last executing test programs: 3m17.779677318s ago: executing program 0 (id=1): mkdir(&(0x7f00000001c0)='./file0\x00', 0x124) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000300)='./file0\x00', 0x0, 0x8b7840, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='rdma.current\x00', 0x275a, 0x0) fsetxattr(r0, &(0x7f0000000a40)=@known='security.selinux\x00', 0x0, 0x0, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b0b, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) mount$9p_fd(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000200), 0xa900b2, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_readahead}, {@debug={'debug', 0x3d, 0xf}}, {@msize={'msize', 0x3d, 0x8}}, {@cache_mmap}, {@msize={'msize', 0x3d, 0x97b2}}, {@aname={'aname', 0x3d, ']&!'}}, {@nodevmap}, {@ignoreqv}, {@dfltgid={'dfltgid', 0x3d, r2}}], [{@fsuuid={'fsuuid', 0x3d, {[0x56, 0x36, 0x32, 0x32, 0x31, 0x66, 0x33, 0x31], 0x2d, [0x31, 0x50, 0x36, 0x63], 0x2d, [0x37, 0x33, 0x61, 0x39], 0x2d, [0x30, 0x62, 0x61, 0x63], 0x2d, [0x61, 0x66, 0x35, 0xa, 0x62, 0x33, 0x64, 0x31]}}}, {@smackfshat={'smackfshat', 0x3d, '$'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@permit_directio}]}}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000480)=0xe8) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000080)={0x50, 0x0, r6, {0x7, 0x29, 0x5, 0xffffffff9080edc4, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x4}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x8000000000, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)={0xb0, 0x0, 0xfffffffffffffff9, [{{0x5, 0x2, 0x9, 0x7, 0x4, 0x1, {0x0, 0xf, 0xb01, 0x7eef, 0x7, 0x4, 0xf9, 0x3, 0x1003, 0x1000, 0x80, r7, r8, 0xa9, 0x4}}, {0x5, 0x3ff, 0x1, 0x2, ','}}]}, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1251000, &(0x7f00000004c0)={[{@uid={'uid', 0x3d, r4}}, {}], [{@fsmagic={'fsmagic', 0x3d, 0x4b}}, {@pcr={'pcr', 0x3d, 0xe}}, {@hash}, {@fowner_eq={'fowner', 0x3d, r7}}, {@smackfstransmute}, {@obj_role={'obj_role', 0x3d, ':'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockname$inet6(r0, &(0x7f0000000780)={0xa, 0x0, 0x0, @remote}, &(0x7f00000007c0)=0x1c) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8b15, &(0x7f0000000080)={'wlan0\x00'}) mkdir(&(0x7f0000000080)='./file0/../file0\x00', 0x85) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84041, 0x0) mount$bpf(0x200000000000, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 3m16.697331052s ago: executing program 0 (id=6): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000003c0), 0x4) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80800) r2 = fanotify_init(0x200, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) sendmmsg$inet(r3, &(0x7f00000051c0), 0x0, 0x4000014) fanotify_mark(r2, 0x1, 0x40000032, 0xffffffffffffffff, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff000, 0x0) r4 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x2}}) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000180)={0x2, @win={{0xc78e, 0xffffcaca, 0x5, 0x7}, 0x8, 0x5, 0x0, 0xfffffeff, 0x0, 0x5}}) 3m13.831741296s ago: executing program 0 (id=13): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0b01, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000400)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @echo={0x8, 0x0, 0x0, 0x7, 0x4}}}, 0x2a) (fail_nth: 5) 3m12.492839211s ago: executing program 0 (id=15): mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x9000000) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) munmap(&(0x7f0000482000/0x2000)=nil, 0x2000) munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000) munmap(&(0x7f0000e76000/0x12000)=nil, 0x12000) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f000064b000/0x4000)=nil, 0x0, 0x100000d, 0x9032, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000667000/0x2000)=nil, 0x2000) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) 3m12.01070941s ago: executing program 0 (id=17): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x280b40, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) 2m56.144382571s ago: executing program 32 (id=17): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x280b40, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) 2m11.967024976s ago: executing program 2 (id=162): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x28881, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000180)={0x1, 0x5, 0x2, 0x3, 0x1, [0x8, 0x3, 0x2ed4, 0x9]}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[], 0xc4}}, 0x2c000010) sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000140001000000000004000000e000000200000000000000000000000000000000000000000000000000000000000000000fff00000a00200000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00@'], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x987a3a9f32358a4c) r4 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x3f0a, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r5 = dup(r1) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="12011001e10ab6407a252f262f4c01020301090212000102951099099000000000000000"], 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e22, 0x6, @empty, 0x2d}}, 0x7, 0xeb2, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r7, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r6, 0x0, r1, 0x0, 0xffff, 0x2) write$midi(r4, &(0x7f0000000300)="80221280", 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0x80000001, @empty, 0x5}}, 0x10001fc, 0x7, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) 2m8.619663062s ago: executing program 2 (id=176): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x88000, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000980)=[@dontfrag={{0x14, 0x29, 0x3e, 0x8}}], 0x2}, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./mnt\x00', 0x1ff) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000200)=',\x00', 0x0, &(0x7f0000000240)={@_ha_fsid={[0x7, 0x3]}, {0x8, 0x9, 0x6, 0x4}}, 0x9, &(0x7f0000000280), &(0x7f00000002c0)=0x3}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000340)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9, 0x0, 0xff, 0xb, 0x1, 0x1ac9}, 0x20) mount(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write$binfmt_script(r2, &(0x7f00000007c0)={'#! ', '', [{0x20, '\':,*'}], 0xa, "1afffd1a70213c85a62272a0527c5b85b9ed7fbe6b9d6d73cd6598aa73bb4e0676b16ac28a6ae1c692040e8b48bed2f3d945fe31ec138a32a757e3551f74e30455a988e7b6ea353684505fbce3159c2c3c1538291c58800b043f0be29f03babc773b33bed84fb8e4bbe17e2c"}, 0x75) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x7, 0x4) r4 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000080)=0x2) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000040)={0x9, 0x0, 0x0, {0xa, 0x3, 0x7, 0xfffffffe}}) 2m7.719118782s ago: executing program 2 (id=180): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r3 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r3, &(0x7f00000008c0)='/', 0x1, 0x0) r4 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000480)={0x44, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x80, 0xffffffffffffffbb, {0x2, 0x7fff, 0xbac, 0x9, 0xffff, 0x1, 0x11, 0x6, 0x3, 0x7, 0x6, 0xf000}}, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3000004, 0x11, r3, 0x0) (async) lseek(r3, 0x0, 0x4) (async) sendfile(r3, r3, &(0x7f00000001c0), 0x7fa) (async) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') (async) r5 = open$dir(&(0x7f0000000000)='./file0\x00', 0x74b0c4, 0x20) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000020c0), 0x2000413, &(0x7f0000000700)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="643d00000000000000007360a0307af5413d7f124afc097c71a2a0ffb91e66599b63c482e560804baa67a008ad7439c27576a641a3846c94b86e3257ad64519eddeda86e8c1a696f2baf835483b1f72b04421cdec5a0d31f3218b1f93834808814275adf9d8fb9901d2544062d2daa", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) syz_fuse_handle_req(r2, &(0x7f0000002100)="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", 0x2000, &(0x7f00000001c0)={&(0x7f0000000000)={0x50, 0x0, 0x8000000000203, {0x7, 0x29, 0xcf940281, 0xa00010, 0x1, 0x1a76, 0x4, 0x1801, 0x0, 0x0, 0x2, 0x2000009e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000500)=ANY=[@ANYRESOCT=0x0, @ANYRESHEX=r3, @ANYRESDEC=r5, @ANYRESHEX=0x0, @ANYRES64=r3, @ANYRES32=r4, @ANYRES32=r0, @ANYRESHEX=r4, @ANYRES16=r2], 0x29) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000001140)=[@in6={0xa, 0x4e20, 0x9, @private0, 0x1}, @in={0x2, 0x4e20, @rand_addr=0x64010100}]}, &(0x7f0000000440)=0x10) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x84, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x2}, 0x90) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000280)=@nullb, 0x0, &(0x7f0000000580)) prlimit64(0x0, 0x2, &(0x7f0000000000)={0x100000000200000c, 0x38}, 0x0) (async) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0xa02) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r7, {0x5}}, './file1\x00'}) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r7, 0xc03864bc, &(0x7f00000014c0)={0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) (async, rerun: 64) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000005000/0x2000)=nil) (rerun: 64) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) 2m4.439250415s ago: executing program 2 (id=196): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f0000000040)='./file0/../file0\x00', 0xc) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r2}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000007c0)={0x28, 0x5, r2, 0x0, &(0x7f0000fef000/0xe000)=nil, 0xe000, 0xfffffffffffffcaa}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x18, r3, 0x2, 0x0, &(0x7f00000003c0)=[{0x5, 0x7}, {0x0, 0x9}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r5) keyctl$get_persistent(0x16, r5, 0xfffffffffffffffe) mount$nfs4(&(0x7f00000001c0)='.#\x00', &(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000340), 0x102001, &(0x7f0000000400)={[{'{-}^'}, {'/dev/iommu\x00'}, {'&+'}], [{@uid_eq={'uid', 0x3d, r5}}, {@smackfsdef={'smackfsdef', 0x3d, '#%^'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/iommu\x00'}}, {@context={'context', 0x3d, 'staff_u'}}]}) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="0433"], 0xd) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x10100, 0x4}, 0x18) open_tree(r6, &(0x7f0000000140)='./file0\x00', 0x800) 2m3.759227569s ago: executing program 2 (id=201): r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @win={{0xc78e, 0xffffcaca, 0x68, 0x7}, 0x8, 0x5, 0x0, 0xfffffeff, 0x0, 0x5}}) (fail_nth: 3) 2m2.72271091s ago: executing program 2 (id=209): r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x0, [[0x11, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x2, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}], '\x00', 0x5}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000000)=0xcfe) r1 = syz_usb_connect(0x3, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ca08100100010102030109023e0001010080fa0904000002ff00000007058302000200070504020002"], 0x0) syz_usb_disconnect(r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xe8100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x8, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_SET_FPU(r4, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0xd, 0x96, 0x0, 0x100, 0x10000, 0x1, '\x00', 0x1}) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_usb_ep_read(r1, 0x4, 0x0, 0x0) syz_usb_ep_write(r1, 0x83, 0x0, 0x0) syz_usb_ep_read(r1, 0xd7, 0x0, 0x0) syz_usb_ep_read(r1, 0x4, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f00), r7) sendmsg$IEEE802154_ASSOCIATE_RESP(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, r8, 0xb2a1b35509eef03b, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x48800}, 0x4000040) syz_usb_ep_write(r1, 0x83, 0x0, 0x0) syz_usb_ep_read(r1, 0x4, 0x0, 0x0) syz_usb_ep_read(r1, 0x4, 0x0, 0x0) syz_usb_ep_write(r1, 0x83, 0x0, 0x0) 2m2.184542397s ago: executing program 33 (id=209): r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x0, [[0x11, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x2, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}], '\x00', 0x5}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000000)=0xcfe) r1 = syz_usb_connect(0x3, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ca08100100010102030109023e0001010080fa0904000002ff00000007058302000200070504020002"], 0x0) syz_usb_disconnect(r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xe8100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x8, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_SET_FPU(r4, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0xd, 0x96, 0x0, 0x100, 0x10000, 0x1, '\x00', 0x1}) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_usb_ep_read(r1, 0x4, 0x0, 0x0) syz_usb_ep_write(r1, 0x83, 0x0, 0x0) syz_usb_ep_read(r1, 0xd7, 0x0, 0x0) syz_usb_ep_read(r1, 0x4, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f00), r7) sendmsg$IEEE802154_ASSOCIATE_RESP(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, r8, 0xb2a1b35509eef03b, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x48800}, 0x4000040) syz_usb_ep_write(r1, 0x83, 0x0, 0x0) syz_usb_ep_read(r1, 0x4, 0x0, 0x0) syz_usb_ep_read(r1, 0x4, 0x0, 0x0) syz_usb_ep_write(r1, 0x83, 0x0, 0x0) 12.998622542s ago: executing program 1 (id=556): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000000180)="703a732f70202e2f66696c65303a301125", 0x11) 12.656382041s ago: executing program 1 (id=558): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, &(0x7f0000000000)={0x20, 0xc, 0x51, {0x51, 0x2, "77d5ba108e5acf01f21b5a2c4972a0cf556e5da7be89a4c2ec080bda59db681411514f190f51d2e3d169a9783548100e0bfad7b1ac0ae0350d383f485fc1e6d5b4a748fb2f9096b4f185f0ad3c06fc"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1f, @string={0x1f, 0x3, "96cc2e1ba5f138585b8e8cfcc3b35804eecc73ed168beb50da3b9380f9"}}, &(0x7f0000000100)={0x0, 0x22, 0xd, {[@global=@item_4={0x3, 0x1, 0xd, "c1be637a"}, @global=@item_4={0x3, 0x1, 0x3, "f8fd808b"}, @local=@item_012={0x2, 0x2, 0x0, "9858"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0xa6, 0x1, {0x22, 0xb95}}}}, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x20, 0x5, 0x4f, "26211432fe4797105add025ad0bc10d3cd1f8ee568f63bb6ae1d4c6aeb93307c92f24cf69dbcbadb3fa4fbba0cd91556c3898553537bc822493a6d9a3dd007d17fa45c84fe5831aff834da8ebdcaa5"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000280)={0x0, 0x8, 0x1}, &(0x7f00000002c0)={0x20, 0x1, 0x7f, "3512813b35dfdd714374d896413d9941f6259cc77a8b6dea507290888a573c2d269f81f7a18700054b0a27c52d1fcb13448525c218296018a71461940e3f5678b50514feb8f0db51ccc7e7767598b13c71f75b1188601e6d77f8be2c5dc84c864b6e485899ac599e38a2dbad9fe4c7b043dea0065bdf81703fb3a6fb25a863"}, &(0x7f0000000380)={0x20, 0x3, 0x1, 0xd}}) 9.510663033s ago: executing program 1 (id=566): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000000180)="703a732f70202e2f66696c65303a301125", 0x11) 9.037285823s ago: executing program 1 (id=568): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x482c0, 0x0) r1 = dup(r0) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f0000000040)=0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f00000012c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001280)={&(0x7f0000000100)={0x1150, r3, 0x100, 0x70bd2b, 0x8001, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xcd70}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xb}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5c0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x947}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_NODE={0x101c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x12000000}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe24}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}]}, 0x1150}, 0x1, 0x0, 0x0, 0x4000001}, 0x20018080) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) r4 = memfd_secret(0x0) r5 = syz_usbip_server_init(0x2) ioctl$XFS_IOC_FSGROWFSLOG(r5, 0x4008586f, &(0x7f0000001300)={0x5, 0x4}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000001340)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) syz_usb_connect(0x0, 0x7ee, &(0x7f0000001380)={{0x12, 0x1, 0x200, 0x8b, 0x43, 0xf6, 0xff, 0x1b5c, 0x105, 0x515b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7dc, 0x1, 0x6, 0xf4, 0x20, 0x7, "", [{{0x9, 0x4, 0xc5, 0x6, 0x10, 0x4e, 0x77, 0x67, 0xcc, [], [{{0x9, 0x5, 0x6, 0x3, 0x8, 0xfd, 0xf4, 0x4}}, {{0x9, 0x5, 0x1, 0x10, 0x3ff, 0x9, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x40, 0x6}]}}, {{0x9, 0x5, 0x9, 0x10, 0x3ff, 0x7f, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0xff}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x1}]}}, {{0x9, 0x5, 0x7, 0x8, 0x8, 0xa, 0x0, 0x80, [@generic={0xd7, 0xd, "9274998790f3500ad0ec1ecaa1d2307a19384d1c3503ede020b32a25eab459da67065b84f6b51796cab70cd0f4ed5135a6b25df394f04fc44bcb8311ea9d8c90eb04f2bd736b35af69ea815b4d7a10ecfcaa075df75dddd69db5c30bd3de59b4185dbf8e7dd75a3de0e6cc02087083b70ba1c07f29a6bcdddda495cbe70b907309c730fbc1ae799098b0f0ec1f3d58a4bbbda5299bde01ecf95380a8800bdda0a5995c363e9a5a2afd276f9c098b8d3625ee3945b4f3be8bab6be947d56c927e4c38899a4f83eb7f5b0c7c50c1410b5ce07917f468"}]}}, {{0x9, 0x5, 0xf, 0x8, 0x10, 0x4, 0x4, 0x81, [@generic={0xda, 0x6, "527855f6be2a203fba66183a8a2a5c40ecdad80b2da50b40b9918b5eb48a7f3d3ea56f4e62a053a80eb1cd17b003c00febf710bddee68b643510e9a4aae9cc193f511e5537818c35ee33995f55c8c24e876ee5461d25969f2d8dd28f5fcd281e3406e2aa00ce3d5080437ef89278c2037cf7e67844e97da45347f5e868c27584d8032e76e66559ed5916fa9d44ee89f33ac7c9ac22dfc9f3ac43592463fbcfd0a49d96e5031ac6401c5d989a98f66cadc2af65ab8ca7537f66b01f8ba51d2de838fcaf4f12f2be42b106dd268fafcd962f073c27068e71aa"}, @generic={0xed, 0x5, "6e35209f3fafcdfa9f87b1ee5be98699c7fd162af91d37350a7e5bdc6cda3c48e3a0a9055bc776a38b845cd4e7af36b55c3fea2eb203dca11ab5bfb38211aeae447120080b0e79a0a6a974e036f58b127be84e900692200b0b250d8ab5a8bc9c57189d856a9b870f1352e164050f13d483f5940fabf75c8f4cdbd0a59a01697809c31b56c4ff562814c6146383b0d8f90b53d1837d31495789ce5fb4fb8059e3b6a61dd02d9dc3e5abafcbec9e80583f3be4d42264379affa0b7098e8e93b3d5bfbed9b449ae70b5f79f00cc9099ab38bb25f9e35f1406c3ea23ba8ff776cd096385ba3989e65c6cdc263f"}]}}, {{0x9, 0x5, 0xb, 0x4, 0x400, 0x4, 0x80, 0x6}}, {{0x9, 0x5, 0x80, 0x1, 0x20, 0xe, 0x4, 0x53, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0xc}]}}, {{0x9, 0x5, 0x6, 0x1, 0x3ff, 0xa, 0x42, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x7}]}}, {{0x9, 0x5, 0xa, 0x1, 0x40, 0xa, 0x95, 0xd3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x37, 0x400}, @generic={0xec, 0x2, "9f25c9ed02ed169e7ba13323d0d9570856e510b7bc8f44dac764fcb7b901f8f6955376d56a99989059390ca3f06c893339175f5650e23a43a504f6d9e04e9d42ca2f5f99b9b7df3f9dd0fab19c648706691b4c08b979490149feff22068bb0b3d20fa75fd8843212fd7ce41d198304e0df0fc9f4563fc7730370f503fc8aaebecbfe818e83a23c44d644265aa3d770e650df4942380b982f52f3323e8856248deef25bb6a3af3e361fa24ea54f2baea36fea5ac0953c6ae95d6d8d4e0bef2a4baba9a81645ffff3fdb600191171109e1cbacfac64cf916d1a69bbd02b6d7a08e8f4ce986176e635bcecb"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0xa1, 0x79, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xd, 0x7}, @generic={0x99, 0xf, "3ec8154bd7f95985e93f1c8e2568e504ff7fb96503deb261c0c9ecfe5ffcc9f530086264572eb21071b2c33210204d2bfbf3ee55651d16cc619c2ff01f192c9ce5ec375f7fbead27b818bf16e61fe01cb81923bce96e9d5da72bff854cb8baa473b2814dbe978e1a39bc5d623dbaa43a6066c293a1e0d6bf10426e1eea8b7c199af4334acc8b565b10b17e4335d762e450180f202875b7"}]}}, {{0x9, 0x5, 0x7, 0x3, 0x0, 0x2, 0x80, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0xd}]}}, {{0x9, 0x5, 0x4, 0x0, 0x0, 0x2, 0x9, 0x9, [@generic={0x8a, 0x21, "5534f1c2d08ba5570b45bb0e4da5d9c4d18b4a5c531056fac1bac0392f7ead3c0e5a452ec6f1a0cbf75e01884f8cf47978a2b13b16751e7b5eaea9a3151ccecda8f8993540c30289211cb5fd88503ed444441e0553fc443b76d5d35ca677f6551bd0e59edee2ccb3f59318c050a91950f2c2d088424c5cd349c5ee3fe26fa48a42919af211f54c7c"}, @generic={0xcb, 0x8, "83a44ba8055a74ea2fdf43c47bbf1af47c6854f8ef2ff26a0de615b47b9fb2849dadff452d01e9cce01cea3017a38875e07056871a2edb5ab26334fb3851a97b59ebe42094fa9fdf6660ca88fe58e726ab4d09c51ad03157be4a7467dc13b845acd2018af39ec6db9506fcc73ca88ae74b02ccb1575251d191b5241f4c7581d34222fde2a0a2e448d22f9c8b4c78756ce05f50d3780032c6f95fe7f4c4fb17ceb81f8de32b3615ca2d4f2adc90b9a7006e0a1bf9f281e5e095ca66883e4a7c0a88faead01225d52f49"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0xa1, 0x1, 0x10}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x93, 0x4, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x81, 0x8001}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x1000}]}}, {{0x9, 0x5, 0x5, 0xb, 0x20, 0x80, 0x9c, 0x6, [@generic={0xd7, 0x8, "b3dc96333504f332fc418981475b2a58e622cdebcc1b446fcba96e5d9b839688451693d5c80526c96595d4240d5224cdd498c7020a37ab0f283fd076de8c1fba9cfaa5f8678301f0861cc7b5b17365e6ee98c23e95c151fdc7a1efe370404c0fd6c766dc0b41cbd3e0966879a9f040ff9e6ae2d69e54f4b1240e03cce4d1584624e632d9c66023aeea304e9ad4faae7799ed6e016657ff6e96e52c2c4bd41f50619e68ba31d178481d9917f1a45f9f7ea32e247151a85f1d571f5df3f1b8aa9d5d6fbeefe1e8e52c22bb8ff4a88a2643c4f3490944"}, @generic={0xa5, 0x3c, "388a70cf71516761f6248961097fd934dc5aced7ca3734cbbc4c59e0fa95bdbbb43c42d6e2508a95796205ddffdc5d73b25efeb3cdc6932472e7491fca7d0da259d4d53f049f0278f65cffc6a9cbf69fac0cab0cf47fe5d1c72507dc67e78944debba0d80049cda6835b21c8cb1b23c47cee1cefce399b8ef0ec13a2cf58571302bcb5cde318e963beabe3af1bb2c50405f668b66c7ec933aa175526781d6eeac0a8cc"}]}}, {{0x9, 0x5, 0xe, 0x3, 0x8, 0x3, 0x7, 0xc}}]}}]}}]}}, &(0x7f0000001c40)={0xa, &(0x7f0000001b80)={0xa, 0x6, 0x201, 0x0, 0x1, 0xa3, 0x8}, 0x30, &(0x7f0000001bc0)={0x5, 0xf, 0x30, 0x2, [@wireless={0xb, 0x10, 0x1, 0x4, 0x8, 0x6, 0x72, 0x9, 0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x8c, 0x5, 