usb 1-1: USB disconnect, device number 94 [ 1087.172152][ T8994] usb 2-1: USB disconnect, device number 67 [ 1087.345278][ T5884] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1087.374142][T15533] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3036'. [ 1087.510963][ T5884] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1087.511948][ T5884] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1087.511982][ T5884] usb 3-1: can't read configurations, error -71 [ 1087.930429][T15556] FAULT_INJECTION: forcing a failure. [ 1087.930429][T15556] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1087.930484][T15556] CPU: 1 UID: 0 PID: 15556 Comm: syz.5.3044 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1087.930515][T15556] Tainted: [L]=SOFTLOCKUP [ 1087.930531][T15556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1087.930546][T15556] Call Trace: [ 1087.930554][T15556] [ 1087.930564][T15556] dump_stack_lvl+0xe8/0x150 [ 1087.930605][T15556] should_fail_ex+0x467/0x600 [ 1087.930628][T15556] _copy_from_iter+0x1d3/0x1660 [ 1087.930650][T15556] ? rcu_is_watching+0x15/0xb0 [ 1087.930676][T15556] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1087.930699][T15556] ? __pfx__copy_from_iter+0x10/0x10 [ 1087.930718][T15556] ? __alloc_skb+0x276/0x7a0 [ 1087.930747][T15556] ? __alloc_skb+0x276/0x7a0 [ 1087.930767][T15556] ? netlink_sendmsg+0x650/0xb40 [ 1087.930789][T15556] ? skb_put+0x112/0x210 [ 1087.930809][T15556] netlink_sendmsg+0x6c0/0xb40 [ 1087.930836][T15556] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1087.930859][T15556] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1087.930888][T15556] ? __kernel_text_address+0xd/0x30 [ 1087.930909][T15556] ? unwind_get_return_address+0x4d/0x90 [ 1087.930935][T15556] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1087.930954][T15556] sock_sendmsg_nosec+0x13a/0x180 [ 1087.930982][T15556] ____sys_sendmsg+0x565/0x870 [ 1087.931002][T15556] ? __might_fault+0xaf/0x130 [ 1087.931031][T15556] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1087.931058][T15556] ? import_iovec+0x73/0xa0 [ 1087.931082][T15556] ___sys_sendmsg+0x2a5/0x360 [ 1087.931102][T15556] ? __lock_acquire+0x683/0x2ce0 [ 1087.931127][T15556] ? __pfx____sys_sendmsg+0x10/0x10 [ 1087.931172][T15556] ? __fget_files+0x2a/0x420 [ 1087.931192][T15556] ? __fget_files+0x3a8/0x420 [ 1087.931245][T15556] __x64_sys_sendmsg+0x1b7/0x290 [ 1087.931277][T15556] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1087.931324][T15556] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.931351][T15556] do_syscall_64+0x174/0x580 [ 1087.931372][T15556] ? trace_irq_disable+0x3b/0x140 [ 1087.931393][T15556] ? clear_bhb_loop+0x40/0x90 [ 1087.931413][T15556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.931429][T15556] RIP: 0033:0x7f5a7a98ce59 [ 1087.931445][T15556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1087.931460][T15556] RSP: 002b:00007f5a78be6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1087.931478][T15556] RAX: ffffffffffffffda RBX: 00007f5a7ac05fa0 RCX: 00007f5a7a98ce59 [ 1087.931490][T15556] RDX: 0000000000044050 RSI: 0000200000000480 RDI: 0000000000000003 [ 1087.931501][T15556] RBP: 00007f5a78be6090 R08: 0000000000000000 R09: 0000000000000000 [ 1087.931512][T15556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1087.931527][T15556] R13: 00007f5a7ac06038 R14: 00007f5a7ac05fa0 R15: 00007ffd95deb0d8 [ 1087.931552][T15556] [ 1088.665271][ T36] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1088.689361][ T8994] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1088.816644][ T36] usb 1-1: Using ep0 maxpacket: 8 [ 1088.820681][ T36] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1088.820751][ T36] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1088.820777][ T36] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1088.820804][ T36] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1088.820830][ T36] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1088.820876][ T36] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1088.820901][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.070820][ T36] usb 1-1: usb_control_msg returned -32 [ 1089.070874][ T36] usbtmc 1-1:16.0: can't read capabilities [ 1089.300219][ T8994] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1089.300251][ T8994] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1089.303431][ T8994] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1089.303460][ T8994] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.303482][ T8994] usb 2-1: Product: syz [ 1089.303498][ T8994] usb 2-1: Manufacturer: syz [ 1089.303514][ T8994] usb 2-1: SerialNumber: syz [ 1089.366443][ T8994] usb 2-1: config 0 descriptor?? [ 1089.407420][ T8994] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1089.564954][T15572] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 1089.707351][T15572] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3047'. [ 1089.707377][T15572] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3047'. [ 1089.707392][T15572] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3047'. [ 1089.843163][ T5885] usb 1-1: USB disconnect, device number 95 [ 1090.030040][T14755] usb 5-1: new full-speed USB device number 123 using dummy_hcd [ 1090.075075][ T37] kauditd_printk_skb: 128 callbacks suppressed [ 1090.075151][ T37] audit: type=1326 audit(1782554385.635:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15561 comm="syz.0.3047" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f66f01cd68e code=0x7ffc0000 [ 1090.141718][ T5706] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1090.176369][ T37] audit: type=1326 audit(1782554385.744:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15561 comm="syz.0.3047" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f66f01cd68e code=0x7ffc0000 [ 1090.213604][T14755] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1090.213948][T14755] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.214033][T14755] usb 5-1: Product: syz [ 1090.214051][T14755] usb 5-1: Manufacturer: syz [ 1090.214067][T14755] usb 5-1: SerialNumber: syz [ 1090.275564][T14755] usb 5-1: config 0 descriptor?? [ 1090.277707][ T37] audit: type=1326 audit(1782554385.844:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15561 comm="syz.0.3047" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f66f01cd68e code=0x7ffc0000 [ 1090.304840][ T5706] usb 3-1: Using ep0 maxpacket: 8 [ 1090.330285][T15558] autofs: Bad value for 'fd' [ 