last executing test programs: 6m38.70165512s ago: executing program 3 (id=267): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804020000"], 0x7) 6m37.239821206s ago: executing program 3 (id=270): r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020001000003be8c5ee17688a8003200070100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880000d6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3da400001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500394100000000000affff02dfccebf6ba00085d024f0298e9e90554062a80e605007f71174aa9", 0xee) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00') read$FUSE(r2, &(0x7f0000004900)={0x2020}, 0x2020) r3 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') read$FUSE(r3, &(0x7f0000000000)={0x2020}, 0x96) close(r0) read$FUSE(r3, &(0x7f0000002100)={0x2020}, 0x2020) 6m36.911627546s ago: executing program 3 (id=272): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x2c, r2, 0x1, 0x70bd25, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xec, r2, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x30}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x3bd}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0xfa}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x90, 0xbe, "34749613a2020e4993039188716ad35ac0dba0e62a03c7937148eece2af7615a669d67f962637a707aff0fe4cd433767b175ad4bd4bff805e91879a7272ddd5b55f803a30b4bc194e21d07eb8eabea74339b240f4d0af8b0b5e003e2d0796e1fa73b30b951c675957f045573954bc933d5f5d240a05907ef7808c00158b6303c52a2e5e46a17d1621656cab5"}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x18, 0xbd, [0x1, 0x404, 0x7ee, 0x7, 0x8, 0x3ff, 0xfffd, 0x7, 0x4, 0x7]}]}, 0xec}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 6m36.648357718s ago: executing program 3 (id=274): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd_mnt\x00', 0x1ff) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) mount(0x0, &(0x7f0000000180)='./nfsd_mnt\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd_mnt/threads\x00', 0x2400, 0xfe) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setopts(0x4200, r1, 0x7, 0x200009) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000003800)={0x2020}, 0x2020) 6m36.379416467s ago: executing program 3 (id=276): timerfd_create(0x8, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000010000100000000000000000002"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x5f, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_usb_connect(0x5, 0x53, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x41, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x2, 0x5}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4400ae8f, &(0x7f0000000180)=@x86={0x40, 0x40, 0x8, 0x0, 0x0, 0x0, 0x10, 0x3, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 6m35.195914154s ago: executing program 3 (id=279): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000000000002500000008000300", @ANYRES32=r2, @ANYBLOB="080037000000000008003500000000000a0006006394bc11539d0000110007007001000000117572dab64fe50d00000005000800010000000800090005ac0f0008002600850900000a0034"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (fail_nth: 2) 6m34.562579084s ago: executing program 32 (id=279): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000000000002500000008000300", @ANYRES32=r2, @ANYBLOB="080037000000000008003500000000000a0006006394bc11539d0000110007007001000000117572dab64fe50d00000005000800010000000800090005ac0f0008002600850900000a0034"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (fail_nth: 2) 3m25.089117231s ago: executing program 2 (id=732): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=ANY=[], 0x48}, 0x20040010) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_CAP_PTP_KVM(r1, 0x4068aea3, &(0x7f0000000d40)) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) add_key$user(0x0, &(0x7f00000005c0), 0x0, 0x0, 0xfffffffffffffffd) preadv(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000300)=""/3, 0x3}], 0x2, 0x0, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m23.629446475s ago: executing program 2 (id=737): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x5f, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_usb_connect(0x5, 0x53, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x41, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x2, 0x5}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000180)=@x86={0x40, 0x40, 0x8, 0x0, 0x0, 0x0, 0x10, 0x3, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m21.464328968s ago: executing program 2 (id=742): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x5f, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_usb_connect(0x5, 0x0, 0x0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m17.944794687s ago: executing program 2 (id=748): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0xef) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/dynamic_debug/control\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f00000013c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) mkdir(&(0x7f0000000000)='config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='config/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x0, 