last executing test programs: 10m7.472966819s ago: executing program 0 (id=173): socket(0x1d, 0x2, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4) ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000007100)={0x2020}, 0x2020) 10m7.30442566s ago: executing program 0 (id=174): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x1c, 0x52, 0x1, 0x70bd04, 0x24dfdbfc, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}, 0x1c}}, 0x8800) syz_usb_connect(0x1, 0x36, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)={0x208, r2, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xac45}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0xb8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe2a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff01}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x2000c800}, 0x40880) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b00140000000000000000000000070000000703"], 0x38}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x7c, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x30}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x6d}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x773}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x18}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1671}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xed7}]}, 0x7c}}, 0x894) file_setattr(0xffffffffffffff9c, 0x0, &(0x7f0000000580)={0x0, 0xfff, 0x245b1f2a, 0x8000, 0x10000}, 0x3c, 0x1000) syz_open_dev$char_usb(0xc, 0xb4, 0x4) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = dup3(r4, r4, 0x80000) write$tun(r5, 0x0, 0x15) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) 10m7.202836981s ago: executing program 0 (id=175): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r0, 0x40044104, &(0x7f0000000280)=0x7fffffff) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c0009040200000103000009040201010102000007"], 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 10m7.183870192s ago: executing program 0 (id=176): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$XFS_IOC_FSGETXATTRA(r0, 0x801c582d, &(0x7f0000000100)) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000300)={0x6, 0x3, 0x2, 0x0, 0x0, [{{}, 0xf004}, {{r0}, 0x2}]}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x600, 0x1, &(0x7f0000000180)=[0x0], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r2, r1, r1], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) 10m7.021148199s ago: executing program 0 (id=178): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x28080003}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r2, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x18, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xa6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xd}]}, 0x44}}, 0x10) (async) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) (async) sendmmsg$inet(r0, &(0x7f0000006800)=[{{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f00000006c0)="617aed1bff0635ec83d3efe8509ed8edd6ed411c93e5c78b8156d409771d303c76c0ff35bb7cdf418c1029a1c37b99e596a340f88480e7c94fddd4a5511d7ff725dd510fbb18e0cbbfb1d789395a1ac754614c717acb9b5fcfb5d4ca75dee9fbd6bf5d18d3c6f2df7936c61f1a8ab4b9f7cd495f73b902f79482dd4122be01541fc54b50dcea389fec77de8f48142c05", 0x90}], 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000100)="96", 0x1}, {&(0x7f0000000240)="dd20be2bd71f7d78e43c766dfb7772edd719ee8ab7bd4245d39e8d2ff82bc006b95cc236da3343206868b76cf57dafaa91b43b1ff47cf40cc31b2e9891ce0b56b24823920f1fa0dd58d23ab8501967f4bb51cd3de9558c22f1087a7a311638d11f8ae6cb0a0111c6499be2ecbf332c2a7fe43da6420c26af6c87e46c98ef4c0ae7ff96be869d79f09151d32df109527f26a6a3901e35c57781763212128e40145602", 0xa2}, {&(0x7f0000000300)="19948a90a70dd633d846de7696f9c64c4b1c460cc2bcc26353887434747e538d823d0defba169ae7e44c0d53e1368a5a1c9f7bf6407c2798f3358dcc3a70a40202e76c879093ce317f2919c36963fc5738afb0c08a60952a41c02d804f478e", 0x5f}, {&(0x7f0000000380)="ff54fbf2a3ae29271bfad754f39551604d51b3a75f5d538ec9cb06d27be950c2baff715ceaa4cdf031e222de32e8136bc84f935a4fd4a7804577e8d2c1bf8294ece48a9204007b2b560ef1ae086e9182e2", 0x51}, {&(0x7f0000000400)="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", 0xfd}, {&(0x7f0000000500)="28e7a01d0976cc1c8528ec09671ff504f8e2b100958d54cc8307bbdf779feb1b9028a2e4cf00474eb3b3523b205e", 0x2e}, {&(0x7f0000000540)="9c88d177a0f842740096f8b68fba00d9f46f3c5f2ee1c90e699460f94ba8edf2738922ce9f1df3b3a2088b90e0c0f4be0cacc299c2786242488d975582a80a9128b629d117e7b0fc81fa65acf183e36f21316122dab3f36f1b7e29ca09dcc29d23e7cba4e7ff6f9c078078d4b226fc4c7bd63f6013b9790c85f95348800eb42ca5593ec2ae98d31c71b06c7541a9dbbdfc5cd98697e30ca03d", 0x99}], 0x7, &(0x7f0000000840)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000004840)=[{&(0x7f00000045c0)="14", 0x1}], 0x1}}], 0x3, 0x448c0) (async) close(0x3) 10m6.777734979s ago: executing program 0 (id=179): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x17) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000080)={[{0x6, 0x80c, 0x3, 0x2f, 0x1, 0x20, 0x47, 0x6, 0x2, 0xff, 0x8, 0x6, 0x8006}, {0x9b7, 0x401, 0x2, 0xc1, 0x6, 0x1, 0x0, 0xf1, 0x7, 0x3, 0x44, 0x3, 0x1}, {0x7fffffff, 0x40, 0x1, 0x0, 0x5a, 0x9, 0xc, 0xf8, 0x0, 0x6, 0x3, 0x3}], 0x7}) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44100010203010902bf0002010650000900000000020d001b052401082400a9b30d2d0f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_connect(0x0, 0x441, &(0x7f0000000680)={{0x12, 0x1, 0x300, 0x86, 0xfd, 0xe, 0x8, 0x525, 0x127a, 0x697e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x42f, 0x1, 0xf9, 0x10, 0x50, 0x10, "", [{{0x9, 0x4, 0x3a, 0x20, 0xc, 0x20, 0x10, 0x4f, 0x2, [@uac_control={{0xa, 0x24, 0x1, 0x5, 0x55}, [@processing_unit={0xc, 0x24, 0x7, 0x1, 0x3, 0x7, "b21eef262c"}, @feature_unit={0x11, 0x24, 0x6, 0x4, 0x4, 0x5, [0x3, 0x9, 0x0, 0xa, 0x1], 0x2}, @feature_unit={0x11, 0x24, 0x6, 0x6, 0x1, 0x5, [0x0, 0x8, 0x8, 0x2, 0x3], 0x1}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x200, 0x6, 0x1, 0x0, 0x7, 0x40}, @extension_unit={0x9, 0x24, 0x8, 0x1, 0x3, 0x82, "35c1"}, @extension_unit={0x8, 0x24, 0x8, 0x2, 0x1, 0x7, "ac"}]}, @cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, "f0"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x0, 0x0, 0x9}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x1}, @mbim={0xc, 0x24, 0x1b, 0xe, 0x0, 0x9, 0x65, 0x8000, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x4, 0xd}, @mbim={0xc, 0x24, 0x1b, 0x5, 0x0, 0x2, 0x4, 0x0, 0x7f}]}], [{{0x9, 0x5, 0x7, 0x0, 0x400, 0x9, 0x87, 0x1, [@generic={0x93, 0x3a, "46e991e89f4d8f9b35343c66abfba881a5b374f08b000169e57f3061d06ab3f90e513ee4063ec53b9915afd1f5d79db871b5c4ba09c2e5423985a5c5d3584bfe50920159ff5f4f1d8e735a1f9aae38068f7ce1a0b41a748389dcf4ebed5b6783bd224c36b306dc5071d84ee0e473530f8e3b6f5e96ad8ace564a5d3b36e4948c1e2bc612ceb6cffb92e2747bbd13d01d46"}]}}, {{0x9, 0x5, 0x3, 0x1, 0x0, 0x3, 0x9}}, {{0x9, 0x5, 0x0, 0x2, 0x400, 0x3, 0x80, 0xff}}, {{0x9, 0x5, 0x3, 0xc, 0x20, 0x4, 0x5f, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x6}, @generic={0xd1, 0x14, "02e4f494949a5166a47463c6f1b8320f787de3ab1203574c0a56a71f6e537244035332d1b7093753f2e38df7e8726d5ee13e402ba5bf52ffcb7158364081eb8bf402899c765c7641e80d3a6f8b34f3a40e5c6aca98614873db02703d7fae8a2309584bbd8bf43dd027ab4ba70757eb5ce860c26419cedbf9f0ded836fe75b787a8d303d32b902dac9ea29c7c2d495207a85b73a273328c44ceec455a4eafe89c6f35445e284dff7cb11b91c17878c7bc1a17f94ee439400eb494ff634b50d76b2bf75cc0c309ce9093fa3eb65e53da"}]}}, {{0x9, 0x5, 0xd, 0x2, 0x400, 0x9, 0x8, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x7}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x3, 0xf8, 0xff, [@generic={0xb3, 0x6, "0f0e50d262bdae3b9809ca0fb5c42d3f8a63f3c30e14aef9b048e3818f7c05f5b6cd3ef3e31ead6b41ba2a672029540ae8b1876a7d7393501837ab91b3a89308e2f130e768959a5c6b347ee178d4ac6d24368d00c907109710f9250aeda11d83e85f790daf16f222a7a7525381bfc33624354e08b8e1a73353f1ba0487cc3951d483bdc634a85c76e826fd0e812fbc47acdd0bd134d3233b20af99264d5d968ee4d007b4371ab0c5841c3b849e4aea7893"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x2, 0x9e, 0xac}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0x8, 0xf3, 0x1}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x8, 0x80, 0x2}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0x4, 0x9, 0x10}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x1, 0x8, 0x1, [@generic={0x39, 0x1, "6827e4b3891235280b59fa9a234060e578466f6f8ccaebcf7bccdb78a8d2031c39e14e1a3079fdd02e146c5acdd7efed571dc866f9511f"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x9, 0x7, 0x1, [@generic={0xb7, 0x22, "a0f9c65b682edb8d1fe0c715ec694df9a83e963cbb649c97dd15de52f834757c22217609a7f1247181ced9bbe8028ae5a7ce3c5726acdc2fb62820e79886e38262cc32837861db2e800e95852311d9264fb4d10bfa0e018e7d7e2d923b1bd0094d3e3bb58b1c4cca491963938d00c1e2ba5d01ed265f6d02221bb0fb05b3a60404c56ab34c3ad242d84bd5cd615a639c40647553e653fac09fc1f8ba74f05ddb5f9625feb6bd8f2dd9c772a97cadf41730c28b86ae"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0xffff}]}}]}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000b00)={0xa, 0x6, 0x310, 0x0, 0x6, 0x6, 0x20, 0xa}, 0x1c, &(0x7f0000000b40)={0x5, 0xf, 0x1c, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "7c55411aa4809de99a0ef0dff76fed7e"}, @ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x812}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x441}}]}) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x3, 0xe6, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000006b1d01014000010203010902d400030140c0090904000000010100000a2401018023000201020924060602010300e809000302ff0105030c0724050632a8de0904010000010200000904010101010200000a2402020500070016010924020104080605fa09240201083b045006090501094000076b080725010080feff0904020000010200000904020101010200000e24020208000101045633106bb70a240202020006007f05072401050801000d24020110030008e820a331020a240202030000000807092402010902f407f3090582091000160a060725010c030700"], &(0x7f0000000400)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0xfc, 0x82, 0x5, 0x20, 0x5}, 0x2b, &(0x7f0000000200)={0x5, 0xf, 0x2b, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0x4, 0xc, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "8017487504acdeecb8729ad7e282331a"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x7, 0x0, 0x3, 0xf0}]}, 0x3, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x380a}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x44b}}]}) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x44, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x5, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f0000000000)={'veth1_to_bond\x00'}) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000600)={0x34, &(0x7f0000000240)={0x40, 0xc, 0x1, '!'}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf64(r4, &(0x7f0000000d00)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0xb0, 0x1, 0x3, 0x23, 0x2, 0x3e, 0x0, 0x66, 0x40, 0x2e0, 0x7fffffff, 0xff, 0x38, 0x3, 0x0, 0x4, 0x6}, [{0x2, 0x7, 0x1, 0xffffffffffffff01, 0x1, 0x7ff, 0x7, 0xff}, {0x6474e551, 0xfa5, 0x3ff, 0x2, 0x3, 0x8, 0x0, 0x8001}, {0x474e551, 0x2, 0x7fffffffffffffff, 0x8, 0x8000000000000001, 0x6, 0x8, 0xa669}], "c73254939d8c", ['\x00']}, 0x1ee) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x100) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x14) r6 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000180)={0x40, 0xf, 0x3, "5ff65f"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 9m51.595531052s ago: executing program 32 (id=179): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x17) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000080)={[{0x6, 0x80c, 0x3, 0x2f, 0x1, 0x20, 0x47, 0x6, 0x2, 0xff, 0x8, 0x6, 0x8006}, {0x9b7, 0x401, 0x2, 0xc1, 0x6, 0x1, 0x0, 0xf1, 0x7, 0x3, 0x44, 0x3, 0x1}, {0x7fffffff, 0x40, 0x1, 0x0, 0x5a, 0x9, 0xc, 0xf8, 0x0, 0x6, 0x3, 0x3}], 0x7}) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44100010203010902bf0002010650000900000000020d001b052401082400a9b30d2d0f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_connect(0x0, 0x441, &(0x7f0000000680)={{0x12, 0x1, 0x300, 0x86, 0xfd, 0xe, 0x8, 0x525, 0x127a, 0x697e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x42f, 0x1, 0xf9, 0x10, 0x50, 0x10, "", [{{0x9, 0x4, 0x3a, 0x20, 0xc, 0x20, 0x10, 0x4f, 0x2, [@uac_control={{0xa, 0x24, 0x1, 0x5, 0x55}, [@processing_unit={0xc, 0x24, 0x7, 0x1, 0x3, 0x7, "b21eef262c"}, @feature_unit={0x11, 0x24, 0x6, 0x4, 0x4, 0x5, [0x3, 0x9, 0x0, 0xa, 0x1], 0x2}, @feature_unit={0x11, 0x24, 0x6, 0x6, 0x1, 0x5, [0x0, 0x8, 0x8, 0x2, 0x3], 0x1}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x200, 0x6, 0x1, 0x0, 0x7, 0x40}, @extension_unit={0x9, 0x24, 0x8, 0x1, 0x3, 0x82, "35c1"}, @extension_unit={0x8, 0x24, 0x8, 0x2, 0x1, 0x7, "ac"}]}, @cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, "f0"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x0, 0x0, 0x9}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x1}, @mbim={0xc, 0x24, 0x1b, 0xe, 0x0, 0x9, 0x65, 0x8000, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x4, 0xd}, @mbim={0xc, 0x24, 0x1b, 0x5, 0x0, 0x2, 0x4, 0x0, 0x7f}]}], [{{0x9, 0x5, 0x7, 0x0, 0x400, 0x9, 0x87, 0x1, [@generic={0x93, 0x3a, "46e991e89f4d8f9b35343c66abfba881a5b374f08b000169e57f3061d06ab3f90e513ee4063ec53b9915afd1f5d79db871b5c4ba09c2e5423985a5c5d3584bfe50920159ff5f4f1d8e735a1f9aae38068f7ce1a0b41a748389dcf4ebed5b6783bd224c36b306dc5071d84ee0e473530f8e3b6f5e96ad8ace564a5d3b36e4948c1e2bc612ceb6cffb92e2747bbd13d01d46"}]}}, {{0x9, 0x5, 0x3, 0x1, 0x0, 0x3, 0x9}}, {{0x9, 0x5, 0x0, 0x2, 0x400, 0x3, 0x80, 0xff}}, {{0x9, 0x5, 0x3, 0xc, 0x20, 0x4, 0x5f, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x6}, @generic={0xd1, 0x14, "02e4f494949a5166a47463c6f1b8320f787de3ab1203574c0a56a71f6e537244035332d1b7093753f2e38df7e8726d5ee13e402ba5bf52ffcb7158364081eb8bf402899c765c7641e80d3a6f8b34f3a40e5c6aca98614873db02703d7fae8a2309584bbd8bf43dd027ab4ba70757eb5ce860c26419cedbf9f0ded836fe75b787a8d303d32b902dac9ea29c7c2d495207a85b73a273328c44ceec455a4eafe89c6f35445e284dff7cb11b91c17878c7bc1a17f94ee439400eb494ff634b50d76b2bf75cc0c309ce9093fa3eb65e53da"}]}}, {{0x9, 0x5, 0xd, 0x2, 0x400, 0x9, 0x8, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x7}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x3, 0xf8, 0xff, [@generic={0xb3, 0x6, "0f0e50d262bdae3b9809ca0fb5c42d3f8a63f3c30e14aef9b048e3818f7c05f5b6cd3ef3e31ead6b41ba2a672029540ae8b1876a7d7393501837ab91b3a89308e2f130e768959a5c6b347ee178d4ac6d24368d00c907109710f9250aeda11d83e85f790daf16f222a7a7525381bfc33624354e08b8e1a73353f1ba0487cc3951d483bdc634a85c76e826fd0e812fbc47acdd0bd134d3233b20af99264d5d968ee4d007b4371ab0c5841c3b849e4aea7893"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x2, 0x9e, 0xac}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0x8, 0xf3, 0x1}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x8, 0x80, 0x2}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0x4, 0x9, 0x10}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x1, 0x8, 0x1, [@generic={0x39, 0x1, "6827e4b3891235280b59fa9a234060e578466f6f8ccaebcf7bccdb78a8d2031c39e14e1a3079fdd02e146c5acdd7efed571dc866f9511f"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x9, 0x7, 0x1, [@generic={0xb7, 0x22, "a0f9c65b682edb8d1fe0c715ec694df9a83e963cbb649c97dd15de52f834757c22217609a7f1247181ced9bbe8028ae5a7ce3c5726acdc2fb62820e79886e38262cc32837861db2e800e95852311d9264fb4d10bfa0e018e7d7e2d923b1bd0094d3e3bb58b1c4cca491963938d00c1e2ba5d01ed265f6d02221bb0fb05b3a60404c56ab34c3ad242d84bd5cd615a639c40647553e653fac09fc1f8ba74f05ddb5f9625feb6bd8f2dd9c772a97cadf41730c28b86ae"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0xffff}]}}]}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000b00)={0xa, 0x6, 0x310, 0x0, 0x6, 0x6, 0x20, 0xa}, 0x1c, &(0x7f0000000b40)={0x5, 0xf, 0x1c, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "7c55411aa4809de99a0ef0dff76fed7e"}, @ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x812}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x441}}]}) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x3, 0xe6, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000006b1d01014000010203010902d400030140c0090904000000010100000a2401018023000201020924060602010300e809000302ff0105030c0724050632a8de0904010000010200000904010101010200000a2402020500070016010924020104080605fa09240201083b045006090501094000076b080725010080feff0904020000010200000904020101010200000e24020208000101045633106bb70a240202020006007f05072401050801000d24020110030008e820a331020a240202030000000807092402010902f407f3090582091000160a060725010c030700"], &(0x7f0000000400)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0xfc, 0x82, 0x5, 0x20, 0x5}, 0x2b, &(0x7f0000000200)={0x5, 0xf, 0x2b, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0x4, 0xc, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "8017487504acdeecb8729ad7e282331a"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x7, 0x0, 0x3, 0xf0}]}, 0x3, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x380a}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x44b}}]}) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x44, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x5, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f0000000000)={'veth1_to_bond\x00'}) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000600)={0x34, &(0x7f0000000240)={0x40, 0xc, 0x1, '!'}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf64(r4, &(0x7f0000000d00)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0xb0, 0x1, 0x3, 0x23, 0x2, 0x3e, 0x0, 0x66, 0x40, 0x2e0, 0x7fffffff, 0xff, 0x38, 0x3, 0x0, 0x4, 0x6}, [{0x2, 0x7, 0x1, 0xffffffffffffff01, 0x1, 0x7ff, 0x7, 0xff}, {0x6474e551, 0xfa5, 0x3ff, 0x2, 0x3, 0x8, 0x0, 0x8001}, {0x474e551, 0x2, 0x7fffffffffffffff, 0x8, 0x8000000000000001, 0x6, 0x8, 0xa669}], "c73254939d8c", ['\x00']}, 0x1ee) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x100) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x14) r6 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000180)={0x40, 0xf, 0x3, "5ff65f"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.894414954s ago: executing program 1 (id=3372): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) pselect6(0x40, &(0x7f0000000040)={0x837e, 0x4, 0x400000100000000, 0x9, 0x4, 0xed52, 0x6, 0xd21b}, &(0x7f00000000c0)={0x3, 0x19, 0x9, 0x100004, 0x8, 0x6, 0x0, 0x6}, &(0x7f0000000100)={0x7fffffff, 0x83, 0x9, 0x0, 0xea, 0x7fff, 0x2000000000000, 0x4}, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x7]}, 0x8}) syz_usb_disconnect(r0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) ioctl$VT_RELDISP(r1, 0x5605) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_open_dev$vim2m(0x0, 0x3ff, 0x2) socket$kcm(0x10, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b20, &(0x7f0000000000)={'wlan1\x00', @random="20000200"}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="0100"}) syz_usb_control_io$printer(r0, 0x0, 0x0) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000100)='id_legacy\x00', &(0x7f0000000280)=@chain) syz_usb_control_io$printer(r0, &(0x7f0000000380)={0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="60313d2cec003dcf2e3c4da93efc1e7104cb19bb7f89139fc08b671450b40327268556fb3629bb9e5354d37f7e37b2a7a90b958d4ac29ffd913f1322de7d"], &(0x7f00000002c0)={0x0, 0x3, 0xae, @string={0xae, 0x3, "b514973dcdcca2fbc98956847f7da4877c1b42b3c5705978e5fbd2af7b21a7e5914f6cf2c017c974d144eb2ee77e8d03ad9a0bf077103cb8bcf46d2bab58d203516aec6ad741cdc9c2722e334a36a5d94b98859f910ff09b8eac89acf232ed9fa97c72ea35b44453c595fc8605e367ec49b25084d45fd8499c33b5c680cc66a852b3e91e8ce8c2f682bb3bd0ffca4a37a0f0904ad087205ce6536c143288a7a0a5f73507ef020db744ca4a15"}}}, &(0x7f0000000700)={0x34, &(0x7f00000003c0)={0x40, 0x14, 0xc7, "edbd95a4fe0b7778e4a2106e365f404c7c910f8d43faeeea96c8089ec81182d558360788bf28974fffc614edb4c05799db79fdb35ac0b5d0433e37190c2df5d351aba410a4700aa766064432eab866f65020d241055db87c0a0174a6ef8b755182563bbc976058a986790a7585e543fc90975a0281c393295a3cdaaaa709da00295c878fb279d33c3863bdcf4caf2773b9e5b8f9bcb4546e1e14450213725b3f4c1ec9207a9e727c5d45af21f095fafb73bf2860eb0afcca8199b9ea30f45a1daf667cd17ef9e9"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xf8}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0xd}, &(0x7f0000000580)={0x20, 0x0, 0xbd, {0xbb, "7ed35b0be5a53644ff8956ff495bfe270eabc0d090abddad578d1ef2abf1b06957e806d22611937ab64423653c660028bfadf5b598aea9531b971d5f87d2f9ac6bfa49ae22949e0f3a5fbfeee330652d8db5aa16ec8208a4127746ac0737f647ca04947e6182b684c901885fa8f49d16f35665cf68a9a357c390ef28046fc4835008a6f32d94d3560beadd578bf5cab33f70c5608f406a3dd5c5cf3620e4a8f3651f17edfa93b093bf8087d8bfc95314db2efe7b885838dc03309b"}}, &(0x7f0000000680)={0x20, 0x1, 0x1, 0x81}, &(0x7f00000006c0)={0x20, 