1090.344504][T14755] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1090.368083][T15578] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3051'. [ 1090.382917][ T37] audit: type=1326 audit(1782554385.943:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15561 comm="syz.0.3047" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f66f020ce59 code=0x7ffc0000 [ 1090.424385][ T5706] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1090.442590][ T5706] usb 3-1: config 18 has no interfaces? [ 1090.474308][ T5706] usb 3-1: New USB device found, idVendor=22b8, idProduct=2d99, bcdDevice=67.01 [ 1090.474727][ T5706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.474753][ T5706] usb 3-1: Product: syz [ 1090.474769][ T5706] usb 3-1: Manufacturer: syz [ 1090.474785][ T5706] usb 3-1: SerialNumber: syz [ 1090.957654][ T5885] usb 2-1: USB disconnect, device number 68 [ 1091.000785][ T8994] usb 3-1: USB disconnect, device number 103 [ 1091.319959][ T36] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1091.396339][T15595] netlink: 292 bytes leftover after parsing attributes in process `syz.0.3057'. [ 1091.451496][T14755] gspca_stk1135: reg_w 0x5 err -110 [ 1091.452553][T14755] gspca_stk1135: serial bus timeout: status=0x00 [ 1091.452568][T14755] gspca_stk1135: Sensor write failed [ 1091.452606][T14755] gspca_stk1135: serial bus timeout: status=0x00 [ 1091.452618][T14755] gspca_stk1135: Sensor write failed [ 1091.452662][T14755] gspca_stk1135: serial bus timeout: status=0x00 [ 1091.452673][T14755] gspca_stk1135: Sensor read failed [ 1091.452708][T14755] gspca_stk1135: serial bus timeout: status=0x00 [ 1091.452718][T14755] gspca_stk1135: Sensor read failed [ 1091.452726][T14755] gspca_stk1135: Detected sensor type unknown (0x0) [ 1091.452769][T14755] gspca_stk1135: serial bus timeout: status=0x00 [ 1091.452780][T14755] gspca_stk1135: Sensor read failed [ 1091.452818][T14755] gspca_stk1135: serial bus timeout: status=0x00 [ 1091.452828][T14755] gspca_stk1135: Sensor read failed [ 1091.452865][T14755] gspca_stk1135: serial bus timeout: status=0x00 [ 1091.452876][T14755] gspca_stk1135: Sensor write failed [ 1091.452921][T14755] gspca_stk1135: serial bus timeout: status=0x00 [ 1091.452932][T14755] gspca_stk1135: Sensor write failed [ 1091.453019][T14755] stk1135 5-1:0.0: probe with driver stk1135 failed with error -110 [ 1091.481115][ T36] usb 6-1: Using ep0 maxpacket: 8 [ 1091.522388][ T36] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1091.558884][ T36] usb 6-1: config 1 has an invalid interface number: 181 but max is 0 [ 1091.558914][ T36] usb 6-1: config 1 has no interface number 0 [ 1091.558949][ T36] usb 6-1: config 1 interface 181 has no altsetting 0 [ 1091.563726][ T5706] usb 5-1: USB disconnect, device number 123 [ 1091.621512][ T36] usb 6-1: New USB device found, idVendor=090a, idProduct=1200, bcdDevice=90.89 [ 1091.621545][ T36] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.621567][ T36] usb 6-1: Product: syz [ 1091.621582][ T36] usb 6-1: Manufacturer: syz [ 1091.621596][ T36] usb 6-1: SerialNumber: syz [ 1091.941000][T15603] netlink: 4456 bytes leftover after parsing attributes in process `syz.0.3060'. [ 1091.980472][ T36] usb-storage 6-1:1.181: USB Mass Storage device detected [ 1092.095957][ T5885] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1092.108439][ T36] usb 6-1: USB disconnect, device number 32 [ 1092.130492][T11240] udevd[11240]: setting owner of /dev/bus/usb/006/032 to uid=0, gid=0 failed: No such file or directory [ 1092.226922][ T5706] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1092.282867][ T5885] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1092.283790][ T5885] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1092.283827][ T5885] usb 2-1: can't read configurations, error -71 [ 1092.388096][ T5706] usb 1-1: Using ep0 maxpacket: 8 [ 1092.390875][ T5706] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1092.390914][ T5706] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1092.390934][ T5706] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1092.390959][ T5706] usb 1-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 1092.390976][ T5706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.463703][ T5706] usb 1-1: config 0 descriptor?? [ 1092.519064][T14755] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1092.680353][T14755] usb 5-1: Using ep0 maxpacket: 32 [ 1092.684141][T15603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1092.689934][T15603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1092.925076][T14755] usb 5-1: config 186 has an invalid interface number: 154 but max is 3 [ 1092.925125][T14755] usb 5-1: config 186 has an invalid interface number: 68 but max is 3 [ 1092.925148][T14755] usb 5-1: config 186 has an invalid interface association descriptor of length 6, skipping [ 1092.925170][T14755] usb 5-1: config 186 has an invalid interface number: 77 but max is 3 [ 1092.925192][T14755] usb 5-1: config 186 has an invalid interface number: 95 but max is 3 [ 1092.925214][T14755] usb 5-1: config 186 has no interface number 0 [ 1092.925231][T14755] usb 5-1: config 186 has no interface number 1 [ 1092.925249][T14755] usb 5-1: config 186 has no interface number 2 [ 1092.925267][T14755] usb 5-1: config 186 has no interface number 3 [ 1092.925362][T14755] usb 5-1: config 186 interface 154 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 1092.925387][T14755] usb 5-1: config 186 interface 154 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 1092.925414][T14755] usb 5-1: config 186 interface 154 altsetting 13 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 1092.925445][T14755] usb 5-1: config 186 interface 154 altsetting 13 has a duplicate endpoint with address 0x6, skipping [ 1092.925470][T14755] usb 5-1: config 186 interface 154 altsetting 13 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 1092.925498][T14755] usb 5-1: config 186 interface 154 altsetting 13 has a duplicate endpoint with address 0x3, skipping [ 1092.925523][T14755] usb 5-1: config 186 interface 154 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 1092.925546][T14755] usb 5-1: config 186 interface 154 altsetting 13 has a duplicate endpoint with address 0x4, skipping [ 1092.949015][T14755] usb 5-1: config 186 interface 68 altsetting 2 has a duplicate endpoint with address 0xB, skipping [ 1092.949111][T14755] usb 5-1: config 186 interface 68 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1092.949154][T14755] usb 5-1: config 186 interface 68 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1092.949218][T14755] usb 