0x2, 0xf0f, 0x0, [0xc0c0, 0xff, 0x30, 0x30, 0xff0000]}]}, 0x1, [{0x4, &(0x7f0000001c00)=@lang_id={0x4, 0x3, 0x40b}}]}) newfstatat(0xffffffffffffff9c, &(0x7f0000001cc0)='./file0\x00', &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r4, 0xc0207511, &(0x7f0000001d80)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$nl_generic(r4, &(0x7f0000002600)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000025c0)={&(0x7f0000001e00)={0x794, 0x20, 0x2, 0x70bd29, 0x25dfdbfd, {0xc}, [@nested={0xc6, 0xd3, 0x0, 0x1, [@generic="d56d43bfe21d5540cc31ecdc4ca2ef3a478d4b4c56a0863d0f20d40099f564c1c6a4945616d7e5dfe16e4b3594412e14897a2d8fbd937b9ca15b0c2b065ec6c7f98660badf0e9c254347b583eec467ea87fdf67eff8dde7dc61f3f8bf6f29e715feec173cec5faea21659baf1a00e87a7612ec6b3b3fb05b9fb831382453decd67aea8c1cccce0c000772d7df8349077e3e437ac9f1f6fb625134d40c66cced861c124a8b2c8e18efaaa6a670e0af4697be444304586d09acec0", @nested={0x4, 0x37}, @nested={0x4, 0xb6}]}, @nested={0x14, 0x24, 0x0, 0x1, [@typed={0x8, 0x68, 0x0, 0x0, @uid=r6}, @nested={0x4, 0x31}, @nested={0x4, 0xd6}]}, @typed={0x8, 0x34, 0x0, 0x0, @fd=r5}, @nested={0x205, 0x3, 0x0, 0x1, [@generic="89aae4e664b4eb00bff847339182b636b1e9876104d89b1b3bcd87b678f7f358261c9fbaad6ada65cd5f748255d0624dba8e", @generic="5e2851dc37c4ea31b8c1462cbf4517fa3e734cb2c352111e5bd8d314279572786b18b9739ecdfedfcc2da374547bd6ee58f775ba271662752ea5f0b9422291b8de40cf118cc75c47cc0885f8a2c90a46c620640fb5ac88022cc1443297135c4726ea50246bcd129f397ac5bbf5161f50f6c706d544fb0e738e473492743f8970f864d0b7d76bce3233410f5bcf39d64f5f0fda63880796c88ab96cb7f8103eedc2690e22ff7600fc", @typed={0x8, 0xad, 0x0, 0x0, @pid=r7}, @generic="607e3c1028f13a3440ccb189b8001c7f4536fe41674107d6103bcb755a154898f24e", @generic="0cc99f14ecbfceac71e88bc9aee57a42548c12a3db5840488fa7260e2d914d8f7fa2603c3d7fa1dcef546fb583a19d7ec9df806c242eb8bfdbc9c9b89b315add1d5e5f41240de074bc846e7f61621cafd0df41717a89d01691026f1a0765ba60c608de86c798f33d6b719fd25044956c79c81d8b1a76d36b065b86bc6c439c482a587eb82932ba12adb6ebb8888cca366533a819998f76e5fb229d5679a33d5e6a0443de6c4cc60e108a0686b841ba2f6e081c58fe0655925d285963e7c1a14e1c11af2625a1bd22e37df9cc25ac424b7ad58277984266c2fb9a9543c09755836a2099e2e00ef716e1d586b2e25e3f46e0ad6d3987c524bc46", @nested={0x4, 0x59}]}, @typed={0x4, 0x11a}, @generic="8b6f48bf61da38282bd0467b19510af4924539903f9aa76fcf015712a03df616877a389a05ad08239c26ab1701e56872499b3443ebbdd4c37add43c2761380fa0ac14400ad16055bac41925cbec2b53101a32ead79cc3198e6f3cc117f993444c8b0ae25ec66eb89fa43010f7baf01925b9c94bde57f941b9e60600366f90d49406b0b0676bf7075e05c7f6af3c56760c06a5ec37abaef666f78875243211ae30067a47f9273e96b9e3fcf58181d6f8337b86855f156aa34982f045676f2395695a5a61b31aced45ca75a8d25769ce1910f7645ecea8a078a998b1", @generic="97f0d020a95503ace43a847326a3e1b245832d5f836ac5237c42375bb38f0d23a5c12dd4a03fcbe946dcba3c5cf9341b96c586adf5fbb25ddac693ef91919d79d04705ba3773c47f6659f987027392e674f558efbc407015e8d498f73bf4b0f433f40943a8fde2ffaa9491264e2c4d3fc265754d15d11350f25e9cf5d13982ccef467f9122d00db509b139c2e32080351dd6e147798ea5598b1941b91fcad8334b33ec39baf31d26a4a2fb131ce572e65a7066f03cea47e83afa46f7ed82d90ecccd1b203167a20081885aace4f9", @nested={0x2e1, 0x12, 0x0, 0x1, [@typed={0xb, 0x9e, 0x0, 0x0, @str='TIPCv2\x00'}, @typed={0x8, 0x27, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x2e}, @typed={0xb0, 0x17, 0x0, 0x0, @binary="15ed3fb8a93b892087d8abff8fb1715cabea8f17d04ffd449906247b7b9419eb481eff593f3189d9495204784e75c1428188437d38f78e77dc2d1a09181595953ee8beaad16718505c2f864b9be4e1fe072b7db5cd677e9f9eb30c53bab081a77eec05960089b64e31a1896b5790514b4d10b24ff8b9f22a1a4dd5bd0c77ab4b791d2fe370ea8b8dc0818cb821616ab525d8b390d5835e774ba4501ae17e3bae7c2740edd121af41a595cf21"}, @typed={0x8, 0x56, 0x0, 0x0, @u32}, @typed={0x37, 0x3c, 0x0, 0x0, @binary="d398677c27bd649226593a0f2791ced488a788a4401ac1dbe067e650b43ec84068c51e3d4fae44b34f78bb322cd3819935c027"}, @generic="0da3dcb532dc2391138565c70bed5da3038740507f21255ac7492a5f6fe96c6dc8d1be8dd16deac41fe14e04b0b523c330dff8aa948022af874cfdeb4f8f605d91ec247f68e6bd360ee781702c6a35af412c5030a09f91c5388c9fa458ae1ac423cc1290bd80d4feeab548b8260dad5c105f762aaa237a9727074c0f482dd488f0a1facab9bfd585110d0cc1740e635cd4c53cc42ce6e1d10f1f5fb5036769d36ca3940d5a52942382151e7be28116e336aed8771e5ea55b867b46ce6a22d2bb5856b2477c033af3ace0db0d11d57734d5bf609219db603d", @generic="5f473e99b0fd3b8189b537275fa2e941c30af2f42613541f0aa75ceee50ac0315a34202a0ec0dfab6e16", @generic="2f061ec7bef3725da529c40d1dd5dca51a6e314ac0fd02cf037bf321bd1c3fb3bb0754708b4dbef720e852a14ea4166aa10e8c2cbff2e49e8a51ab028459ca682d44fc6eb6c03c44cfe85c86e90a93d3234ea02babb68abc88ec2bdfe111fc3cb0c8a370f356f3b3cb48488e24d66c1d1cea0f87eaafe7f6ae14d8c4a06c65fb1f6a858506d7a4b0b60aab13df4e54136ed0b7dd288d5ebf8b5a11d8a80de4e8fd8cd52d1d8207088679f74fbddbfa131087ab1f0498d04785c01a30086faaf26c38ca3e875d4ded092d14bfbe284eb310dcc3"]}]}, 0x794}, 0x1, 0x0, 0x0, 0x20008800}, 0x11) syz_clone(0x34000200, &(0x7f0000002640), 0x0, &(0x7f0000002680), &(0x7f00000026c0), &(0x7f0000002700)="2d120c74f18a9b581768adba6bde71720282b32c157291b850a9750d9695efaf53245c0a12a385ef91a5e73b5f476e31662d26dd719c90698f0cdb88df5d3b7073425d59bc7e7e841e8e8b8f078016d247984ae7ab9e8f620c9ba6588915ab18095a8d44c83caa01076cc486da2812595fc3bb858ad519fb0f9b8cfe6beebf3d0e7218d5a6bf6c44c31ced471d56d4146634369dda8a13f99d8463fbef40e4485e3ca0ebdb8ab17839d21d749c302edb37472ad49909b4cf91d9e4c85940d22db2f4e0a6fbeac4538207d2fab947126b5ce53d8e04f8cd7e93ae60c01d9d385a5af937fef226a468d6559fa6") sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000002900)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000028c0)={&(0x7f0000002840)={0x7c, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x3a}}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffff}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2a, 0x11}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xeb0b6a7162f153b2}, 0x8000) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002940), 0x434440, 0x0) sendmsg$TIPC_NL_NET_SET(r8, &(0x7f0000002a80)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002a40)={&(0x7f00000029c0)={0x58, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffff6d}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x617f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xca2198efb26135ae}, 0x20000080) prctl$PR_SCHED_CORE(0x3e, 0x0, r7, 0x0, &(0x7f0000002ac0)) ioctl$COMEDI_SUBDINFO(r8, 0x80486402, &(0x7f0000002b00)) socket$kcm(0x29, 0x7, 0x0) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002bc0), r8) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000002cc0)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c00)={0x7c, r9, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x50}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000002e00)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002dc0)={&(0x7f0000002d40)={0x60, 0x9, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1000}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x8804}, 0x4040010) r10 = fsopen(&(0x7f0000002e40)='gfs2\x00', 0x1) clock_gettime(0x0, &(0x7f0000002ec0)={0x0, 0x0}) ppoll(&(0x7f0000002e80)=[{r5, 0x7604}, {r10, 0x89}, {r8, 0x13}], 0x3, &(0x7f0000002f00)={r11, r12+10000000}, &(0x7f0000002f40)={[0xa8b]}, 0x8) r13 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002f80), 0x80040, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(r13, &(0x7f0000003080)={&(0x7f0000002fc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003040)={&(0x7f0000003000)={0x3c, r9, 0xc00, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4000414) 6.22995247s ago: executing program 3 (id=573): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) getsockname$qrtr(r3, &(0x7f0000000040), &(0x7f00000001c0)=0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x20000050) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 6.007078888s ago: executing program 3 (id=575): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, &(0x7f0000000000)={0x20, 0xc, 0x51, {0x51, 0x2, "77d5ba108e5acf01f21b5a2c4972a0cf556e5da7be89a4c2ec080bda59db681411514f190f51d2e3d169a9783548100e0bfad7b1ac0ae0350d383f485fc1e6d5b4a748fb2f9096b4f185f0ad3c06fc"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1f, @string={0x1f, 0x3, "96cc2e1ba5f138585b8e8cfcc3b35804eecc73ed168beb50da3b9380f9"}}, &(0x7f0000000100)={0x0, 0x22, 0xd, {[@global=@item_4={0x3, 0x1, 0xd, "c1be637a"}, @global=@item_4={0x3, 0x1, 0x3, "f8fd808b"}, @local=@item_012={0x2, 0x2, 0x0, "9858"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0xa6, 0x1, {0x22, 0xb95}}}}, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x20, 0x5, 0x4f, "26211432fe4797105add025ad0bc10d3cd1f8ee568f63bb6ae1d4c6aeb93307c92f24cf69dbcbadb3fa4fbba0cd91556c3898553537bc822493a6d9a3dd007d17fa45c84fe5831aff834da8ebdcaa5"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000280)={0x0, 0x8, 0x1}, &(0x7f00000002c0)={0x20, 0x1, 0x7f, "3512813b35dfdd714374d896413d9941f6259cc77a8b6dea507290888a573c2d269f81f7a18700054b0a27c52d1fcb13448525c218296018a71461940e3f5678b50514feb8f0db51ccc7e7767598b13c71f75b1188601e6d77f8be2c5dc84c864b6e485899ac599e38a2dbad9fe4c7b043dea0065bdf81703fb3a6fb25a863"}, &(0x7f0000000380)={0x20, 0x3, 0x1, 0xd}}) 5.823861892s ago: executing program 4 (id=576): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000000180)="703a732f70202e2f66696c65303a301125", 0x11) 5.655370635s ago: executing program 1 (id=578): r0 = syz_usb_connect(0x3, 0x9f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b081000010000000109028d0001010080fa0904000005ffffff0007050302000200070584020002"], 0x0) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x4f3, 0x74d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x80, 0xb7, "", [{{0x9, 0x4, 0x0, 0xc, 0x2, 0x3, 0x1, 0x2, 0x80, {0x9, 0x21, 0x47, 0x6, 0x1, {0x22, 0x65}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x6, 0x7, 0x3}}]}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x1c, 0x5b, 0x3, 0x8, 0xaa}, 0x1e, &(0x7f00000000c0)={0x5, 0xf, 0x1e, 0x3, [@wireless={0xb, 0x10, 0x1, 0x4, 0x7b, 0x6, 0x1, 0x6, 0xfd}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0xe, 0x9, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x5, 0xb, 0x3}]}, 0x1, [{0x1e, &(0x7f0000000100)=@string={0x1e, 0x3, "3311aa929f97c23259663d08311ed7d0089e7af679961cbe02e7204c"}}]}) syz_usb_ep_read(r0, 0x3, 0x0, 0x0) syz_usb_ep_write(r0, 0x84, 0xe, &(0x7f0000000700)="aa00080c00000001000700090177") 5.369324291s ago: executing program 4 (id=579): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x5482, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xfffffffffffffffe) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000100)={0x1, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000340)={0x0, 0x4, 0x0, 0x200000, &(0x7f0000001000/0x1000)=nil, 0x0, r2}) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) unshare(0x20000400) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000140)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x33}}}, 0x1e) connect$pptp(r4, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fe80000000000e1208000f0100a10401a80016eaa4000640fefffffffffeffffb94dcf5c0461c1567f6f94007134cf6ee08002a0e408e8d8ef075c817bd6c496ddffaa2795edb1e61e0100000000000000cb090000001fb791643a5ee4001b14547df36745d6d930dfe1d9d322fe7c9fd68775730d00a4683f5aeb4edbb47a5025ccca9e00158c89ed6cb4d1ac95e7765e04c2360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b461946d625c179a2298", 0xe1}, {&(0x7f0000000400)="df1bc8809f6e3a8d26cbde8986d6cdf113d938166052a621e1bb28732dffa4b3cde630f14ddef43d9ec580496c5339521e66504471067d0bb895d73b0ff1bb72231a5b3382b79040a432de39593031f69c98fb12e52a5458d6bfd118ea33a10e012ec255edb1b07ef7850082e84706be000000", 0x73}], 0x2, 0x0, 0x0, 0x7400}, 0x44004) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000340)=0x1) write$ppp(r3, &(0x7f0000000680)="0004001fbb2fae90f3d6b6d3ebf07f8e4e3648264ba93fd65d5abf5c3498019b332a94f3b2e32452d75f4b4f2339dc8a468c231baa66d008b33d8f547bfcac0e12a091fd4482adc6131bc98acb9007bbeac77d3322686bc3a6e9a17a34e5dece5bc8bcd633e38efdcbf301d22200cd68452a6238eb2f5ddace7fb1ac43524605c31d5f162f06a0bdb45613428446032ffbdc4b1943562950d49f0067f8bf73d8e82f721c2375cc4caefb6447daad2f0887c2d18c386f7a01584221c54f16933f3f24c02eee9f8ff471d25420e02d3da1313d518fc70728f2cce10f25603912eb86131832bcb864febad9bb473c7653ac2c9255378d9c08226d0f0b472801e3a4666369ee8648c92f7e63a223941f2f0009975d1184dedf19f965273aaf0211f59a90d6821b2972d9a08c86fe1c657129bba280f42ab23464d372539c41561aac7fc7ea9588c34a8c350000585dcbbe88049334a38206342a50ab4333c53ba2141e7c2fb396002fd8d06d8be024f1eb3fcd44c2ca2a622bdb7fb10b5a88fc81a4e50919d6036c66b39064e859099d103a1283110856c36e9ba5f9f935f08d571583fb75da1de228c3e4c5c1871066b33b4e027718a5042193c28bcbcdb718e4a1b96fce31b9f81a5a31e8e59b02b61fe78cda2346d1b9ff6d3fb71940336fd2efb039132a2f905f2ce2b6212c5affd0332bb71321370fd8facc56bd837f2e3095e285f32d3f9a9c5946da065e138eda93f034d6d690ed26f4c7391e45fc3b1a081f07", 0x222) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) r7 = accept$unix(r3, 0x0, &(0x7f00000000c0)) connect$unix(r7, &(0x7f000057eff8)=@file={0x4ab3f6a8e94149b8, './cgroup.cpu/memory.limit_in_bytes\x00'}, 0x95) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x142, 0x14) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) 4.983111743s ago: executing program 4 (id=581): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRES8=r0, @ANYRES16=r0, @ANYRES32=r0, @ANYRES32=r0], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001305000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, 0x7, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008840}, 0x80) 3.84800625s ago: executing program 5 (id=582): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x40015b13, &(0x7f0000002000)) 3.731901736s ago: executing program 4 (id=583): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000300)={0x200000, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000340)={0x0, 0x4, 0x0, 0x200000, &(0x7f0000001000/0x1000)=nil, 0x0, r2}) syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) unshare(0x20000400) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000140)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x34}}}, 0x1e) connect$pptp(r3, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000340)=0x1) write$ppp(r4, &(0x7f0000000700)="b068aa", 0x3) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r5, 0x107, 0x16, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, 0x0) 3.583156956s ago: executing program 1 (id=584): r0 = socket(0x1d, 0x2, 0x6) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) setsockopt$ALG_SET_KEY(r0, 0x6a, 0x1, 0x0, 0xc) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ptrace$cont(0x9, 0x0, 0x20000000000004, 0xffffffff) r2 = dup(r1) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000280)={0x0, 0xffffa9b2}, &(0x7f00000002c0)=0x8) getsockopt$inet_int(r3, 0x0, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r7 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050202000200070582020002"], 0x0) syz_usb_ep_read(r7, 0x1, 0x0, 0x0) syz_usb_ep_write(r7, 0x81, 0x40, &(0x7f0000000100)="900100"/64) syz_usb_ep_write(r7, 0x81, 0x40, &(0x7f0000000300)="9101000000112233445500"/64) syz_usb_ep_read(r7, 0x1, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r9, 0xc01064c7, &(0x7f0000000100)={0x0, 0x1000000, 0x0}) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800fe007c05e8fe55a10a0015000300142603600e12080005007f370401a8001600200006000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) r10 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) ioctl$BLKFLSBUF(r10, 0x1261, &(0x7f0000000100)=0xe2) write$binfmt_aout(r2, 0x0, 0xffffffdb) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 3.342069699s ago: executing program 4 (id=585): landlock_restrict_self(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf00001}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev_mcast\x00') preadv(r2, &(0x7f0000000740)=[{&(0x7f0000000140)=""/119, 0x77}, {&(0x7f0000000480)=""/129}, {&(0x7f0000000540)=""/221}, {&(0x7f0000000640)=""/118}, {&(0x7f00000006c0)=""/95}], 0x2, 0xc9f1dbb, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000440)=0x2, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000380)="000000000100"/21, 0x15}, {&(0x7f0000000040)="d503e0", 0x3}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x26008000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB='\x00\x00']) mmap$IORING_OFF_SQ_RING(0x0, 0x6, 0x2000007, 0x30, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x24, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0xdf3}}}, &(0x7f0000000300)) listen(r3, 0x7ff) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) socket$packet(0x11, 0x2, 0x300) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x0, 0x2, 0x1000, 0xfffffffe, 0x238, 0x0, r9}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80, 0x3, 0x2033f, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x400, 0x0, 0x14a, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b5a, 0x48a0, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x4000, 0x2, 0xdfffffbf}}], 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000180)={0x5, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r11 = semget$private(0x0, 0x4000000009, 0x42a) semctl$IPC_STAT(r11, 0x0, 0x2, &(0x7f0000000000)=""/44) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000240)={r10, 0xe9, 0x101, 0x6, 0x7, [], [0x19f, 0x3, 0x3fffffd, 0x7], [0x1000, 0x5, 0x6, 0x7], [0x7, 0x4, 0x8000, 0x40000007]}) connect$unix(r5, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) 3.220589471s ago: executing program 3 (id=586): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000540)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./dev/kmsg\x00', 0x1, 0x0) lseek(r0, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) openat(0xffffffffffffffff, &(0x7f0000000000)='./dev/kmsg\x00', 0x2001, 0xa0) connect$can_bcm(r1, &(0x7f0000000200), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe"], 0x20000600}}, 0x0) sendmsg$sock(r1, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) unshare(0x6020400) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000000)=@e={0xff, 0x9, 0x0, 0x4, @SEQ_CONTROLLER=0xfe, 0x7, 0xc, 0x1}) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) unshare(0x2040400) fsmount(r2, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r4) sendmsg$NFC_CMD_DEP_LINK_UP(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r5, 0x405, 0x70bd29, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x44895}, 0x4c15) 3.131375555s ago: executing program 5 (id=587): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000000180)="703a732f70202e2f66696c65303a301125", 0x11) 2.812691346s ago: executing program 5 (id=588): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x44895}, 0x4800) 2.188373856s ago: executing program 5 (id=589): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x3b, 0x301, 0x2270bd24, 0x25dfdbff, {0x10}}, 0x14}}, 0x4044000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000180)=0x2cf7) write$cgroup_devices(r1, &(0x7f00000001c0)=ANY=[@ANYRES8=r1, @ANYRESHEX], 0xffdd) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'veth0_to_batadv\x00'}) r2 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r2) 1.600611892s ago: executing program 3 (id=590): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x44895}, 0x4800) (fail_nth: 3) 939.534533ms ago: executing program 3 (id=591): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000000)='wlan0\x00') connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffc, @mcast1, 0x7}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0xffff, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x32) writev(r0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000001240)="7b62945da65d934746c62127fe5f8dea297500d531af3d82a6660c404efb3d6218b5705af0b3cf2f446282ea5a43626f311c3caac11af2273194a7c9792a95245285c1b081d57c759398e010e28c3ff1ad6a39397eb54c7bd56354a5655fa08b143dd80e1ffd976335fdba870f53439b6b75c24eb44b44c28fb21a922d23ac3acee7955767f0ede9e6d818fa8b9f7b0042c00afd311a964b8aeec39c5a6ff0589ba532823880b47da1c86d22c0fb882b70e5cd3e59954a2b699ee1a4dab4139a11ab8a2c071c01aa7ee90d0153ff81185d437d4aa3700d9a73", 0xfdef}, {0x0}], 0x3) 729.361897ms ago: executing program 5 (id=592): syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000092df5510ac05269289b201020301090222000100000000090400000103e900"], 0x0) (async) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_usb_connect$cdc_ncm(0x5, 0x7d, &(0x7f0000000400)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x2, 0x1, 0x7, 0x60, 0xfd, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "d5694d"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x6, 0xf5a5, 0xb0}, {0x6, 0x24, 0x1a, 0x4, 0x22}, [@country_functional={0xc, 0x24, 0x7, 0x6, 0xff, [0x0, 0x8, 0x6]}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x1, 0x0, 0xc}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x80, 0x4, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x10, 0x2, 0x4}}}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x300, 0x2, 0x6, 0x1f, 0x10, 0x7}, 0x37, &(0x7f00000004c0)={0x5, 0xf, 0x37, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0xc, 0xa, 0x1ba}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "b88507b5d8662ac72ed1d6a10c5937cb"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "e0f16c32670db8ba1494c80fc484417c"}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x42d}}, {0xe6, &(0x7f0000000740)=ANY=[@ANYBLOB="e6038d0c083c21a781a2ddd45c62e3a8a0e3253371cc8e16829861c920d8cd48468c8345fab3c3477e77bdad18bc45d5dd034afc4381148b3f327f85f938e27dffca3624131bbb6659c9bed0ae93098136de098c952799599d24d9c9afb2d4ab30f455e105f7a5a03a9347e61ae2c59e1ad2f6611e5696577acfb4fd32a0095258cb5528578c0c9e81badb6394d4734c8395a9ee4243be381c9456a2116baa99d1c86d677b23bdbf354dcce351839e4a90f6dd8bb0ad55098148bacc96cefee5c29bfd7f752850f4da01cd41806e19b5c7a50c5f7e92e41e9a4ad7a9338bc2e7561d0b83a290e4ac48af1cec1bb7ab"]}]}) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x28, r2, 