last executing test programs: 16.81982446s ago: executing program 2 (id=1834): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x7, 0x101001) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f00000002c0)=0xff) clock_gettime(0x2, &(0x7f0000000000)) 16.730114163s ago: executing program 2 (id=1835): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8011, &(0x7f00000000c0)={[{@nr_blocks={'nr_blocks', 0x3d, [0x70]}}]}) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x4}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x3, 0x9, 0x1, {0x1, @sliced={0x3, [0x1, 0x40, 0x991a, 0x2, 0x7, 0x0, 0x6, 0x4, 0x6, 0xa59a, 0x2, 0x10, 0xe, 0x2a66, 0x3cf1, 0x5, 0x6, 0x1ff, 0x7, 0x5, 0x0, 0x9, 0x17e, 0x9, 0xd2, 0x4, 0x4, 0x7, 0x9, 0x1, 0xff, 0x6, 0x2, 0x0, 0x15, 0x28e, 0xd3, 0x2, 0x8, 0x9d85, 0x4, 0x1, 0x8000, 0x9, 0xa5, 0xf, 0x4, 0x6], 0x100004}}, 0x3d3}) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x40) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) r2 = fanotify_init(0x200, 0x0) r3 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\b?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\xf4\xb05l\x8b^(V7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee8\x84\x95\x82)\xa1\xfe\x8a\xcdN\x9c\xf4\x9d6\x17=dTH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17\xdf@\xa6\x01\x8fe\x87e-(\xbd\xd7\xa0\x85\vJ\x95\xf4\xc4L\xdfS9\x1dO\x15Zn\xdbO\xf4\xb0s\x01\xa7oFi\xc9\x0ew\'XWy\xca\x16\x1cj\xb5\xab8(\xc8+f1\xa6\x15\x9a\xf33\x85\x94\x85\b\xe8*L\xf8\xf41j\xb4fT\x1b0\xf41X\xf6$\xc1=\x88w\x1d\xe5--\xa8\xe5f\xa7P\xbd\x14\x82Q\xba\x035\xa7\x01\x1b\xb6\x95G\n\x05\a\xeax\xd2\x80\x02&\xe9U=\xe3\xbc\xe7\f\nqP$g\xd3\x1c\x1d\x9d>i~\xd9\fb\xb8\xe4[\x13e\"\xdb7\xa3s\xf7\xc2:', 0x5) r4 = dup(r3) r5 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f00000002c0)={0x20, r5}, 0x0) fanotify_mark(r2, 0x1, 0x1, r4, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="259374c94982", 0x0, 0x0, 0x14, 0x0, 0x0}) syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000092df5510ac05269289b201020301090222000100000000090400000103e900000905a1e7"], 0x0) 16.423364582s ago: executing program 2 (id=1836): r0 = syz_usb_connect(0x4, 0x24, &(0x7f00000005c0)=ANY=[@ANYRESDEC, @ANYRES64, @ANYRES8, @ANYRES8, @ANYRESHEX=0x0], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0) r2 = epoll_create1(0x0) epoll_wait(r2, &(0x7f0000000300)=[{}], 0x1, 0x400) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x1}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) prctl$PR_GET_SECCOMP(0x15) syz_usb_control_io$uac2(r0, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) pipe2(&(0x7f0000000000), 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4000003, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r5, 0x8001}}, 0x48) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 16.167805928s ago: executing program 2 (id=1837): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000140)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r2}}, 0x18) 16.072235166s ago: executing program 2 (id=1838): syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r0 = syz_usb_connect$uac2(0x0, 0xd5, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x582, 0x3b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc3, 0x3, 0x1, 0x3, 0x50, 0xf2, {0x8, 0xb, 0x2, 0x0, 0x1, 0xa, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x1, 0x4, 0x15, 0x6b}, [@output_terminal={0xc, 0x24, 0x3, 0x5, 0x404, 0x9a, 0x6, 0x2, 0xf8e6, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7, 0x1, 0xe, "aa18227184f892a4"}, @as_header={0x10, 0x24, 0x1, 0x2, 0x0, 0x1, 0x5, 0x8, 0x1, 0x8}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x8, 0x4, 0x8, {0x8, 0x25, 0x1, 0x80, 0x0, 0x5, 0x7ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0xe}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x4, 0x8, 0x7, "9a76"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x80, 0x2, 0x0, 0x5, "209fae6528"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x81, 0x6, 0x7f, 0x9, 0xef}]}, {{0x9, 0x5, 0x82, 0x9, 0x3df, 0x7, 0x3, 0x7, {0x8, 0x25, 0x1, 0x1, 0x0, 0xa, 0x3}}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x1, 0x5, 0x6, 0xff, 0x7f}, 0x19, &(0x7f0000000140)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "e4b905941bd9bfef0668c401c3edfba3"}]}, 0x6, [{0xec, &(0x7f0000000180)=@string={0xec, 0x3, "22f16b4b739bfab417b0351307ac4db9d8293742dd62429e019f00572f90195e367122162b1cba4db35be9f82079ea28d85d4a0a11a991ed7586394bab67aa5d8437e924874c1ac440cb36ffd8584cc2f053a8c55ba9d836c23ab8fcf12e65960183c6a192475f9ad163144073a5df9798647f5165c3f096d2ff8c91ac129f55e90f69e15635350cccbb70250a1723747803815eee4705eb7c5bdde0b4390dc07f4f817698b08faef52cca2171d350f66c800da15e288e7274d9d1f5809b6c2f9344e2d6bc7edfd1c9025817ddd785d69142160cc57e69d520a86a9e26a97a5cbb0b3aa015fe138c3a2c"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x459}}, {0x59, &(0x7f00000003c0)=@string={0x59, 0x3, "d11ec76937b75126d8edfb88f52951acba2f3372411979d8bf8b809576f66bf9a926c81895a1bc997131b0953efd049a35bf0c4cb1d839d423a106021b92fde3ba7c659dc3e95a76c31c884aefd0f046ec44948f4c5933"}}, {0xdb, &(0x7f0000000440)=@string={0xdb, 0x3, "89ca3aa636b395d9a225d31c4676daf58dfd302c3accfef5c83aa9026b7c170aebcbdd2aef9d91b25f75c9c1889668a1b63c32b41837e13f50506768b6bf573e65a51b95e2226ac9c020effae79c79f678575d9cd3754cdc90e89b6cd4d67a5a60079f0e6133048f9fa13c83a4c34304766bb61d6fa3b4e3903ce44b96b768a2bddc273e30a04b252e6a470a4a07861f384e74425bba1a7beb8927f21a4a83f82f107b93408e1e8ac169bd4aeb0c93cb1617e66d264eb7dad9be76a9fe7e88ed55f102ef155f08dcd1740162a4e4393798296d194550d8f55a"}}]}) syz_usb_control_io$uac2(r0, &(0x7f0000000780)={0x14, &(0x7f00000005c0)={0x40, 0xc, 0xc6, {0xc6, 0x22, "9426a4a086c008afadd6a2a983cd62c4ac477166bd0a98f0b91338578f082b470d4beb0288ec3518f47e60ead8b70568711de67631251e178e62acee1521e5f5f7b5c766102b64b605034de89cc30806b6360ed0b34c1de790394f2105c79d6a2ba981f55616bdf2de8536ca2f2469f925bc225576e7a7bcf39e573ced6ed847353e37ebbbce06e637a6c6b355f46392d356a350d4b1880a0c067f0c953ac672f11752288eacd4009bb73321a91475703286a6e467d4715c34c2ab3b91139b19d5e84614"}}, &(0x7f00000006c0)={0x0, 0x3, 0xb4, @string={0xb4, 0x3, "ffc09bc0e9e9f72fbec5dd894bb28416006a318e96579d487301d79fca2d77d880587614a24fddd7824c4fd75e42a4c9d5508b790a5961177be80968c712cf195fc8b5d81ce103976a2157f0df24fff07ff56a13ba84b3eb85346defb233e99d74426bcad121a420cdd66c97fee3a0119ea428036d59c101e34f970b6f2223b2c421b83ac6f91ec91a57cd682bbd6199c080b2855fac637d7a52971ba31d0e2d7c7de3b15221d1a6f71e667f21516328911a"}}}, &(0x7f0000000a00)={0x44, &(0x7f00000007c0)={0x40, 0x5, 0x79, "f7c09c4c052818dab2b25541d686ab31d6d5387813cabd241a6abe440611e33d2244e7bf5de6a12f28b06e908d34c869e3be22fde2ca037057cf009c5dbf310e2faa0f87cb79af08edac62a175ac0911c3a5044f3b61266c9cf302c953f402cff4b9b44ec2ca7ba334ffdca4947cf26ca778cb7da47fea5928"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x9b}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0xec}, &(0x7f00000008c0)={0x20, 0x81, 0x2, "a510"}, &(0x7f0000000900)={0x20, 0x82, 0x2, "42d9"}, &(0x7f0000000940)={0x20, 0x83, 0x3, "ed6d08"}, &(0x7f0000000980)={0x20, 0x84, 0x4, "37cf43d1"}, &(0x7f00000009c0)={0x20, 0x85, 0x3, "0d22c2"}}) 16.009265808s ago: executing program 2 (id=1839): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000540), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010002000000f0ffffff01000000"], 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x8000090) 8.905721138s ago: executing program 3 (id=1857): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000940)={{0x0, 0x2001, 0x3, 0x6}, 'syz0\x00', 0x38}) r2 = fsopen(&(0x7f00000002c0)='ecryptfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f00000003c0)='#}:\x17\x00', &(0x7f0000000400)="2342d4d485", 0x5) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) mmap$dsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x100010, r3, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000140), 0x0, 0x200) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r4, 0xc008551b, &(0x7f0000000180)={0x6, 0xc, [0x81, 0x400, 0x7fff]}) ioctl$UI_DEV_CREATE(r1, 0x5501) write$input_event(r1, &(0x7f00000002c0)={{0x0, 0x2710}, 0x12, 0x7, 0x100000a}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x11c}}, 0x0) 7.804403508s ago: executing program 3 (id=1860): openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@local, 0x0, 0x7, 0x4e23, 0x0, 0x2}, {0xffffffffffffffff, 0x0, 0x0, 0x2, 0xfffffffffffffff9, 0x2000000, 0x1, 0xfffffffffffffffd}, {0x4000000001ff, 0x7ffffffffffc, 0x4, 0xffffffffffffff7f}, 0x1, 0x0, 0x1, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x2b}, 0xa, @in6=@private2, 0x203504, 0x4, 0x0, 0x0, 0xffffffff, 0x6, 0x4}}, 0xe8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_io_uring_setup(0x1dc7, &(0x7f0000000140)={0x0, 0xd5a8, 0x2, 0x1, 0x382}, 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_clone3(&(0x7f0000000340)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='attr/keycreate\x00') socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xa1a, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r1, r6, &(0x7f0000000400)={0x0, 0xf39b, 0x80, 0x3, 0xb0}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd5fb, 0x800, 0x1, 0x31b, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7685, 0x800, 0x1, 0x3df, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa91c, 0x10, 0x1, 0x902c4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4bc6, 0x20, 0x2, 0x40021a, 0x0, r1}}], 0x4, &(0x7f0000001540)={0x2e, 0x35, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r5, '\x00', {0x5, 0xa0b, 0x0, 0x0}}, 0x0) 6.822851141s ago: executing program 0 (id=1862): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0x1000}, 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000280)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x4, r2}) r4 = fsmount(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400) ioctl$FE_GET_PROPERTY(r5, 0x80106f53, &(0x7f0000000000)={0x15, &(0x7f0000000280)=[{0x44, '\x00', @buffer={"80ca30691fc10ccae81c0dda7e6e736872a3768d01f5859969d43a0522aef412", 0x20}, 0xa}]}) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581"], 0x0) r6 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r6, 0xc034564b, &(0x7f00000000c0)={0x0, 0x42474752, 0x780, 0x4, 0x3, @discrete={0x1, 0x8}}) r7 = msgget$private(0x0, 0x204) msgsnd(r7, &(0x7f0000000080)={0x1}, 0x8, 0x800) msgrcv(r7, 0x0, 0x0, 0x2, 0x5800) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000040)={0x500, 0x1, &(0x7f0000000180)=[r2], &(0x7f0000000180), &(0x7f0000000340)=[r3], &(0x7f00000001c0), 0x0, 0xff}) sysfs$1(0x1, &(0x7f0000000000)='/dev/nullb0\x00') r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000002a00)={0x14, 0x76, 0x31f, 0x0, 0x0, "", [@nested={0x4, 0xd}]}, 0x14}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r10 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write$vhost_msg_v2(r10, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x48) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(r11, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x1c, r9, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x167a800}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000040}, 0x4004004) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f0000000500)={&(0x7f0000000240), 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x110, r9, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xd574}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x800}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8001}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x10}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffa}]}, 0x110}, 0x1, 0x0, 0x0, 0x200000c0}, 0x40) socket(0x1d, 0x5, 0x9) 6.632678816s ago: executing program 3 (id=1863): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xff}], 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008200122010009058103"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) 4.86140848s ago: executing program 3 (id=1866): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x4}) r0 = socket$alg(0x26, 0x5, 0x0) r1 = fsmount(0xffffffffffffffff, 0x1, 0x5) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x2, 0x20, 0x10, "d0fb310a7b103be71ded9917d6a6ca1d05b6436a901d0d9fe22f7c98b19719ffb5543f59967b058bc6a857c2946e26fa4a210ccc7d02b78b6933d2d339c75128", "14dc50eb23779d33fc53462d296b6edc88c4a24758653752a1cd94dc3265234661a428e1eaeed05578ff4a6af383a2e0e2ea817a5d7fee8f056c79b3354cbeb4", "dae5bfd26afcb4acef18ed19d8f212a723cbd4288ccea3b89be92213f8707e68", [0x4, 0x4]}) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c76fee915d56d590c200", 0x18) r2 = accept4(r0, 0x0, 0x0, 0x80800) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000002140)=0x7, 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000240)={0x1f, 0x3, @none, 0x0, 0x2}, 0xe) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) read$FUSE(r4, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs(r5, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x261}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14e2ffff0f00010000000001000000000000000a20000000000a01040000000000000000010000000900010073797a300000000028000000030a0101000000000000000001000000080d0b40000000000900010073797a3000000000140000001000010000000000000000000000000a"], 0x70}}, 0x0) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) sendto(r2, &(0x7f0000002280)="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", 0x1000, 0x8805, 0x0, 0x0) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYRESHEX=r6, @ANYRES32], 0x0) 4.763146395s ago: executing program 0 (id=1867): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r0, 0x3ba0, &(0x7f00000004c0)={0x48, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8}) 4.529288631s ago: executing program 0 (id=1868): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (async) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) (async) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f00000002c0)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) capset(&(0x7f0000000040)={0x20071026, r1}, &(0x7f0000000080)={0x200c, 0x6, 0x2, 0x87, 0x3, 0x40}) (async) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f00000024c0), 0x103201, 0x0) ioctl$RNDADDTOENTCNT(r2, 0x40045201, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000200)={&(0x7f0000000600)=[{0xfff, 0x0, 0x0, 0x0}], 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) (async) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, './file2\x00'}, 0x6e) (async) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x17) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000080)={[{0x3, 0x80c, 0x0, 0x2f, 0x1, 0x20, 0x47, 0x6, 0x2, 0xff, 0x8, 0x6, 0x8006}, {0x9b7, 0x401, 0x2, 0xc1, 0x6, 0x21, 0x7, 0xf1, 0x7, 0x3, 0x44, 0x3, 0x1}, {0x7fffffff, 0x40, 0x5e, 0x0, 0x5a, 0x9, 0xc, 0xf8, 0x0, 0x26, 0x3, 0x3}], 0x7}) (async) r6 = socket$nl_audit(0x10, 0x3, 0x9) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x6, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r7, 0x6, 0x3, &(0x7f0000000340)=0x15, 0x4) r8 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1bbc, 0x801) write$evdev(r8, &(0x7f00000000c0)=[{{}, 0x0, 0x1, 0x3}], 0x5b) (async) ioctl$EVIOCGSND(r8, 0x8040451a, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r7, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0b080510"], 0xe) (async) setsockopt$sock_int(r6, 0x1, 0x29, &(0x7f0000000140)=0xe7c, 0x4) (async) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0f9917e258f922866b0e831cc41c343ed2dc4b486112ee263da1300ad0845bee8fb9f765f69cb6f17a37eedc165086d89f7187b32b6d0dda13aefaba6ffc978cea781fdd6475bc8bade18f7c59a9fac84dce8667ef4d2950bc4d90f0a382abcf3372206d96ada15ab68d232c732cf9d5a74ed6360431e5e651c623689cf6cf99fd11ac37545e4025", @ANYRESOCT=r0, @ANYRES16=r0, @ANYRES64=0x0, @ANYRESDEC=0x0]) (async) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r9) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRES16, @ANYRES16=r10, @ANYBLOB="000328bd7000ffdbdf2501000000080005000100000024000300b08073e8d44e91e3da922c22438244bb885c69e269c8e9d835b114293a4ddc6e140002007767310000000000000000000000000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d7843"], 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x20000050) syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) (async) socket$rxrpc(0x21, 0x2, 0x2) 4.087785608s ago: executing program 0 (id=1869): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000040)={0x20, 0xe, 0xfb, {0xfb, 0x10, "511ca5e180024f0b65e9b35a6fd340d1cb6c80eeac1953b420c32474e3dd08ab87801b9fb250b40d037c26c4841ce4bf2a41c064853fe3f71b329f24ddeafeda80350fefdf6253b1778b97560c6075db5f82f74a63518d8c0b51459a11f4253956ee27575421c7620ec1bb5d275cb409e5c71b960b686a0b2ec446f724534763d45169b5c4df6a7367376bc9ea3df4236140d21839ac9de319acc4ef274354374f0d00fb484570098a7fcad64984b33ad4b70f58fe38c3b3cc17180d39822832598af37f725f2dee6df75439de41c7a74b33409f8ff05aae3812f5b3fb816b5c834e2624579ba56bc47a659ac1a947f580f54daa5174b43d27"}}, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000540)={0x44, &(0x7f0000000200)={0x0, 0x0, 0x6a, "28793cf7677325379275d3131836735f5467eda25578a6635944c812d1495babf8fdf44e5a37b796d5a4d694916e67f5c60a9c5ad47c4b40e39179dc417273834193ae67d5845a2a61c0fa2569b86dc4f572857f18371fc2a4057f2eda188f0eecd9615f7dbfeaa0454b"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0xf, 0x65, 0x64, 0x60, 0x4, 0x9, 0x4, 0x7c4, 0x7, 0x9, 0xfffd, 0x7}}, &(0x7f0000000340)={0x20, 0x85, 0x4, 0x6}, &(0x7f0000000380)={0x20, 0x83, 0x2}, &(0x7f00000003c0)={0x20, 0x87, 0x2, 0x5}, &(0x7f0000000400)={0x20, 0x89, 0x2}}) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x18, &(0x7f0000000500)={0x0, 0xd, 0x1, '#'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000680)={0x14, &(0x7f0000000440)={0x40, 0x23, 0x27, {0x27, 0xc, "6e6be0b8b97b8113b569f82d669595dc01a93a9a5fbb29f70f14a14c6af3607d9333453712"}}, &(0x7f00000009c0)={0x0, 0x3, 0x8a, @string={0x8a, 0x3, "f0f0c425115fb1e9cfedabd9f11e87a9c8032e7e3d7ecdf68a215aef24a0db93ee3e4a4f850f39921146d7ba7301c0d3e105e2a155048b84a2e9d38fe55da5ab21b9b92e71b97b7d65dca56b087829df26e0eeeb78f08e11856edaf46c432eaffed6435ac79627c666fe5c631b49655d7dadb09d3cf80b608f753775696a206603f60f8fa2f073d9"}}}, &(0x7f0000000940)={0x44, &(0x7f00000006c0)={0x20, 0x8, 0x92, "d1a79f0e9afcb64f055fd939d250bcd7fd45883208d0bca4db5355d43871c4aec9e9ebf2532738c68c38c460ea00a5b3584ac7528f41efe7354234833af54d01c2ba98d651ca01c70233ba67d74ea045209f7b6bdb01feec8a9d3434ce77eb48cfb1b8b99298977fdcc4272daf86ed1c93d61e26c4aa72d4aa72206b29ce06ecb8abe52a6f7c9b34a0569a9f7cffb0ea9902"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000800)={0x20, 0x81, 0x2, "7a8f"}, &(0x7f0000000840)={0x20, 0x82, 0x3, "4c6eb1"}, &(0x7f0000000880)={0x20, 0x83, 0x1, "05"}, &(0x7f00000008c0)={0x20, 0x84, 0x3, "0d5d02"}, &(0x7f0000000900)={0x20, 0x85, 0x3, "d7e1a2"}}) 2.531860962s ago: executing program 1 (id=1872): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000000001010100000000000000cf994aa70308000340000000021c0010800800034000000006080001400000b308000140ffffffff00"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8000) (async) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="0815000000051104"], 0x1508}}, 0x10) writev(r0, &(0x7f00000016c0)=[{&(0x7f00000006c0)="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", 0x1000}], 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r2) (async) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/snmp\x00') r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x30, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) read$FUSE(r4, &(0x7f0000003d00)={0x2020}, 0xffffffc9) (async) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x100, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x4884) 2.046110832s ago: executing program 1 (id=1873): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000180)=0xffff7b6e, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000280)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'caif0\x00', @random="0100fe2010ff"}) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'caif0\x00', @random="0100fe2010ff"}) 