5-1: config 186 interface 68 altsetting 2 has a duplicate endpoint with address 0xD, skipping [ 1092.949272][T14755] usb 5-1: config 186 interface 68 altsetting 2 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 1092.949325][T14755] usb 5-1: config 186 interface 77 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 1092.949350][T14755] usb 5-1: config 186 interface 77 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 1092.949384][T14755] usb 5-1: config 186 interface 77 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 1092.949455][T14755] usb 5-1: config 186 interface 77 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 1092.949549][T14755] usb 5-1: config 186 interface 77 altsetting 1 has a duplicate endpoint with address 0xD, skipping [ 1092.949662][T14755] usb 5-1: config 186 interface 95 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 1092.949726][T14755] usb 5-1: config 186 interface 95 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 1093.540246][T14755] usb 5-1: config 186 interface 154 has no altsetting 0 [ 1093.540275][T14755] usb 5-1: config 186 interface 68 has no altsetting 0 [ 1093.540295][T14755] usb 5-1: config 186 interface 77 has no altsetting 0 [ 1093.540314][T14755] usb 5-1: config 186 interface 95 has no altsetting 0 [ 1093.705764][T14755] usb 5-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=18.ab [ 1093.705797][T14755] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.705820][T14755] usb 5-1: Product: 섓ሞ佝轀ㄔů比蟁㈰➺ᛞ읺⑽厡嘥鏾젾촽睼앴䏇Ჹ昭趙㨟뎨ꈨ⥶칐䈿ხ᠍쌠셲ᴐꘛ吭芯慄㘽设₏䟍⼮ꘟ줅ộ귂쒥懧嘜绱렛퉗䃋톻襃阓适鸧糜ꐑ쳖儼䐏邿ぞ쵙릩ᒞ猪퀐⢺碫ꢥ䳑੸趾灅 [ 1093.705853][T14755] usb 5-1: Manufacturer: 繺瘎펽븭ᚨﻆ仂顎휛貵欴桃僦䳭쇷赲腖誚袓歠ᗙ甌ꮔ껛ꠡ銕愮㈠琉⎫ [ 1093.705876][T14755] usb 5-1: SerialNumber: 譇䫞燜휚杷⟦꺇崞휏諴泵恉䫎䃈ޗ끇锗Ё⯆须たἶ荅呐㷐쏝灲퐏횂䓝Ⲍ䛪喝薤땿ꚴ戴㶫瘬啋劢戝榓綧仓∙ꟴ墍ꖆ‚⌎踕꒗༇ꅀﲔ癋ᯥ⯤Ⱐ嗨窻ຶ칱㑵糸झ퓣∘䔯ᵓ냔쒲攨㨦콹龎卪䧥怦¶㔌굫뾝⾌뛶婏࣏ᯆ南쉷┗긄撗눐路쮞弻⦂䤔履᪢s뺝墤 [ 1093.784722][ T5706] magicmouse 0003:05AC:0269.0017: ignoring exceeding usage max [ 1093.818362][ T5706] hid_parser_main: 31 callbacks suppressed [ 1093.818435][ T5706] magicmouse 0003:05AC:0269.0017: unknown main item tag 0x0 [ 1093.820050][ T5706] magicmouse 0003:05AC:0269.0017: unknown main item tag 0x0 [ 1093.820135][ T5706] magicmouse 0003:05AC:0269.0017: unknown main item tag 0x0 [ 1093.820210][ T5706] magicmouse 0003:05AC:0269.0017: unknown main item tag 0x0 [ 1093.820293][ T5706] magicmouse 0003:05AC:0269.0017: unknown main item tag 0x0 [ 1093.820366][ T5706] magicmouse 0003:05AC:0269.0017: unknown main item tag 0x0 [ 1093.820639][ T5706] magicmouse 0003:05AC:0269.0017: item fetching failed at offset 24/40 [ 1093.842469][ T5706] magicmouse 0003:05AC:0269.0017: magicmouse hid parse failed [ 1093.842802][ T5706] magicmouse 0003:05AC:0269.0017: probe with driver magicmouse failed with error -22 [ 1094.095964][ T5706] usb 1-1: USB disconnect, device number 96 [ 1095.260796][T15637] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3071'. [ 1095.334986][T14755] videodev: could not get a free minor [ 1095.335025][T14755] dsbr100 5-1:186.68: couldn't register video device [ 1095.335322][T14755] dsbr100 5-1:186.68: probe with driver dsbr100 failed with error -23 [ 1095.364288][T14755] hub 5-1:186.77: Invalid hub with more than one config or interface [ 1095.364333][T14755] hub 5-1:186.77: probe with driver hub failed with error -22 [ 1095.383444][T14755] videodev: could not get a free minor [ 1095.383487][T14755] dsbr100 5-1:186.77: couldn't register video device [ 1095.386805][T14755] dsbr100 5-1:186.77: probe with driver dsbr100 failed with error -23 [ 1095.435448][T14755] videodev: could not get a free minor [ 1095.435466][T14755] dsbr100 5-1:186.95: couldn't register video device [ 1095.442446][T14755] dsbr100 5-1:186.95: probe with driver dsbr100 failed with error -23 [ 1095.470328][T14755] usb 5-1: USB disconnect, device number 124 [ 1095.680044][T15643] FAULT_INJECTION: forcing a failure. [ 1095.680044][T15643] name failslab, interval 1, probability 0, space 0, times 0 [ 1095.680081][T15643] CPU: 0 UID: 0 PID: 15643 Comm: syz.2.3073 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1095.680109][T15643] Tainted: [L]=SOFTLOCKUP [ 1095.680117][T15643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1095.680129][T15643] Call Trace: [ 1095.680138][T15643] [ 1095.680147][T15643] dump_stack_lvl+0xe8/0x150 [ 1095.680179][T15643] should_fail_ex+0x467/0x600 [ 1095.680207][T15643] should_failslab+0xa8/0x100 [ 1095.680238][T15643] kmem_cache_alloc_noprof+0xa4/0x650 [ 1095.680264][T15643] ? dst_alloc+0x105/0x170 [ 1095.680441][T15643] ? dst_alloc+0x105/0x170 [ 1095.680475][T15643] ? __pfx_ip6_dst_gc+0x10/0x10 [ 1095.680558][T15643] dst_alloc+0x105/0x170 [ 1095.680583][T15643] ? __rt6_find_exception_rcu+0x13b/0x4e0 [ 1095.680620][T15643] ip6_rt_cache_alloc+0x3ae/0xa10 [ 1095.680688][T15643] ? __pfx_ip6_rt_cache_alloc+0x10/0x10 [ 1095.680722][T15643] ? fib6_select_path+0x114/0xb50 [ 1095.680766][T15643] ip6_pol_route+0x1237/0x14d0 [ 1095.680800][T15643] ? ip6_pol_route+0x163/0x14d0 [ 1095.680839][T15643] ? __pfx_ip6_pol_route+0x10/0x10 [ 1095.680881][T15643] ? __lock_acquire+0x683/0x2ce0 [ 1095.680914][T15643] ? ip6_addr_string+0x263/0x300 [ 1095.680947][T15643] fib6_rule_lookup+0x36b/0x730 [ 1095.681027][T15643] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 1095.681065][T15643] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 1095.681099][T15643] ? ip6_route_output_flags+0x2e/0x5d0 [ 1095.681123][T15643] ? ip6_route_output_flags+0x2e/0x5d0 [ 1095.681161][T15643] ip6_route_output_flags+0x364/0x5d0 [ 1095.681183][T15643] ? ip6_route_output_flags+0x2e/0x5d0 [ 1095.681209][T15643] ip6_dst_lookup_tail+0x1a1/0x1610 [ 1095.681261][T15643] ? txopt_get+0x79/0x3f0 [ 1095.681290][T15643] ? txopt_get+0x79/0x3f0 [ 1095.681317][T15643] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 1095.681339][T15643] ? txopt_get+0x79/0x3f0 [ 1095.681362][T15643] ? txopt_get+0x79/0x3f0 [ 1095.681384][T15643] ? txopt_get+0x79/0x3f0 [ 1095.681412][T15643] ? txopt_get+0x343/0x3f0 [ 1095.681442][T15643] ? __pfx_txopt_get+0x10/0x10 [ 1095.681474][T15643] ip6_dst_lookup_flow+0x89/0x150 [ 1095.681505][T15643] rawv6_sendmsg+0xdd0/0x18c0 [ 1095.681544][T15643] ? smack_ipv6host_label+0x824/0x8e0 [ 1095.681569][T15643] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 1095.681605][T15643] ? smack_socket_sendmsg+0x4b4/0x590 [ 1095.681643][T15643] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 1095.681694][T15643] ? sock_rps_record_flow+0x19/0x350 [ 1095.681732][T15643] ? inet_sendmsg+0x298/0x320 [ 1095.681768][T15643] ? __pfx_inet_sendmsg+0x10/0x10 [ 