0x0, 0x1, 0x5}}) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) 5.641349794s ago: executing program 3 (id=3374): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000880)={0xec, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@flat=@weak_handle={0x77682a85, 0xa, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/125, 0x7d, 0x0, 0x1c}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000340)={0x0, 0x18, 0x40}}, 0x1000}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000380)={@flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1}, @flat=@weak_handle={0x77682a85, 0xa, 0x2}}, &(0x7f0000000440)={0x0, 0x18, 0x30}}, 0x400}, @decrefs={0x40046307, 0x1}, @decrefs={0x40046307, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x73, 0x0, &(0x7f0000000800)="b5aff57d1153afd3041768e3ee200e9df322875eb0e194a0c61961d4f4aef82af6b6929c5a5675821167d0f4ab60f15ae59e18a6291781c97ff55589e350bdcdaa1844c0e6b744f3648523de2c7985cf995b55b5c1200a2f73b373465a58c0225642033b8012102e6671457bca7b88e921143b"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 5.410600628s ago: executing program 3 (id=3376): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0xc0800, 0x0, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000001040), 0x2401, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x5, 0x6, 0xffffffffffffffff, 0x8000000000000003, 0x7, 0x9, 0x651, 0x12c8000000000000, 0x8000009655, 0x2, 0x62db, 0x9a3f, 0x10, 0xb, 0x80000000000000, 0x5, 0x6, 0x1, 0x94d6, 0x0, 0x3, 0xfffffffffffffff7, 0x0, 0xffffffffffff9d06, 0x3, 0x9}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRES16=r3, @ANYBLOB="009f4dd67701800d000100"/22], 0x34}}, 0x4040) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r5 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000180)="b562943a", 0x4}], 0x1, 0x1, 0x1, 0x2) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x50, 0x17, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004080}, 0x800) 4.747535135s ago: executing program 3 (id=3379): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c3400000000001090224000100", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001300)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='@0J'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x0, 0xd2859f99480e5041}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000c40)={0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="00057d0000007d242f37fa1e81d4affd0109b0608f08c7f7520a1e1ce5eb771224d07814361d3d8e40b898f8fe32adb825973f520539b82c52bc114d53c95369a76e800965590a6faaaa12006f9d736cbd0000000000000002b84f9f930aa180b3439d5a07faab2613b5e6b502f0f14be5ae25d786d6321800000000000000003016beed34ae0f556485887cf4ef2623c12c7558fcb0aa5855c39811e3ed56a3d5d757af2fd56a11f52045bb95430600000000000000b8b9723ea264e2fe610664825616ac33a98fde95b284a038d8f73a231150c1e51f3eeb99539073af42513fa144799db96446697b9d5414c145b38d54926cff01000000000000e1458fc3433fb2775c2dcc45040395f963b7bcaae9ea88b2dbd4587d706634009fee7f2cb0d567dc8d966c1a708df8aebf9c091c3ce3625d5fb199278a882ec07094882ef68394970c272d673bde78d124f059b1f62f8d22da6e72b2a9ec06f95fb67a0c29a7a9fcf4f392614eb620ed4cfb398dec4fb24bc7500dc03db34735"], &(0x7f0000000b80)={0x0, 0x3, 0x22, @string={0x22, 0x3, "c8a13d01e2b50e6a0b2d06542105de27ef84d496d8ff2ac3f54e15b5741bb392"}}, &(0x7f0000000bc0)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0x1, "3df96e17"}, @local=@item_012={0x1, 0x2, 0xa, "cd"}, @global=@item_012={0x2, 0x1, 0x7, "adeb"}]}}, &(0x7f0000000c00)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0xec, 0x1, {0x22, 0xfb7}}}}, &(0x7f0000000f00)={0x2c, &(0x7f0000000c80)={0x20, 0x10, 0xbf, "4ea70adace1628e4172e802f174f6bf003eafab4fe1d7ea6718d9c32f533480c0154c93692c5357abcdc3c8be39f51bcbe88156d33841a6da7ab66b99ba94b26568072c6b52490d0f01f52a13f51e4de1ead0391ed1da6ecac31faa8b260118538f4bdd8d805c2b788466f4e5fd0ccd9d1357f545c0a0796a4c90544afcdf3b2a02ac1f56bdc2e76f30fb803991cbc99d93827f748c35bf728f1147450c0bc5da41e9d96671a8c299c20015c8cfd50e511bc8f399e4d143a51099e8419bd26"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000e00)={0x20, 0x1, 0x82, "9316853d15fe4002ddd1fc8ffcfd9adb301c4df94e6d9dc37e0bee508b7cd75fb882905a1192270d6d24adae2da2e72005ee63792ebc93cc901aa78fad0c9fe9363e57d6abc894a979c33bd226c0ba4ef247576a37663274cb9d68396d3cefdfab6ed4774301dc2c0e2158bd173eaa675d48cd852959ecb4413a6192ac1b93be7f22"}, &(0x7f0000000ec0)={0x20, 0x3, 0x1, 0x4}}) 3.851745266s ago: executing program 2 (id=3394): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000002000)=[0x0], 0x0, 0x0, 0x0, 0x1, 0x0, 0x700}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x1}) r1 = socket$inet6(0xa, 0x80002, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x10000) getsockopt$inet6_int(r1, 0x29, 0x42, 0x0, &(0x7f00000000c0)) 3.713560845s ago: executing program 2 (id=3396): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) readv(r1, &(0x7f0000003ac0)=[{&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000003640)=""/119, 0x77}, {&(0x7f00000036c0)=""/22, 0x16}, {&(0x7f0000003700)=""/82, 0x52}, {&(0x7f0000003780)=""/191, 0xbf}, {&(0x7f0000003840)=""/162, 0xa2}, {&(0x7f0000003900)=""/137, 0x89}, {&(0x7f00000039c0)=""/236, 0xec}], 0x8) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYBLOB="0108000400000000f7ff0a00", @ANYRES32, @ANYBLOB="0a0006000802110000010000300050"], 0x58}}, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b24, &(0x7f0000000000)={'wlan1\x00'}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_print_times', 0x101a02, 0x0) read$FUSE(r3, &(0x7f0000000600)={0x2020}, 0x2020) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e22, 0x4d1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7fffffff}}, 0x807, 0x4, 0x3, 0x0, 0x84, 0xe35, 0x8}, &(0x7f0000000100)=0x9c) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000180)={r4, 0x13}, 0x8) 2.737079591s ago: executing program 1 (id=3402): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) rseq(0x0, 0x1f00, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r2 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x101000, 0x28, 0xb}, 0x18) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000100)=0x1, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030700000000000000000800000068000480", @ANYRESHEX=r3], 0x7c}}, 0x0) syz_usb_connect$uac2(0x2, 0x7b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="010f"]}) r4 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x40, 0xe, 0x6, "d5e8f8a15c54"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="200507"], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f0000000100)={0x1c, &(0x7f0000000480)={0x40, 0xd, 0x1, '\x00'}, 0x0, 0x0}) syz_usb_control_io$uac2(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$uac3(r4, 0x0, 0x0) syz_usb_control_io$rtl8150(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12015002000000ff58041150400001020301090224000101c060090000000001030100800921046d4735ba133970c71fcbedf230000801225c0e090581030004068188e8e804a5545bf0c821bd45e1f10b839f2d094875ac6e5aa0f33d15ed8a0c6ce4832c283d164f6cf3420d085c31d10500000000000000c8af7fe3e13c2fc1752cb17a4957c4cd9769ca2275cf310039ffe3e31879e22afd2e868e8d246e610e70490050d5ec09c7bb55a7e48997235d4b158db3687b803919eb71f75c3cd649ca5aa33436e24061dc6829ba9a8c16af5e5223951e3236a2e4e402"], &(0x7f0000000540)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x110, 0x0, 0xff, 0xd, 0x20, 0x2}, 0x4d, &(0x7f00000003c0)={0x5, 0xf, 0x4d, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x1b, 0x3, 0x2, 0x487}, @ssp_cap={0x1c, 0x10, 0xa, 0x8, 0x4, 0x7ff0001, 0xf1e, 0x0, [0xc0, 0xff3fde, 0xffc000, 0xc000]}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "7c2120ad0ec7e14589694b6bfaf07725"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x80, 0x4, 0xa}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x2, 0x8}]}, 0x2, [{0x81, &(0x7f0000000440)=@string={0x81, 0x3, "32e24e4719c80134efaee0c9a44510c6b4c1df1d81909b947e9634cd9e20690739d7ed067b81b6f711c36d7193910957b574d168543e3f537f3a6787f5aa54068fd2ba2c17512b934253c28e0492523fde00951c20ddd47fb3fa1db26100c6714d149cb204fb821a1d1e9d291f8b520f5cf04cba2afef4a14cded73219133d"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x3479befcfaac32d8}}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x7) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/6, 0x6}], 0x1, 0x2000000, 0x5245) 2.464967284s ago: executing program 4 (id=3404): r0 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x103000) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000080)={0xa, 0x100, 0xa, {0x80000003, 0xbffff820, 0xffffffff, 0xfff}}) 2.377586347s ago: executing program 4 (id=3405): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x633, 0x70bd2c, 0x0, {{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0xfffffffd, 0x32}, @in6=@loopback, {0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0xa}, {}, 0x100, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x2, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) timer_create(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000300)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000c0000000c0103800400038004000500180001801400020076657468305f746f5f626f6e64000000"], 0x38}}, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r6, 0x1) flock(r6, 0x1) r7 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000a80)={0x0, &(0x7f00000006c0)=[@nested_amd_vmload={0x182, 0x18, 0x1}, @rdmsr={0x66, 0x18, {0xb5f}}, @cpuid={0x64, 0x18, {0x6, 0x9}}, @wr_drn={0x68, 0x20, {0x4, 0x9}}, @cpuid={0x64, 0x18, {0xca6a, 0x8}}, @out_dx={0x6a, 0x28, {0xa825, 0x6, 0x800}}, @wr_crn={0x67, 0x20, {0x8, 0xffffffffffff7fff}}, @nested_vmresume={0x130, 0x18}, @rdmsr={0x66, 0x18, {0xbd3}}, @in_dx={0x69, 0x20, {0xce4f, 0x4}}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x83, 0x3, 0x4}}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x0, 0x9}}, @wrmsr={0x65, 0x20, {0x3b8, 0x5}}, @nested_vmresume={0x130, 0x18, 0x2}, @enable_nested={0x12c, 0x18}, @nested_load_code={0x12e, 0x6a, {0x0, "f30f09360fc7af060001000f01cf66b897000f00d0b9800000c00f3235002000000f30440f013766baf80cb88de8578eef66bafc0cb038eeb911060000b800000100ba000000000f3043ff6e86660f38f6f1"}}, @wrmsr={0x65, 0x20, {0xc0010117, 0x1}}, @out_dx={0x6a, 0x28, {0xd874, 0x0, 0xe3a}}, @nested_amd_stgi={0x17e, 0x10}, @set_irq_handler={0xc8, 0x20, {0x75, 0x1}}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x44c, 0xd4, 0x5, 0x3}}, @nested_create_vm={0x12d, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @host16=0xc06, 0x9, 0x8000000000000001, 0x5}}, @nested_vmresume={0x130, 0x18, 0x2}, @set_irq_handler={0xc8, 0x20, {0x24, 0x2}}], 0x382}) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r7, 0x4068aea3, &(0x7f0000000ac0)) syz_usb_connect(0x2, 0x43, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a3233910eba658744d2d010203010902310001080010000904df0003080662ff09250c0220000606030905071000020102070424"], 0x0) keyctl$setperm(0x5, 0x0, 0x30925) r8 = syz_usb_connect$uac1(0x4, 0xe2, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xd7, 0xe41, 0x4247, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd0, 0x3, 0x1, 0xff, 0x60, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xdc, 0x13}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x403, 0x5, 0x2, 0xd}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x3, 0x1, 0x4, 0x6, '$', "4dc3"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0x9, 0x2, 0x80, 0x7}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x80, 0x0, 0xfc, 0x1, 0x7}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x99, 0xc6, 0x5, 0x31}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x0, 0x3, 0x0, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x80, 0x1, 0x10, {0x7, 0x25, 0x1, 0x8, 0xfe, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x3, 0x80, 0x9, "4dc5a9884ff515669c"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x3, 0xb, 0xd}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9, 0x7f, 0xfe, 0x8}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6, 0x72, 0x40, 0x9}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x2, 0x5, 0x4, 0x3, 0xb8}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xb, 0xc3, 0xd, {0x7, 0x25, 0x1, 0xc, 0x2, 0x8f9}}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x4, 0x9, 0xd7, 0xff, 0x5}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x9, [{0xde, &(0x7f0000000200)=@string={0xde, 0x3, "822a469d7137c4be032dc04b70dafcd806a454e0ccdd1757ce3fae1cca2b77071a674eba7a544c3cdb00f6b004253deccbcf18aefa79e93efb072536996565382cdce5f7cba1aa162aadbe6cb4a6a4c36e08e8624902ed48abf92ac0f2617800dcad86603e09b0602d72fcbe6b72bc636ddf41a1c16eaac11af094a1a9fd6e19f6a0c636e3360b7ca33ccbdf93c9e5700a6b03cf302ae7f90601d03fdd3b1c5c0673f666dcec1b85916c5077767c80e464f745891d3ab9df441f1ea1f3ff90b88099f541432ad1f5c3f9c4be693c9c20a00b9d59daba33dc549f721b"}}, {0x5b, &(0x7f0000000300)=@string={0x5b, 0x3, "6f7c641be00178beee6d2aaa980d3e1188bc768d114b557f2ab11f959a8c4f2d5d715542692eb1d3fd7f8b8dd72ac1d3edc9e5a80355cb4a66915a4f67e97c1402c0393dfb722a4c924f90a1ec8b73980d38c451bd52abb35d"}}, {0x24, &(0x7f0000000380)=@string={0x24, 0x3, "35cbb173e40e4f5f7b93820d1cc158656fac5bbaefa29315fa9bb56f421709bd2539"}}, {0xffffffffffffffcc, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x1004}}, {0x5, &(0x7f0000000480)=@string={0x5, 0x3, "366191"}}, {0xc2, &(0x7f00000004c0)=@string={0xc2, 0x3, "d685dd4a188240316d9c90f852309254ca24eb133a5c19e08d59fcb6c5fff29de47246ccaa588fd25182f90bad1abcbbbbf0d734f52176e3d93ab94bdc81859f99ac150cfbfd8b924f5eb3e021930f05529e7187f4f5a4f66b4bdccc52f0e0e1328ed538e181afa0eb5fbeeaeaa2cc94a0a4540926659a104136786f6acbefed5ad2d0c2afec6755a97cd8eaed5d754f8a39fff5eb187b671874cade889a1e16de356c7343e4f886a9b61834edfbccc6c6d1829361a034108edbed0d2ba9477f"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x625e378c856b3efa}}]}) keyctl$get_security(0x11, 0x0, &(0x7f0000000b40)=""/121, 0x79) syz_usb_ep_write(r8, 0x2, 0x15, &(0x7f0000000000)="8b3309cee89af3f82b27665218275b00e01c14e2c3") 2.374546444s ago: executing program 4 (id=3406): r0 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x103000) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000080)={0xa, 0x100, 0xa, {0x80000003, 0xbffff820, 0xffffffff, 0xfff}}) (fail_nth: 1) 2.231174019s ago: executing program 2 (id=3407): r0 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x103000) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000002c0)={r3, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x2, @broadcast}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)="48000000140081fb7059ae08060c040002ff0f03900000000000000100006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc2a02000000461eb886a5e54f8f", 0x48}], 0x1}, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000080)={0xa, 0x100, 0xa, {0x80000003, 0xbffff820, 0xffffffff, 0xfff}}) 1.993809852s ago: executing program 4 (id=3408): r0 = socket$kcm(0x10, 0x2, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x2000, 0x0, 0x1f) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r1, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)}, 0x0) fanotify_init(0xc, 0x1000) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x25, 0x2, {0xffffffffffffffff}, {}, 0x6, 0x1}) capset(&(0x7f0000000140)={0x20080522, r2}, &(0x7f0000000040)={0xe5, 0xffffffff, 0x0, 0x7fff, 0xe, 0x4}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0xe8302, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$xdp(0x2c, 0x3, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000440)={[0xffffffffffffffed, 0x100000000, 0x0, 0xffffffffffffffff, 0x2000100001, 0x0, 0x2004c8, 0x7, 0x4, 0x1, 0x7, 0x8000, 0x5, 0x0, 0x0, 0xffffffffffffffff], 0xffff1000, 0x200}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r6, &(0x7f0000000340)={&(0x7f0000000240)={0x1d, r7}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)=@can={{0x2, 0x1}, 0x2, 0x2, 0x0, 0x0, "ab7a73f2dd2e2b72"}, 0x10}, 0x1, 0x0, 0x0, 0x840}, 0x40004800) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x4000800) 1.849461667s ago: executing program 4 (id=3409): r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014009080c00000006009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) pread64(r0, 0x0, 0x4e, 0x7fc) 1.691984367s ago: executing program 2 (id=3410): mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) symlink(0x0, 0x0) r1 = socket(0x8000000010, 0x2, 0x0) write(r1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_GET_MSRS_cpu(r0, 0xc008ae88, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000802, 0x0, 0x0) 1.685715403s ago: executing program 4 (id=3411): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x10800, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f0000000100)={{0xfffffffffffffff8, 0x2}, {0x4}, 0x10000}) (async) ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, &(0x7f0000000080)={'\x00', 0x9325, 0x0, 0x1}) (async) ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, &(0x7f0000000140)={0x10}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000480)=ANY=[@ANYRES64=r0, @ANYRESOCT=r0], 0x0) 1.617204957s ago: executing program 3 (id=3412): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000880)={0xe4, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@flat=@weak_handle={0x77682a85, 0xa, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/125, 0x7d, 0x0, 0x1c}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000340)={0x0, 0x18, 0x40}}, 0x1000}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000380)={@flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1}, @flat=@weak_handle={0x77682a85, 0xa, 0x2}}, &(0x7f0000000440)={0x0, 0x18, 0x30}}, 0x400}, @decrefs={0x40046307, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x73, 0x0, &(0x7f0000000800)="b5aff57d1153afd3041768e3ee200e9df322875eb0e194a0c61961d4f4aef82af6b6929c5a5675821167d0f4ab60f15ae59e18a6291781c97ff55589e350bdcdaa1844c0e6b744f3648523de2c7985cf995b55b5c1200a2f73b373465a58c0225642033b8012102e6671457bca7b88e921143b"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.504058409s ago: executing program 2 (id=3413): mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) symlink(0x0, 0x0) r1 = socket(0x8000000010, 0x2, 0x0) write(r1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_GET_MSRS_cpu(r0, 0xc008ae88, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000802, 0x0, 0x0) (fail_nth: 1) 1.409917044s ago: executing program 3 (id=3414): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000840}, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) r2 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000100)=0xffff, 0x4) sendto$inet6(r2, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r2, &(0x7f0000001800)=[{{0x0, 0x0, 0x0}, 0x10001}], 0x1, 0x10102, 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) symlink(0x0, 0x0) r4 = socket(0x8000000010, 0x2, 0x0) write(r4, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, 0x0) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000802, 0x0, 0x0) 1.077469777s ago: executing program 2 (id=3415): r0 = socket(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r2 = socket$nl_generic(0x11, 0x3, 0x10) (async, rerun: 32) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (rerun: 32) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000000)={0x8, 0x2, 0x4, {0xa, @vbi={0x3, 0x3, 0x5, 0x7031b17, [0x400, 0x1], [0x1ff, 0x94f], 0x1}}, 0x1}) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) write$tun(r3, &(0x7f00000011c0)={@void, @void, @eth={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x2, 0x4, 0x20, 0x66, 0x0, 0x20, 0x2, 0x0, @private=0xa0100ff, @local}, {0x11, 0x9c, 0x0, @empty, "ece00000"}}}}}}, 0x32) (async, rerun: 64) sendmsg$key(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x2, 0x17, 0x1, 0x5, 0x37, 0x0, 0x70bd2a, 0x25dfdbff, [@sadb_spirange={0x2, 0x10, 0x4d3, 0x4d5}, @sadb_key={0x20, 0x9, 0x790, 0x0, "2c94785bd32c4bd28fb647d76d69fc6652037e96657d732b596670e3527f9b2a8bac7646bc8b4e49177fc7111545bcce15f0b49516cc21850ba0079772375bc7757583aea0f8925f1cad55a55e26d2417c7061a0f098d54b059fe6d870f6743fd53fe430380471c71dce67fbaf0ded124b590a54b8e465a2cbd7441674692e7dcdb0fd64728667b6630542284a9c068d7cbf31beaa823850e8ea3c54af547733f4ee2ebd9cfb57bbabd714d10bd8506e81f0634e27a9e7cfbb32d094cd2b08c835d21b79f3d821c5dac6020cadf706469676b9ef3459d3905a98c7653fc3b1e1a36473e96c6bc45c5e1995e1e1d76657c884"}, @sadb_lifetime={0x4, 0x3, 0x2, 0x5, 0x3ff, 0x4}, @sadb_x_nat_t_type={0x1, 0x14, 0x7}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e23}, @sadb_address={0x5, 0x0, 0x32, 0x80, 0x0, @in6={0xa, 0x4e22, 0x1, @remote, 0x4ff2}}, @sadb_x_policy={0x8, 0x12, 0x3, 0x4, 0x0, 0x6e6bb7, 0x20000000, {0x6, 0xff, 0xfc, 0x0, 0x0, 0x7, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2}}]}, 0x1b8}}, 