last executing test programs: 17m22.385681671s ago: executing program 3 (id=1104): timer_create(0x0, &(0x7f0000000640)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r2, &(0x7f0000000100)="703a2d6573742f6576656e7431202e2f66696c65303a3078302040cf", 0x1c) bind$inet(r2, &(0x7f0000001c00)={0x2, 0x4e22, @empty}, 0x10) connect$inet(r1, &(0x7f0000001bc0)={0x2, 0x4e23, @local}, 0x10) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0) sendto(r1, 0x0, 0x0, 0x4008044, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x301000, 0x0) nanosleep(&(0x7f0000000140), &(0x7f0000000180)) close_range(r3, r3, 0x6) timer_delete(r0) sendto$inet(r1, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 17m22.242530159s ago: executing program 3 (id=1105): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f0000003d00)=[{&(0x7f0000000880)=""/144, 0x90}, {&(0x7f0000004580)=""/4136, 0x1028}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f0000003840)=""/43, 0x2b}, {&(0x7f0000003880)=""/38, 0x26}, {&(0x7f00000038c0)=""/208, 0xd0}, {&(0x7f0000003ac0)=""/113, 0x71}, {&(0x7f0000003b40)=""/162, 0xa2}, {&(0x7f0000003c00)=""/193, 0xc1}], 0xa}, 0x1000}], 0x1, 0x40000100, 0x0) 17m22.151362116s ago: executing program 3 (id=1106): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r0, &(0x7f00000002c0)={@void, @void, @ipv6=@dccp_packet={0xf, 0x6, "38b177", 0x121, 0x21, 0x0, @mcast1, @private2, {[@srh={0x6, 0x2, 0x4, 0x1, 0x0, 0x18, 0x6, [@rand_addr=' \x01\x00']}, @hopopts={0x2e}, @dstopts={0x6, 0x4, '\x00', [@ra={0x5, 0x2, 0xc8f3}, @jumbo={0xc2, 0x4, 0x80000000}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @enc_lim={0x4, 0x1, 0x8}, @enc_lim={0x4, 0x1, 0x6}]}, @hopopts={0x67, 0x5, '\x00', [@hao={0xc9, 0x10, @local}, @jumbo={0xc2, 0x4, 0x4}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @fragment={0x2f, 0x0, 0x7f, 0x1, 0x0, 0x4, 0x64}], {{0x4e22, 0x4e21, 0x4, 0x1, 0x6, 0x0, 0x0, 0x4, 0x7, "6de17e", 0x0, "00f600"}, "0d1198143f7e5b3152ca9da9dabff56658b4d3079e6cce1ab98662a450e0fc2b6c032668aab51dcde58d8c338f0123b1e2dd081fdf862d3da4e2c8cb1c59201be121b3145ce2acaabfa3ffde35ef4872f995ab49ad6b21ac3d56f9e348d77bf81175f9a9d6814c099b629902e7e91031fc7213c5f8d991ad77cd2c7005b05917ca"}}}}, 0x149) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000740)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000180), 0x10) listen(r2, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000600)=""/243, 0xf3) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f00000001c0)={0x28, 0x0, 0x0, @local}, 0x10) writev(r3, &(0x7f0000000200)=[{0x0}], 0x1) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000480)) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000540)=0x0) timer_settime(r4, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000280)="6e616d65207e20221d22", 0xa) 17m21.924103217s ago: executing program 3 (id=1108): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x0) r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @local}, &(0x7f00000001c0)=0x10) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x2, 0x264, [0x0, 0x200000000240, 0x200000000270, 0x2000000002a0], 0x0, &(0x7f0000000200), &(0x7f0000000540)=ANY=[@ANYBLOB="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"/785]}, 0x389) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x8, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20400, 0xfa) fdatasync(r1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 17m21.762473556s ago: executing program 3 (id=1110): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 17m21.44143273s ago: executing program 3 (id=1113): socket(0x1e, 0x4, 0x0) 17m21.291930449s ago: executing program 32 (id=1113): socket(0x1e, 0x4, 0x0) 5.868301398s ago: executing program 0 (id=5266): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./trace\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./trace/events/irq/irq_handler_entry/filter\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)="28286d65202920221d22", 0xa) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB], 0xd) 5.423517728s ago: executing program 1 (id=5269): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bde5a44070275290f515010203010902120001000000000904"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) syz_usb_connect(0x6, 0xc02, &(0x7f0000000900)={{0x12, 0x1, 0x300, 0xc3, 0x9, 0x54, 0x8, 0xa07, 0xd0, 0x86e4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbf0, 0x4, 0x81, 0xb6, 0x10, 0x56, "", [{{0x9, 0x4, 0x65, 0xd, 0xd, 0x9c, 0xfc, 0xcc, 0x7, [@uac_control={{0xa, 0x24, 0x1, 0x0, 0x26}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x404, 0x3, 0x4}, @extension_unit={0xa, 0x24, 0x8, 0x6, 0x4, 0x6, "3d3be2"}, @selector_unit={0x9, 0x24, 0x5, 0x2, 0x5, "f310be2a"}]}, @hid_hid={0x9, 0x21, 0x9, 0x3, 0x1, {0x22, 0xf54}}], [{{0x9, 0x5, 0xb, 0x0, 0x200, 0x8, 0xa3, 0x4, [@generic={0x46, 0x9, "e9106a9594121c8723d48276ffe23a593994dbbdba872d5a4b6d56943190b7db4e308ab2622abfa64ff2602ed83fa5224500f96ec6a7440923c1cd91d6ae2adfc153905c"}, @uac_iso={0x7, 0x25, 0x1, 0xc}]}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0x5, 0x7, 0x1}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0x40, 0x15, 0x9, [@generic={0x84, 0x2, "beff54a1ca547151f1d9c7609cf3e0b30e254498c33f52dc43b211a23eca8e76ceea7c85abfd7816b8f0e24e723f52b552a0b4edf0c1e23386dba792532a429d1da2a66e8e09ffa8746d4c2aa0ba1d110cbebc29861b60172a0f191011eb2fcaf3d8fd220d81e64a297c92f388ad23b2a7944c8c01aa12103c2795195efcbe9c95f0"}]}}, {{0x9, 0x5, 0x7, 0xb, 0x40, 0x1, 0x3, 0x7}}, {{0x9, 0x5, 0x2, 0x2, 0x400, 0xf8, 0x4, 0x7}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x80, 0x12, 0xc}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x3, 0x2, 0x1}}, {{0x9, 0x5, 0xa, 0x2, 0x40, 0xf7, 0x0, 0x5, [@generic={0x74, 0x21, "e99d0524395fa9afa7537c9ef53b1f4803ca5ec50c87cd08b53accde039291878183fb711903401be84b636f0758a1433f1bc71971aff9a0391dc21f70b9137684bcc1298501e6a17b7324860c003058fe4c80d6635c4e6b92e321034ce6bf9bf95b97dc509b9b4046f720ee689f027c1a21"}, @generic={0x56, 0xed2a9dabfb6c9c4, "99062d920d661648bfe363763b20704224c515a9f3f3c20f7eca7cc1fd404976dfdcc42ece4593b93c797381bf66f5461d83bceeaaba27c260c9314ac4f0c9d3c4acf1898039494b8b5a0a6c8c459d9334cf0ef9"}]}}, {{0x9, 0x5, 0x88, 0x0, 0x10, 0x80, 0x8, 0x7}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0xe0, 0xc, 0x0, [@generic={0x41, 0x31, "fcfde714fc1e1abc10b62a4007e946aea03daa88486ed542fac6bacd958d3a3d3d3668f59523f22aec5d097339f21560753012f7dd05fa8baba60bade41991"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x400, 0x4f, 0xe5, 0x7, [@generic={0xc4, 0xc, "2e158c04cffac0fec31647a21e524613b3bc619849a2578d4e42a89c7ba0e5c2255fc84dffea5c871b0459482d415256d269cafb34eb6a65591a7c6059a3e3f09aeaa8b6bcfb1c6e6f34929a2abde244c90370ac68033ba9abca91d33141d14ca8a4faf2e3112d2bccd615e170a91a8e7767c1df0dda999a176ab5d87924ca94f8000bfe6e39a7fa112ac8efb0f95b4a61fe6f201b2d11eb2798a02b399e830ca67700109af742dff7b23ce084ca10caca4fcfbe030d85f3744202b871d7f61da699"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x3ff, 0x6, 0xab, 0x9}}, {{0x9, 0x5, 0x5, 0x1, 0x0, 0x1, 0x10, 0x5, [@generic={0x23, 0x9, "12f0a35e73e6dcd67ed960469fc586a40917821d33cf5a19a30e073c38be4739c4"}]}}]}}, {{0x9, 0x4, 0x5e, 0xbc, 0x5, 0x2d, 0x1e, 0x2e, 0x81, [@uac_as={[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x9, 0x4, 0xd8, 0x3, "9c0141", "7dc6"}, @as_header={0x7, 0x24, 0x1, 0xe2, 0x1, 0x1}, @as_header={0x7, 0x24, 0x1, 0x6, 0x0, 0x2}]}], [{{0x9, 0x5, 0xc, 0x1, 0x460, 0x10, 0x8a, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x36, 0x4}]}}, {{0x9, 0x5, 0xc, 0x3, 0x3ff, 0x1, 0x9, 0xde}}, {{0x9, 0x5, 0x80, 0x3, 0x3ff, 0x1, 0x73, 0x80}}, {{0x9, 0x5, 0xa, 0x2, 0x3ff, 0x5, 0x8, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x254201bf714b3607, 0x0, 0x200}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x10}]}}, {{0x9, 0x5, 0x5, 0x10, 0x20, 0x2, 0x6, 0x5}}]}}, {{0x9, 0x4, 0xbb, 0x8, 0xb, 0x19, 0x3d, 0x2a, 0x9, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "e3a360"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x10, 0x9, 0x7}, {0x6, 0x24, 0x1a, 0x5}}], [{{0x9, 0x5, 0x6, 0x10, 0x8, 0x5, 0xf, 0x3, [@generic={0x18, 0xa, "2c85a8a7372f7b320c7021fca50972acdf719bc7a85e"}, @uac_iso={0x7, 0x25, 0x1, 0x18, 0x8}]}}, {{0x9, 0x5, 0xe, 0x2, 0x200, 0xaf, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x1}]}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0x5, 0xe, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xf5, 0x200}, @generic={0x88, 0x21, "8f1d4e92892ed3b6ed528a103a6483a6d3f1f9e5c804759290f870d8df68bf2492625bdbc9a1c64219eb2f126183ee06652e0c263f0cd4d4e3e1ecc29c66835d7710410fe5a109747fd323af35170aebf175cffc56e73818f146da210bf855d9d7688656cf21451480cc873a8dd80c7cb46a45891abc7dc2d80c17da745668dcdfbd21f8816f"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x200, 0x72, 0x80, 0xc, [@generic={0x58, 0x7, "81c8873b8c85e39e68c048c2cf768c2c8fa2bc1e64e8b84fd367bd303ca93f45e29c6aea8ebb81cc6d390fb478e4c7e44131112bc2dfcd6b66f36581880dd7563d8053a535052296ba68959a80c1015584bccdf3a475"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x200, 0x6, 0x4, 0x1a}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x2, 0x4, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xff, 0x1}]}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0xb, 0x8, 0x1}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x2, 0xc1, 0x9}}, {{0x9, 0x5, 0x1, 0x10, 0x8, 0x5d, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x65}]}}, {{0x9, 0x5, 0xe, 0xc, 0x10, 0xcd, 0xe, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0x9fc}, @generic={0x7, 0xd515f7d43e3750d5, "d1fd2327c2"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x40, 0x0, 0x2, 0xc9, [@generic={0xf1, 0x30, "e3031bf5fa0efc383fd79cf10df3e4f3e127ada28908cb4fd8d5c00f5dfdbdaef416bc2ed0cff2599e89bc4ae0c11fc3ae491087839dbaae7eab8a9ce818228d39ea8cd706ee61972342de840a543226399f43e4564abe5afc6fe13c38ff3130593b2d6736cb74004d9458e93682f47bfaa79889827343078bb3db8a2cb27ee6253f8a6e9f71c8ccb3f615ee5a47de0dd090000113f41f5d7b1425295e9b701ae01ef8143846efcadf55a857fb248ff163e2ae16ee25a875688fbb0dea6ef8f215ed9bad9eff5ec562a7bbe3be4abdb9f29bd0a0e5ec228b96421be7aad20f91378156c2da745a7eecaffe4ebf3de7"}]}}]}}, {{0x9, 0x4, 0x54, 0xbd, 0xf, 0xd4, 0x8d, 0xd1, 0xa9, [@hid_hid={0x9, 0x21, 0x3, 0x1, 0x1, {0x22, 0xd64}}, @cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, "93"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x6, 0x7ff, 0x2}, [@mdlm={0x15}, @mbim={0xc, 0x24, 0x1b, 0x3, 0xd, 0xf8, 0x1, 0x2, 0x7}, @ncm={0x6, 0x24, 0x1a, 0x9, 0xc}]}], [{{0x9, 0x5, 0x5, 0x8, 0x20, 0xf, 0x2c, 0x80}}, {{0x9, 0x5, 0x9, 0x8, 0x3ff, 0x7, 0x1, 0x6}}, {{0x9, 0x5, 0x80, 0x4, 0x3ff, 0xd1, 0x5, 0x3}}, {{0x9, 0x5, 0x3, 0x0, 0x0, 0xa4, 0x6e, 0x2, [@generic={0xcc, 0x22, "cc696990ce2a69d19511b1316202102cc5a5289f44e0b990665fedc9bde6bcc7032015e3720026f09b585f25262ce59968b4df448708663bfe0d8a566684e92279a515496288d91f327aaf6c33f32bbd7807ad8586cb9164d53efb3f98ea278f7fb1c640eef433606a3fe66ea9aa155d708f46fafd2f10afa327a8404a76cd14b91dc929fe44591e15896a0889882be6147481dd98ffca920c2cf7be09644f8dbd83d6757d677135e70d627a91b86bcdb3ff732ae07bcd31faddfb90370075c51202ad27e45b8fd643b9"}, @generic={0x5b, 0xa, "c0a45a9bc418bb82c57d35fb469d290c0e347bea6f8d839f6a1e36fc36b44a2f19a0c3ffe96c027f004339a3e342f766344b75d62243056466c2f999e0d3b6c188c60be250932f3082cb1181fb25650b94f37f9a89108b8aef"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x10, 0x10, 0x7f, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x47}, @generic={0x6a, 0xf, "ec612b7135c9df2313264abfe51e080bda512d507691b53d0f6de075c8a19475af0e6d59a1cd79a6912eaa1d3d2e61ee7b0f06934f47b7eef1e8b4efd031619675d389acc37ac0a78dc06ed593158c7d8fa84c8beae4d2f4b554464e802ac0cfebc2f06055b1b945"}]}}, {{0x9, 0x5, 0x5, 0x3, 0x200, 0x2, 0x81, 0x6, [@generic={0x75, 0xd, "1095e7fb8245ebebe966f1bcd03a83da787c2c986dc692e9e45811ae45067d162b27aff78e87264dfbc70e87eff356eca3d5a1c2d50020b4a9e865d3277c0d42e447743cbf993aea0922e6a6872ec5457c576850a94e6114992ed888b5381db4ab0f6bbcffb72af2b1fbdae1d2ae72d3231aa4"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xc1, 0x9}]}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x8, 0x3, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x3}, @generic={0x4, 0x30, "03c5"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x20, 0x0, 0xea, 0xd4, [@generic={0xe8, 0x30, "64dd9b4f16e6c01f700555e1eed98de5116c79a15b2ec15f3c2f79afc760eac7be55c405f6ca85e9796f561f4989a1795f23a47f58ba69535a9bd8c933b51492e349df97e0f07365b28a0b8c4097b517a1ecc2fa3cae0aa98b9e5241cd098010c89600ee95a47a4f6e002155edf9433d2ae59d48cdcdb5d479b06a46f14cfb42b20bb380c2ef2513829bdb08b57b57588e52632233029fc8d33fdf4539706c6c04ee5be27c3702781cdca56a5446476e3ed9471b29b40b40953c52ba2ef00984c54e624bf1ab0ac7ebaa42365eef70a7d4ee9a725bf89ac53909d714527430968490670dcea5"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x401}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x9, 0x0, 0x5, [@generic={0x6a, 0x10, "e61098f6cb13735af4b161c110a7f41d6b987b50bbf820eb3ad8807749633a16e3dfb85e348eeba03427a54653372d908e1e7a0495bda319cb5ad050c8176cd0a3cfafda0dd6267ec6bd57921b0db0fbaaa30c9cefc0590beddb7f5358996252eced0109d8242667"}]}}, {{0x9, 0x5, 0x6, 0x4, 0x3ff, 0x4, 0x0, 0x9, [@generic={0x72, 0x10, "fe66d75b2ed39c2513420ec6c45b0230e1eaddef042277962b8fe27a98e05513be2e273cc3807f746c60ec16f8b1ac0544389f74607a53129a7f1391ee529d4eaa959f1adc858726984b3aa683d7036370ef8d6cffb4b4a920b5b1029ee822717b98564e5c5e3e091d07ea9a2d4f2c53"}]}}, {{0x9, 0x5, 0x98400597c790ee73, 0x8, 0x20, 0x5, 0x8, 0xd}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x2, 0x6, 0x9, [@generic={0x86, 0x24, "bee6049e853e6bb11c6b687259f32fb11bf0c1ce6c4dbe7d5d94ec794fc7daf47eb6cf4a8760c20b8ed45b44845f02b86068ccc7f0819c758e7a68fbc8a5bf9d9c0b12b79fffb45adf5fa8c14ee2596a8511860930bd22793be3486bca801d9a542a8a042a9cfcdc1c36dcd80fb559ff7d804feaff45f11bbad3567480c265ae0ae838de"}, @generic={0x1c, 0xa, "9f97bba1d119c7d47b7c16f5ab6a28d276b421553c167dd47f60"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0x9, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x80, 0x4}]}}, {{0x9, 0x5, 0xc, 0x3, 0x3ff, 0x4, 0x1, 0x8}}, {{0x9, 0x5, 0x5, 0xf, 0x200, 0xc, 0xff, 0x1}}]}}]}}]}}, &(0x7f0000001940)={0xa, &(0x7f0000001540)={0xa, 0x6, 0x250, 0x8, 0x7, 0x3, 0xff, 0xf}, 0x1c, &(0x7f0000001580)={0x5, 0xf, 0x1c, 0x2, [@ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x7fffff5, 0x1e00f, 0x50, [0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x4, 0x6, 0x200}]}, 0x6, [{0x57, &(0x7f00000015c0)=@string={0x57, 0x3, "fad926d872da5c5cd94e982888ffbaa879fa4efe92253e6fba00a23089f2ae83cc2dd115aceb496d5a4ce59c55e9ea4a75f31169cbab744ec88f5b6d548dba7f351813595cc5193a18422f1c5367c4435f248ed4bf"}}, {0xd5, &(0x7f0000001640)=@string={0xd5, 0x3, "fa4c77cfee3f0b99a26be245aaf0bd961b57210220715462d933fd9d2ce40e7fea23bbac61c79370065ef36b59e51b7e40988399672f1a2d7d81008b4be88ec87eb2df3b99c6e6763f0acb581b7c1c95409751ea6540c20a36c485bc2bfcbac09bc2e0ceddd4507a95e6b5f1421f9d0a33da61c16e8d8ec1219b01922a77de4e6d13912ce13bb5744c3e842f79fc586fb7d7d63dc6e4953c2fd1fb52cddda71875ff2f1971e50db01858f009b13fdab9c1c27008be7cff7a9b8c867dc3943b6bd14ef504b5da141991099f643f0644357cb825"}}, {0x5f, &(0x7f0000001740)=@string={0x5f, 0x3, "e2f26ae802c742d9adfb92487c87840a7c1178d187011bfc65af6850a4190d2d35dbf78a772a0ec04bba6b9bf4a89aac0aadcff62684fef6edda607a888a22cea93f0bbaffdcf9d464dea9203d6dffe62a20375dd84f3fc71ecebd8530"}}, {0x4, &(0x7f00000017c0)=@lang_id={0x4, 0x3, 0x8afcc9a9ed183d71}}, {0xd9, &(0x7f0000001800)=@string={0xd9, 0x3, "d9939e3fbf0ff1909fbf34d825570461b5ac3bd82a1e9627ab1a90bcbcd5f92797e89eefc5130da0974eaf003b4b89c023b393003d18aa517f38ce6ae69a0e267cdd952f358477e22bbdee00e5826db7257b8c42f0a0fe87908e8a683f7da2ef324344a92b86805280cd6d4628c20618a7edb508a825681cf1ada93242dfcbf018a4f4b5959bb6f8dbde91aaeca471029aa21ed088f8db44f9333b7114b37dfff9937f9ac15fd08508a4df95be8bf0a0462ca9369b7e1eea82fb084267c1417eec52b39a8fdb9ff23406a8b553e75078a7e9d4b926446e"}}, {0x4, &(0x7f0000001900)=@lang_id={0x4, 0x3, 0x413}}]}) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='md0\n', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='2\n', 0x2) 5.262524615s ago: executing program 0 (id=5270): syz_usb_connect(0x2, 0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000094d9d4084e080110aeed010203010902220001000000000904000001437b6a000905000000000000000705", @ANYRES16], 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x107c00) 4.092047041s ago: executing program 1 (id=5274): r0 = syz_open_dev$vim2m(&(0x7f0000000240), 0xf5, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f00000002c0)=0x1) 4.032552723s ago: executing program 2 (id=5275): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) readv(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x89f6, &(0x7f0000000300)={'bridge0\x00', &(0x7f0000000340)=@ethtool_regs={0x4, 0x0, 0xb, "2a161d2d71db37f20a8f15"}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/usb/devices/usb1/bConfigurationValue\x00', 0x2, 0x15d) write(r2, 0x0, 0x0) openat$panthor(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000004c0)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x18003, 0x0) fdatasync(r5) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$video(0x0, 0xa7, 0x0) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="040ed5000410"], 0x11) listen(0xffffffffffffffff, 0xc) syz_genetlink_get_family_id$mptcp(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) 3.969984238s ago: executing program 1 (id=5276): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_ublk_setup_io_uring(0x3ffa, &(0x7f00000006c0)={0x0, 0xdf16, 0x80, 0x2, 0x4000027e}, &(0x7f0000000740)=0x0, &(0x7f0000000780)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000800)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x40, 0x0, 0x0, &(0x7f0000000880), 0x12345, 0x0, 0x12}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000008c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000940)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r4, 0x0, &(0x7f0000000040)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000100)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, 0x0, 0x1, &(0x7f0000000240)={0x2e, 0x8, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000340)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000380)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000980)={0x0, 0xbd, 0x4000, 0x1, 0x7f}, &(0x7f0000000440)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) r11 = syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0) ioctl$VIDIOC_TRY_FMT(r11, 0xc0d05640, &(0x7f0000000140)={0xa, @raw_data="386e307f1bd987262cfc65583bbc9e142b24ab6c02f3b425b0205dede43f915276dee794c68519a062d5423a46a656bf5e6fe57401f7c176460098b631eb3b8bd5a17f0d7827e7a968a4a2bb98b9736992be248ffd7e2b0244e17829ef4a7ae949ed42cec0dc6112ff4bee2e9f9d74a0b4b265acf6304c7de90245b74e1bb47eeb3348e95dd96a4e37c4b9df6580b8bd863722825d59d46794aa2546bc40051f20b4f0f171bdcd63b5b08f8669876fd7ac9c41aceb7c2e7892ca53ca4280a494b85678c7696e04d5"}) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r7, 0x84, 0x8, &(0x7f00000003c0), &(0x7f0000000400)=0x4) 3.772095444s ago: executing program 0 (id=5277): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = syz_usb_connect(0x5, 0x35, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$uac2(r2, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="090000000000ef"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000020000/0x3000)=nil, 0x3000, 0x1, 0x8010, r0, 0x0) r3 = socket(0xa, 0x1, 0x3a) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd1, &(0x7f0000011e00)=0x9, 0x4) 3.526425063s ago: executing program 1 (id=5278): socket$key(0xf, 0x3, 0x2) socket$xdp(0x2c, 0x3, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000000)={0x4, 0x1, 0x5}) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="14"], 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) io_submit(r2, 0x1, &(0x7f0000000440)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x1, r1, &(0x7f0000000100)="653de841f0", 0x5, 0x8000}]) 3.391346644s ago: executing program 1 (id=5279): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000406d0481c20001000000010902200001010080320904000002030000000705810310000a07050203"], 0x0) r1 = syz_open_dev$video(&(0x7f0000000200), 0x10001, 0x0) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000640)={0x1, "1898efe12600000000000000400000000500", 0x0, 0x2, 0x3, 0xb700, 0x410, 0x2}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000580)=ANY=[@ANYBLOB="e119e94f4ff838c7c8395c7b4a1a0c2dcaa716f72e5ce5a9e9d05efadcd11e6148f1ffb2a4fe55ec927eb333456eaf8e459053e78e0ed796253838b6de54bb0c3f6de153b13e8c2536e0f5ca22e2c330eeb67a0d3e80c257ac319420638ef6fc8e335e88bd86124fbfc1d7c094b35a29587ececdbf27f69b5a752d5b1823462835b67d57abf57342eee5925f13aada26af8ad3a3ad3b1dda8925d1a8a2fc4e9cd18e92d4ec06f95eac07"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000001380)=0x6, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000013c0)={'erspan0\x00', 0x0}) sendto$packet(r2, &(0x7f0000001400)="0b032200eb1025120212475400f6a13bb1000000080089064803", 0x10300, 0x0, &(0x7f0000001440)={0x11, 0x0, r3}, 0x14) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000014c0)={0x84, &(0x7f0000001580)={0x20, 0x15, 0xa2, "941339e399fb0d5322214275e2487f41868d71455aa0e63fe29305a5eb72b5e914051a41db7b9a1382cfab0100000011ad7b64a18f147e68dea2fbe048e73c578396e08f304687ce29f74da4509a83fc8f0cdca73eb9810591ba4f25b98a18d866a7733384eba09127db1f3785764c69f9943e63c8d1f21af5dc3bab5e1f29b0f302f60cb615ed790b5faf9fef85063dfaf3b21bcec5c914ce06caedd105670f1b1b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_usb_connect(0x2, 0x2d, &(0x7f0000001640)=ANY=[@ANYBLOB="120100015ae4c41096050100f5050100030109021b0001000000000904d60001b5e14500090583"], 0x0) r5 = epoll_create(0x7fff) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r1, &(0x7f0000001480)={0x80000000}) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000240)={0x14, &(0x7f0000000040)={0x40, 0xe, 0x8d, {0x8d, 0x36, "a1ebd7317951bc7fec53d941d16236cbc7f358363ae626a71d99e4567a5161cc2c112d380eba1f3d4f8be640ce96c74e49658a99ce9006570e623975d0eaf28dfcdc585172ed8279afa844a8ef274d47e9a2e0405d61338608197fc8aab46f0714c66322d3d0b459dc5f9981259207d0dc3f1ffa22b7a18e8cc92c44a002592b06b9704a45928e77ec4fe5"}}, &(0x7f00000001c0)={0x0, 