1095.681801][T15643] sock_sendmsg_nosec+0x10e/0x180 [ 1095.681839][T15643] ____sys_sendmsg+0x565/0x870 [ 1095.681884][T15643] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1095.681918][T15643] ? import_iovec+0x73/0xa0 [ 1095.681950][T15643] ___sys_sendmsg+0x2a5/0x360 [ 1095.681973][T15643] ? __lock_acquire+0x683/0x2ce0 [ 1095.682004][T15643] ? __pfx____sys_sendmsg+0x10/0x10 [ 1095.682069][T15643] ? __fget_files+0x2a/0x420 [ 1095.682099][T15643] ? __fget_files+0x3a8/0x420 [ 1095.682141][T15643] __x64_sys_sendmsg+0x1b7/0x290 [ 1095.682173][T15643] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1095.682224][T15643] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1095.682249][T15643] do_syscall_64+0x174/0x580 [ 1095.682273][T15643] ? trace_irq_disable+0x3b/0x140 [ 1095.682300][T15643] ? clear_bhb_loop+0x40/0x90 [ 1095.682330][T15643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1095.682352][T15643] RIP: 0033:0x7efcec22ce59 [ 1095.682373][T15643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1095.682393][T15643] RSP: 002b:00007efcea486028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1095.682419][T15643] RAX: ffffffffffffffda RBX: 00007efcec4a5fa0 RCX: 00007efcec22ce59 [ 1095.682436][T15643] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1095.682456][T15643] RBP: 00007efcea486090 R08: 0000000000000000 R09: 0000000000000000 [ 1095.682472][T15643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1095.682486][T15643] R13: 00007efcec4a6038 R14: 00007efcec4a5fa0 R15: 00007fff5700c288 [ 1095.682524][T15643] [ 1095.734671][T15623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3065'. [ 1095.866573][ T5885] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 1096.137059][ T5885] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1096.137091][ T5885] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.137113][ T5885] usb 6-1: Product: syz [ 1096.137128][ T5885] usb 6-1: Manufacturer: syz [ 1096.137144][ T5885] usb 6-1: SerialNumber: syz [ 1096.184037][ T5885] usb 6-1: config 0 descriptor?? [ 1096.204632][ T5885] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1096.598897][T14755] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1097.417834][T14755] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1097.441379][T14755] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1097.441422][T14755] usb 5-1: can't read configurations, error -71 [ 1097.706636][ T5885] gspca_stk1135: reg_w 0x5 err -110 [ 1097.707692][ T5885] gspca_stk1135: serial bus timeout: status=0x00 [ 1097.707707][ T5885] gspca_stk1135: Sensor write failed [ 1097.707745][ T5885] gspca_stk1135: serial bus timeout: status=0x00 [ 1097.707756][ T5885] gspca_stk1135: Sensor write failed [ 1097.707796][ T5885] gspca_stk1135: serial bus timeout: status=0x00 [ 1097.707806][ T5885] gspca_stk1135: Sensor read failed [ 1097.707839][ T5885] gspca_stk1135: serial bus timeout: status=0x00 [ 1097.707850][ T5885] gspca_stk1135: Sensor read failed [ 1097.707858][ T5885] gspca_stk1135: Detected sensor type unknown (0x0) [ 1097.707902][ T5885] gspca_stk1135: serial bus timeout: status=0x00 [ 1097.707913][ T5885] gspca_stk1135: Sensor read failed [ 1097.707951][ T5885] gspca_stk1135: serial bus timeout: status=0x00 [ 1097.707961][ T5885] gspca_stk1135: Sensor read failed [ 1097.708000][ T5885] gspca_stk1135: serial bus timeout: status=0x00 [ 1097.708011][ T5885] gspca_stk1135: Sensor write failed [ 1097.708050][ T5885] gspca_stk1135: serial bus timeout: status=0x00 [ 1097.708061][ T5885] gspca_stk1135: Sensor write failed [ 1097.708173][ T5885] stk1135 6-1:0.0: probe with driver stk1135 failed with error -110 [ 1097.963841][T15660] netlink: 4456 bytes leftover after parsing attributes in process `syz.0.3078'. [ 1098.092010][ T8994] usb 6-1: USB disconnect, device number 33 [ 1099.297301][ T8994] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1099.458344][ T8994] usb 1-1: Using ep0 maxpacket: 8 [ 1099.461181][ T8994] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1099.461215][ T8994] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1099.461244][ T8994] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1099.461279][ T8994] usb 1-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 1099.461304][ T8994] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.468016][ T8994] usb 1-1: config 0 descriptor?? [ 1099.688215][T15660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1099.689403][T15660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1099.901408][ T5885] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1099.978265][ T8994] magicmouse 0003:05AC:0269.0018: ignoring exceeding usage max [ 1099.993888][ T8994] magicmouse 0003:05AC:0269.0018: unknown main item tag 0x0 [ 1099.993926][ T8994] magicmouse 0003:05AC:0269.0018: unknown main item tag 0x0 [ 1099.993956][ T8994] magicmouse 0003:05AC:0269.0018: unknown main item tag 0x0 [ 1099.993985][ T8994] magicmouse 0003:05AC:0269.0018: unknown main item tag 0x0 [ 1099.994015][ T8994] magicmouse 0003:05AC:0269.0018: unknown main item tag 0x0 [ 1099.994043][ T8994] magicmouse 0003:05AC:0269.0018: unknown main item tag 0x0 [ 1099.994130][ T8994] magicmouse 0003:05AC:0269.0018: item fetching failed at offset 24/40 [ 1100.273773][ T5885] usb 2-1: Using ep0 maxpacket: 32 [ 1100.280816][ T8994] magicmouse 0003:05AC:0269.0018: magicmouse hid parse failed [ 1100.302640][ T8994] magicmouse 0003:05AC:0269.0018: probe with driver magicmouse failed with error -22 [ 1100.585342][ T5885] usb 2-1: config 186 has an invalid interface number: 154 but max is 3 [ 1100.585373][ T5885] usb 2-1: config 186 has an invalid interface number: 68 but max is 3 [ 1100.585395][ T5885] usb 2-1: config 186 has an invalid interface association descriptor of length 6, skipping [ 1100.585414][ T5885] usb 2-1: config 186 has an invalid interface number: 77 but max is 3 [ 1100.585437][ T5885] usb 2-1: config 186 has an invalid interface number: 95 but max is 3 [ 1100.585458][ T5885] usb 2-1: config 186 has no interface number 0 [ 1100.585475][ T5885] usb 2-1: config 186 has no interface number 1 [ 1100.585491][ T5885] usb 2-1: config 186 has no interface number 2 [ 1100.585507][ T5885] usb 2-1: config 186 has no interface number 3 [ 1100.585617][ T5885] usb 2-1: config 186 interface 154 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 1100.585654][ T5885] usb 2-1: config 186 interface 154 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 1100.585681][ T5885] usb 2-1: config 186 interface 154 altsetting 13 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 