0xf11, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x14, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0xfffffffffffffdf2, 0x1, 'syz0\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) (async) syz_usb_connect$uac1(0x2, 0xb7, &(0x7f0000000840)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa5, 0x3, 0x1, 0x0, 0xe0, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9b, 0x3c}, [@mixer_unit={0xa, 0x24, 0x4, 0x4, 0x15, "a3845dddd5"}, @mixer_unit={0x7, 0x24, 0x4, 0x1, 0x5, "9bfd"}, @extension_unit={0x9, 0x24, 0x8, 0x1, 0x800, 0x0, "f215"}, @mixer_unit={0x6, 0x24, 0x4, 0x5, 0xa, "cb"}, @mixer_unit={0x6, 0x24, 0x4, 0x5, 0x1, "01"}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x404, 0x4, 0x60, 0x9, 0x8, 0x10}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x7, 0x6, 0x4, {0x7, 0x25, 0x1, 0x4, 0x9, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8, 0xf, 0x3, 0x81}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1, 0x6, 0xd, 0x0, 0xc9}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x7f, 0x84, 0xd, {0x7, 0x25, 0x1, 0xc, 0x3, 0x7}}}}}}}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x300, 0xc1, 0x7, 0x1, 0x10, 0x3}, 0x16, &(0x7f0000000940)={0x5, 0xf, 0x16, 0x3, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x3, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x3, 0x5, 0xfffc}]}, 0x1, [{0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x44a}}]}) (async) syz_usb_connect$uac1(0x5, 0x8e, &(0x7f0000000600)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x17cc, 0x1969, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7c, 0x3, 0x1, 0x0, 0xf0, 0x80, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x7, 0x2, 0x2, 0x5, '6'}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xff, 0x5, 0x2, 0x10, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x66, 0xcf, 0x8, {0x7, 0x25, 0x1, 0xe2762098c800efdc, 0x7, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x9, 0x4, 0x7, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x4, 0x40, 0x6, {0x7, 0x25, 0x1, 0xc, 0x23, 0x5}}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x9, 0xb8, 0x8, 0x40, 0xaf}, 0x2b, &(0x7f0000000140)={0x5, 0xf, 0x2b, 0x4, [@ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0xb62f, 0xf, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x3, 0xa, 0x8}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0xf5d0, 0xff00, 0xff81}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x5, 0x2, 0x8}]}, 0x4, [{0x101, &(0x7f0000000180)=@string={0x101, 0x3, "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"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x43f}}]}) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) 215.255105ms ago: executing program 4 (id=593): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) sendmsg$NLBL_MGMT_C_LISTALL(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES32=0x0, @ANYRES16=r2], 0x14}, 0x1, 0x0, 0x0, 0x4000c080}, 0x814) 149.181407ms ago: executing program 5 (id=594): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, &(0x7f0000000000)={0x20, 0xc, 0x51, {0x51, 0x2, "77d5ba108e5acf01f21b5a2c4972a0cf556e5da7be89a4c2ec080bda59db681411514f190f51d2e3d169a9783548100e0bfad7b1ac0ae0350d383f485fc1e6d5b4a748fb2f9096b4f185f0ad3c06fc"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1f, @string={0x1f, 0x3, "96cc2e1ba5f138585b8e8cfcc3b35804eecc73ed168beb50da3b9380f9"}}, &(0x7f0000000100)={0x0, 0x22, 0xd, {[@global=@item_4={0x3, 0x1, 0xd, "c1be637a"}, @global=@item_4={0x3, 0x1, 0x3, "f8fd808b"}, @local=@item_012={0x2, 0x2, 0x0, "9858"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0xa6, 0x1, {0x22, 0xb95}}}}, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x20, 0x5, 0x4f, "26211432fe4797105add025ad0bc10d3cd1f8ee568f63bb6ae1d4c6aeb93307c92f24cf69dbcbadb3fa4fbba0cd91556c3898553537bc822493a6d9a3dd007d17fa45c84fe5831aff834da8ebdcaa5"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000280)={0x0, 0x8, 0x1}, &(0x7f00000002c0)={0x20, 0x1, 0x7f, "3512813b35dfdd714374d896413d9941f6259cc77a8b6dea507290888a573c2d269f81f7a18700054b0a27c52d1fcb13448525c218296018a71461940e3f5678b50514feb8f0db51ccc7e7767598b13c71f75b1188601e6d77f8be2c5dc84c864b6e485899ac599e38a2dbad9fe4c7b043dea0065bdf81703fb3a6fb25a863"}, &(0x7f0000000380)={0x20, 0x3, 0x1, 0xd}}) 0s ago: executing program 3 (id=595): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200000000100905"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40015b13, &(0x7f0000002000)) kernel console output (not intermixed with test programs): 229.224880][ T7138] Call Trace: [ 229.224888][ T7138] [ 229.224897][ T7138] dump_stack_lvl+0xe8/0x150 [ 229.224930][ T7138] should_fail_ex+0x467/0x600 [ 229.224965][ T7138] _copy_from_user+0x2d/0xb0 [ 229.224987][ T7138] memdup_user+0x5e/0xd0 [ 229.225013][ T7138] strndup_user+0x68/0xd0 [ 229.225045][ T7138] __se_sys_mount+0x9d/0x420 [ 229.225069][ T7138] ? ksys_write+0x248/0x270 [ 229.225098][ T7138] ? __pfx___se_sys_mount+0x10/0x10 [ 229.225126][ T7138] ? __x64_sys_mount+0x20/0xc0 [ 229.225150][ T7138] do_syscall_64+0x17b/0x530 [ 229.225173][ T7138] ? irqentry_exit+0x10f/0x8f0 [ 229.225193][ T7138] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.225216][ T7138] ? clear_bhb_loop+0x40/0x90 [ 229.225244][ T7138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.225267][ T7138] RIP: 0033:0x7fadd5a4e0d9 [ 229.225288][ T7138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.225307][ T7138] RSP: 002b:00007fadd3ca6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 229.225329][ T7138] RAX: ffffffffffffffda RBX: 00007fadd5cd5fa0 RCX: 00007fadd5a4e0d9 [ 229.225344][ T7138] RDX: 0000200000000000 RSI: 0000200000000080 RDI: 0000200000000040 [ 229.225359][ T7138] RBP: 00007fadd3ca6090 R08: 0000000000000000 R09: 0000000000000000 [ 229.225373][ T7138] R10: 0000000002008002 R11: 0000000000000246 R12: 0000000000000001 [ 229.225386][ T7138] R13: 00007fadd5cd6038 R14: 00007fadd5cd5fa0 R15: 00007ffeb42dbd78 [ 229.225419][ T7138] [ 229.253935][ T5701] usb 6-1: config 0 descriptor?? [ 229.622129][ T5874] udevd[5874]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 229.631678][ T5681] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 229.817209][ T5701] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 229.922328][ T5681] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input12 [ 230.527239][ T7126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.529118][ T7126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.812400][ T7152] Mount JFS Failure: -22 [ 230.874743][ T5702] usb 4-1: USB disconnect, device number 26 [ 230.874812][ C0] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 231.020141][ T7156] Mount JFS Failure: -22 [ 231.350555][ T7126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.351181][ T7126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.390030][ T5701] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 231.453005][ T5701] usb 6-1: USB disconnect, device number 2 [ 231.761698][ T7172] tipc: Started in network mode [ 231.761731][ T7172] tipc: Node identity ac14142f, cluster identity 4711 [ 231.763501][ T7172] tipc: New replicast peer: 127.0.0.1 [ 231.764596][ T7172] tipc: Enabled bearer , priority 10 [ 231.765463][ T7172] netlink: 64 bytes leftover after parsing attributes in process `syz.1.336'. [ 231.870569][ T5702] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 231.935342][ T7174] FAULT_INJECTION: forcing a failure. [ 231.935342][ T7174] name failslab, interval 1, probability 0, space 0, times 0 [ 231.935378][ T7174] CPU: 0 UID: 0 PID: 7174 Comm: syz.1.337 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 231.935410][ T7174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 231.935425][ T7174] Call Trace: [ 231.935434][ T7174] [ 231.935442][ T7174] dump_stack_lvl+0xe8/0x150 [ 231.935473][ T7174] should_fail_ex+0x467/0x600 [ 231.935502][ T7174] should_failslab+0xa8/0x100 [ 231.935521][ T7174] __kmalloc_cache_noprof+0xa1/0x670 [ 231.935549][ T7174] ? binder_alloc_new_buf+0x1ffe/0x31f0 [ 231.935570][ T7174] ? binder_alloc_new_buf+0x1ffe/0x31f0 [ 231.935595][ T7174] binder_alloc_new_buf+0x1ffe/0x31f0 [ 231.935634][ T7174] ? __pfx_binder_alloc_new_buf+0x10/0x10 [ 231.935652][ T7174] ? __kmalloc_cache_noprof+0x3cd/0x670 [ 231.935692][ T7174] ? binder_transaction+0x20b0/0x6fc0 [ 231.935715][ T7174] ? binder_transaction+0x20b0/0x6fc0 [ 231.935744][ T7174] binder_transaction+0x288c/0x6fc0 [ 231.935769][ T7174] ? lock_acquire+0x115/0x350 [ 231.935823][ T7174] ? kernel_text_address+0xa5/0xe0 [ 231.935860][ T7174] ? __pfx_binder_transaction+0x10/0x10 [ 231.935891][ T7174] ? __lock_acquire+0x6df/0x2e40 [ 231.935916][ T7174] ? __lock_acquire+0x6df/0x2e40 [ 231.935940][ T7174] ? __lock_acquire+0x6df/0x2e40 [ 231.935967][ T7174] ? lock_acquire+0x115/0x350 [ 231.936016][ T7174] binder_ioctl_write_read+0xb5c/0xa5d0 [ 231.936043][ T7174] ? is_bpf_text_address+0x26/0x2b0 [ 231.936091][ T7174] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 231.936114][ T7174] ? kasan_save_track+0x4f/0x80 [ 231.936146][ T7174] ? stack_depot_save_flags+0x33/0x800 [ 231.936179][ T7174] ? do_raw_spin_lock+0x12b/0x2f0 [ 231.936214][ T7174] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 231.936240][ T7174] ? reacquire_held_locks+0x117/0x1a0 [ 231.936260][ T7174] ? rt_spin_lock+0x1e0/0x400 [ 231.936289][ T7174] ? rt_spin_unlock+0x157/0x200 [ 231.936319][ T7174] ? binder_get_thread+0x176/0x6d0 [ 231.936340][ T7174] ? binder_ioctl+0x189/0x1b10 [ 231.936364][ T7174] binder_ioctl+0x420/0x1b10 [ 231.936393][ T7174] ? do_vfs_ioctl+0x1184/0x1550 [ 231.936417][ T7174] ? __pfx_binder_ioctl+0x10/0x10 [ 231.936439][ T7174] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 231.936474][ T7174] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 231.936492][ T7174] ? lockdep_hardirqs_on+0x7a/0x110 [ 231.936522][ T7174] ? __fget_files+0x2a/0x420 [ 231.936544][ T7174] ? __fget_files+0x3a8/0x420 [ 231.936561][ T7174] ? __fget_files+0x2a/0x420 [ 231.936582][ T7174] ? bpf_lsm_file_ioctl+0x9/0x20 [ 231.936611][ T7174] ? __pfx_binder_ioctl+0x10/0x10 [ 231.936634][ T7174] __se_sys_ioctl+0xff/0x170 [ 231.936670][ T7174] do_syscall_64+0x17b/0x530 [ 231.936690][ T7174] ? irqentry_exit+0x10f/0x8f0 [ 231.936708][ T7174] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.936730][ T7174] ? clear_bhb_loop+0x40/0x90 [ 231.936754][ T7174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.936775][ T7174] RIP: 0033:0x7fadd5a4e0d9 [ 231.936794][ T7174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.936810][ T7174] RSP: 002b:00007fadd3ca6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 231.936829][ T7174] RAX: ffffffffffffffda RBX: 00007fadd5cd5fa0 RCX: 00007fadd5a4e0d9 [ 231.936842][ T7174] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 231.936854][ T7174] RBP: 00007fadd3ca6090 R08: 0000000000000000 R09: 0000000000000000 [ 231.936865][ T7174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 231.936875][ T7174] R13: 00007fadd5cd6038 R14: 00007fadd5cd5fa0 R15: 00007ffeb42dbd78 [ 231.936902][ T7174] [ 232.080491][ T5702] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.220666][ T5702] usb 5-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 232.220759][ T5702] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.220814][ T5702] usb 5-1: Product: syz [ 232.220856][ T5702] usb 5-1: Manufacturer: syz [ 232.220898][ T5702] usb 5-1: SerialNumber: syz [ 232.617301][ T5702] usb 5-1: 1:1 : unsupported format bits 0x20000 [ 232.659436][ T38] audit: type=1326 audit(1785957944.647:2): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7176 comm="syz.5.339" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efe399ce0d9 code=0x0 [ 232.815231][ T5702] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 232.815262][ T5702] usb 5-1: 2:1 : unsupported format bits 0x20000 [ 232.892551][ T5702] usb 5-1: USB disconnect, device number 17 [ 232.914905][ T5701] tipc: Node number set to 2886997039 [ 233.007802][ T200] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 233.056873][ T5864] udevd[5864]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 233.162341][ T200] usb 2-1: device descriptor read/64, error -71 [ 233.213846][ T38] audit: type=1326 audit(1785957945.307:3): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7187 comm="syz.3.341" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0f789be0d9 code=0x0 [ 233.264142][ T7189] FAULT_INJECTION: forcing a failure. [ 233.264142][ T7189] name failslab, interval 1, probability 0, space 0, times 0 [ 233.264171][ T7189] CPU: 1 UID: 0 PID: 7189 Comm: syz.3.341 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 233.264189][ T7189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 233.264199][ T7189] Call Trace: [ 233.264219][ T7189] [ 233.264225][ T7189] dump_stack_lvl+0xe8/0x150 [ 233.264251][ T7189] should_fail_ex+0x467/0x600 [ 233.264294][ T7189] should_failslab+0xa8/0x100 [ 233.264310][ T7189] ? prepare_creds+0x30/0x820 [ 233.264333][ T7189] kmem_cache_alloc_noprof+0x9e/0x680 [ 233.264357][ T7189] ? prepare_creds+0x30/0x820 [ 233.264384][ T7189] prepare_creds+0x30/0x820 [ 233.264411][ T7189] __se_sys_landlock_restrict_self+0x19a/0x840 [ 233.264447][ T7189] do_syscall_64+0x17b/0x530 [ 233.264464][ T7189] ? irqentry_exit+0x10f/0x8f0 [ 233.264479][ T7189] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.264495][ T7189] ? clear_bhb_loop+0x40/0x90 [ 233.264515][ T7189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.264543][ T7189] RIP: 0033:0x7f0f789be0d9 [ 233.264565][ T7189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.264577][ T7189] RSP: 002b:00007f0f76bf5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 233.264593][ T7189] RAX: ffffffffffffffda RBX: 00007f0f78c46090 RCX: 00007f0f789be0d9 [ 233.264605][ T7189] RDX: 0000000000000000 RSI: 000000000000000c RDI: ffffffffffffffff [ 233.264614][ T7189] RBP: 00007f0f76bf5090 R08: 0000000000000000 R09: 0000000000000000 [ 233.264623][ T7189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.264632][ T7189] R13: 00007f0f78c46128 R14: 00007f0f78c46090 R15: 00007ffd653cc7a8 [ 233.264654][ T7189] [ 233.568197][ T200] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 233.629256][ T7191] syzkaller1: entered promiscuous mode [ 233.629287][ T7191] syzkaller1: entered allmulticast mode [ 233.647497][ T7191] tipc: Started in network mode [ 233.647525][ T7191] tipc: Node identity 7f000001, cluster identity 4711 [ 233.676315][ T7191] tipc: Enabled bearer , priority 10 [ 233.676536][ T7193] input: syz0 as /devices/virtual/input/input14 [ 233.717925][ T200] usb 2-1: device descriptor read/64, error -71 [ 233.755724][ T7191] netlink: 16 bytes leftover after parsing attributes in process `syz.5.342'. [ 233.774845][ T38] audit: type=1326 audit(1785957945.867:4): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7190 comm="syz.5.342" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efe399ce0d9 code=0x0 [ 233.828734][ T200] usb usb2-port1: attempt power cycle [ 234.032315][ T7199] binder: BINDER_SET_CONTEXT_MGR already set [ 234.032333][ T7199] binder: 7198:7199 ioctl 4018620d 200000004a80 returned -16 [ 234.189561][ T200] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 234.221771][ T200] usb 2-1: device descriptor read/8, error -71 [ 234.458275][ T200] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 234.488689][ T200] usb 2-1: device descriptor read/8, error -71 [ 234.599223][ T200] usb usb2-port1: unable to enumerate USB device [ 234.697826][ T5701] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 234.750798][ T7212] FAULT_INJECTION: forcing a failure. [ 234.750798][ T7212] name failslab, interval 1, probability 0, space 0, times 0 [ 234.750828][ T7212] CPU: 0 UID: 0 PID: 7212 Comm: syz.5.350 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 234.750851][ T7212] Tainted: [L]=SOFTLOCKUP [ 234.750856][ T7212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 234.750866][ T7212] Call Trace: [ 234.750872][ T7212] [ 234.750878][ T7212] dump_stack_lvl+0xe8/0x150 [ 234.750905][ T7212] should_fail_ex+0x467/0x600 [ 234.750939][ T7212] should_failslab+0xa8/0x100 [ 234.750956][ T7212] __kmalloc_cache_noprof+0xa1/0x670 [ 234.750980][ T7212] ? call_usermodehelper_setup+0x8e/0x270 [ 234.750994][ T7212] ? call_usermodehelper_setup+0x8e/0x270 [ 234.751009][ T7212] ? __request_module+0x2ec/0x630 [ 234.751030][ T7212] call_usermodehelper_setup+0x8e/0x270 [ 234.751044][ T7212] ? __pfx_free_modprobe_argv+0x10/0x10 [ 234.751064][ T7212] __request_module+0x3ba/0x630 [ 234.751086][ T7212] ? __pfx___request_module+0x10/0x10 [ 234.751111][ T7212] ? safesetid_security_capable+0xa9/0x1a0 [ 234.751133][ T7212] ? security_capable+0x74/0x280 [ 234.751156][ T7212] ? dev_load+0x21/0x1f0 [ 234.751175][ T7212] dev_load+0x190/0x1f0 [ 234.751195][ T7212] dev_ioctl+0x837/0x1150 [ 234.751217][ T7212] sock_ioctl+0x756/0x7f0 [ 234.751235][ T7212] ? __pfx_sock_ioctl+0x10/0x10 [ 234.751253][ T7212] ? __fget_files+0x3a8/0x420 [ 234.751269][ T7212] ? __fget_files+0x2a/0x420 [ 234.751286][ T7212] ? bpf_lsm_file_ioctl+0x9/0x20 [ 234.751310][ T7212] ? __pfx_sock_ioctl+0x10/0x10 [ 234.751326][ T7212] __se_sys_ioctl+0xff/0x170 [ 234.751361][ T7212] do_syscall_64+0x17b/0x530 [ 234.751377][ T7212] ? irqentry_exit+0x10f/0x8f0 [ 234.751393][ T7212] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.751409][ T7212] ? clear_bhb_loop+0x40/0x90 [ 234.751431][ T7212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.751447][ T7212] RIP: 0033:0x7efe399ce0d9 [ 234.751462][ T7212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.751476][ T7212] RSP: 002b:00007efe37c26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 234.751492][ T7212] RAX: ffffffffffffffda RBX: 00007efe39c55fa0 RCX: 00007efe399ce0d9 [ 234.751504][ T7212] RDX: 0000200000000140 RSI: 00000000000089f0 RDI: 0000000000000003 [ 234.751515][ T7212] RBP: 00007efe37c26090 R08: 0000000000000000 R09: 0000000000000000 [ 234.751525][ T7212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.751534][ T7212] R13: 00007efe39c56038 R14: 00007efe39c55fa0 R15: 00007ffee9fb01e8 [ 234.751558][ T7212] [ 234.787766][ T5326] tipc: Node number set to 2130706433 [ 234.908319][ T200] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 235.007092][ T5701] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 235.007130][ T5701] usb 4-1: config 0 interface 0 has no altsetting 0 [ 235.095346][ T5701] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 235.095500][ T5701] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 235.095523][ T5701] usb 4-1: Product: syz [ 235.095540][ T5701] usb 4-1: Manufacturer: syz [ 235.095556][ T5701] usb 4-1: SerialNumber: syz [ 235.106967][ T200] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 235.107018][ T200] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.107040][ T200] usb 5-1: Product: syz [ 235.107056][ T200] usb 5-1: Manufacturer: syz [ 235.107072][ T200] usb 5-1: SerialNumber: syz [ 235.170072][ T5701] usb 4-1: config 0 descriptor?? [ 235.216124][ T5701] usb 4-1: selecting invalid altsetting 0 [ 235.277225][ T7215] FAULT_INJECTION: forcing a failure. [ 235.277225][ T7215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.277264][ T7215] CPU: 1 UID: 0 PID: 7215 Comm: syz.5.351 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 235.277292][ T7215] Tainted: [L]=SOFTLOCKUP [ 235.277299][ T7215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 235.277310][ T7215] Call Trace: [ 235.277316][ T7215] [ 235.277333][ T7215] dump_stack_lvl+0xe8/0x150 [ 235.277360][ T7215] should_fail_ex+0x467/0x600 [ 235.277389][ T7215] _copy_to_user+0x31/0xb0 [ 235.277408][ T7215] simple_read_from_buffer+0xe1/0x170 [ 235.277433][ T7215] proc_fail_nth_read+0x1be/0x230 [ 235.277457][ T7215] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 235.277480][ T7215] ? rw_verify_area+0x250/0x4d0 [ 235.277509][ T7215] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 235.277532][ T7215] vfs_read+0x219/0xa90 [ 235.277562][ T7215] ? __pfx_vfs_read+0x10/0x10 [ 235.277584][ T7215] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 235.277604][ T7215] ? lockdep_hardirqs_on+0x7a/0x110 [ 235.277622][ T7215] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 235.277640][ T7215] ? mutex_lock_nested+0x152/0x1d0 [ 235.277665][ T7215] ? fdget_pos+0x252/0x320 [ 235.277693][ T7215] ksys_read+0x156/0x270 [ 235.277717][ T7215] ? __pfx_ksys_read+0x10/0x10 [ 235.277748][ T7215] do_syscall_64+0x17b/0x530 [ 235.277767][ T7215] ? irqentry_exit+0x10f/0x8f0 [ 235.277785][ T7215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.277805][ T7215] ? clear_bhb_loop+0x40/0x90 [ 235.277831][ T7215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.277851][ T7215] RIP: 0033:0x7efe3998e90e [ 235.277871][ T7215] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 235.277888][ T7215] RSP: 002b:00007efe37c25fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 235.277910][ T7215] RAX: ffffffffffffffda RBX: 00007efe37c266c0 RCX: 00007efe3998e90e [ 235.277924][ T7215] RDX: 000000000000000f RSI: 00007efe37c260a0 RDI: 0000000000000004 [ 235.277936][ T7215] RBP: 00007efe37c26090 R08: 0000000000000000 R09: 0000000000000000 [ 235.277948][ T7215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 235.277960][ T7215] R13: 00007efe39c56038 R14: 00007efe39c55fa0 R15: 00007ffee9fb01e8 [ 235.277990][ T7215] [ 235.655551][ T7220] type: 2297912225 invalid [ 235.777725][ T200] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 235.777789][ T200] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 236.124497][ T5701] usb 4-1: USB disconnect, device number 27 [ 236.819793][ T7210] input: syz1 as /devices/virtual/input/input15 [ 237.355060][ T200] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO [ 237.355113][ T200] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 237.401132][ T200] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 237.549928][ T200] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 237.725075][ T200] usb 5-1: USB disconnect, device number 18 [ 237.771216][ T7235] netlink: 'syz.5.357': attribute type 13 has an invalid length. [ 237.881104][ T7237] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 238.410976][ T7237] netlink: 12 bytes leftover after parsing attributes in process `syz.5.359'. [ 238.977854][ T32] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 239.077824][ T1011] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 239.127790][ T32] usb 4-1: Using ep0 maxpacket: 32 [ 239.131603][ T32] usb 4-1: unable to get BOS descriptor or descriptor too short [ 239.133272][ T32] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 83, changing to 7 [ 239.136578][ T32] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 239.136609][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.136637][ T32] usb 4-1: Product: syz [ 239.136648][ T32] usb 4-1: Manufacturer: syz [ 239.136658][ T32] usb 4-1: SerialNumber: syz [ 239.261209][ T1011] usb 2-1: device descriptor read/64, error -71 [ 239.273731][ T5701] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 239.428352][ T5701] usb 5-1: Using ep0 maxpacket: 8 [ 239.430259][ T32] usb 4-1: 1:1 : no UAC_FORMAT_TYPE desc [ 239.430745][ T32] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 239.430975][ T5701] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 239.431032][ T5701] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 239.431067][ T5701] usb 5-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 239.431094][ T5701] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 239.431124][ T5701] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 239.431150][ T5701] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 239.431195][ T5701] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 239.431218][ T5701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.596452][ T32] usb 4-1: USB disconnect, device number 28 [ 239.597840][ T1011] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 239.725187][ T5701] usb 5-1: GET_CAPABILITIES returned 0 [ 239.725236][ T5701] usbtmc 5-1:16.0: can't read capabilities [ 239.760791][ T1011] usb 2-1: device descriptor read/64, error -71 [ 239.777839][ T5864] udevd[5864]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 239.874451][ T1011] usb usb2-port1: attempt power cycle [ 239.974999][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 239.994482][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 239.995612][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 239.995692][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 239.996240][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 239.996320][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 239.996391][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 239.996673][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 239.996751][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 239.996825][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 239.997126][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 239.997203][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 239.997704][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 239.997786][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 239.997860][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 240.027607][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 240.194950][ T200] usb 5-1: USB disconnect, device number 19 [ 240.218607][ T1011] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 240.239122][ T1011] usb 2-1: device descriptor read/8, error -71 [ 240.351781][ T7277] netlink: 72 bytes leftover after parsing attributes in process `syz.3.369'. [ 240.354032][ T7277] netlink: 72 bytes leftover after parsing attributes in process `syz.3.369'. [ 240.484180][ T1011] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 240.498817][ T1011] usb 2-1: device descriptor read/8, error -71 [ 240.537884][ T5701] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 240.608283][ T1011] usb usb2-port1: unable to enumerate USB device [ 240.637812][ T7286] FAULT_INJECTION: forcing a failure. [ 240.637812][ T7286] name failslab, interval 1, probability 0, space 0, times 0 [ 240.637843][ T7286] CPU: 0 UID: 0 PID: 7286 Comm: syz.3.372 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 240.637866][ T7286] Tainted: [L]=SOFTLOCKUP [ 240.637871][ T7286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 240.637894][ T7286] Call Trace: [ 240.637900][ T7286] [ 240.637907][ T7286] dump_stack_lvl+0xe8/0x150 [ 240.637933][ T7286] should_fail_ex+0x467/0x600 [ 240.637959][ T7286] should_failslab+0xa8/0x100 [ 240.637975][ T7286] __kmalloc_cache_noprof+0xa1/0x670 [ 240.638005][ T7286] ? snd_pcm_hw_param_near+0x80/0x4d0 [ 240.638023][ T7286] ? snd_pcm_hw_param_near+0x80/0x4d0 [ 240.638046][ T7286] snd_pcm_hw_param_near+0x80/0x4d0 [ 240.638064][ T7286] ? snd_pcm_oss_change_params_locked+0xf73/0x3c80 [ 240.638082][ T7286] ? snd_interval_refine+0x5f8/0xa40 [ 240.638102][ T7286] snd_pcm_oss_change_params_locked+0xfc5/0x3c80 [ 240.638141][ T7286] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 240.638170][ T7286] ? lockdep_hardirqs_on+0x7a/0x110 [ 240.638187][ T7286] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 240.638204][ T7286] ? snd_pcm_oss_set_trigger+0x2f5/0xda0 [ 240.638226][ T7286] snd_pcm_oss_set_trigger+0x4ff/0xda0 [ 240.638250][ T7286] snd_pcm_oss_ioctl+0xbb6/0xe00 [ 240.638269][ T7286] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 240.638287][ T7286] __se_sys_ioctl+0xff/0x170 [ 240.638310][ T7286] do_syscall_64+0x17b/0x530 [ 240.638326][ T7286] ? irqentry_exit+0x10f/0x8f0 [ 240.638340][ T7286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.638357][ T7286] ? clear_bhb_loop+0x40/0x90 [ 240.638377][ T7286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.638393][ T7286] RIP: 0033:0x7f0f789be0d9 [ 240.638407][ T7286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.638421][ T7286] RSP: 002b:00007f0f76bf5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 240.638438][ T7286] RAX: ffffffffffffffda RBX: 00007f0f78c46090 RCX: 00007f0f789be0d9 [ 240.638451][ T7286] RDX: 00002000000000c0 RSI: 0000000040045010 RDI: 0000000000000003 [ 240.638461][ T7286] RBP: 00007f0f76bf5090 R08: 0000000000000000 R09: 0000000000000000 [ 240.638471][ T7286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 240.638481][ T7286] R13: 00007f0f78c46128 R14: 00007f0f78c46090 R15: 00007ffd653cc7a8 [ 240.638512][ T7286] [ 240.916348][ T5701] usb 6-1: unable to get BOS descriptor or descriptor too short [ 240.926102][ T5701] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.926162][ T5701] usb 6-1: config 1 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 240.926192][ T5701] usb 6-1: config 1 interface 0 has no altsetting 0 [ 240.967534][ T5701] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 240.968266][ T5701] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.968285][ T5701] usb 6-1: Product: syz [ 240.968296][ T5701] usb 6-1: Manufacturer: syz [ 240.968307][ T5701] usb 6-1: SerialNumber: syz [ 241.234769][ T7290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.374'. [ 241.306914][ T5701] cdc_mbim 6-1:1.0: MBIM functional descriptor missing [ 241.306957][ T5701] cdc_mbim 6-1:1.0: bind() failure [ 241.332895][ T5701] usb 6-1: USB disconnect, device number 3 [ 241.367773][ T1011] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 241.547874][ T1011] usb 5-1: Using ep0 maxpacket: 8 [ 241.550007][ T1011] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 241.550040][ T1011] usb 5-1: config 0 has no interface number 0 [ 241.552532][ T1011] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 241.552563][ T1011] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.552585][ T1011] usb 5-1: Product: syz [ 241.552602][ T1011] usb 5-1: Manufacturer: syz [ 241.552613][ T1011] usb 5-1: SerialNumber: syz [ 241.609565][ T1011] usb 5-1: config 0 descriptor?? [ 241.787914][ T822] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 241.832745][ T1011] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 241.832859][ T1011] uvcvideo 5-1:0.31: Entity type for entity Output 32774 was not initialized! [ 241.944591][ T822] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 241.944653][ T822] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 241.984300][ T822] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 0.00 [ 241.984335][ T822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.984357][ T822] usb 4-1: Product: syz [ 241.984373][ T822] usb 4-1: Manufacturer: syz [ 241.984390][ T822] usb 4-1: SerialNumber: syz [ 242.040592][ T7295] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 242.040727][ T7295] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 242.504762][ T5701] usb 4-1: USB disconnect, device number 29 [ 242.552858][ T7309] netlink: 'syz.1.381': attribute type 1 has an invalid length. [ 242.724524][ T5702] usb 5-1: USB disconnect, device number 20 [ 242.760344][ T7314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.382'. [ 242.987021][ T7320] FAULT_INJECTION: forcing a failure. [ 242.987021][ T7320] name failslab, interval 1, probability 0, space 0, times 0 [ 242.987061][ T7320] CPU: 1 UID: 0 PID: 7320 Comm: syz.1.384 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 242.987092][ T7320] Tainted: [L]=SOFTLOCKUP [ 242.987100][ T7320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 242.987113][ T7320] Call Trace: [ 242.987121][ T7320] [ 242.987130][ T7320] dump_stack_lvl+0xe8/0x150 [ 242.987167][ T7320] should_fail_ex+0x467/0x600 [ 242.987201][ T7320] should_failslab+0xa8/0x100 [ 242.987225][ T7320] __kmalloc_cache_noprof+0xa1/0x670 [ 242.987258][ T7320] ? kvm_dev_ioctl+0xa46/0x1620 [ 242.987289][ T7320] ? kvm_dev_ioctl+0xa46/0x1620 [ 242.987328][ T7320] kvm_dev_ioctl+0xa46/0x1620 [ 242.987371][ T7320] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 242.987401][ T7320] ? __fget_files+0x3a8/0x420 [ 242.987431][ T7320] ? bpf_lsm_file_ioctl+0x9/0x20 [ 242.987466][ T7320] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 242.987499][ T7320] __se_sys_ioctl+0xff/0x170 [ 242.987532][ T7320] do_syscall_64+0x17b/0x530 [ 242.987572][ T7320] ? irqentry_exit+0x10f/0x8f0 [ 242.987594][ T7320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.987616][ T7320] ? clear_bhb_loop+0x40/0x90 [ 242.987644][ T7320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.987667][ T7320] RIP: 0033:0x7fadd5a4e0d9 [ 242.987689][ T7320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.987708][ T7320] RSP: 002b:00007fadd3ca6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 242.987730][ T7320] RAX: ffffffffffffffda RBX: 00007fadd5cd5fa0 RCX: 00007fadd5a4e0d9 [ 242.987746][ T7320] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 242.987760][ T7320] RBP: 00007fadd3ca6090 R08: 0000000000000000 R09: 0000000000000000 [ 242.987773][ T7320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 242.987786][ T7320] R13: 00007fadd5cd6038 R14: 00007fadd5cd5fa0 R15: 00007ffeb42dbd78 [ 242.987820][ T7320] [ 243.510916][ T7327] binder_alloc: 7326: pid 7326 spamming oneway? 1 buffers allocated for a total size of 4096 [ 244.151992][ T7349] capability: warning: `syz.4.392' uses 32-bit capabilities (legacy support in use) [ 244.602638][ T5603] Bluetooth: hci0: unexpected event 0x2f length: 1017 > 260 [ 244.603798][ T5603] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 244.727692][ T5701] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 244.887991][ T5701] usb 4-1: Using ep0 maxpacket: 32 [ 244.891393][ T5701] usb 4-1: unable to get BOS descriptor or descriptor too short [ 244.892658][ T5701] usb 4-1: config 1 has an invalid interface number: 242 but max is 2 [ 244.892688][ T5701] usb 4-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 244.892711][ T5701] usb 4-1: config 1 has no interface number 3 [ 244.892911][ T5701] usb 4-1: config 1 interface 1 has no altsetting 0 [ 244.895356][ T5701] usb 4-1: New USB device found, idVendor=0499, idProduct=1509, bcdDevice= 0.40 [ 244.895387][ T5701] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.895408][ T5701] usb 4-1: Product: syz [ 244.895422][ T5701] usb 4-1: Manufacturer: syz [ 244.895444][ T5701] usb 4-1: SerialNumber: syz [ 245.037868][ T1011] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 245.192204][ T1011] usb 6-1: config index 0 descriptor too short (expected 65535, got 72) [ 245.192235][ T1011] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.192253][ T1011] usb 6-1: config 0 has no interfaces? [ 245.195115][ T1011] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 245.195148][ T1011] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 245.195167][ T1011] usb 6-1: SerialNumber: syz [ 245.257197][ T1011] usb 6-1: config 0 descriptor?? [ 245.374174][ T5701] usb 4-1: 1:1 : unsupported format bits 0x2004 [ 245.374232][ T5701] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 245.376527][ T5701] usb 4-1: selecting invalid altsetting 0 [ 245.388191][ T5701] usb 4-1: selecting invalid altsetting 0 [ 245.388287][ T5701] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 245.533678][ T7365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.536346][ T7365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.693886][ T7375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.694457][ T7375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.715632][ T5702] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 245.744643][ T7375] pim6reg: entered allmulticast mode [ 245.831109][ T5701] usb 4-1: USB disconnect, device number 30 [ 245.880351][ T5702] usb 5-1: Invalid ep0 maxpacket: 16 [ 245.927879][ T1011] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 246.047967][ T5702] usb 5-1: new low-speed USB device number 22 using dummy_hcd [ 246.101039][ T1011] usb 2-1: Using ep0 maxpacket: 16 [ 246.103638][ T1011] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 246.103669][ T1011] usb 2-1: config 0 has no interface number 0 [ 246.131256][ T1011] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 246.131287][ T1011] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.131319][ T1011] usb 2-1: Product: syz [ 246.131332][ T1011] usb 2-1: Manufacturer: syz [ 246.131345][ T1011] usb 2-1: SerialNumber: syz [ 246.148103][ T200] usb 6-1: USB disconnect, device number 4 [ 246.268200][ T5702] usb 5-1: Invalid ep0 maxpacket: 16 [ 246.272719][ T1011] usb 2-1: config 0 descriptor?? [ 246.297490][ T1011] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 246.314644][ T5702] usb usb5-port1: attempt power cycle [ 246.495205][ T7250] udevd[7250]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 246.707966][ T5702] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 246.733876][ T5702] usb 5-1: Invalid ep0 maxpacket: 16 [ 246.847262][ T7383] FAULT_INJECTION: forcing a failure. [ 246.847262][ T7383] name failslab, interval 1, probability 0, space 0, times 0 [ 246.847310][ T7383] CPU: 0 UID: 0 PID: 7383 Comm: syz.5.403 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 246.847341][ T7383] Tainted: [L]=SOFTLOCKUP [ 246.847348][ T7383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 246.847361][ T7383] Call Trace: [ 246.847368][ T7383] [ 246.847377][ T7383] dump_stack_lvl+0xe8/0x150 [ 246.847411][ T7383] should_fail_ex+0x467/0x600 [ 246.847445][ T7383] should_failslab+0xa8/0x100 [ 246.847469][ T7383] __kvmalloc_node_noprof+0x176/0x880 [ 246.847507][ T7383] ? nf_hook_entries_grow+0x287/0x740 [ 246.847525][ T7383] ? nf_hook_entries_grow+0x287/0x740 [ 246.847550][ T7383] nf_hook_entries_grow+0x287/0x740 [ 246.847586][ T7383] __nf_register_net_hook+0x2c9/0x930 [ 246.847615][ T7383] nf_register_net_hook+0xb2/0x190 [ 246.847636][ T7383] nf_register_net_hooks+0x44/0x1b0 [ 246.847660][ T7383] nf_defrag_ipv4_enable+0x87/0x120 [ 246.847689][ T7383] nf_ct_netns_do_get+0x18c/0x5c0 [ 246.847713][ T7383] ? trace_kmalloc+0x2a/0xf0 [ 246.847757][ T7383] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 246.847782][ T7383] ? __kmalloc_noprof+0x436/0x790 [ 246.847809][ T7383] ? nft_pernet+0x23/0x240 [ 246.847840][ T7383] ? nf_ct_netns_get+0xe9/0x320 [ 246.847864][ T7383] nf_tables_newrule+0x179e/0x28a0 [ 246.847908][ T7383] ? __pfx_nf_tables_newrule+0x10/0x10 [ 246.847934][ T7383] ? lock_acquire+0x115/0x350 [ 246.847968][ T7383] ? nfnl_pernet+0x23/0x240 [ 246.848002][ T7383] ? __nla_parse+0x40/0x60 [ 246.848035][ T7383] nfnetlink_rcv+0x1291/0x28d0 [ 246.848093][ T7383] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 246.848134][ T7383] ? __pfx_save_netdev_trace_buffer+0x10/0x10 [ 246.848155][ T7383] ? ref_tracker_free+0x668/0x820 [ 246.848211][ T7383] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 246.848235][ T7383] ? lockdep_hardirqs_on+0x7a/0x110 [ 246.848278][ T7383] netlink_unicast+0x7f5/0x990 [ 246.848315][ T7383] netlink_sendmsg+0x813/0xb40 [ 246.848352][ T7383] ? __pfx_netlink_sendmsg+0x10/0x10 [ 246.848384][ T7383] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 246.848417][ T7383] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 246.848447][ T7383] ? arch_stack_walk+0xfb/0x150 [ 246.848480][ T7383] ? __pfx_netlink_sendmsg+0x10/0x10 [ 246.848510][ T7383] sock_sendmsg_nosec+0x13a/0x180 [ 246.848536][ T7383] ____sys_sendmsg+0x565/0x870 [ 246.848579][ T7383] ? __pfx_____sys_sendmsg+0x10/0x10 [ 246.848615][ T7383] ? import_iovec+0x73/0xa0 [ 246.848648][ T7383] ___sys_sendmsg+0x2a5/0x360 [ 246.848676][ T7383] ? __lock_acquire+0x6df/0x2e40 [ 246.848699][ T7383] ? __pfx____sys_sendmsg+0x10/0x10 [ 246.848773][ T7383] ? __fget_files+0x2a/0x420 [ 246.848792][ T7383] ? __fget_files+0x3a8/0x420 [ 246.848821][ T7383] __x64_sys_sendmsg+0x1b7/0x290 [ 246.848853][ T7383] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 246.848901][ T7383] do_syscall_64+0x17b/0x530 [ 246.848923][ T7383] ? irqentry_exit+0x10f/0x8f0 [ 246.848942][ T7383] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.848963][ T7383] ? clear_bhb_loop+0x40/0x90 [ 246.848988][ T7383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.849008][ T7383] RIP: 0033:0x7efe399ce0d9 [ 246.849030][ T7383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.849049][ T7383] RSP: 002b:00007efe37c26028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 246.849070][ T7383] RAX: ffffffffffffffda RBX: 00007efe39c55fa0 RCX: 00007efe399ce0d9 [ 246.849084][ T7383] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 246.849096][ T7383] RBP: 00007efe37c26090 R08: 0000000000000000 R09: 0000000000000000 [ 246.849108][ T7383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 246.849119][ T7383] R13: 00007efe39c56038 R14: 00007efe39c55fa0 R15: 00007ffee9fb01e8 [ 246.849152][ T7383] [ 246.919065][ T5702] usb 5-1: new low-speed USB device number 24 using dummy_hcd [ 247.353540][ T37] usb 4-1: new low-speed USB device number 31 using dummy_hcd [ 247.394896][ T5702] usb 5-1: Invalid ep0 maxpacket: 16 [ 247.395509][ T5702] usb usb5-port1: unable to enumerate USB device [ 247.507915][ T37] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 247.507978][ T37] usb 4-1: config 1 interface 0 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 247.508000][ T37] usb 4-1: config 1 interface 0 has no altsetting 0 [ 247.511819][ T37] usb 4-1: string descriptor 0 read error: -22 [ 247.511947][ T37] usb 4-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.40 [ 247.511966][ T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.673215][ T37] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 248.128596][ T1011] gspca_spca1528: reg_w err -71 [ 248.128668][ T1011] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 248.157715][ T1011] usb 2-1: USB disconnect, device number 38 [ 248.609053][ T5603] Bluetooth: hci4: unexpected event 0x2f length: 1017 > 260 [ 248.609849][ T5603] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 249.302428][ T5701] usb 4-1: USB disconnect, device number 31 [ 249.420672][ T7404] binder: 7403:7404 ioctl c0306201 200000000080 returned -14 [ 249.440354][ T7404] binder: 7403:7404 ioctl c018620c 2000000000c0 returned -1 [ 249.446871][ T7404] binder: 7403:7404 ioctl c0306201 2000000003c0 returned -14 [ 249.478734][ T7404] binder: BINDER_SET_CONTEXT_MGR already set [ 249.478747][ T7404] binder: 7403:7404 ioctl 4018620d 200000003280 returned -16 [ 249.480133][ T7404] binder: 7403:7404 ioctl c0306201 200000000080 returned -14 [ 249.947896][ T1011] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 250.137782][ T1011] usb 4-1: Using ep0 maxpacket: 32 [ 250.150315][ T1011] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.183330][ T1011] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 250.183364][ T1011] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.183386][ T1011] usb 4-1: Product: syz [ 250.183401][ T1011] usb 4-1: Manufacturer: syz [ 250.183417][ T1011] usb 4-1: SerialNumber: syz [ 250.189744][ T1011] usb 4-1: config 0 descriptor?? [ 250.210946][ T1011] cdc_ether 4-1:0.0: missing cdc header descriptor [ 250.315206][ T1011] usb 4-1: unsupported MDLM descriptors [ 250.429053][ T7425] FAULT_INJECTION: forcing a failure. [ 250.429053][ T7425] name failslab, interval 1, probability 0, space 0, times 0 [ 250.429091][ T7425] CPU: 1 UID: 