0x44004) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg(r2, &(0x7f0000000640)={&(0x7f0000000540)=@ll={0x11, 0x4, r7, 0x1, 0x4, 0x6, @broadcast}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000180)="d09b6d42fd81685544f46c3f0800", 0xe}, {&(0x7f0000000080)="4987", 0x2}, {&(0x7f00000000c0)="64dac7d54e547911fbd7556d3b5e63fce1ce", 0x12}], 0x3, 0x0, 0x0, 0x11000000}, 0x24008814) (async, rerun: 64) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000cc0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x640246, r9}) (async) write(r0, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000000d00000000007ef78b13b799f820a7f73ec6840e67bc88ca1b173ebe5dcea7dead2fb9b57f7a284d89c2b1fb1a0c61248eda174a97be5bd67f7d1344fd913b007f0b1fda91226d9841f2fe50fea64189fdd171b671ddacf7c7fa47fedb38f157f3029189e96d73fc57beb288e10d05dd3e9bb598586b14daf6977502629d14774be1a43efa062017434eb8411f3af97156b1b8441cc84e96ff60ba1eb329e791fcae5083", 0xffffffffffffffee) 1.069395935s ago: executing program 1 (id=3416): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r2) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x30, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4020080}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r3, 0x20, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x44000) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x24, r5, 0x609, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVKEY={0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi1\x00', 0x200400, 0x0) ioctl$COMEDI_DEVINFO(r6, 0x80b06401, &(0x7f0000000040)) 922.052855ms ago: executing program 1 (id=3417): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000000)) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, 0x0, 0x0) bind$l2tp(r1, &(0x7f00000000c0), 0x10) sendto$l2tp(r1, &(0x7f00000006c0)="e5786a82260000000000023b915ebb29702b75192122866b1f85173cd8ba91797b5ba8326f1aa943da8bc19f81a19f5e2c1ce1bc4df31156418d61b84de055645081f5108954c02c41920be257ec30e12a113493100cefbd1711587358f5b8a80b43ad611af3885db32d84e45a87913d1f8920afed027a63d6b79b5b77d3b66eb85507666842c9fe7beb294d428bcc47acbc92a50cd929c8132ced52ff022c9402e0f1efa4f0fe60ef8718b9247efbbd0052347f9198f0e673d17783508ef9af7ce0c2ca5c760686c61793c4ec6127dcff8450050dcde4cda31b9e0ee6906d993a5271ea638053ec", 0xe8, 0x0, &(0x7f0000000240)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2004}, 0x10) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4004) close(0x3) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x8}) socket(0x1e, 0x1, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r2, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0xe) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000080)={0x3ed6, 0x1}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=ANY=[@ANYBLOB="88010000000201030000000000000000070000107c000a80080001400000000008000140000000010800014000000000600002800c000280050001003a0000000c0002800500010084000000060003400003000014000180080001000a010101080002000000000014000180080001006401010208000200ac1414120c00028005000100880000000600034000010000f8000a80900002800c00028005000180000000002c0001801400030000000000000000000000ffff640101001400040000000000000000000000ffffac1414bb2c0001801400030000000000000000000000ffff7f00000114000400fe8000000000000000000000000000aa0c000280050001002f00000006000340000400001400018008000100ac1414bb08000200ac1e010108000140000000015c0002800c000280050001002f0000002c00018014000300fe8000000000000000000000000000bb14000400000000000000000000000000000000010c00028005000100210000000c00028005000100840000000600034000010000"], 0x188}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000300)=""/107, 0x6b}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4086, 0xff6}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/134, 0x86}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x20000005}], 0x1, 0x40002000, &(0x7f0000003700)={0x77359400}) bind$unix(r4, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x6e) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 605.193998ms ago: executing program 1 (id=3418): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000000c0)={0x8, "fa02791d2a69a2610b02000000000000001104010000000800", 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x3, &(0x7f0000000000)=[{0x4, 0x6, 0x0, 0x4}, {0x64}, {0x401, 0x4}]}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r4, &(0x7f0000001b80)=[{&(0x7f00000000c0)=""/92, 0x84}], 0x1, 0x2f, 0xfd4c) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8c1}, 0x80) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000000a0a050000000000000000000a00000989969864f3bc8fa91d6d0900010073797a31000000000900020073797a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) sendmsg$netlink(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="18000000760001"], 0x1c}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) ioctl$SYNC_IOC_MERGE(r1, 0x40103e05, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168"}) 293.817429ms ago: executing program 3 (id=3419): prlimit64(0x0, 0xe, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=""/72, 0x48}], 0x1, 0x7000000, 0x0, 0x3) 0s ago: executing program 1 (id=3420): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c3400000000001090224000100", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001300)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='@0J'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x0, 0xd2859f99480e5041}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000c40)={0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)={0x0, 0x3, 0x22, @string={0x22, 0x3, "c8a13d01e2b50e6a0b2d06542105de27ef84d496d8ff2ac3f54e15b5741bb392"}}, &(0x7f0000000bc0)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0x1, "3df96e17"}, @local=@item_012={0x1, 0x2, 0xa, "cd"}, @global=@item_012={0x2, 0x1, 0x7, "adeb"}]}}, &(0x7f0000000c00)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0xec, 0x1, {0x22, 0xfb7}}}}, &(0x7f0000000f00)={0x2c, &(0x7f0000000c80)={0x20, 0x10, 0xbf, "4ea70adace1628e4172e802f174f6bf003eafab4fe1d7ea6718d9c32f533480c0154c93692c5357abcdc3c8be39f51bcbe88156d33841a6da7ab66b99ba94b26568072c6b52490d0f01f52a13f51e4de1ead0391ed1da6ecac31faa8b260118538f4bdd8d805c2b788466f4e5fd0ccd9d1357f545c0a0796a4c90544afcdf3b2a02ac1f56bdc2e76f30fb803991cbc99d93827f748c35bf728f1147450c0bc5da41e9d96671a8c299c20015c8cfd50e511bc8f399e4d143a51099e8419bd26"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000e00)={0x20, 0x1, 0x82, "9316853d15fe4002ddd1fc8ffcfd9adb301c4df94e6d9dc37e0bee508b7cd75fb882905a1192270d6d24adae2da2e72005ee63792ebc93cc901aa78fad0c9fe9363e57d6abc894a979c33bd226c0ba4ef247576a37663274cb9d68396d3cefdfab6ed4774301dc2c0e2158bd173eaa675d48cd852959ecb4413a6192ac1b93be7f22"}, &(0x7f0000000ec0)={0x20, 0x3, 0x1, 0x4}}) kernel console output (not intermixed with test programs): red promiscuous mode [ 672.076887][T13719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 672.097984][T13719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 672.126567][ T69] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.127547][ T69] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.127686][ T69] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.127796][ T69] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.665182][T14053] program syz.4.2933 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 672.668572][T14054] program syz.4.2933 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 672.815695][T12594] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 672.815727][T12594] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.312744][T14059] ubi8: attaching mtd0 [ 673.520959][T13352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.520982][T13352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.594053][T14059] ubi8: scanning is finished [ 673.594070][T14059] ubi8: empty MTD device detected [ 673.594206][T14059] ubi8 error: ubi_read_volume_table: LEB size too small for a volume record [ 673.873601][ T5715] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 673.997781][ T5715] usb 4-1: device descriptor read/64, error -71 [ 674.054713][T11696] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 674.073056][T14059] ubi8 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 674.143689][T14074] binder: 14073:14074 ioctl c0306201 0 returned -14 [ 674.228237][T11696] usb 2-1: config 1 has an invalid interface number: 68 but max is 5 [ 674.228272][T11696] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 6 [ 674.228290][T11696] usb 2-1: config 1 has no interface number 0 [ 674.228315][T11696] usb 2-1: config 1 interface 68 has no altsetting 0 [ 674.231001][T11696] usb 2-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=18.d2 [ 674.231035][T11696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.231051][T11696] usb 2-1: Product: syz [ 674.231062][T11696] usb 2-1: Manufacturer: syz [ 674.231074][T11696] usb 2-1: SerialNumber: syz [ 674.245212][ T5715] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 674.380751][ T5715] usb 4-1: device descriptor read/64, error -71 [ 674.435747][ T5688] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 674.483575][ T5715] usb usb4-port1: attempt power cycle [ 674.502700][T14072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.503790][T14072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.593110][ T5688] usb 3-1: Using ep0 maxpacket: 32 [ 674.601757][ T5688] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 674.601779][ T5688] usb 3-1: config 0 has no interface number 0 [ 674.601814][ T5688] usb 3-1: config 0 interface 12 has no altsetting 0 [ 674.631109][ T5688] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 674.631205][ T5688] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.631229][ T5688] usb 3-1: Product: syz [ 674.631247][ T5688] usb 3-1: Manufacturer: syz [ 674.631264][ T5688] usb 3-1: SerialNumber: syz [ 674.712394][ T5688] usb 3-1: config 0 descriptor?? [ 674.859629][T11696] ttusbir 2-1:1.68: cannot find expected altsetting [ 674.880385][T11696] usb 2-1: USB disconnect, device number 43 [ 674.885732][ T5715] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 674.904750][ T5715] usb 4-1: device descriptor read/8, error -71 [ 674.953647][ T5688] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 674.953785][ T5688] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 674.953821][ T5688] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 674.953910][ T5688] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 674.996128][ T5688] usb 3-1: USB disconnect, device number 52 [ 675.130910][ T5715] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 675.174790][ T5715] usb 4-1: device descriptor read/8, error -71 [ 675.274094][ T5715] usb usb4-port1: unable to enumerate USB device [ 675.725177][T14094] netlink: 'syz.2.2947': attribute type 3 has an invalid length. [ 675.873425][T14100] binder: 14099:14100 ioctl c0306201 0 returned -14 [ 675.961372][T14102] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2949'. [ 675.962119][T14102] unsupported nlmsg_type 40 [ 676.004150][T14104] FAULT_INJECTION: forcing a failure. [ 676.004150][T14104] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 676.004182][T14104] CPU: 1 UID: 0 PID: 14104 Comm: syz.4.2950 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 676.004205][T14104] Tainted: [L]=SOFTLOCKUP [ 676.004211][T14104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 676.004222][T14104] Call Trace: [ 676.004229][T14104] [ 676.004236][T14104] dump_stack_lvl+0xe8/0x150 [ 676.004261][T14104] should_fail_ex+0x46b/0x600 [ 676.004290][T14104] _copy_to_user+0x31/0xb0 [ 676.004311][T14104] environ_read+0x27c/0x3d0 [ 676.004333][T14104] vfs_readv+0x597/0x850 [ 676.004352][T14104] ? __pfx_environ_read+0x10/0x10 [ 676.004371][T14104] ? __pfx_vfs_readv+0x10/0x10 [ 676.004398][T14104] ? __fget_files+0x2a/0x420 [ 676.004421][T14104] ? __fget_files+0x3a6/0x420 [ 676.004439][T14104] ? __fget_files+0x2a/0x420 [ 676.004465][T14104] __x64_sys_preadv+0x1a2/0x2b0 [ 676.004492][T14104] ? __pfx___x64_sys_preadv+0x10/0x10 [ 676.004522][T14104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.004541][T14104] do_syscall_64+0x174/0x580 [ 676.004566][T14104] ? trace_irq_disable+0x3b/0x140 [ 676.004588][T14104] ? clear_bhb_loop+0x40/0x90 [ 676.004607][T14104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.004624][T14104] RIP: 0033:0x7f4cd2acce59 [ 676.004640][T14104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 676.004655][T14104] RSP: 002b:00007f4cd0d1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 676.004672][T14104] RAX: ffffffffffffffda RBX: 00007f4cd2d45fa0 RCX: 00007f4cd2acce59 [ 676.004685][T14104] RDX: 0000000000000001 RSI: 0000200000001400 RDI: 0000000000000003 [ 676.004696][T14104] RBP: 00007f4cd0d1e090 R08: 0000000000000000 R09: 0000000000000000 [ 676.004706][T14104] R10: 0000000000c002a0 R11: 0000000000000246 R12: 0000000000000002 [ 676.004717][T14104] R13: 00007f4cd2d46038 R14: 00007f4cd2d45fa0 R15: 00007ffc815a72f8 [ 676.004742][T14104] [ 676.045115][ T32] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 676.304710][ T32] usb 2-1: config 0 has no interfaces? [ 676.304752][ T32] usb 2-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 676.304781][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.314652][ T32] usb 2-1: config 0 descriptor?? [ 676.523461][T14112] i2c i2c-0: DVB: adapter 0 frontend 0 symbol rate 0 out of range (1000000..45000000) [ 676.524509][T14112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2954'. [ 676.609625][T14085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 676.610454][T14085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 676.645813][T14118] netlink: 'syz.3.2955': attribute type 10 has an invalid length. [ 676.650110][ T32] usb 2-1: USB disconnect, device number 44 [ 676.850454][T14122] binder: 14121:14122 ioctl c0306201 0 returned -14 [ 677.116491][T14129] FAULT_INJECTION: forcing a failure. [ 677.116491][T14129] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 677.116524][T14129] CPU: 0 UID: 0 PID: 14129 Comm: syz.2.2960 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 677.116551][T14129] Tainted: [L]=SOFTLOCKUP [ 677.116557][T14129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 677.116568][T14129] Call Trace: [ 677.116575][T14129] [ 677.116582][T14129] dump_stack_lvl+0xe8/0x150 [ 677.116607][T14129] should_fail_ex+0x46b/0x600 [ 677.116636][T14129] prepare_alloc_pages+0x22a/0x6b0 [ 677.116665][T14129] __alloc_frozen_pages_noprof+0x12f/0x380 [ 677.116692][T14129] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 677.116718][T14129] ? __pfx_policy_nodemask+0x10/0x10 [ 677.116740][T14129] ? do_raw_spin_lock+0x12b/0x2f0 [ 677.116765][T14129] alloc_pages_mpol+0xd1/0x380 [ 677.116793][T14129] alloc_pages_noprof+0xd2/0x2f0 [ 677.116818][T14129] pte_alloc_one+0x22/0x380 [ 677.116843][T14129] __pte_alloc+0x25/0x1a0 [ 677.116873][T14129] do_pte_missing+0x1c13/0x2940 [ 677.116900][T14129] ? __pmd_alloc+0x41b/0x5e0 [ 677.116922][T14129] handle_mm_fault+0xdc2/0x14d0 [ 677.116944][T14129] ? handle_mm_fault+0xed/0x14d0 [ 677.116966][T14129] ? __pfx_handle_mm_fault+0x10/0x10 [ 677.116985][T14129] ? __lock_acquire+0x6b5/0x2d10 [ 677.117021][T14129] __get_user_pages+0x16d4/0x2620 [ 677.117046][T14129] ? __gup_longterm_locked+0xc4e/0x1630 [ 677.117078][T14129] __gup_longterm_locked+0xdcf/0x1630 [ 677.117104][T14129] ? gup_fast_fallback+0x141/0x2040 [ 677.117134][T14129] gup_fast_fallback+0x1cfd/0x2040 [ 677.117170][T14129] ? __pfx_mtree_load+0x10/0x10 [ 677.117199][T14129] ? __pfx_gup_fast_fallback+0x10/0x10 [ 677.117219][T14129] ? is_valid_gup_args+0x11f/0x200 [ 677.117239][T14129] ? get_user_pages_fast+0x4d/0xb0 [ 677.117260][T14129] __se_sys_get_mempolicy+0x48d/0x11c0 [ 677.117288][T14129] ? __pfx___se_sys_get_mempolicy+0x10/0x10 [ 677.117309][T14129] ? ksys_write+0x248/0x270 [ 677.117334][T14129] ? __pfx_ksys_write+0x10/0x10 [ 677.117369][T14129] ? __x64_sys_get_mempolicy+0x20/0xc0 [ 677.117390][T14129] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.117408][T14129] do_syscall_64+0x174/0x580 [ 677.117433][T14129] ? trace_irq_disable+0x3b/0x140 [ 677.117452][T14129] ? clear_bhb_loop+0x40/0x90 [ 677.117472][T14129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.117489][T14129] RIP: 0033:0x7f1b8051ce59 [ 677.117504][T14129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 677.117519][T14129] RSP: 002b:00007f1b7e776028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ef [ 677.117536][T14129] RAX: ffffffffffffffda RBX: 00007f1b80795fa0 RCX: 00007f1b8051ce59 [ 677.117550][T14129] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000000 [ 677.117559][T14129] RBP: 00007f1b7e776090 R08: 0000000000000003 R09: 0000000000000000 [ 677.117570][T14129] R10: 0000200000466000 R11: 0000000000000246 R12: 0000000000000001 [ 677.117581][T14129] R13: 00007f1b80796038 R14: 00007f1b80795fa0 R15: 00007fffa9654678 [ 677.117606][T14129] [ 677.217094][ T32] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 677.398133][ T32] usb 5-1: device descriptor read/64, error -71 [ 677.548213][T14131] comedi comedi0: pcl726: I/O base address or length out of range [ 677.660136][ T32] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 677.662097][T14133] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2962'. [ 677.814778][ T32] usb 5-1: device descriptor read/64, error -71 [ 677.913002][ T32] usb usb5-port1: attempt power cycle [ 678.065046][T12330] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 678.140665][ T5688] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 678.168403][T14146] random: crng reseeded on system resumption [ 678.197556][T12330] usb 3-1: device descriptor read/64, error -71 [ 678.273957][ T32] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 678.294185][ T32] usb 5-1: device descriptor read/8, error -71 [ 678.304402][ T5688] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 678.304450][ T5688] usb 4-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 678.304467][ T5688] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.308747][ T5688] usb 4-1: config 0 descriptor?? [ 678.310405][T14140] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 678.426855][T12330] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 678.570916][T12330] usb 3-1: device descriptor read/64, error -71 [ 678.600422][ T32] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 678.618102][ T32] usb 5-1: device descriptor read/8, error -71 [ 678.677098][T12330] usb usb3-port1: attempt power cycle [ 678.722148][ T32] usb usb5-port1: unable to enumerate USB device [ 678.737219][T14140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.740043][T14140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.765010][ T5688] hid (null): report_id 28405 is invalid [ 678.765048][ T5688] hid (null): unknown global tag 0xc [ 678.780581][ T5688] hid (null): unknown global tag 0xd [ 678.815763][ T5688] asus 0003:0B05:1ABE.0011: unknown main item tag 0x0 [ 678.815804][ T5688] asus 0003:0B05:1ABE.0011: unknown main item tag 0x0 [ 678.815835][ T5688] asus 0003:0B05:1ABE.0011: unknown main item tag 0x0 [ 678.815863][ T5688] asus 0003:0B05:1ABE.0011: unknown main item tag 0x0 [ 678.815890][ T5688] asus 0003:0B05:1ABE.0011: unknown main item tag 0x0 [ 678.815918][ T5688] asus 0003:0B05:1ABE.0011: unknown main item tag 0x0 [ 678.815946][ T5688] asus 0003:0B05:1ABE.0011: report_id 28405 is invalid [ 678.815964][ T5688] asus 0003:0B05:1ABE.0011: item 0 2 1 8 parsing failed [ 678.848942][ T5688] asus 0003:0B05:1ABE.0011: Asus hid parse failed: -22 [ 678.849046][ T5688] asus 0003:0B05:1ABE.0011: probe with driver asus failed with error -22 [ 678.957394][ T32] usb 4-1: USB disconnect, device number 65 [ 679.064588][T12330] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 679.084259][T12330] usb 3-1: device descriptor read/8, error -71 [ 679.312216][T12330] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 679.323472][ T5762] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 679.343352][T12330] usb 3-1: device descriptor read/8, error -71 [ 679.446939][T12330] usb usb3-port1: unable to enumerate USB device [ 679.493149][ T5762] usb 2-1: Using ep0 maxpacket: 32 [ 679.496290][ T5762] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 679.500868][ T5762] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 679.500899][ T5762] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 679.500923][ T5762] usb 2-1: Product: syz [ 679.500940][ T5762] usb 2-1: Manufacturer: syz [ 679.500957][ T5762] usb 2-1: SerialNumber: syz [ 679.572325][ T5762] usb 2-1: config 0 descriptor?? [ 679.573224][T14155] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 