1100.585826][ T5885] usb 2-1: config 186 interface 154 altsetting 13 has a duplicate endpoint with address 0x6, skipping [ 1100.585852][ T5885] usb 2-1: config 186 interface 154 altsetting 13 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 1100.585881][ T5885] usb 2-1: config 186 interface 154 altsetting 13 has a duplicate endpoint with address 0x3, skipping [ 1100.585903][ T5885] usb 2-1: config 186 interface 154 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 1100.585924][ T5885] usb 2-1: config 186 interface 154 altsetting 13 has a duplicate endpoint with address 0x4, skipping [ 1100.585962][ T5885] usb 2-1: config 186 interface 68 altsetting 2 has a duplicate endpoint with address 0xB, skipping [ 1100.585985][ T5885] usb 2-1: config 186 interface 68 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1100.586006][ T5885] usb 2-1: config 186 interface 68 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1100.586029][ T5885] usb 2-1: config 186 interface 68 altsetting 2 has a duplicate endpoint with address 0xD, skipping [ 1100.586055][ T5885] usb 2-1: config 186 interface 68 altsetting 2 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 1100.586112][ T5885] usb 2-1: config 186 interface 77 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 1100.586138][ T5885] usb 2-1: config 186 interface 77 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 1100.586164][ T5885] usb 2-1: config 186 interface 77 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 1100.586190][ T5885] usb 2-1: config 186 interface 77 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 1100.586215][ T5885] usb 2-1: config 186 interface 77 altsetting 1 has a duplicate endpoint with address 0xD, skipping [ 1100.586253][ T5885] usb 2-1: config 186 interface 95 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 1100.586278][ T5885] usb 2-1: config 186 interface 95 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 1100.586302][ T5885] usb 2-1: config 186 interface 154 has no altsetting 0 [ 1100.586322][ T5885] usb 2-1: config 186 interface 68 has no altsetting 0 [ 1100.586341][ T5885] usb 2-1: config 186 interface 77 has no altsetting 0 [ 1100.586361][ T5885] usb 2-1: config 186 interface 95 has no altsetting 0 [ 1100.596537][ T5885] usb 2-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=18.ab [ 1100.596633][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.596696][ T5885] usb 2-1: Product: 섓ሞ佝轀ㄔů比蟁㈰➺ᛞ읺⑽厡嘥鏾젾촽睼앴䏇Ჹ昭趙㨟뎨ꈨ⥶칐䈿ხ᠍쌠셲ᴐꘛ吭芯慄㘽设₏䟍⼮ꘟ줅ộ귂쒥懧嘜绱렛퉗䃋톻襃阓适鸧糜ꐑ쳖儼䐏邿ぞ쵙릩ᒞ猪퀐⢺碫ꢥ䳑੸趾灅 [ 1100.596783][ T5885] usb 2-1: Manufacturer: 繺瘎펽븭ᚨﻆ仂顎휛貵欴桃僦䳭쇷赲腖誚袓歠ᗙ甌ꮔ껛ꠡ銕愮㈠琉⎫ [ 1100.596837][ T5885] usb 2-1: SerialNumber: 譇䫞燜휚杷⟦꺇崞휏諴泵恉䫎䃈ޗ끇锗Ё⯆须たἶ荅呐㷐쏝灲퐏횂䓝Ⲍ䛪喝薤땿ꚴ戴㶫瘬啋劢戝榓綧仓∙ꟴ墍ꖆ‚⌎踕꒗༇ꅀﲔ癋ᯥ⯤Ⱐ嗨窻ຶ칱㑵糸झ퓣∘䔯ᵓ냔쒲攨㨦콹龎卪䧥怦¶㔌굫뾝⾌뛶婏࣏ᯆ南쉷┗긄撗눐路쮞弻⦂䤔履᪢s뺝墤 [ 1100.605597][ T8994] usb 1-1: USB disconnect, device number 97 [ 1101.426836][ T5885] videodev: could not get a free minor [ 1101.426848][ T5885] dsbr100 2-1:186.68: couldn't register video device [ 1101.427006][ T5885] dsbr100 2-1:186.68: probe with driver dsbr100 failed with error -23 [ 1101.470536][ T5885] hub 2-1:186.77: Invalid hub with more than one config or interface [ 1101.470580][ T5885] hub 2-1:186.77: probe with driver hub failed with error -22 [ 1101.502028][ T5885] videodev: could not get a free minor [ 1101.502044][ T5885] dsbr100 2-1:186.77: couldn't register video device [ 1101.502205][ T5885] dsbr100 2-1:186.77: probe with driver dsbr100 failed with error -23 [ 1101.555067][ T5885] videodev: could not get a free minor [ 1101.555081][ T5885] dsbr100 2-1:186.95: couldn't register video device [ 1101.555229][ T5885] dsbr100 2-1:186.95: probe with driver dsbr100 failed with error -23 [ 1101.613338][ T5885] usb 2-1: USB disconnect, device number 71 [ 1101.963523][T15696] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3089'. [ 1102.116186][ T36] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1102.358686][ T36] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1102.359755][ T36] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1102.359792][ T36] usb 3-1: can't read configurations, error -71 [ 1103.280332][ T5706] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1103.629414][ T5706] usb 1-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1103.629447][ T5706] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1103.666157][ T5706] usb 1-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1103.666191][ T5706] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.666213][ T5706] usb 1-1: Product: syz [ 1103.666228][ T5706] usb 1-1: Manufacturer: syz [ 1103.666245][ T5706] usb 1-1: SerialNumber: syz [ 1103.756003][ T5706] usb 1-1: config 0 descriptor?? [ 1104.482834][ T5706] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1105.316294][ T5726] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1105.440950][T15717] autofs: Bad value for 'fd' [ 1105.477156][ T5726] usb 2-1: Using ep0 maxpacket: 32 [ 1105.483863][ T5726] usb 2-1: config 186 has an invalid interface number: 154 but max is 3 [ 1105.483893][ T5726] usb 2-1: config 186 has an invalid interface number: 68 but max is 3 [ 1105.483915][ T5726] usb 2-1: config 186 has an invalid interface association descriptor of length 6, skipping [ 1105.484005][ T5726] usb 2-1: config 186 has an invalid interface number: 77 but max is 3 [ 1105.484030][ T5726] usb 2-1: config 186 has an invalid interface number: 95 but max is 3 [ 1105.484052][ T5726] usb 2-1: config 186 has no interface number 0 [ 1105.484071][ T5726] usb 2-1: config 186 has no interface number 1 [ 1105.484088][ T5726] usb 2-1: config 186 has no interface number 2 [ 1105.484165][ T5726] usb 2-1: config 186 has no interface number 3 [ 1105.484249][ T5726] usb 2-1: config 186 interface 154 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 1105.484332][ T5726] usb 2-1: config 186 interface 154 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 1105.484360][ T5726] usb 2-1: config 186 interface 154 altsetting 13 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 1105.484391][ T5726] usb 2-1: config 186 interface 154 altsetting 13 has a duplicate endpoint with address 0x6, skipping [ 1105.484418][ T5726] usb 2-1: config 186 interface 154 altsetting 13 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 1105.484505][ T5726] usb 2-1: config 186 interface 154 altsetting 13 has a duplicate endpoint with address 0x3, skipping [ 1105.484531][ T5726] usb 2-1: config 186 interface 154 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 1105.484554][ T5726] usb 2-1: config 186 