0 PID: 7425 Comm: syz.1.419 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 250.429117][ T7425] Tainted: [L]=SOFTLOCKUP [ 250.429124][ T7425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 250.429137][ T7425] Call Trace: [ 250.429144][ T7425] [ 250.429153][ T7425] dump_stack_lvl+0xe8/0x150 [ 250.429186][ T7425] should_fail_ex+0x467/0x600 [ 250.429224][ T7425] should_failslab+0xa8/0x100 [ 250.429248][ T7425] __kmalloc_noprof+0xfb/0x790 [ 250.429279][ T7425] ? tomoyo_realpath_from_path+0xef/0x640 [ 250.429313][ T7425] ? tomoyo_realpath_from_path+0xef/0x640 [ 250.429353][ T7425] tomoyo_realpath_from_path+0xef/0x640 [ 250.429397][ T7425] ? tomoyo_path_number_perm+0x219/0x5f0 [ 250.429425][ T7425] tomoyo_path_number_perm+0x246/0x5f0 [ 250.429456][ T7425] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 250.429484][ T7425] ? do_raw_spin_lock+0x12b/0x2f0 [ 250.429528][ T7425] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 250.429551][ T7425] ? lockdep_hardirqs_on+0x7a/0x110 [ 250.429587][ T7425] ? __fget_files+0x2a/0x420 [ 250.429612][ T7425] ? __fget_files+0x3a8/0x420 [ 250.429632][ T7425] ? __fget_files+0x2a/0x420 [ 250.429656][ T7425] security_file_ioctl+0xb9/0x260 [ 250.429685][ T7425] __se_sys_ioctl+0x47/0x170 [ 250.429716][ T7425] do_syscall_64+0x17b/0x530 [ 250.429744][ T7425] ? irqentry_exit+0x10f/0x8f0 [ 250.429759][ T7425] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.429775][ T7425] ? clear_bhb_loop+0x40/0x90 [ 250.429794][ T7425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.429810][ T7425] RIP: 0033:0x7fadd5a4e0d9 [ 250.429855][ T7425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.429869][ T7425] RSP: 002b:00007fadd3ca6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 250.429886][ T7425] RAX: ffffffffffffffda RBX: 00007fadd5cd5fa0 RCX: 00007fadd5a4e0d9 [ 250.429898][ T7425] RDX: 0000000000000000 RSI: 00000000400448c9 RDI: 0000000000000004 [ 250.429908][ T7425] RBP: 00007fadd3ca6090 R08: 0000000000000000 R09: 0000000000000000 [ 250.429918][ T7425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.429927][ T7425] R13: 00007fadd5cd6038 R14: 00007fadd5cd5fa0 R15: 00007ffeb42dbd78 [ 250.429951][ T7425] [ 250.431596][ T7425] ERROR: Out of memory at tomoyo_realpath_from_path. [ 250.447735][ T200] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 250.668417][ T200] usb 5-1: Using ep0 maxpacket: 16 [ 250.741035][ T200] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 250.741065][ T200] usb 5-1: config 0 has no interface number 0 [ 250.767133][ T200] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 250.767168][ T200] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.767190][ T200] usb 5-1: Product: syz [ 250.767205][ T200] usb 5-1: Manufacturer: syz [ 250.767221][ T200] usb 5-1: SerialNumber: syz [ 250.844998][ T200] usb 5-1: config 0 descriptor?? [ 250.887901][ T200] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 251.221600][ T7434] FAULT_INJECTION: forcing a failure. [ 251.221600][ T7434] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.221640][ T7434] CPU: 1 UID: 0 PID: 7434 Comm: syz.1.421 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 251.221667][ T7434] Tainted: [L]=SOFTLOCKUP [ 251.221673][ T7434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 251.221685][ T7434] Call Trace: [ 251.221693][ T7434] [ 251.221701][ T7434] dump_stack_lvl+0xe8/0x150 [ 251.221732][ T7434] should_fail_ex+0x467/0x600 [ 251.221762][ T7434] _copy_to_iter+0x1e4/0x1810 [ 251.221792][ T7434] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 251.221826][ T7434] ? lockdep_hardirqs_on+0x7a/0x110 [ 251.221846][ T7434] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 251.221872][ T7434] ? __pfx__copy_to_iter+0x10/0x10 [ 251.221905][ T7434] ? rt_spin_unlock+0x157/0x200 [ 251.221936][ T7434] __skb_datagram_iter+0xf8/0x980 [ 251.221971][ T7434] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 251.222008][ T7434] skb_copy_datagram_iter+0xb5/0x240 [ 251.222045][ T7434] netlink_recvmsg+0x2b9/0xa50 [ 251.222089][ T7434] ? __pfx_netlink_recvmsg+0x10/0x10 [ 251.222128][ T7434] ? __lock_acquire+0x6df/0x2e40 [ 251.222154][ T7434] ? __pfx_netlink_recvmsg+0x10/0x10 [ 251.222187][ T7434] sock_recvmsg_nosec+0x130/0x170 [ 251.222215][ T7434] ____sys_recvmsg+0x242/0x4f0 [ 251.222250][ T7434] ? __pfx_____sys_recvmsg+0x10/0x10 [ 251.222294][ T7434] ? import_iovec+0x73/0xa0 [ 251.222327][ T7434] ___sys_recvmsg+0x213/0x5a0 [ 251.222362][ T7434] ? __pfx____sys_recvmsg+0x10/0x10 [ 251.222396][ T7434] ? lock_acquire+0x115/0x350 [ 251.222442][ T7434] ? __fget_files+0x3a8/0x420 [ 251.222473][ T7434] do_recvmmsg+0x320/0x7f0 [ 251.222512][ T7434] ? __pfx_do_recvmmsg+0x10/0x10 [ 251.222540][ T7434] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 251.222566][ T7434] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 251.222603][ T7434] __x64_sys_recvmmsg+0x198/0x250 [ 251.222636][ T7434] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 251.222675][ T7434] do_syscall_64+0x17b/0x530 [ 251.222695][ T7434] ? irqentry_exit+0x10f/0x8f0 [ 251.222712][ T7434] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.222732][ T7434] ? clear_bhb_loop+0x40/0x90 [ 251.222755][ T7434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.222775][ T7434] RIP: 0033:0x7fadd5a4e0d9 [ 251.222796][ T7434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.222824][ T7434] RSP: 002b:00007fadd3ca6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 251.222846][ T7434] RAX: ffffffffffffffda RBX: 00007fadd5cd5fa0 RCX: 00007fadd5a4e0d9 [ 251.222861][ T7434] RDX: 0000000000000003 RSI: 000020000000b400 RDI: 0000000000000003 [ 251.222874][ T7434] RBP: 00007fadd3ca6090 R08: 0000000000000000 R09: 0000000000000000 [ 251.222887][ T7434] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 251.222898][ T7434] R13: 00007fadd5cd6038 R14: 00007fadd5cd5fa0 R15: 00007ffeb42dbd78 [ 251.222927][ T7434] [ 252.232942][ T7450] netlink: 112 bytes leftover after parsing attributes in process `syz.1.428'. [ 252.632905][ T200] gspca_spca1528: reg_r err -71 [ 252.633022][ T200] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 252.686669][ T200] usb 5-1: USB disconnect, device number 25 [ 252.716818][ T1011] usb 4-1: USB disconnect, device number 32 [ 253.294475][ T7469] netlink: 8 bytes leftover after parsing attributes in process `syz.5.433'. [ 253.294498][ T7469] netlink: 8 bytes leftover after parsing attributes in process `syz.5.433'. [ 253.497809][ T37] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 253.647774][ T37] usb 5-1: Using ep0 maxpacket: 16 [ 253.649534][ T37] usb 5-1: unable to get BOS descriptor or descriptor too short [ 253.651061][ T37] usb 5-1: config 3 has an invalid interface number: 71 but max is 0 [ 253.651080][ T37] usb 5-1: config 3 has no interface number 0 [ 253.651112][ T37] usb 5-1: config 3 interface 71 has no altsetting 0 [ 253.654840][ T37] usb 5-1: New USB device found, idVendor=1546, idProduct=1104, bcdDevice=b6.0d [ 253.654862][ T37] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.654876][ T37] usb 5-1: Product: syz [ 253.654887][ T37] usb 5-1: Manufacturer: syz [ 253.654897][ T37] usb 5-1: SerialNumber: syz [ 253.812740][ T38] audit: type=1326 audit(1785957965.907:5): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7480 comm="syz.1.438" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fadd5a4e0d9 code=0x0 [ 253.967765][ T5701] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 254.079234][ T37] cdc_ether 5-1:3.71: invalid descriptor buffer length [ 254.079264][ T37] usb 5-1: No union descriptors [ 254.089863][ T37] usb 5-1: USB disconnect, device number 26 [ 254.439307][ T200] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 254.597849][ T200] usb 4-1: Using ep0 maxpacket: 32 [ 254.615563][ T200] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 254.615599][ T200] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.615621][ T200] usb 4-1: Product: syz [ 254.615637][ T200] usb 4-1: Manufacturer: syz [ 254.615653][ T200] usb 4-1: SerialNumber: syz [ 254.690651][ T200] usb 4-1: config 0 descriptor?? [ 254.713470][ T200] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 254.713575][ T200] dvb-usb: bulk message failed: -22 (4/0) [ 254.713592][ T200] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 254.713714][ T200] dvb-usb: bulk message failed: -22 (5/0) [ 254.713728][ T200] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 254.785736][ T200] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 254.786508][ T200] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 254.786551][ T200] usb 4-1: media controller created [ 254.817789][ T5326] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 254.846850][ T200] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 254.950587][ T200] usb 4-1: selecting invalid altsetting 3 [ 254.950603][ T200] ttusb2: set interface to alts=3 failed [ 254.980372][ T5326] usb 6-1: config 0 has no interfaces? [ 254.994158][ T7489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.996985][ T7489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.999547][ T5702] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 255.027960][ T7489] netlink: 12 bytes leftover after parsing attributes in process `syz.5.441'. [ 255.056996][ T200] DVB: Unable to find symbol tda10086_attach() [ 255.057010][ T200] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 255.062568][ T200] dvb-usb: bulk message failed: -22 (4/0) [ 255.062644][ T200] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 255.072761][ T200] dvb-usb: bulk message failed: -22 (5/0) [ 255.073011][ T200] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 255.073244][ T200] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 255.139488][ T200] usb 4-1: USB disconnect, device number 33 [ 255.209564][ T5702] usb 5-1: Using ep0 maxpacket: 16 [ 255.216138][ T5702] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 255.216166][ T5702] usb 5-1: config 0 has no interface number 0 [ 255.265983][ T5702] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 255.266017][ T5702] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.266039][ T5702] usb 5-1: Product: syz [ 255.266054][ T5702] usb 5-1: Manufacturer: syz [ 255.266068][ T5702] usb 5-1: SerialNumber: syz [ 255.336163][ T5702] usb 5-1: config 0 descriptor?? [ 255.348698][ T5702] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 255.440204][ T5326] usb 6-1: string descriptor 0 read error: -71 [ 255.440254][ T5326] usb 6-1: New USB device found, idVendor=0525, idProduct=84a1, bcdDevice= 0.40 [ 255.440276][ T5326] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 255.473259][ T5326] usb 6-1: config 0 descriptor?? [ 255.486913][ T5326] usb 6-1: can't set config #0, error -71 [ 255.495646][ T5326] usb 6-1: USB disconnect, device number 5 [ 255.595321][ T200] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 255.992883][ T7489] syz.5.441 (7489) used greatest stack depth: 18464 bytes left [ 256.297995][ T200] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 256.448861][ T200] usb 6-1: Using ep0 maxpacket: 8 [ 256.472846][ T200] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 54, changing to 9 [ 256.472902][ T200] usb 6-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 256.472925][ T200] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.502624][ T200] usb 6-1: config 0 descriptor?? [ 256.813830][ T5702] gspca_spca1528: reg_w err -71 [ 256.813927][ T5702] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 256.842441][ T5702] usb 5-1: USB disconnect, device number 27 [ 256.936050][ T200] usbhid 6-1:0.0: can't add hid device: -71 [ 256.936189][ T200] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 256.966625][ T200] usb 6-1: USB disconnect, device number 6 [ 257.027796][ T1011] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 257.210656][ T1011] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 257.210689][ T1011] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 257.210717][ T1011] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 257.210760][ T1011] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14385, setting to 64 [ 257.212735][ T1011] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 257.212776][ T1011] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 257.212797][ T1011] usb 4-1: Product: syz [ 257.212812][ T1011] usb 4-1: Manufacturer: syz [ 257.281150][ T32] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 257.305007][ T1011] cdc_wdm 4-1:1.0: skipping garbage [ 257.305029][ T1011] cdc_wdm 4-1:1.0: skipping garbage [ 257.330315][ T1011] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 257.330362][ T1011] cdc_wdm 4-1:1.0: Unknown control protocol [ 257.469797][ T32] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 243, changing to 11 [ 257.469834][ T32] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 17415, setting to 1024 [ 257.503764][ T32] usb 2-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 257.503796][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.503816][ T32] usb 2-1: Product: syz [ 257.503831][ T32] usb 2-1: Manufacturer: syz [ 257.503845][ T32] usb 2-1: SerialNumber: syz [ 257.604194][ T7503] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 257.659577][ T32] symbolserial 2-1:1.0: symbol converter detected [ 257.686098][ T32] usb 2-1: symbol converter now attached to ttyUSB0 getty: ttyS0: read error: Resource temporarily unavailable [ 258.196609][ C1] cdc_wdm 4-1:1.0: Unexpected error -71 [ 258.205098][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 258.205276][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 258.205342][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 258.321469][ C0] symbol ttyUSB0: symbol_int_callback - failed resubmitting read urb, error -1 [ 258.338883][ T5702] usb 2-1: USB disconnect, device number 40 [ 258.365479][ T200] usb 4-1: USB disconnect, device number 34 [ 258.462235][ T5702] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 258.464673][ T5702] symbolserial 2-1:1.0: device disconnected [ 258.760169][ T5743] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 258.907736][ T5743] usb 6-1: Invalid ep0 maxpacket: 32 [ 259.038084][ T5743] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 259.247807][ T5743] usb 6-1: Invalid ep0 maxpacket: 32 [ 259.248200][ T5743] usb usb6-port1: attempt power cycle [ 259.516974][ T7536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.455'. [ 259.517001][ T7536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.455'. [ 259.597730][ T5743] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 259.620083][ T5743] usb 6-1: Invalid ep0 maxpacket: 32 [ 259.748943][ T5743] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 259.769365][ T5743] usb 6-1: Invalid ep0 maxpacket: 32 [ 259.770204][ T5743] usb usb6-port1: unable to enumerate USB device [ 260.599465][ T5743] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 260.626641][ T7543] Invalid ELF header len 2 [ 260.756040][ T5743] usb 4-1: Using ep0 maxpacket: 16 [ 260.767928][ T5743] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 260.767961][ T5743] usb 4-1: config 0 has no interface number 0 [ 260.784485][ T5743] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 260.784519][ T5743] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.784542][ T5743] usb 4-1: Product: syz [ 260.784556][ T5743] usb 4-1: Manufacturer: syz [ 260.784571][ T5743] usb 4-1: SerialNumber: syz [ 260.801878][ T5743] usb 4-1: config 0 descriptor?? [ 260.844505][ T5743] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 260.897772][ T5326] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 261.048304][ T5326] usb 2-1: Using ep0 maxpacket: 32 [ 261.050677][ T5326] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 261.050698][ T5326] usb 2-1: config 0 has no interface number 0 [ 261.053292][ T5326] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 261.053315][ T5326] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.053330][ T5326] usb 2-1: Product: syz [ 261.053384][ T5326] usb 2-1: Manufacturer: syz [ 261.053396][ T5326] usb 2-1: SerialNumber: syz [ 261.148752][ T5326] usb 2-1: config 0 descriptor?? [ 261.167361][ T5326] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 261.167397][ T5326] usb 2-1: selecting invalid altsetting 1 [ 261.167409][ T5326] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 261.208383][ T5326] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 261.208753][ T5326] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 261.208889][ T5326] usb 2-1: media controller created [ 261.289710][ T5701] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 261.302296][ T5326] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 261.330690][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.330794][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.449113][ T5701] usb 5-1: Using ep0 maxpacket: 8 [ 261.455511][ T5701] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 261.455764][ T5701] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 261.455784][ T5701] usb 5-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 261.455803][ T5701] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 261.455824][ T5701] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 261.455845][ T5701] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 261.456082][ T5701] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 261.456102][ T5701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.632422][ T5326] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 261.801131][ T5701] usb 5-1: GET_CAPABILITIES returned 0 [ 261.801185][ T5701] usbtmc 5-1:16.0: can't read capabilities [ 261.863108][ T7547] FAULT_INJECTION: forcing a failure. [ 261.863108][ T7547] name failslab, interval 1, probability 0, space 0, times 0 [ 261.863149][ T7547] CPU: 1 UID: 0 PID: 7547 Comm: syz.5.460 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 261.863177][ T7547] Tainted: [L]=SOFTLOCKUP [ 261.863184][ T7547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 261.863197][ T7547] Call Trace: [ 261.863206][ T7547] [ 261.863215][ T7547] dump_stack_lvl+0xe8/0x150 [ 261.863247][ T7547] should_fail_ex+0x467/0x600 [ 261.863281][ T7547] should_failslab+0xa8/0x100 [ 261.863314][ T7547] __kmalloc_noprof+0xfb/0x790 [ 261.863344][ T7547] ? nsim_set_coalesce+0x29/0x40 [ 261.863376][ T7547] ? ethnl_default_notify+0x1f8/0xb00 [ 261.863396][ T7547] ? ethnl_default_notify+0x1f8/0xb00 [ 261.863426][ T7547] ethnl_default_notify+0x1f8/0xb00 [ 261.863451][ T7547] ? rt_spin_lock+0x1e0/0x400 [ 261.863486][ T7547] ? __pfx_ethnl_default_notify+0x10/0x10 [ 261.863526][ T7547] ? ethnl_notify+0x1a3/0x300 [ 261.863551][ T7547] ethnl_default_set_doit+0xaea/0x1090 [ 261.863587][ T7547] genl_family_rcv_msg_doit+0x233/0x340 [ 261.863621][ T7547] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 261.863663][ T7547] ? bpf_lsm_capable+0x9/0x20 [ 261.863685][ T7547] ? security_capable+0x74/0x280 [ 261.863720][ T7547] genl_rcv_msg+0x614/0x7a0 [ 261.863752][ T7547] ? __pfx_genl_rcv_msg+0x10/0x10 [ 261.863774][ T7547] ? ref_tracker_free+0x668/0x820 [ 261.863804][ T7547] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 261.863830][ T7547] ? ____sys_sendmsg+0x565/0x870 [ 261.863862][ T7547] ? ___sys_sendmsg+0x2a5/0x360 [ 261.863892][ T7547] ? __x64_sys_sendmsg+0x1b7/0x290 [ 261.863923][ T7547] ? do_syscall_64+0x17b/0x530 [ 261.863944][ T7547] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.863978][ T7547] netlink_rcv_skb+0x226/0x4a0 [ 261.864014][ T7547] ? __pfx_genl_rcv_msg+0x10/0x10 [ 261.864041][ T7547] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 261.864087][ T7547] ? netlink_deliver_tap+0x2e/0x1b0 [ 261.864122][ T7547] ? netlink_deliver_tap+0x2e/0x1b0 [ 261.864160][ T7547] genl_rcv+0x28/0x40 [ 261.864184][ T7547] netlink_unicast+0x7f5/0x990 [ 261.864224][ T7547] netlink_sendmsg+0x813/0xb40 [ 261.864268][ T7547] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.864314][ T7547] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 261.864351][ T7547] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 261.864383][ T7547] ? arch_stack_walk+0xfb/0x150 [ 261.864420][ T7547] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.864453][ T7547] sock_sendmsg_nosec+0x13a/0x180 [ 261.864481][ T7547] ____sys_sendmsg+0x565/0x870 [ 261.864523][ T7547] ? __pfx_____sys_sendmsg+0x10/0x10 [ 261.864565][ T7547] ? import_iovec+0x73/0xa0 [ 261.864604][ T7547] ___sys_sendmsg+0x2a5/0x360 [ 261.864636][ T7547] ? __lock_acquire+0x6df/0x2e40 [ 261.864662][ T7547] ? __pfx____sys_sendmsg+0x10/0x10 [ 261.864731][ T7547] ? __fget_files+0x2a/0x420 [ 261.864755][ T7547] ? __fget_files+0x3a8/0x420 [ 261.864807][ T7547] __x64_sys_sendmsg+0x1b7/0x290 [ 261.864844][ T7547] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 261.864898][ T7547] do_syscall_64+0x17b/0x530 [ 261.864921][ T7547] ? irqentry_exit+0x10f/0x8f0 [ 261.864944][ T7547] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.864966][ T7547] ? clear_bhb_loop+0x40/0x90 [ 261.864992][ T7547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.865013][ T7547] RIP: 0033:0x7efe399ce0d9 [ 261.865034][ T7547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.865052][ T7547] RSP: 002b:00007efe37c26028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 261.865078][ T7547] RAX: ffffffffffffffda RBX: 00007efe39c55fa0 RCX: 00007efe399ce0d9 [ 261.865096][ T7547] RDX: 0000000000040090 RSI: 0000200000000540 RDI: 000000000000001b [ 261.865110][ T7547] RBP: 00007efe37c26090 R08: 0000000000000000 R09: 0000000000000000 [ 261.865124][ T7547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 261.865136][ T7547] R13: 00007efe39c56038 R14: 00007efe39c55fa0 R15: 00007ffee9fb01e8 [ 261.865171][ T7547] [ 262.559948][ T5743] gspca_spca1528: reg_w err -71 [ 262.560033][ T5743] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 262.585202][ T1011] usb 5-1: USB disconnect, device number 28 [ 262.710661][ T5743] usb 4-1: USB disconnect, device number 35 [ 262.745820][ T5326] usb 2-1: USB disconnect, device number 41 [ 263.199745][ T5326] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 263.350321][ T5326] usb 2-1: Using ep0 maxpacket: 8 [ 263.375006][ T5326] usb 2-1: config 162 has an invalid interface number: 84 but max is 2 [ 263.375038][ T5326] usb 2-1: config 162 has an invalid interface number: 3 but max is 2 [ 263.375059][ T5326] usb 2-1: config 162 has no interface number 0 [ 263.375084][ T5326] usb 2-1: config 162 has no interface number 1 [ 263.375160][ T5326] usb 2-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 263.375215][ T5326] usb 2-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 263.375310][ T5326] usb 2-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 263.375339][ T5326] usb 2-1: config 162 interface 2 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 263.375367][ T5326] usb 2-1: config 162 interface 2 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 263.375394][ T5326] usb 2-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 263.375425][ T5326] usb 2-1: config 162 interface 84 has no altsetting 0 [ 263.375445][ T5326] usb 2-1: config 162 interface 2 has no altsetting 0 [ 263.380856][ T5326] usb 2-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23 [ 263.380952][ T5326] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.381033][ T5326] usb 2-1: Product: syz [ 263.381098][ T5326] usb 2-1: Manufacturer: syz [ 263.381149][ T5326] usb 2-1: SerialNumber: syz [ 264.063986][ T7573] netlink: 60 bytes leftover after parsing attributes in process `syz.5.468'. [ 264.079785][ T7573] netlink: 60 bytes leftover after parsing attributes in process `syz.5.468'. [ 264.229369][ T5603] Bluetooth: hci3: Opcode 0x0c03 failed: -71 [ 264.265719][ T5326] usb 2-1: USB disconnect, device number 42 [ 264.678365][ T5681] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 264.835638][ T5681] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 264.835674][ T5681] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.835698][ T5681] usb 5-1: Product: syz [ 264.835714][ T5681] usb 5-1: Manufacturer: syz [ 264.835729][ T5681] usb 5-1: SerialNumber: syz [ 264.975814][ T5681] usb 5-1: config 0 descriptor?? [ 265.012406][ T5681] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 265.067970][ T5326] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 265.238388][ T5326] usb 2-1: device descriptor read/64, error -71 [ 265.427870][ T5702] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 265.507786][ T5326] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 265.577690][ T5702] usb 4-1: Using ep0 maxpacket: 8 [ 265.580312][ T5702] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 265.580345][ T5702] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 265.580371][ T5702] usb 4-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 265.580396][ T5702] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 265.580463][ T5702] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 265.580489][ T5702] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 265.580533][ T5702] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 265.580558][ T5702] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.639304][ T5326] usb 2-1: device descriptor read/64, error -71 [ 265.734048][ T5681] gspca_stk1135: reg_w 0x3 err -71 [ 265.735127][ T5681] gspca_stk1135: serial bus timeout: status=0x00 [ 265.735142][ T5681] gspca_stk1135: Sensor write failed [ 265.735187][ T5681] gspca_stk1135: serial bus timeout: status=0x00 [ 265.735199][ T5681] gspca_stk1135: Sensor write failed [ 265.735234][ T5681] gspca_stk1135: serial bus timeout: status=0x00 [ 265.735246][ T5681] gspca_stk1135: Sensor read failed [ 265.735282][ T5681] gspca_stk1135: serial bus timeout: status=0x00 [ 265.735292][ T5681] gspca_stk1135: Sensor read failed [ 265.735300][ T5681] gspca_stk1135: Detected sensor type unknown (0x0) [ 265.735340][ T5681] gspca_stk1135: serial bus timeout: status=0x00 [ 265.735351][ T5681] gspca_stk1135: Sensor read failed [ 265.735387][ T5681] gspca_stk1135: serial bus timeout: status=0x00 [ 265.735397][ T5681] gspca_stk1135: Sensor read failed [ 265.735527][ T5681] gspca_stk1135: serial bus timeout: status=0x00 [ 265.735540][ T5681] gspca_stk1135: Sensor write failed [ 265.735578][ T5681] gspca_stk1135: serial bus timeout: status=0x00 [ 265.735588][ T5681] gspca_stk1135: Sensor write failed [ 265.735685][ T5681] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 265.772311][ T5681] usb 5-1: USB disconnect, device number 29 [ 265.898190][ T5702] usb 4-1: GET_CAPABILITIES returned 0 [ 265.898244][ T5702] usbtmc 4-1:16.0: can't read capabilities [ 265.905425][ T5326] usb usb2-port1: attempt power cycle [ 266.102008][ T5702] usb 4-1: USB disconnect, device number 36 [ 266.287925][ T5326] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 266.288135][ T5701] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 266.318784][ T5326] usb 2-1: device descriptor read/8, error -71 [ 266.437843][ T5701] usb 6-1: Using ep0 maxpacket: 16 [ 266.441373][ T5701] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 266.441403][ T5701] usb 6-1: config 0 has no interface number 0 [ 266.443876][ T5701] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 266.443916][ T5701] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.443932][ T5701] usb 6-1: Product: syz [ 266.443943][ T5701] usb 6-1: Manufacturer: syz [ 266.443953][ T5701] usb 6-1: SerialNumber: syz [ 266.466605][ T5701] usb 6-1: config 0 descriptor?? [ 266.540487][ T5701] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 266.567834][ T5326] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 266.588688][ T5326] usb 2-1: device descriptor read/8, error -71 [ 266.698295][ T5326] usb usb2-port1: unable to enumerate USB device [ 266.914741][ T7601] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.12800.0), cmd(4) [ 267.277854][ T5702] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 267.417774][ T5702] usb 4-1: device descriptor read/64, error -71 [ 267.658063][ T5702] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 267.803777][ T5702] usb 4-1: device descriptor read/64, error -71 [ 267.843656][ T7609] netlink: 60 bytes leftover after parsing attributes in process `syz.1.481'. [ 267.918342][ T5702] usb usb4-port1: attempt power cycle [ 267.922984][ T7610] netlink: 60 bytes leftover after parsing attributes in process `syz.1.481'. [ 267.970122][ T5701] gspca_spca1528: reg_w err -71 [ 267.970239][ T5701] spca1528 6-1:0.1: probe with driver spca1528 failed with error -71 [ 268.008102][ T5701] usb 6-1: USB disconnect, device number 11 [ 268.207755][ T1011] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 268.297774][ T5702] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 268.318798][ T5702] usb 4-1: device descriptor read/8, error -71 [ 268.363430][ T1011] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 268.363460][ T1011] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 268.364772][ T1011] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 268.364813][ T1011] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 268.364836][ T1011] usb 2-1: SerialNumber: syz [ 268.598074][ T5702] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 268.619674][ T5702] usb 4-1: device descriptor read/8, error -71 [ 268.688542][ T1011] usb 2-1: 0:2 : does not exist [ 268.688613][ T1011] usb 2-1: unit 113 not found! [ 268.730871][ T5702] usb usb4-port1: unable to enumerate USB device [ 268.872225][ T1011] usb 2-1: USB disconnect, device number 47 [ 268.922421][ T5864] udevd[5864]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 268.998470][ T5702] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 269.157772][ T5702] usb 6-1: Using ep0 maxpacket: 16 [ 269.174945][ T5702] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 269.174979][ T5702] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 269.203999][ T5702] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 269.204037][ T5702] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.204059][ T5702] usb 6-1: Product: syz [ 269.204075][ T5702] usb 6-1: Manufacturer: syz [ 269.204092][ T5702] usb 6-1: SerialNumber: syz [ 269.500060][ T5702] usb 6-1: 0:2 : does not exist [ 269.636959][ T7619] netlink: 'syz.4.484': attribute type 12 has an invalid length. [ 269.748945][ T5702] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 269.940405][ T5702] usb 6-1: USB disconnect, device number 12 [ 270.137904][ T1011] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 270.299087][ T1011] usb 2-1: Using ep0 maxpacket: 8 [ 270.305964][ T1011] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 270.305995][ T1011] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 270.306018][ T1011] usb 2-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 270.306060][ T1011] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 270.306084][ T1011] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 270.306105][ T1011] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 270.306143][ T1011] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 270.306164][ T1011] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.694989][ T5864] udevd[5864]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 270.776183][ T1011] usb 2-1: GET_CAPABILITIES returned 0 [ 270.776234][ T1011] usbtmc 2-1:16.0: can't read capabilities [ 270.995968][ T5326] usb 2-1: USB disconnect, device number 48 [ 271.004469][ T5701] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 271.181627][ T5701] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 194, changing to 11 [ 271.181668][ T5701] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 41479, setting to 1024 [ 271.186477][ T5701] usb 4-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 271.186511][ T5701] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.186532][ T5701] usb 4-1: Product: syz [ 271.186548][ T5701] usb 4-1: Manufacturer: syz [ 271.186563][ T5701] usb 4-1: SerialNumber: syz [ 271.272981][ T5701] symbolserial 4-1:1.0: symbol converter detected [ 271.289330][ T5701] usb 4-1: symbol converter now attached to ttyUSB0 [ 271.537711][ T1011] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 271.688156][ T1011] usb 5-1: Using ep0 maxpacket: 16 [ 271.694936][ T1011] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 271.694963][ T1011] usb 5-1: config 0 has no interface number 0 [ 271.733095][ T1011] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 271.733145][ T1011] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.733167][ T1011] usb 5-1: Product: syz [ 271.733183][ T1011] usb 5-1: Manufacturer: syz [ 271.733198][ T1011] usb 5-1: SerialNumber: syz [ 271.800542][ T1011] usb 5-1: config 0 descriptor?? [ 271.834536][ T1011] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 272.358848][ T5701] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 272.517681][ T5701] usb 6-1: Using ep0 maxpacket: 8 [ 272.528904][ T5701] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 272.529029][ T5701] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 272.529058][ T5701] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 272.577909][ T5701] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice= 0.40 [ 272.577943][ T5701] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.577964][ T5701] usb 6-1: Product: syz [ 272.578378][ T5701] usb 6-1: Manufacturer: syz [ 272.578396][ T5701] usb 6-1: SerialNumber: syz [ 272.907016][ T7638] overlayfs: failed to resolve './file0': -2 [ 273.321038][ T1011] gspca_spca1528: reg_w err -71 [ 273.321148][ T1011] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 273.334186][ T1011] usb 5-1: USB disconnect, device number 30 [ 273.524917][ T5701] usb 6-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 273.858872][ T5701] usb 6-1: USB disconnect, device number 13 [ 274.031750][ T5326] usb 4-1: USB disconnect, device number 41 [ 274.267339][ T5326] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 274.380263][ T7644] syzkaller1: entered promiscuous mode [ 274.380295][ T7644] syzkaller1: entered allmulticast mode [ 274.385253][ T5326] symbolserial 4-1:1.0: device disconnected [ 274.577015][ T7253] udevd[7253]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 274.757987][ T1011] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 274.910641][ T1011] usb 5-1: unable to get BOS descriptor or descriptor too short [ 274.912258][ T1011] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 274.935311][ T1011] usb 5-1: New USB device found, idVendor=0944, idProduct=0204, bcdDevice= 0.40 [ 274.935346][ T1011] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.935367][ T1011] usb 5-1: Product: syz [ 274.935382][ T1011] usb 5-1: Manufacturer: ᓲ嵨ᰙ倠맥憂なⱲ洿夅쾒『썚ꍸ秛ꙁѮ㦠㑃鼆࿐꽚드ି폓⵻੓姭鎅Ⓨ郭峱裯祃吃↤쑸፣Ԧ蟴᷉켪鳹게 [ 274.935407][ T1011] usb 5-1: SerialNumber: syz [ 275.312087][ T7659] overlayfs: failed to resolve './file1': -2 [ 275.415666][ T7661] netlink: 20 bytes leftover after parsing attributes in process `syz.1.498'. [ 275.469984][ T1011] usb 5-1: unit 4 not found! [ 275.514394][ T7661] netlink: 40 bytes leftover after parsing attributes in process `syz.1.498'. [ 275.520072][ T7653] veth1_macvtap: left promiscuous mode [ 275.982039][ T1011] usb 5-1: USB disconnect, device number 31 [ 276.428215][ T5326] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 276.577722][ T5326] usb 2-1: Using ep0 maxpacket: 8 [ 276.581033][ T5326] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 276.581085][ T5326] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 276.581111][ T5326] usb 2-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 276.581138][ T5326] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 276.581166][ T5326] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 276.581191][ T5326] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 276.581236][ T5326] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 276.581262][ T5326] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.973977][ T5326] usb 2-1: GET_CAPABILITIES returned 0 [ 276.974029][ T5326] usbtmc 2-1:16.0: can't read capabilities [ 277.176496][ T5326] usb 2-1: USB disconnect, device number 49 [ 278.037940][ T37] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 278.249379][ T37] usb 5-1: Using ep0 maxpacket: 16 [ 278.256178][ T37] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 278.256206][ T37] usb 5-1: config 0 has no interface number 0 [ 278.300219][ T37] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 278.300251][ T37] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.300273][ T37] usb 5-1: Product: syz [ 278.300298][ T37] usb 5-1: Manufacturer: syz [ 278.300314][ T37] usb 5-1: SerialNumber: syz [ 278.433497][ T37] usb 5-1: config 0 descriptor?? [ 278.459924][ T37] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 278.750953][ T5743] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 278.925566][ T5743] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 278.925604][ T5743] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 278.953542][ T5743] usb 2-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 278.953579][ T5743] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.953603][ T5743] usb 2-1: Product: syz [ 278.953619][ T5743] usb 2-1: Manufacturer: syz [ 278.953636][ T5743] usb 2-1: SerialNumber: syz [ 279.018816][ T7704] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 279.026105][ T7704] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 279.091542][ T5743] mos7840 2-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 280.041662][ T37] gspca_spca1528: reg_w err -71 [ 280.041766][ T37] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 280.073248][ T37] usb 5-1: USB disconnect, device number 32 [ 280.327153][ T5743] mos7840 2-1:1.0: probe with driver mos7840 failed with error -71 [ 280.365819][ T5743] usb 2-1: USB disconnect, device number 50 [ 280.471107][ T5874] udevd[5874]: setting owner of /dev/bus/usb/002/050 to uid=0, gid=0 failed: No such file or directory [ 281.030218][ T7698] syz.1.506 (7698) used greatest stack depth: 16576 bytes left [ 281.680103][ T37] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 281.855052][ T37] usb 5-1: Using ep0 maxpacket: 8 [ 281.865416][ T37] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 281.865451][ T37] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 281.865573][ T37] usb 5-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 281.865605][ T37] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 281.865635][ T37] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 281.865663][ T37] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 281.865712][ T37] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 281.865738][ T37] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.213117][ T37] usb 5-1: GET_CAPABILITIES returned 0 [ 282.213158][ T37] usbtmc 5-1:16.0: can't read capabilities [ 282.291915][ T5743] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 282.435067][ T37] usb 5-1: USB disconnect, device number 33 [ 282.483411][ T5743] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 282.483446][ T5743] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.483468][ T5743] usb 4-1: Product: syz [ 282.483483][ T5743] usb 4-1: Manufacturer: syz [ 282.483499][ T5743] usb 4-1: SerialNumber: syz [ 282.788171][ T5743] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 282.788225][ T5743] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 282.788246][ T5743] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 282.902772][ T5743] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 282.938766][ T5743] usb 4-1: USB disconnect, device number 42 [ 283.505672][ T37] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 283.667689][ T37] usb 5-1: Using ep0 maxpacket: 16 [ 283.670471][ T37] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.670512][ T37] usb 5-1: config 0 interface 0 has no altsetting 0 [ 283.670550][ T37] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 283.670576][ T37] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.728868][ T37] usb 5-1: config 0 descriptor?? [ 284.313104][ T37] nzxt-smart2 0003:1E71:2009.0005: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 284.850121][ T5326] usb 5-1: USB disconnect, device number 34 [ 285.131916][ T5681] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 285.288093][ T5681] usb 6-1: Using ep0 maxpacket: 8 [ 285.316466][ T5681] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 285.316505][ T5681] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 285.316533][ T5681] usb 6-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 285.316564][ T5681] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 285.316594][ T5681] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 285.316620][ T5681] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 285.316668][ T5681] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 285.316694][ T5681] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.744101][ T5681] usb 6-1: usb_control_msg returned -71 [ 285.744153][ T5681] usbtmc 6-1:16.0: can't read capabilities [ 285.841208][ T5681] usb 6-1: USB disconnect, device number 14 [ 286.153002][ T5326] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 286.300845][ T5326] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.345968][ T5326] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 286.346005][ T5326] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.346028][ T5326] usb 5-1: Product: syz [ 286.346045][ T5326] usb 5-1: Manufacturer: syz [ 286.346061][ T5326] usb 5-1: SerialNumber: syz [ 286.413613][ T5326] usb 5-1: config 0 descriptor?? [ 286.462980][ T5326] ims_pcu 5-1:0.0: Missing CDC union descriptor [ 286.463053][ T5326] ims_pcu 5-1:0.0: probe with driver ims_pcu failed with error -22 [ 286.714936][ T7818] FAULT_INJECTION: forcing a failure. [ 286.714936][ T7818] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.714980][ T7818] CPU: 0 UID: 0 PID: 7818 Comm: syz.3.532 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 286.715010][ T7818] Tainted: [L]=SOFTLOCKUP [ 286.715018][ T7818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 286.715032][ T7818] Call Trace: [ 286.715042][ T7818] [ 286.715051][ T7818] dump_stack_lvl+0xe8/0x150 [ 286.715088][ T7818] should_fail_ex+0x467/0x600 [ 286.715123][ T7818] _copy_from_user+0x2d/0xb0 [ 286.715145][ T7818] __se_sys_io_uring_setup+0x1b4/0x2c0 [ 286.715182][ T7818] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 286.715215][ T7818] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 286.715267][ T7818] ? __pfx_ksys_write+0x10/0x10 [ 286.715306][ T7818] do_syscall_64+0x17b/0x530 [ 286.715329][ T7818] ? irqentry_exit+0x10f/0x8f0 [ 286.715350][ T7818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.715373][ T7818] ? clear_bhb_loop+0x40/0x90 [ 286.715400][ T7818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.715426][ T7818] RIP: 0033:0x7f0f789be0d9 [ 286.715445][ T7818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.715464][ T7818] RSP: 002b:00007f0f76c15ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 286.715487][ T7818] RAX: ffffffffffffffda RBX: 0000200000000808 RCX: 00007f0f789be0d9 [ 286.715501][ T7818] RDX: 0000200000000888 RSI: 0000200000000808 RDI: 000000000000062c [ 286.715515][ T7818] RBP: 0000200000000800 R08: 0000000000000000 R09: 0000000000000000 [ 286.715528][ T7818] R10: 0000200000000890 R11: 0000000000000206 R12: 0000200000000888 [ 286.715541][ T7818] R13: 0000200000000890 R14: 00007f0f76c15fd8 R15: 0000000000000000 [ 286.715571][ T7818] [ 287.020766][ T5681] usb 5-1: USB disconnect, device number 35 [ 288.190138][ T5701] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 288.353386][ T5701] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 288.353417][ T5701] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.353435][ T5701] usb 5-1: Product: syz [ 288.353447][ T5701] usb 5-1: Manufacturer: syz [ 288.353459][ T5701] usb 5-1: SerialNumber: syz [ 288.449519][ T5701] usb 5-1: config 0 descriptor?? [ 288.517744][ T37] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 288.587704][ T6625] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 288.669935][ T5326] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 288.677756][ T37] usb 6-1: Using ep0 maxpacket: 8 [ 288.708902][ T37] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 288.708938][ T37] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 288.708964][ T37] usb 6-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 288.708991][ T37] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 288.709020][ T37] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 288.709048][ T37] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 288.709097][ T37] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 288.709121][ T37] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.737773][ T6625] usb 2-1: Using ep0 maxpacket: 16 [ 288.767407][ T6625] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 288.767503][ T6625] usb 2-1: config 0 has no interface number 0 [ 288.767764][ T6625] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 288.767942][ T6625] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 288.877370][ T5701] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 288.939736][ T6625] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 288.940379][ T6625] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.940406][ T6625] usb 2-1: Product: syz [ 288.940422][ T6625] usb 2-1: Manufacturer: syz [ 288.940437][ T6625] usb 2-1: SerialNumber: syz [ 288.986026][ T5326] usb 4-1: not running at top speed; connect to a high speed hub [ 289.010294][ T5326] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x81 has invalid maxpacket 1024, setting to 1023 [ 289.010412][ T5326] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 289.010440][ T5326] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.067943][ T37] usb 6-1: usb_control_msg returned -71 [ 289.067997][ T37] usbtmc 6-1:16.0: can't read capabilities [ 289.073531][ T6625] usb 2-1: config 0 descriptor?? [ 289.097724][ T7845] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 289.097968][ T7845] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 289.222188][ T5326] uvcvideo 4-1:1.0: Found UVC 1.00 device (046d:0825) [ 289.269259][ T37] usb 6-1: USB disconnect, device number 15 [ 289.358559][ T7845] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 289.358882][ T7845] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 289.585387][ T6625] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 289.990805][ T6625] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 290.009301][ T6625] asix 2-1:0.34: probe with driver asix failed with error -61 [ 290.187355][ T5701] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 290.212760][ T5701] usb 5-1: USB disconnect, device number 36 [ 290.376491][ T5326] videodev: could not get a free minor [ 290.376513][ T5326] uvcvideo 4-1:1.1: Failed to register meta-cap device (-23). [ 291.267813][ T5702] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 291.419168][ T5702] usb 5-1: Using ep0 maxpacket: 32 [ 291.426051][ T5702] usb 5-1: unable to get BOS descriptor or descriptor too short [ 291.458999][ T5702] usb 5-1: config 14 has an invalid interface number: 8 but max is 1 [ 291.459032][ T5702] usb 5-1: config 14 has an invalid interface number: 56 but max is 1 [ 291.459051][ T5702] usb 5-1: config 14 has no interface number 0 [ 291.459159][ T5702] usb 5-1: config 14 has no interface number 1 [ 291.459206][ T5702] usb 5-1: config 14 interface 8 has no altsetting 0 [ 291.459225][ T5702] usb 5-1: config 14 interface 56 has no altsetting 0 [ 291.461772][ T5702] usb 5-1: New USB device found, idVendor=413c, idProduct=81c2, bcdDevice=c9.cb [ 291.461805][ T5702] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.461834][ T5702] usb 5-1: Product: syz [ 291.461850][ T5702] usb 5-1: Manufacturer: syz [ 291.461865][ T5702] usb 5-1: SerialNumber: syz [ 292.582365][ T6625] usb 4-1: USB disconnect, device number 43 [ 293.583618][ T5701] usb 2-1: USB disconnect, device number 51 [ 294.457736][ T5701] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 294.544839][ T200] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 294.662861][ T5701] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 294.662894][ T5701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.662916][ T5701] usb 2-1: Product: syz [ 294.662932][ T5701] usb 2-1: Manufacturer: syz [ 294.662948][ T5701] usb 2-1: SerialNumber: syz [ 294.722144][ T200] usb 4-1: Using ep0 maxpacket: 8 [ 294.726539][ T200] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.726578][ T200] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 294.726626][ T200] usb 4-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00 [ 294.726652][ T200] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.787995][ T6625] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 294.845473][ T200] usb 4-1: config 0 descriptor?? [ 295.031607][ T6625] usb 6-1: Using ep0 maxpacket: 8 [ 295.036047][ T6625] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 295.036155][ T6625] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 295.036181][ T6625] usb 6-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 295.036212][ T6625] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 295.036232][ T6625] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 295.036333][ T6625] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 295.036383][ T6625] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 295.036401][ T6625] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.153915][ T5701] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 295.153984][ T5701] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 295.179092][ T200] usbhid 4-1:0.0: can't add hid device: -71 [ 295.186102][ T200] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 295.272068][ T200] usb 4-1: USB disconnect, device number 44 [ 295.575581][ T6625] usb 6-1: usb_control_msg returned -71 [ 295.575828][ T6625] usbtmc 6-1:16.0: can't read capabilities [ 295.944259][ T6625] usb 6-1: USB disconnect, device number 16 [ 296.695163][ T5702] usb 5-1: USB disconnect, device number 37 [ 296.718963][ T5701] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPIPE [ 297.038706][ T7896] comedi: valid board names for 8255 driver are: [ 297.038724][ T7896] 8255 [ 297.038732][ T7896] comedi: valid board names for vmk80xx driver are: [ 297.038740][ T7896] vmk80xx [ 297.038746][ T7896] comedi: valid board names for usbduxsigma driver are: [ 297.038755][ T7896] usbduxsigma [ 297.038761][ T7896] comedi: valid board names for usbduxfast driver are: [ 297.038770][ T7896] usbduxfast [ 297.038777][ T7896] comedi: valid board names for usbdux driver are: [ 297.038785][ T7896] usbdux [ 297.038791][ T7896] comedi: valid board names for ni6501 driver are: [ 297.038799][ T7896] ni6501 [ 297.038805][ T7896] comedi: valid board names for dt9812 driver are: [ 297.038813][ T7896] dt9812 [ 297.038820][ T7896] comedi: valid board names for ni_labpc_cs driver are: [ 297.038830][ T7896] ni_labpc_cs [ 297.038836][ T7896] comedi: valid board names for ni_daq_700 driver are: [ 297.038845][ T7896] ni_daq_700 [ 297.038852][ T7896] comedi: valid board names for labpc_pci driver are: [ 297.038861][ T7896] labpc_pci [ 297.038867][ T7896] comedi: valid board names for adl_pci9118 driver are: [ 297.038876][ T7896] pci9118dg [ 297.038882][ T7896] pci9118hg [ 297.038888][ T7896] pci9118hr [ 297.038895][ T7896] comedi: valid board names for 8255_pci driver are: [ 297.038905][ T7896] 8255_pci [ 297.038911][ T7896] comedi: valid board names for s526 driver are: [ 297.038918][ T7896] s526 [ 297.038924][ T7896] comedi: valid board names for multiq3 driver are: [ 297.038932][ T7896] multiq3 [ 297.038938][ T7896] comedi: valid board names for pcmuio driver are: [ 297.038951][ T7896] pcmuio48 [ 297.038957][ T7896] pcmuio96 [ 297.038964][ T7896] comedi: valid board names for pcmmio driver are: [ 297.038971][ T7896] pcmmio [ 297.038977][ T7896] comedi: valid board names for pcmda12 driver are: [ 297.038988][ T7896] pcmda12 [ 297.038994][ T7896] comedi: valid board names for pcmad driver are: [ 297.039003][ T7896] pcmad12 [ 297.039009][ T7896] pcmad16 [ 297.039016][ T7896] comedi: valid board names for ni_labpc driver are: [ 297.039024][ T7896] lab-pc-1200 [ 297.039031][ T7896] lab-pc-1200ai [ 297.039036][ T7896] lab-pc+ [ 297.039043][ T7896] comedi: valid board names for atmio16 driver are: [ 297.039051][ T7896] atmio16 [ 297.039057][ T7896] atmio16d [ 297.039064][ T7896] comedi: valid board names for ni_at_ao driver are: [ 297.039073][ T7896] at-ao-6 [ 297.039079][ T7896] at-ao-10 [ 297.039086][ T7896] comedi: valid board names for ni_at_a2150 driver are: [ 297.039095][ T7896] ni_at_a2150 [ 297.039101][ T7896] comedi: valid board names for adq12b driver are: [ 297.039109][ T7896] adq12b [ 297.039115][ T7896] comedi: valid board names for mpc624 driver are: [ 297.039124][ T7896] mpc624 [ 297.039130][ T7896] comedi: valid board names for c6xdigio driver are: [ 297.039140][ T7896] c6xdigio [ 297.039146][ T7896] comedi: valid board names for aio_iiro_16 driver are: [ 297.039156][ T7896] aio_iiro_16 [ 297.039162][ T7896] comedi: valid board names for aio_aio12_8 driver are: [ 297.039171][ T7896] aio_aio12_8 [ 297.039177][ T7896] aio_ai12_8 [ 297.039183][ T7896] aio_ao12_4 [ 297.039190][ T7896] comedi: valid board names for fl512 driver are: [ 297.039199][ T7896] fl512 [ 297.039205][ T7896] comedi: valid board names for dmm32at driver are: [ 297.039214][ T7896] dmm32at [ 297.039220][ T7896] comedi: valid board names for dt282x driver are: [ 297.039229][ T7896] dt2821 [ 297.039236][ T7896] dt2821-f [ 297.039241][ T7896] dt2821-g [ 297.039248][ T7896] dt2823 [ 297.039255][ T7896] dt2824-pgh [ 297.039262][ T7896] dt2824-pgl [ 297.039268][ T7896] dt2825 [ 297.039275][ T7896] dt2827 [ 297.039281][ T7896] dt2828 [ 297.039287][ T7896] dt2829 [ 297.039294][ T7896] dt21-ez [ 297.039300][ T7896] dt23-ez [ 297.039307][ T7896] dt24-ez [ 297.039313][ T7896] dt24-ez-pgl [ 297.039320][ T7896] comedi: valid board names for dt2817 driver are: [ 297.039329][ T7896] dt2817 [ 297.039335][ T7896] comedi: valid board names for dt2815 driver are: [ 297.039345][ T7896] dt2815 [ 297.039351][ T7896] comedi: valid board names for dt2814 driver are: [ 297.039360][ T7896] dt2814 [ 297.039365][ T7896] comedi: valid board names for dt2811 driver are: [ 297.039375][ T7896] dt2811-pgh [ 297.039383][ T7896] dt2811-pgl [ 297.039389][ T7896] comedi: valid board names for dt2801 driver are: [ 297.039398][ T7896] dt2801 [ 297.039404][ T7896] comedi: valid board names for das6402 driver are: [ 297.039412][ T7896] das6402-12 [ 297.039418][ T7896] das6402-16 [ 297.039424][ T7896] comedi: valid board names for das1800 driver are: [ 297.039431][ T7896] das-1701st [ 297.039436][ T7896] das-1701st-da [ 297.039443][ T7896] das-1702st [ 297.039448][ T7896] das-1702st-da [ 297.039455][ T7896] das-1702hr [ 297.039460][ T7896] das-1702hr-da [ 297.039466][ T7896] das-1701ao [ 297.039472][ T7896] das-1702ao [ 297.039492][ T7896] das-1801st [ 297.039498][ T7896] das-1801st-da [ 297.039504][ T7896] das-1802st [ 297.039510][ T7896] das-1802st-da [ 297.039516][ T7896] das-1802hr [ 297.039523][ T7896] das-1802hr-da [ 297.039529][ T7896] das-1801hc [ 297.039534][ T7896] das-1802hc [ 297.039541][ T7896] das-1801ao [ 297.039547][ T7896] das-1802ao [ 297.039553][ T7896] comedi: valid board names for das800 driver are: [ 297.039561][ T7896] das-800 [ 297.039568][ T7896] cio-das800 [ 297.039575][ T7896] das-801 [ 297.039581][ T7896] cio-das801 [ 297.039587][ T7896] das-802 [ 297.039594][ T7896] cio-das802 [ 297.039599][ T7896] cio-das802/16 [ 297.039607][ T7896] comedi: valid board names for isa-das08 driver are: [ 297.039617][ T7896] isa-das08 [ 297.039623][ T7896] das08-pgm [ 297.039630][ T7896] das08-pgh [ 297.039636][ T7896] das08-pgl [ 297.039643][ T7896] das08-aoh [ 297.039650][ T7896] das08-aol [ 297.039656][ T7896] das08-aom [ 297.039666][ T7896] das08/jr-ao [ 297.039673][ T7896] das08jr-16-ao [ 297.039680][ T7896] pc104-das08 [ 297.039687][ T7896] das08jr/16 [ 297.039693][ T7896] comedi: valid board names for das16m1 driver are: [ 297.039702][ T7896] das16m1 [ 297.039708][ T7896] comedi: valid board names for dac02 driver are: [ 297.039716][ T7896] dac02 [ 297.039723][ T7896] comedi: valid board names for rti802 driver are: [ 297.039733][ T7896] rti802 [ 297.039741][ T7896] comedi: valid board names for rti800 driver are: [ 297.039749][ T7896] rti800 [ 297.039756][ T7896] rti815 [ 297.039763][ T7896] comedi: valid board names for pcm3724 driver are: [ 297.039771][ T7896] pcm3724 [ 297.039778][ T7896] comedi: valid board names for pcl818 driver are: [ 297.039787][ T7896] pcl818l [ 297.039794][ T7896] pcl818h [ 297.039801][ T7896] pcl818hd [ 297.039808][ T7896] pcl818hg [ 297.039816][ T7896] pcl818 [ 297.039823][ T7896] pcl718 [ 297.039829][ T7896] pcm3718 [ 297.039836][ T7896] comedi: valid board names for pcl816 driver are: [ 297.039847][ T7896] pcl816 [ 297.039853][ T7896] pcl814b [ 297.039860][ T7896] comedi: valid board names for pcl812 driver are: [ 297.039870][ T7896] pcl812 [ 297.039876][ T7896] pcl812pg [ 297.039882][ T7896] acl8112pg [ 297.039888][ T7896] acl8112dg [ 297.039894][ T7896] acl8112hg [ 297.039901][ T7896] a821pgl [ 297.039907][ T7896] a821pglnda [ 297.039913][ T7896] a821pgh [ 297.039920][ T7896] a822pgl [ 297.039927][ T7896] a822pgh [ 297.039934][ T7896] a823pgl [ 297.039940][ T7896] a823pgh [ 297.039947][ T7896] pcl813 [ 297.039953][ T7896] pcl813b [ 297.039960][ T7896] acl8113 [ 297.039966][ T7896] iso813 [ 297.039973][ T7896] acl8216 [ 297.039980][ T7896] a826pg [ 297.039988][ T7896] comedi: valid board names for pcl730 driver are: [ 297.039997][ T7896] pcl730 [ 297.040004][ T7896] iso730 [ 297.046063][ T7896] acl7130 [ 297.046085][ T7896] pcm3730 [ 297.046093][ T7896] pcl725 [ 297.046100][ T7896] p8r8dio [ 297.046108][ T7896] acl7225b [ 297.046115][ T7896] p16r16dio [ 297.046123][ T7896] pcl733 [ 297.046130][ T7896] pcl734 [ 297.046137][ T7896] opmm-1616-xt [ 297.046145][ T7896] pearl-mm-p [ 297.046153][ T7896] ir104-pbf [ 297.046161][ T7896] comedi: valid board names for pcl726 driver are: [ 297.046172][ T7896] pcl726 [ 297.046179][ T7896] pcl727 [ 297.046187][ T7896] pcl728 [ 297.046195][ T7896] acl6126 [ 297.046202][ T7896] acl6128 [ 297.046210][ T7896] comedi: valid board names for pcl724 driver are: [ 297.046220][ T7896] pcl724 [ 297.046228][ T7896] pcl722 [ 297.046235][ T7896] pcl731 [ 297.046242][ T7896] acl7122 [ 297.046249][ T7896] acl7124 [ 297.046257][ T7896] pet48dio [ 297.046264][ T7896] pcmio48 [ 297.046271][ T7896] onyx-mm-dio [ 297.046279][ T7896] comedi: valid board names for pcl711 driver are: [ 297.046288][ T7896] pcl711 [ 297.046295][ T7896] pcl711b [ 297.046303][ T7896] acl8112hg [ 297.046310][ T7896] acl8112dg [ 297.046317][ T7896] comedi: valid board names for amplc_pc263 driver are: [ 297.046329][ T7896] pc263 [ 297.046336][ T7896] comedi: valid board names for amplc_pc236 driver are: [ 297.046347][ T7896] pc36at [ 297.046354][ T7896] comedi: valid board names for amplc_dio200 driver are: [ 297.046364][ T7896] pc212e [ 297.046372][ T7896] pc214e [ 297.046379][ T7896] pc215e [ 297.046386][ T7896] pc218e [ 297.046393][ T7896] pc272e [ 297.046401][ T7896] comedi: valid board names for comedi_parport driver are: [ 297.046411][ T7896] comedi_parport [ 297.046419][ T7896] comedi: valid board names for comedi_test driver are: [ 297.046429][ T7896] comedi_test [ 297.046437][ T7896] comedi: valid board names for comedi_bond driver are: [ 297.046446][ T7896] comedi_bond [ 297.152447][ T1011] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 297.197789][ T5701] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -EPROTO [ 297.249852][ T5701] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 297.249912][ T5701] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 298.056255][ T5701] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 298.137475][ T5701] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 298.156725][ T1011] usb 4-1: unable to get BOS descriptor or descriptor too short [ 298.166285][ T1011] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 298.166379][ T1011] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 298.166425][ T1011] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 298.166453][ T1011] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 298.219132][ T5701] usb 2-1: USB disconnect, device number 52 [ 298.220512][ T1011] usb 4-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 298.220535][ T1011] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.220550][ T1011] usb 4-1: Product: syz [ 298.220561][ T1011] usb 4-1: Manufacturer: syz [ 298.220571][ T1011] usb 4-1: SerialNumber: syz [ 298.427809][ T200] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 298.580412][ T200] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 298.583775][ T200] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 298.583808][ T200] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.583830][ T200] usb 5-1: Product: syz [ 298.583845][ T200] usb 5-1: Manufacturer: syz [ 298.583861][ T200] usb 5-1: SerialNumber: syz [ 298.661658][ T200] r8152-cfgselector 5-1: Unknown version 0x0000 [ 298.661690][ T200] r8152-cfgselector 5-1: config 0 descriptor?? [ 299.098791][ T6625] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 299.181014][ T7916] FAULT_INJECTION: forcing a failure. [ 299.181014][ T7916] name failslab, interval 1, probability 0, space 0, times 0 [ 299.181056][ T7916] CPU: 1 UID: 0 PID: 7916 Comm: syz.5.559 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 299.181086][ T7916] Tainted: [L]=SOFTLOCKUP [ 299.181093][ T7916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 299.181106][ T7916] Call Trace: [ 299.181114][ T7916] [ 299.181123][ T7916] dump_stack_lvl+0xe8/0x150 [ 299.181167][ T7916] should_fail_ex+0x467/0x600 [ 299.181201][ T7916] should_failslab+0xa8/0x100 [ 299.181222][ T7916] ? __pmd_alloc+0xa4/0x5e0 [ 299.181251][ T7916] kmem_cache_alloc_noprof+0x9e/0x680 [ 299.181283][ T7916] ? __pmd_alloc+0xa4/0x5e0 [ 299.181318][ T7916] __pmd_alloc+0xa4/0x5e0 [ 299.181351][ T7916] handle_mm_fault+0x21aa/0x28d0 [ 299.181384][ T7916] ? mt_find+0x186/0x630 [ 299.181411][ T7916] ? handle_mm_fault+0xeb/0x28d0 [ 299.181475][ T7916] ? __pfx_handle_mm_fault+0x10/0x10 [ 299.181520][ T7916] ? __lock_acquire+0x6df/0x2e40 [ 299.181546][ T7916] ? lock_mm_and_find_vma+0xa7/0x340 [ 299.181584][ T7916] do_user_addr_fault+0x744/0x1340 [ 299.181630][ T7916] exc_page_fault+0x6a/0xc0 [ 299.181653][ T7916] asm_exc_page_fault+0x26/0x30 [ 299.181678][ T7916] RIP: 0010:rep_movs_alternative+0x30/0xa0 [ 299.181707][ T7916] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 299.181727][ T7916] RSP: 0018:ffffc90008a879d8 EFLAGS: 00050206 [ 299.181746][ T7916] RAX: 00007ffffffff001 RBX: 0000000000000038 RCX: 0000000000000038 [ 299.181760][ T7916] RDX: 0000000000000001 RSI: 0000200000000c40 RDI: ffffc90008a87a60 [ 299.181775][ T7916] RBP: ffffc90008a87c70 R08: ffffc90008a87a97 R09: 1ffff92001150f52 [ 299.181791][ T7916] R10: dffffc0000000000 R11: fffff52001150f53 R12: ffffc90008a87ce0 [ 299.181806][ T7916] R13: 1ffff92001150f48 R14: ffffc90008a87a60 R15: 0000200000000c40 [ 299.181842][ T7916] _copy_from_user+0x7a/0xb0 [ 299.181865][ T7916] ___sys_sendmsg+0x1c6/0x360 [ 299.181898][ T7916] ? __lock_acquire+0x6df/0x2e40 [ 299.181923][ T7916] ? __pfx____sys_sendmsg+0x10/0x10 [ 299.181990][ T7916] ? __fget_files+0x2a/0x420 [ 299.182013][ T7916] ? __fget_files+0x3a8/0x420 [ 299.182046][ T7916] __sys_sendmmsg+0x279/0x4d0 [ 299.182084][ T7916] ? __pfx___sys_sendmmsg+0x10/0x10 [ 299.182126][ T7916] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 299.182172][ T7916] ? fput+0xa0/0xd0 [ 299.182206][ T7916] ? ksys_write+0x248/0x270 [ 299.182234][ T7916] ? __pfx_ksys_write+0x10/0x10 [ 299.182267][ T7916] __x64_sys_sendmmsg+0xa0/0xc0 [ 299.182304][ T7916] do_syscall_64+0x17b/0x530 [ 299.182326][ T7916] ? irqentry_exit+0x10f/0x8f0 [ 299.182347][ T7916] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.182370][ T7916] ? clear_bhb_loop+0x40/0x90 [ 299.182398][ T7916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.182420][ T7916] RIP: 0033:0x7efe399ce0d9 [ 299.182441][ T7916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.182459][ T7916] RSP: 002b:00007efe37c26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 299.182482][ T7916] RAX: ffffffffffffffda RBX: 00007efe39c55fa0 RCX: 00007efe399ce0d9 [ 299.182498][ T7916] RDX: 0000000000000001 RSI: 0000200000000c40 RDI: 0000000000000004 [ 299.182512][ T7916] RBP: 00007efe37c26090 R08: 0000000000000000 R09: 0000000000000000 [ 299.182525][ T7916] R10: 0000000000008014 R11: 0000000000000246 R12: 0000000000000001 [ 299.182539][ T7916] R13: 00007efe39c56038 R14: 