1.963763021s ago: executing program 1 (id=1874): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000340)={0x3, r1, 0xfffffffa, 0xffffffff, 0xb, 0x1fd, 0x3}) 1.882818616s ago: executing program 1 (id=1875): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x3232, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x28, "", [{{0x9, 0x4, 0x0, 0xfe, 0x5, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x81, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0xc1}}}}}]}}]}}, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000300000064010102000000000000000000000000fc000000000000000000000000000000fffd0000000000000a0000040000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000002000000000000000000000000000ffffffffffffffefcb0000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000000ae0f00000000000001000403"], 0xfc}}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) listns(&(0x7f0000000000)={0x20, 0x0, 0x500b, 0x0, 0x0, 0x5}, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="2022280000002821c263138526792c3cbdeace918d0fb74237cc6e10060000e7"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xb9e) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f0000003cc0)="710fbdd8b5") (async, rerun: 64) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (rerun: 64) recvmmsg(r3, &(0x7f0000003b40)=[{{&(0x7f0000000100)=@phonet, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)=""/79, 0x4f}, {&(0x7f0000000200)=""/217, 0xd9}], 0x2, &(0x7f0000000340)=""/183, 0xb7}, 0x4}, {{&(0x7f0000000400)=@xdp, 0x80, &(0x7f0000000780)=[{&(0x7f0000000480)=""/100, 0x64}, {&(0x7f0000000500)=""/77, 0x4d}, {&(0x7f0000000580)}, {&(0x7f00000005c0)=""/172, 0xac}, {&(0x7f0000000680)=""/183, 0xb7}, {&(0x7f0000000740)=""/25, 0x19}], 0x6, &(0x7f0000000800)=""/68, 0x44}}, {{&(0x7f0000000880)=@tipc, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/67, 0x43}, {&(0x7f0000000980)=""/47, 0x2f}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/40, 0x28}, {&(0x7f0000001a00)=""/133, 0x85}, {&(0x7f0000001ac0)=""/53, 0x35}, {&(0x7f0000001b00)=""/157, 0x9d}, {&(0x7f0000001bc0)=""/239, 0xef}], 0x8, &(0x7f0000001d40)=""/190, 0xbe}, 0xfffffff4}, {{&(0x7f0000001e00)=@rc={0x1f, @none}, 0x80, &(0x7f00000032c0)=[{&(0x7f0000001e80)=""/75, 0x4b}, {&(0x7f0000001f00)=""/240, 0xf0}, {&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000003000)=""/148, 0x94}, {&(0x7f00000030c0)=""/91, 0x5b}, {&(0x7f0000003140)=""/203, 0xcb}, {&(0x7f0000003240)=""/105, 0x69}], 0x7, &(0x7f0000003340)=""/44, 0x2c}, 0x3}, {{&(0x7f0000003380), 0x80, &(0x7f00000039c0)=[{&(0x7f0000003400)=""/212, 0xd4}, {&(0x7f0000003500)=""/140, 0x8c}, {&(0x7f00000035c0)=""/92, 0x5c}, {&(0x7f0000003640)=""/118, 0x76}, {&(0x7f00000036c0)=""/123, 0x7b}, {&(0x7f0000003740)=""/174, 0xae}, {&(0x7f0000003800)=""/199, 0xc7}, {&(0x7f0000003900)=""/181, 0xb5}], 0x8, &(0x7f0000003a40)=""/239, 0xef}, 0x3}], 0x5, 0x2, &(0x7f0000003c80)={0x77359400}) 1.767635356s ago: executing program 3 (id=1876): openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_io_uring_setup(0x1dc7, &(0x7f0000000140)={0x0, 0xd5a8, 0x2, 0x1, 0x382}, 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_clone3(&(0x7f0000000340)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='attr/keycreate\x00') syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r0, r5, &(0x7f0000000400)={0x0, 0xf39b, 0x80, 0x3, 0xb0}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd5fb, 0x40800, 0x1, 0x31b, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7685, 0x800, 0x1, 0x3df, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa91c, 0x10, 0x1, 0x902c4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4bc6, 0x20, 0x2, 0x40021a, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x35, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r4, '\x00', {0x5, 0xa0b, 0x0, 0x0}}, 0x0) 1.629951566s ago: executing program 1 (id=1877): memfd_create(0x0, 0x6) syz_usb_connect$midi(0x3, 0xaa, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x499, 0x5006, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x98, 0x1, 0x1, 0x6, 0x90, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x6, 0x1, 0x3, 0x30, 0x0, [@midi_out_jack={0x7, 0x24, 0x3, 0x3, 0x0, 0x0, [], 0x1}], [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x0, 0xe, 0x8, {0x4}}}, {{0x9, 0x5, 0x1, 0xc, 0x400, 0x5, 0xc0, 0x22, {0x14, 0x25, 0x1, 0x10, "87f8b955c7f2d3e579a82b4b16a8f008"}}}, {{0x9, 0x5, 0x0, 0xc, 0x35d309e3f7dababa, 0x5, 0x10, 0x94, {0x12, 0x25, 0x1, 0xe, "1e6fababab29ce2ebc7039b9fee3"}}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x6, 0x2, 0x4, {0x6, 0x25, 0x1, 0x2, "78c5"}}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x4, 0x4, 0x7, {0xe, 0x25, 0x1, 0xa, "243782ad269f9b11e789"}}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x2, 0x93, 0x3, {0xb, 0x25, 0x1, 0x7, "b540c27d22949c"}}}]}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x9, 0x9, 0x0, 0x20, 0x7}, 0x96, &(0x7f0000000140)={0x5, 0xf, 0x96, 0x4, [@generic={0x7c, 0x10, 0x4, "7514079700d88cc17d110736f7dae56d4418d2bd53b28547434605ef342e50cd84fc6c6d0a551e267ea65d98766b0bd3eb46bfbd84cb7f3ecd595aa247916496ce78f8564d0b1566911d15222d7adee5a5bef5752d48b9c4530552dcf565764cace3b25b9a7cb522fff5c7a16b0dfadeae2b39fa60f6ba7e89"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x65, 0x7, 0x8, 0x9, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0xc, 0x10}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x441}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x3401}}, {0xbd, &(0x7f00000002c0)=@string={0xbd, 0x3, "2a71fa836488a00440f8bdfe5a80502708ac797d2fc266c555bbbed4d91268e50e0a4ea22ceb5d1f97bf2ef98f8e29f3a780aaa6a2b7a44b98f509e4c031c44df179fe443acb2289b3181de0c1a6ab1cf87b9561965215a41c15d9d5b2ccfbb5c4f61ce950a0c25c2b52ae7660b35f683ef04c93710ad42cbc8716f3c90a5ba080120bb27309aaf8094048e5629d545be56ced5d4ceded7458ede2c2b1fe871e33a4091d1c6c5a7d92ac7b8f8ee3fb7d7ddbdb6530fb65d3199103"}}]}) 1.181557724s ago: executing program 0 (id=1878): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='hybla', 0x5) shutdown(r0, 0x500000) 956.056615ms ago: executing program 0 (id=1879): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(anubis))\x00'}, 0x58) syz_usb_connect$uac2(0x2, 0x7b, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4d, &(0x7f0000000280)=@string={0x4d, 0x3, "79650894faee42bc78fb69d860f0e8a199eeb1089dba48ac99d5ac4a1dc8fb1278a08f654e0f4166aa6fe72513aaa159ebf475d23fcac2cba6bd705045c3e0c1d9a8ec396cd2302f7c199e"}}, {0x4b, &(0x7f0000000180)=@string={0x4b, 0x3, "25b43274939cb80520f8b5fd4aae6496c0d835c82214e1ed6d90c366269c0f1df89b5743ff45b7fe8ccc39750c63e02e3889f39faacb4aa41cf0db2bef0b8a8ed06b13fdd7daecdeae"}}]}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) writev(r1, &(0x7f0000002180)=[{&(0x7f00000010c0)="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", 0x1000}, {&(0x7f00000020c0)="f7fa9aa8682d97ea2b5fda7d1622f0b23b5bc7bdccd4c1b2144d04f0dbbe889281d42c621bc2ac07d4ee036634079fa3ae279917dd248cb0d0d9b33635f7dbcb1e6b2e96ffa8704cc02d2d83f0a000f3a97c4484df5506aa9358e75a849f41b9caf70ce90d572f2f10d986ccaf0dfbea50dbd379e7917751fb93552cc15c844ecb4ec24cc0ce45763f5d572a710632ade8855b8a5afaa00d5e4b3093", 0x9c}], 0x2) socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) socket$kcm(0x2, 0x5, 0x84) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0xfffffffe, 0x3, 0x1}, 0x10) sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r2], 0x20}}, 0x80) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x1c, r5, 0x301, 0x70bd2c, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2a881, 0x0) fallocate(r6, 0x0, 0x0, 0x7ffffffffffffff7) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000f80)=@newsa={0x10c, 0x1a, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x2, 0x0, 0xee00}, {@in6=@local, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x8, 0x94e, 0x7}, {0x40000, 0x1, 0xae7}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @replay_thresh={0x8, 0xb, 0xa6d0}]}, 0x10c}}, 0x4000084) 284.031842ms ago: executing program 3 (id=1880): bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008200122010009058103"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) 0s ago: executing program 1 (id=1881): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_dev$video(&(0x7f0000000180), 0x800000020000007, 0x22000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000003f00019f2cbd70000000000003"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f0000000040)={0x300, 0x8d, 0x8, '\x00', &(0x7f0000000000)=0xb}) getpeername$inet6(r0, 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r3, &(0x7f00000011c0)=ANY=[@ANYBLOB="ce16e92f61a7a9bacff737d43c5945f2f72bd0c91f454de0c2226dc62f6c4e0000000000000000005a451e644bacf1041f8f018f260ed2fdfe28b2bf550dc5d7e842726dd0c53472fbdb3afbffffff7a36ed2721fc8d8c3653734912fa36fce40eab2dce73273946f8fed2742e72e599c56ca11c5c40d461c9c504fdcd24c4707884dbe737993c552108efcca844d0399c6af47872b82c9d80236bebce2dcdc1a613c530479aae9e5cf8ee680536f9e15c0a1c381efb7a890da1bd17de73e9c95e72ea7937da20e431f5a93c9d8030fbcae7c523df28499c252193bd9bc8b1052a9ac6e0eae1a6a825b03a89de88123961b448191adb", @ANYRESHEX=r1, @ANYRES8=r3, @ANYRES32=r3, @ANYRESHEX=r1, @ANYRES32=r0], 0xb) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x4, 0x0, 0x3}, 0x57f66e71}}, 0x18) r4 = syz_open_dev$sndpcmc(&(0x7f0000000700), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r6 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r8 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="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", 0x1d1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r6, r7, r8}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) r9 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = epoll_create1(0x0) r12 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) write$UHID_INPUT(r12, &(0x7f0000000100)={0x8, {"a8b434e03057fce4f54f8fd1138cf4e62df00267b9ecf4c2b216a53894536728200e36845806b7e1fde4c2a48a70f8d1c1ed24ed6b0585c6eb33b27bbacf331ba963d7fe4cf3636603b0c6f2521073c2680ba78b1c9be85d0479f573bebf7a7ded160a336a062fa53818add9fbb8c05276ce970bc1e3163b8dfc441ecc3f9bc05a3adb3d6a2f058de3807ef7df93e1629670d641f1b7ed5eea6ef4a00e92a72ecc5d46d662b939795343914c4e2941cf364cbb111727a7370fd4cd9c8191aea5f3c58ec30db59dea99f9014e0533f5869c773e6addf36d5c8441d866d67609dcac8544a237b1457130e6b16f88e39aff4e94803125aff0e86f754f04c10424b6931aba3922a5314e875727c4b5b17679eb3f9be32638ed0ca94c24f7fcd8a44480e105eabb438e60a8e7988e805864ac42029a9bf51621fbdd8a0238f068b6d6327ded8af62d671dde881056f584ff917243988a2d4473bbe1c806f0e741090724ae03d611684fc3681d31da3440c6e010db6fe3f0cebcb7037b94ed43fdc30d3f9a382412aa8b54a69e53f7962f1ec49c9fe0947efcf53bef9f307b8051d4b43416dd3a0b11527b59d8359c9f607abab0a48d21d40023490e0d97bb61798357a074b9442495cc8dd3a3986cdf43fa871035aaff486aa30ab2384dedb8c87c77f5dec9b801f617e272875a736926a0121803529245eea27d988fb2b68cdef4c642cc41f792ff43c64c08a4a9c34c98c34b900e39eccfce1ceecb36db0e86c0e4735552cc7ad1a67c1864a3e662b333e4c914629a41c0c5510ba9edd891cb316006297d1c6dea7960ddadb2989e34d4ace4d168531a4238a0500cc728487eeca745a724c9e22a28680b70991a7cdb2736f72715bcc2062a02da0e55c52d9b69e7ee475fc8eaa7b0b99bc6201e5d3ccf84fa6388a3299771778758190dc7c94ac828739d2d87e263f9ecb692828bf3143dc0dba1fad5f36f56f54f4cf45c19de67d0bbd7f72703a65c61bce6927322cbf92538807a273ad0598917c265ab7b0354c2eb72152f4ef8868a31302c81992b12e7cb1fba70ee5502516728690511546c705fd9b54b7e67f6c12adb01dfcdae2a12fddd591e3a37529a19a5253a71f28b89da531cef89ba6715ef193b0e030c5d5cb1c030bfe72e2bbef0cb795d6b90e0690db79a4c8732f637bd1876bc2bcb7ff4865ba2cb5ed2e9d52cb2739dc2ea67c69f0a8af84b91c0f877d07ddabef7d7e6e18a4a01cf36d2b52f6795f22120a718fd12d1ff5066d3e9739cd61e9247abe989e255df0ba38d449eff108714130102e7ee7fd191b44fff98ae0f92c65bbd0cc0fecb72fa9d44c1f2a779c394fa38ebc4b2b26225b7d8732629803422faef43409ec8c6e4baaad7f5a92990372f0b945d5c9225b38f76f8dd0f5894ca3f9ff3a380f0112589e726baacb07e564e5f28c5062accc26aaedb8703c7c980cb0511fd80aeb66fc7760358e53d7b62244e9fcb4202eeebc70af63385856834f902c033d99c8692946c9f63ddd1038a7a013b266ac127d7caa1b31864359ffd7ea8e3bca0fc88ef04ca86ea73a454b1f10d4c367eeea20e241ef179d576c0358636f7d5d8f75ac7677f8b2e52de039aa36a2d39ae051ca84c4f375816c9482605e9bc7a975391c5a2727cd74c2da14ff24dd566a5503f596b813bf6379d445bc1f7d26a3b09c20a32055bc7c0f68d7e6da1643089e0f59b62a8b55a0c2455ebcbf260018074b88d2792e6c9ec561c9d09e836a2098870769d5670f71407665fbc2a6e1d01862a962a16cf11ebd622df92671391d007d3741e769eb83d38a492930f3bc9bfdb1e3b1860fe287b5fe1a8e89cc1e8f5a7b15ccb2832e9eb5960465c4a872046693dbe455022b89831006c89bbee334809ea7f191f9dcf905e6b2e9d62cd5be0dab07cda1c08db816a46f46aee07bd71eb7befe5c6f462ec537203dc030b2a8f9d28d961bf38969f10e7b2c10f104af1c781142e7d6fa56961e20ff8001ced696ded4bd40a4003d27435d8066ff77314e4dac4bbda2f954d08586ccfe6d4310970ae124240adee6ad4602fc38796ddf4345453ca2a7c2c449ab585555383ef7b8bb02c6d18d81df0ff457593e4ef72d280c51e60110582a00be86449f27218f7e9931404e1f56f079c1b7960be125d9cd318dfe62aae7e217d9d7e9c9e28115c420170b9e068453201cd9fcb7fd3ed7b2101d6138c8627a8af81db972bdc5fb1bb8b6c06a21edc137b908f51f0a8e4b26c1ccc353d2e31112dfb400c7d5e6e235a2e74673fda4a800eb5ba8ec527d386ad9c1b2bb6a30ba34bea12fa7bec876b275b4266e81fda9f67b597527bcf4d2c7e88efe357f2be1b0745e1b48143eae678591580cee14c776dec5c11342686af9045b8ec8723a4387272b481ea2b976f9dd3df8e42c5a33aa1b94a791b1d531fab7fd33134ba83642a0ae666ba5c6fd54efbbcd35658cf0b483559f0838c32f59733fc7ca471efe738264b5f4f5e86c664466790dde851b0415adbb11e5917683742ff9540d82c0c4cf7dd7133284d665fde4ae442f16f75affb0a1f00ceb1f152dd64196e3b756987ec99912b80546134ae2968f956737ec54d8bc3cdcee5e8213229c3769a33e37adb4cb9c00eaa6add0247e3044f1908330d8ea81f0e2f76f7cf4dea05f8178225a148c9c98ee6afa4e8b57b29de1e6b84f3d3aebb64e22f1d84266b99d20a33ffae12e2d99c15b7693dcd4006108bf01c74ce9ca3b48cf3d1f772341e9e71abe29c89bedf8f0760600d20d5f463a50f7f67dca288a89d83eb8cb8a683a4b2f7ada4954e8545acf04784e09269cb59934cdccbf676054e365662293a42fbc231ed572e590c71f69fe2e20707bca743631c112dba56c3736ba1280242c072365a08ae2ac2864f628817498540422e43006d7cba6408111c81bbb3a874616e360a2b34515ea3f0493ca17e4b7df28c2b75affd807d809d53d526530f3a6e7cf67e6729967d35e6c6cf7c35370bb8e6a2cffff33c0bcc1eab7d83bce97192837196a6b1aa2cd0306a727768882e534b2b184fc46cc89cb60a08b17bfc42025187cded5f8afe8b1b159ebb8a8ac98a75e686c38f00028abd4f82d335720b6e3821b8ec5d804bfb12d8e621465eb20f681e80609c2a4ee6b315b4fd7b38d6780006f0f99261588f0f13c5de2df3a0c55e4319ac44f7111dd2722b783768388528e761d82d914d3960ecc6906be3f71b8e722f1d4a69627f932086e59bcf8f2b61e0b5d6d19217e6ed33113e81b7440764add714532845dfd96e0d07ea7abafac6936d0b53e275c177e66b7c7786ffcd30797e3f8424d4ebd5e5e1709efaf0eee273649bfa5cd0dc0763b71b8ee4ec23c02c38d942dbb4d64d4ffd117bcb77e4e4f3eec7dc646f3319840a5bcea02b6301f82091b0d1abfa8222bd50dc81f769c9b5b205e8569848f1173fb6dae3f69875cf4c1b782358cd710437d0e44d0063bd5860611049c11134282c851b18775b884155c67a059f5a2a88cfb56f3163aa26eb4422a966f3ddcc63ba9cb2f762b4966c8ae4cd411dbc713e314904998c73d09143c8be26d0ae3389db6846776e49101803d6a7ca3502c554bebd03a001958d3a55cca60948f286f481930570c4f2d0705f1db2731bc083711e9df6273be8b95b5a7caaa1ad8b8cc9b692e87de4855459e04ad649587b0fae3ccea6b1c9fb906167d66edd3145e175c8c478a6b79831469076c9b5b293507305e01ed0a45f591a35e60305610439d5664797bb0ea627e5606a82416c81509a40bd04420199990b2354e30f759b44bfc43b9b597483943f64b08666d7369bc63e92c61552728ff33675b1f5593e9340806d08f005e7058c58539d1b15dfbcb2ace86e8caafbcc1ee70670a6d6d0c49c00373e9d85afd63f3b088f7102a9e8d4143599f4f9b33b6459ea6fcccc39d20ff9bbd3cd2301595755d2c9c1b18efdb55d11db52e6a76bc9046056f3c547daac76051bb5b06ab40d9af2f6f5effc083af1fdccdbe9c5f8c16af17e0a032bd4494f4c9197ed992cd3089f73bcbe7ffdb742edfa21020c6cb6320edb2482b967d53ea8b19dcc586ebf7fb13fd15cc566685b639307d11978e71c6109e19ca0c761b1869762d8090c312f880e49e43b7346dc51c152b6d43a94f0b34df702e468bb17b74404103213184ba779b7fa4b80263062368b4757f6f9db5f0c5642df9a53e2cc76b239129ec7cc795066cca68d9052fc387fd4eadaf45434b80d4f2e64c70e7a8899efacf3ecb098d81ca158f282ecddb935064f648845245f27b9f4c1278bee198f8d6e83877fd10dc8993e3e09e0de09d431e15ab9b8651c8ad3e6b7293a782a52ad6fe8c0907f66f64df0d0aa61e5367f60d655f82f4458ead2bb5fc3d7a4f42e90803183a637329cc7756a059254e51d0abd2a709cc7c5446af108d9208965696b1325708cd9d91126480d25934149b3335a92c38c25ba88c3e2b9e7fc61d458faa289d804ced524a12011e5ffa8add24b926467aed929bcd4700429d8c5cfa5d70b2d1adec7fca5721292a589bd680dffa0947aeeba85aafddcc048eaa808ed24799d876fa414bfea92529f33009d1b12932dd4aecf7eb26a057bf4d7eab84626fbcf3a5fd675258f9fc9a48513bd8a3389b8174093a74db7e618b6bd88362eb99b8ec838cb8a365d55bb00ba51036b011c62bafd31c766062c7ebe77e8cf0fbb376eb20d5681316a90996311a805d54d798dcfc700253cc6128cd0e29f83bc2e36159101beb55b93bb9073f87098eee2cbe58a6e1504ffd6998464c16522091f64147f42658976d267a765ebfbdb4c10d6dd2ad0e3cc9e5801f4842aaef7f91de8672cb6821aaa84cc1dabe5c93cbd1df363f4ca83d9d84f75696131903f9b6c77666d062295e83bd2284717d3e6d2b244c16029baec7f5fdae8d04e3b5b35656d60132c2e8be16f63441cac7eb0da069c61b9e87885b060b1f30325ca6376241fc45c5cbd1863edde4c5846993c6e1b6090c0edacce7809f75ae15cc917cdbc46a104bfba4ba298380c4819f4147e85b0956a274522cc16f8a89dcd31043c7da0e32e334e97940d94bdd1bbb068a3f9952bc2e6c663d060cf57a7dd9a42f48141653e689f1dc695b99479ad9cd5890b92bf5bb560e66f4f55e31b6111ff255c6553655c7bdd9d3d14a36542ca3a53eb791ecde55ff05c5c8990e2de154e88bbf9976da937d91a8e28ab5669612e57d073e097700e6ced66e38ff44fd9f7cd3e4e76092cfd20a04db97afbb517ae4a5896e70234cc66ffda44ac48d07d3c51e5d7b44d3902cb12c86d007b1297ee8f8ff731ec39e7b64ec4294b417d80d6aa7c90756688be9d26d07196f2acd39dae08898673358679edd4f207241d153f1479497b6f88ea52418b9c9ce49fc5d7176e51c18fbe4464487f5980f7f122e138f82337040e3c040c5e6897db9e6a4c16cfab7492feb200029a888895bb73f68f9fc9cf8b985cecf26f2974ddbb9a24757d3a59a6d10fecd4adad705101e4ca8e259a5bf8263f9743c50a569d6d657d0142bf1f519624e2e4c9bcd31a4e11d9f58a592b2c2367905becf5eda18be3eb9b0249c95e6ece73a02c1bf98ef5ec1d5c8ee604e255266a00a8f6578765e7c8da9923d9e41f30fcf73ad21d3c61d721cdaf6d162a68bd43396782aa9744abc94d28c302853106a12414bcf12b2a09910b77f724e76f54913b1ae1d4300aba3ef49ddf853fea6196ed9b39d3c883eb6e09256ef68c96cb6fb5c0fc", 0x1000}}, 0x1006) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f0000000100)={0x20000014}) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r9, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000980)=[{r11, 0x1}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000140)) ioctl$SNAPSHOT_FREE(r5, 0x3305) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r4, 0xc0884123, &(0x7f0000000000)={0x3, "d2aefdb14d09fb455d1ce5e865fc7f06f0eaa0be6fddc131531b47c610659aa02898fc78fd5b8d5a77c4f304ae1a4bbec0217d51a5dc2e634a8c686c998a6f15", {0x5, 0x80000001}}) kernel console output (not intermixed with test programs): [ T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.523375][ T37] usb 4-1: Product: syz [ 331.523392][ T37] usb 4-1: Manufacturer: syz [ 331.523409][ T37] usb 4-1: SerialNumber: syz [ 331.619326][ T37] usb 4-1: config 0 descriptor?? [ 331.640391][ T37] option 4-1:0.115: GSM modem (1-port) converter detected [ 331.834599][ T37] usb 4-1: USB disconnect, device number 40 [ 331.867428][ T37] option 4-1:0.115: device disconnected [ 332.045162][ T5767] hid_parser_main: 363 callbacks suppressed [ 332.045185][ T5767] evision 0003:320F:5041.0008: unknown main item tag 0x0 [ 332.045208][ T5767] evision 0003:320F:5041.0008: unknown main item tag 0x0 [ 332.045250][ T5767] evision 0003:320F:5041.0008: unknown main item tag 0x0 [ 332.045279][ T5767] evision 0003:320F:5041.0008: unknown main item tag 0x0 [ 332.045307][ T5767] evision 0003:320F:5041.0008: unknown main item tag 0x0 [ 332.045334][ T5767] evision 0003:320F:5041.0008: unknown main item tag 0x0 [ 332.045361][ T5767] evision 0003:320F:5041.0008: unknown main item tag 0x0 [ 332.045389][ T5767] evision 0003:320F:5041.0008: unknown main item tag 0x0 [ 332.045422][ T5767] evision 