679.593219][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 679.593324][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 679.836354][ T5762] usb 2-1: USB disconnect, device number 45 [ 680.569121][ T5762] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 680.645734][ T5715] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 680.721488][ T5762] usb 5-1: Using ep0 maxpacket: 16 [ 680.724684][ T5762] usb 5-1: config 5 has an invalid interface number: 198 but max is 0 [ 680.724715][ T5762] usb 5-1: config 5 has no interface number 0 [ 680.724752][ T5762] usb 5-1: config 5 interface 198 has no altsetting 0 [ 680.757207][ T5762] usb 5-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=bb.77 [ 680.757243][ T5762] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.757268][ T5762] usb 5-1: Product: syz [ 680.757286][ T5762] usb 5-1: Manufacturer: syz [ 680.757304][ T5762] usb 5-1: SerialNumber: syz [ 680.788579][ T5715] usb 4-1: Using ep0 maxpacket: 32 [ 680.800271][ T5715] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 680.821203][ T5715] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 680.821237][ T5715] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 680.821260][ T5715] usb 4-1: Product: syz [ 680.821276][ T5715] usb 4-1: Manufacturer: syz [ 680.821292][ T5715] usb 4-1: SerialNumber: syz [ 680.877180][ T5715] usb 4-1: config 0 descriptor?? [ 680.883830][T14167] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 681.077848][T14165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.078495][T14165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.108714][T14165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.119300][T14165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.282753][ T5762] snd-usb-audio 5-1:5.198: probe with driver snd-usb-audio failed with error -71 [ 681.296153][ T5762] usb 5-1: USB disconnect, device number 3 [ 681.509204][ T5688] usb 4-1: USB disconnect, device number 66 [ 681.654745][ T5701] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 681.797673][ T5701] usb 3-1: Using ep0 maxpacket: 32 [ 681.799723][ T5701] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 681.799769][ T5701] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 681.799832][ T5701] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 681.799864][ T5701] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 681.799894][ T5701] usb 3-1: config 0 interface 0 has no altsetting 0 [ 681.802363][ T5701] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 681.802397][ T5701] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 681.802421][ T5701] usb 3-1: Product: syz [ 681.802438][ T5701] usb 3-1: Manufacturer: syz [ 681.802455][ T5701] usb 3-1: SerialNumber: syz [ 681.825353][ T5701] usb 3-1: config 0 descriptor?? [ 681.952935][ T5701] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 681.984366][ T5701] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 682.290507][T14173] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 682.291792][ T5762] usb 3-1: USB disconnect, device number 57 [ 682.291878][ C1] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 682.325655][ T5762] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 682.645644][ T5715] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 682.780717][ T5715] usb 2-1: device descriptor read/64, error -71 [ 683.007505][ T5715] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 683.130987][ T5715] usb 2-1: device descriptor read/64, error -71 [ 683.240389][ T5715] usb usb2-port1: attempt power cycle [ 683.549206][T14203] vcan0: tx drop: invalid sa for name 0x0000000000000010 [ 683.562492][ T5715] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 683.599570][ T5715] usb 2-1: device descriptor read/8, error -71 [ 683.619947][T14205] /dev/nullb0: Can't open blockdev [ 683.687725][T14207] netlink: 'syz.2.2988': attribute type 16 has an invalid length. [ 683.687751][T14207] netlink: 'syz.2.2988': attribute type 3 has an invalid length. [ 683.687767][T14207] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.2988'. [ 683.848468][ T5715] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 683.865037][ T5715] usb 2-1: device descriptor read/8, error -71 [ 683.924223][T14215] fuse: Unknown parameter 'åºT roup_id' [ 683.970907][ T5715] usb usb2-port1: unable to enumerate USB device [ 684.035537][T14219] overlayfs: workdir and upperdir must reside under the same mount [ 684.232760][T14222] binder: 14220:14222 ioctl c0306201 200000001680 returned -14 [ 684.233892][T14221] binder: 14220:14221 ioctl c0306201 200000000640 returned -22 [ 684.823477][T14242] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2997'. [ 684.823533][T14242] openvswitch: netlink: Flow actions attr not present in new flow. [ 685.117836][T14248] pimreg: tun_chr_ioctl cmd 1074025677 [ 685.117951][T14248] pimreg: linktype set to 769 [ 685.905879][ T5762] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 686.045610][ T5701] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 686.055154][ T5762] usb 2-1: Using ep0 maxpacket: 8 [ 686.057518][ T5762] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1536, setting to 64 [ 686.057556][ T5762] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 686.057583][ T5762] usb 2-1: config 0 interface 0 has no altsetting 0 [ 686.060220][ T5762] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 686.060250][ T5762] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.060276][ T5762] usb 2-1: Product: syz [ 686.060287][ T5762] usb 2-1: Manufacturer: syz [ 686.060298][ T5762] usb 2-1: SerialNumber: syz [ 686.083506][ T5715] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 686.136800][ T5762] usb 2-1: config 0 descriptor?? [ 686.151892][ T5762] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 686.169235][T12330] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 686.238530][ T5715] usb 3-1: Using ep0 maxpacket: 32 [ 686.241070][ T5715] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 686.241100][ T5715] usb 3-1: config 0 has no interface number 0 [ 686.241147][ T5715] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 686.241173][ T5715] usb 3-1: config 0 interface 1 has no altsetting 0 [ 686.244367][ T5715] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 686.244401][ T5715] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.244423][ T5715] usb 3-1: Product: syz [ 686.244439][ T5715] usb 3-1: Manufacturer: syz [ 686.244455][ T5715] usb 3-1: SerialNumber: syz [ 686.247450][ T5701] usb 4-1: Using ep0 maxpacket: 8 [ 686.322471][ T5701] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 686.322504][ T5701] usb 4-1: config 0 interface 0 has no altsetting 0 [ 686.347403][ T5715] usb 3-1: config 0 descriptor?? [ 686.352682][ T5701] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 686.352752][ T5701] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.352822][ T5701] usb 4-1: Product: syz [ 686.352865][ T5701] usb 4-1: Manufacturer: syz [ 686.352916][ T5701] usb 4-1: SerialNumber: syz [ 686.396364][ T5701] usb 4-1: config 0 descriptor?? [ 686.406154][T12330] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 686.406187][T12330] usb 5-1: config 0 has no interface number 0 [ 686.406817][ T5762] snd_usb_toneport 2-1:0.0: cannot get proper max packet size [ 686.447935][ T5762] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 686.459797][T12330] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 686.459831][T12330] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.459854][T12330] usb 5-1: Product: syz [ 686.459872][T12330] usb 5-1: Manufacturer: syz [ 686.459889][T12330] usb 5-1: SerialNumber: syz [ 686.502228][T12330] usb 5-1: config 0 descriptor?? [ 686.535261][ T5762] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 686.563244][T14264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.565159][T14264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.582186][T14255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.584311][ T5701] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 686.609523][T14255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.631822][ T5783] usb 2-1: USB disconnect, device number 50 [ 686.693491][T14270] netlink: 15678 bytes leftover after parsing attributes in process `syz.2.3006'. [ 686.752220][T14268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.754162][T14268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.802562][T14268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.826441][T14268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.831817][T14268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.834329][T14268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.876840][T14268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.892150][ T5701] snd_usb_toneport 4-1:0.0: cannot get proper max packet size [ 686.905519][ T5701] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 686.922329][T14268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.968759][T14268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.991269][T14268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 687.033256][ T5701] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 687.070721][ T5715] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 687.097173][T12330] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 687.112069][T14272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 687.118945][T12330] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 687.119189][T12330] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 687.119273][T12330] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 687.210921][T14272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 687.237921][T12330] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 687.238844][ T5715] cx231xx 3-1:0.1: Failed to read PCB config [ 687.238921][ T5715] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71 [ 687.265203][T12330] usb 5-1: USB disconnect, device number 4 [ 687.288899][ T5715] usb 3-1: USB disconnect, device number 58 [ 687.333650][ T10] usb 4-1: USB disconnect, device number 67 [ 687.339510][T12330] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 687.362078][T12330] keyspan 5-1:0.133: device disconnected [ 687.501013][T14276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3009'. [ 687.501167][T14276] openvswitch: netlink: Key type 1286 is out of range max 32 [ 687.769360][ T5701] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 687.836332][ T5715] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 687.893308][ T5701] usb 2-1: device descriptor read/64, error -71 [ 687.993569][ T5715] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 687.993605][ T5715] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.993629][ T5715] usb 3-1: Product: syz [ 687.993650][ T5715] usb 3-1: Manufacturer: syz [ 687.993661][ T5715] usb 3-1: SerialNumber: syz [ 688.043349][ T5715] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 688.075788][ T5688] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 688.140653][ T5701] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 688.198072][T12330] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 688.264937][ T5701] usb 2-1: device descriptor read/64, error -71 [ 688.331212][T12330] usb 4-1: device descriptor read/64, error -71 [ 688.369783][ T5701] usb usb2-port1: attempt power cycle [ 688.470751][T14279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 688.471365][T14279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.569912][T12330] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 688.702621][T12330] usb 4-1: device descriptor read/64, error -71 [ 688.808011][T12330] usb usb4-port1: attempt power cycle [ 689.169502][T12330] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 689.198555][T12330] usb 4-1: device descriptor read/8, error -71 [ 689.447328][T12330] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 689.462752][ T5688] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 689.463119][ T10] usb 3-1: USB disconnect, device number 59 [ 689.465322][T12330] usb 4-1: device descriptor read/8, error -71 [ 689.553726][ T5701] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 689.570460][T12330] usb usb4-port1: unable to enumerate USB device [ 689.571374][ T5701] usb 2-1: device descriptor read/8, error -71 [ 689.578983][ T5688] ath9k_htc: Failed to initialize the device [ 689.599829][ T10] usb 3-1: ath9k_htc: USB layer deinitialized [ 689.797815][ T5701] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 689.818424][ T5701] usb 2-1: device descriptor read/8, error -71 [ 689.922885][ T5701] usb usb2-port1: unable to enumerate USB device [ 690.036392][T14295] sg_write: data in/out 452414/136 bytes for SCSI command 0x0-- guessing data in; [ 690.036392][T14295] program syz.2.3017 not setting count and/or reply_len properly [ 690.293015][ T5701] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 690.366738][ T38] audit: type=1326 audit(1780481844.015:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14291 comm="syz.4.3016" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cd2acce59 code=0x7fc00000 [ 690.436470][ T5701] usb 3-1: Using ep0 maxpacket: 32 [ 690.442154][ T5701] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 690.442187][ T5701] usb 3-1: config 0 has no interface number 0 [ 690.442238][ T5701] usb 3-1: config 0 interface 184 has no altsetting 0 [ 690.445118][ T5701] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 690.445140][ T5701] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.445156][ T5701] usb 3-1: Product: syz [ 690.445170][ T5701] usb 3-1: Manufacturer: syz [ 690.445181][ T5701] usb 3-1: SerialNumber: syz [ 690.529263][ T5701] usb 3-1: config 0 descriptor?? [ 690.721626][T12330] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 690.870671][T12330] usb 2-1: unable to get BOS descriptor or descriptor too short [ 690.873158][T12330] usb 2-1: config 114 has an invalid interface number: 240 but max is 0 [ 690.873189][T12330] usb 2-1: config 114 has no interface number 0 [ 690.873337][T12330] usb 2-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 690.873368][T12330] usb 2-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 690.873399][T12330] usb 2-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 690.873429][T12330] usb 2-1: config 114 interface 240 has no altsetting 0 [ 690.959204][T12330] usb 2-1: string descriptor 0 read error: -22 [ 690.959344][T12330] usb 2-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 690.959374][T12330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.008881][T14297] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 691.009087][T14297] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 691.027812][T12330] ir_usb 2-1:114.240: IR Dongle converter detected [ 691.179187][ T5701] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 691.179223][ T5701] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 691.250490][T12330] usb 2-1: IRDA class descriptor not found, device not bound [ 691.451182][ T10] usb 2-1: USB disconnect, device number 55 [ 691.732578][ T5701] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 691.732663][ T5701] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 691.732686][ T5701] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 691.733097][ T5701] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 691.760656][ T5701] usb 3-1: USB disconnect, device number 60 [ 691.845552][T12330] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 692.008445][T12330] usb 5-1: Using ep0 maxpacket: 32 [ 692.024220][T12330] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 692.024255][T12330] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 692.024287][T12330] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 692.024320][T12330] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 692.024338][T12330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.056300][T12330] usb 5-1: config 0 descriptor?? [ 692.063829][T14312] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 692.095059][T12330] hub 5-1:0.0: USB hub found [ 692.278328][T12330] hub 5-1:0.0: 2 ports detected [ 694.184390][T14340] FAULT_INJECTION: forcing a failure. [ 694.184390][T14340] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 694.184442][T14340] CPU: 0 UID: 0 PID: 14340 Comm: syz.1.3033 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 694.184474][T14340] Tainted: [L]=SOFTLOCKUP [ 694.184483][T14340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 694.184497][T14340] Call Trace: [ 694.184506][T14340] [ 694.184523][T14340] dump_stack_lvl+0xe8/0x150 [ 694.184574][T14340] should_fail_ex+0x46b/0x600 [ 694.184617][T14340] _copy_from_user+0x2d/0xb0 [ 694.184645][T14340] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 694.184681][T14340] drm_ioctl+0x5d0/0xb80 [ 694.184716][T14340] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 694.184754][T14340] ? __pfx_drm_ioctl+0x10/0x10 [ 694.184797][T14340] ? __fget_files+0x2a/0x420 [ 694.184831][T14340] ? bpf_lsm_file_ioctl+0x9/0x20 [ 694.184865][T14340] ? __pfx_drm_ioctl+0x10/0x10 [ 694.184897][T14340] __se_sys_ioctl+0xff/0x170 [ 694.184931][T14340] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.184955][T14340] do_syscall_64+0x174/0x580 [ 694.184989][T14340] ? trace_irq_disable+0x3b/0x140 [ 694.185031][T14340] ? clear_bhb_loop+0x40/0x90 [ 694.185077][T14340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.185102][T14340] RIP: 0033:0x7fedbed2ce59 [ 694.185123][T14340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 694.185145][T14340] RSP: 002b:00007fedbcf86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 694.185170][T14340] RAX: ffffffffffffffda RBX: 00007fedbefa5fa0 RCX: 00007fedbed2ce59 [ 694.185187][T14340] RDX: 00002000000003c0 RSI: 00000000c01864c6 RDI: 0000000000000003 [ 694.185204][T14340] RBP: 00007fedbcf86090 R08: 0000000000000000 R09: 0000000000000000 [ 694.185221][T14340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 694.185231][T14340] R13: 00007fedbefa6038 R14: 00007fedbefa5fa0 R15: 00007fff805f9598 [ 694.185281][T14340] [ 694.754022][T12330] usb 5-1-port2: cannot warm reset (err = -71) [ 694.754719][T12330] usb 5-1-port2: cannot warm reset (err = -71) [ 694.754741][T12330] usb 5-1-port2: Cannot enable. Maybe the USB cable is bad? [ 695.571715][T12330] usb 5-1: reset high-speed USB device number 5 using dummy_hcd [ 695.723880][T12330] usb 5-1: device firmware changed [ 695.746714][ T32] usb 5-1: USB disconnect, device number 5 [ 695.746830][T12330] hub 5-1:0.0: set hub depth failed [ 696.064929][ T32] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 696.216954][ T32] usb 5-1: Using ep0 maxpacket: 32 [ 696.219250][ T32] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 696.219279][ T32] usb 5-1: config 0 has no interface number 0 [ 696.219326][ T32] usb 5-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 696.219353][ T32] usb 5-1: config 0 interface 89 has no altsetting 0 [ 696.221396][ T32] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 696.221423][ T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.221444][ T32] usb 5-1: Product: syz [ 696.221459][ T32] usb 5-1: Manufacturer: syz [ 696.221475][ T32] usb 5-1: SerialNumber: syz [ 696.297977][ T32] usb 5-1: config 0 descriptor?? [ 696.315534][ T32] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 696.315577][ T32] em28xx 5-1:0.89: Video interface 89 found: [ 696.564842][T14373] program syz.2.3045 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 696.746284][T14376] veth0_vlan: entered allmulticast mode [ 696.889367][ T32] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 697.205700][T14387] dns_resolver: Unsupported server list version (0) [ 697.489086][ T32] em28xx 5-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 697.489120][ T32] em28xx 5-1:0.89: board has no eeprom [ 697.489453][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 697.521237][T14389] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.3051'. [ 697.551093][ T32] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 697.551126][ T32] em28xx 5-1:0.89: analog set to bulk mode. [ 697.551528][ T5620] em28xx 5-1:0.89: Registering V4L2 extension [ 697.590823][ T32] usb 5-1: USB disconnect, device number 6 [ 697.594486][ T32] em28xx 5-1:0.89: Disconnecting em28xx [ 697.678498][ T5620] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 697.678526][ T5620] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 697.678543][ T5620] em28xx 5-1:0.89: No AC97 audio processor [ 697.728546][ T5620] usb 5-1: Decoder not found [ 697.728570][ T5620] em28xx 5-1:0.89: failed to create