0x3, 0x26, @string={0x26, 0x3, "a7157e7a3fcebfa3b88666f6929d2be6e1bff37ebffab184863695982abded19674d7f52"}}}, &(0x7f0000000500)={0x44, &(0x7f0000000280)={0x20, 0x12, 0x46, "da742ad15fd66761b57a9cedb7e7397dafed91f6a0c659bcf8bc33d0e8b989675e28bbc582dee00967fe806667121da7bdba39619f4ffd1139597e4fee5e0c936ecdcb42d620"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000003c0)={0x20, 0x81, 0x2, "903d"}, &(0x7f0000000400)={0x20, 0x82, 0x1, '['}, &(0x7f0000000440)={0x20, 0x83, 0x3, "7f76a2"}, &(0x7f0000000480)={0x20, 0x84, 0x4, "34f2873c"}, &(0x7f00000004c0)={0x20, 0x85, 0x3, "079482"}}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001680), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000016c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r6, 0x3b88, &(0x7f0000001700)={0xc, r7}) ioctl$IOMMU_VFIO_SET_IOMMU(r6, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r6, 0x3b72, &(0x7f0000001740)=ANY=[@ANYBLOB="1800"]) syz_usb_control_io$lan78xx(r0, &(0x7f00000007c0)={0x14, &(0x7f00000006c0)={0x20, 0x1, 0x9f, {0x9f, 0x31, "d99c5a100663159b9c6c96ced3055773dec0cf04f2f919867c5b53f9f69f45ef3517128e3d6a6fa66b2658aff5190d2942e515617c304682e876ac06305adac392f6605cb8f5b33af0e86d5c1547ef4b3b7efb8ffd4fc7d915f763dc89179fb592d73d896f4f35f859bf41cf5d1d65c0ae92dd224fbe40a3d337e6a6636452a775b230f15d8748ee828356eb0f07d0f00fa613f8f00c9c3ec00b0cb373"}}, &(0x7f0000000780)={0x0, 0x3, 0x15, @string={0x15, 0x3, "30d3048c8f8d817a781a1a51bbf6a9b4ae7e1a"}}}, &(0x7f00000009c0)={0x34, &(0x7f0000000800)={0x20, 0xe, 0x42, "bef874c6ae82004776c39e95b34cbd566088af47ace9fb38095877ea898975cb529cf48b554dce4d78cf5b42da56bd243698e03f32a4e6f17241dfb2e4a976d75263"}, &(0x7f0000000880)={0x0, 0xa, 0x1}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0xde}, &(0x7f0000000900)={0xc0, 0xa1, 0x4, 0x10001}, &(0x7f0000000940)={0x40, 0xa0, 0x4, 0xb}, &(0x7f0000000980)={0xc0, 0xa2, 0x2f, "aca700e23eca791917463c35ffc6548ceedd67cbb273a48d2f6cc4139cbddd4953036d5a4955f2b39bb3e8fb8c07ad"}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r8 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000a00)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x8102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0x20, 0x3, "", [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x0, 0x30, {0x9, 0x21, 0x5, 0x3, 0x1, {0x22, 0xa13}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x80, 0x9, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x2, 0x0, 0x3}}]}}}]}}]}}, &(0x7f0000000ec0)={0xa, &(0x7f0000000a40)={0xa, 0x6, 0x250, 0x2, 0x80, 0x7, 0x40, 0x72}, 0x10, &(0x7f0000000a80)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0xb0, 0x6d, 0xc, 0x1000, 0x2c}]}, 0xa, [{0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x380a}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x457}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x40f}}, {0xbc, &(0x7f0000000bc0)=@string={0xbc, 0x3, "7ed8fa11e579338c54d60b71d07ebe429cfa70652f7717fec5b7ddb44cc298e617b4bbd9b85426799cbefe1593419d49598cbd49b78d0093b30b6197074b0313bbfbdc2dd500d98c1fc61e705f4165bf5f5d07a29a70f0ac55b15b8d55c2f01dc89a81894062c2bada766ff9bc8b40eb51476115b7b41355d0db9203b766230da9518ddf930b880707b6ea3be640d99d28f1092c9166704415df2ace75c2e8774632d366992a27a40f3841c47d5bd46df3c62f7c9a394c16133a"}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x40b}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x1401}}, {0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x6807}}, {0x83, &(0x7f0000000d40)=@string={0x83, 0x3, "080bf8bf1a408c540a3c628751513ec8c58ba30b2dd1954f50f3af9db7e48658c5bd08330e34f583a67d4116e6c4cbfddc06fc3bd25e172cb6cc6aa5ce3388f01b475510a63650f817aa80e6ed8efa56bc44a8c9aff48661c574c474ab0677a922197b0d180533be2bf65879adcb519ecc071258a0aad844f888737e194f33e384"}}, {0xac, &(0x7f0000000e00)=@string={0xac, 0x3, "b36174fce3c5e260f0654488e2c99d758cb739432330adb39796d3d635e0d9af807972b9f76f281721f2a8efb893e17e67802293c77b590b6aebe8ba903eba73830890a692b5f245c8715ac7322eca031c384440e6a787cc19a992866d1d1e7e41a3cf978c2d9d91763c615b54761b80b1f1a344060500535241b6fc696ffe1de75336c7ed4b8da8c89ce5f44f60cd0b38eb34f8575f8cc045de8af61e86792d0c2c0f8f5a53769d0cea"}}]}) syz_usb_control_io$hid(r8, &(0x7f0000001140)={0x24, &(0x7f0000000f80)={0x20, 0xf31d9f42681bdf1b, 0xf0, {0xf0, 0x22, "a6018347680699cc8cb6ca805e3948f0521c6921d74cbd8b132839338f0207c8a367e9ca17525b7dd859d231107941bfe6048bbc77465ee2b2c90cc102d0529b75d04190309abbbebd2c14c75425c00461433e9b3c791990ec14e28a993ea4b10621c8e1513166708e6a9dcd6bb2ac2a14747e39656dc930ffb98b233378b9faf4f2cb4fdc5b9555226c539b202ada4a2a20509e187a26a201963e0aa4a055c71cb750f76485a579a602a082fd3c13651dc6596e66df565a84abe1fe782379f4c77f611f6c0e9184afcc0e0db73e8e27f6d50698ef2614e59d3831616dd29612a7dcc6a600de9f855e20fc6fc402"}}, &(0x7f0000001080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3801}}, &(0x7f00000010c0)={0x0, 0x22, 0xc, {[@local=@item_4={0x3, 0x2, 0x8, "19f7af88"}, @global=@item_012={0x1, 0x1, 0x9, '\"'}, @local=@item_4={0x3, 0x2, 0x3, "9e99184e"}]}}, &(0x7f0000001100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x6, 0x1, {0x22, 0x4fb}}}}, &(0x7f0000001340)={0x2c, &(0x7f0000001180)={0x0, 0x16, 0x93, "88f68a1596d1067cee3899f16dca0460f4e0f286cdce2fa1710c13ef47c7718a28d2e3fbdc15db4bb754e4d18d72303a6cfacf19939560f6afea78d5d8932be452de48d3e35bcf439082973f982bf526573338ef85168501064a6bf9b59f8ede96ea6dea530d5e462963595279ef2286c6799ffa09e4dea9e655c6831cbfe99dd6af53199410ea9bfd9f09efdf510f52f3d3f8"}, &(0x7f0000001240)={0x0, 0xa, 0x1}, &(0x7f0000001280)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000012c0)={0x20, 0x1, 0x3, "261977"}, &(0x7f0000001300)={0x20, 0x3, 0x1, 0x5}}) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000300)="02") 3.090999593s ago: executing program 2 (id=5280): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x4048881) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) syz_emit_vhci(0x0, 0x22) socket$inet(0x2, 0xa, 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x3f) 2.478712512s ago: executing program 2 (id=5281): ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1e, 0x305, 0x81ff, 0x25dfdbfe}, 0x14}, 0x1, 0x8000000, 0x0, 0x400c880}, 0x0) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16a", 0x5, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) (fail_nth: 5) 2.208359826s ago: executing program 2 (id=5282): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bde5a44070275290f515010203010902120001000000000904"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) syz_usb_connect(0x6, 0xc34, &(0x7f0000000900)={{0x12, 0x1, 0x300, 0xc3, 0x9, 0x54, 0x8, 0xa07, 0xd0, 0x86e4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc22, 0x4, 0x81, 0xb6, 0x10, 0x56, "", [{{0x9, 0x4, 0x65, 0xd, 0xd, 0x9c, 0xfc, 0xcc, 0x7, [@uac_control={{0xa, 0x24, 0x1, 0x0, 0x26}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x404, 0x3, 0x4}, @extension_unit={0xa, 0x24, 0x8, 0x6, 0x4, 0x6, "3d3be2"}, @selector_unit={0x9, 0x24, 0x5, 0x2, 0x5, "f310be2a"}]}, @hid_hid={0x9, 0x21, 0x9, 0x3, 0x1, {0x22, 0xf54}}], [{{0x9, 0x5, 0xb, 0x0, 0x200, 0x8, 0xa3, 0x4, [@generic={0x46, 0x9, "e9106a9594121c8723d48276ffe23a593994dbbdba872d5a4b6d56943190b7db4e308ab2622abfa64ff2602ed83fa5224500f96ec6a7440923c1cd91d6ae2adfc153905c"}, @uac_iso={0x7, 0x25, 0x1, 0xc}]}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0x5, 0x7, 0x1}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0x40, 0x15, 0x9, [@generic={0x84, 0x2, "beff54a1ca547151f1d9c7609cf3e0b30e254498c33f52dc43b211a23eca8e76ceea7c85abfd7816b8f0e24e723f52b552a0b4edf0c1e23386dba792532a429d1da2a66e8e09ffa8746d4c2aa0ba1d110cbebc29861b60172a0f191011eb2fcaf3d8fd220d81e64a297c92f388ad23b2a7944c8c01aa12103c2795195efcbe9c95f0"}]}}, {{0x9, 0x5, 0x7, 0xb, 0x40, 0x1, 0x3, 0x7}}, {{0x9, 0x5, 0x2, 0x2, 0x400, 0xf8, 0x4, 0x7}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x80, 0x12, 0xc}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x3, 0x2, 0x1}}, {{0x9, 0x5, 0xa, 0x2, 0x40, 0xf7, 0x0, 0x5, [@generic={0x74, 0x21, "e99d0524395fa9afa7537c9ef53b1f4803ca5ec50c87cd08b53accde039291878183fb711903401be84b636f0758a1433f1bc71971aff9a0391dc21f70b9137684bcc1298501e6a17b7324860c003058fe4c80d6635c4e6b92e321034ce6bf9bf95b97dc509b9b4046f720ee689f027c1a21"}, @generic={0x56, 0xed2a9dabfb6c9c4, "99062d920d661648bfe363763b20704224c515a9f3f3c20f7eca7cc1fd404976dfdcc42ece4593b93c797381bf66f5461d83bceeaaba27c260c9314ac4f0c9d3c4acf1898039494b8b5a0a6c8c459d9334cf0ef9"}]}}, {{0x9, 0x5, 0x88, 0x0, 0x10, 0x80, 0x8, 0x7}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0xe0, 0xc, 0x0, [@generic={0x41, 0x31, "fcfde714fc1e1abc10b62a4007e946aea03daa88486ed542fac6bacd958d3a3d3d3668f59523f22aec5d097339f21560753012f7dd05fa8baba60bade41991"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x400, 0x4f, 0xe5, 0x7, [@generic={0xc4, 0xc, "2e158c04cffac0fec31647a21e524613b3bc619849a2578d4e42a89c7ba0e5c2255fc84dffea5c871b0459482d415256d269cafb34eb6a65591a7c6059a3e3f09aeaa8b6bcfb1c6e6f34929a2abde244c90370ac68033ba9abca91d33141d14ca8a4faf2e3112d2bccd615e170a91a8e7767c1df0dda999a176ab5d87924ca94f8000bfe6e39a7fa112ac8efb0f95b4a61fe6f201b2d11eb2798a02b399e830ca67700109af742dff7b23ce084ca10caca4fcfbe030d85f3744202b871d7f61da699"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x3ff, 0x6, 0xab, 0x9}}, {{0x9, 0x5, 0x5, 0x1, 0x0, 0x1, 0x10, 0x5, [@generic={0x23, 0x9, "12f0a35e73e6dcd67ed960469fc586a40917821d33cf5a19a30e073c38be4739c4"}]}}]}}, {{0x9, 0x4, 0x5e, 0xbc, 0x5, 0x2d, 0x1e, 0x2e, 0x81, [@uac_as={[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x9, 0x4, 0xd8, 0x3, "9c0141", "7dc6"}, @as_header={0x7, 0x24, 0x1, 0xe2, 0x1, 0x1}, @as_header={0x7, 0x24, 0x1, 0x6, 0x0, 0x2}]}], [{{0x9, 0x5, 0xc, 0x1, 0x460, 0x10, 0x8a, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x36, 0x4}]}}, {{0x9, 0x5, 0xc, 0x3, 0x3ff, 0x1, 0x9, 0xde}}, {{0x9, 0x5, 0x80, 0x3, 0x3ff, 0x1, 0x73, 0x80}}, {{0x9, 0x5, 0xa, 0x2, 0x3ff, 0x5, 0x8, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x254201bf714b3607, 0x0, 0x200}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x10}]}}, {{0x9, 0x5, 0x5, 0x10, 0x20, 0x2, 0x6, 0x5}}]}}, {{0x9, 0x4, 0xbb, 0x8, 0xb, 0x19, 0x3d, 0x2a, 0x9, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "e3a360"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x10, 0x9, 0x7}, {0x6, 0x24, 0x1a, 0x5}, [@mbim={0xc, 0x24, 0x1b, 0x3ff, 0x5, 0x3, 0x7, 0x1, 0x81}, @mbim={0xc, 0x24, 0x1b, 0x73, 0x2, 0x3, 0x2, 0x3, 0x5}, @network_terminal={0x7, 0x24, 0xa, 0x9, 0x6, 0xd0, 0x4}, @network_terminal={0x7, 0x24, 0xa, 0x10, 0x0, 0x1, 0x9}, @mbim={0xc, 0x24, 0x1b, 0x6, 0x5, 0x4, 0x0, 0x7, 0x5}]}], [{{0x9, 0x5, 0x6, 0x10, 0x8, 0x5, 0xf, 0x3, [@generic={0x18, 0xa, "2c85a8a7372f7b320c7021fca50972acdf719bc7a85e"}, @uac_iso={0x7, 0x25, 0x1, 0x18, 0x8}]}}, {{0x9, 0x5, 0xe, 0x2, 0x200, 0xaf, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x1}]}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0x5, 0xe, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xf5, 0x200}, @generic={0x88, 0x21, "8f1d4e92892ed3b6ed528a103a6483a6d3f1f9e5c804759290f870d8df68bf2492625bdbc9a1c64219eb2f126183ee06652e0c263f0cd4d4e3e1ecc29c66835d7710410fe5a109747fd323af35170aebf175cffc56e73818f146da210bf855d9d7688656cf21451480cc873a8dd80c7cb46a45891abc7dc2d80c17da745668dcdfbd21f8816f"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x200, 0x72, 0x80, 0xc, [@generic={0x58, 0x7, "81c8873b8c85e39e68c048c2cf768c2c8fa2bc1e64e8b84fd367bd303ca93f45e29c6aea8ebb81cc6d390fb478e4c7e44131112bc2dfcd6b66f36581880dd7563d8053a535052296ba68959a80c1015584bccdf3a475"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x200, 0x6, 0x4, 0x1a}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x2, 0x4, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xff, 0x1}]}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0xb, 0x8, 0x1}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x2, 0xc1, 0x9}}, {{0x9, 0x5, 0x1, 0x10, 0x8, 0x5d, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x65}]}}, {{0x9, 0x5, 0xe, 0xc, 0x10, 0xcd, 0xe, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0x9fc}, @generic={0x7, 0xd515f7d43e3750d5, "d1fd2327c2"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x40, 0x0, 0x2, 0xc9, [@generic={0xf1, 0x30, "e3031bf5fa0efc383fd79cf10df3e4f3e127ada28908cb4fd8d5c00f5dfdbdaef416bc2ed0cff2599e89bc4ae0c11fc3ae491087839dbaae7eab8a9ce818228d39ea8cd706ee61972342de840a543226399f43e4564abe5afc6fe13c38ff3130593b2d6736cb74004d9458e93682f47bfaa79889827343078bb3db8a2cb27ee6253f8a6e9f71c8ccb3f615ee5a47de0dd090000113f41f5d7b1425295e9b701ae01ef8143846efcadf55a857fb248ff163e2ae16ee25a875688fbb0dea6ef8f215ed9bad9eff5ec562a7bbe3be4abdb9f29bd0a0e5ec228b96421be7aad20f91378156c2da745a7eecaffe4ebf3de7"}]}}]}}, {{0x9, 0x4, 0x54, 0xbd, 0xf, 0xd4, 0x8d, 0xd1, 0xa9, [@hid_hid={0x9, 0x21, 0x3, 0x1, 0x1, {0x22, 0xd64}}, @cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, "93"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x6, 0x7ff, 0x2}, [@mdlm={0x15}, @mbim={0xc, 0x24, 0x1b, 0x3, 0xd, 0xf8, 0x1, 0x2, 0x7}, @ncm={0x6, 0x24, 0x1a, 0x9, 0xc}]}], [{{0x9, 0x5, 0x5, 0x8, 0x20, 0xf, 0x2c, 0x80}}, {{0x9, 0x5, 0x9, 0x8, 0x3ff, 0x7, 0x1, 0x6}}, {{0x9, 0x5, 0x80, 0x4, 0x3ff, 0xd1, 0x5, 0x3}}, {{0x9, 0x5, 0x3, 0x0, 0x0, 0xa4, 0x6e, 0x2, [@generic={0xcc, 0x22, "cc696990ce2a69d19511b1316202102cc5a5289f44e0b990665fedc9bde6bcc7032015e3720026f09b585f25262ce59968b4df448708663bfe0d8a566684e92279a515496288d91f327aaf6c33f32bbd7807ad8586cb9164d53efb3f98ea278f7fb1c640eef433606a3fe66ea9aa155d708f46fafd2f10afa327a8404a76cd14b91dc929fe44591e15896a0889882be6147481dd98ffca920c2cf7be09644f8dbd83d6757d677135e70d627a91b86bcdb3ff732ae07bcd31faddfb90370075c51202ad27e45b8fd643b9"}, @generic={0x5b, 0xa, "c0a45a9bc418bb82c57d35fb469d290c0e347bea6f8d839f6a1e36fc36b44a2f19a0c3ffe96c027f004339a3e342f766344b75d62243056466c2f999e0d3b6c188c60be250932f3082cb1181fb25650b94f37f9a89108b8aef"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x10, 0x10, 0x7f, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x47}, @generic={0x6a, 0xf, "ec612b7135c9df2313264abfe51e080bda512d507691b53d0f6de075c8a19475af0e6d59a1cd79a6912eaa1d3d2e61ee7b0f06934f47b7eef1e8b4efd031619675d389acc37ac0a78dc06ed593158c7d8fa84c8beae4d2f4b554464e802ac0cfebc2f06055b1b945"}]}}, {{0x9, 0x5, 0x5, 0x3, 0x200, 0x2, 0x81, 0x6, [@generic={0x75, 0xd, "1095e7fb8245ebebe966f1bcd03a83da787c2c986dc692e9e45811ae45067d162b27aff78e87264dfbc70e87eff356eca3d5a1c2d50020b4a9e865d3277c0d42e447743cbf993aea0922e6a6872ec5457c576850a94e6114992ed888b5381db4ab0f6bbcffb72af2b1fbdae1d2ae72d3231aa4"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xc1, 0x9}]}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x8, 0x3, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x3}, @generic={0x4, 0x30, "03c5"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x20, 0x0, 0xea, 0xd4, [@generic={0xe8, 0x30, "64dd9b4f16e6c01f700555e1eed98de5116c79a15b2ec15f3c2f79afc760eac7be55c405f6ca85e9796f561f4989a1795f23a47f58ba69535a9bd8c933b51492e349df97e0f07365b28a0b8c4097b517a1ecc2fa3cae0aa98b9e5241cd098010c89600ee95a47a4f6e002155edf9433d2ae59d48cdcdb5d479b06a46f14cfb42b20bb380c2ef2513829bdb08b57b57588e52632233029fc8d33fdf4539706c6c04ee5be27c3702781cdca56a5446476e3ed9471b29b40b40953c52ba2ef00984c54e624bf1ab0ac7ebaa42365eef70a7d4ee9a725bf89ac53909d714527430968490670dcea5"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x401}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x9, 0x0, 0x5, [@generic={0x6a, 0x10, "e61098f6cb13735af4b161c110a7f41d6b987b50bbf820eb3ad8807749633a16e3dfb85e348eeba03427a54653372d908e1e7a0495bda319cb5ad050c8176cd0a3cfafda0dd6267ec6bd57921b0db0fbaaa30c9cefc0590beddb7f5358996252eced0109d8242667"}]}}, {{0x9, 0x5, 0x6, 0x4, 0x3ff, 0x4, 0x0, 0x9, [@generic={0x72, 0x10, "fe66d75b2ed39c2513420ec6c45b0230e1eaddef042277962b8fe27a98e05513be2e273cc3807f746c60ec16f8b1ac0544389f74607a53129a7f1391ee529d4eaa959f1adc858726984b3aa683d7036370ef8d6cffb4b4a920b5b1029ee822717b98564e5c5e3e091d07ea9a2d4f2c53"}]}}, {{0x9, 0x5, 0x98400597c790ee73, 0x8, 0x20, 0x5, 0x8, 0xd}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x2, 0x6, 0x9, [@generic={0x86, 0x24, "bee6049e853e6bb11c6b687259f32fb11bf0c1ce6c4dbe7d5d94ec794fc7daf47eb6cf4a8760c20b8ed45b44845f02b86068ccc7f0819c758e7a68fbc8a5bf9d9c0b12b79fffb45adf5fa8c14ee2596a8511860930bd22793be3486bca801d9a542a8a042a9cfcdc1c36dcd80fb559ff7d804feaff45f11bbad3567480c265ae0ae838de"}, @generic={0x1c, 0xa, "9f97bba1d119c7d47b7c16f5ab6a28d276b421553c167dd47f60"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0x9, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x80, 0x4}]}}, {{0x9, 0x5, 0xc, 0x3, 0x3ff, 0x4, 0x1, 0x8}}, {{0x9, 0x5, 0x5, 0xf, 0x200, 0xc, 0xff, 0x1}}]}}]}}]}}, &(0x7f0000001940)={0xa, &(0x7f0000001540)={0xa, 0x6, 0x250, 0x8, 0x7, 0x3, 0xff, 0xf}, 0x1c, &(0x7f0000001580)={0x5, 0xf, 0x1c, 0x2, [@ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x7fffff5, 0x1e00f, 0x50, [0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x4, 0x6, 0x200}]}, 0x6, [{0x57, &(0x7f00000015c0)=@string={0x57, 0x3, "fad926d872da5c5cd94e982888ffbaa879fa4efe92253e6fba00a23089f2ae83cc2dd115aceb496d5a4ce59c55e9ea4a75f31169cbab744ec88f5b6d548dba7f351813595cc5193a18422f1c5367c4435f248ed4bf"}}, {0xd5, &(0x7f0000001640)=@string={0xd5, 0x3, "fa4c77cfee3f0b99a26be245aaf0bd961b57210220715462d933fd9d2ce40e7fea23bbac61c79370065ef36b59e51b7e40988399672f1a2d7d81008b4be88ec87eb2df3b99c6e6763f0acb581b7c1c95409751ea6540c20a36c485bc2bfcbac09bc2e0ceddd4507a95e6b5f1421f9d0a33da61c16e8d8ec1219b01922a77de4e6d13912ce13bb5744c3e842f79fc586fb7d7d63dc6e4953c2fd1fb52cddda71875ff2f1971e50db01858f009b13fdab9c1c27008be7cff7a9b8c867dc3943b6bd14ef504b5da141991099f643f0644357cb825"}}, {0x5f, &(0x7f0000001740)=@string={0x5f, 0x3, "e2f26ae802c742d9adfb92487c87840a7c1178d187011bfc65af6850a4190d2d35dbf78a772a0ec04bba6b9bf4a89aac0aadcff62684fef6edda607a888a22cea93f0bbaffdcf9d464dea9203d6dffe62a20375dd84f3fc71ecebd8530"}}, {0x4, &(0x7f00000017c0)=@lang_id={0x4, 0x3, 0x8afcc9a9ed183d71}}, {0xd9, &(0x7f0000001800)=@string={0xd9, 0x3, "d9939e3fbf0ff1909fbf34d825570461b5ac3bd82a1e9627ab1a90bcbcd5f92797e89eefc5130da0974eaf003b4b89c023b393003d18aa517f38ce6ae69a0e267cdd952f358477e22bbdee00e5826db7257b8c42f0a0fe87908e8a683f7da2ef324344a92b86805280cd6d4628c20618a7edb508a825681cf1ada93242dfcbf018a4f4b5959bb6f8dbde91aaeca471029aa21ed088f8db44f9333b7114b37dfff9937f9ac15fd08508a4df95be8bf0a0462ca9369b7e1eea82fb084267c1417eec52b39a8fdb9ff23406a8b553e75078a7e9d4b926446e"}}, {0x4, &(0x7f0000001900)=@lang_id={0x4, 0x3, 0x413}}]}) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='md0\n', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='2\n', 0x2) 1.592350122s ago: executing program 4 (id=5283): ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1e, 0x305, 0x81ff, 0x25dfdbfe}, 0x14}, 0x1, 0x8000000, 0x0, 0x400c880}, 0x0) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16a", 0x5, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x300) 1.414879451s ago: executing program 4 (id=5284): r0 = syz_open_dev$vim2m(&(0x7f0000000240), 0xf5, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f00000002c0)=0x1) 1.400446124s ago: executing program 4 (id=5285): syz_usb_connect(0x2, 0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000094d9d4084e080110aeed010203010902220001000000000904000001437b6a000905000000000000000705", @ANYRES16], 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x107c00) 1.320811786s ago: executing program 0 (id=5286): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0xe01, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000400)={0x1, 0x0, [{0x400000f1, 0x0, 0x6}]}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000300), 0x8) getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000000340)=0x1, &(0x7f0000000380)=0x4) r6 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r6, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/81, 0xffe8}, {&(0x7f0000000440)=""/126}, {&(0x7f00000004c0)=""/244}], 0x1}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000010a0101000000000000080000000003c021a95495a0a63c0c0004c6"], 0x20}}, 0x40010) 1.254964666s ago: executing program 1 (id=5287): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000001f80)=ANY=[@ANYBLOB="1201100395e341203c41c2814bc90102030109021b00020e06d003090408d8008effff080904000500ff"], &(0x7f0000001fc0)={0x0, 0x0, 0x0, 0x0}) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r1, 0x0, 0x15, &(0x7f0000000000)=0x100, 0x4) syz_usb_control_io$sierra_net(r0, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x4fe4d5d32e278695, 0x24, 0x63, {0x63, 0x23, "7ca183d5260230b40f498bf9302ad7b830f4e24e7dc2d178f698d350251dc6cd8bbcc1f175670d7072fb0dc5323b32398385644ff59f6b642e44fa68e189b55cd5b1c75c3320ad95e0b73539fd2c016f7212ea6f660b5ed0fa3ac3766455632d21"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x414}}}, &(0x7f00000006c0)={0x1c, &(0x7f0000000140)={0x40, 0x1c, 0xc5, "57d3fad106ea18b62bae038d2d4259ef92385a7a00ed19abc809d996507b790913e016cd1ff2900c1db5239d0bd8f1269521b02c79bd7c5f494a7887b6768f77679eb150023cd5ba6b9d83cc6fc124e27bc72a800b4308b7ff15f64f75600c1859f37cc516387c981fd37e8a321beef063e453dc23bb9cb511211b0f984ed7246ac72bf684ab77c5cc0ad8a22023d04573d4e186d1045c183289d5d2147b05a2b8b556892af3920369142a454ce0d8f92c67eaa0259491f123feab14cefd0e220a52253cfe"}, &(0x7f0000000240)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000680)={0x21, 0x0, 0x3, "44751d"}}) 1.139256981s ago: executing program 0 (id=5288): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) readv(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x89f6, &(0x7f0000000300)={'bridge0\x00', &(0x7f0000000340)=@ethtool_regs={0x4, 0x0, 0xb, "2a161d2d71db37f20a8f15"}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/usb/devices/usb1/bConfigurationValue\x00', 0x2, 0x15d) write(r2, 0x0, 0x0) openat$panthor(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000004c0)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x18003, 0x0) fdatasync(r5) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$video(0x0, 0xa7, 0x0) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="040ed5000410"], 