interface 154 altsetting 13 has a duplicate endpoint with address 0x4, skipping [ 1105.484663][ T5726] usb 2-1: config 186 interface 68 altsetting 2 has a duplicate endpoint with address 0xB, skipping [ 1105.484695][ T5726] usb 2-1: config 186 interface 68 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1105.484719][ T5726] usb 2-1: config 186 interface 68 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1105.484742][ T5726] usb 2-1: config 186 interface 68 altsetting 2 has a duplicate endpoint with address 0xD, skipping [ 1105.484825][ T5726] usb 2-1: config 186 interface 68 altsetting 2 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 1105.484869][ T5726] usb 2-1: config 186 interface 77 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 1105.484895][ T5726] usb 2-1: config 186 interface 77 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 1105.484983][ T5726] usb 2-1: config 186 interface 77 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 1105.485010][ T5726] usb 2-1: config 186 interface 77 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 1105.485034][ T5726] usb 2-1: config 186 interface 77 altsetting 1 has a duplicate endpoint with address 0xD, skipping [ 1105.485071][ T5726] usb 2-1: config 186 interface 95 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 1105.485155][ T5726] usb 2-1: config 186 interface 95 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 1105.485179][ T5726] usb 2-1: config 186 interface 154 has no altsetting 0 [ 1105.485199][ T5726] usb 2-1: config 186 interface 68 has no altsetting 0 [ 1105.485218][ T5726] usb 2-1: config 186 interface 77 has no altsetting 0 [ 1105.485237][ T5726] usb 2-1: config 186 interface 95 has no altsetting 0 [ 1105.489565][ T5726] usb 2-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=18.ab [ 1105.489656][ T5726] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.489688][ T5726] usb 2-1: Product: 섓ሞ佝轀ㄔů比蟁㈰➺ᛞ읺⑽厡嘥鏾젾촽睼앴䏇Ჹ昭趙㨟뎨ꈨ⥶칐䈿ხ᠍쌠셲ᴐꘛ吭芯慄㘽设₏䟍⼮ꘟ줅ộ귂쒥懧嘜绱렛퉗䃋톻襃阓适鸧糜ꐑ쳖儼䐏邿ぞ쵙릩ᒞ猪퀐⢺碫ꢥ䳑੸趾灅 [ 1105.489720][ T5726] usb 2-1: Manufacturer: 繺瘎펽븭ᚨﻆ仂顎휛貵欴桃僦䳭쇷赲腖誚袓歠ᗙ甌ꮔ껛ꠡ銕愮㈠琉⎫ [ 1105.489742][ T5726] usb 2-1: SerialNumber: 譇䫞燜휚杷⟦꺇崞휏諴泵恉䫎䃈ޗ끇锗Ё⯆须たἶ荅呐㷐쏝灲퐏횂䓝Ⲍ䛪喝薤땿ꚴ戴㶫瘬啋劢戝榓綧仓∙ꟴ墍ꖆ‚⌎踕꒗༇ꅀﲔ癋ᯥ⯤Ⱐ嗨窻ຶ칱㑵糸झ퓣∘䔯ᵓ냔쒲攨㨦콹龎卪䧥怦¶㔌굫뾝⾌뛶婏࣏ᯆ南쉷┗긄撗눐路쮞弻⦂䤔履᪢s뺝墤 [ 1106.266520][ T9] usb 1-1: USB disconnect, device number 98 [ 1107.482413][ T5726] videodev: could not get a free minor [ 1107.482432][ T5726] dsbr100 2-1:186.68: couldn't register video device [ 1107.482649][ T5726] dsbr100 2-1:186.68: probe with driver dsbr100 failed with error -23 [ 1107.520083][ T5726] hub 2-1:186.77: Invalid hub with more than one config or interface [ 1107.520127][ T5726] hub 2-1:186.77: probe with driver hub failed with error -22 [ 1107.527122][ T5726] videodev: could not get a free minor [ 1107.527139][ T5726] dsbr100 2-1:186.77: couldn't register video device [ 1107.527391][ T5726] dsbr100 2-1:186.77: probe with driver dsbr100 failed with error -23 [ 1107.577935][ T5726] videodev: could not get a free minor [ 1107.577951][ T5726] dsbr100 2-1:186.95: couldn't register video device [ 1107.578159][ T5726] dsbr100 2-1:186.95: probe with driver dsbr100 failed with error -23 [ 1107.614271][ T5726] usb 2-1: USB disconnect, device number 72 [ 1108.032339][ T9] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1108.062581][ T5706] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1108.199843][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1108.201697][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1108.201723][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1108.235310][ T9] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1108.235726][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.235751][ T9] usb 5-1: Product: syz [ 1108.235767][ T9] usb 5-1: Manufacturer: syz [ 1108.235783][ T9] usb 5-1: SerialNumber: syz [ 1108.555693][ T5706] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1108.561726][ T5706] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1108.561776][ T5706] usb 6-1: can't read configurations, error -71 [ 1109.124992][ T9] usb 5-1: selecting invalid altsetting 1 [ 1109.125598][ T9] usb 5-1: unit 3 not found! [ 1109.125612][ T9] usb 5-1: unit 6 not found! [ 1109.474901][ T9] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1109.493320][ T9] usb 5-1: USB disconnect, device number 127 [ 1109.626757][T11240] udevd[11240]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1110.888762][T11808] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1111.046335][T11808] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1111.046367][T11808] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1111.069143][T11808] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1111.069174][T11808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.069196][T11808] usb 3-1: Product: syz [ 1111.069210][T11808] usb 3-1: Manufacturer: syz [ 1111.069226][T11808] usb 3-1: SerialNumber: syz [ 1111.135491][T11808] usb 3-1: config 0 descriptor?? [ 1111.192879][ T4913] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1111.254725][ T4913] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1111.284164][ T4913] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1111.319424][ T4913] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1111.341491][ T4913] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1111.341961][ T36] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1111.399255][T11808] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1111.437494][T15802] FAULT_INJECTION: forcing a failure. [ 1111.437494][T15802] name failslab, interval 1, probability 0, space 0, times 0 [ 1111.437536][T15802] CPU: 0 UID: 0 PID: 15802 Comm: syz.1.3126 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1111.437576][T15802] Tainted: [L]=SOFTLOCKUP [ 1111.437585][T15802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1111.437599][T15802] Call Trace: [ 1111.437607][T15802] [ 1111.437616][T15802] dump_stack_lvl+0xe8/0x150 [ 1111.437654][T15802] should_fail_ex+0x467/0x600 [ 1111.437688][T15802] should_failslab+0xa8/0x100 [ 1111.437725][T15802] kmem_cache_alloc_lru_noprof+0xa7/0x650 [ 1111.437757][T15802] ? __d_alloc+0x37/0x6f0 [ 1111.437789][T15802] ? __d_alloc+0x37/0x6f0 [ 1111.437826][T15802] __d_alloc+0x37/0x6f0 [ 1111.437863][T15802] d_alloc_pseudo+0x21/0xc0 [ 1111.437897][T15802] alloc_path_pseudo+0x107/0x220 [ 1111.437930][T15802] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 1111.437971][T15802] alloc_file_pseudo+0xa8/0x1e0 [ 1111.438004][T15802] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1111.438026][T15802] ? security_inode_alloc+0xd5/0x310 [ 1111.438051][T15802] ? inode_init_always_gfp+0x999/0xd40 [ 1111.438084][T15802] sock_alloc_file+0xb8/0x2f0 [ 1111.438205][T15802] do_accept+0x3ab/0x760 [ 1111.438264][T15802] ? __pfx_do_accept+0x10/0x10 [ 1111.438313][T15802] __sys_accept4+0x139/0x230 [ 1111.438340][T15802] ? __pfx___sys_accept4+0x10/0x10 [ 1111.438366][T15802] ? __pfx_ksys_write+0x10/0x10 [ 1111.438404][T15802] __x64_sys_accept4+0x9a/0xb0 [ 1111.438429][T15802] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1111.438462][T15802] do_syscall_64+0x174/0x580 [ 1111.438488][T15802] ? trace_irq_disable+0x3b/0x140 [ 1111.438519][T15802] ? clear_bhb_loop+0x40/0x90 [ 1111.438548][T15802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1111.438576][T15802] RIP: 0033:0x7f734978ce59 [ 1111.438597][T15802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1111.438617][T15802] RSP: 002b:00007f73479de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 1111.438642][T15802] RAX: ffffffffffffffda RBX: 00007f7349a05fa0 RCX: 00007f734978ce59 [ 1111.438658][T15802] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1111.438672][T15802] RBP: 00007f73479de090 R08: 0000000000000000 R09: 0000000000000000 [ 1111.438686][T15802] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 1111.438700][T15802] R13: 00007f7349a06038 R14: 00007f7349a05fa0 R15: 00007ffcf807ecd8 [ 1111.438737][T15802] [ 1111.972915][T11808] gspca_sunplus: reg_r err -71 [ 1111.986654][T11808] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 1112.047765][ T36] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1112.050946][ T36] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1112.050987][ T36] usb 6-1: can't read configurations, error -71 [ 1112.113039][T11808] usb 3-1: USB disconnect, device number 106 [ 1113.503265][ T5603] Bluetooth: hci1: command tx timeout [ 1114.089357][T15836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3128'. [ 1114.247179][T11808] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1114.400694][T11808] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1114.400726][T11808] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1114.406696][T11808] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1114.406730][T11808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.406751][T11808] usb 3-1: Product: syz [ 1114.406767][T11808] usb 3-1: Manufacturer: syz [ 1114.406783][T11808] usb 3-1: SerialNumber: syz [ 1114.787644][T11808] usb 3-1: config 0 descriptor?? [ 1115.141486][T11808] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1115.592393][ T5603] Bluetooth: hci1: command tx timeout [ 1115.720134][T15796] lo speed is unknown, defaulting to 1000 [ 1115.742620][T15796] wlan0 speed is unknown, defaulting to 1000 [ 1115.750975][T15856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3142'. [ 1115.751000][T15856] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3142'. [ 1116.002460][T15833] autofs: Bad value for 'fd' [ 1116.302889][ T5885] ================================================================== [ 1116.302990][ T5885] BUG: KASAN: slab-use-after-free in l2cap_sock_ready_cb+0xe3/0x180 [ 1116.303127][ T5885] Read of size 8 at addr ffff888037aa8200 by task kworker/1:9/5885 [ 1116.303174][ T5885] [ 1116.303220][ T5885] CPU: 1 UID: 0 PID: 5885 Comm: kworker/1:9 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1116.303257][ T5885] Tainted: [L]=SOFTLOCKUP [ 1116.303267][ T5885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1116.303283][ T5885] Workqueue: events l2cap_info_timeout [ 1116.303337][ T5885] Call Trace: [ 1116.303347][ T5885] [ 1116.303358][ T5885] dump_stack_lvl+0xe8/0x150 [ 1116.303388][ T5885] print_address_description+0x55/0x1e0 [ 1116.303423][ T5885] ? l2cap_sock_ready_cb+0xe3/0x180 [ 1116.303443][ T5885] print_report+0x58/0x70 [ 1116.303466][ T5885] kasan_report+0x117/0x150 [ 1116.303506][ T5885] ? l2cap_sock_ready_cb+0xe3/0x180 [ 1116.303533][ T5885] l2cap_sock_ready_cb+0xe3/0x180 [ 1116.303555][ T5885] l2cap_conn_start+0x7af/0xf70 [ 1116.303583][ T5885] ? trace_hrtimer_start+0x82/0x200 [ 1116.303614][ T5885] ? __pfx_l2cap_conn_start+0x10/0x10 [ 1116.303649][ T5885] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1116.303674][ T5885] ? lockdep_hardirqs_on+0x7a/0x110 [ 1116.303696][ T5885] ? _raw_spin_unlock_irqrestore+0x4c/0x80 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1116.303719][ T5885] ? mutex_lock_nested+0x152/0x1d0 [ 1116.303749][ T5885] ? l2cap_info_timeout+0x60/0xa0 [ 1116.303785][ T5885] l2cap_info_timeout+0x68/0xa0 [ 1116.303813][ T5885] ? process_scheduled_works+0xa20/0x14e0 [ 1116.303878][ T5885] process_scheduled_works+0xa8e/0x14e0 [ 1116.303928][ T5885] ? __pfx_process_scheduled_works+0x10/0x10 [ 1116.303963][ T5885] ? assign_work+0x3cf/0x5d0 [ 1116.303998][ T5885] worker_thread+0xa47/0xfb0 [ 1116.304047][ T5885] kthread+0x388/0x470 [ 1116.304096][ T5885] ? __pfx_worker_thread+0x10/0x10 [ 1116.304130][ T5885] ? __pfx_kthread+0x10/0x10 [ 1116.304155][ T5885] ret_from_fork+0x514/0xb70 [ 1116.304211][ T5885] ? __pfx_ret_from_fork+0x10/0x10 [ 1116.304237][ T5885] ? __switch_to+0xc89/0x1420 [ 1116.304265][ T5885] ? __pfx_kthread+0x10/0x10 [ 1116.304290][ T5885] ret_from_fork_asm+0x1a/0x30 [ 1116.304330][ T5885] [ 1116.304338][ T5885] [ 1116.304350][ T5885] Allocated by task 15802: [ 1116.304386][ T5885] kasan_save_track+0x3e/0x80 [ 1116.304413][ T5885] __kasan_kmalloc+0x93/0xb0 [ 1116.304440][ T5885] __kmalloc_noprof+0x41a/0x780 [ 1116.304467][ T5885] sk_prot_alloc+0xe7/0x210 [ 1116.304492][ T5885] sk_alloc+0x3a/0x390 [ 1116.304515][ T5885] bt_sock_alloc+0x3b/0x340 [ 1116.304571][ T5885] l2cap_sock_create+0x147/0x330 [ 1116.304603][ T5885] bt_sock_create+0x163/0x240 [ 1116.304626][ T5885] __sock_create+0x4b3/0x9d0 [ 1116.304644][ T5885] __sys_socket+0xd6/0x1b0 [ 1116.304662][ T5885] __x64_sy[ 1116.304662][ T5885] __x64_sys_socket+0x7a/0x90 [ 1116.304681][ T5885] do_syscall_64+0x174/0x580 [ 1116.304702][ T5885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.304723][ T5885] [ 1116.304729][ T5885] Freed by task 15801: [ 1116.304740][ T5885] kasan_save_track+0x3e/0x80 [ 1116.304770][ T5885] kasan_save_free_info+0x40/0x50 [ 1116.304790][ T5885] __kasan_slab_free+0x5c/0x80 [ 1116.304817][ T5885] kfree+0x1c5/0x6c0 [ 1116.304839][ T5885] __sk_destruct+0x754/0x9e0 [ 1116.304863][ T5885] l2cap_sock_release+0x1b3/0x250 [ 1116.304893][ T5885] sock_close+0xad/0x220 [ 1116.304923][ T5885] __fput+0x42a/0xa80 [ 1116.304948][ T5885] task_work_run+0x1d9/0x270 [ 