00007efe39c55fa0 R15: 00007ffee9fb01e8 [ 299.182572][ T7916] [ 299.287812][ T6625] usb 2-1: Using ep0 maxpacket: 16 [ 299.582893][ T6625] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 299.582915][ T6625] usb 2-1: config 0 has no interface number 0 [ 299.615845][ T6625] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 299.615870][ T6625] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.615885][ T6625] usb 2-1: Product: syz [ 299.615895][ T6625] usb 2-1: Manufacturer: syz [ 299.615906][ T6625] usb 2-1: SerialNumber: syz [ 299.723295][ T6625] usb 2-1: config 0 descriptor?? [ 299.787378][ T6625] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 300.740100][ T822] r8152-cfgselector 5-1: USB disconnect, device number 38 [ 301.262667][ T6625] gspca_spca1528: reg_w err -71 [ 301.262765][ T6625] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 301.272317][ T6625] usb 2-1: USB disconnect, device number 53 [ 301.303912][ T7932] netlink: 60 bytes leftover after parsing attributes in process `syz.3.560'. [ 301.303958][ T7932] netlink: 20 bytes leftover after parsing attributes in process `syz.3.560'. [ 301.394609][ T1011] usb 4-1: USB disconnect, device number 45 [ 302.047734][ T200] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 302.088012][ T7250] udevd[7250]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 302.217022][ T200] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 302.217054][ T200] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.217076][ T200] usb 6-1: config 0 has no interface number 0 [ 302.217110][ T200] usb 6-1: too many endpoints for config 0 interface 1 altsetting 255: 255, using maximum allowed: 30 [ 302.217160][ T200] usb 6-1: config 0 interface 1 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 302.217191][ T200] usb 6-1: config 0 interface 1 has no altsetting 0 [ 302.316404][ T200] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 302.316438][ T200] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.316459][ T200] usb 6-1: Product: syz [ 302.316475][ T200] usb 6-1: Manufacturer: syz [ 302.316491][ T200] usb 6-1: SerialNumber: syz [ 302.373629][ T200] usb 6-1: config 0 descriptor?? [ 302.402648][ T200] cx231xx 6-1:0.1: New device syz syz @ 12 Mbps (0572:58a5) with 1 interfaces [ 302.402684][ T200] cx231xx 6-1:0.1: Not found matching IAD interface [ 302.617818][ T7955] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 302.617849][ T7955] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 302.623748][ T200] usb 6-1: USB disconnect, device number 17 [ 302.670014][ T6625] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 302.797862][ T1011] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 302.826360][ T6625] usb 4-1: not running at top speed; connect to a high speed hub [ 302.842385][ T6625] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 302.842474][ T6625] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice= 1.00 [ 302.842498][ T6625] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.921130][ T6625] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 302.971044][ T1011] usb 2-1: device descriptor read/64, error -71 [ 303.117406][ T7955] vhci_hcd vhci_hcd.0: Device attached [ 303.247923][ T1011] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 303.400756][ T1011] usb 2-1: device descriptor read/64, error -71 [ 303.433794][ T7960] netlink: NAT attribute has 5 unknown bytes [ 303.433937][ T7960] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 303.479428][ T822] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 303.538144][ T822] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 303.576822][ T1011] usb usb2-port1: attempt power cycle [ 303.813831][ T7960] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 303.814238][ T7960] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 303.916766][ T7953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.917325][ T7953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.078019][ T1011] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 304.098787][ T1011] usb 2-1: device descriptor read/8, error -71 [ 304.356867][ T6625] gspca_vc032x: reg_w err -71 [ 304.356970][ T6625] vc032x 4-1:1.0: probe with driver vc032x failed with error -71 [ 304.369459][ T1011] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 304.384809][ T6625] usb 4-1: USB disconnect, device number 46 [ 304.392950][ T1011] usb 2-1: device descriptor read/8, error -71 [ 304.498080][ T1011] usb usb2-port1: unable to enumerate USB device [ 305.241799][ T7967] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.627841][ T1011] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 305.688304][ T7956] vhci_hcd: connection reset by peer [ 305.753316][ T13] vhci_hcd vhci_hcd.1: stop threads [ 305.754547][ T13] vhci_hcd vhci_hcd.1: release socket [ 305.789970][ T1011] usb 4-1: Using ep0 maxpacket: 16 [ 305.811449][ T1011] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 305.811483][ T1011] usb 4-1: config 0 has no interface number 0 [ 305.837629][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 305.873444][ T1011] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 305.873485][ T1011] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.873548][ T1011] usb 4-1: Product: syz [ 305.873565][ T1011] usb 4-1: Manufacturer: syz [ 305.873581][ T1011] usb 4-1: SerialNumber: syz [ 305.925556][ T1011] usb 4-1: config 0 descriptor?? [ 305.969922][ T1011] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 306.167754][ T200] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 306.355183][ T200] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 306.355243][ T200] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 306.355286][ T200] usb 2-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 306.355312][ T200] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.668925][ T7984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.670046][ T7984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.698545][ T200] dvbdev: DVB: registering new adapter (DEC2000-t) [ 306.865029][ T7993] FAULT_INJECTION: forcing a failure. [ 306.865029][ T7993] name failslab, interval 1, probability 0, space 0, times 0 [ 306.865437][ T7993] CPU: 1 UID: 0 PID: 7993 Comm: syz.5.580 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 306.865465][ T7993] Tainted: [L]=SOFTLOCKUP [ 306.865472][ T7993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 306.865491][ T7993] Call Trace: [ 306.865499][ T7993] [ 306.865507][ T7993] dump_stack_lvl+0xe8/0x150 [ 306.865541][ T7993] should_fail_ex+0x467/0x600 [ 306.865568][ T7993] should_failslab+0xa8/0x100 [ 306.865587][ T7993] kmem_cache_alloc_node_noprof+0xac/0x660 [ 306.865614][ T7993] ? __alloc_skb+0x1d7/0x7a0 [ 306.865637][ T7993] ? __alloc_skb+0x1d7/0x7a0 [ 306.865665][ T7993] __alloc_skb+0x1d7/0x7a0 [ 306.865692][ T7993] ppp_write+0xb4/0x400 [ 306.865716][ T7993] ? vfs_write+0x284/0xbb0 [ 306.865737][ T7993] ? __pfx_ppp_write+0x10/0x10 [ 306.865761][ T7993] vfs_write+0x29f/0xbb0 [ 306.865787][ T7993] ? __pfx_vfs_write+0x10/0x10 [ 306.865809][ T7993] ? __fget_files+0x2a/0x420 [ 306.865830][ T7993] ? __fget_files+0x2a/0x420 [ 306.865847][ T7993] ? __fget_files+0x3a8/0x420 [ 306.865864][ T7993] ? __fget_files+0x2a/0x420 [ 306.865889][ T7993] ksys_write+0x156/0x270 [ 306.865912][ T7993] ? __pfx_ksys_write+0x10/0x10 [ 306.865942][ T7993] do_syscall_64+0x17b/0x530 [ 306.865963][ T7993] ? irqentry_exit+0x10f/0x8f0 [ 306.865982][ T7993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.866003][ T7993] ? clear_bhb_loop+0x40/0x90 [ 306.866023][ T7993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.866041][ T7993] RIP: 0033:0x7efe399ce0d9 [ 306.866057][ T7993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.866073][ T7993] RSP: 002b:00007efe37c26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 306.866092][ T7993] RAX: ffffffffffffffda RBX: 00007efe39c55fa0 RCX: 00007efe399ce0d9 [ 306.866105][ T7993] RDX: 0000000000000003 RSI: 0000200000000700 RDI: 0000000000000006 [ 306.866115][ T7993] RBP: 00007efe37c26090 R08: 0000000000000000 R09: 0000000000000000 [ 306.866126][ T7993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.866136][ T7993] R13: 00007efe39c56038 R14: 00007efe39c55fa0 R15: 00007ffee9fb01e8 [ 306.866160][ T7993] [ 307.107927][ T200] usb 2-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC2000-t Frontend)... [ 307.154868][ T200] ttusb_dec_send_command: command bulk message failed: error -71 [ 307.175071][ T200] usb 2-1: USB disconnect, device number 58 [ 307.535440][ T1011] gspca_spca1528: reg_w err -71 [ 307.535535][ T1011] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 307.554058][ T1011] usb 4-1: USB disconnect, device number 47 [ 308.127795][ T200] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 308.288687][ T200] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 308.288724][ T200] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.997843][ T822] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 309.226050][ T8001] netlink: 'syz.1.584': attribute type 21 has an invalid length. [ 310.879369][ T8027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.879876][ T8027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.110976][ T822] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 311.438231][ T200] cxacru 2-1:1.0: send of cm 0x84 failed (-104) [ 311.438264][ T200] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -104 [ 311.483684][ T200] ------------[ cut here ]------------ [ 311.483721][ T200] URB ffff888035468c00 submitted while active [ 311.483755][ T200] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x79/0x18b0, CPU#0: kworker/0:2/200 [ 311.483795][ T200] Modules linked in: [ 311.483824][ T200] CPU: 0 UID: 0 PID: 200 Comm: kworker/0:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 311.483854][ T200] Tainted: [L]=SOFTLOCKUP [ 311.483861][ T200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 311.483875][ T200] Workqueue: usb_hub_wq hub_event [ 311.483904][ T200] RIP: 0010:usb_submit_urb+0x7c/0x18b0 [ 311.483924][ T200] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 f9 92 4d fb 49 83 3e 00 74 40 e8 0e 3c e1 fa 48 8d 3d 87 f1 f8 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 f3 3b e1 fa eb 05 e8 ec 3b [ 311.483965][ T200] RSP: 0018:ffffc9000421e818 EFLAGS: 00010287 [ 311.483990][ T200] RAX: ffffffff86e467a2 RBX: ffff888035468c00 RCX: 0000000000100000 [ 311.484008][ T200] RDX: ffffc9001527f000 RSI: ffff888035468c00 RDI: ffffffff8fdd5930 [ 311.484023][ T200] RBP: dffffc0000000000 R08: 0000000000000002 R09: 0000000000000000 [ 311.484038][ T200] R10: dffffc0000000000 R11: fffffbfff1fa1890 R12: 0000000000000040 [ 311.484052][ T200] R13: 0000000000000000 R14: ffff888035468c08 R15: 0000000000000cc0 [ 311.484068][ T200] FS: 0000000000000000(0000) GS:ffff8881259f2000(0000) knlGS:0000000000000000 [ 311.484085][ T200] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 311.484098][ T200] CR2: 00007efe399b7240 CR3: 00000000425e6000 CR4: 00000000003526f0 [ 311.484115][ T200] Call Trace: [ 311.484123][ T200] [ 311.484133][ T200] ? __raw_spin_lock_init+0x45/0x100 [ 311.484166][ T200] ? __init_swait_queue_head+0xa8/0x150 [ 311.484197][ T200] cxacru_cm+0x21a/0xf10 [ 311.484222][ T200] ? bus_probe_device+0x12d/0x220 [ 311.484251][ T200] ? device_add+0x7d7/0xb80 [ 311.484269][ T200] ? usb_new_device+0x98d/0x1610 [ 311.484288][ T200] ? process_one_work+0xaaf/0x1480 [ 311.484321][ T200] ? __pfx_cxacru_cm+0x10/0x10 [ 311.484360][ T200] ? __kasan_kmalloc+0x93/0xb0 [ 311.484395][ T200] ? __kmalloc_cache_noprof+0x3cd/0x670 [ 311.484427][ T200] ? cxacru_poll_status+0x14b/0x1110 [ 311.484453][ T200] ? cxacru_poll_status+0x14b/0x1110 [ 311.484488][ T200] cxacru_poll_status+0x178/0x1110 [ 311.484519][ T200] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 311.484545][ T200] ? __pfx_cxacru_poll_status+0x10/0x10 [ 311.484585][ T200] ? cxacru_atm_start+0x176/0x360 [ 311.484612][ T200] cxacru_atm_start+0x185/0x360 [ 311.484643][ T200] usbatm_atm_init+0x144/0x3a0 [ 311.484669][ T200] usbatm_usb_probe+0x15e9/0x1dd0 [ 311.484713][ T200] cxacru_usb_probe+0x17f/0x220 [ 311.484774][ T200] ? __pfx_cxacru_usb_probe+0x10/0x10 [ 311.484811][ T200] usb_probe_interface+0x788/0xe50 [ 311.484851][ T200] ? __pfx_usb_probe_interface+0x10/0x10 [ 311.484886][ T200] ? sysfs_do_create_link_sd+0xe0/0x110 [ 311.484911][ T200] ? driver_sysfs_add+0x1fe/0x210 [ 311.484938][ T200] ? __pfx_usb_probe_interface+0x10/0x10 [ 311.484965][ T200] really_probe+0x254/0xae0 [ 311.485001][ T200] __driver_probe_device+0x1e8/0x360 [ 311.485031][ T200] driver_probe_device+0x4f/0x240 [ 311.485062][ T200] __device_attach_driver+0x270/0x410 [ 311.485094][ T200] bus_for_each_drv+0x25b/0x2f0 [ 311.485128][ T200] ? __pfx___device_attach_driver+0x10/0x10 [ 311.485155][ T200] ? __pfx_bus_for_each_drv+0x10/0x10 [ 311.485185][ T200] ? rt_spin_unlock+0x163/0x200 [ 311.485222][ T200] __device_attach+0x2c7/0x450 [ 311.485245][ T200] ? rt_spin_unlock+0x157/0x200 [ 311.485275][ T200] ? __pfx___device_attach+0x10/0x10 [ 311.485311][ T200] device_initial_probe+0xa1/0xd0 [ 311.485340][ T200] bus_probe_device+0x12d/0x220 [ 311.485379][ T200] device_add+0x7d7/0xb80 [ 311.485407][ T200] usb_set_configuration+0x1ad8/0x2180 [ 311.485464][ T200] usb_generic_driver_probe+0x8d/0x150 [ 311.485497][ T200] usb_probe_device+0x1c3/0x3b0 [ 311.485533][ T200] ? __pfx_usb_probe_device+0x10/0x10 [ 311.485561][ T200] really_probe+0x254/0xae0 [ 311.485591][ T200] __driver_probe_device+0x1e8/0x360 [ 311.485616][ T200] driver_probe_device+0x4f/0x240 [ 311.485643][ T200] __device_attach_driver+0x270/0x410 [ 311.485671][ T200] bus_for_each_drv+0x25b/0x2f0 [ 311.485701][ T200] ? __pfx___device_attach_driver+0x10/0x10 [ 311.485726][ T200] ? __pfx_bus_for_each_drv+0x10/0x10 [ 311.485754][ T200] ? rt_spin_unlock+0x163/0x200 [ 311.485801][ T200] __device_attach+0x2c7/0x450 [ 311.485829][ T200] ? __pfx___device_attach+0x10/0x10 [ 311.485865][ T200] device_initial_probe+0xa1/0xd0 [ 311.485896][ T200] bus_probe_device+0x12d/0x220 [ 311.485930][ T200] device_add+0x7d7/0xb80 [ 311.485958][ T200] usb_new_device+0x98d/0x1610 [ 311.485991][ T200] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 311.486019][ T200] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 311.486046][ T200] ? __pfx_usb_new_device+0x10/0x10 [ 311.486079][ T200] hub_event+0x28cf/0x4cf0 [ 311.486155][ T200] ? __pfx_hub_event+0x10/0x10 [ 311.486190][ T200] ? rcu_is_watching+0x15/0xb0 [ 311.486217][ T200] ? process_one_work+0x7fd/0x1480 [ 311.486239][ T200] process_one_work+0xaaf/0x1480 [ 311.486262][ T200] ? lockdep_hardirqs_on+0x7a/0x110 [ 311.486304][ T200] ? __pfx_process_one_work+0x10/0x10 [ 311.486323][ T200] ? do_raw_spin_lock+0x12b/0x2f0 [ 311.486361][ T200] ? assign_work+0x3cf/0x5d0 [ 311.486385][ T200] worker_thread+0xb05/0x10d0 [ 311.486429][ T200] kthread+0x388/0x470 [ 311.486461][ T200] ? __pfx_worker_thread+0x10/0x10 [ 311.486485][ T200] ? __pfx_kthread+0x10/0x10 [ 311.486519][ T200] ret_from_fork+0x514/0xb70 [ 311.486554][ T200] ? __pfx_ret_from_fork+0x10/0x10 [ 311.486583][ T200] ? __switch_to+0xc89/0x1420 [ 311.486613][ T200] ? __pfx_kthread+0x10/0x10 [ 311.486644][ T200] ret_from_fork_asm+0x1a/0x30 [ 311.486693][ T200] [ 311.486706][ T200] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 311.486729][ T200] CPU: 0 UID: 0 PID: 200 Comm: kworker/0:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 311.486762][ T200] Tainted: [L]=SOFTLOCKUP [ 311.486771][ T200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 311.486788][ T200] Workqueue: usb_hub_wq hub_event [ 311.486819][ T200] Call Trace: [ 311.486828][ T200] [ 311.486839][ T200] vpanic+0x56c/0xa60 [ 311.486864][ T200] ? __pfx__printk+0x10/0x10 [ 311.486892][ T200] ? __pfx_vpanic+0x10/0x10 [ 311.486911][ T200] ? is_bpf_text_address+0x292/0x2b0 [ 311.486936][ T200] ? is_bpf_text_address+0x26/0x2b0 [ 311.486968][ T200] panic+0xc5/0xd0 [ 311.487000][ T200] ? __pfx_panic+0x10/0x10 [ 311.487031][ T200] ? ret_from_fork_asm+0x1a/0x30 [ 311.487072][ T200] __warn+0x315/0x4c0 [ 311.487089][ T200] ? usb_submit_urb+0x79/0x18b0 [ 311.487115][ T200] ? usb_submit_urb+0x79/0x18b0 [ 311.487136][ T200] __report_bug+0x276/0x570 [ 311.487164][ T200] ? usb_submit_urb+0x79/0x18b0 [ 311.487190][ T200] ? __pfx___report_bug+0x10/0x10 [ 311.487234][ T200] report_bug_entry+0x19a/0x290 [ 311.487258][ T200] ? usb_submit_urb+0x7c/0x18b0 [ 311.487280][ T200] ? usb_submit_urb+0x81/0x18b0 [ 311.487303][ T200] handle_bug+0xce/0x200 [ 311.487331][ T200] exc_invalid_op+0x1a/0x50 [ 311.487357][ T200] asm_exc_invalid_op+0x1a/0x20 [ 311.487381][ T200] RIP: 0010:usb_submit_urb+0x7c/0x18b0 [ 311.487407][ T200] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 f9 92 4d fb 49 83 3e 00 74 40 e8 0e 3c e1 fa 48 8d 3d 87 f1 f8 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 f3 3b e1 fa eb 05 e8 ec 3b [ 311.487429][ T200] RSP: 0018:ffffc9000421e818 EFLAGS: 00010287 [ 311.487449][ T200] RAX: ffffffff86e467a2 RBX: ffff888035468c00 RCX: 0000000000100000 [ 311.487465][ T200] RDX: ffffc9001527f000 RSI: ffff888035468c00 RDI: ffffffff8fdd5930 [ 311.487484][ T200] RBP: dffffc0000000000 R08: 0000000000000002 R09: 0000000000000000 [ 311.487499][ T200] R10: dffffc0000000000 R11: fffffbfff1fa1890 R12: 0000000000000040 [ 311.487516][ T200] R13: 0000000000000000 R14: ffff888035468c08 R15: 0000000000000cc0 [ 311.487547][ T200] ? usb_submit_urb+0x72/0x18b0 [ 311.487578][ T200] ? usb_submit_urb+0x72/0x18b0 [ 311.487599][ T200] ? __raw_spin_lock_init+0x45/0x100 [ 311.487636][ T200] ? __init_swait_queue_head+0xa8/0x150 [ 311.487672][ T200] cxacru_cm+0x21a/0xf10 [ 311.487699][ T200] ? bus_probe_device+0x12d/0x220 [ 311.487733][ T200] ? device_add+0x7d7/0xb80 [ 311.487756][ T200] ? usb_new_device+0x98d/0x1610 [ 311.487780][ T200] ? process_one_work+0xaaf/0x1480 [ 311.487814][ T200] ? __pfx_cxacru_cm+0x10/0x10 [ 311.487859][ T200] ? __kasan_kmalloc+0x93/0xb0 [ 311.487897][ T200] ? __kmalloc_cache_noprof+0x3cd/0x670 [ 311.487934][ T200] ? cxacru_poll_status+0x14b/0x1110 [ 311.487959][ T200] ? cxacru_poll_status+0x14b/0x1110 [ 311.488003][ T200] cxacru_poll_status+0x178/0x1110 [ 311.488038][ T200] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 311.488063][ T200] ? __pfx_cxacru_poll_status+0x10/0x10 [ 311.488103][ T200] ? cxacru_atm_start+0x176/0x360 [ 311.488135][ T200] cxacru_atm_start+0x185/0x360 [ 311.488164][ T200] usbatm_atm_init+0x144/0x3a0 [ 311.488190][ T200] usbatm_usb_probe+0x15e9/0x1dd0 [ 311.488236][ T200] cxacru_usb_probe+0x17f/0x220 [ 311.488266][ T200] ? __pfx_cxacru_usb_probe+0x10/0x10 [ 311.488305][ T200] usb_probe_interface+0x788/0xe50 [ 311.488350][ T200] ? __pfx_usb_probe_interface+0x10/0x10 [ 311.488389][ T200] ? sysfs_do_create_link_sd+0xe0/0x110 [ 311.488413][ T200] ? driver_sysfs_add+0x1fe/0x210 [ 311.488441][ T200] ? __pfx_usb_probe_interface+0x10/0x10 [ 311.488474][ T200] really_probe+0x254/0xae0 [ 311.488528][ T200] __driver_probe_device+0x1e8/0x360 [ 311.488563][ T200] driver_probe_device+0x4f/0x240 [ 311.488597][ T200] __device_attach_driver+0x270/0x410 [ 311.488631][ T200] bus_for_each_drv+0x25b/0x2f0 [ 311.488669][ T200] ? __pfx___device_attach_driver+0x10/0x10 [ 311.488701][ T200] ? __pfx_bus_for_each_drv+0x10/0x10 [ 311.488739][ T200] ? rt_spin_unlock+0x163/0x200 [ 311.488782][ T200] __device_attach+0x2c7/0x450 [ 311.488810][ T200] ? rt_spin_unlock+0x157/0x200 [ 311.488842][ T200] ? __pfx___device_attach+0x10/0x10 [ 311.488879][ T200] device_initial_probe+0xa1/0xd0 [ 311.488910][ T200] bus_probe_device+0x12d/0x220 [ 311.488950][ T200] device_add+0x7d7/0xb80 [ 311.488990][ T200] usb_set_configuration+0x1ad8/0x2180 [ 311.489042][ T200] usb_generic_driver_probe+0x8d/0x150 [ 311.489071][ T200] usb_probe_device+0x1c3/0x3b0 [ 311.489100][ T200] ? __pfx_usb_probe_device+0x10/0x10 [ 311.489131][ T200] really_probe+0x254/0xae0 [ 311.489161][ T200] __driver_probe_device+0x1e8/0x360 [ 311.489190][ T200] driver_probe_device+0x4f/0x240 [ 311.489221][ T200] __device_attach_driver+0x270/0x410 [ 311.489257][ T200] bus_for_each_drv+0x25b/0x2f0 [ 311.489292][ T200] ? __pfx___device_attach_driver+0x10/0x10 [ 311.489321][ T200] ? __pfx_bus_for_each_drv+0x10/0x10 [ 311.489359][ T200] ? rt_spin_unlock+0x163/0x200 [ 311.489396][ T200] __device_attach+0x2c7/0x450 [ 311.489426][ T200] ? __pfx___device_attach+0x10/0x10 [ 311.489467][ T200] device_initial_probe+0xa1/0xd0 [ 311.489500][ T200] bus_probe_device+0x12d/0x220 [ 311.489540][ T200] device_add+0x7d7/0xb80 [ 311.489571][ T200] usb_new_device+0x98d/0x1610 [ 311.489593][ T200] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 311.489622][ T200] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 311.489654][ T200] ? __pfx_usb_new_device+0x10/0x10 [ 311.489690][ T200] hub_event+0x28cf/0x4cf0 [ 311.489772][ T200] ? __pfx_hub_event+0x10/0x10 [ 311.489814][ T200] ? rcu_is_watching+0x15/0xb0 [ 311.489846][ T200] ? process_one_work+0x7fd/0x1480 [ 311.489874][ T200] process_one_work+0xaaf/0x1480 [ 311.489899][ T200] ? lockdep_hardirqs_on+0x7a/0x110 [ 311.489938][ T200] ? __pfx_process_one_work+0x10/0x10 [ 311.489960][ T200] ? do_raw_spin_lock+0x12b/0x2f0 [ 311.490011][ T200] ? assign_work+0x3cf/0x5d0 [ 311.490042][ T200] worker_thread+0xb05/0x10d0 [ 311.490094][ T200] kthread+0x388/0x470 [ 311.490127][ T200] ? __pfx_worker_thread+0x10/0x10 [ 311.490151][ T200] ? __pfx_kthread+0x10/0x10 [ 311.490183][ T200] ret_from_fork+0x514/0xb70 [ 311.490222][ T200] ? __pfx_ret_from_fork+0x10/0x10 [ 311.490252][ T200] ? __switch_to+0xc89/0x1420 [ 311.490280][ T200] ? __pfx_kthread+0x10/0x10 [ 311.490309][ T200] ret_from_fork_asm+0x1a/0x30 [ 311.490358][ T200] [ 311.491343][ T200] Kernel Offset: disabled