0x11) listen(0xffffffffffffffff, 0xc) syz_genetlink_get_family_id$mptcp(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) 811.382238ms ago: executing program 2 (id=5289): syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0xd3, 0xc9, "8e502a", 'k]W', "c376e3", "f3ec0c", 0x0, 0x7, 0x28, 0x0, 0x27, 0x7, 0xf0, 0x14, 0x3ff, 0x5}}}}, 0x20) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000598000/0x1000)=nil, 0x1000, 0x1}) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc9, 0xff}}}, 0x8) 617.648409ms ago: executing program 0 (id=5290): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f00000001c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000080) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xa0}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000600)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000640)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r10, 0xc0485510, 0x0) r11 = dup(r9) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000cc0)={0x24, &(0x7f0000000a40)={0x0, 0xb, 0xc0, {0xc0, 0x8, "b13260c62116a25adc0ef713266cc7b48eca5cedde4fb9e915b13d1b3858564f187504a8c6385e78a68915a90f5302bfd9533b3c6697112fa3e4efea6c697bff551af9da9b243e43d0d9ca20bf85f6816d594fb70bfd4cbd7042ad30f226722dfd67d69d032552abe137f16921153a027d56b8c12a7c0b37767ab92abce57756c7ebbcbc0311eaad47bce79e713b6d51dc916e573df3ac3926b8b5038657d68f2274e5aae0342087d0085bbd10f7a413594963397e21bd635bc320ad4327"}}, &(0x7f0000000b40)={0x0, 0x3, 0xfa, @string={0xfa, 0x3, "258126f0a709f388cb6392b15d1adb9d3bfdd804c325c1950f4a8653df86e609749cb2d480ede05b82f9c53c1a5c2372cab97b42f215a1707410ad1fcecdaaa471badeb1ac10f67528af5de3e8530733ffb5684a636f3b8ad1152dead0f5ac313a39d02165961948d0158334e1ae7a96bd05612c9423af67982f7d4f6624efbab9ef20d380c1a0d516f3cb43887f073f06463afca6a7060b3fe437bdb50f9c7c304778598f09aa5568d7f55cdf985ae36a93ef3297a10c4d742942f8328cd56c891fd9a404db002aed078194726a6e053a22d80f2a4fd2b3d1c6ed128f915242bd33941f81b34dd9e3aa238e1a14bb295e2e9caa954298ed"}}, &(0x7f0000000c40)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xa, "7d121ef4"}]}}, &(0x7f0000000c80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x6, 0x1, {0x22, 0x357}}}}, &(0x7f0000000f00)={0x2c, &(0x7f0000000d00)={0x0, 0x13, 0x75, "6e23be1ffe49cafa86d3bdc37284ca5b28af48502ed0a05a2b2abdb3aceccb1497f4c0806c9d9b7e59b0d4d04a50dfd07fe0f52b5c66684d1cef662f8c79daf5782b1f397e2f95be23701140e4cce9d57cddcfda6e298a855068dde6a675bc9d1be553970c7535595aed6d81343770bac28cbf50a6"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000e00)={0x20, 0x1, 0xa0, "31abacec4b806c895b8000616e4147c68ec02d4575549c02aaa3f167d820b7b55cc72c02d186c711d321300848e9caeb96568280ea8c6449a15f611cdf031af37257bd6e7fe8e00a4dba805190c4607ecc091c508b82ea582d8381478ccc33020eb62f10cba589e57a64332bf48dd81e9db91ede44e90a88b296c29aad6b482b7e52bba7b0430bc6a0ec5eb694db742385a0a08aa948a26e52b9eae3f8b8a30d"}, &(0x7f0000000ec0)={0x20, 0x3, 0x1, 0x1}}) syz_ublk_setup_queues(r11, r8, &(0x7f0000000680)={0x0, 0xbd, 0x20, 0x1, 0x7f, 0x0, r11}, &(0x7f0000000700)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8000e308, 0x42, 0x1000003, 0x162, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e8, 0x2000, 0x4003bfff, 0x69, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe7d, 0x8000, 0x1, 0x26d}}], 0x1, 0x0, 0x0) r12 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x38, r12, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x38}}, 0x0) 139.262674ms ago: executing program 4 (id=5291): syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (fail_nth: 6) 138.939699ms ago: executing program 2 (id=5292): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="638e2abd7000fedbdf250d00000005001a00b30000000500170025000000050018000400000006000a000300000005001900400000000600080000000000050007001900000078556af1a50df3bf5ef826849a1808cfc2517832ae781eab6294628b3c59a46009c5c558"], 0x4c}, 0x1, 0x0, 0x0, 0x404c044}, 0x4000) r2 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000a80)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="401096000000960d7000dbbd19eca273acedcd94545eddd401ca1d5d7b4e330009b2d1644c093876b1a80b3664108bf422e4f47574e7a293cf4b5913d3808481c2ffb7383028eb27050b00bff0177d78109fe4f783d27d7483f2d803d5334f44234ce9c76ddffa3810ffe97dc95903bcbc03f8abb049af36334b2eb1bb0c1490893fdd39cc7f48e001349fc42e4bec59be3c51d07e276ed371483cc4"], &(0x7f00000004c0)=ANY=[@ANYBLOB="0003be270cf4d47a6090f99aefeb67ce6e0522bc061bfa1e1e5bef5da0e92f2c7c85f6c658fe8e48a2a5c4f3e81106e2b144d2506b82c4283700c6c9"], &(0x7f0000000380)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "3af4ce5731634a2a6f137cc292dc3e3a"}]}}, &(0x7f0000000440)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x10, 0x30, 0x7, "64bc6a83", "44cec7f7"}}, &(0x7f0000000480)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x18, 0x4, 0x2a, 0x5, 0xe58, 0x6}}}, &(0x7f0000000900)={0x84, &(0x7f0000000500)=ANY=[@ANYBLOB="00000f0000004d7c6a6a69d9e1aa5e8f04c93fd942"], &(0x7f0000000540)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000000340)=ANY=[@ANYBLOB="20000400000039d700000800"], &(0x7f0000000640)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000680)={0x40, 0x9, 0x1, 0xf9}, &(0x7f00000006c0)={0x40, 0xb, 0x2}, &(0x7f0000000700)={0x40, 0xf, 0x2}, &(0x7f0000000740)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000780)={0x40, 0x17, 0x6}, &(0x7f00000007c0)={0x40, 0x19, 0x2, "deb2"}, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0x84}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0xf}}) 55.215833ms ago: executing program 4 (id=5293): ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000280)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f00000002c0)=0x1) 0s ago: executing program 4 (id=5294): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x2, 0x70bd28, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r3 = fsopen(&(0x7f00000002c0)='proc\x00', 0x1) r4 = landlock_create_ruleset(&(0x7f0000000300)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r4, 0xa) (async) landlock_restrict_self(r4, 0xa) capset(&(0x7f00000008c0)={0x20080522}, &(0x7f0000000900)={0x0, 0x0, 0x8}) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b19, &(0x7f0000000600)={'wlan1\x00', @random="0100eb00"}) (async) ioctl$SIOCSIFHWADDR(r5, 0x8b19, &(0x7f0000000600)={'wlan1\x00', @random="0100eb00"}) fsmount(r3, 0x0, 0xf) (async) fsmount(r3, 0x0, 0xf) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000940)={0x6851, 0xe3, 0x7f}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) (async) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r7, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt/events/cdns3/cdns3_ep0_queue/inject\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./mnt\x00', &(0x7f00000001c0)='tracefs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000180)='./mnt\x00', &(0x7f00000001c0)='tracefs\x00', 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x4c, 0x2, 0x6, 0x605, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={0x40, 0x9, 0x6, 0x605, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}]}]}, 0x40}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000030605000000000000000000010000040500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) r10 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./mnt/events/cdns3/cdns3_ep0_queue/inject\x00', 0x1, 0x0) write(r10, &(0x7f0000000280)='dir', 0x3) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) (async) r11 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r11, 0xc0d05604, &(0x7f0000000500)={0xd, @meta={0x4531434d, 0xdaf945c, 0x248f, 0x7e73, 0x34db2622}}) getsockname$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) (async) getsockname$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) socket$can_j1939(0x1d, 0x2, 0x7) kernel console output (not intermixed with test programs): 75431][T20918] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1259.675463][T20918] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1259.675500][T20918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1259.752790][T12139] usb 3-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1259.811849][T12139] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1259.811878][T12139] usb 3-1: Product: syz [ 1259.811894][T12139] usb 3-1: Manufacturer: syz [ 1259.811908][T12139] usb 3-1: SerialNumber: syz [ 1259.842792][T12139] usb 3-1: config 0 descriptor?? [ 1260.048198][T12139] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1260.096383][T22046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1260.096991][T22046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1260.118617][T20918] iforce 5-1:1.0: usb_submit_urb failed: -32 [ 1260.125742][T20918] iforce 5-1:1.0: usb_submit_urb failed: -32 [ 1260.126528][T20918] iforce 5-1:1.0: usb_submit_urb failed: -32 [ 1260.127148][T20918] iforce 5-1:1.0: usb_submit_urb failed: -32 [ 1260.330710][T20918] iforce 5-1:1.0: usb_submit_urb failed: -32 [ 1260.331401][T20918] iforce 5-1:1.0: usb_submit_urb failed: -32 [ 1260.332101][T20918] iforce 5-1:1.0: usb_submit_urb failed: -32 [ 1260.332777][T20918] iforce 5-1:1.0: usb_submit_urb failed: -32 [ 1260.359516][T20920] tipc: Node number set to 2886997162 [ 1260.500878][ T5696] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1260.536476][T20918] iforce 5-1:1.0: usb_submit_urb failed: -71 [ 1260.536932][T20918] iforce 5-1:1.0: usb_submit_urb failed: -71 [ 1260.537415][T20918] iforce 5-1:1.0: usb_submit_urb failed: -71 [ 1260.538159][T20918] iforce 5-1:1.0: usb_submit_urb failed: -71 [ 1260.538628][T20918] iforce 5-1:1.0: usb_submit_urb failed: -71 [ 1260.539095][T20918] iforce 5-1:1.0: usb_submit_urb failed: -71 [ 1260.539971][T20918] iforce 5-1:1.0: usb_submit_urb failed: -71 [ 1260.540519][T20918] iforce 5-1:1.0: usb_submit_urb failed: -71 [ 1260.540943][T20918] iforce 5-1:1.0: usb_submit_urb failed: -71 [ 1260.541418][T20918] iforce 5-1:1.0: usb_submit_urb failed: -71 [ 1260.541461][T20918] input input776: Timeout waiting for response from device. [ 1260.546081][T20918] usb 5-1: USB disconnect, device number 6 [ 1260.690256][ T5696] usb 1-1: New USB device found: idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1260.694090][ T5696] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.694113][ T5696] usb 1-1: Product: syz [ 1260.694164][ T5696] usb 1-1: Manufacturer: syz [ 1260.694180][ T5696] usb 1-1: SerialNumber: syz [ 1260.696550][ T5696] usb 1-1: config 0 descriptor?? [ 1260.737639][ T5696] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1260.908137][T22064] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1260.984525][ T5696] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 1260.984548][ T5696] sq905c 1-1:0.0: Get version command failed [ 1260.984666][ T5696] sq905c 1-1:0.0: probe with driver sq905c failed with error -71 [ 1260.988234][ T5696] usb 1-1: USB disconnect, device number 83 [ 1261.449496][T20918] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 1261.469285][T12139] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1261.480863][ T1241] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1261.482515][T12139] usb 3-1: USB disconnect, device number 117 [ 1261.600491][T20918] usb 2-1: New USB device found: idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1261.601862][T20918] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1261.601895][T20918] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1261.604484][T20918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.604508][T20918] usb 2-1: Product: syz [ 1261.604523][T20918] usb 2-1: Manufacturer: syz [ 1261.604539][T20918] usb 2-1: SerialNumber: syz [ 1261.610255][T20918] usb 2-1: config 0 descriptor?? [ 1261.640353][ T1241] usb 5-1: Using ep0 maxpacket: 16 [ 1261.649188][ T1241] usb 5-1: New USB device found: idVendor=046d, idProduct=c53a, bcdDevice=0.00 [ 1261.663679][ T1241] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1261.663736][ T1241] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1261.663763][ T1241] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1261.663784][ T1241] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1261.663809][ T1241] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1261.663844][ T1241] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1261.666801][ T1241] usb 5-1: config 0 descriptor?? [ 1261.779702][T11076] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1261.894339][T20918] usb 2-1: USB disconnect, device number 16 [ 1262.116575][ T1241] logitech-djreceiver 0003:046D:C53A.0021: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.4-1/input0 [ 1262.437032][T22095] FAULT_INJECTION: forcing a failure. [ 1262.437032][T22095] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1262.437057][T22095] CPU: 0 UID: 0 PID: 22095 Comm: syz.1.5136 Tainted: G L syzkaller #0 PREEMPT(full) [ 1262.437075][T22095] Tainted: [L]=SOFTLOCKUP [ 1262.437080][T22095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1262.437087][T22095] Call Trace: [ 1262.437093][T22095] [ 1262.437098][T22095] dump_stack_lvl+0xe8/0x150 [ 1262.437117][T22095] should_fail_ex+0x3eb/0x540 [ 1262.437133][T22095] _copy_to_user+0x31/0xb0 [ 1262.437146][T22095] dvb_frontend_do_ioctl+0x21a4/0x4290 [ 1262.437189][T22095] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1262.437203][T22095] ? __pfx_dvb_frontend_do_ioctl+0x10/0x10 [ 1262.437221][T22095] ? stack_trace_save+0xa9/0x100 [ 1262.437232][T22095] ? __pfx_stack_trace_save+0x10/0x10 [ 1262.437244][T22095] ? kasan_save_track+0x4f/0x80 [ 1262.437260][T22095] ? stack_depot_save_flags+0x33/0x7f0 [ 1262.437271][T22095] ? __lock_acquire+0x747/0x2de0 [ 1262.437285][T22095] ? kasan_save_track+0x4f/0x80 [ 1262.437295][T22095] ? kasan_save_track+0x3e/0x80 [ 1262.437305][T22095] ? kasan_save_free_info+0x40/0x50 [ 1262.437315][T22095] ? __kasan_slab_free+0x5c/0x80 [ 1262.437325][T22095] ? kfree+0x1c5/0x650 [ 1262.437335][T22095] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 1262.437347][T22095] ? security_file_ioctl+0xc3/0x2a0 [ 1262.437358][T22095] ? __se_sys_ioctl+0x47/0x170 [ 1262.437368][T22095] ? do_syscall_64+0x166/0x520 [ 1262.437379][T22095] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1262.437435][T22095] ? __might_fault+0xaf/0x130 [ 1262.437450][T22095] dvb_usercopy+0x199/0x2e0 [ 1262.437478][T22095] ? __pfx_dvb_frontend_do_ioctl+0x10/0x10 [ 1262.437490][T22095] ? __pfx_dvb_usercopy+0x10/0x10 [ 1262.437509][T22095] ? __fget_files+0x2a/0x420 [ 1262.437520][T22095] ? __fget_files+0x2a/0x420 [ 1262.437532][T22095] ? __pfx_dvb_frontend_ioctl+0x10/0x10 [ 1262.437544][T22095] dvb_frontend_ioctl+0x59/0x80 [ 1262.437556][T22095] __se_sys_ioctl+0xfc/0x170 [ 1262.437569][T22095] do_syscall_64+0x166/0x520 [ 1262.437579][T22095] ? trace_irq_disable+0x3b/0x140 [ 1262.437590][T22095] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1262.437601][T22095] ? clear_bhb_loop+0x70/0xc0 [ 1262.437614][T22095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1262.437626][T22095] RIP: 0033:0x7f5f09b9e1d9 [ 1262.437638][T22095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1262.437649][T22095] RSP: 002b:00007f5f0a984028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1262.437664][T22095] RAX: ffffffffffffffda RBX: 00007f5f09e25fa0 RCX: 00007f5f09b9e1d9 [ 1262.437673][T22095] RDX: 0000200000000280 RSI: 0000000080106f53 RDI: 0000000000000003 [ 1262.437682][T22095] RBP: 00007f5f0a984090 R08: 0000000000000000 R09: 0000000000000000 [ 1262.437689][T22095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1262.437697][T22095] R13: 00007f5f09e26038 R14: 00007f5f09e25fa0 R15: 00007ffef566fbe8 [ 1262.437715][T22095] [ 1262.548533][T22097] 9p: Unknown access argument 18446744073709551615: -34 [ 1262.559979][ T1241] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1262.711974][ T1241] usb 3-1: New USB device found: idVendor=046d, idProduct=c281, bcdDevice=1.00 [ 1262.713133][ T1241] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1262.713160][ T1241] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1262.713195][ T1241] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1262.763241][T22101] 9p: Bad value for 'rfdno' [ 1262.919602][T12139] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1262.999592][ T5696] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1263.073423][T12139] usb 2-1: New USB device found: idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1263.077024][T12139] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.077051][T12139] usb 2-1: Product: syz [ 1263.077065][T12139] usb 2-1: Manufacturer: syz [ 1263.077100][T12139] usb 2-1: SerialNumber: syz [ 1263.080405][T12139] usb 2-1: config 0 descriptor?? [ 1263.088321][T12139] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1263.129535][ T5696] usb 1-1: device descriptor read/64, error -71 [ 1263.151371][T22093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1263.151966][T22093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1263.154298][ T1241] iforce 3-1:1.0: usb_submit_urb failed: -32 [ 1263.155043][ T1241] iforce 3-1:1.0: usb_submit_urb failed: -32 [ 1263.155694][ T1241] iforce 3-1:1.0: usb_submit_urb failed: -32 [ 1263.292673][T22100] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1263.330479][T12139] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 1263.330498][T12139] sq905c 2-1:0.0: Get version command failed [ 1263.330578][T12139] sq905c 2-1:0.0: probe with driver sq905c failed with error -71 [ 1263.337700][T12139] usb 2-1: USB disconnect, device number 17 [ 1263.370207][ T5696] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1263.499609][ T5696] usb 1-1: device descriptor read/64, error -71 [ 1263.571953][ T1241] iforce 3-1:1.0: usb_submit_urb failed: -32 [ 1263.572709][ T1241] iforce 3-1:1.0: usb_submit_urb failed: -32 [ 1263.573229][ T1241] iforce 3-1:1.0: usb_submit_urb failed: -32 [ 1263.573747][ T1241] iforce 3-1:1.0: usb_submit_urb failed: -32 [ 1263.609904][ T5696] usb usb1-port1: attempt power cycle [ 1263.776495][ T1241] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 1263.778535][ T1241] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 1263.785724][ T1241] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 1263.792113][ T1241] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 1263.805070][ T1241] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 1263.813388][ T1241] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 1263.814380][ T1241] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 1263.814935][ T1241] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 1263.815442][ T1241] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 1263.815919][ T1241] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 1263.815968][ T1241] input input777: Timeout waiting for response from device. [ 1263.866559][ T1241] usb 3-1: USB disconnect, device number 118 [ 1263.949562][ T5696] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1263.973504][ T5696] usb 1-1: device descriptor read/8, error -71 [ 1264.028673][T20918] usb 5-1: USB disconnect, device number 7 [ 1264.169583][ T8713] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 1264.209621][ T5696] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1264.230113][ T5696] usb 1-1: device descriptor read/8, error -71 [ 1264.321123][ T8713] usb 2-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1264.324880][ T8713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1264.324909][ T8713] usb 2-1: Product: syz [ 1264.324924][ T8713] usb 2-1: Manufacturer: syz [ 1264.324937][ T8713] usb 2-1: SerialNumber: syz [ 1264.328710][ T8713] usb 2-1: config 0 descriptor?? [ 1264.367503][ T5696] usb usb1-port1: unable to enumerate USB device [ 1264.541101][ T8713] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1264.589535][T20918] usb 3-1: new full-speed USB device number 119 using dummy_hcd [ 1264.741292][T20918] usb 3-1: New USB device found: idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1264.743013][T20918] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1264.743039][T20918] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1264.745331][T20918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1264.745352][T20918] usb 3-1: Product: syz [ 1264.745361][T20918] usb 3-1: Manufacturer: syz [ 1264.745370][T20918] usb 3-1: SerialNumber: syz [ 1264.747899][T20918] usb 3-1: config 0 descriptor?? [ 1264.958700][T20918] usb 3-1: USB disconnect, device number 119 [ 1265.829882][ T5696] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1265.977373][ T8713] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1265.982225][ T5696] usb 3-1: New USB device found: idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1265.982908][ T8713] usb 2-1: USB disconnect, device number 18 [ 1265.989929][ T5696] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1265.989957][ T5696] usb 3-1: Product: syz [ 1265.989972][ T5696] usb 3-1: Manufacturer: syz [ 1265.989986][ T5696] usb 3-1: SerialNumber: syz [ 1265.997411][ T5696] usb 3-1: config 0 descriptor?? [ 1266.001808][ T5696] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1266.128519][ T994] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1266.230262][T22130] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1266.280783][ T5696] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 1266.280807][ T5696] sq905c 3-1:0.0: Get version command failed [ 1266.280890][ T5696] sq905c 3-1:0.0: probe with driver sq905c failed with error -71 [ 1266.292665][ T5696] usb 3-1: USB disconnect, device number 120 [ 1266.341845][ T994] usb 1-1: New USB device found: idVendor=046d, idProduct=c281, bcdDevice=1.00 [ 1266.385110][ T994] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1266.385146][ T994] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1266.385188][ T994] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.865273][T22138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1266.865818][T22138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1266.875457][ T994] iforce 1-1:1.0: usb_submit_urb failed: -32 [ 1266.881264][ T994] iforce 1-1:1.0: usb_submit_urb