media graph [ 697.728602][ T5620] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 697.792924][ T5620] em28xx 5-1:0.89: Registering snapshot button... [ 697.796027][ T5620] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input56 [ 697.824635][T14393] binder: 14392:14393 ioctl 4018620d 0 returned -22 [ 697.825147][ T5620] em28xx 5-1:0.89: Remote control support is not available for this card. [ 697.825222][ T32] em28xx 5-1:0.89: Closing input extension [ 697.825247][ T32] em28xx 5-1:0.89: Deregistering snapshot button [ 698.031069][ T32] em28xx 5-1:0.89: Freeing device [ 698.121901][ T5701] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 698.168614][T14398] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3054'. [ 698.268038][ T5701] usb 2-1: unable to get BOS descriptor or descriptor too short [ 698.269256][ T5701] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 698.269283][ T5701] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 698.269335][ T5701] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 698.269381][ T5701] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 698.269412][ T5701] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 698.269435][ T5701] usb 2-1: config 1 interface 1 has no altsetting 0 [ 698.272785][ T5701] usb 2-1: string descriptor 0 read error: -22 [ 698.272940][ T5701] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 698.272969][ T5701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.331726][ T10] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 698.522188][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 698.525744][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 698.527218][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 698.527273][ T10] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 698.527349][ T10] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x8E has invalid wMaxPacketSize 0 [ 698.527368][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 698.529857][ T10] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 698.529878][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.529941][ T10] usb 3-1: Product: syz [ 698.529953][ T10] usb 3-1: Manufacturer: syz [ 698.529964][ T10] usb 3-1: SerialNumber: syz [ 698.954509][T14411] syzkaller1: entered promiscuous mode [ 698.954543][T14411] syzkaller1: entered allmulticast mode [ 698.975831][T14399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 698.976753][T14399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 698.997311][T14399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.008607][T14399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.242526][ T5701] usb 2-1: 2:0: failed to get current value for ch 1 (-32) [ 699.721952][ T5701] usb 2-1: USB disconnect, device number 56 [ 699.851245][T14419] binder: 14418:14419 ioctl 4018620d 0 returned -22 [ 700.014369][ T10] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 700.050280][T14424] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 700.056073][T14424] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 700.095352][ T10] usb 3-1: USB disconnect, device number 61 [ 700.096512][T14424] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 700.273135][T13398] udevd[13398]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 700.393217][T14433] netlink: 'syz.4.3067': attribute type 49 has an invalid length. [ 700.405973][ T32] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 700.433298][T14433] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3067'. [ 700.554158][ T32] usb 4-1: Using ep0 maxpacket: 32 [ 700.567283][ T32] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 700.567320][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 700.567351][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 700.567409][ T32] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 700.567435][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.633223][ T32] usb 4-1: config 0 descriptor?? [ 700.634408][T14429] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 700.657903][ T32] hub 4-1:0.0: USB hub found [ 700.829191][ T32] hub 4-1:0.0: 2 ports detected [ 700.923795][T14449] binder: 14448:14449 ioctl 4018620d 0 returned -22 [ 701.026665][T11696] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 701.121893][ T5701] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 701.129086][T14453] netlink: 'syz.1.3074': attribute type 3 has an invalid length. [ 701.175006][T11696] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 701.175043][T11696] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.175067][T11696] usb 5-1: Product: syz [ 701.175084][T11696] usb 5-1: Manufacturer: syz [ 701.175101][T11696] usb 5-1: SerialNumber: syz [ 701.213530][T11696] usb 5-1: config 0 descriptor?? [ 701.268748][ T5701] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 701.269013][ T5701] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.301258][ T5701] usb 3-1: config 0 descriptor?? [ 701.323098][ T5701] cp210x 3-1:0.0: cp210x converter detected [ 701.416323][T11696] usb 5-1: ignoring: probably an ADSL modem [ 701.483782][ T10] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 701.618484][T14442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 701.620004][T14442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 701.628709][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 701.650787][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 701.651545][T11696] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 701.683943][ T10] usb 2-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 701.683968][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.684981][ T10] usb 2-1: Product: syz [ 701.684996][ T10] usb 2-1: Manufacturer: syz [ 701.685008][ T10] usb 2-1: SerialNumber: syz [ 701.727650][T11696] usb 5-1: USB disconnect, device number 7 [ 701.749132][ T10] usb 2-1: config 0 descriptor?? [ 701.824280][ T10] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 701.849201][ T5701] usb 3-1: cp210x converter now attached to ttyUSB0 [ 701.869133][ T5701] usb 3-1: USB disconnect, device number 62 [ 701.974045][ T5701] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 701.978199][ T5701] cp210x 3-1:0.0: device disconnected [ 702.292766][T14458] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3076'. [ 702.559347][ T10] input: gspca_pac7302 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input57 [ 702.639420][T14461] netlink: 'syz.4.3077': attribute type 3 has an invalid length. [ 702.696564][T11696] usb 4-1: USB disconnect, device number 72 [ 702.715839][T14463] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3078'. [ 702.728829][T14462] dvmrp2: entered allmulticast mode [ 702.743705][T14462] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3078'. [ 702.854830][ T10] usb 2-1: USB disconnect, device number 57 [ 703.162852][T14474] binder: 14473:14474 ioctl c0306201 0 returned -14 [ 703.823560][T14496] binder: BINDER_SET_CONTEXT_MGR already set [ 703.823588][T14496] binder: 14495:14496 ioctl 4018620d 200000004a80 returned -16 [ 703.823925][T14496] binder: 14495:14496 ioctl c0306201 0 returned -14 [ 703.864885][ T32] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 703.906302][T14498] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3089'. [ 704.043707][ T32] usb 3-1: Using ep0 maxpacket: 16 [ 704.051041][ T32] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 704.051067][ T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 704.053413][ T32] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 704.053436][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.053452][ T32] usb 3-1: Product: syz [ 704.053463][ T32] usb 3-1: Manufacturer: syz [ 704.053475][ T32] usb 3-1: SerialNumber: syz [ 704.067827][ T32] usb 3-1: config 0 descriptor?? [ 704.126457][ T32] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 704.126485][ T32] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 704.238617][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 704.379136][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 704.382090][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 704.382126][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 704.382166][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 704.382215][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 704.382243][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.450474][ T10] usb 5-1: config 0 descriptor?? [ 704.451740][T14502] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 704.480002][ T10] hub 5-1:0.0: USB hub found [ 704.586075][T14510] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3095'. [ 704.656903][ T10] hub 5-1:0.0: 2 ports detected [ 704.685802][ T32] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 704.688016][ T32] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 704.954057][ T32] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 704.954080][ T32] em28xx 3-1:0.0: No AC97 audio processor [ 705.020345][ T32] usb 3-1: USB disconnect, device number 63 [ 705.030430][ T32] em28xx 3-1:0.0: Disconnecting em28xx [ 705.086436][ T32] em28xx 3-1:0.0: Freeing device [ 705.328855][T14515] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input58 [ 705.545886][T14526] binder: 14525:14526 ioctl c0306201 0 returned -14 [ 705.936667][T14533] netlink: 'syz.3.3103': attribute type 3 has an invalid length. [ 705.971288][ T38] audit: type=1326 audit(1780481860.405:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14534 comm="syz.1.3104" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fedbed2ce59 code=0x0 [ 706.246181][ T10] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 706.390611][T12330] usb 5-1: USB disconnect, device number 8 [ 706.399343][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 706.401920][ T10] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 706.401947][ T10] usb 2-1: config 0 has no interface number 0 [ 706.405667][ T10] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 706.405698][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.405721][ T10] usb 2-1: Product: syz [ 706.405738][ T10] usb 2-1: Manufacturer: syz [ 706.405755][ T10] usb 2-1: SerialNumber: syz [ 706.468877][ T10] usb 2-1: config 0 descriptor?? [ 706.499943][ T10] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 706.952189][ T10] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 707.052287][ T10] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 707.313031][T14544] netlink: 160 bytes leftover after parsing attributes in process `syz.3.3106'. [ 707.398526][T12330] lo speed is unknown, defaulting to 1000 [ 707.656322][ T5688] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 707.798204][ T5688] usb 4-1: Using ep0 maxpacket: 32 [ 707.804768][ T5688] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 707.804796][ T5688] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 707.804816][ T5688] usb 4-1: config 0 has no interface number 0 [ 707.847389][ T5688] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 707.847827][ T5688] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.847855][ T5688] usb 4-1: Product: syz [ 707.847872][ T5688] usb 4-1: Manufacturer: syz [ 707.847890][ T5688] usb 4-1: SerialNumber: syz [ 707.894950][ T5688] usb 4-1: config 0 descriptor?? [ 707.909944][ T5688] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 707.965586][ T4925] Bluetooth: hci2: adv larger than maximum supported [ 707.965607][ T4925] Bluetooth: hci2: Malformed LE Event: 0x0d [ 708.100229][ T5688] usb 4-1: qt2_setup_urbs - submit read urb failed -8 [ 708.101402][ T5688] quatech2 4-1:0.51: probe with driver quatech2 failed with error -8 [ 708.324308][ T10] usb 4-1: USB disconnect, device number 73 [ 708.541284][ T5620] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 708.712457][ T5620] usb 3-1: Using ep0 maxpacket: 8 [ 708.715935][ T5620] usb 3-1: unable to get BOS descriptor or descriptor too short [ 708.717934][ T5620] usb 3-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 218, changing to 11 [ 708.717973][ T5620] usb 3-1: config 1 interface 0 has no altsetting 0 [ 708.727969][ T5620] usb 3-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= 0.40 [ 708.728003][ T5620] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.728028][ T5620] usb 3-1: Product: syz [ 708.728060][ T5620] usb 3-1: Manufacturer: syz [ 708.728104][ T5620] usb 3-1: SerialNumber: syz [ 708.930366][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 708.953187][ T32] usb 2-1: USB disconnect, device number 58 [ 709.280006][ T32] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 709.355858][ T32] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 709.356574][ T32] quatech2 2-1:0.51: device disconnected [ 709.434599][ T5620] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input59 [ 709.506600][ T4961] bcm5974 3-1:1.0: could not read from device [ 709.578619][ T4961] bcm5974 3-1:1.0: could not read from device [ 709.606159][ T5620] usb 3-1: USB disconnect, device number 64 [ 709.626209][T14568] binder: 14567:14568 ioctl c0306201 2000000001c0 returned -14 [ 709.674593][ T10] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 709.822555][ T10] usb 4-1: config 0 has no interfaces? [ 709.822591][ T10] usb 4-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 709.822615][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.866189][ T10] usb 4-1: config 0 descriptor?? [ 710.066790][ T10] usb 4-1: USB disconnect, device number 74 [ 710.502247][ T38] audit: type=1800 audit(1780481865.151:45): pid=14594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3126" name="file0" dev="tmpfs" ino=1507 res=0 errno=0 [ 710.913829][ T5620] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 711.074482][ T5620] usb 4-1: Using ep0 maxpacket: 32 [ 711.076502][ T5620] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 711.076537][ T5620] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 711.076570][ T5620] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 711.076604][ T5620] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 711.076622][ T5620] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.088141][ T5620] usb 4-1: config 0 descriptor?? [ 711.113833][T14602] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 711.159266][ T5620] hub 4-1:0.0: USB hub found [ 711.328222][ T5620] hub 4-1:0.0: 2 ports detected [ 711.493976][T11696] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 711.598249][ T32] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 711.639163][T11696] usb 3-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 711.639222][T11696] usb 3-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 711.641578][T11696] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 711.641609][T11696] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 711.641633][T11696] usb 3-1: Manufacturer: syz [ 711.641651][T11696] usb 3-1: SerialNumber: syz [ 711.782189][ T32] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 711.782224][ T32] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 711.782385][ T32] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 711.821018][ T32] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 711.821112][ T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.821138][ T32] usb 5-1: Product: syz [ 711.821155][ T32] usb 5-1: Manufacturer: syz [ 711.821183][ T32] usb 5-1: SerialNumber: syz [ 711.914662][ T32] cdc_mbim 5-1:1.0: MBIM functional descriptor missing [ 711.914776][ T32] cdc_mbim 5-1:1.0: bind() failure [ 712.109954][ T32] usb 5-1: USB disconnect, device number 9 [ 713.098464][ T10] usb 4-1: USB disconnect, device number 75 [ 713.860559][T14644] FAULT_INJECTION: forcing a failure. [ 713.860559][T14644] name failslab, interval 1, probability 0, space 0, times 0 [ 713.860662][T14644] CPU: 0 UID: 0 PID: 14644 Comm: syz.3.3149 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 713.860695][T14644] Tainted: [L]=SOFTLOCKUP [ 713.860704][T14644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 713.860720][T14644] Call Trace: [ 713.860729][T14644] [ 713.860740][T14644] dump_stack_lvl+0xe8/0x150 [ 713.860776][T14644] should_fail_ex+0x46b/0x600 [ 713.860817][T14644] should_failslab+0xa8/0x100 [ 713.860849][T14644] __kmalloc_noprof+0xdf/0x7b0 [ 713.860878][T14644] ? iovec_from_user+0x87/0x250 [ 713.860910][T14644] iovec_from_user+0x87/0x250 [ 713.860941][T14644] __import_iovec+0x163/0x7e0 [ 713.860978][T14644] import_iovec+0x73/0xa0 [ 713.861008][T14644] ___sys_recvmsg+0x4bd/0x590 [ 713.861047][T14644] ? __pfx____sys_recvmsg+0x10/0x10 [ 713.861074][T14644] ? __fget_files+0x2a/0x420 [ 713.861119][T14644] ? __fget_files+0x3a6/0x420 [ 713.861156][T14644] do_recvmmsg+0x33a/0x800 [ 713.861189][T14644] ? __pfx_do_recvmmsg+0x10/0x10 [ 713.861225][T14644] ? _copy_from_user+0x94/0xb0 [ 713.861267][T14644] __x64_sys_recvmmsg+0x1b7/0x250 [ 713.861294][T14644] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 713.861327][T14644] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.861354][T14644] do_syscall_64+0x174/0x580 [ 713.861388][T14644] ? trace_irq_disable+0x3b/0x140 [ 713.861414][T14644] ? clear_bhb_loop+0x40/0x90 [ 713.861443][T14644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.861467][T14644] RIP: 0033:0x7faee818ce59 [ 713.861489][T14644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 713.861510][T14644] RSP: 002b:00007faee63e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 713.861535][T14644] RAX: ffffffffffffffda RBX: 00007faee8405fa0 RCX: 00007faee818ce59 [ 713.861553][T14644] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 713.861569][T14644] RBP: 00007faee63e6090 R08: 0000200000003700 R09: 0000000000000000 [ 713.861585][T14644] R10: 0000000040000042 R11: 0000000000000246 R12: 0000000000000001 [ 713.861601][T14644] R13: 00007faee8406038 R14: 00007faee8405fa0 R15: 00007ffe5d407b98 [ 713.861637][T14644] [ 714.228389][T11696] usbhid 3-1:36.0: couldn't find an input interrupt endpoint [ 714.247928][T11696] usb 3-1: USB disconnect, device number 65 [ 714.750859][T11696] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 714.893720][T11696] usb 3-1: Using ep0 maxpacket: 32 [ 714.895546][T11696] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 714.895589][T11696] usb 3-1: config 0 has no interface number 0 [ 714.895636][T11696] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 714.895657][T11696] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 714.895675][T11696] usb 3-1: config 0 interface 85 has no altsetting 0 [ 714.898390][T11696] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 714.898420][T11696] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.898445][T11696] usb 3-1: Product: syz [ 714.898458][T11696] usb 3-1: Manufacturer: syz [ 714.898469][T11696] usb 3-1: SerialNumber: syz [ 715.007034][T14648] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 715.008128][T11696] usb 3-1: config 0 descriptor?? [ 715.701159][T11696] appletouch 3-1:0.85: Failed to request geyser raw mode [ 715.701402][T11696] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 715.775052][T11696] usb 3-1: USB disconnect, device number 66 [ 716.390101][ T5688] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 716.550803][T11696] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 716.572667][ T5688] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 716.572703][ T5688] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 716.572724][ T5688] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 716.575247][ T5688] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 716.575282][ T5688] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.575300][ T5688] usb 4-1: Product: syz [ 716.575311][ T5688] usb 4-1: Manufacturer: syz [ 716.575322][ T5688] usb 4-1: SerialNumber: syz [ 716.580738][ T5688] usb 4-1: config 0 descriptor?? [ 716.615081][T14681] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 716.615223][T14681] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 716.652286][ T5688] usb 4-1: ucan: probing device on interface #0 [ 716.696994][T11696] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 716.697100][T11696] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 716.697129][T11696] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 716.733374][T11696] usb 5-1: string descriptor 0 read error: -22 [ 716.735542][T11696] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 716.736393][T11696] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.785230][T14691] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 716.822549][ T5688] usb 4-1: ucan: device protocol version 771132141 is not supported [ 