0003:320F:5041.0008: unknown main item tag 0x0 [ 332.045441][ T5767] evision 0003:320F:5041.0008: unknown main item tag 0x0 [ 332.047133][ T5767] evision 0003:320F:5041.0008: reserved main item tag 0xe [ 332.150318][ T5767] evision 0003:320F:5041.0008: hidraw0: USB HID v0.81 Device [HID 320f:5041] on usb-dummy_hcd.1-1/input0 [ 332.283965][ T5795] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 332.433852][ T5795] usb 3-1: Using ep0 maxpacket: 32 [ 332.441721][ T5795] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 332.441763][ T5795] usb 3-1: config 0 has no interface number 0 [ 332.441834][ T5795] usb 3-1: config 0 interface 12 has no altsetting 0 [ 332.467805][ T5795] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 332.467843][ T5795] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.467866][ T5795] usb 3-1: Product: syz [ 332.467930][ T5795] usb 3-1: Manufacturer: syz [ 332.467948][ T5795] usb 3-1: SerialNumber: syz [ 332.526665][ T5795] usb 3-1: config 0 descriptor?? [ 332.803859][ T5726] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 332.853871][ T37] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 332.963924][ T5726] usb 4-1: Using ep0 maxpacket: 8 [ 332.967553][ T5726] usb 4-1: unable to get BOS descriptor or descriptor too short [ 332.969263][ T5726] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 332.972323][ T5726] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40 [ 332.972357][ T5726] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.972381][ T5726] usb 4-1: Product: syz [ 332.972398][ T5726] usb 4-1: Manufacturer: syz [ 332.972415][ T5726] usb 4-1: SerialNumber: syz [ 333.003811][ T37] usb 1-1: Using ep0 maxpacket: 8 [ 333.041229][ T37] usb 1-1: unable to get BOS descriptor or descriptor too short [ 333.066343][ T37] usb 1-1: New USB device found, idVendor=0e41, idProduct=4244, bcdDevice= 0.40 [ 333.066379][ T37] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.066404][ T37] usb 1-1: Product: ș槌樻漝楅꿥ퟆ௎켎廷㾆ᓸ㒯汰哬溑㕕禁퇴ᐁߣ⟣ᕅ᠑沓輫瓆犯憋蔭 [ 333.066426][ T37] usb 1-1: Manufacturer: 贠⼸쪣顜앳볟㖚ꥬ늤狿腷窇뾗啖惩쵴朚鏣첇豵彁蜏꺇麎ˠ东ຑꄉ핊揚ힾ⍴须嫵윛䕑桞汋豈鱽ᝠଽゝ汆콑矑邬陰䗇꒿᭗葁ㅓ㡔 [ 333.066452][ T37] usb 1-1: SerialNumber: ꂝ瞽鹡⡳尘鷴審鸦眝恾⨎裑쭐 [ 333.407110][ T37] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 333.407180][ T37] usb 1-1: MIDIStreaming interface descriptor not found [ 333.529968][ T5726] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 333.550160][ T37] usb 1-1: USB disconnect, device number 75 [ 333.635679][ T5726] usb 4-1: cannot setup if 2: error -71 [ 333.703341][ T5726] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 333.721625][ T5726] usb 4-1: USB disconnect, device number 41 [ 333.780298][ T5816] udevd[5816]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 334.111886][ T5795] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 334.111958][ T5795] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 334.111979][ T5795] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 334.112075][ T5795] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 334.180675][ T5930] udevd[5930]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 334.248767][ T10] usb 2-1: USB disconnect, device number 69 [ 334.362486][ T5795] usb 3-1: USB disconnect, device number 65 [ 334.487660][ T4930] Bluetooth: hci4: command tx timeout [ 334.754099][ T10] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 334.916180][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 334.916235][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 334.916266][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.976339][ T10] usb 2-1: config 0 descriptor?? [ 335.011669][ T10] smsusb:smsusb_probe: board id=8, interface number 0 [ 335.011732][ T10] smsusb:smsusb_probe: Device initialized with return code -19 [ 335.120194][ T9617] FAULT_INJECTION: forcing a failure. [ 335.120194][ T9617] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 335.120225][ T9617] CPU: 0 UID: 0 PID: 9617 Comm: syz.0.1460 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 335.120250][ T9617] Tainted: [L]=SOFTLOCKUP [ 335.120256][ T9617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 335.120267][ T9617] Call Trace: [ 335.120273][ T9617] [ 335.120281][ T9617] dump_stack_lvl+0xe8/0x150 [ 335.120305][ T9617] should_fail_ex+0x46b/0x600 [ 335.120335][ T9617] _copy_from_iter+0x1d3/0x1670 [ 335.120359][ T9617] ? trace_kmem_cache_alloc+0x29/0xe0 [ 335.120378][ T9617] ? __alloc_skb+0x27d/0x7d0 [ 335.120401][ T9617] ? __pfx__copy_from_iter+0x10/0x10 [ 335.120416][ T9617] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 335.120436][ T9617] ? __alloc_skb+0x27d/0x7d0 [ 335.120462][ T9617] ? netlink_sendmsg+0x650/0xb40 [ 335.120478][ T9617] ? skb_put+0x11b/0x210 [ 335.120503][ T9617] netlink_sendmsg+0x6c0/0xb40 [ 335.120529][ T9617] ? __pfx_netlink_sendmsg+0x10/0x10 [ 335.120547][ T9617] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 335.120571][ T9617] ? aa_sock_msg_perm+0x122/0x200 [ 335.120590][ T9617] ? __pfx_netlink_sendmsg+0x10/0x10 [ 335.120605][ T9617] sock_sendmsg_nosec+0x13a/0x180 [ 335.120627][ T9617] ____sys_sendmsg+0x55c/0x870 [ 335.120658][ T9617] ? __pfx_____sys_sendmsg+0x10/0x10 [ 335.120690][ T9617] ? import_iovec+0x73/0xa0 [ 335.120711][ T9617] ___sys_sendmsg+0x2a5/0x360 [ 335.120736][ T9617] ? __lock_acquire+0x6b5/0x2d10 [ 335.120759][ T9617] ? __pfx____sys_sendmsg+0x10/0x10 [ 335.120810][ T9617] ? __fget_files+0x2a/0x420 [ 335.120829][ T9617] ? __fget_files+0x3a6/0x420 [ 335.120856][ T9617] __x64_sys_sendmsg+0x1c3/0x2a0 [ 335.120884][ T9617] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 335.120918][ T9617] ? __pfx_ksys_write+0x10/0x10 [ 335.120947][ T9617] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.120965][ T9617] do_syscall_64+0x174/0x580 [ 335.120991][ T9617] ? trace_irq_disable+0x3b/0x140 [ 335.121017][ T9617] ? clear_bhb_loop+0x40/0x90 [ 335.121037][ T9617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.121054][ T9617] RIP: 0033:0x7fbe5905ce59 [ 335.121070][ T9617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.121085][ T9617] RSP: 002b:00007fbe572ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 335.121103][ T9617] RAX: ffffffffffffffda RBX: 00007fbe592d5fa0 RCX: 00007fbe5905ce59 [ 335.121116][ T9617] RDX: 0000000004000914 RSI: 000020000000c2c0 RDI: 0000000000000005 [ 335.121127][ T9617] RBP: 00007fbe572ae090 R08: 0000000000000000 R09: 0000000000000000 [ 335.121137][ T9617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.121147][ T9617] R13: 00007fbe592d6038 R14: 00007fbe592d5fa0 R15: 00007ffec9c75f18 [ 335.121171][ T9617] [ 335.454953][ T10] usb 2-1: USB disconnect, device number 70 [ 335.814194][ T37] usb 1-1: new low-speed USB device number 76 using dummy_hcd [ 336.417892][ T9650] FAULT_INJECTION: forcing a failure. [ 336.417892][ T9650] name failslab, interval 1, probability 0, space 0, times 0 [ 336.417937][ T9650] CPU: 0 UID: 0 PID: 9650 Comm: syz.1.1474 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 336.417981][ T9650] Tainted: [L]=SOFTLOCKUP [ 336.417991][ T9650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 336.418006][ T9650] Call Trace: [ 336.418016][ T9650] [ 336.418026][ T9650] dump_stack_lvl+0xe8/0x150 [ 336.418059][ T9650] should_fail_ex+0x46b/0x600 [ 336.418099][ T9650] should_failslab+0xa8/0x100 [ 336.418131][ T9650] __kvmalloc_node_noprof+0x170/0x8e0 [ 336.418165][ T9650] ? io_ring_ctx_alloc+0x1d1/0xd20 [ 336.418208][ T9650] io_ring_ctx_alloc+0x1d1/0xd20 [ 336.418249][ T9650] io_uring_create+0x50/0x9a0 [ 336.418328][ T9650] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 336.418366][ T9650] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 336.418395][ T9650] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 336.418445][ T9650] ? __pfx_ksys_write+0x10/0x10 [ 336.418487][ T9650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.418514][ T9650] do_syscall_64+0x174/0x580 [ 336.418548][ T9650] ? trace_irq_disable+0x3b/0x140 [ 336.418575][ T9650] ? clear_bhb_loop+0x40/0x90 [ 336.418603][ T9650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.418626][ T9650] RIP: 0033:0x7fd30373ce59 [ 336.418648][ T9650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.418669][ T9650] RSP: 002b:00007fd30196cee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 336.418695][ T9650] RAX: ffffffffffffffda RBX: 0000200000000d48 RCX: 00007fd30373ce59 [ 336.418713][ T9650] RDX: 0000200000000dc8 RSI: 0000200000000d48 RDI: 000000000000001c [ 336.418730][ T9650] RBP: 0000200000000d40 R08: 0000200000001540 R09: 0000000000000000 [ 336.418746][ T9650] R10: 0000200000000dd0 R11: 0000000000000206 R12: 0000200000000dc8 [ 336.418761][ T9650] R13: 0000200000000dd0 R14: 00007fd30196cfd8 R15: 0000000000000000 [ 336.418796][ T9650] [ 337.663878][ T10] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 337.833928][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 337.860096][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.860137][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.860181][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 337.860210][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.928891][ T10] usb 2-1: config 0 descriptor?? [ 337.963973][ T10] hub 2-1:0.0: USB hub found [ 338.158619][ T10] hub 2-1:0.0: 1 port detected [ 338.343009][ T9689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1491'. [ 338.359529][ T10] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 338.359559][ T10] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 338.411455][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 338.411590][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 338.456970][ T10] usb 2-1: USB disconnect, device number 71 [ 338.501931][ T9693] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 338.587931][ T9693] cramfs: wrong magic [ 338.620578][ T37] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 338.620615][ T37] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 338.652318][ T37] usb 1-1: config 0 descriptor?? [ 338.652938][ T37] usb 1-1: can't set config #0, error -71 [ 338.671167][ T37] usb 1-1: USB disconnect, device number 76 [ 339.173854][ T37] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 339.194529][ T5795] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 339.327851][ T37] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 339.327906][ T37] usb 1-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 339.327934][ T37] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.337321][ T37] usb 1-1: config 0 descriptor?? [ 339.358789][ T5795] usb 2-1: Using ep0 maxpacket: 16 [ 339.378262][ T5795] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 339.378300][ T5795] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 339.381477][ T5795] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 339.381509][ T5795] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.381531][ T5795] usb 2-1: Product: syz [ 339.381547][ T5795] usb 2-1: Manufacturer: syz [ 339.381564][ T5795] usb 2-1: SerialNumber: syz [ 339.429781][ T10] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 339.446615][ T5795] usb 2-1: config 0 descriptor?? [ 339.456176][ T37] smsusb:smsusb_probe: board id=8, interface number 0 [ 339.456278][ T37] smsusb:smsusb_probe: Device initialized with return code -19 [ 339.489937][ T5795] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 339.489976][ T5795] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 339.599610][ T10] usb 4-1: config index 0 descriptor too short (expected 12336, got 441) [ 339.599633][ T10] usb 4-1: config 48 has too many interfaces: 48, using maximum allowed: 32 [ 339.599650][ T10] usb 4-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 339.599664][ T10] usb 4-1: config 48 has 0 interfaces, different from the descriptor's value: 48 [ 339.600212][ T10] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 339.600232][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.692746][ T37] usb 1-1: USB disconnect, device number 77 [ 340.092764][ T5795] em28xx 2-1:0.0: unknown em28xx chip ID (40) [ 340.139761][ T10] usb 4-1: language id specifier not provided by device, defaulting to English [ 340.343972][ T5795] em28xx 2-1:0.0: Config register raw data: 0xd1 [ 340.364155][ T10] usb 4-1: USB disconnect, device number 42 [ 340.492069][ T9745] FAULT_INJECTION: forcing a failure. [ 340.492069][ T9745] name failslab, interval 1, probability 0, space 0, times 0 [ 340.492115][ T9745] CPU: 0 UID: 0 PID: 9745 Comm: syz.2.1516 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 340.492154][ T9745] Tainted: [L]=SOFTLOCKUP [ 340.492164][ T9745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 340.492180][ T9745] Call Trace: [ 340.492190][ T9745] [ 340.492200][ T9745] dump_stack_lvl+0xe8/0x150 [ 340.492237][ T9745] should_fail_ex+0x46b/0x600 [ 340.492280][ T9745] should_failslab+0xa8/0x100 [ 340.492314][ T9745] __kmalloc_noprof+0xdf/0x7b0 [ 340.492344][ T9745] ? tomoyo_encode+0x28b/0x550 [ 340.492390][ T9745] tomoyo_encode+0x28b/0x550 [ 340.492423][ T9745] tomoyo_realpath_from_path+0x58d/0x5d0 [ 340.492464][ T9745] ? tomoyo_path_number_perm+0x219/0x630 [ 340.492502][ T9745] tomoyo_path_number_perm+0x246/0x630 [ 340.492543][ T9745] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 340.492580][ T9745] ? __lock_acquire+0x6b5/0x2d10 [ 340.492623][ T9745] ? do_raw_spin_lock+0x12b/0x2f0 [ 340.492684][ T9745] ? __fget_files+0x2a/0x420 [ 340.492718][ T9745] ? __fget_files+0x2a/0x420 [ 340.492746][ T9745] ? __fget_files+0x3a6/0x420 [ 340.492773][ T9745] ? __fget_files+0x2a/0x420 [ 340.492808][ T9745] security_file_ioctl+0xc3/0x2a0 [ 340.492847][ T9745] __se_sys_ioctl+0x47/0x170 [ 340.492883][ T9745] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.492910][ T9745] do_syscall_64+0x174/0x580 [ 340.492947][ T9745] ? trace_irq_disable+0x3b/0x140 [ 340.492975][ T9745] ? clear_bhb_loop+0x40/0x90 [ 340.493006][ T9745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.493031][ T9745] RIP: 0033:0x7ff5634ace59 [ 340.493054][ T9745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.493075][ T9745] RSP: 002b:00007ff5616fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 340.493102][ T9745] RAX: ffffffffffffffda RBX: 00007ff563725fa0 RCX: 00007ff5634ace59 [ 340.493120][ T9745] RDX: 0000000000000003 RSI: 0000000000003b65 RDI: 0000000000000003 [ 340.493135][ T9745] RBP: 00007ff5616fe090 R08: 0000000000000000 R09: 0000000000000000 [ 340.493151][ T9745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.493167][ T9745] R13: 00007ff563726038 R14: 00007ff563725fa0 R15: 00007ffd2ef731c8 [ 340.493205][ T9745] [ 340.493324][ T9745] ERROR: Out of memory at tomoyo_realpath_from_path. [ 340.806719][ T5795] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 340.806760][ T5795] em28xx 2-1:0.0: No AC97 audio processor [ 340.846177][ T5795] usb 2-1: USB disconnect, device number 72 [ 340.851802][ T5795] em28xx 2-1:0.0: Disconnecting em28xx [ 341.242237][ T5795] em28xx 2-1:0.0: Freeing device [ 341.563405][ T9775] FAULT_INJECTION: forcing a failure. [ 341.563405][ T9775] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 341.563437][ T9775] CPU: 0 UID: 0 PID: 9775 Comm: syz.2.1529 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 341.563461][ T9775] Tainted: [L]=SOFTLOCKUP [ 341.563467][ T9775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 341.563478][ T9775] Call Trace: [ 341.563485][ T9775] [ 341.563492][ T9775] dump_stack_lvl+0xe8/0x150 [ 341.563518][ T9775] should_fail_ex+0x46b/0x600 [ 341.563547][ T9775] _copy_from_user+0x2d/0xb0 [ 341.563567][ T9775] load_msg+0x1fa/0x3b0 [ 341.563606][ T9775] do_msgsnd+0x1a9/0x1540 [ 341.563633][ T9775] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 341.563659][ T9775] ? rt_mutex_slowunlock+0x1cb/0x300 [ 341.563722][ T9775] ? __might_fault+0xaf/0x130 [ 341.563751][ T9775] ? __might_fault+0xaf/0x130 [ 341.563782][ T9775] ? __pfx_do_msgsnd+0x10/0x10 [ 341.563813][ T9775] ? __might_fault+0xaf/0x130 [ 341.563849][ T9775] ? __x64_sys_msgsnd+0xee/0x120 [ 341.563879][ T9775] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.563903][ T9775] do_syscall_64+0x174/0x580 [ 341.563936][ T9775] ? trace_irq_disable+0x3b/0x140 [ 341.563963][ T9775] ? clear_bhb_loop+0x40/0x90 [ 341.563990][ T9775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.564014][ T9775] RIP: 0033:0x7ff5634ace59 [ 341.564035][ T9775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.564055][ T9775] RSP: 002b:00007ff5616fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000045 [ 341.564079][ T9775] RAX: ffffffffffffffda RBX: 00007ff563725fa0 RCX: 00007ff5634ace59 [ 341.564096][ T9775] RDX: 0000000000002000 RSI: 0000200000000480 RDI: 0000000000000000 [ 341.564112][ T9775] RBP: 00007ff5616fe090 R08: 0000000000000000 R09: 0000000000000000 [ 341.564127][ T9775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.564142][ T9775] R13: 00007ff563726038 R14: 00007ff563725fa0 R15: 00007ffd2ef731c8 [ 341.564176][ T9775] [ 341.573884][ T5603] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 341.764026][ T5603] usb 4-1: Using ep0 maxpacket: 32 [ 341.820756][ T5795] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 341.837085][ T5603] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.837128][ T5603] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.837159][ T5603] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 341.837178][ T5603] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.841480][ T5603] usb 4-1: config 0 descriptor?? [ 341.874682][ T5603] hub 4-1:0.0: USB hub found [ 341.983928][ T5795] usb 2-1: device descriptor read/64, error -71 [ 342.046230][ T5603] hub 4-1:0.0: 1 port detected [ 342.244203][ T5795] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 342.249210][ T5603] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 342.249239][ T5603] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 342.270127][ T5718] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 342.284394][ T5603] usbhid 4-1:0.0: can't add hid device: -71 [ 342.284755][ T5603] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 342.335317][ T5603] usb 4-1: USB disconnect, device number 43 [ 342.404108][ T5795] usb 2-1: device descriptor read/64, error -71 [ 342.457166][ T5718] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 342.457217][ T5718] usb 1-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 342.457246][ T5718] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.492822][ T5718] usb 1-1: config 0 descriptor?? [ 342.509251][ T5718] smsusb:smsusb_probe: board id=8, interface number 0 [ 342.509341][ T5718] smsusb:smsusb_probe: Device initialized with return code -19 [ 342.526906][ T5795] usb usb2-port1: attempt power cycle [ 342.708648][ T5718] usb 1-1: USB disconnect, device number 78 [ 342.889285][ T5795] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 342.905123][ T5795] usb 2-1: device descriptor read/8, error -71 [ 342.962798][ T9810] FAULT_INJECTION: forcing a failure. [ 342.962798][ T9810] name failslab, interval 1, probability 0, space 0, times 0 [ 342.962829][ T9810] CPU: 0 UID: 0 PID: 9810 Comm: syz.2.1546 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 342.962853][ T9810] Tainted: [L]=SOFTLOCKUP [ 342.962859][ T9810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 342.962870][ T9810] Call Trace: [ 342.962876][ T9810] [ 342.962884][ T9810] dump_stack_lvl+0xe8/0x150 [ 342.962908][ T9810] should_fail_ex+0x46b/0x600 [ 342.962937][ T9810] should_failslab+0xa8/0x100 [ 342.962961][ T9810] __kmalloc_cache_noprof+0x84/0x690 [ 342.962983][ T9810] ? sctp_association_new+0x89/0x25e0 [ 342.963004][ T9810] sctp_association_new+0x89/0x25e0 [ 342.963031][ T9810] sctp_connect_new_asoc+0x2e4/0x6b0 [ 342.963051][ T9810] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 342.963069][ T9810] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 342.963086][ T9810] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 