failed: -32 [ 1266.906350][ T994] iforce 1-1:1.0: usb_submit_urb failed: -32 [ 1267.019508][ T5696] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1267.188738][ T5696] usb 2-1: New USB device found: idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1267.209551][ T8713] usb 3-1: new full-speed USB device number 121 using dummy_hcd [ 1267.251288][ T5696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.251320][ T5696] usb 2-1: Product: syz [ 1267.251335][ T5696] usb 2-1: Manufacturer: syz [ 1267.251350][ T5696] usb 2-1: SerialNumber: syz [ 1267.254457][ T5696] usb 2-1: config 0 descriptor?? [ 1267.287913][ T5696] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 019 [ 1267.357697][ T994] iforce 1-1:1.0: usb_submit_urb failed: -32 [ 1267.359676][ T994] iforce 1-1:1.0: usb_submit_urb failed: -32 [ 1267.366385][ T994] iforce 1-1:1.0: usb_submit_urb failed: -32 [ 1267.366531][ T8713] usb 3-1: New USB device found: idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1267.367634][ T994] iforce 1-1:1.0: usb_submit_urb failed: -32 [ 1267.374591][ T8713] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1267.374640][ T8713] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1267.425911][ T8713] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.425939][ T8713] usb 3-1: Product: syz [ 1267.425981][ T8713] usb 3-1: Manufacturer: syz [ 1267.425996][ T8713] usb 3-1: SerialNumber: syz [ 1267.452687][ T8713] usb 3-1: config 0 descriptor?? [ 1267.469954][ T5696] (null): failure reading functionality [ 1267.507482][ T5696] i2c i2c-1: connected i2c-tiny-usb device [ 1267.650429][ T994] iforce 1-1:1.0: usb_submit_urb failed: -71 [ 1267.650932][ T994] iforce 1-1:1.0: usb_submit_urb failed: -71 [ 1267.651384][ T994] iforce 1-1:1.0: usb_submit_urb failed: -71 [ 1267.651853][ T994] iforce 1-1:1.0: usb_submit_urb failed: -71 [ 1267.652324][ T994] iforce 1-1:1.0: usb_submit_urb failed: -71 [ 1267.652783][ T994] iforce 1-1:1.0: usb_submit_urb failed: -71 [ 1267.653252][ T994] iforce 1-1:1.0: usb_submit_urb failed: -71 [ 1267.653710][ T994] iforce 1-1:1.0: usb_submit_urb failed: -71 [ 1267.654186][ T994] iforce 1-1:1.0: usb_submit_urb failed: -71 [ 1267.654657][ T994] iforce 1-1:1.0: usb_submit_urb failed: -71 [ 1267.654704][ T994] input input778: Timeout waiting for response from device. [ 1267.661134][ T994] usb 1-1: USB disconnect, device number 88 [ 1267.745346][T20920] usb 3-1: USB disconnect, device number 121 [ 1268.276028][T22155] FAULT_INJECTION: forcing a failure. [ 1268.276028][T22155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1268.276060][T22155] CPU: 1 UID: 0 PID: 22155 Comm: syz.0.5156 Tainted: G L syzkaller #0 PREEMPT(full) [ 1268.276087][T22155] Tainted: [L]=SOFTLOCKUP [ 1268.276094][T22155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1268.276106][T22155] Call Trace: [ 1268.276114][T22155] [ 1268.276123][T22155] dump_stack_lvl+0xe8/0x150 [ 1268.276151][T22155] should_fail_ex+0x3eb/0x540 [ 1268.276179][T22155] _copy_to_user+0x31/0xb0 [ 1268.276199][T22155] simple_read_from_buffer+0xe1/0x170 [ 1268.276227][T22155] proc_fail_nth_read+0x1bb/0x230 [ 1268.276251][T22155] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1268.276273][T22155] ? rw_verify_area+0x24a/0x4c0 [ 1268.276294][T22155] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1268.276312][T22155] vfs_read+0x213/0xa80 [ 1268.276337][T22155] ? __pfx___mutex_lock+0x10/0x10 [ 1268.276358][T22155] ? __pfx_vfs_read+0x10/0x10 [ 1268.276379][T22155] ? __fget_files+0x2a/0x420 [ 1268.276395][T22155] ? __fget_files+0x3a2/0x420 [ 1268.276411][T22155] ? __fget_files+0x2a/0x420 [ 1268.276433][T22155] ? fdget+0x1ac/0x250 [ 1268.276459][T22155] ksys_read+0x150/0x270 [ 1268.276481][T22155] ? __pfx_ksys_read+0x10/0x10 [ 1268.276498][T22155] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1268.276602][T22155] do_syscall_64+0x166/0x520 [ 1268.276619][T22155] ? trace_irq_disable+0x3b/0x140 [ 1268.276636][T22155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1268.276655][T22155] ? clear_bhb_loop+0x70/0xc0 [ 1268.276676][T22155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1268.276705][T22155] RIP: 0033:0x7f175995ea0e [ 1268.276725][T22155] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1268.276741][T22155] RSP: 002b:00007f175a8c2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1268.276763][T22155] RAX: ffffffffffffffda RBX: 00007f175a8c36c0 RCX: 00007f175995ea0e [ 1268.276777][T22155] RDX: 000000000000000f RSI: 00007f175a8c30a0 RDI: 0000000000000004 [ 1268.276789][T22155] RBP: 00007f175a8c3090 R08: 0000000000000000 R09: 0000000000000000 [ 1268.276801][T22155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1268.276813][T22155] R13: 00007f1759c26038 R14: 00007f1759c25fa0 R15: 00007ffc7a92f2f8 [ 1268.276847][T22155] [ 1270.012606][T22170] FAULT_INJECTION: forcing a failure. [ 1270.012606][T22170] name failslab, interval 1, probability 0, space 0, times 0 [ 1270.012641][T22170] CPU: 1 UID: 0 PID: 22170 Comm: syz.2.5160 Tainted: G L syzkaller #0 PREEMPT(full) [ 1270.012667][T22170] Tainted: [L]=SOFTLOCKUP [ 1270.012675][T22170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1270.012686][T22170] Call Trace: [ 1270.012695][T22170] [ 1270.012704][T22170] dump_stack_lvl+0xe8/0x150 [ 1270.012734][T22170] should_fail_ex+0x3eb/0x540 [ 1270.012758][T22170] should_failslab+0xa8/0x100 [ 1270.012780][T22170] __kmalloc_cache_noprof+0x9e/0x600 [ 1270.012800][T22170] ? rxrpc_alloc_data_txbuf+0x90/0x5a0 [ 1270.012895][T22170] ? rxrpc_alloc_data_txbuf+0x90/0x5a0 [ 1270.012915][T22170] ? __kasan_kmalloc+0x93/0xb0 [ 1270.012938][T22170] rxrpc_alloc_data_txbuf+0x90/0x5a0 [ 1270.012957][T22170] ? rcu_is_watching+0x16/0xb0 [ 1270.012976][T22170] ? trace_rxrpc_tq+0x85/0x210 [ 1270.013016][T22170] rxrpc_send_data+0xfe1/0x21f0 [ 1270.013075][T22170] ? __pfx_rxrpc_send_data+0x10/0x10 [ 1270.013092][T22170] ? _raw_spin_unlock_irq+0x23/0x50 [ 1270.013111][T22170] ? __pfx_default_wake_function+0x10/0x10 [ 1270.013132][T22170] ? rxrpc_new_client_call+0xf16/0x14f0 [ 1270.013183][T22170] ? trace_rxrpc_peer+0x82/0x200 [ 1270.013205][T22170] rxrpc_do_sendmsg+0x10d5/0x1280 [ 1270.013238][T22170] ? __pfx_rxrpc_do_sendmsg+0x10/0x10 [ 1270.013272][T22170] ? rxrpc_sendmsg+0x4ee/0x6b0 [ 1270.013298][T22170] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 1270.013314][T22170] sock_sendmsg_nosec+0x14e/0x190 [ 1270.013338][T22170] ____sys_sendmsg+0x54e/0x850 [ 1270.013365][T22170] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1270.013394][T22170] ? import_iovec+0x73/0xa0 [ 1270.013418][T22170] ___sys_sendmsg+0x2a5/0x360 [ 1270.013440][T22170] ? __lock_acquire+0x747/0x2de0 [ 1270.013465][T22170] ? __pfx____sys_sendmsg+0x10/0x10 [ 1270.013523][T22170] ? __fget_files+0x3a2/0x420 [ 1270.013541][T22170] ? __fget_files+0x2a/0x420 [ 1270.013570][T22170] __x64_sys_sendmsg+0x1b1/0x290 [ 1270.013592][T22170] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1270.013636][T22170] do_syscall_64+0x166/0x520 [ 1270.013654][T22170] ? trace_irq_disable+0x3b/0x140 [ 1270.013671][T22170] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1270.013690][T22170] ? clear_bhb_loop+0x70/0xc0 [ 1270.013711][T22170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1270.013730][T22170] RIP: 0033:0x7f6aef79e1d9 [ 1270.013749][T22170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1270.013766][T22170] RSP: 002b:00007f6af062d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1270.013787][T22170] RAX: ffffffffffffffda RBX: 00007f6aefa25fa0 RCX: 00007f6aef79e1d9 [ 1270.013801][T22170] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 1270.013813][T22170] RBP: 00007f6af062d090 R08: 0000000000000000 R09: 0000000000000000 [ 1270.013825][T22170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1270.013837][T22170] R13: 00007f6aefa26038 R14: 00007f6aefa25fa0 R15: 00007fff70bda4a8 [ 1270.013871][T22170] [ 1270.789662][T22109] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1270.981690][T22109] usb 3-1: New USB device found: idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1271.009971][T22109] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.010002][T22109] usb 3-1: Product: syz [ 1271.010017][T22109] usb 3-1: Manufacturer: syz [ 1271.010031][T22109] usb 3-1: SerialNumber: syz [ 1271.016822][T22109] usb 3-1: config 0 descriptor?? [ 1271.048825][T22109] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1271.086033][ T994] usb 2-1: USB disconnect, device number 19 [ 1271.238569][T22179] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1271.301302][T22109] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 1271.301328][T22109] sq905c 3-1:0.0: Get version command failed [ 1271.301410][T22109] sq905c 3-1:0.0: probe with driver sq905c failed with error -71 [ 1271.307749][T22109] usb 3-1: USB disconnect, device number 122 [ 1271.399475][T20918] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1271.469520][ T8713] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 1271.509502][ T994] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 1271.550269][T20918] usb 1-1: New USB device found: idVendor=046d, idProduct=c281, bcdDevice=1.00 [ 1271.551209][T20918] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1271.551228][T20918] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1271.551251][T20918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.620744][ T8713] usb 5-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1271.623985][ T8713] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.624011][ T8713] usb 5-1: Product: syz [ 1271.624026][ T8713] usb 5-1: Manufacturer: syz [ 1271.624040][ T8713] usb 5-1: SerialNumber: syz [ 1271.626526][ T8713] usb 5-1: config 0 descriptor?? [ 1271.690718][ T994] usb 2-1: New USB device found: idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1271.692042][ T994] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1271.692092][ T994] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1271.694470][ T994] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.694495][ T994] usb 2-1: Product: syz [ 1271.694540][ T994] usb 2-1: Manufacturer: syz [ 1271.694555][ T994] usb 2-1: SerialNumber: syz [ 1271.697463][ T994] usb 2-1: config 0 descriptor?? [ 1271.832450][ T8713] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1271.908189][ T994] usb 2-1: USB disconnect, device number 20 [ 1271.966397][T22181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1271.967111][T22181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1271.968571][T20918] iforce 1-1:1.0: usb_submit_urb failed: -32 [ 1271.987791][T20918] iforce 1-1:1.0: usb_submit_urb failed: -32 [ 1272.001079][T20918] iforce 1-1:1.0: usb_submit_urb failed: -32 [ 1272.129496][T22109] usb 3-1: new full-speed USB device number 123 using dummy_hcd [ 1272.282692][T22109] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1272.283321][T22109] usb 3-1: not running at top speed; connect to a high speed hub [ 1272.283341][T22109] usb 3-1: New USB device found: idVendor=0c72, idProduct=000c, bcdDevice=e.3d [ 1272.284797][T22109] usb 3-1: config 1 has an invalid interface number: 93 but max is 0 [ 1272.284820][T22109] usb 3-1: config 1 has no interface number 0 [ 1272.284862][T22109] usb 3-1: config 1 interface 93 has no altsetting 0 [ 1272.287732][T22109] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.287755][T22109] usb 3-1: Product: syz [ 1272.287770][T22109] usb 3-1: Manufacturer: syz [ 1272.287811][T22109] usb 3-1: SerialNumber: syz [ 1272.404884][T20918] iforce 1-1:1.0: usb_submit_urb failed: -32 [ 1272.405521][T20918] iforce 1-1:1.0: usb_submit_urb failed: -32 [ 1272.406107][T20918] iforce 1-1:1.0: usb_submit_urb failed: -32 [ 1272.406717][T20918] iforce 1-1:1.0: usb_submit_urb failed: -32 [ 1272.504784][T22187] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5167'. [ 1272.523810][T22109] usb 3-1: USB disconnect, device number 123 [ 1272.611279][T20918] iforce 1-1:1.0: usb_submit_urb failed: -71 [ 1272.611933][T20918] iforce 1-1:1.0: usb_submit_urb failed: -71 [ 1272.612519][T20918] iforce 1-1:1.0: usb_submit_urb failed: -71 [ 1272.612993][T20918] iforce 1-1:1.0: usb_submit_urb failed: -71 [ 1272.613433][T20918] iforce 1-1:1.0: usb_submit_urb failed: -71 [ 1272.613902][T20918] iforce 1-1:1.0: usb_submit_urb failed: -71 [ 1272.615968][T20918] iforce 1-1:1.0: usb_submit_urb failed: -71 [ 1272.617994][T20918] iforce 1-1:1.0: usb_submit_urb failed: -71 [ 1272.618435][T20918] iforce 1-1:1.0: usb_submit_urb failed: -71 [ 1272.618897][T20918] iforce 1-1:1.0: usb_submit_urb failed: -71 [ 1272.618946][T20918] input input779: Timeout waiting for response from device. [ 1272.694307][T20918] usb 1-1: USB disconnect, device number 89 [ 1273.023467][T22195] FAULT_INJECTION: forcing a failure. [ 1273.023467][T22195] name failslab, interval 1, probability 0, space 0, times 0 [ 1273.023494][T22195] CPU: 1 UID: 0 PID: 22195 Comm: syz.1.5170 Tainted: G L syzkaller #0 PREEMPT(full) [ 1273.023512][T22195] Tainted: [L]=SOFTLOCKUP [ 1273.023516][T22195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1273.023524][T22195] Call Trace: [ 1273.023529][T22195] [ 1273.023535][T22195] dump_stack_lvl+0xe8/0x150 [ 1273.023555][T22195] should_fail_ex+0x3eb/0x540 [ 1273.023571][T22195] should_failslab+0xa8/0x100 [ 1273.023585][T22195] __kmalloc_noprof+0xf9/0x710 [ 1273.023598][T22195] ? mutex_init_lockdep+0xdf/0x110 [ 1273.023609][T22195] ? security_task_alloc+0x4d/0x330 [ 1273.023621][T22195] ? security_task_alloc+0x4d/0x330 [ 1273.023636][T22195] security_task_alloc+0x4d/0x330 [ 1273.023650][T22195] copy_process+0x1c72/0x4430 [ 1273.023670][T22195] ? copy_process+0xd11/0x4430 [ 1273.023693][T22195] ? __pfx_copy_process+0x10/0x10 [ 1273.023709][T22195] ? mutex_init_lockdep+0xdf/0x110 [ 1273.023722][T22195] vhost_task_create+0x1f9/0x380 [ 1273.023734][T22195] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 1273.023746][T22195] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 1273.023759][T22195] ? __pfx_vhost_task_create+0x10/0x10 [ 1273.023770][T22195] ? register_lock_class+0x31/0x2e0 [ 1273.023786][T22195] ? __pfx_vhost_task_fn+0x10/0x10 [ 1273.023802][T22195] ? kasan_quarantine_put+0xbb/0x1f0 [ 1273.023820][T22195] kvm_mmu_post_init_vm+0x147/0x2b0 [ 1273.023834][T22195] kvm_arch_vcpu_ioctl_run+0x79/0x18b0 [ 1273.023851][T22195] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 1273.023866][T22195] kvm_vcpu_ioctl+0xa61/0xfd0 [ 1273.023881][T22195] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1273.023904][T22195] ? __fget_files+0x2a/0x420 [ 1273.023921][T22195] ? __fget_files+0x2a/0x420 [ 1273.023932][T22195] ? __fget_files+0x2a/0x420 [ 1273.023946][T22195] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1273.023958][T22195] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1273.023970][T22195] __se_sys_ioctl+0xfc/0x170 [ 1273.023983][T22195] do_syscall_64+0x166/0x520 [ 1273.023995][T22195] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1273.024008][T22195] ? clear_bhb_loop+0x70/0xc0 [ 1273.024028][T22195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1273.024048][T22195] RIP: 0033:0x7f5f09b9e1d9 [ 1273.024068][T22195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1273.024085][T22195] RSP: 002b:00007f5f0a984028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1273.024105][T22195] RAX: ffffffffffffffda RBX: 00007f5f09e25fa0 RCX: 00007f5f09b9e1d9 [ 1273.024120][T22195] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 1273.024133][T22195] RBP: 00007f5f0a984090 R08: 0000000000000000 R09: 0000000000000000 [ 1273.024145][T22195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1273.024155][T22195] R13: 00007f5f09e26038 R14: 00007f5f09e25fa0 R15: 00007ffef566fbe8 [ 1273.024175][T22195] [ 1273.269093][ T8713] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1273.283940][ T8713] usb 5-1: USB disconnect, device number 8 [ 1273.632784][T20918] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1273.759652][ T5760] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1273.785470][T20918] usb 3-1: Using ep0 maxpacket: 8 [ 1273.786673][T20918] usb 3-1: New USB device found: idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1273.788288][T20918] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1273.793434][T20918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.793460][T20918] usb 3-1: Product: syz [ 1273.793473][T20918] usb 3-1: Manufacturer: syz [ 1273.793486][T20918] usb 3-1: SerialNumber: syz [ 1273.801349][T20918] usb 3-1: config 0 descriptor?? [ 1273.824945][T20918] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1273.935111][ T5760] usb 1-1: New USB device found: idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1273.965655][ T5760] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.965684][ T5760] usb 1-1: Product: syz [ 1273.965697][ T5760] usb 1-1: Manufacturer: syz [ 1273.965710][ T5760] usb 1-1: SerialNumber: syz [ 1273.968880][ T5760] usb 1-1: config 0 descriptor?? [ 1274.012604][ T5760] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1274.209509][ T994] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 1274.236700][T22210] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1274.287241][ T5760] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 1274.287263][ T5760] sq905c 1-1:0.0: Get version command failed [ 1274.287348][ T5760] sq905c 1-1:0.0: probe with driver sq905c failed with error -71 [ 1274.312190][ T5760] usb 1-1: USB disconnect, device number 90 [ 1274.380879][ T994] usb 5-1: New USB device found: idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1274.411663][ T994] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1274.411747][ T994] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1274.415874][ T994] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.415931][ T994] usb 5-1: Product: syz [ 1274.415948][ T994] usb 5-1: Manufacturer: syz [ 1274.415963][ T994] usb 5-1: SerialNumber: syz [ 1274.444670][ T994] usb 5-1: config 0 descriptor?? [ 1274.715943][ T2248] usb 5-1: USB disconnect, device number 9 [ 1275.355884][T22220] FAULT_INJECTION: forcing a failure. [ 1275.355884][T22220] name failslab, interval 1, probability 0, space 0, times 0 [ 1275.355916][T22220] CPU: 1 UID: 0 PID: 22220 Comm: syz.4.5178 Tainted: G L syzkaller #0 PREEMPT(full) [ 1275.355952][T22220] Tainted: [L]=SOFTLOCKUP [ 1275.355960][T22220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1275.355971][T22220] Call Trace: [ 1275.355980][T22220] [ 1275.355988][T22220] dump_stack_lvl+0xe8/0x150 [ 1275.356016][T22220] should_fail_ex+0x3eb/0x540 [ 1275.356040][T22220] should_failslab+0xa8/0x100 [ 1275.356059][T22220] ? skb_clone+0x212/0x3a0 [ 1275.356078][T22220] kmem_cache_alloc_noprof+0x9c/0x600 [ 1275.356100][T22220] ? skb_clone+0x212/0x3a0 [ 1275.356124][T22220] skb_clone+0x212/0x3a0 [ 1275.356146][T22220] __netlink_deliver_tap+0x355/0x6e0 [ 1275.356176][T22220] ? netlink_deliver_tap+0x2e/0x1b0 [ 1275.356196][T22220] netlink_deliver_tap+0x19c/0x1b0 [ 1275.356216][T22220] netlink_unicast+0x781/0x940 [ 1275.356247][T22220] netlink_sendmsg+0x7c3/0xae0 [ 1275.356273][T22220] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1275.356300][T22220] ? apparmor_socket_sendmsg+0x98/0x360 [ 1275.356322][T22220] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1275.356339][T22220] sock_sendmsg_nosec+0x14e/0x190 [ 1275.356362][T22220] ____sys_sendmsg+0x54e/0x850 [ 1275.356386][T22220] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1275.356415][T22220] ? import_iovec+0x73/0xa0 [ 1275.356438][T22220] ___sys_sendmsg+0x2a5/0x360 [ 1275.356454][T22220] ? __lock_acquire+0x747/0x2de0 [ 1275.356478][T22220] ? __pfx____sys_sendmsg+0x10/0x10 [ 1275.356538][T22220] ? __fget_files+0x3a2/0x420 [ 1275.356554][T22220] ? __fget_files+0x2a/0x420 [ 1275.356582][T22220] __x64_sys_sendmsg+0x1b1/0x290 [ 1275.356603][T22220] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1275.356646][T22220] do_syscall_64+0x166/0x520 [ 1275.356664][T22220] ? trace_irq_disable+0x3b/0x140 [ 1275.356680][T22220] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1275.356699][T22220] ? clear_bhb_loop+0x70/0xc0 [ 1275.356720][T22220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1275.356738][T22220] RIP: 0033:0x7f20be59e1d9 [ 1275.356757][T22220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1275.356773][T22220] RSP: 002b:00007f20bf4be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1275.356794][T22220] RAX: ffffffffffffffda RBX: 00007f20be825fa0 RCX: 00007f20be59e1d9 [ 1275.356808][T22220] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 1275.356820][T22220] RBP: 00007f20bf4be090 R08: 0000000000000000 R09: 0000000000000000 [ 1275.356832][T22220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1275.356843][T22220] R13: 00007f20be826038 R14: 00007f20be825fa0 R15: 00007ffffb0df608 [ 1275.356877][T22220] [ 1275.415040][T22222] jffs2: notice: (22222) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1275.420521][T22222] FAULT_INJECTION: forcing a failure. [ 1275.420521][T22222] name failslab, interval 1, probability 0, space 0, times 0 [ 1275.420551][T22222] CPU: 1 UID: 0 PID: 22222 Comm: syz.4.5179 Tainted: G L syzkaller #0 PREEMPT(full) [ 1275.420575][T22222] Tainted: [L]=SOFTLOCKUP [ 1275.420582][T22222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1275.420593][T22222] Call Trace: [ 1275.420600][T22222] [ 1275.420608][T22222] dump_stack_lvl+0xe8/0x150 [ 1275.420635][T22222] should_fail_ex+0x3eb/0x540 [ 1275.420658][T22222] should_failslab+0xa8/0x100 [ 1275.420679][T22222] __kmalloc_noprof+0xf9/0x710 [ 1275.420698][T22222] ? tomoyo_encode+0x2ad/0x570 [ 1275.420714][T22222] ? tomoyo_encode+0x2ad/0x570 [ 1275.420737][T22222] tomoyo_encode+0x2ad/0x570 [ 1275.420760][T22222] tomoyo_realpath_from_path+0x5fa/0x640 [ 1275.420790][T22222] tomoyo_mount_permission+0x3e9/0x9e0 [ 1275.420809][T22222] ? tomoyo_mount_permission+0x2b5/0x9e0 [ 1275.420832][T22222] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 1275.420850][T22222] ? kasan_save_track+0x4f/0x80 [ 1275.420917][T22222] ? kasan_quarantine_put+0xbb/0x1f0 [ 