716.822570][ T5688] usb 4-1: ucan: probe failed; try to update the device firmware [ 716.978403][T14691] netlink: 'syz.4.3168': attribute type 23 has an invalid length. [ 717.205463][T14681] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 717.206719][T11696] cdc_ncm 5-1:1.0: bind() failure [ 717.305037][T11696] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 717.305088][T11696] cdc_ncm 5-1:1.1: bind() failure [ 717.355457][T11696] usb 5-1: USB disconnect, device number 10 [ 717.385747][ T5762] usb 4-1: USB disconnect, device number 76 [ 717.404389][T14702] FAULT_INJECTION: forcing a failure. [ 717.404389][T14702] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 717.404429][T14702] CPU: 0 UID: 0 PID: 14702 Comm: syz.1.3171 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 717.404461][T14702] Tainted: [L]=SOFTLOCKUP [ 717.404470][T14702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 717.404485][T14702] Call Trace: [ 717.404495][T14702] [ 717.404505][T14702] dump_stack_lvl+0xe8/0x150 [ 717.404539][T14702] should_fail_ex+0x46b/0x600 [ 717.404581][T14702] _copy_from_user+0x2d/0xb0 [ 717.404610][T14702] ___sys_recvmsg+0x175/0x590 [ 717.404632][T14702] ? get_pid_task+0x20/0x1f0 [ 717.404655][T14702] ? get_pid_task+0x20/0x1f0 [ 717.404685][T14702] ? __pfx____sys_recvmsg+0x10/0x10 [ 717.404724][T14702] ? __fget_files+0x2a/0x420 [ 717.404770][T14702] ? __fget_files+0x3a6/0x420 [ 717.404808][T14702] __x64_sys_recvmsg+0x1c0/0x2a0 [ 717.404835][T14702] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 717.404869][T14702] ? __pfx_ksys_write+0x10/0x10 [ 717.404911][T14702] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.404936][T14702] do_syscall_64+0x174/0x580 [ 717.404971][T14702] ? trace_irq_disable+0x3b/0x140 [ 717.404997][T14702] ? clear_bhb_loop+0x40/0x90 [ 717.405029][T14702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.405054][T14702] RIP: 0033:0x7fedbed2ce59 [ 717.405075][T14702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 717.405096][T14702] RSP: 002b:00007fedbcf65028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 717.405122][T14702] RAX: ffffffffffffffda RBX: 00007fedbefa6090 RCX: 00007fedbed2ce59 [ 717.405140][T14702] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 717.405156][T14702] RBP: 00007fedbcf65090 R08: 0000000000000000 R09: 0000000000000000 [ 717.405171][T14702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 717.405184][T14702] R13: 00007fedbefa6128 R14: 00007fedbefa6090 R15: 00007fff805f9598 [ 717.405220][T14702] [ 717.719010][T14703] sg_write: data in/out 393184/8 bytes for SCSI command 0x42-- guessing data in; [ 717.719010][T14703] program syz.2.3172 not setting count and/or reply_len properly [ 717.734418][T14703] netlink: 'syz.2.3172': attribute type 13 has an invalid length. [ 717.734491][T14703] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3172'. [ 718.436663][T14730] input: syz0 as /devices/virtual/input/input61 [ 718.674827][T11696] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 718.710999][T14740] FAULT_INJECTION: forcing a failure. [ 718.710999][T14740] name failslab, interval 1, probability 0, space 0, times 0 [ 718.711039][T14740] CPU: 0 UID: 0 PID: 14740 Comm: syz.4.3189 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 718.711063][T14740] Tainted: [L]=SOFTLOCKUP [ 718.711069][T14740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 718.711081][T14740] Call Trace: [ 718.711087][T14740] [ 718.711095][T14740] dump_stack_lvl+0xe8/0x150 [ 718.711118][T14740] should_fail_ex+0x46b/0x600 [ 718.711147][T14740] should_failslab+0xa8/0x100 [ 718.711177][T14740] kmem_cache_alloc_noprof+0x87/0x680 [ 718.711197][T14740] ? skb_clone+0x212/0x3a0 [ 718.711220][T14740] skb_clone+0x212/0x3a0 [ 718.711239][T14740] __netlink_deliver_tap+0x424/0x8b0 [ 718.711274][T14740] ? netlink_deliver_tap+0x2e/0x1b0 [ 718.711301][T14740] netlink_deliver_tap+0x19c/0x1b0 [ 718.711363][T14740] netlink_sendskb+0x68/0x140 [ 718.711397][T14740] netlink_rcv_skb+0x2b6/0x4b0 [ 718.711433][T14740] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 718.711470][T14740] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 718.711514][T14740] ? bpf_lsm_capable+0x9/0x20 [ 718.711532][T14740] ? security_capable+0x7e/0x2c0 [ 718.711554][T14740] nfnetlink_rcv+0x2c0/0x27b0 [ 718.711579][T14740] ? sock_sendmsg_nosec+0x13a/0x180 [ 718.711599][T14740] ? __pfx_snprintf+0x10/0x10 [ 718.711622][T14740] ? unwind_get_return_address+0x4d/0x90 [ 718.711645][T14740] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 718.711669][T14740] ? trim_netdev_trace+0x7ac/0x840 [ 718.711690][T14740] ? __pfx_trim_netdev_trace+0x10/0x10 [ 718.711708][T14740] ? stack_trace_save+0xa9/0x100 [ 718.711727][T14740] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 718.711751][T14740] ? save_netdev_trace_buffer+0x18f/0x5f0 [ 718.711773][T14740] ? save_netdev_trace_buffer+0x4cf/0x5f0 [ 718.711796][T14740] ? __pfx_save_netdev_trace_buffer+0x10/0x10 [ 718.711815][T14740] ? ref_tracker_free+0x673/0x820 [ 718.711839][T14740] ? __netlink_deliver_tap+0x636/0x8b0 [ 718.711864][T14740] ? netlink_deliver_tap+0x19c/0x1b0 [ 718.711888][T14740] ? netlink_unicast+0x754/0x920 [ 718.711910][T14740] ? netlink_sendmsg+0x813/0xb40 [ 718.711924][T14740] ? sock_sendmsg_nosec+0x13a/0x180 [ 718.711942][T14740] ? ____sys_sendmsg+0x55c/0x870 [ 718.711966][T14740] ? ___sys_sendmsg+0x2a5/0x360 [ 718.711990][T14740] ? __x64_sys_sendmsg+0x1c3/0x2a0 [ 718.712015][T14740] ? do_syscall_64+0x174/0x580 [ 718.712047][T14740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.712075][T14740] ? skb_clone+0x246/0x3a0 [ 718.712093][T14740] ? __netlink_deliver_tap+0x866/0x8b0 [ 718.712120][T14740] ? netlink_deliver_tap+0x2e/0x1b0 [ 718.712150][T14740] ? netlink_deliver_tap+0x2e/0x1b0 [ 718.712176][T14740] ? netlink_deliver_tap+0x2e/0x1b0 [ 718.712205][T14740] netlink_unicast+0x780/0x920 [ 718.712237][T14740] netlink_sendmsg+0x813/0xb40 [ 718.712259][T14740] ? __pfx_netlink_sendmsg+0x10/0x10 [ 718.712277][T14740] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 718.712302][T14740] ? aa_sock_msg_perm+0x122/0x200 [ 718.712320][T14740] ? __pfx_netlink_sendmsg+0x10/0x10 [ 718.712336][T14740] sock_sendmsg_nosec+0x13a/0x180 [ 718.712358][T14740] ____sys_sendmsg+0x55c/0x870 [ 718.712387][T14740] ? __pfx_____sys_sendmsg+0x10/0x10 [ 718.712420][T14740] ? import_iovec+0x73/0xa0 [ 718.712442][T14740] ___sys_sendmsg+0x2a5/0x360 [ 718.712466][T14740] ? __lock_acquire+0x6b5/0x2d10 [ 718.712490][T14740] ? __pfx____sys_sendmsg+0x10/0x10 [ 718.712543][T14740] ? __fget_files+0x2a/0x420 [ 718.712562][T14740] ? __fget_files+0x3a6/0x420 [ 718.712612][T14740] __x64_sys_sendmsg+0x1c3/0x2a0 [ 718.712652][T14740] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 718.712698][T14740] ? __pfx_ksys_write+0x10/0x10 [ 718.712741][T14740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.712767][T14740] do_syscall_64+0x174/0x580 [ 718.712801][T14740] ? trace_irq_disable+0x3b/0x140 [ 718.712828][T14740] ? clear_bhb_loop+0x40/0x90 [ 718.712858][T14740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.712882][T14740] RIP: 0033:0x7f4cd2acce59 [ 718.712903][T14740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 718.712925][T14740] RSP: 002b:00007f4cd0d1e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 718.712950][T14740] RAX: ffffffffffffffda RBX: 00007f4cd2d45fa0 RCX: 00007f4cd2acce59 [ 718.712968][T14740] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000003 [ 718.712993][T14740] RBP: 00007f4cd0d1e090 R08: 0000000000000000 R09: 0000000000000000 [ 718.713009][T14740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 718.713033][T14740] R13: 00007f4cd2d46038 R14: 00007f4cd2d45fa0 R15: 00007ffc815a72f8 [ 718.713068][T14740] [ 718.934097][T11696] usb 3-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice= 2.23 [ 718.934186][T11696] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.934250][T11696] usb 3-1: Product: syz [ 718.934295][T11696] usb 3-1: Manufacturer: syz [ 718.934339][T11696] usb 3-1: SerialNumber: syz [ 719.089563][T11696] usb 3-1: config 0 descriptor?? [ 719.323250][T14729] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3185'. [ 719.370388][ T5762] usb 3-1: USB disconnect, device number 67 [ 719.441213][T14744] binder: 14743:14744 ioctl c0306201 0 returned -14 [ 719.570266][ T5715] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 719.572361][T14746] kvm: user requested TSC rate below hardware speed [ 719.712865][ T5715] usb 5-1: Using ep0 maxpacket: 8 [ 719.715754][ T5715] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 719.718173][ T5715] usb 5-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=11.85 [ 719.718206][ T5715] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.718222][ T5715] usb 5-1: Product: syz [ 719.718234][ T5715] usb 5-1: Manufacturer: syz [ 719.718245][ T5715] usb 5-1: SerialNumber: syz [ 719.730051][ T5715] usb 5-1: config 0 descriptor?? [ 719.779850][ T5715] ipw 5-1:0.0: IPWireless converter converter detected [ 719.877881][ T5688] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 719.886898][T14752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3195'. [ 719.974140][T14742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 719.974759][T14742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 719.998658][ T5715] usb 5-1: USB disconnect, device number 11 [ 720.016315][ T5715] ipw 5-1:0.0: device disconnected [ 720.037103][ T5688] usb 2-1: Using ep0 maxpacket: 32 [ 720.042856][ T5688] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 720.042908][ T5688] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 720.042928][ T5688] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.101889][ T5688] usb 2-1: config 0 descriptor?? [ 720.113268][ T5688] hub 2-1:0.0: bad descriptor, ignoring hub [ 720.113311][ T5688] hub 2-1:0.0: probe with driver hub failed with error -5 [ 720.120911][ T5688] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 720.181025][ T5620] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 720.341403][ T5620] usb 3-1: Using ep0 maxpacket: 32 [ 720.350383][ T5620] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 720.350426][ T5620] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 720.350456][ T5620] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 720.350474][ T5620] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.386401][ T5620] usb 3-1: config 0 descriptor?? [ 720.753072][T14768] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 720.798255][ T5620] ft260 0003:0403:6030.0012: unknown main item tag 0x0 [ 720.798296][ T5620] ft260 0003:0403:6030.0012: unknown main item tag 0x0 [ 720.983854][ T5620] ft260 0003:0403:6030.0012: chip code: 0000 0000 [ 721.174867][ T5620] ft260 0003:0403:6030.0012: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 721.322311][ T32] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 721.368808][ T5620] ft260 0003:0403:6030.0012: failed to retrieve status: -32, no wakeup [ 721.484149][ T32] usb 4-1: Using ep0 maxpacket: 8 [ 721.487018][ T32] usb 4-1: config 127 has an invalid interface number: 216 but max is 0 [ 721.487064][ T32] usb 4-1: config 127 has no interface number 0 [ 721.487089][ T32] usb 4-1: config 127 interface 216 has no altsetting 0 [ 721.489936][ T32] usb 4-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice= b.8d [ 721.490175][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.490193][ T32] usb 4-1: Product: syz [ 721.490204][ T32] usb 4-1: Manufacturer: syz [ 721.490216][ T32] usb 4-1: SerialNumber: syz [ 721.567773][T14754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 721.569156][T14754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 722.164131][ T32] s2255 4-1:127.216: Could not find bulk-in endpoint [ 722.164270][ T32] Sensoray 2255 driver load failed: 0xfffffff4 [ 722.164307][ T32] s2255 4-1:127.216: probe with driver s2255 failed with error -12 [ 722.206866][ T32] usb 4-1: USB disconnect, device number 77 [ 722.232833][T14811] FAULT_INJECTION: forcing a failure. [ 722.232833][T14811] name failslab, interval 1, probability 0, space 0, times 0 [ 722.232877][T14811] CPU: 0 UID: 0 PID: 14811 Comm: syz.4.3217 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 722.232909][T14811] Tainted: [L]=SOFTLOCKUP [ 722.232918][T14811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 722.232933][T14811] Call Trace: [ 722.232943][T14811] [ 722.232954][T14811] dump_stack_lvl+0xe8/0x150 [ 722.232990][T14811] should_fail_ex+0x46b/0x600 [ 722.233032][T14811] should_failslab+0xa8/0x100 [ 722.233066][T14811] __kmalloc_noprof+0xdf/0x7b0 [ 722.233094][T14811] ? key_payload_reserve+0x2ad/0x3b0 [ 722.233119][T14811] ? encrypted_key_alloc+0x35a/0x520 [ 722.233157][T14811] encrypted_key_alloc+0x35a/0x520 [ 722.233204][T14811] ? __pfx_encrypted_key_alloc+0x10/0x10 [ 722.233238][T14811] ? __kmalloc_noprof+0x408/0x7b0 [ 722.233267][T14811] ? encrypted_update+0x18c/0x560 [ 722.233304][T14811] encrypted_update+0x37e/0x560 [ 722.233345][T14811] __key_update+0x17e/0x390 [ 722.233376][T14811] ? __pfx___key_update+0x10/0x10 [ 722.233401][T14811] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 722.233441][T14811] ? __key_link_end+0xe1/0x130 [ 722.233471][T14811] __key_create_or_update+0x798/0xa80 [ 722.233507][T14811] ? __pfx___key_create_or_update+0x10/0x10 [ 722.233553][T14811] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 722.233601][T14811] key_create_or_update+0x42/0x60 [ 722.233631][T14811] __se_sys_add_key+0x349/0x420 [ 722.233667][T14811] ? __pfx___se_sys_add_key+0x10/0x10 [ 722.233708][T14811] ? __x64_sys_add_key+0x20/0xc0 [ 722.233738][T14811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.233764][T14811] do_syscall_64+0x174/0x580 [ 722.233800][T14811] ? trace_irq_disable+0x3b/0x140 [ 722.233827][T14811] ? clear_bhb_loop+0x40/0x90 [ 722.233856][T14811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.233880][T14811] RIP: 0033:0x7f4cd2acce59 [ 722.233903][T14811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 722.233924][T14811] RSP: 002b:00007f4cd0d1e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 722.233950][T14811] RAX: ffffffffffffffda RBX: 00007f4cd2d45fa0 RCX: 00007f4cd2acce59 [ 722.233973][T14811] RDX: 0000200000000100 RSI: 0000200000000180 RDI: 0000200000000140 [ 722.233990][T14811] RBP: 00007f4cd0d1e090 R08: fffffffffffffffe R09: 0000000000000000 [ 722.234012][T14811] R10: 00000000000000ca R11: 0000000000000246 R12: 0000000000000001 [ 722.234027][T14811] R13: 00007f4cd2d46038 R14: 00007f4cd2d45fa0 R15: 00007ffc815a72f8 [ 722.234069][T14811] [ 722.718688][ T5620] usb 3-1: USB disconnect, device number 68 [ 723.054431][T14824] netlink: 'syz.3.3222': attribute type 22 has an invalid length. [ 723.054459][T14824] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3222'. [ 723.224655][T14828] FAULT_INJECTION: forcing a failure. [ 723.224655][T14828] name failslab, interval 1, probability 0, space 0, times 0 [ 723.224690][T14828] CPU: 1 UID: 0 PID: 14828 Comm: syz.4.3224 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 723.224715][T14828] Tainted: [L]=SOFTLOCKUP [ 723.224722][T14828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 723.224733][T14828] Call Trace: [ 723.224739][T14828] [ 723.224747][T14828] dump_stack_lvl+0xe8/0x150 [ 723.224773][T14828] should_fail_ex+0x46b/0x600 [ 723.224803][T14828] should_failslab+0xa8/0x100 [ 723.224827][T14828] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 723.224848][T14828] ? __alloc_skb+0x1d0/0x7d0 [ 723.224871][T14828] ? lockdep_hardirqs_on+0x7a/0x110 [ 723.224901][T14828] __alloc_skb+0x1d0/0x7d0 [ 723.224929][T14828] fdb_notify+0xa6/0x160 [ 723.224952][T14828] fdb_delete+0xd51/0xf90 [ 723.224974][T14828] ? fdb_delete+0x2aa/0xf90 [ 723.224999][T14828] br_fdb_changeaddr+0x27b/0x4c0 [ 723.225018][T14828] ? br_fdb_changeaddr+0x91/0x4c0 [ 723.225042][T14828] ? br_device_event+0x67a/0x9f0 [ 723.225058][T14828] br_device_event+0x6b8/0x9f0 [ 723.225077][T14828] ? __pfx_br_device_event+0x10/0x10 [ 723.225097][T14828] ? lockdep_rtnl_is_held+0x26/0x40 [ 723.225135][T14828] notifier_call_chain+0x1ad/0x3d0 [ 723.225162][T14828] call_netdevice_notifiers+0x90/0xd0 [ 723.225189][T14828] ? __pfx_call_netdevice_notifiers+0x10/0x10 [ 723.225236][T14828] ? lockdep_hardirqs_on+0x7a/0x110 [ 723.225272][T14828] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 723.225308][T14828] ? mutex_lock_nested+0x152/0x1d0 [ 723.225335][T14828] ? dev_ifsioc+0x656/0x1330 [ 723.225373][T14828] dev_ifsioc+0x663/0x1330 [ 723.225394][T14828] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 723.225419][T14828] ? mutex_lock_nested+0x152/0x1d0 [ 723.225438][T14828] ? dev_ioctl+0x7a4/0x1150 [ 723.225463][T14828] dev_ioctl+0x7b4/0x1150 [ 723.225489][T14828] sock_do_ioctl+0x23e/0x320 [ 723.225511][T14828] ? __pfx_sock_do_ioctl+0x10/0x10 [ 723.225545][T14828] sock_ioctl+0x5c9/0x7f0 [ 723.225566][T14828] ? __pfx_sock_ioctl+0x10/0x10 [ 723.225584][T14828] ? __fget_files+0x2a/0x420 [ 723.225604][T14828] ? __fget_files+0x3a6/0x420 [ 723.225626][T14828] ? __fget_files+0x2a/0x420 [ 723.225654][T14828] ? bpf_lsm_file_ioctl+0x9/0x20 [ 723.225680][T14828] ? __pfx_sock_ioctl+0x10/0x10 [ 723.225699][T14828] __se_sys_ioctl+0xff/0x170 [ 723.225723][T14828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.225742][T14828] do_syscall_64+0x174/0x580 [ 723.225767][T14828] ? trace_irq_disable+0x3b/0x140 [ 723.225789][T14828] ? clear_bhb_loop+0x40/0x90 [ 723.225811][T14828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.225828][T14828] RIP: 0033:0x7f4cd2acce59 [ 723.225845][T14828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 723.225860][T14828] RSP: 002b:00007f4cd0d1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 723.225877][T14828] RAX: ffffffffffffffda RBX: 00007f4cd2d45fa0 RCX: 00007f4cd2acce59 [ 723.225890][T14828] RDX: 0000200000000000 RSI: 0000000000008937 RDI: 0000000000000004 [ 723.225901][T14828] RBP: 00007f4cd0d1e090 R08: 0000000000000000 R09: 0000000000000000 [ 723.225912][T14828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 723.225922][T14828] R13: 00007f4cd2d46038 R14: 00007f4cd2d45fa0 R15: 00007ffc815a72f8 [ 723.225950][T14828] [ 723.645604][ T5715] usb 2-1: reset high-speed USB device number 59 using dummy_hcd [ 723.665674][ T5715] usb 2-1: device reset changed ep0 maxpacket size! [ 723.709235][ T5715] usb 2-1: USB disconnect, device number 59 [ 724.000734][ T5715] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 724.154548][ T5715] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 724.154583][ T5715] usb 2-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 724.154608][ T5715] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 724.154663][ T5715] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 724.156517][ T5715] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 724.156557][ T5715] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 724.156582][ T5715] usb 2-1: Product: syz [ 724.156599][ T5715] usb 2-1: Manufacturer: syz [ 724.238129][T14854] FAULT_INJECTION: forcing a failure. [ 724.238129][T14854] name failslab, interval 1, probability 0, space 0, times 0 [ 724.238170][T14854] CPU: 1 UID: 0 PID: 14854 Comm: syz.4.3235 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 724.238202][T14854] Tainted: [L]=SOFTLOCKUP [ 724.238212][T14854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 724.238227][T14854] Call Trace: [ 724.238236][T14854] [ 724.238246][T14854] dump_stack_lvl+0xe8/0x150 [ 724.238282][T14854] should_fail_ex+0x46b/0x600 [ 724.238324][T14854] should_failslab+0xa8/0x100 [ 724.238357][T14854] __kmalloc_noprof+0xdf/0x7b0 [ 724.238386][T14854] ? kfree+0x4d/0x6c0 [ 724.238410][T14854] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 724.238447][T14854] tomoyo_realpath_from_path+0xe3/0x5d0 [ 724.238489][T14854] tomoyo_check_open_permission+0x229/0x470 [ 724.238528][T14854] ? tomoyo_check_open_permission+0x1d3/0x470 [ 724.238575][T14854] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 724.238617][T14854] ? __asan_memset+0x22/0x50 [ 724.238669][T14854] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 724.238704][T14854] ? tomoyo_file_open+0x166/0x220 [ 724.238741][T14854] security_file_open+0xa9/0x240 [ 724.238777][T14854] do_dentry_open+0x4c0/0x13e0 [ 724.238808][T14854] ? vfs_open+0x31/0x350 [ 724.238840][T14854] vfs_open+0x3b/0x350 [ 724.238863][T14854] ? path_openat+0x2ed3/0x3960 [ 724.238901][T14854] path_openat+0x2eea/0x3960 [ 724.238969][T14854] ? __pfx_path_openat+0x10/0x10 [ 724.239008][T14854] ? kasan_save_track+0x4f/0x80 [ 724.239033][T14854] ? kasan_save_track+0x3e/0x80 [ 724.239057][T14854] ? __kasan_slab_alloc+0x6c/0x80 [ 