342.963101][ T9810] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 342.963118][ T9810] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 342.963142][ T9810] ? security_sctp_bind_connect+0x7e/0x2c0 [ 342.963169][ T9810] sctp_sendmsg+0x14f2/0x29b0 [ 342.963206][ T9810] ? __pfx_sctp_sendmsg+0x10/0x10 [ 342.963239][ T9810] ? aa_sk_perm+0x703/0x950 [ 342.963261][ T9810] ? __pfx_aa_sk_perm+0x10/0x10 [ 342.963285][ T9810] ? sock_rps_record_flow+0x19/0x350 [ 342.963309][ T9810] ? inet_sendmsg+0x2f4/0x370 [ 342.963329][ T9810] ? aa_sock_msg_perm+0x122/0x200 [ 342.963348][ T9810] ? __pfx_inet_sendmsg+0x10/0x10 [ 342.963397][ T9810] sock_sendmsg_nosec+0x10e/0x180 [ 342.963429][ T9810] __sys_sendto+0x402/0x590 [ 342.963485][ T9810] ? __pfx___sys_sendto+0x10/0x10 [ 342.963549][ T9810] ? ksys_write+0x248/0x270 [ 342.963576][ T9810] ? __pfx_ksys_write+0x10/0x10 [ 342.963602][ T9810] __x64_sys_sendto+0xde/0x100 [ 342.963627][ T9810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.963645][ T9810] do_syscall_64+0x174/0x580 [ 342.963689][ T9810] ? trace_irq_disable+0x3b/0x140 [ 342.963715][ T9810] ? clear_bhb_loop+0x40/0x90 [ 342.963744][ T9810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.963767][ T9810] RIP: 0033:0x7ff5634ace59 [ 342.963788][ T9810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.963807][ T9810] RSP: 002b:00007ff5616fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 342.963830][ T9810] RAX: ffffffffffffffda RBX: 00007ff563725fa0 RCX: 00007ff5634ace59 [ 342.963848][ T9810] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 342.963863][ T9810] RBP: 00007ff5616fe090 R08: 000020000005ffe4 R09: 000000000000001c [ 342.963879][ T9810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.963893][ T9810] R13: 00007ff563726038 R14: 00007ff563725fa0 R15: 00007ffd2ef731c8 [ 342.963929][ T9810] [ 343.094345][ T5603] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 343.146607][ T5795] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 343.166474][ T5795] usb 2-1: device descriptor read/8, error -71 [ 343.275845][ T5603] usb 4-1: Using ep0 maxpacket: 16 [ 343.298360][ T5795] usb usb2-port1: unable to enumerate USB device [ 343.320109][ T5603] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 343.320148][ T5603] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 343.366036][ T5603] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 343.366072][ T5603] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.366095][ T5603] usb 4-1: Product: syz [ 343.366113][ T5603] usb 4-1: Manufacturer: syz [ 343.366130][ T5603] usb 4-1: SerialNumber: syz [ 343.418005][ T5603] usb 4-1: config 0 descriptor?? [ 343.446730][ T5603] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 343.446773][ T5603] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 343.497204][ T9814] hugetlbfs: syz.0.1549 (9814): Using mlock ulimits for SHM_HUGETLB is obsolete [ 343.915668][ T37] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 344.041553][ T5603] em28xx 4-1:0.0: unknown em28xx chip ID (40) [ 344.062236][ T37] usb 1-1: Using ep0 maxpacket: 8 [ 344.078952][ T37] usb 1-1: unable to get BOS descriptor or descriptor too short [ 344.097758][ T37] usb 1-1: New USB device found, idVendor=0e41, idProduct=4244, bcdDevice= 0.40 [ 344.097795][ T37] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.097838][ T37] usb 1-1: Product: syz [ 344.097874][ T37] usb 1-1: Manufacturer: 贠⼸쪣顜앳볟㖚ꥬ늤狿腷窇뾗啖惩쵴朚鏣첇豵彁蜏꺇麎ˠ东ຑꄉ핊揚ힾ⍴须嫵윛䕑桞汋豈鱽ᝠଽゝ汆콑矑邬陰䗇꒿᭗葁ㅓ㡔 [ 344.097902][ T37] usb 1-1: SerialNumber: syz [ 344.233089][ T5603] em28xx 4-1:0.0: Config register raw data: 0x23 [ 344.233119][ T5603] em28xx 4-1:0.0: I2S Audio (3 sample rate(s)) [ 344.233136][ T5603] em28xx 4-1:0.0: No AC97 audio processor [ 344.410278][ T37] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 344.410363][ T37] usb 1-1: MIDIStreaming interface descriptor not found [ 344.576770][ T5624] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 344.669727][ T37] usb 1-1: USB disconnect, device number 79 [ 344.738619][ T5624] usb 3-1: Using ep0 maxpacket: 8 [ 344.743126][ T5603] usb 4-1: USB disconnect, device number 44 [ 344.745564][ T5624] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 344.745596][ T5624] usb 3-1: config 179 has no interface number 0 [ 344.745646][ T5624] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 344.745677][ T5624] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 344.745707][ T5624] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 344.745736][ T5624] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 344.745921][ T5624] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 344.745973][ T5624] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 344.745999][ T5624] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.916352][ T9837] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 345.157303][ T5624] usb 3-1: USB disconnect, device number 66 [ 345.157364][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 345.157451][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 345.261945][ T38] audit: type=1326 audit(1780034455.641:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9843 comm="syz.1.1561" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd30373ce59 code=0x0 [ 345.322608][ T5833] udevd[5833]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 345.395881][ T9848] comedi: No check for data length of config insn id 4 is implemented [ 345.395902][ T9848] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 345.395917][ T9848] comedi: Assuming n=33117 is correct [ 345.557724][ T37] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 345.633926][ T5603] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 345.700612][ T37] usb 1-1: Using ep0 maxpacket: 32 [ 345.704101][ T37] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.704135][ T37] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.704181][ T37] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 345.704199][ T37] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.765767][ T37] usb 1-1: config 0 descriptor?? [ 345.784228][ T37] hub 1-1:0.0: USB hub found [ 345.787726][ T5603] usb 4-1: Using ep0 maxpacket: 32 [ 345.798433][ T5603] usb 4-1: unable to get BOS descriptor or descriptor too short [ 345.801914][ T5603] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 345.831389][ T5603] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 345.831426][ T5603] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.831450][ T5603] usb 4-1: Product: syz [ 345.831468][ T5603] usb 4-1: Manufacturer: syz [ 345.831485][ T5603] usb 4-1: SerialNumber: syz [ 345.965978][ T37] hub 1-1:0.0: 1 port detected [ 346.023686][ T9854] FAULT_INJECTION: forcing a failure. [ 346.023686][ T9854] name failslab, interval 1, probability 0, space 0, times 0 [ 346.023797][ T9854] CPU: 0 UID: 0 PID: 9854 Comm: syz.2.1564 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 346.023831][ T9854] Tainted: [L]=SOFTLOCKUP [ 346.023840][ T9854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 346.023855][ T9854] Call Trace: [ 346.023864][ T9854] [ 346.023874][ T9854] dump_stack_lvl+0xe8/0x150 [ 346.023914][ T9854] should_fail_ex+0x46b/0x600 [ 346.023944][ T9854] should_failslab+0xa8/0x100 [ 346.023991][ T9854] kmem_cache_alloc_noprof+0x87/0x680 [ 346.024020][ T9854] ? skb_clone+0x212/0x3a0 [ 346.024048][ T9854] skb_clone+0x212/0x3a0 [ 346.024069][ T9854] ? can_send+0x655/0xd20 [ 346.024093][ T9854] can_send+0x673/0xd20 [ 346.024122][ T9854] ? __pfx_can_send+0x10/0x10 [ 346.024159][ T9854] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 346.024197][ T9854] isotp_sendmsg+0xd6d/0x1530 [ 346.024243][ T9854] ? __pfx_isotp_sendmsg+0x10/0x10 [ 346.024276][ T9854] ? aa_sk_perm+0x703/0x950 [ 346.024299][ T9854] ? __might_fault+0xaf/0x130 [ 346.024334][ T9854] ? __pfx_aa_sk_perm+0x10/0x10 [ 346.024355][ T9854] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 346.024387][ T9854] ? aa_sock_msg_perm+0x122/0x200 [ 346.024435][ T9854] ? __pfx_isotp_sendmsg+0x10/0x10 [ 346.024476][ T9854] sock_sendmsg_nosec+0x13a/0x180 [ 346.024507][ T9854] __sys_sendto+0x402/0x590 [ 346.024545][ T9854] ? __pfx___sys_sendto+0x10/0x10 [ 346.024610][ T9854] ? exc_page_fault+0x6a/0xc0 [ 346.024650][ T9854] ? do_user_addr_fault+0xc6f/0x1340 [ 346.024684][ T9854] __x64_sys_sendto+0xde/0x100 [ 346.024716][ T9854] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.024745][ T9854] do_syscall_64+0x174/0x580 [ 346.024769][ T9854] ? trace_irq_disable+0x3b/0x140 [ 346.024810][ T9854] ? clear_bhb_loop+0x40/0x90 [ 346.024840][ T9854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.024864][ T9854] RIP: 0033:0x7ff56346d68e [ 346.024885][ T9854] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 346.024907][ T9854] RSP: 002b:00007ff5616fce88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 346.024931][ T9854] RAX: ffffffffffffffda RBX: 00007ff5616fe6c0 RCX: 00007ff56346d68e [ 346.024943][ T9854] RDX: 0000000000000024 RSI: 00007ff5616fd000 RDI: 0000000000000004 [ 346.024970][ T9854] RBP: 0000000000000000 R08: 00007ff5616fcf04 R09: 000000000000000c [ 346.024986][ T9854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 346.025001][ T9854] R13: 00007ff5616fcf58 R14: 00007ff5616fd000 R15: 0000000000000000 [ 346.025035][ T9854] [ 346.027612][ T9854] can-isotp: isotp_sendmsg: can_send_ret -ENOMEM [ 346.136671][ T5603] usb 4-1: Cannot retrieve CPort count: -71 [ 346.136721][ T5603] usb 4-1: Cannot retrieve CPort count: -71 [ 346.136758][ T5603] es2_ap_driver 4-1:7.0: probe with driver es2_ap_driver failed with error -71 [ 346.243383][ T37] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 346.243416][ T37] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 346.285806][ T5603] usb 4-1: USB disconnect, device number 45 [ 346.372472][ T37] usbhid 1-1:0.0: can't add hid device: -71 [ 346.372602][ T37] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 346.425585][ T37] usb 1-1: USB disconnect, device number 80 [ 346.700718][ T5767] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 346.855768][ T5767] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 346.855805][ T5767] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 346.855826][ T5767] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 346.874610][ T5767] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 346.874705][ T5767] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.874757][ T5767] usb 2-1: Product: syz [ 346.874812][ T5767] usb 2-1: Manufacturer: syz [ 346.874855][ T5767] usb 2-1: SerialNumber: syz [ 346.913581][ T9861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1567'. [ 346.946839][ T5767] usb 2-1: config 0 descriptor?? [ 346.965358][ T5767] streamzap 2-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 347.114460][ T5603] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 347.196802][ T9857] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1565'. [ 347.225952][ T5767] usb 2-1: USB disconnect, device number 77 [ 347.273627][ T5603] usb 4-1: Using ep0 maxpacket: 16 [ 347.283950][ T5603] usb 4-1: unable to get BOS descriptor or descriptor too short [ 347.300627][ T5603] usb 4-1: config 4 has an invalid interface number: 218 but max is 0 [ 347.300666][ T5603] usb 4-1: config 4 has an invalid interface association descriptor of length 2, skipping [ 347.300688][ T5603] usb 4-1: config 4 has no interface number 0 [ 347.300881][ T5603] usb 4-1: config 4 interface 218 altsetting 0 bulk endpoint 0xF has invalid maxpacket 16 [ 347.300913][ T5603] usb 4-1: config 4 interface 218 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 347.303898][ T5603] usb 4-1: New USB device found, idVendor=045e, idProduct=0474, bcdDevice=9b.68 [ 347.303931][ T5603] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.303955][ T5603] usb 4-1: Product: syz [ 347.303971][ T5603] usb 4-1: Manufacturer: syz [ 347.303988][ T5603] usb 4-1: SerialNumber: syz [ 347.450053][ T9859] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 347.964549][ T5603] usb 4-1: USB disconnect, device number 46 [ 348.018473][ T9888] FAULT_INJECTION: forcing a failure. [ 348.018473][ T9888] name failslab, interval 1, probability 0, space 0, times 0 [ 348.018513][ T9888] CPU: 0 UID: 0 PID: 9888 Comm: syz.0.1580 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 348.018552][ T9888] Tainted: [L]=SOFTLOCKUP [ 348.018561][ T9888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 348.018576][ T9888] Call Trace: [ 348.018586][ T9888] [ 348.018596][ T9888] dump_stack_lvl+0xe8/0x150 [ 348.018628][ T9888] should_fail_ex+0x46b/0x600 [ 348.018670][ T9888] should_failslab+0xa8/0x100 [ 348.018703][ T9888] kmem_cache_alloc_noprof+0x87/0x680 [ 348.018732][ T9888] ? skb_clone+0x212/0x3a0 [ 348.018759][ T9888] skb_clone+0x212/0x3a0 [ 348.018786][ T9888] __netlink_deliver_tap+0x424/0x8b0 [ 348.018837][ T9888] ? netlink_deliver_tap+0x2e/0x1b0 [ 348.018875][ T9888] netlink_deliver_tap+0x19c/0x1b0 [ 348.018923][ T9888] netlink_unicast+0x754/0x920 [ 348.018980][ T9888] netlink_sendmsg+0x813/0xb40 [ 348.019014][ T9888] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.019048][ T9888] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 348.019084][ T9888] ? aa_sock_msg_perm+0x122/0x200 [ 348.019112][ T9888] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.019135][ T9888] sock_sendmsg_nosec+0x13a/0x180 [ 348.019166][ T9888] ____sys_sendmsg+0x55c/0x870 [ 348.019209][ T9888] ? __pfx_____sys_sendmsg+0x10/0x10 [ 348.019257][ T9888] ? import_iovec+0x73/0xa0 [ 348.019288][ T9888] ___sys_sendmsg+0x2a5/0x360 [ 348.019349][ T9888] ? __lock_acquire+0x6b5/0x2d10 [ 348.019427][ T9888] ? __pfx____sys_sendmsg+0x10/0x10 [ 348.019504][ T9888] ? __fget_files+0x2a/0x420 [ 348.019532][ T9888] ? __fget_files+0x3a6/0x420 [ 348.019570][ T9888] __x64_sys_sendmsg+0x1c3/0x2a0 [ 348.019621][ T9888] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 348.019668][ T9888] ? __pfx_ksys_write+0x10/0x10 [ 348.019712][ T9888] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.019745][ T9888] do_syscall_64+0x174/0x580 [ 348.019780][ T9888] ? trace_irq_disable+0x3b/0x140 [ 348.019808][ T9888] ? clear_bhb_loop+0x40/0x90 [ 348.019838][ T9888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.019863][ T9888] RIP: 0033:0x7fbe5905ce59 [ 348.019885][ T9888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.019906][ T9888] RSP: 002b:00007fbe572ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 348.019939][ T9888] RAX: ffffffffffffffda RBX: 00007fbe592d5fa0 RCX: 00007fbe5905ce59 [ 348.019956][ T9888] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 348.019971][ T9888] RBP: 00007fbe572ae090 R08: 0000000000000000 R09: 0000000000000000 [ 348.019986][ T9888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.020000][ T9888] R13: 00007fbe592d6038 R14: 00007fbe592d5fa0 R15: 00007ffec9c75f18 [ 348.020035][ T9888] [ 348.040180][ T9888] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1580'. [ 348.450625][ T5624] IPVS: starting estimator thread 0... [ 348.538824][ T9893] IPVS: using max 8 ests per chain, 19200 per kthread [ 348.638887][ T9899] comedi: No check for data length of config insn id 4 is implemented [ 348.638909][ T9899] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 348.638924][ T9899] comedi: Assuming n=33116 is correct [ 348.928019][ T9913] sg_write: data in/out 32732/54 bytes for SCSI command 0x1-- guessing data in; [ 348.928019][ T9913] program syz.3.1591 not setting count and/or reply_len properly [ 348.944611][ T5603] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 348.958242][ T5793] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 349.139202][ T5603] usb 2-1: Using ep0 maxpacket: 32 [ 349.139330][ T5793] usb 1-1: Using ep0 maxpacket: 32 [ 349.152618][ T5793] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 349.152648][ T5793] usb 1-1: config 0 has no interface number 0 [ 349.152970][ T5793] usb 1-1: config 0 interface 184 has no altsetting 0 [ 349.153910][ T5603] usb 2-1: unable to get BOS descriptor or descriptor too short [ 349.185821][ T5793] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 349.186016][ T5603] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 349.186169][ T5793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.186185][ T5793] usb 1-1: Product: syz [ 349.186197][ T5793] usb 1-1: Manufacturer: syz [ 349.186208][ T5793] usb 1-1: SerialNumber: syz [ 349.240732][ T5603] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 349.240775][ T5603] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.240793][ T5603] usb 2-1: Product: syz [ 349.240804][ T5603] usb 2-1: Manufacturer: syz [ 349.240816][ T5603] usb 2-1: SerialNumber: syz [ 349.277150][ T5793] usb 1-1: config 0 descriptor?? [ 349.400558][ T9926] block nbd2: NBD_DISCONNECT [ 349.402446][ T9926] sg_write: data in/out 418780/98 bytes for SCSI command 0x0-- guessing data in; [ 349.402446][ T9926] program syz.2.1598 not setting count and/or reply_len properly [ 349.486468][ T5603] usb 2-1: Cannot retrieve CPort count: -71 [ 349.486521][ T5603] usb 2-1: Cannot retrieve CPort count: -71 [ 349.486562][ T5603] es2_ap_driver 2-1:7.0: probe with driver es2_ap_driver failed with error -71 [ 349.518808][ T5603] usb 2-1: USB disconnect, device number 78 [ 349.869105][ T5793] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 349.869141][ T5793] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 349.869969][ T5793] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 349.869991][ T5793] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 349.870006][ T5793] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 349.870020][ T5793] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 349.870279][ T5793] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61 [ 349.873029][ T5767] usb 4-1: new low-speed USB device number 47 using dummy_hcd [ 349.951099][ T9938] netlink: 'syz.2.1603': attribute type 10 has an invalid length. [ 349.987742][ T9938] syz_tun: entered promiscuous mode [ 350.060536][ T5767] usb 4-1: Invalid ep0 maxpacket: 32 [ 350.119446][ T9938] .