1275.420951][T22222] security_sb_mount+0xe4/0x320 [ 1275.420975][T22222] path_mount+0xbc/0x1050 [ 1275.420999][T22222] ? user_path_at+0xd4/0x160 [ 1275.421019][T22222] __se_sys_mount+0x31d/0x420 [ 1275.421043][T22222] ? __pfx___se_sys_mount+0x10/0x10 [ 1275.421067][T22222] ? __x64_sys_mount+0x20/0xc0 [ 1275.421087][T22222] do_syscall_64+0x166/0x520 [ 1275.421127][T22222] ? trace_irq_disable+0x3b/0x140 [ 1275.421143][T22222] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1275.421162][T22222] ? clear_bhb_loop+0x70/0xc0 [ 1275.421182][T22222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1275.421199][T22222] RIP: 0033:0x7f20be59e1d9 [ 1275.421217][T22222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1275.421232][T22222] RSP: 002b:00007f20bf4be028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1275.421252][T22222] RAX: ffffffffffffffda RBX: 00007f20be825fa0 RCX: 00007f20be59e1d9 [ 1275.421265][T22222] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000000 [ 1275.421277][T22222] RBP: 00007f20bf4be090 R08: 0000000000000000 R09: 0000000000000000 [ 1275.421288][T22222] R10: 0000000001008225 R11: 0000000000000246 R12: 0000000000000001 [ 1275.421299][T22222] R13: 00007f20be826038 R14: 00007f20be825fa0 R15: 00007ffffb0df608 [ 1275.421330][T22222] [ 1275.421349][T22222] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1275.850841][T22230] kAFS: unable to lookup cell 'syze¤@Ës0' [ 1275.870696][T22230] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1276.225569][ T2248] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1276.415013][T22109] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1276.434068][ T2248] usb 1-1: New USB device found: idVendor=046d, idProduct=c281, bcdDevice=1.00 [ 1276.435346][ T2248] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1276.435374][ T2248] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1276.435438][ T2248] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.597270][T22109] usb 5-1: New USB device found: idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1276.624274][T22109] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.624302][T22109] usb 5-1: Product: syz [ 1276.624316][T22109] usb 5-1: Manufacturer: syz [ 1276.624330][T22109] usb 5-1: SerialNumber: syz [ 1276.653079][T22109] usb 5-1: config 0 descriptor?? [ 1276.663775][T22109] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1276.902162][T22231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1276.904038][T22231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1276.912034][ T2248] iforce 1-1:1.0: usb_submit_urb failed: -32 [ 1276.935642][T22237] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1276.944599][ T2248] iforce 1-1:1.0: usb_submit_urb failed: -32 [ 1276.947766][ T2248] iforce 1-1:1.0: usb_submit_urb failed: -32 [ 1276.970862][T22109] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 1276.970885][T22109] sq905c 5-1:0.0: Get version command failed [ 1276.970966][T22109] sq905c 5-1:0.0: probe with driver sq905c failed with error -71 [ 1276.978869][T22109] usb 5-1: USB disconnect, device number 10 [ 1277.398713][ T2248] iforce 1-1:1.0: usb_submit_urb failed: -32 [ 1277.411522][ T2248] iforce 1-1:1.0: usb_submit_urb failed: -32 [ 1277.412610][ T2248] iforce 1-1:1.0: usb_submit_urb failed: -32 [ 1277.413760][ T2248] iforce 1-1:1.0: usb_submit_urb failed: -32 [ 1277.613172][T20918] gspca_zc3xx: i2c_r status error 54 [ 1277.634954][ T2248] iforce 1-1:1.0: usb_submit_urb failed: -71 [ 1277.635564][ T2248] iforce 1-1:1.0: usb_submit_urb failed: -71 [ 1277.636120][ T2248] iforce 1-1:1.0: usb_submit_urb failed: -71 [ 1277.636609][ T2248] iforce 1-1:1.0: usb_submit_urb failed: -71 [ 1277.637097][ T2248] iforce 1-1:1.0: usb_submit_urb failed: -71 [ 1277.637575][ T2248] iforce 1-1:1.0: usb_submit_urb failed: -71 [ 1277.638109][ T2248] iforce 1-1:1.0: usb_submit_urb failed: -71 [ 1277.656466][ T2248] iforce 1-1:1.0: usb_submit_urb failed: -71 [ 1277.698612][ T2248] iforce 1-1:1.0: usb_submit_urb failed: -71 [ 1277.707141][ T2248] iforce 1-1:1.0: usb_submit_urb failed: -71 [ 1277.707199][ T2248] input input780: Timeout waiting for response from device. [ 1277.728762][ T2248] usb 1-1: USB disconnect, device number 91 [ 1278.026126][T20918] gspca_zc3xx: reg_r err -71 [ 1278.026184][T20918] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1278.031764][T20918] usb 3-1: USB disconnect, device number 124 [ 1278.049214][ T5696] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 1278.239939][ T5696] usb 5-1: New USB device found: idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1278.270357][ T5696] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1278.270409][ T5696] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1278.311354][ T5696] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1278.311384][ T5696] usb 5-1: Product: syz [ 1278.311400][ T5696] usb 5-1: Manufacturer: syz [ 1278.311415][ T5696] usb 5-1: SerialNumber: syz [ 1278.340458][ T5696] usb 5-1: config 0 descriptor?? [ 1278.512615][T22249] FAULT_INJECTION: forcing a failure. [ 1278.512615][T22249] name failslab, interval 1, probability 0, space 0, times 0 [ 1278.512651][T22249] CPU: 0 UID: 0 PID: 22249 Comm: syz.2.5189 Tainted: G L syzkaller #0 PREEMPT(full) [ 1278.512680][T22249] Tainted: [L]=SOFTLOCKUP [ 1278.512688][T22249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1278.512701][T22249] Call Trace: [ 1278.512710][T22249] [ 1278.512720][T22249] dump_stack_lvl+0xe8/0x150 [ 1278.512749][T22249] should_fail_ex+0x3eb/0x540 [ 1278.512776][T22249] should_failslab+0xa8/0x100 [ 1278.512797][T22249] ? prepare_creds+0x30/0x820 [ 1278.512818][T22249] kmem_cache_alloc_noprof+0x9c/0x600 [ 1278.512839][T22249] ? __lock_acquire+0x747/0x2de0 [ 1278.512859][T22249] ? prepare_creds+0x30/0x820 [ 1278.512886][T22249] prepare_creds+0x30/0x820 [ 1278.512910][T22249] lookup_user_key+0x1f6/0x1360 [ 1278.512939][T22249] ? __pfx_lookup_user_key+0x10/0x10 [ 1278.512962][T22249] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 1278.512991][T22249] ? __might_fault+0xaf/0x130 [ 1278.513018][T22249] __se_sys_add_key+0x315/0x420 [ 1278.513041][T22249] ? __pfx___se_sys_add_key+0x10/0x10 [ 1278.513073][T22249] ? __x64_sys_add_key+0x20/0xc0 [ 1278.513097][T22249] do_syscall_64+0x166/0x520 [ 1278.513117][T22249] ? trace_irq_disable+0x3b/0x140 [ 1278.513135][T22249] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1278.513156][T22249] ? clear_bhb_loop+0x70/0xc0 [ 1278.513179][T22249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1278.513199][T22249] RIP: 0033:0x7f6aef79e1d9 [ 1278.513219][T22249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1278.513237][T22249] RSP: 002b:00007f6af062d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1278.513260][T22249] RAX: ffffffffffffffda RBX: 00007f6aefa25fa0 RCX: 00007f6aef79e1d9 [ 1278.513275][T22249] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 1278.513289][T22249] RBP: 00007f6af062d090 R08: ffffffffffffffff R09: 0000000000000000 [ 1278.513302][T22249] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000001 [ 1278.513315][T22249] R13: 00007f6aefa26038 R14: 00007f6aefa25fa0 R15: 00007fff70bda4a8 [ 1278.513349][T22249] [ 1278.639108][T20918] usb 5-1: USB disconnect, device number 11 [ 1278.981482][ T5710] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1279.139718][ T5710] usb 1-1: Using ep0 maxpacket: 32 [ 1279.140636][ T5710] usb 1-1: New USB device found: idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1279.142334][ T5710] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1279.142364][ T5710] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1279.142390][ T5710] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1279.142413][ T5710] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1279.142439][ T5710] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1279.145606][ T5710] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.145632][ T5710] usb 1-1: Product: syz [ 1279.145646][ T5710] usb 1-1: Manufacturer: syz [ 1279.145661][ T5710] usb 1-1: SerialNumber: syz [ 1279.148739][ T5710] usb 1-1: config 0 descriptor?? [ 1279.232698][T20918] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1279.277053][T22261] random: crng reseeded on system resumption [ 1279.400716][T20918] usb 3-1: New USB device found: idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1279.404043][T20918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.404063][T20918] usb 3-1: Product: syz [ 1279.404073][T20918] usb 3-1: Manufacturer: syz [ 1279.404103][T20918] usb 3-1: SerialNumber: syz [ 1279.407957][T20918] usb 3-1: config 0 descriptor?? [ 1279.418022][T20918] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1279.432418][T22109] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1279.563977][T22251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1279.564899][T22251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1279.566862][ T5710] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 1279.566909][ T5710] input input781: Device does not respond to id packet M [ 1279.568040][ T5710] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 1279.568092][ T5710] input input781: Device does not respond to id packet P [ 1279.568718][ T5710] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 1279.568751][ T5710] input input781: Device does not respond to id packet B [ 1279.569616][ T5710] input input781: Device does not respond to id packet N [ 1279.600151][ T5696] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 1279.607227][T22109] usb 2-1: New USB device found: idVendor=046d, idProduct=c281, bcdDevice=1.00 [ 1279.608543][T22109] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1279.608569][T22109] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1279.608604][T22109] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.626893][T22257] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1279.677984][T20918] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 1279.678007][T20918] sq905c 3-1:0.0: Get version command failed [ 1279.678120][T20918] sq905c 3-1:0.0: probe with driver sq905c failed with error -71 [ 1279.718109][T20918] usb 3-1: USB disconnect, device number 125 [ 1279.761118][ T5696] usb 5-1: not running at top speed; connect to a high speed hub [ 1279.761158][ T5696] usb 5-1: New USB device found: idVendor=046d, idProduct=0825, bcdDevice=1.00 [ 1279.762428][ T5696] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1279.762451][ T5696] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1279.762531][ T5696] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.787344][ T5710] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1279.787772][ T5710] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1279.788169][ T5710] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1279.788580][ T5710] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1279.805859][ T5710] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input781 [ 1279.818637][ T5710] usb 1-1: USB disconnect, device number 92 [ 1279.873079][ T5696] uvcvideo 5-1:1.0: Found UVC 0.00 device (046d:0825) [ 1279.873113][ T5696] uvcvideo 5-1:1.0: No valid video chain found. [ 1280.068724][T22259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1280.069234][T22259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1280.078117][T22109] iforce 2-1:1.0: usb_submit_urb failed: -32 [ 1280.092649][T22109] iforce 2-1:1.0: usb_submit_urb failed: -32 [ 1280.099604][T22109] iforce 2-1:1.0: usb_submit_urb failed: -32 [ 1280.503869][T22109] iforce 2-1:1.0: usb_submit_urb failed: -32 [ 1280.504408][T22109] iforce 2-1:1.0: usb_submit_urb failed: -32 [ 1280.505124][T22109] iforce 2-1:1.0: usb_submit_urb failed: -32 [ 1280.505623][T22109] iforce 2-1:1.0: usb_submit_urb failed: -32 [ 1280.529590][ T5710] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1280.649479][ T5710] usb 3-1: device descriptor read/64, error -71 [ 1280.699509][T20918] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1280.709259][T22109] iforce 2-1:1.0: usb_submit_urb failed: -71 [ 1280.716144][T22109] iforce 2-1:1.0: usb_submit_urb failed: -71 [ 1280.716609][T22109] iforce 2-1:1.0: usb_submit_urb failed: -71 [ 1280.717102][T22109] iforce 2-1:1.0: usb_submit_urb failed: -71 [ 1280.717531][T22109] iforce 2-1:1.0: usb_submit_urb failed: -71 [ 1280.717971][T22109] iforce 2-1:1.0: usb_submit_urb failed: -71 [ 1280.718300][T22109] iforce 2-1:1.0: usb_submit_urb failed: -71 [ 1280.718598][T22109] iforce 2-1:1.0: usb_submit_urb failed: -71 [ 1280.718906][T22109] iforce 2-1:1.0: usb_submit_urb failed: -71 [ 1280.719222][T22109] iforce 2-1:1.0: usb_submit_urb failed: -71 [ 1280.719249][T22109] input input783: Timeout waiting for response from device. [ 1280.786230][T22261] Unrecognized hibernate image header format! [ 1280.786247][T22261] PM: hibernation: Image mismatch: architecture specific data [ 1280.787333][T22109] usb 2-1: USB disconnect, device number 21 [ 1280.795946][T20920] usb 5-1: USB disconnect, device number 12 [ 1280.832989][T20918] usb 1-1: device descriptor read/64, error -71 [ 1280.900110][ T5710] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1281.029507][ T5710] usb 3-1: device descriptor read/64, error -71 [ 1281.079507][T20918] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1281.139877][ T5710] usb usb3-port1: attempt power cycle [ 1281.209482][T20918] usb 1-1: device descriptor read/64, error -71 [ 1281.298643][T22278] kAFS: unable to lookup cell 'syze¤@Ës0' [ 1281.311854][T22278] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1281.332453][T20918] usb usb1-port1: attempt power cycle [ 1281.479672][ T5710] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1281.500450][ T5710] usb 3-1: device descriptor read/8, error -71 [ 1281.649610][T22109] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 1281.683119][T20918] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1281.722246][T20918] usb 1-1: device descriptor read/8, error -71 [ 1281.772904][ T5710] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1281.791946][ T5710] usb 3-1: device descriptor read/8, error -71 [ 1281.810573][T22109] usb 5-1: New USB device found: idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1281.811727][T22109] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1281.811770][T22109] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1281.851049][T22109] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.851078][T22109] usb 5-1: Product: syz [ 1281.851092][T22109] usb 5-1: Manufacturer: syz [ 1281.851104][T22109] usb 5-1: SerialNumber: syz [ 1281.867084][T22109] usb 5-1: config 0 descriptor?? [ 1281.909994][ T5710] usb usb3-port1: unable to enumerate USB device [ 1281.986789][T20918] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1282.022684][T20918] usb 1-1: device descriptor read/8, error -71 [ 1282.095541][ T5696] usb 5-1: USB disconnect, device number 13 [ 1282.146691][T20918] usb usb1-port1: unable to enumerate USB device [ 1282.929568][ T5760] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1283.100386][ T5760] usb 5-1: New USB device found: idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1283.131079][ T5760] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.131108][ T5760] usb 5-1: Product: syz [ 1283.131122][ T5760] usb 5-1: Manufacturer: syz [ 1283.131136][ T5760] usb 5-1: SerialNumber: syz [ 1283.134545][ T5760] usb 5-1: config 0 descriptor?? [ 1283.156725][ T5760] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1283.349056][T22284] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1283.431033][ T5760] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 1283.431057][ T5760] sq905c 5-1:0.0: Get version command failed [ 1283.431143][ T5760] sq905c 5-1:0.0: probe with driver sq905c failed with error -71 [ 1283.465609][ T5760] usb 5-1: USB disconnect, device number 14 [ 1283.546298][T22286] FAULT_INJECTION: forcing a failure. [ 1283.546298][T22286] name failslab, interval 1, probability 0, space 0, times 0 [ 1283.546328][T22286] CPU: 1 UID: 0 PID: 22286 Comm: syz.2.5206 Tainted: G L syzkaller #0 PREEMPT(full) [ 1283.546353][T22286] Tainted: [L]=SOFTLOCKUP [ 1283.546360][T22286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1283.546371][T22286] Call Trace: [ 1283.546379][T22286] [ 1283.546388][T22286] dump_stack_lvl+0xe8/0x150 [ 1283.546415][T22286] should_fail_ex+0x3eb/0x540 [ 1283.546444][T22286] should_failslab+0xa8/0x100 [ 1283.546464][T22286] __kmalloc_noprof+0xf9/0x710 [ 1283.546480][T22286] ? rcu_is_watching+0x16/0xb0 [ 1283.546498][T22286] ? tomoyo_realpath_from_path+0xef/0x640 [ 1283.546516][T22286] ? tomoyo_realpath_from_path+0xef/0x640 [ 1283.546540][T22286] tomoyo_realpath_from_path+0xef/0x640 [ 1283.546567][T22286] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1283.546587][T22286] tomoyo_path_number_perm+0x246/0x5f0 [ 1283.546609][T22286] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1283.546626][T22286] ? __lock_acquire+0x747/0x2de0 [ 1283.546684][T22286] ? __fget_files+0x2a/0x420 [ 1283.546704][T22286] ? __fget_files+0x2a/0x420 [ 1283.546721][T22286] ? __fget_files+0x2a/0x420 [ 1283.546743][T22286] security_file_ioctl+0xc3/0x2a0 [ 1283.546763][T22286] __se_sys_ioctl+0x47/0x170 [ 1283.546785][T22286] do_syscall_64+0x166/0x520 [ 1283.546802][T22286] ? trace_irq_disable+0x3b/0x140 [ 1283.546818][T22286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1283.546846][T22286] ? clear_bhb_loop+0x70/0xc0 [ 1283.546866][T22286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1283.546884][T22286] RIP: 0033:0x7f6aef79e1d9 [ 1283.546902][T22286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1283.546918][T22286] RSP: 002b:00007f6af062d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1283.546939][T22286] RAX: ffffffffffffffda RBX: 00007f6aefa25fa0 RCX: 00007f6aef79e1d9 [ 1283.546953][T22286] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1283.546965][T22286] RBP: 00007f6af062d090 R08: 0000000000000000 R09: 0000000000000000 [ 1283.546977][T22286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1283.546988][T22286] R13: 00007f6aefa26038 R14: 00007f6aefa25fa0 R15: 00007fff70bda4a8 [ 1283.547020][T22286] [ 1283.547158][T22286] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1284.247536][T22307] kAFS: unable to lookup cell 'syze¤@Ës0' [ 1284.289595][ T5760] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1284.309733][T22307] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1284.432585][T22309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1284.434705][T22309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1284.473528][ T5760] usb 3-1: New USB device found: idVendor=046d, idProduct=c281, bcdDevice=1.00 [ 1284.473696][T22109] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 1284.484364][ T5760] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1284.484399][ T5760] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1284.484438][ T5760] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1284.642493][T22109] usb 5-1: New USB device found: idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1284.669801][ T5696] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1284.671106][T22109] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1284.671192][T22109] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1284.703518][T22109] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.703546][T22109] usb 5-1: Product: syz [ 1284.703590][T22109] usb 5-1: Manufacturer: syz [ 1284.703602][T22109] usb 5-1: SerialNumber: syz [ 1284.717819][T22109] usb 5-1: config 0 descriptor?? [ 1284.855130][ T5696] usb 1-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00 [ 1284.880115][ T5696] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1284.880208][ T5696] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1284.883079][ T5696] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.883104][ T5696] usb 1-1: Product: syz [ 1284.883118][ T5696] usb 1-1: Manufacturer: syz [ 1284.883132][ T5696] usb 1-1: SerialNumber: syz [ 1284.965045][T22297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1284.966203][T22297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1284.988689][ T5760] iforce 3-1:1.0: usb_submit_urb failed: -32 [ 1284.989476][ T5710] usb 5-1: USB disconnect, device number 15 [ 1285.002504][ T5760] iforce 3-1:1.0: usb_submit_urb failed: -32 [ 1285.003878][ T5760] iforce 3-1:1.0: usb_submit_urb failed: -32 [ 1285.356014][T22309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1285.356627][T22309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1285.385914][ T5696] usb 1-1: Cannot retrieve CPort count: -71 [ 1285.385995][ T5696] usb 1-1: Cannot retrieve CPort count: -71 [ 1285.386019][ T5696] es2_ap_driver 1-1:1.0: probe with driver es2_ap_driver failed with error -71 [ 1285.421521][ T5760] iforce 3-1:1.0: usb_submit_urb failed: -32 [ 1285.422425][ T5696] usb 1-1: USB disconnect, device number 97 [ 1285.423986][ T5760] iforce 3-1:1.0: usb_submit_urb failed: -32 [ 1285.424937][ T5760] iforce 3-1:1.0: usb_submit_urb failed: -32 [ 1285.427019][ T5760] iforce 3-1:1.0: usb_submit_urb failed: -32 [ 1285.654727][T22316] FAULT_INJECTION: forcing a failure. [ 1285.654727][T22316] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1285.654762][T22316] CPU: 0 UID: 0 PID: 22316 Comm: syz.4.5215 Tainted: G L syzkaller #0 PREEMPT(full) [ 1285.654789][T22316] Tainted: [L]=SOFTLOCKUP [ 1285.654796][T22316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1285.654818][T22316] Call Trace: [ 1285.654827][T22316] [ 1285.654836][T22316] dump_stack_lvl+0xe8/0x150 [ 1285.654867][T22316] should_fail_ex+0x3eb/0x540 [ 1285.654894][T22316] _copy_from_user+0x2d/0xb0 [ 1285.654914][T22316] ___sys_recvmsg+0x173/0x5a0 [ 1285.654940][T22316] ? __pfx____sys_recvmsg+0x10/0x10 [ 1285.654966][T22316] ? lock_acquire+0x115/0x350 [ 1285.655001][T22316] ? __fget_files+0x2a/0x420 [ 1285.655020][T22316] ? __fget_files+0x3a2/0x420 [ 1285.655038][T22316] ? __fget_files+0x2a/0x420 [ 1285.655061][T22316] ? fdget+0x1ac/0x250 [ 1285.655082][T22316] do_recvmmsg+0x31a/0x7f0 [ 1285.655112][T22316] ? __pfx_do_recvmmsg+0x10/0x10 [ 1285.655132][T22316] ? __pfx___schedule+0x10/0x10 [ 1285.655180][T22316] __x64_sys_recvmmsg+0x198/0x250 [ 1285.655203][T22316] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1285.655236][T22316] do_syscall_64+0x166/0x520 [ 1285.655256][T22316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1285.655277][T22316] ? clear_bhb_loop+0x70/0xc0 [ 1285.655299][T22316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1285.655318][T22316] RIP: 0033:0x7f20be59e1d9 [ 1285.655353][T22316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1285.655370][T22316] RSP: 002b:00007f20bf49d028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1285.655395][T22316] RAX: ffffffffffffffda RBX: 00007f20be826090 RCX: 00007f20be59e1d9 [ 1285.655410][T22316] RDX: 0000000000000004 RSI: 0000200000000480 RDI: 0000000000000003 [ 1285.655423][T22316] RBP: 00007f20bf49d090 R08: 0000000000000000 R09: 0000000000000000 [ 1285.655435][T22316] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1285.655447][T22316] R13: 00007f20be826128 R14: 00007f20be826090 R15: 00007ffffb0df608 [ 1285.655481][T22316] [ 1285.676109][ T5760] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 1285.689916][ T5760] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 1285.701568][ T5760] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 1285.702036][ T5760] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 1285.706696][ T5760] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 1285.717405][ T5760] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 1285.721344][ T5760] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 1285.724749][ T5760] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 1285.729896][ T5760] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 1285.734902][ T5760] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 1285.734935][ T5760] input input784: Timeout waiting for response from device. [ 1285.874865][ T5760] usb 3-1: USB disconnect, device number 4 [ 1287.100149][ T5760] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1287.129499][T21656] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1287.229618][ T5696] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 1287.249504][ T5760] usb 1-1: Using ep0 maxpacket: 8 [ 1287.250228][ T5760] usb 1-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1287.253584][ T5760] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1287.253611][ T5760] usb 1-1: Product: syz [ 1287.253625][ T5760] usb 1-1: Manufacturer: syz [ 1287.253638][ T5760] usb 1-1: SerialNumber: syz [ 1287.255419][ T5760] usb 1-1: config 0 descriptor?? [ 1287.290243][T21656] usb 3-1: New USB device found: idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1287.294179][T21656] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1287.294205][T21656] usb 3-1: Product: syz [ 1287.294218][T21656] usb 3-1: Manufacturer: syz [ 1287.294231][T21656] usb 3-1: SerialNumber: syz [ 1287.297814][T21656] usb 3-1: config 0 descriptor?? [ 1287.310899][T21656] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1287.381296][ T5696] usb 2-1: New USB device found: idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1287.382305][ T5696] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1287.382356][ T5696] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1287.384497][ T5696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1287.384518][ T5696] usb 2-1: Product: syz [ 1287.384527][ T5696] usb 2-1: Manufacturer: syz [ 1287.384536][ T5696] usb 2-1: SerialNumber: syz [ 1287.386539][ T5696] usb 2-1: config 0 descriptor?? [ 1287.462345][T22328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1287.462990][T22328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1287.464033][ T5760] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1287.517661][T22331] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1287.551804][T21656] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 1287.551831][T21656] sq905c 3-1:0.0: Get version command failed [ 1287.551944][T21656] sq905c 3-1:0.0: probe with driver sq905c failed with error -71 [ 1287.570608][T21656] usb 3-1: USB disconnect, device number 5 [ 1287.619146][ T8713] usb 2-1: USB disconnect, device number 22 [ 1287.889672][ T2248] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1288.040267][ T2248] usb 5-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 1288.041265][ T2248] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 1288.041282][ T2248] usb 5-1: config 1 has no interface number 0 [ 1288.043552][ T2248] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.043587][ T2248] usb 5-1: Product: syz [ 1288.043601][ T2248] usb 5-1: Manufacturer: syz [ 1288.043625][ T2248] usb 5-1: SerialNumber: syz [ 1288.096938][ T2248] usb 5-1: 3:0 : does not exist [ 1288.096962][ T2248] usb 5-1: 3:0 : does not exist [ 1288.261608][T22347] netlink: 92 bytes leftover after parsing attributes in process `syz.4.5224'. [ 1288.316607][T21656] usb 5-1: USB disconnect, device number 16 [ 1288.439707][ T8713] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1288.590386][ T8713] usb 3-1: New USB device found: idVendor=046d, idProduct=c281, bcdDevice=1.00 [ 1288.591315][ T8713] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1288.591333][ T8713] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1288.591356][ T8713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.693336][T21656] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1288.839540][T21656] usb 5-1: Using ep0 maxpacket: 8 [ 1288.842263][T21656] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1288.842299][T21656] usb 5-1: New USB device found: idVendor=17cc, idProduct=1000, bcdDevice=0.40 [ 1288.844728][T21656] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 7 [ 1288.847470][T21656] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.847487][T21656] usb 5-1: Product: syz [ 1288.847496][T21656] usb 5-1: Manufacturer: syz [ 1288.847507][T21656] usb 5-1: SerialNumber: syz [ 1289.004081][T22344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1289.006178][T22344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1289.014979][ T8713] iforce 3-1:1.0: usb_submit_urb failed: -32 [ 1289.016250][ T8713] iforce 3-1:1.0: usb_submit_urb failed: -32 [ 1289.017232][ T8713] iforce 3-1:1.0: usb_submit_urb failed: -32 [ 1289.063677][T21656] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1289.066359][T21656] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 1289.069137][T21656] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 1289.077440][T21656] usb 5-1: USB disconnect, device number 17 [ 1289.239519][ T2248] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 1289.402508][ T2248] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1289.403125][ T2248] usb 2-1: not running at top speed; connect to a high speed hub [ 1289.403159][ T2248] usb 2-1: New USB device found: idVendor=1235, idProduct=8014, bcdDevice=0.40 [ 1289.403194][ T2248] usb 2-1: no configurations [ 1289.403202][ T2248] usb 2-1: can't read configurations, error -22 [ 1289.435267][ T8713] iforce 3-1:1.0: usb_submit_urb failed: -32 [ 1289.436076][ T8713] iforce 3-1:1.0: usb_submit_urb failed: -32 [ 1289.436997][ T8713] iforce 3-1:1.0: usb_submit_urb failed: -32 [ 1289.437873][ T8713] iforce 3-1:1.0: usb_submit_urb failed: -32 [ 1289.529471][ T2248] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 1289.643332][ T8713] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 1289.643898][ T8713] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 1289.644429][ T8713] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 1289.645684][ T8713] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 1289.649686][ T8713] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 1289.650495][ T8713] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 1289.651103][ T8713] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 1289.651676][ T8713] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 1289.652233][ T8713] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 1289.652730][ T8713] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 1289.652807][ T8713] input input785: Timeout waiting for response from device. [ 1289.669709][ T8713] usb 3-1: USB disconnect, device number 6 [ 1289.696973][T22359] FAULT_INJECTION: forcing a failure. [ 1289.696973][T22359] name failslab, interval 1, probability 0, space 0, times 0 [ 1289.697035][T22359] CPU: 1 UID: 0 PID: 22359 Comm: syz.4.5231 Tainted: G L syzkaller #0 PREEMPT(full) [ 1289.697060][T22359] Tainted: [L]=SOFTLOCKUP [ 1289.697067][T22359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1289.697078][T22359] Call Trace: [ 1289.697087][T22359] [ 1289.697095][T22359] dump_stack_lvl+0xe8/0x150 [ 1289.697124][T22359] should_fail_ex+0x3eb/0x540 [ 1289.697150][T22359] ? __alloc_skb+0x1db/0x7a0 [ 1289.697169][T22359] should_failslab+0xa8/0x100 [ 1289.697189][T22359] ? __alloc_skb+0x1db/0x7a0 [ 1289.697204][T22359] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 1289.697223][T22359] ? __alloc_skb+0x18d/0x7a0 [ 1289.697240][T22359] ? __alloc_skb+0x1db/0x7a0 [ 1289.697264][T22359] __alloc_skb+0x1db/0x7a0 [ 1289.697285][T22359] netlink_dump+0x1e7/0xee0 [ 1289.697305][T22359] ? __nla_parse+0x40/0x60 [ 1289.697327][T22359] ? ip_set_dump_start+0x174/0x420 [ 1289.697423][T22359] ? __pfx_netlink_dump+0x10/0x10 [ 1289.697454][T22359] ? netlink_lookup+0x30/0x200 [ 1289.697474][T22359] ? netlink_lookup+0x30/0x200 [ 1289.697499][T22359] __netlink_dump_start+0x589/0x7b0 [ 1289.697527][T22359] ip_set_dump+0x15b/0x1f0 [ 1289.697546][T22359] ? __pfx_ip_set_dump+0x10/0x10 [ 1289.697564][T22359] ? __pfx_ip_set_dump_start+0x10/0x10 [ 1289.697582][T22359] ? __pfx_ip_set_dump_do+0x10/0x10 [ 1289.697599][T22359] ? __pfx_ip_set_dump_done+0x10/0x10 [ 1289.697632][T22359] nfnetlink_rcv_msg+0xcc2/0x12b0 [ 1289.697654][T22359] ? nfnetlink_rcv_msg+0x228/0x12b0 [ 1289.697701][T22359] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1289.697757][T22359] ? hook_capable+0x24b/0x7b0 [ 1289.697787][T22359] netlink_rcv_skb+0x226/0x4a0 [ 1289.697808][T22359] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1289.697830][T22359] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1289.697861][T22359] ? bpf_lsm_capable+0x9/0x20 [ 1289.697879][T22359] ? security_capable+0x7e/0x2c0 [ 1289.697907][T22359] nfnetlink_rcv+0x2b9/0x28c0 [ 1289.697934][T22359] ? __dev_queue_xmit+0x29b/0x3920 [ 1289.697956][T22359] ? __local_bh_enable_ip+0xd6/0x140 [ 1289.697976][T22359] ? lockdep_hardirqs_on+0x7b/0x110 [ 1289.697995][T22359] ? __dev_queue_xmit+0x29b/0x3920 [ 1289.698012][T22359] ? __local_bh_enable_ip+0xd6/0x140 [ 1289.698030][T22359] ? __dev_queue_xmit+0x29b/0x3920 [ 1289.698048][T22359] ? __dev_queue_xmit+0x1efb/0x3920 [ 1289.698070][T22359] ? __dev_queue_xmit+0x29b/0x3920 [ 1289.698096][T22359] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1289.698125][T22359] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1289.698153][T22359] ? __copy_skb_header+0xa3/0x4a0 [ 1289.698173][T22359] ? __asan_memcpy+0x40/0x70 [ 1289.698190][T22359] ? __skb_clone+0x5c/0x6c0 [ 1289.698214][T22359] ? __skb_clone+0x449/0x6c0 [ 1289.698238][T22359] ? skb_clone+0x246/0x3a0 [ 1289.698260][T22359] ? __netlink_deliver_tap+0x681/0x6e0 [ 1289.698278][T22359] ? netlink_deliver_tap+0x2e/0x1b0 [ 1289.698303][T22359] ? netlink_deliver_tap+0x2e/0x1b0 [ 1289.698321][T22359] ? netlink_deliver_tap+0x2e/0x1b0 [ 1289.698346][T22359] netlink_unicast+0x7bd/0x940 [ 1289.698377][T22359] netlink_sendmsg+0x7c3/0xae0 [ 1289.698403][T22359] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1289.698430][T22359] ? apparmor_socket_sendmsg+0x98/0x360 [ 1289.698452][T22359] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1289.698469][T22359] sock_sendmsg_nosec+0x14e/0x190 [ 1289.698493][T22359] ____sys_sendmsg+0x54e/0x850 [ 1289.698518][T22359] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1289.698547][T22359] ? import_iovec+0x73/0xa0 [ 1289.698569][T22359] ___sys_sendmsg+0x2a5/0x360 [ 1289.698586][T22359] ? __lock_acquire+0x747/0x2de0 [ 1289.698612][T22359] ? __pfx____sys_sendmsg+0x10/0x10 [ 1289.698669][T22359] ? __fget_files+0x3a2/0x420 [ 1289.698687][T22359] ? __fget_files+0x2a/0x420 [ 1289.698724][T22359] __x64_sys_sendmsg+0x1b1/0x290 [ 1289.698753][T22359] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1289.698794][T22359] do_syscall_64+0x166/0x520 [ 1289.698813][T22359] ? trace_irq_disable+0x3b/0x140 [ 1289.698831][T22359] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1289.698850][T22359] ? clear_bhb_loop+0x70/0xc0 [ 1289.698871][T22359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1289.698891][T22359] RIP: 0033:0x7f20be59e1d9 [ 1289.698912][T22359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1289.698929][T22359] RSP: 002b:00007f20bf4be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1289.698951][T22359] RAX: ffffffffffffffda RBX: 00007f20be825fa0 RCX: 00007f20be59e1d9 [ 1289.698964][T22359] RDX: 0000000000008050 RSI: 0000200000000200 RDI: 0000000000000003 [ 1289.698977][T22359] RBP: 00007f20bf4be090 R08: 0000000000000000 R09: 0000000000000000 [ 1289.698990][T22359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1289.699003][T22359] R13: 00007f20be826038 R14: 00007f20be825fa0 R15: 00007ffffb0df608 [ 1289.699035][T22359] [ 1289.777986][ T2248] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1289.791071][ T2248] usb 2-1: not running at top speed; connect to a high speed hub [ 1289.791109][ T2248] usb 2-1: New USB device found: idVendor=1235, idProduct=8014, bcdDevice=0.40 [ 1289.791145][ T2248] usb 2-1: no configurations [ 1289.791157][ T2248] usb 2-1: can't read configurations, error -22 [ 1289.809128][ T5760] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1289.817622][ T2248] usb usb2-port1: attempt power cycle [ 1289.913426][ T8713] usb 1-1: USB disconnect, device number 98 [ 1290.341072][ T8713] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1290.349785][ T2248] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 1290.371864][ T2248] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1290.372314][ T2248] usb 2-1: not running at top speed; connect to a high speed hub [ 1290.372345][ T2248] usb 2-1: New USB device found: idVendor=1235, idProduct=8014, bcdDevice=0.40 [ 1290.372380][ T2248] usb 2-1: no configurations [ 1290.372393][ T2248] usb 2-1: can't read configurations, error -22 [ 1290.490380][ T8713] usb 1-1: New USB device found: idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1290.493600][ T8713] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.493622][ T8713] usb 1-1: Product: syz [ 1290.493630][ T8713] usb 1-1: Manufacturer: syz [ 1290.493639][ T8713] usb 1-1: SerialNumber: syz [ 1290.495809][ T8713] usb 1-1: config 0 descriptor?? [ 1290.502158][ T8713] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1290.519621][T22109] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 1290.526130][ T2248] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 1290.561965][ T2248] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1290.562460][ T2248] usb 2-1: not running at top speed; connect to a high speed hub [ 1290.562491][ T2248] usb 2-1: New USB device found: idVendor=1235, idProduct=8014, bcdDevice=0.40 [ 1290.562528][ T2248] usb 2-1: no configurations [ 1290.562540][ T2248] usb 2-1: can't read configurations, error -22 [ 1290.562965][ T2248] usb usb2-port1: unable to enumerate USB device [ 1290.670246][T22109] usb 3-1: New USB device found: idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1290.671270][T22109] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1290.671300][T22109] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1290.673335][T22109] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.673351][T22109] usb 3-1: Product: syz [ 1290.673360][T22109] usb 3-1: Manufacturer: syz [ 1290.673368][T22109] usb 3-1: SerialNumber: syz [ 1290.677359][T22109] usb 3-1: config 0 descriptor?? [ 1290.720033][T22367] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1290.782192][ T8713] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 1290.782217][ T8713] sq905c 1-1:0.0: Get version command failed [ 1290.782312][ T8713] sq905c 1-1:0.0: probe with driver sq905c failed with error -71 [ 1290.793295][ T8713] usb 1-1: USB disconnect, device number 99 [ 1290.897034][ T2248] usb 3-1: USB disconnect, device number 7 [ 1290.992443][T22373] binder: Failure when writing BR_NOOP at beginning of buffer. [ 1290.992459][T22373] binder: Read failure Err(EFAULT) in pid:1028 [ 1290.996830][T22373] binder: Failure when writing BR_NOOP at beginning of buffer. [ 1290.996846][T22373] binder: Read failure Err(EFAULT) in pid:1028 [ 1290.997528][T22373] binder: Failure in copy_transaction_data: EFAULT [ 1290.999269][T22373] syzkaller1: entered promiscuous mode [ 1290.999284][T22373] syzkaller1: entered allmulticast mode [ 1291.789998][ T5710] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1291.896006][T11076] Bluetooth: hci0: Zero size dump init pkt [ 1291.951116][ T5710] usb 3-1: New USB device found: idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1291.952088][ T5710] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 1291.952121][ T5710] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1291.952954][ T5710] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1291.952969][ T5710] usb 3-1: Manufacturer: syz [ 1291.955443][ T5710] usb 3-1: config 0 descriptor?? [ 1292.069848][ T8713] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1292.104643][ T5710] rc_core: IR keymap rc-hauppauge not found [ 1292.104658][ T5710] Registered IR keymap rc-empty [ 1292.105684][ T5710] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1292.111105][ T5710] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input787 [ 1292.118145][T22396] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1292.182958][T21656] usb 3-1: USB disconnect, device number 8 [ 1292.232338][ T8713] usb 5-1: New USB device found: idVendor=046d, idProduct=c281, bcdDevice=1.00 [ 1292.233659][ T8713] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1292.233689][ T8713] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1292.233739][ T8713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.349536][T20918] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1292.469503][ T2248] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 1292.500666][T20918] usb 1-1: New USB device found: idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1292.503890][T20918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.503917][T20918] usb 1-1: Product: syz [ 1292.503931][T20918] usb 1-1: Manufacturer: syz [ 1292.503945][T20918] usb 1-1: SerialNumber: syz [ 1292.506323][T20918] usb 1-1: config 0 descriptor?? [ 1292.514394][T20918] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1292.630284][ T2248] usb 2-1: New USB device found: idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1292.631859][ T2248] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1292.631948][ T2248] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1292.636577][ T2248] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.636603][ T2248] usb 2-1: Product: syz [ 1292.636649][ T2248] usb 2-1: Manufacturer: syz [ 1292.636663][ T2248] usb 2-1: SerialNumber: syz [ 1292.689790][ T2248] usb 2-1: config 0 descriptor?? [ 1292.691686][T22391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1292.692251][T22391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1292.714522][ T8713] iforce 5-1:1.0: usb_submit_urb failed: -32 [ 1292.715307][ T8713] iforce 5-1:1.0: usb_submit_urb failed: -32 [ 1292.717833][ T8713] iforce 5-1:1.0: usb_submit_urb failed: -32 [ 1292.757353][T22398] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1292.811664][T20918] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 1292.811689][T20918] sq905c 1-1:0.0: Get version command failed [ 1292.811771][T20918] sq905c 1-1:0.0: probe with driver sq905c failed with error -71 [ 1292.820286][T20918] usb 1-1: USB disconnect, device number 100 [ 1292.911595][ T2248] usb 2-1: USB disconnect, device number 27 [ 1293.132675][ T8713] iforce 5-1:1.0: usb_submit_urb failed: -32 [ 1293.133256][ T8713] iforce 5-1:1.0: usb_submit_urb failed: -32 [ 1293.135121][ T8713] iforce 5-1:1.0: usb_submit_urb failed: -32 [ 1293.135944][ T8713] iforce 5-1:1.0: usb_submit_urb failed: -32 [ 1293.344677][ T8713] iforce 5-1:1.0: usb_submit_urb failed: -71 [ 1293.345157][ T8713] iforce 5-1:1.0: usb_submit_urb failed: -71 [ 1293.346185][ T8713] iforce 5-1:1.0: usb_submit_urb failed: -71 [ 1293.346947][ T8713] iforce 5-1:1.0: usb_submit_urb failed: -71 [ 1293.348531][ T8713] iforce 5-1:1.0: usb_submit_urb failed: -71 [ 1293.391309][ T8713] iforce 5-1:1.0: usb_submit_urb failed: -71 [ 1293.391822][ T8713] iforce 5-1:1.0: usb_submit_urb failed: -71 [ 1293.392307][ T8713] iforce 5-1:1.0: usb_submit_urb failed: -71 [ 1293.392828][ T8713] iforce 5-1:1.0: usb_submit_urb failed: -71 [ 1293.393262][ T8713] iforce 5-1:1.0: usb_submit_urb failed: -71 [ 1293.393308][ T8713] input input788: Timeout waiting for response from device. [ 1293.397188][T22423] FAULT_INJECTION: forcing a failure. [ 1293.397188][T22423] name failslab, interval 1, probability 0, space 0, times 0 [ 1293.397221][T22423] CPU: 0 UID: 0 PID: 22423 Comm: syz.0.5249 Tainted: G L syzkaller #0 PREEMPT(full) [ 1293.397248][T22423] Tainted: [L]=SOFTLOCKUP [ 1293.397256][T22423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1293.397268][T22423] Call Trace: [ 1293.397276][T22423] [ 1293.397286][T22423] dump_stack_lvl+0xe8/0x150 [ 1293.397325][T22423] should_fail_ex+0x3eb/0x540 [ 1293.397352][T22423] should_failslab+0xa8/0x100 [ 1293.397374][T22423] __kmalloc_node_noprof+0xfb/0x720 [ 1293.397394][T22423] ? crypto_create_tfm_node+0x81/0x3c0 [ 1293.397414][T22423] ? crypto_create_tfm_node+0x81/0x3c0 [ 1293.397440][T22423] crypto_create_tfm_node+0x81/0x3c0 [ 1293.397469][T22423] crypto_alloc_tfm_node+0x169/0x3e0 [ 