724.239095][T14854] ? do_raw_spin_lock+0x12b/0x2f0 [ 724.239131][T14854] do_file_open+0x23e/0x4a0 [ 724.239162][T14854] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 724.239203][T14854] ? __pfx_do_file_open+0x10/0x10 [ 724.239235][T14854] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 724.239289][T14854] ? alloc_fd+0x679/0x6f0 [ 724.239329][T14854] do_sys_openat2+0x115/0x200 [ 724.239359][T14854] ? __pfx_do_sys_openat2+0x10/0x10 [ 724.239389][T14854] ? ksys_write+0x248/0x270 [ 724.239424][T14854] ? __pfx_ksys_write+0x10/0x10 [ 724.239461][T14854] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.239488][T14854] __x64_sys_creat+0x8f/0xc0 [ 724.239520][T14854] do_syscall_64+0x174/0x580 [ 724.239563][T14854] ? trace_irq_disable+0x3b/0x140 [ 724.239592][T14854] ? clear_bhb_loop+0x40/0x90 [ 724.239621][T14854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.239646][T14854] RIP: 0033:0x7f4cd2acce59 [ 724.239669][T14854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 724.239691][T14854] RSP: 002b:00007f4cd0d1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 724.239716][T14854] RAX: ffffffffffffffda RBX: 00007f4cd2d45fa0 RCX: 00007f4cd2acce59 [ 724.239735][T14854] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 724.239751][T14854] RBP: 00007f4cd0d1e090 R08: 0000000000000000 R09: 0000000000000000 [ 724.239766][T14854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 724.239782][T14854] R13: 00007f4cd2d46038 R14: 00007f4cd2d45fa0 R15: 00007ffc815a72f8 [ 724.239818][T14854] [ 724.240697][T14854] ERROR: Out of memory at tomoyo_realpath_from_path. [ 724.265501][ T5620] usb 4-1: new low-speed USB device number 78 using dummy_hcd [ 724.398250][ T5715] cdc_wdm 2-1:1.0: skipping garbage [ 724.398273][ T5715] cdc_wdm 2-1:1.0: skipping garbage [ 724.436162][ T5715] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 724.436462][ T5620] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 724.439972][ T5620] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 724.440073][ T5620] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 724.440152][ T5620] usb 4-1: config 0 interface 0 has no altsetting 0 [ 724.443321][ T5620] usb 4-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 724.443403][ T5620] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.673573][T14818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 724.689227][T14818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 724.743058][ T5620] usb 4-1: config 0 descriptor?? [ 724.749982][T14848] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 724.994884][ T5620] usbhid 4-1:0.0: can't add hid device: -71 [ 724.995019][ T5620] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 725.004557][ T5620] usb 4-1: USB disconnect, device number 78 [ 725.033920][T14859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.034351][T14859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.189215][ T5715] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 725.313080][ T5715] usb 3-1: device descriptor read/64, error -71 [ 725.382635][T14872] tipc: Failed to remove unknown binding: 66,0,0/0:4247071847/4247071848 [ 725.383699][T14872] tipc: Failed to remove unknown binding: 66,0,0/0:4247071847/4247071848 [ 725.383862][T14872] FAULT_INJECTION: forcing a failure. [ 725.383862][T14872] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 725.383888][T14872] CPU: 0 UID: 0 PID: 14872 Comm: syz.4.3243 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 725.383910][T14872] Tainted: [L]=SOFTLOCKUP [ 725.383917][T14872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 725.383928][T14872] Call Trace: [ 725.383934][T14872] [ 725.383941][T14872] dump_stack_lvl+0xe8/0x150 [ 725.383967][T14872] should_fail_ex+0x46b/0x600 [ 725.383997][T14872] _copy_to_user+0x31/0xb0 [ 725.384020][T14872] simple_read_from_buffer+0xe1/0x170 [ 725.384045][T14872] proc_fail_nth_read+0x1be/0x230 [ 725.384068][T14872] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 725.384090][T14872] ? rw_verify_area+0x2ac/0x4e0 [ 725.384112][T14872] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 725.384133][T14872] vfs_read+0x212/0xa80 [ 725.384162][T14872] ? __pfx_vfs_read+0x10/0x10 [ 725.384209][T14872] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 725.384246][T14872] ? lockdep_hardirqs_on+0x7a/0x110 [ 725.384283][T14872] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 725.384318][T14872] ? mutex_lock_nested+0x152/0x1d0 [ 725.384342][T14872] ? fdget_pos+0x252/0x320 [ 725.384381][T14872] ksys_read+0x156/0x270 [ 725.384406][T14872] ? __pfx_ksys_read+0x10/0x10 [ 725.384435][T14872] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.384453][T14872] do_syscall_64+0x174/0x580 [ 725.384478][T14872] ? trace_irq_disable+0x3b/0x140 [ 725.384497][T14872] ? clear_bhb_loop+0x40/0x90 [ 725.384523][T14872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.384540][T14872] RIP: 0033:0x7f4cd2a8d68e [ 725.384556][T14872] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 725.384571][T14872] RSP: 002b:00007f4cd0d1dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 725.384589][T14872] RAX: ffffffffffffffda RBX: 00007f4cd0d1e6c0 RCX: 00007f4cd2a8d68e [ 725.384601][T14872] RDX: 000000000000000f RSI: 00007f4cd0d1e0a0 RDI: 0000000000000006 [ 725.384612][T14872] RBP: 00007f4cd0d1e090 R08: 0000000000000000 R09: 0000000000000000 [ 725.384623][T14872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 725.384637][T14872] R13: 00007f4cd2d46038 R14: 00007f4cd2d45fa0 R15: 00007ffc815a72f8 [ 725.384662][T14872] [ 725.551741][ T5715] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 725.713080][ T5715] usb 3-1: device descriptor read/64, error -71 [ 725.818245][ T5715] usb usb3-port1: attempt power cycle [ 726.069428][T11696] usb 2-1: USB disconnect, device number 60 [ 726.147434][ T5715] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 726.161784][ T5715] usb 3-1: device descriptor read/8, error -71 [ 726.197195][T14896] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3254'. [ 726.197197][T14895] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3254'. [ 726.392593][ T5715] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 726.430463][ T5715] usb 3-1: device descriptor read/8, error -71 [ 726.532451][ T5715] usb usb3-port1: unable to enumerate USB device [ 726.784228][T14913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 726.786674][T14913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 727.170349][ T5715] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 727.317664][ T5715] usb 2-1: Using ep0 maxpacket: 32 [ 727.324338][ T5715] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 727.324438][ T5715] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.353052][ T5715] usb 2-1: config 0 descriptor?? [ 727.558966][ T5715] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 727.634609][ T5715] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 727.656536][ T5715] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 727.656599][ T5715] usb 2-1: media controller created [ 727.729981][ T5715] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 727.750321][T14920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3263'. [ 728.122486][T11696] usb 4-1: new low-speed USB device number 79 using dummy_hcd [ 728.122935][ T5688] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 728.266179][ T5688] usb 5-1: Using ep0 maxpacket: 32 [ 728.271612][T11696] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 728.271647][T11696] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 728.271950][T11696] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 728.271979][T11696] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 728.272009][T11696] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 48503, setting to 8 [ 728.272029][T11696] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 728.272443][ T5688] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 728.272471][ T5688] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.272493][ T5688] usb 5-1: Product: syz [ 728.272514][ T5688] usb 5-1: Manufacturer: syz [ 728.272525][ T5688] usb 5-1: SerialNumber: syz [ 728.396247][T11696] usb 4-1: string descriptor 0 read error: -22 [ 728.396378][T11696] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 728.396397][T11696] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.460668][T11696] usb 4-1: config 0 descriptor?? [ 728.466644][T11696] hub 4-1:0.0: bad descriptor, ignoring hub [ 728.466763][T11696] hub 4-1:0.0: probe with driver hub failed with error -5 [ 728.527295][ T5688] usb 5-1: config 0 descriptor?? [ 728.541556][ T10] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 728.545065][ T5688] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 728.685721][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 728.691919][ T10] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 728.691953][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.692209][ T10] usb 3-1: Product: syz [ 728.692227][ T10] usb 3-1: Manufacturer: syz [ 728.692245][ T10] usb 3-1: SerialNumber: syz [ 728.692612][ T5715] az6027: usb out operation failed. (-71) [ 728.693201][ T5715] stb0899_attach: Driver disabled by Kconfig [ 728.693285][ T5715] az6027: no front-end attached [ 728.693285][ T5715] [ 728.771184][T11696] usb 4-1: USB disconnect, device number 79 [ 728.812940][T14948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 728.827419][T14948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.830110][ T10] r8152-cfgselector 3-1: Unknown version 0x0000 [ 728.830137][ T10] r8152-cfgselector 3-1: config 0 descriptor?? [ 728.916151][ T5715] az6027: usb out operation failed. (-71) [ 728.916175][ T5715] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 728.999431][ T5715] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input63 [ 729.029124][ T5688] gspca_ov534_9: reg_w failed -110 [ 729.074072][ T5715] dvb-usb: schedule remote query interval to 400 msecs. [ 729.074099][ T5715] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 729.112275][ T5715] usb 2-1: USB disconnect, device number 61 [ 729.238617][ T5715] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 729.408207][ T5688] gspca_ov534_9: Unknown sensor 0000 [ 729.408310][ T5688] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 729.415032][ T5620] r8152-cfgselector 3-1: USB disconnect, device number 73 [ 729.439858][ T5688] usb 5-1: USB disconnect, device number 12 [ 729.824546][T14970] lo speed is unknown, defaulting to 1000 [ 730.494059][ T5620] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 730.647070][ T5620] usb 2-1: Using ep0 maxpacket: 8 [ 730.669793][ T5620] usb 2-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 730.669827][ T5620] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 730.669850][ T5620] usb 2-1: Product: syz [ 730.669865][ T5620] usb 2-1: Manufacturer: syz [ 730.669881][ T5620] usb 2-1: SerialNumber: syz [ 730.716961][ T5620] usb 2-1: config 0 descriptor?? [ 730.745616][ T5620] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 730.789832][ T5762] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 730.924187][T14989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 730.935186][T14989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.937956][ T5620] gspca_sn9c2028: read1 error -71 [ 730.938421][ T5620] gspca_sn9c2028: read1 error -71 [ 730.938869][ T5620] gspca_sn9c2028: read1 error -71 [ 730.939515][ T5620] sn9c2028 2-1:0.0: probe with driver sn9c2028 failed with error -71 [ 730.986580][ T5762] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 730.986615][ T5762] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.986637][ T5762] usb 5-1: Product: syz [ 730.986654][ T5762] usb 5-1: Manufacturer: syz [ 730.986671][ T5762] usb 5-1: SerialNumber: syz [ 731.026183][ T5620] usb 2-1: USB disconnect, device number 62 [ 731.242634][T14999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 731.244168][T14999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 731.267078][T14999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 731.267770][T14999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 731.282529][T14999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 731.388865][T14999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 731.490408][T14999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 731.491081][T14999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 731.515210][T14999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 731.534189][T14999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 731.616047][T15002] sg_write: data in/out 282624/136 bytes for SCSI command 0x0-- guessing data in; [ 731.616047][T15002] program syz.1.3294 not setting count and/or reply_len properly [ 731.777582][ T5762] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 731.777652][ T5762] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 732.034376][ T5762] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 732.034436][ T5762] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 732.136940][ T5762] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 732.211093][ T5762] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 732.237119][ T5762] usb 5-1: USB disconnect, device number 13 [ 732.505104][ T5688] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 732.663818][ T5688] usb 2-1: config 0 has an invalid descriptor of length 194, skipping remainder of the config [ 732.663887][ T5688] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 732.703582][ T5688] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 732.703623][ T5688] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.703640][ T5688] usb 2-1: Product: syz [ 732.703651][ T5688] usb 2-1: Manufacturer: syz [ 732.703663][ T5688] usb 2-1: SerialNumber: syz [ 732.753436][ T5688] usb 2-1: config 0 descriptor?? [ 733.037906][ T5688] usb 2-1: USB disconnect, device number 63 [ 733.364674][T15031] FAULT_INJECTION: forcing a failure. [ 733.364674][T15031] name failslab, interval 1, probability 0, space 0, times 0 [ 733.364717][T15031] CPU: 1 UID: 0 PID: 15031 Comm: syz.4.3305 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 733.364750][T15031] Tainted: [L]=SOFTLOCKUP [ 733.364759][T15031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 733.364775][T15031] Call Trace: [ 733.364784][T15031] [ 733.364794][T15031] dump_stack_lvl+0xe8/0x150 [ 733.364826][T15031] should_fail_ex+0x46b/0x600 [ 733.364867][T15031] should_failslab+0xa8/0x100 [ 733.364899][T15031] kmem_cache_alloc_noprof+0x87/0x680 [ 733.364928][T15031] ? skb_clone+0x212/0x3a0 [ 733.364956][T15031] skb_clone+0x212/0x3a0 [ 733.364982][T15031] __netlink_deliver_tap+0x424/0x8b0 [ 733.365030][T15031] ? netlink_deliver_tap+0x2e/0x1b0 [ 733.365074][T15031] netlink_deliver_tap+0x19c/0x1b0 [ 733.365110][T15031] netlink_sendskb+0x68/0x140 [ 733.365145][T15031] netlink_rcv_skb+0x2b6/0x4b0 [ 733.365191][T15031] ? __pfx_genl_rcv_msg+0x10/0x10 [ 733.365221][T15031] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 733.365272][T15031] ? netlink_deliver_tap+0x2e/0x1b0 [ 733.365309][T15031] ? netlink_deliver_tap+0x2e/0x1b0 [ 733.365350][T15031] genl_rcv+0x28/0x40 [ 733.365376][T15031] netlink_unicast+0x780/0x920 [ 733.365422][T15031] netlink_sendmsg+0x813/0xb40 [ 733.365453][T15031] ? __pfx_netlink_sendmsg+0x10/0x10 [ 733.365479][T15031] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 733.365515][T15031] ? aa_sock_msg_perm+0x122/0x200 [ 733.365542][T15031] ? __pfx_netlink_sendmsg+0x10/0x10 [ 733.365564][T15031] sock_sendmsg_nosec+0x13a/0x180 [ 733.365595][T15031] ____sys_sendmsg+0x55c/0x870 [ 733.365639][T15031] ? __pfx_____sys_sendmsg+0x10/0x10 [ 733.365687][T15031] ? import_iovec+0x73/0xa0 [ 733.365718][T15031] ___sys_sendmsg+0x2a5/0x360 [ 733.365752][T15031] ? __lock_acquire+0x6b5/0x2d10 [ 733.365784][T15031] ? __pfx____sys_sendmsg+0x10/0x10 [ 733.365859][T15031] ? __fget_files+0x2a/0x420 [ 733.365886][T15031] ? __fget_files+0x3a6/0x420 [ 733.365926][T15031] __x64_sys_sendmsg+0x1c3/0x2a0 [ 733.365963][T15031] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 733.366010][T15031] ? __pfx_ksys_write+0x10/0x10 [ 733.366054][T15031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.366081][T15031] do_syscall_64+0x174/0x580 [ 733.366115][T15031] ? trace_irq_disable+0x3b/0x140 [ 733.366142][T15031] ? clear_bhb_loop+0x40/0x90 [ 733.366181][T15031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.366205][T15031] RIP: 0033:0x7f4cd2acce59 [ 733.366228][T15031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 733.366249][T15031] RSP: 002b:00007f4cd0d1e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 733.366275][T15031] RAX: ffffffffffffffda RBX: 00007f4cd2d45fa0 RCX: 00007f4cd2acce59 [ 733.366292][T15031] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 733.366308][T15031] RBP: 00007f4cd0d1e090 R08: 0000000000000000 R09: 0000000000000000 [ 733.366324][T15031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 733.366339][T15031] R13: 00007f4cd2d46038 R14: 00007f4cd2d45fa0 R15: 00007ffc815a72f8 [ 733.366377][T15031] [ 734.294308][ T5688] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 734.417816][ T5688] usb 3-1: device descriptor read/64, error -71 [ 734.590002][ T5762] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 734.637001][ T10] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 734.646990][ T5688] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 734.752265][ T5762] usb 2-1: Using ep0 maxpacket: 16 [ 734.755163][ T5762] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 734.755200][ T5762] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 734.755235][ T5762] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 734.755281][ T5762] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 734.755308][ T5762] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.760718][ T10] usb 4-1: device descriptor read/64, error -71 [ 734.774970][ T5688] usb 3-1: device descriptor read/64, error -71 [ 734.830680][ T5762] usb 2-1: config 0 descriptor?? [ 734.875818][ T5688] usb usb3-port1: attempt power cycle [ 734.989409][ T10] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 735.114371][ T10] usb 4-1: device descriptor read/64, error -71 [ 735.200785][ T5688] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 735.218580][ T10] usb usb4-port1: attempt power cycle [ 735.223425][ T5688] usb 3-1: device descriptor read/8, error -71 [ 735.252900][ T5762] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 735.253071][ T5762] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 735.253103][ T5762] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 735.253132][ T5762] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 735.253162][ T5762] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 735.253192][ T5762] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 735.253221][ T5762] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 735.253250][ T5762] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 735.253278][ T5762] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 735.253307][ T5762] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 735.340904][ T5762] microsoft 0003:045E:07DA.0013: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 735.340943][ T5762] microsoft 0003:045E:07DA.0013: no inputs found [ 735.340959][ T5762] microsoft 0003:045E:07DA.0013: could not initialize ff, continuing anyway [ 735.436106][ T5715] usb 2-1: USB disconnect, device number 64 [ 735.446577][ T5688] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 735.466398][ T5688] usb 3-1: device descriptor read/8, error -71 [ 735.490936][T15096] fido_id[15096]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 735.492407][T15098] kvm: kvm [15097]: vcpu2048, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0x8000000000003cf2 [ 735.573161][ T5688] usb usb3-port1: unable to enumerate USB device [ 735.627789][ T10] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 735.650427][ T10] usb 4-1: device descriptor read/8, error -71 [ 735.814021][T15107] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3340'. [ 735.815059][T15107] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3340'. [ 735.815795][T15107] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3340'. [ 735.816279][T15107] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3340'. [ 735.816781][T15107] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3340'. [ 735.817230][T15107] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3340'. [ 735.875133][ T10] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 735.895247][ T10] usb 4-1: device descriptor read/8, error -71 [ 