`: (slave syz_tun): Enslaving as an active interface with an up link [ 350.187004][ T5767] usb 4-1: new low-speed USB device number 48 using dummy_hcd [ 350.358226][ T5767] usb 4-1: Invalid ep0 maxpacket: 32 [ 350.358617][ T5767] usb usb4-port1: attempt power cycle [ 350.472290][ T37] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 350.616343][ T37] usb 2-1: Using ep0 maxpacket: 16 [ 350.624975][ T37] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 350.625011][ T37] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 350.628426][ T37] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 350.628458][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.628481][ T37] usb 2-1: Product: syz [ 350.628498][ T37] usb 2-1: Manufacturer: syz [ 350.628514][ T37] usb 2-1: SerialNumber: syz [ 350.651894][ T37] usb 2-1: config 0 descriptor?? [ 350.709868][ T37] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 350.709911][ T37] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 350.720148][ T5767] usb 4-1: new low-speed USB device number 49 using dummy_hcd [ 350.740224][ T5767] usb 4-1: Invalid ep0 maxpacket: 32 [ 350.863092][ T5767] usb 4-1: new low-speed USB device number 50 using dummy_hcd [ 350.886714][ T5767] usb 4-1: Invalid ep0 maxpacket: 32 [ 350.887040][ T5767] usb usb4-port1: unable to enumerate USB device [ 351.252011][ T37] em28xx 2-1:0.0: unknown em28xx chip ID (40) [ 351.446372][ T9995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.446956][ T9995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.476536][ T37] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 351.494707][ T37] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 351.494732][ T37] em28xx 2-1:0.0: No AC97 audio processor [ 351.524297][ T37] usb 2-1: USB disconnect, device number 79 [ 351.549845][ T37] em28xx 2-1:0.0: Disconnecting em28xx [ 351.555996][ T37] em28xx 2-1:0.0: Freeing device [ 351.891686][ T5718] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 352.040466][ T5718] usb 3-1: unable to get BOS descriptor or descriptor too short [ 352.041111][ T5718] usb 3-1: not running at top speed; connect to a high speed hub [ 352.042431][ T5718] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 352.042467][ T5718] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 352.087186][ T5718] usb 3-1: string descriptor 0 read error: -22 [ 352.087300][ T5718] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 352.087319][ T5718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.140767][ T5718] usb 3-1: 0:2 : does not exist [ 352.385482][ T5718] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 352.404473][ T5718] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 352.419021][ T5718] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 352.663266][T10024] sg_write: data in/out 32732/54 bytes for SCSI command 0x1-- guessing data in; [ 352.663266][T10024] program syz.3.1634 not setting count and/or reply_len properly [ 352.803302][ T5718] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 352.843909][ T37] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 352.914684][ T5718] usb 3-1: USB disconnect, device number 67 [ 352.917726][ T5767] usb 1-1: USB disconnect, device number 81 [ 352.989471][ T37] usb 2-1: Using ep0 maxpacket: 32 [ 352.994705][ T37] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.994750][ T37] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.994795][ T37] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 352.994822][ T37] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.108761][ T37] usb 2-1: config 0 descriptor?? [ 353.161844][ T37] hub 2-1:0.0: USB hub found [ 353.307065][ T37] hub 2-1:0.0: 1 port detected [ 353.491627][ T5767] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 353.498749][ T37] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 353.498848][ T37] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 353.529938][ T37] usbhid 2-1:0.0: can't add hid device: -71 [ 353.530160][ T37] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 353.561488][ T37] usb 2-1: USB disconnect, device number 80 [ 353.587126][ T5603] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 353.625154][ T5767] usb 1-1: device descriptor read/64, error -71 [ 353.733511][ T5603] usb 4-1: unable to get BOS descriptor or descriptor too short [ 353.735087][ T5603] usb 4-1: config 1 has an invalid interface number: 255 but max is 2 [ 353.735118][ T5603] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 353.735140][ T5603] usb 4-1: config 1 has no interface number 2 [ 353.735212][ T5603] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 19, changing to 7 [ 353.735244][ T5603] usb 4-1: too many endpoints for config 1 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 353.735285][ T5603] usb 4-1: config 1 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 353.735316][ T5603] usb 4-1: config 1 interface 255 has no altsetting 0 [ 353.739611][ T5603] usb 4-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice= 0.40 [ 353.739724][ T5603] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.739795][ T5603] usb 4-1: Product: syz [ 353.739838][ T5603] usb 4-1: Manufacturer: syz [ 353.739893][ T5603] usb 4-1: SerialNumber: syz [ 353.881985][ T5767] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 354.015780][ T5603] usb 4-1: unit 4 not found! [ 354.016307][ T5767] usb 1-1: device descriptor read/64, error -71 [ 354.038920][ T5603] usb 4-1: unknown sample rate [ 354.145565][T10039] FAULT_INJECTION: forcing a failure. [ 354.145565][T10039] name failslab, interval 1, probability 0, space 0, times 0 [ 354.145616][T10039] CPU: 1 UID: 0 PID: 10039 Comm: syz.1.1642 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 354.145649][T10039] Tainted: [L]=SOFTLOCKUP [ 354.145658][T10039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 354.145675][T10039] Call Trace: [ 354.145789][T10039] [ 354.145872][T10039] dump_stack_lvl+0xe8/0x150 [ 354.145963][T10039] should_fail_ex+0x46b/0x600 [ 354.146005][T10039] should_failslab+0xa8/0x100 [ 354.146037][T10039] __kmalloc_noprof+0xdf/0x7b0 [ 354.146066][T10039] ? tomoyo_encode+0x28b/0x550 [ 354.146136][T10039] tomoyo_encode+0x28b/0x550 [ 354.146169][T10039] tomoyo_realpath_from_path+0x58d/0x5d0 [ 354.146200][T10039] ? tomoyo_domain+0xd7/0x130 [ 354.146234][T10039] ? tomoyo_path_number_perm+0x219/0x630 [ 354.146271][T10039] tomoyo_path_number_perm+0x246/0x630 [ 354.146325][T10039] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 354.146359][T10039] ? __lock_acquire+0x6b5/0x2d10 [ 354.146390][T10039] ? do_raw_spin_lock+0x12b/0x2f0 [ 354.146449][T10039] ? __fget_files+0x2a/0x420 [ 354.146481][T10039] ? __fget_files+0x2a/0x420 [ 354.146507][T10039] ? __fget_files+0x3a6/0x420 [ 354.146531][T10039] ? __fget_files+0x2a/0x420 [ 354.146559][T10039] security_file_ioctl+0xc3/0x2a0 [ 354.146595][T10039] __se_sys_ioctl+0x47/0x170 [ 354.146626][T10039] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.146649][T10039] do_syscall_64+0x174/0x580 [ 354.146682][T10039] ? trace_irq_disable+0x3b/0x140 [ 354.146710][T10039] ? clear_bhb_loop+0x40/0x90 [ 354.146738][T10039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.146763][T10039] RIP: 0033:0x7fd30373ce59 [ 354.146824][T10039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 354.146873][T10039] RSP: 002b:00007fd30198e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 354.146933][T10039] RAX: ffffffffffffffda RBX: 00007fd3039b5fa0 RCX: 00007fd30373ce59 [ 354.146951][T10039] RDX: 0000200000000140 RSI: 00000000c028aa05 RDI: 0000000000000003 [ 354.146968][T10039] RBP: 00007fd30198e090 R08: 0000000000000000 R09: 0000000000000000 [ 354.146983][T10039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.146999][T10039] R13: 00007fd3039b6038 R14: 00007fd3039b5fa0 R15: 00007ffcb984d7d8 [ 354.147036][T10039] [ 354.147063][T10039] ERROR: Out of memory at tomoyo_realpath_from_path. [ 354.154329][ T5767] usb usb1-port1: attempt power cycle [ 354.469561][ T5603] usb 4-1: USB disconnect, device number 51 [ 354.502795][ T5767] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 354.524487][ T5767] usb 1-1: device descriptor read/8, error -71 [ 354.673988][T10048] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 354.674402][T10048] cramfs: wrong magic [ 354.749193][ T5793] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 354.753876][ T5767] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 354.778894][ T5767] usb 1-1: device descriptor read/8, error -71 [ 354.782587][ T5930] udevd[5930]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 354.892283][ T5767] usb usb1-port1: unable to enumerate USB device [ 354.892503][ T5793] usb 2-1: Using ep0 maxpacket: 16 [ 354.894865][ T5793] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 354.894913][ T5793] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 354.897246][ T5793] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 354.897281][ T5793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.897305][ T5793] usb 2-1: Product: syz [ 354.897323][ T5793] usb 2-1: Manufacturer: syz [ 354.897339][ T5793] usb 2-1: SerialNumber: syz [ 354.956123][ T5793] usb 2-1: config 0 descriptor?? [ 355.008726][ T5793] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 355.008755][ T5793] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 355.501508][ T5603] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 355.573364][ T5793] em28xx 2-1:0.0: unknown em28xx chip ID (40) [ 355.672611][ T5603] usb 4-1: Using ep0 maxpacket: 32 [ 355.677096][ T5603] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.677135][ T5603] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.677414][ T5603] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 355.677443][ T5603] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.761436][ T5603] usb 4-1: config 0 descriptor?? [ 355.782958][ T5793] em28xx 2-1:0.0: Config register raw data: 0x23 [ 355.782978][ T5793] em28xx 2-1:0.0: I2S Audio (3 sample rate(s)) [ 355.782991][ T5793] em28xx 2-1:0.0: No AC97 audio processor [ 355.806684][ T5603] hub 4-1:0.0: USB hub found [ 355.965827][ T5603] hub 4-1:0.0: 1 port detected [ 356.157192][ T5603] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 356.157288][ T5603] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 356.207041][ T5603] usbhid 4-1:0.0: can't add hid device: -71 [ 356.207172][ T5603] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 356.284500][ T5793] usb 2-1: USB disconnect, device number 81 [ 356.305868][ T5603] usb 4-1: USB disconnect, device number 52 [ 356.473016][ T10] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 356.568385][ T5767] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 356.634837][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 356.637779][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 356.637822][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 356.637843][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 356.637861][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 356.637882][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 356.640410][ T10] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 356.640443][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.640465][ T10] usb 1-1: Product: syz [ 356.640487][ T10] usb 1-1: Manufacturer: syz [ 356.640498][ T10] usb 1-1: SerialNumber: syz [ 356.647803][ T10] usb 1-1: config 0 descriptor?? [ 356.761420][ T5767] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 356.761445][ T5767] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.761461][ T5767] usb 3-1: Product: syz [ 356.761472][ T5767] usb 3-1: Manufacturer: syz [ 356.761483][ T5767] usb 3-1: SerialNumber: syz [ 356.812963][ T5767] usb 3-1: config 0 descriptor?? [ 356.850252][ T5767] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 356.956794][T10093] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 356.983517][T10093] cramfs: wrong magic [ 357.137324][T10087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.147619][T10087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.164820][T10087] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 357.165790][T10087] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 357.442454][ T10] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 357.442574][ T10] input input21: Device does not respond to id packet M [ 357.443116][ T10] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 357.443267][ T10] input input21: Device does not respond to id packet P [ 357.448138][ T10] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 357.448580][ T10] input input21: Device does not respond to id packet B [ 357.452794][ T10] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 357.453060][ T10] input input21: Device does not respond to id packet N [ 357.462027][ T10] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 357.492007][ T10] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 357.492022][ T5718] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 357.492680][ T10] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 357.493936][ T10] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 357.611799][ T10] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input21 [ 357.672811][ T5718] usb 4-1: Using ep0 maxpacket: 8 [ 357.675527][ T5718] usb 4-1: unable to get BOS descriptor or descriptor too short [ 357.696443][ T5718] usb 4-1: New USB device found, idVendor=0e41, idProduct=4244, bcdDevice= 0.40 [ 357.696480][ T5718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.696505][ T5718] usb 4-1: Manufacturer: 贠⼸쪣顜앳볟㖚ꥬ늤狿腷窇뾗啖惩쵴朚鏣첇豵彁蜏꺇麎ˠ东ຑꄉ핊揚ힾ⍴须嫵윛䕑桞汋豈鱽ᝠଽゝ汆콑矑邬陰䗇꒿᭗葁ㅓ㡔 [ 357.696535][ T5718] usb 4-1: SerialNumber: syz [ 357.768754][ T10] usb 1-1: USB disconnect, device number 86 [ 357.982350][ T5718] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 357.982476][ T5718] usb 4-1: MIDIStreaming interface descriptor not found [ 358.331438][ T5718] usb 4-1: USB disconnect, device number 53 [ 358.502372][ T5833] udevd[5833]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 358.660093][T10108] FAULT_INJECTION: forcing a failure. [ 358.660093][T10108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 358.660128][T10108] CPU: 1 UID: 0 PID: 10108 Comm: syz.2.1666 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 358.660155][T10108] Tainted: [L]=SOFTLOCKUP [ 358.660161][T10108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 358.660173][T10108] Call Trace: [ 358.660180][T10108] [ 358.660188][T10108] dump_stack_lvl+0xe8/0x150 [ 358.660217][T10108] should_fail_ex+0x46b/0x600 [ 358.660250][T10108] _copy_from_iter+0x1d3/0x1670 [ 358.660275][T10108] ? trace_kmem_cache_alloc+0x29/0xe0 [ 358.660297][T10108] ? __alloc_skb+0x27d/0x7d0 [ 358.660325][T10108] ? __pfx__copy_from_iter+0x10/0x10 [ 358.660343][T10108] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 358.660366][T10108] ? __alloc_skb+0x27d/0x7d0 [ 358.660395][T10108] ? netlink_sendmsg+0x650/0xb40 [ 358.660410][T10108] ? skb_put+0x11b/0x210 [ 358.660439][T10108] netlink_sendmsg+0x6c0/0xb40 [ 358.660464][T10108] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.660484][T10108] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 358.660525][T10108] ? aa_sock_msg_perm+0x122/0x200 [ 358.660548][T10108] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.660566][T10108] sock_sendmsg_nosec+0x13a/0x180 [ 358.660592][T10108] ____sys_sendmsg+0x55c/0x870 [ 358.660628][T10108] ? __pfx_____sys_sendmsg+0x10/0x10 [ 358.660667][T10108] ? import_iovec+0x73/0xa0 [ 358.660694][T10108] ___sys_sendmsg+0x2a5/0x360 [ 358.660731][T10108] ? __lock_acquire+0x6b5/0x2d10 [ 358.660759][T10108] ? __pfx____sys_sendmsg+0x10/0x10 [ 358.660820][T10108] ? __fget_files+0x2a/0x420 [ 358.660843][T10108] ? __fget_files+0x3a6/0x420 [ 358.660876][T10108] __x64_sys_sendmsg+0x1c3/0x2a0 [ 358.660910][T10108] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 358.660945][T10108] ? __pfx_ksys_write+0x10/0x10 [ 358.660992][T10108] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.661014][T10108] do_syscall_64+0x174/0x580 [ 358.661042][T10108] ? trace_irq_disable+0x3b/0x140 [ 358.661063][T10108] ? clear_bhb_loop+0x40/0x90 [ 358.661086][T10108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.661105][T10108] RIP: 0033:0x7ff5634ace59 [ 358.661123][T10108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.661141][T10108] RSP: 002b:00007ff5616bc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 358.661162][T10108] RAX: ffffffffffffffda RBX: 00007ff563726180 RCX: 00007ff5634ace59 [ 358.661177][T10108] RDX: 0000000000000010 RSI: 0000200000000400 RDI: 0000000000000008 [ 358.661191][T10108] RBP: 00007ff5616bc090 R08: 0000000000000000 R09: 0000000000000000 [ 358.661204][T10108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.661216][T10108] R13: 00007ff563726218 R14: 00007ff563726180 R15: 00007ffd2ef731c8 [ 358.661242][T10108] [ 358.848793][ T5767] gspca_stk1135: reg_w 0x200 err -110 [ 358.869195][ T5767] gspca_stk1135: serial bus timeout: status=0x00 [ 358.869266][ T5767] gspca_stk1135: Sensor write failed [ 358.869379][ T5767] gspca_stk1135: serial bus timeout: status=0x00 [ 358.869411][ T5767] gspca_stk1135: Sensor write failed [ 358.869525][ T5767] gspca_stk1135: serial bus timeout: status=0x00 [ 358.869557][ T5767] gspca_stk1135: Sensor read failed [ 358.871164][ T5767] gspca_stk1135: serial bus timeout: status=0x00 [ 358.871206][ T5767] gspca_stk1135: Sensor read failed [ 358.871873][ T5767] gspca_stk1135: Detected sensor type unknown (0x0) [ 358.880168][ T5767] gspca_stk1135: serial bus timeout: status=0x00 [ 358.883272][ T5767] gspca_stk1135: Sensor read failed [ 358.883368][ T5767] gspca_stk1135: serial bus timeout: status=0x00 [ 358.883407][ T5767] gspca_stk1135: Sensor read failed [ 358.883502][ T5767] gspca_stk1135: serial bus timeout: status=0x00 [ 358.883535][ T5767] gspca_stk1135: Sensor write failed [ 358.883617][ T5767] gspca_stk1135: serial bus timeout: status=0x00 [ 358.894543][ T5767] gspca_stk1135: Sensor write failed [ 358.894875][ T5767] stk1135 3-1:0.0: probe with driver stk1135 failed with error -110 [ 359.195211][ T10] usb 3-1: USB disconnect, device number 68 [ 359.444741][ T5793] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 359.509499][T10114] netlink: 'syz.1.1673': attribute type 62 has an invalid length. [ 359.511897][ T9] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 359.599183][ T5793] usb 4-1: Using ep0 maxpacket: 32 [ 359.602268][ T5793] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.602299][ T5793] usb 4-1: config 0 has no interfaces? [ 359.602336][ T5793] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 359.602354][ T5793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.615175][ T5793] usb 4-1: config 0 descriptor?? [ 359.659131][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 359.659172][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 359.659202][ T9] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 359.659229][ T9] usb 1-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 359.659260][ T9] usb 1-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 359.663730][ T9] usb 1-1: New USB device found, idVendor=0499, idProduct=5006, bcdDevice= 0.40 [ 359.663764][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.663788][ T9] usb 1-1: Product: 㐁 [ 359.663804][ T9] usb 1-1: Manufacturer: с [ 359.663821][ T9] usb 1-1: SerialNumber: 焪菺衤Ҡﺽ聚❐갈絹숯앦뭕풾ዙ਎ꉎὝ뾗冷躏肧ꚪ랢䮤㇀䷄秱䓾쬺褢ᢳꛁᲫ篸憕劖ꐕᔜ헙첲뗻ꁐ峂别皮덠桟鍌ੱⳔ螼ૉꁛኀ눋ॳ䀉鵢孔泥巭瓭싢ﺱẇꐳᴉ氜絚겒轻緻旛אּ퍥鄙 [ 359.996061][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 360.103220][ T9] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 360.124583][ T9] usb 1-1: USB disconnect, device number 87 [ 360.139816][ T5793] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 360.173463][ T5930] udevd[5930]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 360.282770][ T5793] usb 2-1: Using ep0 maxpacket: 32 [ 360.284701][ T5793] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.284741][ T5793] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.284771][ T5793] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 360.284790][ T5793] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.291023][ T5793] usb 2-1: config 0 descriptor?? [ 360.354276][ T5793] hub 2-1:0.0: USB hub found [ 360.542014][ T5793] hub 2-1:0.0: 1 port detected [ 360.587153][T10137] overlayfs: cannot append lower layer [ 360.854410][ T5726] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 360.877414][T10147] netlink: 4356 bytes leftover after parsing attributes in process `syz.2.1688'. [ 360.877861][T10147] netlink: 4356 bytes leftover after parsing attributes in process `syz.2.1688'. [ 360.987482][ T5726] usb 1-1: device descriptor read/64, error -71 [ 361.217030][ T5726] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 361.339822][ T5726] usb 1-1: device descriptor read/64, error -71 [ 361.447873][ T5726] usb usb1-port1: attempt power cycle [ 361.560413][ T5793] hub 2-1:0.0: hub_hub_status failed (err = -32) [ 361.560445][ T5793] hub 2-1:0.0: config failed, can't get hub status (err -32) [ 361.566703][ T5793] usbhid 2-1:0.0: can't add hid device: -32 [ 361.566831][ T5793] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 361.777887][ T5726] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 361.801169][ T5726] usb 1-1: device descriptor read/8, error -71 [ 361.927000][ T5793] usb 4-1: USB disconnect, device number 54 [ 362.025522][ T5726] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 362.046089][ T5726] usb 1-1: device descriptor read/8, error -71 [ 362.155207][ T5726] usb usb1-port1: unable to enumerate USB device [ 362.302188][ T5793] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 