1293.397501][T22423] esp_init_state+0x3b6/0x1220 [ 1293.397593][T22423] ? do_syscall_64+0x166/0x520 [ 1293.397612][T22423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1293.397638][T22423] ? __lock_acquire+0x747/0x2de0 [ 1293.397663][T22423] ? __pfx_esp_init_state+0x10/0x10 [ 1293.397719][T22423] ? __xfrm_init_state+0x745/0x1320 [ 1293.397747][T22423] __xfrm_init_state+0x9dd/0x1320 [ 1293.397767][T22423] ? __xfrm_init_state+0x745/0x1320 [ 1293.397790][T22423] xfrm_add_sa+0x2f3f/0x40a0 [ 1293.397844][T22423] ? __pfx_xfrm_add_sa+0x10/0x10 [ 1293.397861][T22423] ? apparmor_capable+0x126/0x170 [ 1293.397887][T22423] ? __nla_parse+0x40/0x60 [ 1293.397911][T22423] xfrm_user_rcv_msg+0x7a8/0xf30 [ 1293.397936][T22423] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1293.397991][T22423] ? __mutex_trylock_common+0x15f/0x270 [ 1293.398016][T22423] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1293.398039][T22423] ? rcu_is_watching+0x16/0xb0 [ 1293.398060][T22423] ? trace_contention_end+0x3d/0x140 [ 1293.398089][T22423] netlink_rcv_skb+0x226/0x4a0 [ 1293.398112][T22423] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1293.398131][T22423] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1293.398171][T22423] ? netlink_deliver_tap+0x2e/0x1b0 [ 1293.398191][T22423] ? netlink_deliver_tap+0x2e/0x1b0 [ 1293.398214][T22423] xfrm_netlink_rcv+0x79/0x90 [ 1293.398235][T22423] netlink_unicast+0x7bd/0x940 [ 1293.398268][T22423] netlink_sendmsg+0x7c3/0xae0 [ 1293.398303][T22423] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1293.398334][T22423] ? apparmor_socket_sendmsg+0x98/0x360 [ 1293.398357][T22423] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1293.398376][T22423] sock_sendmsg_nosec+0x14e/0x190 [ 1293.398402][T22423] ____sys_sendmsg+0x54e/0x850 [ 1293.398429][T22423] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1293.398459][T22423] ? import_iovec+0x73/0xa0 [ 1293.398483][T22423] ___sys_sendmsg+0x2a5/0x360 [ 1293.398501][T22423] ? __lock_acquire+0x747/0x2de0 [ 1293.398525][T22423] ? __pfx____sys_sendmsg+0x10/0x10 [ 1293.398586][T22423] ? __fget_files+0x3a2/0x420 [ 1293.398606][T22423] ? __fget_files+0x2a/0x420 [ 1293.398635][T22423] __x64_sys_sendmsg+0x1b1/0x290 [ 1293.398660][T22423] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1293.398704][T22423] do_syscall_64+0x166/0x520 [ 1293.398723][T22423] ? trace_irq_disable+0x3b/0x140 [ 1293.398741][T22423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1293.398761][T22423] ? clear_bhb_loop+0x70/0xc0 [ 1293.398785][T22423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1293.398803][T22423] RIP: 0033:0x7f175999e1d9 [ 1293.398825][T22423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1293.398842][T22423] RSP: 002b:00007f175a8c3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1293.398865][T22423] RAX: ffffffffffffffda RBX: 00007f1759c25fa0 RCX: 00007f175999e1d9 [ 1293.398880][T22423] RDX: 0000000000002014 RSI: 0000200000000000 RDI: 0000000000000003 [ 1293.398894][T22423] RBP: 00007f175a8c3090 R08: 0000000000000000 R09: 0000000000000000 [ 1293.398906][T22423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1293.398919][T22423] R13: 00007f1759c26038 R14: 00007f1759c25fa0 R15: 00007ffc7a92f2f8 [ 1293.398953][T22423] [ 1293.628499][T22426] Bluetooth: hci0: unsupported parameter 5135 [ 1293.628523][T22426] Bluetooth: hci0: unsupported parameter 8192 [ 1293.628557][T22426] Bluetooth: hci0: unsupported parameter 5135 [ 1293.628569][T22426] Bluetooth: hci0: unsupported parameter 8192 [ 1293.702059][ T8713] usb 5-1: USB disconnect, device number 18 [ 1293.954417][T22436] FAULT_INJECTION: forcing a failure. [ 1293.954417][T22436] name failslab, interval 1, probability 0, space 0, times 0 [ 1293.954455][T22436] CPU: 1 UID: 0 PID: 22436 Comm: syz.4.5253 Tainted: G L syzkaller #0 PREEMPT(full) [ 1293.954485][T22436] Tainted: [L]=SOFTLOCKUP [ 1293.954494][T22436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1293.954507][T22436] Call Trace: [ 1293.954517][T22436] [ 1293.954527][T22436] dump_stack_lvl+0xe8/0x150 [ 1293.954559][T22436] should_fail_ex+0x3eb/0x540 [ 1293.954589][T22436] should_failslab+0xa8/0x100 [ 1293.954623][T22436] __kmalloc_noprof+0xf9/0x710 [ 1293.954646][T22436] ? lockdep_hardirqs_on+0x7b/0x110 [ 1293.954667][T22436] ? l2tp_session_create+0x42/0xd10 [ 1293.954759][T22436] ? l2tp_session_create+0x42/0xd10 [ 1293.954789][T22436] l2tp_session_create+0x42/0xd10 [ 1293.954827][T22436] pppol2tp_connect+0xc68/0x18b0 [ 1293.954864][T22436] ? __pfx_pppol2tp_connect+0x10/0x10 [ 1293.954884][T22436] ? lock_acquire+0x115/0x350 [ 1293.954913][T22436] ? __pfx_aa_sk_perm+0x10/0x10 [ 1293.954941][T22436] ? apparmor_socket_connect+0x13e/0x210 [ 1293.954966][T22436] ? bpf_lsm_socket_connect+0x9/0x20 [ 1293.954993][T22436] __sys_connect+0x316/0x450 [ 1293.955019][T22436] ? __pfx___sys_connect+0x10/0x10 [ 1293.955055][T22436] ? rcu_is_watching+0x16/0xb0 [ 1293.955086][T22436] __x64_sys_connect+0x7a/0x90 [ 1293.955110][T22436] do_syscall_64+0x166/0x520 [ 1293.955130][T22436] ? trace_irq_disable+0x3b/0x140 [ 1293.955149][T22436] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1293.955169][T22436] ? clear_bhb_loop+0x70/0xc0 [ 1293.955191][T22436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1293.955212][T22436] RIP: 0033:0x7f20be59e1d9 [ 1293.955233][T22436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1293.955251][T22436] RSP: 002b:00007f20bf4be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1293.955274][T22436] RAX: ffffffffffffffda RBX: 00007f20be825fa0 RCX: 00007f20be59e1d9 [ 1293.955290][T22436] RDX: 0000000000000032 RSI: 00002000000002c0 RDI: 0000000000000004 [ 1293.955303][T22436] RBP: 00007f20be635888 R08: 0000000000000000 R09: 0000000000000000 [ 1293.955316][T22436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1293.955330][T22436] R13: 00007f20be826038 R14: 00007f20be825fa0 R15: 00007ffffb0df608 [ 1293.955364][T22436] [ 1294.122309][T20918] usb 1-1: new full-speed USB device number 101 using dummy_hcd [ 1294.225706][T22441] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1294.278960][T20918] usb 1-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1294.287384][T20918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1294.287412][T20918] usb 1-1: Product: syz [ 1294.287425][T20918] usb 1-1: Manufacturer: syz [ 1294.287438][T20918] usb 1-1: SerialNumber: syz [ 1294.293787][T20918] usb 1-1: config 0 descriptor?? [ 1294.497407][T20918] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1294.669556][T20920] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1294.688012][ T8713] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1294.789613][ T2248] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 1294.840215][ T8713] usb 2-1: New USB device found: idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1294.841357][ T8713] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 1294.841410][ T8713] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1294.842617][ T8713] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1294.842640][ T8713] usb 2-1: Manufacturer: syz [ 1294.845070][ T8713] usb 2-1: config 0 descriptor?? [ 1294.893925][T20920] usb 5-1: New USB device found: idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1294.916044][T20920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1294.916072][T20920] usb 5-1: Product: syz [ 1294.916112][T20920] usb 5-1: Manufacturer: syz [ 1294.916125][T20920] usb 5-1: SerialNumber: syz [ 1294.927910][T20920] usb 5-1: config 0 descriptor?? [ 1294.935325][ T8713] rc_core: IR keymap rc-hauppauge not found [ 1294.935342][ T8713] Registered IR keymap rc-empty [ 1294.936597][ T8713] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1294.943271][ T8713] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input789 [ 1294.984517][T20920] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1295.000397][ T2248] usb 3-1: New USB device found: idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1295.002200][ T2248] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1295.002271][ T2248] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1295.002296][ T2248] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1295.002322][ T2248] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1295.002344][ T2248] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1295.005316][ T2248] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1295.005342][ T2248] usb 3-1: Product: syz [ 1295.005357][ T2248] usb 3-1: Manufacturer: syz [ 1295.005405][ T2248] usb 3-1: SerialNumber: syz [ 1295.019105][ T2248] usb 3-1: config 0 descriptor?? [ 1295.108771][ T8713] usb 2-1: USB disconnect, device number 28 [ 1295.128960][ T2248] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input790 [ 1295.155650][T22448] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1295.213952][T20920] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 1295.213975][T20920] sq905c 5-1:0.0: Get version command failed [ 1295.214086][T20920] sq905c 5-1:0.0: probe with driver sq905c failed with error -71 [ 1295.243426][T20920] usb 5-1: USB disconnect, device number 19 [ 1295.326927][ T8713] usb 3-1: USB disconnect, device number 9 [ 1295.912884][T11076] Bluetooth: hci0: Zero size dump init pkt [ 1295.938987][T20918] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1295.954365][T20918] usb 1-1: USB disconnect, device number 101 [ 1295.979790][T21656] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1296.040146][T22464] FAULT_INJECTION: forcing a failure. [ 1296.040146][T22464] name failslab, interval 1, probability 0, space 0, times 0 [ 1296.040170][T22464] CPU: 0 UID: 0 PID: 22464 Comm: syz.2.5263 Tainted: G L syzkaller #0 PREEMPT(full) [ 1296.040188][T22464] Tainted: [L]=SOFTLOCKUP [ 1296.040201][T22464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1296.040209][T22464] Call Trace: [ 1296.040214][T22464] [ 1296.040220][T22464] dump_stack_lvl+0xe8/0x150 [ 1296.040239][T22464] should_fail_ex+0x3eb/0x540 [ 1296.040254][T22464] should_failslab+0xa8/0x100 [ 1296.040268][T22464] __kmalloc_node_noprof+0xfb/0x720 [ 1296.040281][T22464] ? __kmalloc_node_noprof+0x2eb/0x720 [ 1296.040291][T22464] ? blk_mq_alloc_tag_set+0x5f8/0x1000 [ 1296.040303][T22464] ? blk_mq_alloc_tag_set+0x5f8/0x1000 [ 1296.040318][T22464] blk_mq_alloc_tag_set+0x5f8/0x1000 [ 1296.040336][T22464] loop_add+0x436/0xb40 [ 1296.040415][T22464] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1296.040429][T22464] ? __pfx_loop_add+0x10/0x10 [ 1296.040457][T22464] loop_control_ioctl+0x12b/0x5a0 [ 1296.040468][T22464] ? __fget_files+0x2a/0x420 [ 1296.040480][T22464] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1296.040493][T22464] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1296.040505][T22464] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1296.040516][T22464] __se_sys_ioctl+0xfc/0x170 [ 1296.040529][T22464] do_syscall_64+0x166/0x520 [ 1296.040540][T22464] ? trace_irq_disable+0x3b/0x140 [ 1296.040551][T22464] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1296.040563][T22464] ? clear_bhb_loop+0x70/0xc0 [ 1296.040576][T22464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1296.040588][T22464] RIP: 0033:0x7f6aef79e1d9 [ 1296.040600][T22464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1296.040611][T22464] RSP: 002b:00007f6af062d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1296.040626][T22464] RAX: ffffffffffffffda RBX: 00007f6aefa25fa0 RCX: 00007f6aef79e1d9 [ 1296.040636][T22464] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1296.040644][T22464] RBP: 00007f6af062d090 R08: 0000000000000000 R09: 0000000000000000 [ 1296.040652][T22464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1296.040659][T22464] R13: 00007f6aefa26038 R14: 00007f6aefa25fa0 R15: 00007fff70bda4a8 [ 1296.040677][T22464] [ 1296.080946][T22109] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1296.141244][T21656] usb 2-1: New USB device found: idVendor=2c7c, idProduct=0125, bcdDevice=0.00 [ 1296.142417][T21656] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1296.142463][T21656] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1296.142501][T21656] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1296.153743][T21656] option 2-1:1.0: GSM modem (1-port) converter detected [ 1296.165330][T21656] usb 2-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 1296.250786][T22109] usb 5-1: New USB device found: idVendor=046d, idProduct=c281, bcdDevice=1.00 [ 1296.253648][T22109] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1296.253676][T22109] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1296.253720][T22109] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1296.401371][T21656] usb 2-1: USB disconnect, device number 29 [ 1296.407029][T21656] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 1296.410453][T21656] option 2-1:1.0: device disconnected [ 1296.673889][T22460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1296.674563][T22460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1296.676960][T22109] iforce 5-1:1.0: usb_submit_urb failed: -32 [ 1296.677496][T22109] iforce 5-1:1.0: usb_submit_urb failed: -32 [ 1296.679186][T22109] iforce 5-1:1.0: usb_submit_urb failed: -32 [ 1296.794423][T22476] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1297.018828][T22478] ecryptfs_verify_version: Minor version number mismatch. Expected [4]; got [0] [ 1297.018851][T22478] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 1297.018861][T22478] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 1297.018868][T22478] One or more global auth toks could not properly register; rc = [-22] [ 1297.018892][T22478] Error validating options; rc = [-22] [ 1297.087453][T22109] iforce 5-1:1.0: usb_submit_urb failed: -32 [ 1297.088206][T22109] iforce 5-1:1.0: usb_submit_urb failed: -32 [ 1297.088779][T22109] iforce 5-1:1.0: usb_submit_urb failed: -32 [ 1297.089307][T22109] iforce 5-1:1.0: usb_submit_urb failed: -32 [ 1297.241317][ T5760] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1297.311771][T22109] iforce 5-1:1.0: usb_submit_urb failed: -71 [ 1297.312318][T22109] iforce 5-1:1.0: usb_submit_urb failed: -71 [ 1297.312887][T22109] iforce 5-1:1.0: usb_submit_urb failed: -71 [ 1297.313351][T22109] iforce 5-1:1.0: usb_submit_urb failed: -71 [ 1297.314023][T22109] iforce 5-1:1.0: usb_submit_urb failed: -71 [ 1297.316780][T22109] iforce 5-1:1.0: usb_submit_urb failed: -71 [ 1297.317276][T22109] iforce 5-1:1.0: usb_submit_urb failed: -71 [ 1297.317749][T22109] iforce 5-1:1.0: usb_submit_urb failed: -71 [ 1297.318328][T22109] iforce 5-1:1.0: usb_submit_urb failed: -71 [ 1297.321473][T22109] iforce 5-1:1.0: usb_submit_urb failed: -71 [ 1297.321519][T22109] input input791: Timeout waiting for response from device. [ 1297.330180][T22109] usb 5-1: USB disconnect, device number 20 [ 1297.385875][T20918] usb 1-1: new full-speed USB device number 102 using dummy_hcd [ 1297.390707][ T5760] usb 2-1: New USB device found: idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1297.396830][ T5760] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.396856][ T5760] usb 2-1: Product: syz [ 1297.396869][ T5760] usb 2-1: Manufacturer: syz [ 1297.396882][ T5760] usb 2-1: SerialNumber: syz [ 1297.405588][ T5760] usb 2-1: config 0 descriptor?? [ 1297.418201][ T5760] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1297.580826][T20918] usb 1-1: New USB device found: idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1297.584332][T20918] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1297.584362][T20918] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1297.584386][T20918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1297.584442][T20918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1297.584465][T20918] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1297.617496][T22481] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1297.623189][T20918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.623217][T20918] usb 1-1: Product: syz [ 1297.623232][T20918] usb 1-1: Manufacturer: syz [ 1297.623247][T20918] usb 1-1: SerialNumber: syz [ 1297.712228][T20918] usb 1-1: config 0 descriptor?? [ 1297.718599][T20918] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input792 [ 1297.747827][ T5760] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 1297.747851][ T5760] sq905c 2-1:0.0: Get version command failed [ 1297.747941][ T5760] sq905c 2-1:0.0: probe with driver sq905c failed with error -71 [ 1297.755208][ T5760] usb 2-1: USB disconnect, device number 30 [ 1297.940823][T20918] usb 1-1: USB disconnect, device number 102 [ 1298.004602][T22488] FAULT_INJECTION: forcing a failure. [ 1298.004602][T22488] name failslab, interval 1, probability 0, space 0, times 0 [ 1298.004641][T22488] CPU: 0 UID: 0 PID: 22488 Comm: syz.4.5271 Tainted: G L syzkaller #0 PREEMPT(full) [ 1298.004667][T22488] Tainted: [L]=SOFTLOCKUP [ 1298.004675][T22488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1298.004687][T22488] Call Trace: [ 1298.004696][T22488] [ 1298.004705][T22488] dump_stack_lvl+0xe8/0x150 [ 1298.004735][T22488] should_fail_ex+0x3eb/0x540 [ 1298.004762][T22488] should_failslab+0xa8/0x100 [ 1298.004786][T22488] __kmalloc_noprof+0xf9/0x710 [ 1298.004807][T22488] ? tomoyo_encode+0x2ad/0x570 [ 1298.004826][T22488] ? tomoyo_encode+0x2ad/0x570 [ 1298.004852][T22488] tomoyo_encode+0x2ad/0x570 [ 1298.004879][T22488] tomoyo_realpath_from_path+0x5fa/0x640 [ 1298.004914][T22488] tomoyo_check_open_permission+0x229/0x470 [ 1298.004937][T22488] ? tomoyo_check_open_permission+0x1d3/0x470 [ 1298.004957][T22488] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1298.004981][T22488] ? __asan_memset+0x22/0x50 [ 1298.005035][T22488] ? tomoyo_file_open+0x163/0x220 [ 1298.005065][T22488] ? devcgroup_check_permission+0x31/0x8f0 [ 1298.005091][T22488] security_file_open+0xa9/0x240 [ 1298.005112][T22488] do_dentry_open+0x495/0x1360 [ 1298.005144][T22488] vfs_open_consume+0x4a/0x350 [ 1298.005161][T22488] ? path_openat+0x148a/0x1da0 [ 1298.005183][T22488] path_openat+0x14a6/0x1da0 [ 1298.005224][T22488] do_file_open+0x23e/0x4a0 [ 1298.005248][T22488] ? __pfx_do_file_open+0x10/0x10 [ 1298.005292][T22488] ? _raw_spin_unlock+0x28/0x50 [ 1298.005312][T22488] ? alloc_fd+0x6af/0x760 [ 1298.005343][T22488] do_sys_openat2+0x115/0x200 [ 1298.005365][T22488] ? __pfx_do_sys_openat2+0x10/0x10 [ 1298.005386][T22488] ? ksys_write+0x242/0x270 [ 1298.005407][T22488] ? __pfx_ksys_write+0x10/0x10 [ 1298.005431][T22488] __x64_sys_openat+0x138/0x170 [ 1298.005455][T22488] do_syscall_64+0x166/0x520 [ 1298.005473][T22488] ? trace_irq_disable+0x3b/0x140 [ 1298.005491][T22488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1298.005510][T22488] ? clear_bhb_loop+0x70/0xc0 [ 1298.005531][T22488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1298.005550][T22488] RIP: 0033:0x7f20be59e1d9 [ 1298.005570][T22488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1298.005587][T22488] RSP: 002b:00007f20bf4be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1298.005610][T22488] RAX: ffffffffffffffda RBX: 00007f20be825fa0 RCX: 00007f20be59e1d9 [ 1298.005626][T22488] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1298.005640][T22488] RBP: 00007f20bf4be090 R08: 0000000000000000 R09: 0000000000000000 [ 1298.005653][T22488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1298.005665][T22488] R13: 00007f20be826038 R14: 00007f20be825fa0 R15: 00007ffffb0df608 [ 1298.005700][T22488] [ 1298.049649][T22488] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1298.246664][T22490] FAULT_INJECTION: forcing a failure. [ 1298.246664][T22490] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1298.246695][T22490] CPU: 1 UID: 0 PID: 22490 Comm: syz.2.5272 Tainted: G L syzkaller #0 PREEMPT(full) [ 1298.246719][T22490] Tainted: [L]=SOFTLOCKUP [ 1298.246727][T22490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1298.246737][T22490] Call Trace: [ 1298.246746][T22490] [ 1298.246754][T22490] dump_stack_lvl+0xe8/0x150 [ 1298.246781][T22490] should_fail_ex+0x3eb/0x540 [ 1298.246806][T22490] get_futex_key+0x1b4/0x1580 [ 1298.246824][T22490] ? __lock_acquire+0x747/0x2de0 [ 1298.246847][T22490] ? kasan_save_track+0x3e/0x80 [ 1298.246865][T22490] ? __kasan_slab_free+0x5c/0x80 [ 1298.246881][T22490] ? kmem_cache_free+0x182/0x650 [ 1298.246901][T22490] ? __pfx_get_futex_key+0x10/0x10 [ 1298.246931][T22490] futex_wake+0x119/0x5f0 [ 1298.246954][T22490] ? __pfx_futex_wake+0x10/0x10 [ 1298.246976][T22490] ? __seccomp_filter+0x3e4/0x1e90 [ 1298.247004][T22490] do_futex+0x458/0x4e0 [ 1298.247028][T22490] ? __pfx_do_futex+0x10/0x10 [ 1298.247043][T22490] ? kmem_cache_free+0x182/0x650 [ 1298.247078][T22490] __se_sys_futex+0x3a8/0x450 [ 1298.247103][T22490] ? __pfx___se_sys_futex+0x10/0x10 [ 1298.247129][T22490] ? __seccomp_permit_syscall+0xe7/0x2b0 [ 1298.247146][T22490] ? __x64_sys_futex+0x21/0xf0 [ 1298.247167][T22490] do_syscall_64+0x166/0x520 [ 1298.247185][T22490] ? trace_irq_disable+0x3b/0x140 [ 1298.247201][T22490] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1298.247219][T22490] ? clear_bhb_loop+0x70/0xc0 [ 1298.247239][T22490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1298.247260][T22490] RIP: 0033:0x7f6aef79e1d9 [ 1298.247279][T22490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1298.247295][T22490] RSP: 002b:00007f6af062d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1298.247316][T22490] RAX: ffffffffffffffda RBX: 00007f6aefa25fa8 RCX: 00007f6aef79e1d9 [ 1298.247329][T22490] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6aefa25fac [ 1298.247342][T22490] RBP: 00007f6aefa25fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 1298.247355][T22490] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 1298.247366][T22490] R13: 00007f6aefa26038 R14: 00007fff70bda3c0 R15: 00007fff70bda4a8 [ 1298.247396][T22490] [ 1298.419585][ T5760] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 1298.570225][ T5760] usb 5-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1298.578979][ T5760] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.579006][ T5760] usb 5-1: Product: syz [ 1298.579020][ T5760] usb 5-1: Manufacturer: syz [ 1298.579033][ T5760] usb 5-1: SerialNumber: syz [ 1298.616805][ T5760] usb 5-1: config 0 descriptor?? [ 1298.820435][ T5760] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1298.930582][ T8713] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1299.079459][ T8713] usb 1-1: Using ep0 maxpacket: 32 [ 1299.080425][ T8713] usb 1-1: New USB device found: idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1299.081404][ T8713] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1299.081420][ T8713] usb 1-1: config 0 has no interface number 0 [ 1299.081449][ T8713] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1299.081461][ T8713] usb 1-1: config 0 interface 1 has no altsetting 0 [ 1299.083165][ T8713] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.083180][ T8713] usb 1-1: Product: syz [ 1299.083215][ T8713] usb 1-1: Manufacturer: syz [ 1299.083224][ T8713] usb 1-1: SerialNumber: syz [ 1299.087564][ T8713] usb 1-1: config 0 descriptor?? [ 1299.259525][T20918] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1299.288057][T22518] FAULT_INJECTION: forcing a failure. [ 1299.288057][T22518] name failslab, interval 1, probability 0, space 0, times 0 [ 1299.288082][T22518] CPU: 0 UID: 0 PID: 22518 Comm: syz.2.5280 Tainted: G L syzkaller #0 PREEMPT(full) [ 1299.288102][T22518] Tainted: [L]=SOFTLOCKUP [ 1299.288110][T22518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1299.288128][T22518] Call Trace: [ 1299.288137][T22518] [ 1299.288146][T22518] dump_stack_lvl+0xe8/0x150 [ 1299.288176][T22518] should_fail_ex+0x3eb/0x540 [ 1299.288205][T22518] should_failslab+0xa8/0x100 [ 1299.288229][T22518] __kmalloc_cache_noprof+0x9e/0x600 [ 1299.288252][T22518] ? __kmalloc_cache_noprof+0x148/0x600 [ 1299.288272][T22518] ? vhost_net_open+0x117/0x450 [ 1299.288382][T22518] ? vhost_net_open+0x117/0x450 [ 1299.288409][T22518] vhost_net_open+0x117/0x450 [ 1299.288428][T22518] ? misc_open+0x2c6/0x350 [ 1299.288474][T22518] ? __pfx_vhost_net_open+0x10/0x10 [ 1299.288494][T22518] misc_open+0x2d5/0x350 [ 1299.288519][T22518] chrdev_open+0x4d9/0x600 [ 1299.288542][T22518] ? __pfx_chrdev_open+0x10/0x10 [ 1299.288566][T22518] ? devcgroup_check_permission+0x31/0x8f0 [ 1299.288594][T22518] ? __pfx_chrdev_open+0x10/0x10 [ 1299.288614][T22518] do_dentry_open+0x80e/0x1360 [ 1299.288656][T22518] vfs_open_consume+0x4a/0x350 [ 1299.288675][T22518] ? path_openat+0x148a/0x1da0 [ 1299.288697][T22518] path_openat+0x14a6/0x1da0 [ 1299.288747][T22518] do_file_open+0x23e/0x4a0 [ 1299.288774][T22518] ? __pfx_do_file_open+0x10/0x10 [ 1299.288816][T22518] ? _raw_spin_unlock+0x28/0x50 [ 1299.288835][T22518] ? alloc_fd+0x6af/0x760 [ 1299.288868][T22518] do_sys_openat2+0x115/0x200 [ 1299.288891][T22518] ? __se_sys_futex+0x3a8/0x450 [ 1299.288915][T22518] ? __pfx_do_sys_openat2+0x10/0x10 [ 1299.288940][T22518] ? __pfx___se_sys_futex+0x10/0x10 [ 1299.288970][T22518] __x64_sys_openat+0x138/0x170 [ 1299.288998][T22518] do_syscall_64+0x166/0x520 [ 1299.289018][T22518] ? trace_irq_disable+0x3b/0x140 [ 1299.289037][T22518] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1299.289059][T22518] ? clear_bhb_loop+0x70/0xc0 [ 1299.289082][T22518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1299.289103][T22518] RIP: 0033:0x7f6aef79e1d9 [ 1299.289123][T22518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1299.289140][T22518] RSP: 002b:00007f6af062d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1299.289163][T22518] RAX: ffffffffffffffda RBX: 00007f6aefa25fa0 RCX: 00007f6aef79e1d9 [ 1299.289179][T22518] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1299.289193][T22518] RBP: 00007f6aef835888 R08: 0000000000000000 R09: 0000000000000000 [ 1299.289208][T22518] R10: 000000000000003f R11: 0000000000000246 R12: 0000000000000000 [ 1299.289222][T22518] R13: 00007f6aefa26038 R14: 00007f6aefa25fa0 R15: 00007fff70bda4a8 [ 1299.289258][T22518] [ 1299.431001][T20918] usb 2-1: New USB device found: idVendor=046d, idProduct=c281, bcdDevice=1.00 [ 1299.432039][T20918] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1299.432066][T20918] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1299.432100][T20918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1299.483680][ T8713] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1299.487685][ T8713] cx231xx 1-1:0.1: Failed to read PCB config [ 1299.487816][ T8713] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 1299.497904][ T8713] usb 1-1: USB disconnect, device number 103 [ 1299.839550][ T8713] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1299.859083][T22516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1299.861373][T22516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1299.875911][T20918] iforce 2-1:1.0: usb_submit_urb failed: -32 [ 1299.878223][T20918] iforce 2-1:1.0: usb_submit_urb failed: -32 [ 1299.891853][T20918] iforce 2-1:1.0: usb_submit_urb failed: -32 [ 1299.985852][T22520] FAULT_INJECTION: forcing a failure. [ 1299.985852][T22520] name failslab, interval 1, probability 0, space 0, times 0 [ 1299.985886][T22520] CPU: 1 UID: 0 PID: 22520 Comm: syz.2.5281 Tainted: G L syzkaller #0 PREEMPT(full) [ 1299.985910][T22520] Tainted: [L]=SOFTLOCKUP [ 1299.985915][T22520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1299.985922][T22520] Call Trace: [ 1299.985928][T22520] [ 1299.985934][T22520] dump_stack_lvl+0xe8/0x150 [ 1299.985958][T22520] should_fail_ex+0x3eb/0x540 [ 1299.985984][T22520] should_failslab+0xa8/0x100 [ 1299.986007][T22520] __kmalloc_noprof+0xf9/0x710 [ 1299.986028][T22520] ? mutex_init_lockdep+0xdf/0x110 [ 1299.986046][T22520] ? security_task_alloc+0x4d/0x330 [ 1299.986062][T22520] ? security_task_alloc+0x4d/0x330 [ 1299.986079][T22520] security_task_alloc+0x4d/0x330 [ 1299.986101][T22520] copy_process+0x1c72/0x4430 [ 1299.986136][T22520] ? copy_process+0xd11/0x4430 [ 1299.986173][T22520] ? __pfx_copy_process+0x10/0x10 [ 1299.986201][T22520] ? mutex_init_lockdep+0xdf/0x110 [ 1299.986223][T22520] vhost_task_create+0x1f9/0x380 [ 1299.986244][T22520] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 1299.986262][T22520] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 1299.986283][T22520] ? __pfx_vhost_task_create+0x10/0x10 [ 1299.986299][T22520] ? register_lock_class+0x31/0x2e0 [ 1299.986327][T22520] ? __pfx_vhost_task_fn+0x10/0x10 [ 1299.986357][T22520] ? kasan_quarantine_put+0xbb/0x1f0 [ 1299.986386][T22520] kvm_mmu_post_init_vm+0x147/0x2b0 [ 1299.986405][T22520] kvm_arch_vcpu_ioctl_run+0x79/0x18b0 [ 1299.986431][T22520] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 1299.986457][T22520] kvm_vcpu_ioctl+0xa61/0xfd0 [ 1299.986483][T22520] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1299.986541][T22520] ? __fget_files+0x2a/0x420 [ 1299.986555][T22520] ? __fget_files+0x2a/0x420 [ 1299.986566][T22520] ? __fget_files+0x2a/0x420 [ 1299.986587][T22520] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1299.986607][T22520] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1299.986627][T22520] __se_sys_ioctl+0xfc/0x170 [ 1299.986649][T22520] do_syscall_64+0x166/0x520 [ 1299.986668][T22520] ? trace_irq_disable+0x3b/0x140 [ 1299.986681][T22520] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1299.986693][T22520] ? clear_bhb_loop+0x70/0xc0 [ 1299.986706][T22520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1299.986718][T22520] RIP: 0033:0x7f6aef79e1d9 [ 1299.986732][T22520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1299.986749][T22520] RSP: 002b:00007f6af062d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1299.986771][T22520] RAX: ffffffffffffffda RBX: 00007f6aefa25fa0 RCX: 00007f6aef79e1d9 [ 1299.986786][T22520] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 1299.986798][T22520] RBP: 00007f6af062d090 R08: 0000000000000000 R09: 0000000000000000 [ 1299.986810][T22520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1299.986821][T22520] R13: 00007f6aefa26038 R14: 00007f6aefa25fa0 R15: 00007fff70bda4a8 [ 1299.986845][T22520] [ 1299.990992][ T8713] usb 1-1: Using ep0 maxpacket: 32 [ 1299.993048][ T8713] usb 1-1: New USB device found: idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1299.998619][ T8713] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1299.998644][ T8713] usb 1-1: config 0 has no interface number 0 [ 1299.998707][ T8713] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1299.998726][ T8713] usb 1-1: config 0 interface 1 has no altsetting 0 [ 1300.005910][ T8713] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.005961][ T8713] usb 1-1: Product: syz [ 1300.005975][ T8713] usb 1-1: Manufacturer: syz [ 1300.005988][ T8713] usb 1-1: SerialNumber: syz [ 1300.014052][ T8713] usb 1-1: config 0 descriptor?? [ 1300.233199][ T8713] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1300.255169][ T8713] cx231xx 1-1:0.1: bad scenario!!!!! [ 1300.255169][ T8713] config_info=0 [ 1300.255193][ T8713] cx231xx 1-1:0.1: Failed to read PCB config [ 1300.264691][ T5760] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1300.277164][ T5760] usb 5-1: USB disconnect, device number 21 [ 1300.336028][T20918] iforce 2-1:1.0: usb_submit_urb failed: -32 [ 1300.354624][T20918] iforce 2-1:1.0: usb_submit_urb failed: -32 [ 1300.371857][T20918] iforce 2-1:1.0: usb_submit_urb failed: -32 [ 1300.390890][T20918] iforce 2-1:1.0: usb_submit_urb failed: -32 [ 1300.509529][ T8713] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1300.519037][T20920] usb 1-1: USB disconnect, device number 104 [ 1300.580326][T20918] iforce 2-1:1.0: usb_submit_urb failed: -71 [ 1300.580821][T20918] iforce 2-1:1.0: usb_submit_urb failed: -71 [ 1300.581272][T20918] iforce 2-1:1.0: usb_submit_urb failed: -71 [ 1300.581710][T20918] iforce 2-1:1.0: usb_submit_urb failed: -71 [ 1300.582591][T20918] iforce 2-1:1.0: usb_submit_urb failed: -71 [ 1300.583048][T20918] iforce 2-1:1.0: usb_submit_urb failed: -71 [ 1300.583511][T20918] iforce 2-1:1.0: usb_submit_urb failed: -71 [ 1300.583995][T20918] iforce 2-1:1.0: usb_submit_urb failed: -71 [ 1300.584457][T20918] iforce 2-1:1.0: usb_submit_urb failed: -71 [ 1300.584902][T20918] iforce 2-1:1.0: usb_submit_urb failed: -71 [ 1300.584949][T20918] input input793: Timeout waiting for response from device. [ 1300.628402][T20918] usb 2-1: USB disconnect, device number 31 [ 1300.663171][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.663232][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.663713][ T1317] aoe: packet could not be sent on lowpan0. consider increasing tx_queue_len [ 1300.663964][ T8713] usb 3-1: New USB device found: idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1300.667999][ T8713] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.668022][ T8713] usb 3-1: Product: syz [ 1300.668035][ T8713] usb 3-1: Manufacturer: syz [ 1300.668048][ T8713] usb 3-1: SerialNumber: syz [ 1300.726641][ T8713] usb 3-1: config 0 descriptor?? [ 1300.736433][ T8713] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1300.941387][T22522] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1300.992743][ T8713] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 1300.992769][ T8713] sq905c 3-1:0.0: Get version command failed [ 1300.992857][ T8713] sq905c 3-1:0.0: probe with driver sq905c failed with error -71 [ 1301.003044][ T8713] usb 3-1: USB disconnect, device number 10 [ 1301.098932][T22533] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5286'. [ 1301.279776][T20920] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 1301.379693][ T5760] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1301.430342][T20920] usb 5-1: New USB device found: idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1301.431237][T20920] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1301.431254][T20920] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1301.431269][T20920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1301.431285][T20920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1301.431297][T20920] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1301.433007][T20920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.433023][T20920] usb 5-1: Product: syz [ 1301.433031][T20920] usb 5-1: Manufacturer: syz [ 1301.433047][T20920] usb 5-1: SerialNumber: syz [ 1301.435112][T20920] usb 5-1: config 0 descriptor?? [ 1301.529470][ T5760] usb 2-1: Using ep0 maxpacket: 32 [ 1301.533884][ T5760] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1301.533933][ T5760] usb 2-1: New USB device found: idVendor=413c, idProduct=81c2, bcdDevice=c9.4b [ 1301.535089][ T5760] usb 2-1: config 14 has an invalid interface number: 8 but max is 1 [ 1301.535111][ T5760] usb 2-1: config 14 has no interface number 1 [ 1301.535149][ T5760] usb 2-1: config 14 interface 8 has no altsetting 0 [ 1301.535196][ T5760] usb 2-1: config 14 interface 0 has no altsetting 0 [ 1301.538659][ T5760] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.538680][ T5760] usb 2-1: Product: syz [ 1301.538694][ T5760] usb 2-1: Manufacturer: syz [ 1301.538707][ T5760] usb 2-1: SerialNumber: syz [ 1301.584493][T20920] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input794 [ 1301.672507][ T8713] usb 5-1: USB disconnect, device number 22 [ 1302.046533][ T5760] usb 2-1: selecting invalid altsetting 0 [ 1302.046561][ T5760] usb 2-1: Could not set interface, error -22 [ 1302.062954][ T5760] usb 2-1: USB disconnect, device number 32 [ 1302.231905][T22547] FAULT_INJECTION: forcing a failure. [ 1302.231905][T22547] name failslab, interval 1, probability 0, space 0, times 0 [ 1302.231930][T22547] CPU: 0 UID: 0 PID: 22547 Comm: syz.4.5291 Tainted: G L syzkaller #0 PREEMPT(full) [ 1302.231955][T22547] Tainted: [L]=SOFTLOCKUP [ 1302.231961][T22547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1302.231973][T22547] Call Trace: [ 1302.231982][T22547] [ 1302.231992][T22547] dump_stack_lvl+0xe8/0x150 [ 1302.232021][T22547] should_fail_ex+0x3eb/0x540 [ 1302.232047][T22547] should_failslab+0xa8/0x100 [ 1302.232069][T22547] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 1302.232087][T22547] ? __d_alloc+0x37/0x7f0 [ 1302.232097][T22547] ? __d_alloc+0x37/0x7f0 [ 1302.232111][T22547] __d_alloc+0x37/0x7f0 [ 1302.232125][T22547] __d_alloc_parallel+0xde/0x1700 [ 1302.232149][T22547] ? __pfx___d_alloc_parallel+0x10/0x10 [ 1302.232159][T22547] ? lock_acquire+0x115/0x350 [ 1302.232181][T22547] __lookup_slow+0x82/0x2f0 [ 1302.232195][T22547] lookup_slow+0x59/0x80 [ 1302.232207][T22547] link_path_walk+0xd22/0x1910 [ 1302.232230][T22547] path_openat+0x1c4/0x1da0 [ 1302.232252][T22547] do_file_open+0x23e/0x4a0 [ 1302.232267][T22547] ? __pfx_do_file_open+0x10/0x10 [ 1302.232284][T22547] ? __pfx_kfree_link+0x10/0x10 [ 1302.232301][T22547] ? _raw_spin_unlock+0x28/0x50 [ 1302.232313][T22547] ? alloc_fd+0x6af/0x760 [ 1302.232331][T22547] do_sys_openat2+0x115/0x200 [ 1302.232344][T22547] ? __pfx_do_sys_openat2+0x10/0x10 [ 1302.232356][T22547] ? ksys_write+0x242/0x270 [ 1302.232369][T22547] ? __pfx_ksys_write+0x10/0x10 [ 1302.232383][T22547] __x64_sys_openat+0x138/0x170 [ 1302.232397][T22547] do_syscall_64+0x166/0x520 [ 1302.232408][T22547] ? trace_irq_disable+0x3b/0x140 [ 1302.232419][T ** replaying previous printk message ** [ 1302.232419][T22547] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1302.232431][T22547] ? clear_bhb_loop+0x70/0xc0 [ 1302.232444][T22547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1302.232459][T22547] RIP: 0033:0x7f20be55ea0e [ 1302.232472][T22547] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1302.232483][T22547] RSP: 002b:00007f20bf4bdf18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1302.232498][T22547] RAX: ffffffffffffffda RBX: 00007f20bf4be6c0 RCX: 00007f20be55ea0e [ 1302.232508][T22547] RDX: 0000000000000000 RSI: 00007f20be634fb6 RDI: ffffffffffffff9c [ 1302.232516][T22547] RBP: 00007f20bf4be090 R08: 0000000000000000 R09: 0000000000000000 [ 1302.232524][T22547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1302.232532][T22547] R13: 00007f20be826038 R14: 00007f20be825fa0 R15: 00007ffffb0df608 [ 1302.232550][T22547] [ 1302.418868][T22555] ------------[ cut here ]------------ [ 1302.418883][T22555] memcpy: detected buffer overflow: 16 byte read of buffer size 0 [ 1302.418898][T22555] WARNING: lib/string_helpers.c:1037 at __fortify_report+0x6b/0xa0, CPU#0: syz.4.5294/22555 [ 1302.545355][T22555] Modules linked in: [ 1302.549309][T22555] CPU: 0 UID: 0 PID: 22555 Comm: syz.4.5294 Tainted: G L syzkaller #0 PREEMPT(full) [ 1302.560497][T22555] Tainted: [L]=SOFTLOCKUP [ 1302.564857][T22555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1302.575729][T22555] RIP: 0010:__fortify_report+0x89/0xa0 [ 1302.582469][T22555] Code: e8 ec f1 4b fd 48 8d 3d c5 7e d7 0c 45 84 e4 49 8b 37 48 c7 c0 40 8d 8d 8c 48 c7 c1 60 8d 8d 8c 48 0f 44 c8 4c 89 f2 49 89 d8 <67> 48 0f b9 3a 5b 41 5c 41 5e 41 5f 5d e9 45 84 14 07 cc cc cc cc [ 1302.602284][T22555] RSP: 0018:ffffc90009877dc8 EFLAGS: 00010246 [ 1302.608960][T22555] RAX: ffffffff8c8d8d40 RBX: 0000000000000000 RCX: ffffffff8c8d8d40 [ 1302.617013][T22555] RDX: 0000000000000010 RSI: ffffffff8c8d8c20 RDI: ffffffff91c743f0 [ 1302.625075][T22555] RBP: 000000000000000e R08: 0000000000000000 R09: 1ffff11005a5b191 [ 1302.633299][T22555] R10: dffffc0000000000 R11: ffffed1005a5b192 R12: 0000000000000000 [ 1302.641365][T22555] R13: 0000000000000000 R14: 0000000000000010 R15: ffffffff8c8d8a78 [ 1302.649641][T22555] FS: 00007f20bf47c6c0(0000) GS:ffff888123429000(0000) knlGS:0000000000000000 [ 1302.658744][T22555] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1302.665802][T22555] CR2: 00007f20bf47bff8 CR3: 000000007948c000 CR4: 00000000003526f0 [ 1302.674977][T22555] Call Trace: [ 1302.678298][T22555] [ 1302.682011][T22555] __fortify_panic+0x9/0x10 [ 1302.686564][T22555] landlock_merge_ruleset+0xc46/0xc90 [ 1302.692065][T22555] __se_sys_landlock_restrict_self+0x2bc/0xd40 [ 1302.698271][T22555] do_syscall_64+0x166/0x520 [ 1302.702940][T22555] ? trace_irq_disable+0x3b/0x140 [ 1302.708017][T22555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1302.714140][T22555] ? clear_bhb_loop+0x70/0xc0 [ 1302.718837][T22555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1302.724810][T22555] RIP: 0033:0x7f20be59e1d9 [ 1302.729283][T22555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1302.749187][T22555] RSP: 002b:00007f20bf47c028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 1302.757755][T22555] RAX: ffffffffffffffda RBX: 00007f20be826180 RCX: 00007f20be59e1d9 [ 1302.765807][T22555] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000006 [ 1302.774324][T22555] RBP: 00007f20be635888 R08: 0000000000000000 R09: 0000000000000000 [ 1302.783119][T22555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1302.791262][T22555] R13: 00007f20be826218 R14: 00007f20be826180 R15: 00007ffffb0df608 [ 1302.799283][T22555] [ 1302.802376][T22555] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1302.809680][T22555] CPU: 0 UID: 0 PID: 22555 Comm: syz.4.5294 Tainted: G L syzkaller #0 PREEMPT(full) [ 1302.820751][T22555] Tainted: [L]=SOFTLOCKUP [ 1302.825109][T22555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1302.835187][T22555] Call Trace: [ 1302.838663][T22555] [ 1302.841607][T22555] vpanic+0x26f/0x710 [ 1302.845611][T22555] panic+0xc5/0xd0 [ 1302.849341][T22555] ? __pfx_panic+0x10/0x10 [ 1302.853786][T22555] __warn+0x315/0x4c0 [ 1302.857775][T22555] ? __fortify_report+0x6b/0xa0 [ 1302.862647][T22555] ? __fortify_report+0x6b/0xa0 [ 1302.867506][T22555] __report_bug+0x276/0x570 [ 1302.872092][T22555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1302.878178][T22555] ? __fortify_report+0x6b/0xa0 [ 1302.883050][T22555] ? __pfx___report_bug+0x10/0x10 [ 1302.888122][T22555] report_bug_entry+0x19b/0x290 [ 1302.892981][T22555] ? __fortify_report+0x89/0xa0 [ 1302.897845][T22555] ? __fortify_report+0x8e/0xa0 [ 1302.902703][T22555] handle_bug+0xce/0x200 [ 1302.906988][T22555] exc_invalid_op+0x1a/0x50 [ 1302.911508][T22555] asm_exc_invalid_op+0x1a/0x20 [ 1302.916454][T22555] RIP: 0010:__fortify_report+0x89/0xa0 [ 1302.921939][T22555] Code: e8 ec f1 4b fd 48 8d 3d c5 7e d7 0c 45 84 e4 49 8b 37 48 c7 c0 40 8d 8d 8c 48 c7 c1 60 8d 8d 8c 48 0f 44 c8 4c 89 f2 49 89 d8 <67> 48 0f b9 3a 5b 41 5c 41 5e 41 5f 5d e9 45 84 14 07 cc cc cc cc [ 1302.941568][T22555] RSP: 0018:ffffc90009877dc8 EFLAGS: 00010246 [ 1302.947651][T22555] RAX: ffffffff8c8d8d40 RBX: 0000000000000000 RCX: ffffffff8c8d8d40 [ 1302.955718][T22555] RDX: 0000000000000010 RSI: ffffffff8c8d8c20 RDI: ffffffff91c743f0 [ 1302.963713][T22555] RBP: 000000000000000e R08: 0000000000000000 R09: 1ffff11005a5b191 [ 1302.971709][T22555] R10: dffffc0000000000 R11: ffffed1005a5b192 R12: 0000000000000000 [ 1302.979690][T22555] R13: 0000000000000000 R14: 0000000000000010 R15: ffffffff8c8d8a78 [ 1302.987693][T22555] ? __fortify_report+0x2c/0xa0 [ 1302.992562][T22555] __fortify_panic+0x9/0x10 [ 1302.997074][T22555] landlock_merge_ruleset+0xc46/0xc90 [ 1303.002468][T22555] __se_sys_landlock_restrict_self+0x2bc/0xd40 [ 1303.008671][T22555] do_syscall_64+0x166/0x520 [ 1303.013275][T22555] ? trace_irq_disable+0x3b/0x140 [ 1303.018313][T22555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1303.024401][T22555] ? clear_bhb_loop+0x70/0xc0 [ 1303.029107][T22555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1303.035009][T22555] RIP: 0033:0x7f20be59e1d9 [ 1303.039435][T22555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1303.059482][T22555] RSP: 002b:00007f20bf47c028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 1303.067916][T22555] RAX: ffffffffffffffda RBX: 00007f20be826180 RCX: 00007f20be59e1d9 [ 1303.075908][T22555] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000006 [ 1303.083889][T22555] RBP: 00007f20be635888 R08: 0000000000000000 R09: 0000000000000000 [ 1303.091880][T22555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1303.099865][T22555] R13: 00007f20be826218 R14: 00007f20be826180 R15: 00007ffffb0df608 [ 1303.107859][T22555] [ 1303.111036][T22555] Kernel Offset: disabled [ 1303.115378][T22555] Rebooting in 86400 seconds..