1116.304973][ T5885] get_signal+0x1182/0x12c0 [ 1116.305010][ T5885] arch_do_signal_or_restart+0xbb/0x860 [ 1116.305031][ T5885] exit_to_user_mode_loop+0x104/0x730 [ 1116.305086][ T5885] do_syscall_64+0x353/0x580 [ 1116.305107][ T5885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.305129][ T5885] [ 1116.305134][ T5885] The buggy address belongs to the object at ffff888037aa8000 [ 1116.305134][ T5885] which belongs to the cache kmalloc-4k of size 4096 [ 1116.305154][ T5885] The buggy address is located 512 bytes inside of [ 1116.305154][ T5885] freed 4096-byte region [ffff888037aa8000, ffff888037aa9000) [ 1116.305178][ T5885] [ 1116.305184][ T5885] The buggy address belongs to the physical page: [ 1116.305197][ T5885] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x37aa8 [ 1116.305219][ T5885] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1116.305238][ T5885] flags: 0x80000000000040(head|node=0|zone=1) [ 1116.305257][ T5885] page_type: f5(slab) [ 1116.305278][ T5885] raw: 0080000000000040 ffff88801a01c140 dead000000000100 dead000000000122 [ 1116.305298][ T5885] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 1116.305320][ T5885] head: 0080000000000040 ffff88801a01c140 dead000000000100 dead000000000122 [ 1116.305340][ T5885] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 1116.305360][ T5885] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1116.305380][ T5885] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 1116.305393][ T5885] page dumped because: kasan: bad access detected [ 1116.305411][ T5885] page_owner tracks the page as allocated [ 1116.305419][ T5885] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6134, tgid 6134 (udevd), ts 162655423095, free_ts 162251270727 [ 1116.305457][ T5885] post_alloc_hook+0x1f9/0x250 [ 1116.305487][ T5885] get_page_from_freelist+0x262a/0x26a0 [ 1116.305518][ T5885] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1116.305548][ T5885] allocate_slab+0x79/0x5e0 [ 1116.305567][ T5885] refill_objects+0x2d8/0x350 [ 1116.305588][ T5885] __pcs_replace_empty_main+0x330/0x690 [ 1116.305622][ T5885] __kmalloc_noprof+0x544/0x780 [ 1116.305647][ T5885] tomoyo_realpath_from_path+0xef/0x640 [ 1116.305682][ T5885] tomoyo_path_perm+0x283/0x560 [ 1116.305707][ T5885] security_inode_getattr+0x12b/0x310 [ 1116.305731][ T5885] vfs_getattr+0x23/0x70 [ 1116.305761][ T5885] vfs_statx_path+0x2b/0x230 [ 1116.305787][ T5885] vfs_statx+0x12e/0x200 [ 1116.305808][ T5885] vfs_fstatat+0x11b/0x170 [ 1116.305830][ T5885] __x64_sys_newfstatat+0x151/0x200 [ 1116.305854][ T5885] do_syscall_64+0x174/0x580 [ 1116.305874][ T5885] page last free pid 6270 tgid 6269 stack trace: [ 1116.305888][ T5885] __free_frozen_pages+0x10e7/0x11c0 [ 1116.305914][ T5885] __slab_free+0x252/0x2a0 [ 1116.305940][ T5885] qlist_free_all+0x99/0x100 [ 1116.305964][ T5885] kasan_quarantine_reduce+0x148/0x160 [ 1116.305988][ T5885] __kasan_slab_alloc+0x22/0x80 [ 1116.306015][ T5885] __kmalloc_noprof+0x3b6/0x780 [ 1116.306041][ T5885] io_cache_alloc_new+0x40/0x100 [ 1116.306138][ T5885] io_uring_cmd_prep+0x3a2/0x5d0 [ 1116.306184][ T5885] io_submit_sqes+0xbde/0x2310 [ 1116.306237][ T5885] __se_sys_io_uring_enter+0x364/0x1bb0 [ 1116.306268][ T5885] do_syscall_64+0x174/0x580 [ 1116.306289][ T5885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.306310][ T5885] [ 1116.306317][ T5885] Memory state around the buggy address: [ 1116.306329][ T5885] ffff888037aa8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1116.306344][ T5885] ffff888037aa8180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1116.306360][ T5885] >ffff888037aa8200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1116.306372][ T5885] ^ [ 1116.306383][ T5885] ffff888037aa8280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1116.306398][ T5885] ffff888037aa8300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1116.306410][ T5885] ================================================================== [ 1116.355539][T11808] gspca_sunplus: reg_r err -110 [ 1116.355642][T11808] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 1116.615112][ T5885] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1116.615140][ T5885] CPU: 1 UID: 0 PID: 5885 Comm: kworker/1:9 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1116.615173][ T5885] Tainted: [L]=SOFTLOCKUP [ 1116.615183][ T5885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1116.615198][ T5885] Workqueue: events l2cap_info_timeout [ 1116.615243][ T5885] Call Trace: [ 1116.615253][ T5885] [ 1116.615263][ T5885] vpanic+0x56c/0xa60 [ 1116.615295][ T5885] ? rcu_is_watching+0x15/0xb0 [ 1116.615329][ T5885] ? __pfx_vpanic+0x10/0x10 [ 1116.615363][ T5885] panic+0xc5/0xd0 [ 1116.615391][ T5885] ? __pfx_panic+0x10/0x10 [ 1116.615419][ T5885] ? preempt_schedule_thunk+0x16/0x40 [ 1116.615458][ T5885] ? preempt_schedule_thunk+0x16/0x40 [ 1116.615494][ T5885] ? l2cap_sock_ready_cb+0xe3/0x180 [ 1116.615516][ T5885] check_panic_on_warn+0x89/0xb0 [ 1116.615606][ T5885] ? l2cap_sock_ready_cb+0xe3/0x180 [ 1116.615627][ T5885] end_report+0x73/0x170 [ 1116.615658][ T5885] ? l2cap_sock_ready_cb+0xe3/0x180 [ 1116.615679][ T5885] kasan_report+0x128/0x150 [ 1116.615711][ T5885] ? l2cap_sock_ready_cb+0xe3/0x180 [ 1116.615738][ T5885] l2cap_sock_ready_cb+0xe3/0x180 [ 1116.615761][ T5885] l2cap_conn_start+0x7af/0xf70 [ 1116.615790][ T5885] ? trace_hrtimer_start+0x82/0x200 [ 1116.615820][ T5885] ? __pfx_l2cap_conn_start+0x10/0x10 [ 1116.615856][ T5885] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1116.615881][ T5885] ? lockdep_hardirqs_on+0x7a/0x110 [ 1116.615904][ T5885] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1116.615926][ T5885] ? mutex_lock_nested+0x152/0x1d0 [ 1116.615955][ T5885] ? l2cap_info_timeout+0x60/0xa0 [ 1116.615985][ T5885] l2cap_info_timeout+0x68/0xa0 [ 1116.616013][ T5885] ? process_scheduled_works+0xa20/0x14e0 [ 1116.616047][ T5885] process_scheduled_works+0xa8e/0x14e0 [ 1116.616094][ T5885] ? __pfx_process_scheduled_works+0x10/0x10 [ 1116.616130][ T5885] ? assign_work+0x3cf/0x5d0 [ 1116.616165][ T5885] worker_thread+0xa47/0xfb0 [ 1116.616221][ T5885] kthread+0x388/0x470 [ 1116.616247][ T5885] ? __pfx_worker_thread+0x10/0x10 [ 1116.616280][ T5885] ? __pfx_kthread+0x10/0x10 [ 1116.616306][ T5885] ret_from_fork+0x514/0xb70 [ 1116.616333][ T5885] ? __pfx_ret_from_fork+0x10/0x10 [ 1116.616359][ T5885] ? __switch_to+0xc89/0x1420 [ 1116.616382][ T5885] ? __pfx_kthread+0x10/0x10 [ 1116.616406][ T5885] ret_from_fork_asm+0x1a/0x30 [ 1116.616445][ T5885] [ 1116.617056][ T5885] Kernel Offset: disabled