362.454154][ T5793] usb 4-1: Using ep0 maxpacket: 16 [ 362.460891][ T5793] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 362.460993][ T5793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 362.489352][ T5793] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 362.489388][ T5793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.489411][ T5793] usb 4-1: Product: syz [ 362.489428][ T5793] usb 4-1: Manufacturer: syz [ 362.489445][ T5793] usb 4-1: SerialNumber: syz [ 362.534922][ T5793] usb 4-1: config 0 descriptor?? [ 362.551736][ T5793] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 362.551777][ T5793] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 362.816594][ T5726] usb 2-1: USB disconnect, device number 82 [ 363.081556][T10219] futex_wake_op: syz.1.1720 tries to shift op by -1; fix this program [ 363.127118][ T5793] em28xx 4-1:0.0: chip ID is em2870 [ 363.454413][ T5726] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 363.597421][ T5726] usb 3-1: Using ep0 maxpacket: 32 [ 363.601154][ T5726] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 363.623098][ T5726] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 363.623126][ T5726] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 363.623145][ T5726] usb 3-1: Product: syz [ 363.623165][ T5726] usb 3-1: Manufacturer: syz [ 363.623178][ T5726] usb 3-1: SerialNumber: syz [ 363.667748][ T5767] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 363.682924][ T5726] usb 3-1: config 0 descriptor?? [ 363.683841][T10223] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 363.827859][ T5767] usb 2-1: Using ep0 maxpacket: 32 [ 363.830101][ T5767] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.830127][ T5767] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.830162][ T5767] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 363.830181][ T5767] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.841150][ T5767] usb 2-1: config 0 descriptor?? [ 363.896314][ T5767] hub 2-1:0.0: USB hub found [ 364.082834][ T5767] hub 2-1:0.0: 1 port detected [ 364.258492][ T5793] usb 3-1: USB disconnect, device number 69 [ 364.873158][ T5726] usb 4-1: USB disconnect, device number 55 [ 364.885802][ T5726] em28xx 4-1:0.0: Disconnecting em28xx [ 364.914498][ T5726] em28xx 4-1:0.0: Freeing device [ 365.083073][ T5793] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 365.125387][ T5767] hub 2-1:0.0: hub_hub_status failed (err = -32) [ 365.125414][ T5767] hub 2-1:0.0: config failed, can't get hub status (err -32) [ 365.130142][ T5767] usbhid 2-1:0.0: can't add hid device: -32 [ 365.130233][ T5767] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 365.238511][ T5793] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 365.238560][ T5793] usb 1-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 365.238590][ T5793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.258973][ T5793] usb 1-1: config 0 descriptor?? [ 365.293286][ T5793] smsusb:smsusb_probe: board id=8, interface number 0 [ 365.297017][ T5793] smsusb:smsusb_probe: Device initialized with return code -19 [ 365.331298][ T5726] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 365.475024][ T5726] usb 4-1: Using ep0 maxpacket: 32 [ 365.477360][ T5793] usb 1-1: USB disconnect, device number 92 [ 365.478493][ T5726] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 365.478521][ T5726] usb 4-1: config 0 has no interface number 0 [ 365.478590][ T5726] usb 4-1: config 0 interface 12 has no altsetting 0 [ 365.517739][ T5726] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 365.517775][ T5726] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.517799][ T5726] usb 4-1: Product: syz [ 365.517817][ T5726] usb 4-1: Manufacturer: syz [ 365.517833][ T5726] usb 4-1: SerialNumber: syz [ 365.580241][ T5726] usb 4-1: config 0 descriptor?? [ 365.816284][ T9] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 365.962198][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.962239][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.962282][ T9] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 365.962310][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.980169][ T9] usb 3-1: config 0 descriptor?? [ 366.412136][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 366.412536][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 366.413695][ T5767] usb 2-1: USB disconnect, device number 83 [ 366.463442][ T9] usb 3-1: USB disconnect, device number 70 [ 366.792841][T10239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.817307][T10239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.931049][ T5767] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 367.084475][ T5767] usb 2-1: Using ep0 maxpacket: 16 [ 367.086809][ T5767] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 367.086845][ T5767] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 367.091950][ T5767] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 367.091984][ T5767] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.092010][ T5767] usb 2-1: Product: syz [ 367.092028][ T5767] usb 2-1: Manufacturer: syz [ 367.092045][ T5767] usb 2-1: SerialNumber: syz [ 367.139013][ T5767] usb 2-1: config 0 descriptor?? [ 367.167114][ T5767] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 367.167155][ T5767] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 367.340149][ T10] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 367.486072][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 367.541347][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1536, setting to 64 [ 367.541416][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 367.541508][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 367.548546][ T10] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 367.548595][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.548715][ T10] usb 1-1: Product: syz [ 367.548739][ T10] usb 1-1: Manufacturer: syz [ 367.548763][ T10] usb 1-1: SerialNumber: syz [ 367.631616][ T10] usb 1-1: config 0 descriptor?? [ 367.702474][ T10] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 367.816748][ T5767] em28xx 2-1:0.0: chip ID is em2870 [ 367.932663][ T10] snd_usb_toneport 1-1:0.0: cannot get proper max packet size [ 367.933516][ T10] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 367.956802][ T10] snd_usb_toneport 1-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 368.142357][ T5726] f81534 4-1:0.12: f81534_set_register: reg: 1003 data: d8 failed: -71 [ 368.142535][ T5726] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 368.142583][ T5726] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 368.142805][ T5726] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 368.193865][ T5726] usb 4-1: USB disconnect, device number 56 [ 368.698417][T10304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1757'. [ 368.698496][T10304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1757'. [ 368.873629][ T5726] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 369.018422][ T5726] usb 3-1: Using ep0 maxpacket: 16 [ 369.032782][ T5726] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 369.032817][ T5726] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.032839][ T5726] usb 3-1: Product: syz [ 369.032855][ T5726] usb 3-1: Manufacturer: syz [ 369.032872][ T5726] usb 3-1: SerialNumber: syz [ 369.079619][ T5726] usb 3-1: config 0 descriptor?? [ 369.618304][ T10] usb 2-1: USB disconnect, device number 84 [ 369.634472][ T10] em28xx 2-1:0.0: Disconnecting em28xx [ 369.747892][ T5726] speedtch 3-1:0.0: speedtch_bind: data interface not found! [ 369.747944][ T5726] speedtch 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 369.778775][ T10] em28xx 2-1:0.0: Freeing device [ 369.802103][ T5726] usb 3-1: USB disconnect, device number 71 [ 369.994492][ T5767] usb 1-1: USB disconnect, device number 93 [ 370.477060][ T5767] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 370.664378][ T5767] usb 1-1: Using ep0 maxpacket: 32 [ 370.670084][ T5767] usb 1-1: unable to get BOS descriptor or descriptor too short [ 370.694961][ T5767] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 370.694993][ T5767] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 370.695020][ T5767] usb 1-1: config 14 has no interface number 0 [ 370.695033][ T5767] usb 1-1: config 14 has no interface number 1 [ 370.695091][ T5767] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 370.695110][ T5767] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 370.695130][ T5767] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 370.695151][ T5767] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 370.695173][ T5767] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 370.695193][ T5767] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 370.695214][ T5767] usb 1-1: config 14 interface 57 has no altsetting 0 [ 370.695228][ T5767] usb 1-1: config 14 interface 228 has no altsetting 0 [ 370.697612][ T5767] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 370.697645][ T5767] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.697667][ T5767] usb 1-1: Product: syz [ 370.697686][ T5767] usb 1-1: Manufacturer: syz [ 370.697698][ T5767] usb 1-1: SerialNumber: syz [ 371.036645][T10324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.086087][T10324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.121850][T10324] syzkaller1: entered promiscuous mode [ 371.121880][T10324] syzkaller1: entered allmulticast mode [ 371.212837][ T5767] legousbtower 1-1:14.57: interrupt endpoints not found [ 371.261948][ T5767] legousbtower 1-1:14.228: get version request failed: -71 [ 371.262162][ T5767] legousbtower 1-1:14.228: probe with driver legousbtower failed with error -71 [ 371.316771][ T5767] usb 1-1: USB disconnect, device number 94 [ 371.676583][ T10] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 371.835842][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 371.838999][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 371.839040][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 371.842274][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 371.842308][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.842334][ T10] usb 4-1: Product: syz [ 371.842346][ T10] usb 4-1: Manufacturer: syz [ 371.842358][ T10] usb 4-1: SerialNumber: syz [ 371.926037][ T10] usb 4-1: config 0 descriptor?? [ 371.938578][ T10] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 371.938617][ T10] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 372.036319][ T5718] usb 2-1: new full-speed USB device number 85 using dummy_hcd [ 372.161292][ T5718] usb 2-1: device descriptor read/64, error -71 [ 372.388952][ T5718] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 372.435812][ T5624] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 372.517462][ T10] em28xx 4-1:0.0: chip ID is em2870 [ 372.521755][ T5718] usb 2-1: device descriptor read/64, error -71 [ 372.589759][ T5624] usb 3-1: Using ep0 maxpacket: 8 [ 372.608063][ T5624] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55 [ 372.608087][ T5624] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.608103][ T5624] usb 3-1: Product: syz [ 372.608114][ T5624] usb 3-1: Manufacturer: syz [ 372.608126][ T5624] usb 3-1: SerialNumber: syz [ 372.616384][ T5624] usb 3-1: config 0 descriptor?? [ 372.628357][ T5718] usb usb2-port1: attempt power cycle [ 372.876981][T10388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.902532][T10388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.914519][T10388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.938877][T10388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.958273][T10388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.990676][T10388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.996318][T10388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.997148][T10388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.017182][ T5718] usb 2-1: new full-speed USB device number 87 using dummy_hcd [ 373.040308][ T5718] usb 2-1: device descriptor read/8, error -71 [ 373.063892][T10388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.077346][T10388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.319552][ T5718] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 373.343170][ T5718] usb 2-1: device descriptor read/8, error -71 [ 373.447159][ T5718] usb usb2-port1: unable to enumerate USB device [ 373.980912][ T5624] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 373.985314][ T5624] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 374.008899][ T5624] usb 3-1: USB disconnect, device number 72 [ 374.239723][ T10] usb 4-1: USB disconnect, device number 57 [ 374.261317][ T10] em28xx 4-1:0.0: Disconnecting em28xx [ 374.271148][ T10] em28xx 4-1:0.0: Freeing device [ 374.677685][ T10] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 374.695610][T10421] FAULT_INJECTION: forcing a failure. [ 374.695610][T10421] name failslab, interval 1, probability 0, space 0, times 0 [ 374.695665][T10421] CPU: 0 UID: 0 PID: 10421 Comm: syz.2.1800 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 374.695697][T10421] Tainted: [L]=SOFTLOCKUP [ 374.695707][T10421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 374.695744][T10421] Call Trace: [ 374.695758][T10421] [ 374.695769][T10421] dump_stack_lvl+0xe8/0x150 [ 374.695804][T10421] should_fail_ex+0x46b/0x600 [ 374.695846][T10421] should_failslab+0xa8/0x100 [ 374.695880][T10421] __kmalloc_noprof+0xdf/0x7b0 [ 374.695910][T10421] ? memcg_list_lru_alloc+0x286/0x870 [ 374.695953][T10421] memcg_list_lru_alloc+0x286/0x870 [ 374.695994][T10421] ? percpu_ref_tryget+0x1c/0x250 [ 374.696026][T10421] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 374.696069][T10421] ? get_mem_cgroup_from_objcg+0x186/0x1c0 [ 374.696115][T10421] zswap_store+0x986/0x2000 [ 374.696153][T10421] ? zswap_store+0x764/0x2000 [ 374.696195][T10421] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 374.696230][T10421] ? lockdep_hardirqs_on+0x7a/0x110 [ 374.696265][T10421] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 374.696302][T10421] ? __pfx_zswap_store+0x10/0x10 [ 374.696333][T10421] ? rt_spin_lock+0x1e0/0x400 [ 374.696365][T10421] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 374.696395][T10421] ? rt_spin_unlock+0x14f/0x200 [ 374.696429][T10421] ? rt_spin_unlock+0x160/0x200 [ 374.696460][T10421] swap_writeout+0x9d2/0x1560 [ 374.696509][T10421] shrink_folio_list+0x333c/0x53c0 [ 374.696582][T10421] ? __pfx_shrink_folio_list+0x10/0x10 [ 374.696668][T10421] ? __lock_acquire+0x6b5/0x2d10 [ 374.696709][T10421] reclaim_folio_list+0x100/0x430 [ 374.696758][T10421] ? __pfx_reclaim_folio_list+0x10/0x10 [ 374.696794][T10421] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 374.696833][T10421] reclaim_pages+0x45b/0x530 [ 374.696856][T10421] ? reacquire_held_locks+0x104/0x190 [ 374.696896][T10421] ? __pfx_reclaim_pages+0x10/0x10 [ 374.696925][T10421] ? madvise_cold_or_pageout_pte_range+0x16b8/0x1920 [ 374.696966][T10421] madvise_cold_or_pageout_pte_range+0x16dd/0x1920 [ 374.697022][T10421] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 374.697137][T10421] ? do_raw_spin_lock+0x12b/0x2f0 [ 374.697189][T10421] walk_pgd_range+0xed8/0x1ce0 [ 374.697263][T10421] ? __pfx_walk_pgd_range+0x10/0x10 [ 374.697302][T10421] __walk_page_range+0x17c/0x750 [ 374.697340][T10421] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 374.697390][T10421] walk_page_range_vma_unsafe+0x309/0x410 [ 374.697428][T10421] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 374.697457][T10421] ? rt_spin_unlock+0x14f/0x200 [ 374.697494][T10421] ? rt_spin_unlock+0x160/0x200 [ 374.697531][T10421] ? walk_page_range_vma+0x6b/0x90 [ 374.697604][T10421] madvise_vma_behavior+0x287f/0x4250 [ 374.697656][T10421] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 374.697691][T10421] ? __lock_acquire+0x6b5/0x2d10 [ 374.697728][T10421] ? __lock_acquire+0x6b5/0x2d10 [ 374.697764][T10421] ? tomoyo_check_open_permission+0x1d3/0x470 [ 374.697820][T10421] ? __lock_acquire+0x6b5/0x2d10 [ 374.697861][T10421] ? __lock_acquire+0x6b5/0x2d10 [ 374.697897][T10421] ? __lock_acquire+0x6b5/0x2d10 [ 374.697939][T10421] ? unwind_next_frame+0xa6/0x2550 [ 374.698027][T10421] ? mas_prev_slot+0xb7e/0xc00 [ 374.698090][T10421] ? find_vma_prev+0x123/0x1b0 [ 374.698123][T10421] ? __pfx_find_vma_prev+0x10/0x10 [ 374.698165][T10421] ? __lock_acquire+0x6b5/0x2d10 [ 374.698204][T10421] madvise_walk_vmas+0x573/0xae0 [ 374.698256][T10421] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 374.698300][T10421] ? blk_start_plug+0x6e/0x1b0 [ 374.698345][T10421] madvise_do_behavior+0x386/0x540 [ 374.698389][T10421] ? __pfx_madvise_do_behavior+0x10/0x10 [ 374.698425][T10421] ? down_read+0x156/0x200 [ 374.698474][T10421] do_madvise+0x26f/0x330 [ 374.698523][T10421] ? __pfx_do_madvise+0x10/0x10 [ 374.698585][T10421] ? __pfx_ksys_write+0x10/0x10 [ 374.698630][T10421] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.698661][T10421] __x64_sys_madvise+0xa6/0xc0 [ 374.698700][T10421] do_syscall_64+0x174/0x580 [ 374.698747][T10421] ? trace_irq_disable+0x3b/0x140 [ 374.698778][T10421] ? clear_bhb_loop+0x40/0x90 [ 374.698812][T10421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.698840][T10421] RIP: 0033:0x7ff5634ace59 [ 374.698867][T10421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.698892][T10421] RSP: 002b:00007ff5616dd028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 374.698922][T10421] RAX: ffffffffffffffda RBX: 00007ff563726090 RCX: 00007ff5634ace59 [ 374.698943][T10421] RDX: 0000000000000015 RSI: 0000000000600003 RDI: 0000200000000000 [ 374.698961][T10421] RBP: 00007ff5616dd090 R08: 0000000000000000 R09: 0000000000000000 [ 374.698978][T10421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.698995][T10421] R13: 00007ff563726128 R14: 00007ff563726090 R15: 00007ffd2ef731c8 [ 374.699036][T10421] [ 374.969840][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 375.047405][ T9] usb 1-1: new full-speed USB device number 95 using dummy_hcd [ 375.061174][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 375.247096][ T10] usb 4-1: New USB device found, idVendor=0e41, idProduct=4244, bcdDevice= 0.40 [ 375.247130][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.247152][ T10] usb 4-1: Product: ș槌樻漝楅꿥 [ 375.247169][ T10] usb 4-1: Manufacturer: 贠⼸쪣顜앳볟㖚ꥬ늤狿腷窇뾗啖惩쵴朚鏣첇豵彁蜏꺇麎ˠ东ຑꄉ핊揚ힾ⍴须嫵윛䕑桞汋豈鱽ᝠଽゝ汆콑矑邬陰䗇꒿᭗葁ㅓ㡔 [ 375.247197][ T10] usb 4-1: SerialNumber: syz [ 375.312257][ T9] usb 1-1: device descriptor read/64, error -71 [ 375.312870][ T1495] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.396264][T10427] tmpfs: Unknown parameter '\ ' [ 375.513454][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 375.513516][ T10] usb 4-1: MIDIStreaming interface descriptor not found [ 375.569527][ T9] usb 1-1: new full-speed USB device number 96 using dummy_hcd [ 375.609166][ T10] usb 4-1: USB disconnect, device number 58 [ 375.696491][ T9] usb 1-1: device descriptor read/64, error -71 [ 375.740853][ T5718] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 375.772197][ T5711] udevd[5711]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 375.798495][ T9] usb usb1-port1: attempt power cycle [ 375.883751][ T5718] usb 2-1: Using ep0 maxpacket: 8 [ 375.895521][ T5718] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 375.895556][ T5718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.895580][ T5718] usb 2-1: Product: syz [ 375.895597][ T5718] usb 2-1: Manufacturer: syz [ 375.895614][ T5718] usb 2-1: SerialNumber: syz [ 375.927503][ T5718] usb 2-1: config 0 descriptor?? [ 375.962547][ T5718] gspca_main: se401-2.14.0 probing 047d:5003 [ 376.121803][ T9] usb 1-1: new full-speed USB device number 97 using dummy_hcd [ 376.143062][ T9] usb 1-1: device descriptor read/8, error -71 [ 376.145059][T10427] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1803'. [ 