736.023375][ T10] usb usb4-port1: unable to enumerate USB device [ 737.332260][T11696] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 737.370692][ T5762] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 737.465775][ T5620] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 737.483723][T11696] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 737.483754][T11696] usb 2-1: config 0 has no interface number 0 [ 737.504574][T11696] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 737.504598][T11696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.504620][T11696] usb 2-1: Product: syz [ 737.504631][T11696] usb 2-1: Manufacturer: syz [ 737.504643][T11696] usb 2-1: SerialNumber: syz [ 737.538742][T11696] usb 2-1: config 0 descriptor?? [ 737.546793][ T5762] usb 3-1: Using ep0 maxpacket: 32 [ 737.549948][ T5762] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 737.550027][ T5762] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 737.550057][ T5762] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 737.550088][ T5762] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 737.589862][T11696] usb 2-1: selecting invalid altsetting 1 [ 737.609109][ T5762] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 737.609142][ T5762] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.609163][ T5762] usb 3-1: Product: syz [ 737.609179][ T5762] usb 3-1: Manufacturer: syz [ 737.609195][ T5762] usb 3-1: SerialNumber: syz [ 737.616143][T11696] dvb_ttusb_budget: ttusb_init_controller: error [ 737.616168][T11696] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 737.627020][ T5620] usb 5-1: Using ep0 maxpacket: 32 [ 737.674680][ T5620] usb 5-1: unable to get BOS descriptor or descriptor too short [ 737.703950][ T5620] usb 5-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 737.703984][ T5620] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.704013][ T5620] usb 5-1: Product: syz [ 737.704047][ T5620] usb 5-1: SerialNumber: syz [ 737.785247][ C1] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 737.850870][T11696] DVB: Unable to find symbol stv0299_attach() [ 737.905040][T11696] DVB: Unable to find symbol tda8083_attach() [ 737.905055][T11696] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 737.952647][ T5620] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 737.955791][ T5620] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 737.958402][ T5762] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input65 [ 737.974671][T11696] usb 2-1: USB disconnect, device number 65 [ 738.102814][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 738.102925][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 738.209438][ T5620] usb 5-1: USB disconnect, device number 14 [ 738.299398][T13398] udevd[13398]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 738.319990][ T5762] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 738.320012][ T5762] (id 0x00) [ 738.409116][ T5762] rc_core: IR keymap rc-imon-pad not found [ 738.409140][ T5762] Registered IR keymap rc-empty [ 738.515465][ T5762] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 738.515490][ T5762] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 738.588157][ T5762] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 738.604820][ T5762] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input66 [ 738.647138][ T5762] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:78> initialized [ 738.989423][ T5762] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 739.110329][T15183] FAULT_INJECTION: forcing a failure. [ 739.110329][T15183] name failslab, interval 1, probability 0, space 0, times 0 [ 739.110370][T15183] CPU: 0 UID: 0 PID: 15183 Comm: syz.2.3368 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 739.110403][T15183] Tainted: [L]=SOFTLOCKUP [ 739.110411][T15183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 739.110426][T15183] Call Trace: [ 739.110436][T15183] [ 739.110446][T15183] dump_stack_lvl+0xe8/0x150 [ 739.110478][T15183] should_fail_ex+0x46b/0x600 [ 739.110519][T15183] should_failslab+0xa8/0x100 [ 739.110552][T15183] __kmalloc_cache_noprof+0x84/0x690 [ 739.110582][T15183] ? dummy_urb_enqueue+0x7e/0x760 [ 739.110617][T15183] dummy_urb_enqueue+0x7e/0x760 [ 739.110656][T15183] usb_hcd_submit_urb+0x31a/0x1b10 [ 739.110716][T15183] send_packet+0x66a/0xc30 [ 739.110747][T15183] vfd_write+0x237/0x620 [ 739.110772][T15183] ? __pfx_vfd_write+0x10/0x10 [ 739.110799][T15183] vfs_write+0x2a3/0xba0 [ 739.110841][T15183] ? __pfx_vfs_write+0x10/0x10 [ 739.110876][T15183] ? __fget_files+0x2a/0x420 [ 739.110907][T15183] ? __fget_files+0x2a/0x420 [ 739.110934][T15183] ? __fget_files+0x3a6/0x420 [ 739.110960][T15183] ? __fget_files+0x2a/0x420 [ 739.110999][T15183] ksys_write+0x156/0x270 [ 739.111034][T15183] ? __pfx_ksys_write+0x10/0x10 [ 739.111077][T15183] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.111103][T15183] do_syscall_64+0x174/0x580 [ 739.111137][T15183] ? trace_irq_disable+0x3b/0x140 [ 739.111164][T15183] ? clear_bhb_loop+0x40/0x90 [ 739.111193][T15183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.111217][T15183] RIP: 0033:0x7f1b8051ce59 [ 739.111239][T15183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 739.111260][T15183] RSP: 002b:00007f1b7e755028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 739.111285][T15183] RAX: ffffffffffffffda RBX: 00007f1b80796090 RCX: 00007f1b8051ce59 [ 739.111302][T15183] RDX: 0000000000000020 RSI: 0000200000006800 RDI: 0000000000000003 [ 739.111317][T15183] RBP: 00007f1b7e755090 R08: 0000000000000000 R09: 0000000000000000 [ 739.111332][T15183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 739.111345][T15183] R13: 00007f1b80796128 R14: 00007f1b80796090 R15: 00007fffa9654678 [ 739.111381][T15183] [ 739.165678][ T5762] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 739.165797][ T5762] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 739.165847][ T5762] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.218157][T15183] imon:send_packet: error submitting urb(-12) [ 739.253847][T15183] imon:vfd_write: send packet #0 failed [ 739.261748][ T5762] usb 2-1: config 0 descriptor?? [ 739.458481][ T5762] pwc: Askey VC010 type 2 USB webcam detected. [ 739.525972][ T5762] pwc: send_video_command error -71 [ 739.525995][ T5762] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 739.526117][ T5762] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 739.563320][ T5762] usb 2-1: USB disconnect, device number 66 [ 739.989511][ T10] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 740.084973][ T5762] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 740.132517][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 740.134519][ T10] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 740.134547][ T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 740.134597][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 740.134626][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.140533][ T10] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 740.140561][ T10] usb 4-1: no configuration chosen from 1 choice [ 740.218050][ T5762] usb 2-1: device descriptor read/64, error -71 [ 740.219760][ T10] usb 3-1: USB disconnect, device number 78 [ 740.465740][ T5762] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 740.599156][ T5762] usb 2-1: device descriptor read/64, error -71 [ 740.705354][ T5762] usb usb2-port1: attempt power cycle [ 740.999155][T12330] usb 3-1: new low-speed USB device number 79 using dummy_hcd [ 741.037634][ T5762] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 741.056957][ T5762] usb 2-1: device descriptor read/8, error -71 [ 741.154465][T12330] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 741.154522][T12330] usb 3-1: config 0 has no interface number 0 [ 741.154556][T12330] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 741.154578][T12330] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 741.154610][T12330] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 741.154628][T12330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.158762][T12330] usb 3-1: config 0 descriptor?? [ 741.159713][T15244] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 741.189051][ T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 741.246815][T12330] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 741.295137][ T5762] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 741.323903][ T5762] usb 2-1: device descriptor read/8, error -71 [ 741.370697][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 741.408868][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 741.410728][ T10] usb 5-1: config 5 has an invalid interface number: 4 but max is 1 [ 741.410757][ T10] usb 5-1: config 5 has an invalid interface number: 4 but max is 1 [ 741.410780][ T10] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 741.410804][ T10] usb 5-1: config 5 has no interface number 0 [ 741.410840][ T10] usb 5-1: config 5 interface 4 has no altsetting 1 [ 741.414455][ T10] usb 5-1: New USB device found, idVendor=134c, idProduct=1c16, bcdDevice=f0.53 [ 741.414486][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.414509][ T10] usb 5-1: Product: syz [ 741.414526][ T10] usb 5-1: Manufacturer: syz [ 741.414544][ T10] usb 5-1: SerialNumber: syz [ 741.481912][ T5762] usb usb2-port1: unable to enumerate USB device [ 741.585050][ C1] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 741.592558][ T5762] usb 3-1: USB disconnect, device number 79 [ 741.703914][T15257] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3402'. [ 741.782457][T15260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 741.783097][T15260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 741.885144][ T10] usb 5-1: USB disconnect, device number 15 [ 742.037377][ T5620] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 742.089495][T15270] FAULT_INJECTION: forcing a failure. [ 742.089495][T15270] name failslab, interval 1, probability 0, space 0, times 0 [ 742.089527][T15270] CPU: 1 UID: 0 PID: 15270 Comm: syz.4.3406 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 742.089550][T15270] Tainted: [L]=SOFTLOCKUP [ 742.089557][T15270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 742.089568][T15270] Call Trace: [ 742.089575][T15270] [ 742.089582][T15270] dump_stack_lvl+0xe8/0x150 [ 742.089607][T15270] should_fail_ex+0x46b/0x600 [ 742.089636][T15270] should_failslab+0xa8/0x100 [ 742.089659][T15270] __kmalloc_noprof+0xdf/0x7b0 [ 742.089679][T15270] ? kfree+0x4d/0x6c0 [ 742.089695][T15270] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 742.089720][T15270] tomoyo_realpath_from_path+0xe3/0x5d0 [ 742.089741][T15270] ? tomoyo_domain+0xd7/0x130 [ 742.089765][T15270] ? tomoyo_path_number_perm+0x219/0x630 [ 742.089792][T15270] tomoyo_path_number_perm+0x246/0x630 [ 742.089821][T15270] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 742.089852][T15270] ? __lock_acquire+0x6b5/0x2d10 [ 742.089874][T15270] ? do_raw_spin_lock+0x12b/0x2f0 [ 742.089913][T15270] ? __fget_files+0x2a/0x420 [ 742.089935][T15270] ? __fget_files+0x2a/0x420 [ 742.089953][T15270] ? __fget_files+0x3a6/0x420 [ 742.089971][T15270] ? __fget_files+0x2a/0x420 [ 742.089994][T15270] security_file_ioctl+0xc3/0x2a0 [ 742.090026][T15270] __se_sys_ioctl+0x47/0x170 [ 742.090050][T15270] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.090069][T15270] do_syscall_64+0x174/0x580 [ 742.090094][T15270] ? trace_irq_disable+0x3b/0x140 [ 742.090139][T15270] ? clear_bhb_loop+0x40/0x90 [ 742.090169][T15270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.090193][T15270] RIP: 0033:0x7f4cd2acce59 [ 742.090215][T15270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 742.090236][T15270] RSP: 002b:00007f4cd0d1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 742.090263][T15270] RAX: ffffffffffffffda RBX: 00007f4cd2d45fa0 RCX: 00007f4cd2acce59 [ 742.090275][T15270] RDX: 0000200000000080 RSI: 00000000c040565f RDI: 0000000000000003 [ 742.090287][T15270] RBP: 00007f4cd0d1e090 R08: 0000000000000000 R09: 0000000000000000 [ 742.090297][T15270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 742.090307][T15270] R13: 00007f4cd2d46038 R14: 00007f4cd2d45fa0 R15: 00007ffc815a72f8 [ 742.090336][T15270] [ 742.092857][T15270] ERROR: Out of memory at tomoyo_realpath_from_path. [ 742.217247][ T5620] usb 2-1: unable to get BOS descriptor or descriptor too short [ 742.292203][ T5620] usb 2-1: not running at top speed; connect to a high speed hub [ 742.325145][ T5620] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 4 [ 742.380682][ T5620] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 742.380720][ T5620] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.380739][ T5620] usb 2-1: Product: syz [ 742.380751][ T5620] usb 2-1: Manufacturer: syz [ 742.380764][ T5620] usb 2-1: SerialNumber: syz [ 742.480235][T15273] batadv_slave_1: entered promiscuous mode [ 742.572365][T15271] batadv_slave_1: left promiscuous mode [ 742.621865][T15257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 742.624134][T15257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 742.654842][T15257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 742.655472][T15257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 742.713964][ T5620] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 742.759482][ T5762] usb 4-1: USB disconnect, device number 84 [ 742.896511][ T5620] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 742.936134][ T5620] usb 2-1: USB disconnect, device number 71 [ 742.958035][T13398] udevd[13398]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 743.080560][T15286] FAULT_INJECTION: forcing a failure. [ 743.080560][T15286] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 743.080603][T15286] CPU: 1 UID: 0 PID: 15286 Comm: syz.2.3413 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 743.080635][T15286] Tainted: [L]=SOFTLOCKUP [ 743.080644][T15286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 743.080659][T15286] Call Trace: [ 743.080669][T15286] [ 743.080680][T15286] dump_stack_lvl+0xe8/0x150 [ 743.080714][T15286] should_fail_ex+0x46b/0x600 [ 743.080756][T15286] _copy_to_user+0x31/0xb0 [ 743.080794][T15286] simple_read_from_buffer+0xe1/0x170 [ 743.080828][T15286] proc_fail_nth_read+0x1be/0x230 [ 743.080860][T15286] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 743.080892][T15286] ? rw_verify_area+0x2ac/0x4e0 [ 743.080923][T15286] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 743.080953][T15286] vfs_read+0x212/0xa80 [ 743.081000][T15286] ? __pfx_vfs_read+0x10/0x10 [ 743.081034][T15286] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 743.081071][T15286] ? lockdep_hardirqs_on+0x7a/0x110 [ 743.081105][T15286] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 743.081141][T15286] ? mutex_lock_nested+0x152/0x1d0 [ 743.081167][T15286] ? fdget_pos+0x252/0x320 [ 743.081204][T15286] ksys_read+0x156/0x270 [ 743.081239][T15286] ? __pfx_ksys_read+0x10/0x10 [ 743.081272][T15286] ? fput+0xa0/0xd0 [ 743.081303][T15286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.081330][T15286] do_syscall_64+0x174/0x580 [ 743.081363][T15286] ? trace_irq_disable+0x3b/0x140 [ 743.081390][T15286] ? clear_bhb_loop+0x40/0x90 [ 743.081419][T15286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.081443][T15286] RIP: 0033:0x7f1b804dd68e [ 743.081464][T15286] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 743.081485][T15286] RSP: 002b:00007f1b7e775fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 743.081509][T15286] RAX: ffffffffffffffda RBX: 00007f1b7e7766c0 RCX: 00007f1b804dd68e [ 743.081527][T15286] RDX: 000000000000000f RSI: 00007f1b7e7760a0 RDI: 0000000000000005 [ 743.081543][T15286] RBP: 00007f1b7e776090 R08: 0000000000000000 R09: 0000000000000000 [ 743.081558][T15286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 743.081572][T15286] R13: 00007f1b80796038 R14: 00007f1b80795fa0 R15: 00007fffa9654678 [ 743.081609][T15286] [ 743.147074][ T5715] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 743.389556][ T5715] usb 5-1: device descriptor read/64, error -71 [ 743.618210][ T5715] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 743.742307][ T5715] usb 5-1: device descriptor read/64, error -71 [ 743.846321][T15302] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3418'. [ 743.847146][ T5715] usb usb5-port1: attempt power cycle [ 744.180411][ T5715] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 744.232000][ T5715] usb 5-1: device descriptor read/8, error -71 [ 744.456588][ T5715] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 744.476072][ T5715] usb 5-1: device descriptor read/8, error -71 [ 744.580953][ T5715] usb usb5-port1: unable to enumerate USB device [ 744.582314][ T5715] 1024-page vmalloc region starting at 0xffffc90004bb2000 allocated at kcov_ioctl+0x58/0x660 [ 744.582359][ T5715] list_add corruption. next->prev should be prev (ffffffff8e228ce0), but was 0000000000000000. (next=ffffc90004bb2000). [ 744.583027][ T5715] ------------[ cut here ]------------ [ 744.583037][ T5715] kernel BUG at lib/list_debug.c:31! [ 744.633900][ T5715] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 744.634038][ T5715] CPU: 0 UID: 0 PID: 5715 Comm: kworker/0:6 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 744.634063][ T5715] Tainted: [L]=SOFTLOCKUP [ 744.634070][ T5715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 744.634083][ T5715] Workqueue: usb_hub_wq hub_event [ 744.634107][ T5715] RIP: 0010:__list_add_valid_or_report+0xf4/0x130 [ 744.634140][ T5715] Code: 0b 4c fd 42 80 7c 2d 00 00 74 08 4c 89 e7 e8 43 a7 6c fd 48 8b 53 08 48 c7 c7 60 23 ac 8b 4c 89 f6 48 89 d9 e8 dd bf 63 fc 90 <0f> 0b 4c 89 f7 e8 52 0b 4c fd 43 80 3c 2c 00 74 08 4c 89 f7 e8 13 [ 744.634156][ T5715] RSP: 0018:ffffc900057b77d0 EFLAGS: 00010246 [ 744.634171][ T5715] RAX: 0000000000000075 RBX: ffffc90004bb2000 RCX: d0f663d703677a00 [ 744.634184][ T5715] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 744.634195][ T5715] RBP: 1ffff92000976401 R08: 0000000000000000 R09: 0000000000000000 [ 744.634206][ T5715] R10: dffffc0000000000 R11: ffffed10170c48fb R12: ffffc90004bb2008 [ 744.634220][ T5715] R13: dffffc0000000000 R14: ffffffff8e228ce0 R15: ffffc9001871e000 [ 744.634233][ T5715] FS: 0000000000000000(0000) GS:ffff888125c7e000(0000) knlGS:0000000000000000 [ 744.634247][ T5715] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 744.634260][ T5715] CR2: 00007fd590cf5f40 CR3: 0000000042b3c000 CR4: 00000000003526f0 [ 744.634276][ T5715] Call Trace: [ 744.634284][ T5715] [ 744.634293][ T5715] kcov_remote_stop+0x457/0x680 [ 744.634315][ T5715] hub_event+0x49d8/0x4f60 [ 744.634358][ T5715] ? __pfx_hub_event+0x10/0x10 [ 744.634375][ T5715] ? process_one_work+0x8be/0x1630 [ 744.634404][ T5715] ? process_one_work+0x8be/0x1630 [ 744.634428][ T5715] process_one_work+0x98b/0x1630 [ 744.634459][ T5715] ? __pfx_process_one_work+0x10/0x10 [ 744.634483][ T5715] ? do_raw_spin_lock+0x12b/0x2f0 [ 744.634505][ T5715] worker_thread+0xb49/0x1140 [ 744.634540][ T5715] kthread+0x388/0x470 [ 744.634559][ T5715] ? __pfx_worker_thread+0x10/0x10 [ 744.634583][ T5715] ? __pfx_kthread+0x10/0x10 [ 744.634601][ T5715] ret_from_fork+0x514/0xb70 [ 744.634623][ T5715] ? __pfx_ret_from_fork+0x10/0x10 [ 744.634643][ T5715] ? __switch_to+0xc79/0x1410 [ 744.634660][ T5715] ? __pfx_kthread+0x10/0x10 [ 744.634678][ T5715] ret_from_fork_asm+0x1a/0x30 [ 744.634707][ T5715] [ 744.634719][ T5715] Modules linked in: [ 744.634740][ T5715] ---[ end trace 0000000000000000 ]--- [ 744.634757][ T5715] RIP: 0010:__list_add_valid_or_report+0xf4/0x130 [ 744.634787][ T5715] Code: 0b 4c fd 42 80 7c 2d 00 00 74 08 4c 89 e7 e8 43 a7 6c fd 48 8b 53 08 48 c7 c7 60 23 ac 8b 4c 89 f6 48 89 d9 e8 dd bf 63 fc 90 <0f> 0b 4c 89 f7 e8 52 0b 4c fd 43 80 3c 2c 00 74 08 4c 89 f7 e8 13 [ 744.634802][ T5715] RSP: 0018:ffffc900057b77d0 EFLAGS: 00010246 [ 744.634817][ T5715] RAX: 0000000000000075 RBX: ffffc90004bb2000 RCX: d0f663d703677a00 [ 744.634830][ T5715] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 744.634841][ T5715] RBP: 1ffff92000976401 R08: 0000000000000000 R09: 0000000000000000 [ 744.634855][ T5715] R10: dffffc0000000000 R11: ffffed10170c48fb R12: ffffc90004bb2008 [ 744.634869][ T5715] R13: dffffc0000000000 R14: ffffffff8e228ce0 R15: ffffc9001871e000 [ 744.634883][ T5715] FS: 0000000000000000(0000) GS:ffff888125c7e000(0000) knlGS:0000000000000000 [ 744.634897][ T5715] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 744.634909][ T5715] CR2: 00007fd590cf5f40 CR3: 0000000042b3c000 CR4: 00000000003526f0 [ 744.635040][ T5715] Kernel panic - not syncing: Fatal exception [ 744.636453][ T5715] Kernel Offset: disabled