376.173127][T10427] netlink: 656 bytes leftover after parsing attributes in process `syz.1.1803'. [ 376.369869][ T9] usb 1-1: new full-speed USB device number 98 using dummy_hcd [ 376.389757][ T9] usb 1-1: device descriptor read/8, error -71 [ 376.503453][ T9] usb usb1-port1: unable to enumerate USB device [ 376.512375][ T10] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 376.677503][ T10] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 376.677544][ T10] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 376.677566][ T10] usb 4-1: config 220 has no interface number 2 [ 376.677623][ T10] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 376.677645][ T10] usb 4-1: config 220 interface 0 has no altsetting 0 [ 376.677660][ T10] usb 4-1: config 220 interface 76 has no altsetting 0 [ 376.677674][ T10] usb 4-1: config 220 interface 1 has no altsetting 0 [ 376.681594][ T10] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 376.681628][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.681644][ T10] usb 4-1: Product: syz [ 376.681655][ T10] usb 4-1: Manufacturer: syz [ 376.681667][ T10] usb 4-1: SerialNumber: syz [ 376.951127][ T10] usb 4-1: selecting invalid altsetting 0 [ 376.986126][ T10] usb 4-1: selecting invalid altsetting 0 [ 376.987797][ T10] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 376.987937][ T10] uvcvideo 4-1:220.0: No valid video chain found. [ 377.025285][ T10] usb 4-1: selecting invalid altsetting 0 [ 377.025338][ T10] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 377.044820][ T10] usb 4-1: USB disconnect, device number 59 [ 377.132637][ T1342] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.132720][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.299542][ T5718] usb 2-1: reset high-speed USB device number 89 using dummy_hcd [ 377.300516][ T5718] usb 2-1: device reset changed ep0 maxpacket size! [ 377.411733][ T5718] gspca_se401: read req failed req 0x06 error -19 [ 377.425428][ T5718] usb 2-1: USB disconnect, device number 89 [ 377.570497][ T5718] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 377.712794][ T5718] usb 2-1: Using ep0 maxpacket: 32 [ 377.729636][ T5718] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.729676][ T5718] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.729720][ T5718] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 377.729748][ T5718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.780745][ T5718] usb 2-1: config 0 descriptor?? [ 377.803409][ T5718] hub 2-1:0.0: USB hub found [ 377.976161][ T5718] hub 2-1:0.0: 1 port detected [ 378.171373][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 378.185322][ T5718] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 378.185354][ T5718] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 378.223988][ T5718] usbhid 2-1:0.0: can't add hid device: -71 [ 378.224145][ T5718] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 378.265244][ T10] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 378.270348][ T5718] usb 2-1: USB disconnect, device number 90 [ 378.409270][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 378.413992][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 378.436757][ T10] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 378.436790][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.436814][ T10] usb 1-1: Product: syz [ 378.436831][ T10] usb 1-1: Manufacturer: syz [ 378.436848][ T10] usb 1-1: SerialNumber: syz [ 378.495952][ T10] usb 1-1: config 0 descriptor?? [ 378.539987][ T10] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 378.842915][ T10] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 378.843031][ T10] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 378.889440][ T10] usb 1-1: USB disconnect, device number 99 [ 379.123739][ T9] usb 2-1: new full-speed USB device number 91 using dummy_hcd [ 379.290595][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 379.290632][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.290703][ T9] usb 2-1: Product: syz [ 379.290721][ T9] usb 2-1: Manufacturer: syz [ 379.290738][ T9] usb 2-1: SerialNumber: syz [ 379.315907][ T9] usb 2-1: config 0 descriptor?? [ 379.573359][ T9] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 379.903632][ T10] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 380.074457][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 380.079260][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 380.118031][ T10] usb 1-1: New USB device found, idVendor=0e41, idProduct=4244, bcdDevice= 0.40 [ 380.118873][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.118908][ T10] usb 1-1: Product: ș槌樻 [ 380.118928][ T10] usb 1-1: Manufacturer: 贠⼸쪣顜앳볟㖚ꥬ늤狿腷窇뾗啖惩쵴朚鏣첇豵彁蜏꺇麎ˠ东ຑꄉ핊揚ힾ⍴须嫵윛䕑桞汋豈鱽ᝠଽゝ汆콑矑邬陰䗇꒿᭗葁ㅓ㡔 [ 380.119904][ T10] usb 1-1: SerialNumber: syz [ 380.495870][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 380.496331][ T10] usb 1-1: MIDIStreaming interface descriptor not found [ 381.247644][ T10] usb 1-1: USB disconnect, device number 100 [ 381.727505][ T9] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 381.771581][ T9] usb 2-1: USB disconnect, device number 91 [ 382.150322][ T5629] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 382.222748][ T5833] udevd[5833]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 382.253038][ T5629] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 382.280220][ T5629] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 382.301769][ T5629] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 382.313946][ T5629] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 382.391954][ T9] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 382.576216][ T9] usb 2-1: New USB device found, idVendor=0499, idProduct=5006, bcdDevice= 0.40 [ 382.576254][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.576279][ T9] usb 2-1: Product: 㐁 [ 382.576296][ T9] usb 2-1: Manufacturer: с [ 382.576313][ T9] usb 2-1: SerialNumber: 焪菺衤Ҡﺽ聚❐갈絹숯앦뭕풾ዙ਎ꉎὝ뾗冷躏肧ꚪ랢䮤㇀䷄秱䓾쬺褢ᢳꛁᲫ篸憕劖ꐕᔜ헙첲뗻ꁐ峂别皮덠桟鍌ੱⳔ螼ૉꁛኀ눋ॳ䀉鵢孔泥巭瓭싢ﺱẇꐳᴉ氜絚겒轻緻旛אּ퍥鄙 [ 382.713302][ T38] audit: type=1326 audit(1780034494.982:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10521 comm="syz.0.1843" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7fbe5905ce59 code=0x0 [ 383.010828][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 383.323714][T10534] FAULT_INJECTION: forcing a failure. [ 383.323714][T10534] name failslab, interval 1, probability 0, space 0, times 0 [ 383.323749][T10534] CPU: 1 UID: 0 PID: 10534 Comm: syz.0.1845 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 383.323775][T10534] Tainted: [L]=SOFTLOCKUP [ 383.323782][T10534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 383.323794][T10534] Call Trace: [ 383.323802][T10534] [ 383.323810][T10534] dump_stack_lvl+0xe8/0x150 [ 383.323838][T10534] should_fail_ex+0x46b/0x600 [ 383.323873][T10534] should_failslab+0xa8/0x100 [ 383.323901][T10534] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 383.323925][T10534] ? zswap_store+0xc23/0x2000 [ 383.323959][T10534] zswap_store+0xc23/0x2000 [ 383.323991][T10534] ? zswap_store+0x764/0x2000 [ 383.324046][T10534] ? __pfx_zswap_store+0x10/0x10 [ 383.324076][T10534] ? rt_spin_lock+0x1e0/0x400 [ 383.324102][T10534] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 383.324129][T10534] ? rt_spin_unlock+0x14f/0x200 [ 383.324157][T10534] ? rt_spin_unlock+0x160/0x200 [ 383.324183][T10534] swap_writeout+0x9d2/0x1560 [ 383.324226][T10534] shrink_folio_list+0x333c/0x53c0 [ 383.324277][T10534] ? __pfx_shrink_folio_list+0x10/0x10 [ 383.324340][T10534] ? __lock_acquire+0x6b5/0x2d10 [ 383.324369][T10534] reclaim_folio_list+0x100/0x430 [ 383.324402][T10534] ? __pfx_reclaim_folio_list+0x10/0x10 [ 383.324429][T10534] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 383.324462][T10534] reclaim_pages+0x45b/0x530 [ 383.324480][T10534] ? reacquire_held_locks+0x104/0x190 [ 383.324516][T10534] ? __pfx_reclaim_pages+0x10/0x10 [ 383.324541][T10534] ? madvise_cold_or_pageout_pte_range+0x16b8/0x1920 [ 383.324573][T10534] madvise_cold_or_pageout_pte_range+0x16dd/0x1920 [ 383.324619][T10534] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 383.324649][T10534] ? do_raw_spin_lock+0x12b/0x2f0 [ 383.324677][T10534] walk_pgd_range+0xed8/0x1ce0 [ 383.324730][T10534] ? __pfx_walk_pgd_range+0x10/0x10 [ 383.324758][T10534] __walk_page_range+0x17c/0x750 [ 383.324787][T10534] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 383.324824][T10534] walk_page_range_vma_unsafe+0x309/0x410 [ 383.324852][T10534] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 383.324874][T10534] ? rt_spin_unlock+0x14f/0x200 [ 383.324903][T10534] ? rt_spin_unlock+0x160/0x200 [ 383.324930][T10534] ? walk_page_range_vma+0x6b/0x90 [ 383.324954][T10534] madvise_vma_behavior+0x287f/0x4250 [ 383.324990][T10534] ? update_cfs_rq_load_avg+0x3fb/0x4e0 [ 383.325030][T10534] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 383.325065][T10534] ? __lock_acquire+0x6b5/0x2d10 [ 383.325094][T10534] ? __lock_acquire+0x6b5/0x2d10 [ 383.325118][T10534] ? pick_next_task_fair+0x1a68/0x1ab0 [ 383.325150][T10534] ? ktime_get_real_ts64+0xa9/0x3e0 [ 383.325170][T10534] ? lock_acquire+0x106/0x350 [ 383.325195][T10534] ? finish_task_switch+0x15f/0xbe0 [ 383.325217][T10534] ? lock_acquire+0x106/0x350 [ 383.325247][T10534] ? finish_task_switch+0x41f/0xbe0 [ 383.325270][T10534] ? lockdep_hardirqs_on+0x7a/0x110 [ 383.325299][T10534] ? finish_task_switch+0x41f/0xbe0 [ 383.325340][T10534] ? mas_prev_slot+0xb7e/0xc00 [ 383.325383][T10534] ? find_vma_prev+0x123/0x1b0 [ 383.325402][T10534] ? __pfx___schedule+0x10/0x10 [ 383.325427][T10534] ? __pfx_find_vma_prev+0x10/0x10 [ 383.325455][T10534] ? __lock_acquire+0x6b5/0x2d10 [ 383.325482][T10534] madvise_walk_vmas+0x573/0xae0 [ 383.325521][T10534] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 383.325554][T10534] ? blk_start_plug+0x6e/0x1b0 [ 383.325588][T10534] madvise_do_behavior+0x386/0x540 [ 383.325620][T10534] ? __pfx_madvise_do_behavior+0x10/0x10 [ 383.325645][T10534] ? down_read+0x156/0x200 [ 383.325680][T10534] do_madvise+0x26f/0x330 [ 383.325715][T10534] ? __pfx_do_madvise+0x10/0x10 [ 383.325754][T10534] ? __pfx_ksys_write+0x10/0x10 [ 383.325786][T10534] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.325809][T10534] __x64_sys_madvise+0xa6/0xc0 [ 383.325838][T10534] do_syscall_64+0x174/0x580 [ 383.325867][T10534] ? trace_irq_disable+0x3b/0x140 [ 383.325891][T10534] ? clear_bhb_loop+0x40/0x90 [ 383.325917][T10534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.325935][T10534] RIP: 0033:0x7fbe5905ce59 [ 383.325953][T10534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.325970][T10534] RSP: 002b:00007fbe572ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 383.325991][T10534] RAX: ffffffffffffffda RBX: 00007fbe592d5fa0 RCX: 00007fbe5905ce59 [ 383.326014][T10534] RDX: 0000000000000015 RSI: 0000000000600003 RDI: 0000200000000000 [ 383.326027][T10534] RBP: 00007fbe572ae090 R08: 0000000000000000 R09: 0000000000000000 [ 383.326039][T10534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.326050][T10534] R13: 00007fbe592d6038 R14: 00007fbe592d5fa0 R15: 00007ffec9c75f18 [ 383.326077][T10534] [ 383.815521][ T5618] .`: (slave syz_tun): Releasing backup interface [ 383.894901][ T9] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 383.943577][ T9] usb 2-1: USB disconnect, device number 92 [ 384.034784][ T5930] udevd[5930]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 384.236846][ T4930] Bluetooth: hci3: command tx timeout [ 384.456161][ T5718] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 384.503829][ T9] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 384.604475][ T5718] usb 1-1: Using ep0 maxpacket: 8 [ 384.613885][ T5718] usb 1-1: unable to get BOS descriptor or descriptor too short [ 384.640928][ T5718] usb 1-1: New USB device found, idVendor=0e41, idProduct=4244, bcdDevice= 0.40 [ 384.640965][ T5718] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.640989][ T5718] usb 1-1: Product: ș槌樻漝 [ 384.641008][ T5718] usb 1-1: Manufacturer: 贠⼸쪣顜앳볟㖚ꥬ늤狿腷窇뾗啖惩쵴朚鏣첇豵彁蜏꺇麎ˠ东ຑꄉ핊揚ힾ⍴须嫵윛䕑桞汋豈鱽ᝠଽゝ汆콑矑邬陰䗇꒿᭗葁ㅓ㡔 [ 384.641036][ T5718] usb 1-1: SerialNumber: syz [ 384.693139][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 384.713576][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 384.713609][ T9] usb 2-1: config 0 has no interface number 0 [ 384.713670][ T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.713701][ T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.713743][ T9] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 384.713770][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.802612][ T9] usb 2-1: config 0 descriptor?? [ 384.957376][ T5718] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 384.957440][ T5718] usb 1-1: MIDIStreaming interface descriptor not found [ 385.244417][T10459] syz.3.1819 (10459) used greatest stack depth: 16696 bytes left [ 385.291726][ T5718] usb 1-1: USB disconnect, device number 101 [ 385.499881][T10541] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 385.565919][ T9] usbhid 2-1:0.1: can't add hid device: -71 [ 385.566052][ T9] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 385.594105][T10552] FAULT_INJECTION: forcing a failure. [ 385.594105][T10552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 385.594136][T10552] CPU: 1 UID: 0 PID: 10552 Comm: syz.3.1849 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 385.594159][T10552] Tainted: [L]=SOFTLOCKUP [ 385.594165][T10552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 385.594178][T10552] Call Trace: [ 385.594187][T10552] [ 385.594197][T10552] dump_stack_lvl+0xe8/0x150 [ 385.594228][T10552] should_fail_ex+0x46b/0x600 [ 385.594258][T10552] _copy_to_user+0x31/0xb0 [ 385.594279][T10552] simple_read_from_buffer+0xe1/0x170 [ 385.594304][T10552] proc_fail_nth_read+0x1be/0x230 [ 385.594354][T10552] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 385.594386][T10552] ? rw_verify_area+0x2ac/0x4e0 [ 385.594417][T10552] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 385.594447][T10552] vfs_read+0x212/0xa80 [ 385.594487][T10552] ? __pfx_vfs_read+0x10/0x10 [ 385.594521][T10552] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 385.594557][T10552] ? lockdep_hardirqs_on+0x7a/0x110 [ 385.594582][T10552] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 385.594607][T10552] ? mutex_lock_nested+0x152/0x1d0 [ 385.594626][T10552] ? fdget_pos+0x252/0x320 [ 385.594660][T10552] ksys_read+0x156/0x270 [ 385.594692][T10552] ? __pfx_ksys_read+0x10/0x10 [ 385.594721][T10552] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.594739][T10552] do_syscall_64+0x174/0x580 [ 385.594763][T10552] ? trace_irq_disable+0x3b/0x140 [ 385.594783][T10552] ? clear_bhb_loop+0x40/0x90 [ 385.594803][T10552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.594820][T10552] RIP: 0033:0x7f4f2a5cd68e [ 385.594836][T10552] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 385.594851][T10552] RSP: 002b:00007f4f28844fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 385.594869][T10552] RAX: ffffffffffffffda RBX: 00007f4f288456c0 RCX: 00007f4f2a5cd68e [ 385.594881][T10552] RDX: 000000000000000f RSI: 00007f4f288450a0 RDI: 0000000000000005 [ 385.594892][T10552] RBP: 00007f4f28845090 R08: 0000000000000000 R09: 0000000000000000 [ 385.594903][T10552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.594913][T10552] R13: 00007f4f2a886128 R14: 00007f4f2a886090 R15: 00007fff2dd30898 [ 385.594938][T10552] [ 385.936096][ T9] usb 2-1: USB disconnect, device number 93 [ 386.140783][ T5833] udevd[5833]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 386.199195][T10559] overlayfs: unescaped trailing colons in lowerdir mount option. [ 386.221707][ T4930] Bluetooth: hci3: command tx timeout [ 386.266315][T10563] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 386.370441][ T5718] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 386.513416][ T5718] usb 1-1: Using ep0 maxpacket: 32 [ 386.518816][ T5718] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 386.518848][ T5718] usb 1-1: config 0 has no interface number 0 [ 386.543537][ T5718] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 386.543571][ T5718] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.543597][ T5718] usb 1-1: Product: syz [ 386.543609][ T5718] usb 1-1: Manufacturer: syz [ 386.543621][ T5718] usb 1-1: SerialNumber: syz [ 386.588498][ T5718] usb 1-1: config 0 descriptor?? [ 386.609577][ T5718] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 386.646697][ T9] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 386.865987][ T9] usb 4-1: New USB device found, idVendor=0499, idProduct=5006, bcdDevice= 0.40 [ 386.866032][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.866057][ T9] usb 4-1: Product: 㐁 [ 386.866073][ T9] usb 4-1: Manufacturer: с [ 386.866089][ T9] usb 4-1: SerialNumber: 焪菺衤Ҡﺽ聚❐갈絹숯앦뭕풾ዙ਎ꉎὝ뾗冷躏肧ꚪ랢䮤㇀䷄秱䓾쬺褢ᢳꛁᲫ篸憕劖ꐕᔜ헙첲뗻ꁐ峂别皮덠桟鍌ੱⳔ螼ૉꁛኀ눋ॳ䀉鵢孔泥巭瓭싢ﺱẇꐳᴉ氜絚겒轻緻旛אּ퍥鄙 [ 387.074712][ T5718] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 387.128092][ T5718] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 387.175688][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 387.197345][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 387.266524][ T5718] usb 1-1: USB disconnect, device number 102 [ 387.319559][T10577] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 387.321499][T10577] cramfs: wrong magic [ 387.394705][ T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 387.399864][ T5718] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 387.437565][ T9] usb 4-1: USB disconnect, device number 60 [ 387.508903][ T5815] udevd[5815]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 387.544922][ T5718] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 387.618593][ T5718] quatech2 1-1:0.51: device disconnected [ 387.725317][T10517] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.725790][T10517] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.726103][T10517] bridge_slave_0: entered allmulticast mode [ 387.730000][T10517] bridge_slave_0: entered promiscuous mode [ 387.783775][T10517] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.784145][T10517] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.784472][T10517] bridge_slave_1: entered allmulticast mode [ 387.831333][T10517] bridge_slave_1: entered promiscuous mode [ 387.973645][T10584] netlink: 'syz.0.1858': attribute type 4 has an invalid length. [ 388.021893][T10581] netlink: 'syz.0.1858': attribute type 4 has an invalid length. [ 388.123043][T10589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1857'. [ 388.207729][T10517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.208530][ T4930] Bluetooth: hci3: command tx timeout [ 388.260884][T10517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.302388][T10581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1858'. [ 388.314666][T10583] input: syz0 as /devices/virtual/input/input22 [ 388.353825][T10517] team0: Port device team_slave_0 added [ 388.356270][T10581] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 388.374283][T10517] team0: Port device team_slave_1 added [ 388.398937][ T5726] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 388.501193][T10517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.501208][T10517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.501231][T10517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.506344][T10517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.506361][T10517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.506403][T10517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.551718][ T5726] usb 2-1: Using ep0 maxpacket: 32 [ 388.563269][ T5726] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 388.563352][ T5726] usb 2-1: config 0 has no interfaces? [ 388.563449][ T5726] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 388.563522][ T5726] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.627627][ T5718] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 388.649619][ T5726] usb 2-1: config 0 descriptor?? [ 388.784217][ T5718] usb 1-1: config 8 has an invalid interface number: 235 but max is 0 [ 388.784252][ T5718] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 388.784279][ T5718] usb 1-1: config 8 has no interface number 0 [ 388.784313][ T5718] usb 1-1: config 8 interface 235 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 388.784334][ T5718] usb 1-1: config 8 interface 235 has no altsetting 0 [ 388.784358][ T5718] usb 1-1: New USB device found, idVendor=06cd, idProduct=0118, bcdDevice=3e.1f [ 388.784376][ T5718] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.807435][ T5718] hub 1-1:8.235: bad descriptor, ignoring hub [ 388.807541][ T5718] hub 1-1:8.235: probe with driver hub failed with error -5 [ 388.909207][ T5718] keyspan 1-1:8.235: Keyspan - (without firmware) converter detected [ 389.132808][ T5718] usb 1-1: USB disconnect, device number 103 [ 389.139984][ T5718] keyspan 1-1:8.235: device disconnected [ 389.216285][ T5718] usb 2-1: USB disconnect, device number 94 [ 389.334372][T10517] hsr_slave_0: entered promiscuous mode [ 389.337545][T10517] hsr_slave_1: entered promiscuous mode [ 389.339948][T10517] debugfs: 'hsr0' already exists in 'hsr' [ 389.339988][T10517] Cannot create hsr debugfs directory [ 390.092089][ T5718] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 390.185569][ T4930] Bluetooth: hci3: command tx timeout [ 390.290856][ T5718] usb 2-1: Using ep0 maxpacket: 8 [ 390.306344][ T5718] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 390.306417][ T5718] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 390.306437][ T5718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.341990][ T37] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 390.402876][ T5718] usb 2-1: config 0 descriptor?? [ 390.433007][ T5718] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 390.477580][ T5767] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 390.527749][ T37] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 390.527783][ T37] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 390.527807][ T37] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 390.527893][ T37] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.575299][ T37] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 390.575333][ T37] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 390.575417][ T37] usb 1-1: Product: syz [ 390.575435][ T37] usb 1-1: Manufacturer: syz [ 390.628690][T10594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.629204][T10594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.631643][T10594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.632164][T10594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.675301][ T5767] usb 4-1: Using ep0 maxpacket: 32 [ 390.696071][ T5767] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.696113][ T5767] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.696162][ T5767] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 390.696191][ T5767] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.701235][ T5718] gspca_vc032x: reg_r err -71 [ 390.701313][ T5718] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 390.778802][ T37] cdc_wdm 1-1:1.0: skipping garbage [ 390.778828][ T37] cdc_wdm 1-1:1.0: skipping garbage [ 390.779388][ T37] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 390.812330][ T5767] usb 4-1: config 0 descriptor?? [ 390.817302][ T5718] usb 2-1: USB disconnect, device number 95 [ 390.853130][ T5767] hub 4-1:0.0: USB hub found [ 391.033845][ T5767] hub 4-1:0.0: 1 port detected [ 391.105398][T10517] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.225150][ T5767] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 391.225173][ T5767] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 391.257556][ T5718] usb 1-1: USB disconnect, device number 104 [ 391.260333][ T5767] usbhid 4-1:0.0: can't add hid device: -71 [ 391.260462][ T5767] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 391.391795][ T5767] usb 4-1: USB disconnect, device number 61 [ 391.812038][T10517] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.858114][ T10] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 392.004344][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 392.004383][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 392.004414][ T10] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 392.004440][ T10] usb 2-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 392.066354][ T10] usb 2-1: New USB device found, idVendor=0499, idProduct=5006, bcdDevice= 0.40 [ 392.066390][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.066414][ T10] usb 2-1: Product: 㐁 [ 392.066432][ T10] usb 2-1: Manufacturer: с [ 392.066448][ T10] usb 2-1: SerialNumber: 焪菺衤Ҡﺽ聚❐갈絹숯앦뭕풾ዙ਎ꉎὝ뾗冷躏肧ꚪ랢䮤㇀䷄秱䓾쬺褢ᢳꛁᲫ篸憕劖ꐕᔜ헙첲뗻ꁐ峂别皮덠桟鍌ੱⳔ螼ૉꁛኀ눋ॳ䀉鵢孔泥巭瓭싢ﺱẇꐳᴉ氜絚겒轻緻旛אּ퍥鄙 [ 392.289402][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 392.408318][ T10] usb 2-1: USB disconnect, device number 96 [ 392.510698][ T5711] udevd[5711]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 392.666486][ T5726] usb 1-1: new full-speed USB device number 105 using dummy_hcd [ 392.668001][ T9] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 392.738320][T10517] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.789954][ T9] usb 4-1: device descriptor read/64, error -71 [ 393.047155][ T9] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 393.111653][T10517] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.113844][ T5726] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 393.171142][ T9] usb 4-1: device descriptor read/64, error -71 [ 393.260038][ T5726] usb 1-1: Using ep0 maxpacket: 16 [ 393.264792][ T5726] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 393.264843][ T5726] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 393.297034][ T9] usb usb4-port1: attempt power cycle [ 393.301096][ T5726] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 393.301129][ T5726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.301153][ T5726] usb 1-1: Product: syz [ 393.301169][ T5726] usb 1-1: Manufacturer: syz [ 393.301186][ T5726] usb 1-1: SerialNumber: syz [ 393.348814][ T5726] usb 1-1: config 0 descriptor?? [ 393.365305][ T5726] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 393.365333][ T5726] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 393.666431][ T9] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 393.686148][ T9] usb 4-1: device descriptor read/8, error -71 [ 393.923360][ T9] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 393.943351][ T9] usb 4-1: device descriptor read/8, error -71 [ 393.959512][ T9660] bridge_slave_1: left allmulticast mode [ 393.959550][ T9660] bridge_slave_1: left promiscuous mode [ 393.959908][ T9660] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.000088][ T5726] em28xx 1-1:0.0: chip ID is em2870 [ 394.047869][ T9] usb usb4-port1: unable to enumerate USB device [ 394.154188][ T9660] bridge_slave_0: left allmulticast mode [ 394.154218][ T9660] bridge_slave_0: left promiscuous mode [ 394.157430][ T9660] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.274889][T10634] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.1872'. [ 394.942590][T10641] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1875'. [ 395.438899][ T9660] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 395.499800][ T9660] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 395.539272][ T9660] .` (unregistering): Released all slaves [ 395.566715][ T5718] usb 1-1: USB disconnect, device number 106 [ 395.592715][ T5718] em28xx 1-1:0.0: Disconnecting em28xx [ 395.631233][ T5718] em28xx 1-1:0.0: Freeing device [ 395.648032][ T37] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 395.793346][ T37] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 395.793393][ T37] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 395.793429][ T37] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 395.793459][ T37] usb 2-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 395.797345][ T37] usb 2-1: New USB device found, idVendor=0499, idProduct=5006, bcdDevice= 0.40 [ 395.797375][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.797398][ T37] usb 2-1: Product: 㐁 [ 395.797414][ T37] usb 2-1: Manufacturer: с [ 395.797430][ T37] usb 2-1: SerialNumber: 焪菺衤Ҡﺽ聚❐갈絹숯앦뭕풾ዙ਎ꉎὝ뾗冷躏肧ꚪ랢䮤㇀䷄秱䓾쬺褢ᢳꛁᲫ篸憕劖ꐕᔜ헙첲뗻ꁐ峂别皮덠桟鍌ੱⳔ螼ૉꁛኀ눋ॳ䀉鵢孔泥巭瓭싢ﺱẇꐳᴉ氜絚겒轻緻旛אּ퍥鄙 [ 396.116320][ T37] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 396.309082][ T10] usb 1-1: new full-speed USB device number 107 using dummy_hcd [ 396.427030][ T37] usb 2-1: USB disconnect, device number 97 [ 396.459180][ T10] usb 1-1: device descriptor read/64, error -71 [ 396.781135][ T10] usb 1-1: new full-speed USB device number 108 using dummy_hcd [ 396.932769][ T5711] udevd[5711]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 396.941499][ T10] usb 1-1: device descriptor read/64, error -71 [ 397.042220][ T10] usb usb1-port1: attempt power cycle [ 397.056754][ T5818] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 397.089465][T10666] random: crng reseeded on system resumption [ 397.221566][ T5818] usb 4-1: Using ep0 maxpacket: 32 [ 397.241409][ T5818] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.241448][ T5818] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.241494][ T5818] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 397.241522][ T5818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.361158][ T5818] usb 4-1: config 0 descriptor?? [ 397.376835][ T5818] hub 4-1:0.0: USB hub found [ 397.390176][ T10] usb 1-1: new full-speed USB device number 109 using dummy_hcd [ 397.509381][ T10] usb 1-1: device descriptor read/8, error -71 [ 397.565709][ T5818] hub 4-1:0.0: 1 port detected [ 397.763818][ T10] usb 1-1: new full-speed USB device number 110 using dummy_hcd [ 397.776001][ T5818] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 397.776030][ T5818] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 397.811127][ T10] usb 1-1: device descriptor read/8, error -71 [ 397.812423][ T5818] usbhid 4-1:0.0: can't add hid device: -71 [ 397.812539][ T5818] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 397.939779][ T10] usb usb1-port1: unable to enumerate USB device [ 397.953742][ T5818] usb 4-1: USB disconnect, device number 66 [ 397.976110][T10674] ================================================================== [ 397.976201][T10674] BUG: KASAN: slab-use-after-free in reverse_path_check_proc+0x5b/0x240 [ 397.976285][T10674] Read of size 8 at addr ffff888021af2d00 by task syz.1.1881/10674 [ 397.976310][T10674] [ 397.976335][T10674] CPU: 0 UID: 0 PID: 10674 Comm: syz.1.1881 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 397.976375][T10674] Tainted: [L]=SOFTLOCKUP [ 397.976384][T10674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 397.976401][T10674] Call Trace: [ 397.976412][T10674] [ 397.976422][T10674] dump_stack_lvl+0xe8/0x150 [ 397.976454][T10674] print_address_description+0x55/0x1e0 [ 397.976486][T10674] ? reverse_path_check_proc+0x5b/0x240 [ 397.976523][T10674] print_report+0x58/0x70 [ 397.976552][T10674] kasan_report+0x117/0x150 [ 397.976583][T10674] ? reverse_path_check_proc+0x5b/0x240 [ 397.976621][T10674] ? ep_insert+0xbbb/0x1820 [ 397.976651][T10674] reverse_path_check_proc+0x5b/0x240 [ 397.976689][T10674] ? ep_insert+0xbbb/0x1820 [ 397.976718][T10674] ep_insert+0xc6c/0x1820 [ 397.976755][T10674] ? __pfx_ep_insert+0x10/0x10 [ 397.976792][T10674] ? lockdep_hardirqs_on+0x7a/0x110 [ 397.976828][T10674] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 397.976865][T10674] ? mutex_lock_nested+0x152/0x1d0 [ 397.976892][T10674] ? do_epoll_ctl_file+0xc69/0xed0 [ 397.976925][T10674] do_epoll_ctl_file+0x8bb/0xed0 [ 397.976958][T10674] ? do_epoll_ctl_file+0xac3/0xed0 [ 397.976992][T10674] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 397.977026][T10674] ? __fget_files+0x3a6/0x420 [ 397.977054][T10674] ? __fget_files+0x2a/0x420 [ 397.977086][T10674] __se_sys_epoll_ctl+0x14e/0x210 [ 397.977120][T10674] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 397.977159][T10674] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.977184][T10674] do_syscall_64+0x174/0x580 [ 397.977217][T10674] ? trace_irq_disable+0x3b/0x140 [ 397.977243][T10674] ? clear_bhb_loop+0x40/0x90 [ 397.977280][T10674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.977303][T10674] RIP: 0033:0x7fd30373ce59 [ 397.977325][T10674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.977347][T10674] RSP: 002b:00007fd301106028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 397.977373][T10674] RAX: ffffffffffffffda RBX: 00007fd3039b6360 RCX: 00007fd30373ce59 [ 397.977392][T10674] RDX: 0000000000000009 RSI: 0000000000000001 RDI: 000000000000000c [ 397.977406][T10674] RBP: 00007fd3037d2d6f R08: 0000000000000000 R09: 0000000000000000 [ 397.977422][T10674] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 397.977439][T10674] R13: 00007fd3039b63f8 R14: 00007fd3039b6360 R15: 00007ffcb984d7d8 [ 397.977467][T10674] [ 397.977476][T10674] [ 397.977483][T10674] Allocated by task 10670: [ 397.977494][T10674] kasan_save_track+0x3e/0x80 [ 397.977520][T10674] __kasan_slab_alloc+0x6c/0x80 [ 397.977546][T10674] kmem_cache_alloc_noprof+0x33b/0x680 [ 397.977572][T10674] ep_insert+0x512/0x1820 [ 397.977600][T10674] do_epoll_ctl_file+0x8bb/0xed0 [ 397.977628][T10674] __se_sys_epoll_ctl+0x14e/0x210 [ 397.977658][T10674] do_syscall_64+0x174/0x580 [ 397.977691][T10674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.977714][T10674] [ 397.977720][T10674] Freed by task 10665: [ 397.977731][T10674] kasan_save_track+0x3e/0x80 [ 397.977754][T10674] kasan_save_free_info+0x46/0x50 [ 397.977787][T10674] __kasan_slab_free+0x5c/0x80 [ 397.977811][T10674] kmem_cache_free+0x187/0x6c0 [ 397.977837][T10674] eventpoll_release_file+0xc2/0x240 [ 397.977864][T10674] __fput+0x83c/0xa70 [ 397.977887][T10674] task_work_run+0x1d9/0x270 [ 397.977912][T10674] exit_to_user_mode_loop+0x193/0x680 [ 397.977937][T10674] do_syscall_64+0x353/0x580 [ 397.977969][T10674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.977992][T10674] [ 397.977998][T10674] The buggy address belongs to the object at ffff888021af2d00 [ 397.977998][T10674] which belongs to the cache ep_head of size 16 [ 397.978036][T10674] The buggy address is located 0 bytes inside of [ 397.978036][T10674] freed 16-byte region [ffff888021af2d00, ffff888021af2d10) [ 397.978111][T10674] [ 397.978117][T10674] The buggy address belongs to the physical page: [ 397.978176][T10674] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888021af2d20 pfn:0x21af2 [ 397.978201][T10674] memcg:ffff88805fede001 [ 397.978213][T10674] flags: 0x80000000000200(workingset|node=0|zone=1) [ 397.978233][T10674] page_type: f5(slab) [ 397.978263][T10674] raw: 0080000000000200 ffff88814041ddc0 ffff88801b3e0088 ffffea0000ddc2d0 [ 397.978286][T10674] raw: ffff888021af2d20 0000000800800037 00000000f5000000 ffff88805fede001 [ 397.978299][T10674] page dumped because: kasan: bad access detected [ 397.978317][T10674] page_owner tracks the page as allocated [ 397.978327][T10674] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4987, tgid 4987 (udevd), ts 48795941032, free_ts 48794104094 [ 397.978367][T10674] post_alloc_hook+0x1f9/0x250 [ 397.978395][T10674] get_page_from_freelist+0x265c/0x26e0 [ 397.978426][T10674] __alloc_frozen_pages_noprof+0x18d/0x380 [ 397.978456][T10674] allocate_slab+0x74/0x5e0 [ 397.978490][T10674] refill_objects+0x33c/0x3d0 [ 397.978522][T10674] __pcs_replace_empty_main+0x373/0x720 [ 397.978558][T10674] kmem_cache_alloc_noprof+0x433/0x680 [ 397.978584][T10674] ep_insert+0x512/0x1820 [ 397.978611][T10674] do_epoll_ctl_file+0x8bb/0xed0 [ 397.978640][T10674] __se_sys_epoll_ctl+0x14e/0x210 [ 397.978668][T10674] do_syscall_64+0x174/0x580 [ 397.978702][T10674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.978724][T10674] page last free pid 21 tgid 21 stack trace: [ 397.978737][T10674] __free_frozen_pages+0x10af/0x1190 [ 397.978763][T10674] rcu_cpu_kthread+0x99e/0x1470 [ 397.978791][T10674] smpboot_thread_fn+0x541/0xa50 [ 397.978831][T10674] kthread+0x388/0x470 [ 397.978854][T10674] ret_from_fork+0x514/0xb70 [ 397.978879][T10674] ret_from_fork_asm+0x1a/0x30 [ 397.978907][T10674] [ 397.978914][T10674] Memory state around the buggy address: [ 397.978928][T10674] ffff888021af2c00: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 397.978946][T10674] ffff888021af2c80: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 397.978964][T10674] >ffff888021af2d00: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 397.978978][T10674] ^ [ 397.978991][T10674] ffff888021af2d80: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 397.979008][T10674] ffff888021af2e00: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 397.979022][T10674] ================================================================== [ 397.979299][T10674] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 397.979324][T10674] CPU: 0 UID: 0 PID: 10674 Comm: syz.1.1881 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 397.979360][T10674] Tainted: [L]=SOFTLOCKUP [ 397.979370][T10674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 397.979387][T10674] Call Trace: [ 397.979398][T10674] [ 397.979409][T10674] vpanic+0x56c/0xa60 [ 397.979449][T10674] ? __pfx_vpanic+0x10/0x10 [ 397.979488][T10674] panic+0xc5/0xd0 [ 397.979520][T10674] ? __pfx_panic+0x10/0x10 [ 397.979554][T10674] ? preempt_schedule_thunk+0x16/0x40 [ 397.979593][T10674] ? preempt_schedule_thunk+0x16/0x40 [ 397.979629][T10674] ? reverse_path_check_proc+0x5b/0x240 [ 397.979664][T10674] check_panic_on_warn+0x89/0xb0 [ 397.979692][T10674] ? reverse_path_check_proc+0x5b/0x240 [ 397.979728][T10674] end_report+0x73/0x170 [ 397.979758][T10674] ? reverse_path_check_proc+0x5b/0x240 [ 397.979793][T10674] kasan_report+0x128/0x150 [ 397.979823][T10674] ? reverse_path_check_proc+0x5b/0x240 [ 397.979860][T10674] ? ep_insert+0xbbb/0x1820 [ 397.979890][T10674] reverse_path_check_proc+0x5b/0x240 [ 397.979927][T10674] ? ep_insert+0xbbb/0x1820 [ 397.979957][T10674] ep_insert+0xc6c/0x1820 [ 397.979994][T10674] ? __pfx_ep_insert+0x10/0x10 [ 397.980029][T10674] ? lockdep_hardirqs_on+0x7a/0x110 [ 397.980063][T10674] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 397.980100][T10674] ? mutex_lock_nested+0x152/0x1d0 [ 397.980126][T10674] ? do_epoll_ctl_file+0xc69/0xed0 [ 397.980159][T10674] do_epoll_ctl_file+0x8bb/0xed0 [ 397.980193][T10674] ? do_epoll_ctl_file+0xac3/0xed0 [ 397.980232][T10674] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 397.980293][T10674] ? __fget_files+0x3a6/0x420 [ 397.980321][T10674] ? __fget_files+0x2a/0x420 [ 397.980353][T10674] __se_sys_epoll_ctl+0x14e/0x210 [ 397.980387][T10674] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 397.980424][T10674] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.980449][T10674] do_syscall_64+0x174/0x580 [ 397.980481][T10674] ? trace_irq_disable+0x3b/0x140 [ 397.980508][T10674] ? clear_bhb_loop+0x40/0x90 [ 397.980535][T10674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.980559][T10674] RIP: 0033:0x7fd30373ce59 [ 397.980579][T10674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.980602][T10674] RSP: 002b:00007fd301106028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 397.980627][T10674] RAX: ffffffffffffffda RBX: 00007fd3039b6360 RCX: 00007fd30373ce59 [ 397.980646][T10674] RDX: 0000000000000009 RSI: 0000000000000001 RDI: 000000000000000c [ 397.980661][T10674] RBP: 00007fd3037d2d6f R08: 0000000000000000 R09: 0000000000000000 [ 397.980677][T10674] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 397.980693][T10674] R13: 00007fd3039b63f8 R14: 00007fd3039b6360 R15: 00007ffcb984d7d8 [ 397.980721][T10674] [ 397.981340][T10674] Kernel Offset: disabled