0x1e3) read$FUSE(r4, &(0x7f0000003400)={0x2020, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000005440)={0x5, 0x9, {r3}, {r1}, 0x4, 0x4}) write$FUSE_DIRENTPLUS(r0, &(0x7f0000005480)={0x1f0, 0x0, r5, [{{0x6, 0x2, 0xff, 0x3, 0x9, 0x4, {0x0, 0x9, 0x1, 0x5, 0x5, 0x3, 0x9, 0x1, 0x1, 0x2000, 0x80000001, r1, r2, 0x1, 0x80000001}}, {0x2, 0x1, 0x1, 0x7, '*'}}, {{0x0, 0x0, 0xfffffffffffffffa, 0x3, 0x9588, 0x80000000, {0x5, 0x3, 0x8, 0x2, 0xffffffffffffffff, 0x7, 0x3, 0x8, 0x7, 0xa000, 0x8, r6, r2, 0xd, 0x8}}, {0x5, 0xfffffffffffffffd, 0x8, 0x1000, 'debugfs\x00'}}, {{0x5, 0x3, 0x94, 0x70ec, 0x7f, 0x1, {0x0, 0x5c1, 0xfa0, 0x7f, 0xdac6, 0x200, 0xc9, 0x6, 0x1, 0x2000, 0x0, r1, r2, 0x10001, 0x9}}, {0x4, 0x21f, 0x1, 0x5, '*'}}]}, 0x1f0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x8080) syz_clone(0x80000, &(0x7f0000000000)="5c5e6cde5aa59b03a4f09adb547c2747c31bd08c259580dc3079b50d22a89a8fa9732bf0421e8af86c46c5adb00a1a8d7ce73b606d87bcca3d47049f0a0c3945cd17c636b7324ccda6ecb8c306aff9889b556330a7783a55733e0bc5779f68e7693ae7cc26ca5d3f22facfcadacbaff1a9ca39c754", 0x75, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000240)="e9456cec5880740745a5d843e8c84812f42989684eb5dd0d67729ce27d807002c072ef6f9e36e5b5dfa5acf725c3f789d5dba3ba10e58dfa90c0733efdb0ba88c6d1fe48e68bb265b3cdcda9f4402fb673a811042a41f1f04e36580af6baae5536cf145c0a5f7f0da395a5b0a10151c42d6a870ea65aa289ffaf2f3d80685699340fcf4419dc009c75373fcfa1d1122761a4dc5f92ce5e76ecade961a76c32f0fb15f098398ae3a35a995f4c372452fae1cf98a0a36e1d79") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0xef) (async) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/dynamic_debug/control\x00', 0x2, 0x0) (async) read$FUSE(r0, &(0x7f00000013c0)={0x2020}, 0x2020) (async) mkdir(&(0x7f0000000000)='config\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000100)='config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000001c0)='config/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x0, 0x1e3) (async) read$FUSE(r4, &(0x7f0000003400)={0x2020}, 0x2020) (async) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000005440)={0x5, 0x9, {r3}, {r1}, 0x4, 0x4}) (async) write$FUSE_DIRENTPLUS(r0, &(0x7f0000005480)={0x1f0, 0x0, r5, [{{0x6, 0x2, 0xff, 0x3, 0x9, 0x4, {0x0, 0x9, 0x1, 0x5, 0x5, 0x3, 0x9, 0x1, 0x1, 0x2000, 0x80000001, r1, r2, 0x1, 0x80000001}}, {0x2, 0x1, 0x1, 0x7, '*'}}, {{0x0, 0x0, 0xfffffffffffffffa, 0x3, 0x9588, 0x80000000, {0x5, 0x3, 0x8, 0x2, 0xffffffffffffffff, 0x7, 0x3, 0x8, 0x7, 0xa000, 0x8, r6, r2, 0xd, 0x8}}, {0x5, 0xfffffffffffffffd, 0x8, 0x1000, 'debugfs\x00'}}, {{0x5, 0x3, 0x94, 0x70ec, 0x7f, 0x1, {0x0, 0x5c1, 0xfa0, 0x7f, 0xdac6, 0x200, 0xc9, 0x6, 0x1, 0x2000, 0x0, r1, r2, 0x10001, 0x9}}, {0x4, 0x21f, 0x1, 0x5, '*'}}]}, 0x1f0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x8080) (async) syz_clone(0x80000, &(0x7f0000000000)="5c5e6cde5aa59b03a4f09adb547c2747c31bd08c259580dc3079b50d22a89a8fa9732bf0421e8af86c46c5adb00a1a8d7ce73b606d87bcca3d47049f0a0c3945cd17c636b7324ccda6ecb8c306aff9889b556330a7783a55733e0bc5779f68e7693ae7cc26ca5d3f22facfcadacbaff1a9ca39c754", 0x75, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000240)="e9456cec5880740745a5d843e8c84812f42989684eb5dd0d67729ce27d807002c072ef6f9e36e5b5dfa5acf725c3f789d5dba3ba10e58dfa90c0733efdb0ba88c6d1fe48e68bb265b3cdcda9f4402fb673a811042a41f1f04e36580af6baae5536cf145c0a5f7f0da395a5b0a10151c42d6a870ea65aa289ffaf2f3d80685699340fcf4419dc009c75373fcfa1d1122761a4dc5f92ce5e76ecade961a76c32f0fb15f098398ae3a35a995f4c372452fae1cf98a0a36e1d79") (async) 3m17.4839835s ago: executing program 2 (id=751): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x5f, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_usb_connect(0x5, 0x53, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x41, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x2, 0x5}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000180)=@x86={0x40, 0x40, 0x8, 0x0, 0x0, 0x0, 0x10, 0x3, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m14.939927601s ago: executing program 2 (id=756): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x5f, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m14.720411356s ago: executing program 33 (id=756): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x5f, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11.078716508s ago: executing program 1 (id=1314): socket$inet(0x2, 0x2, 0x0) (async) socket$inet(0x2, 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet(0x2, 0x2, 0x1) (async) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x88}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="f4000000290001000000000000000000fc020000000000000000000000000001fe8000000000000000000000000000200000000000020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="be6b6e000000000050001100ac1414aa000000000000000000000000ffffffff0000000000000000fc020000000000000000000000000001ff0200000000000000000000000000013c040000080000000a000a0028001e"], 0xf4}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="f4000000290001000000000000000000fc020000000000000000000000000001fe8000000000000000000000000000200000000000020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="be6b6e000000000050001100ac1414aa000000000000000000000000ffffffff0000000000000000fc020000000000000000000000000001ff0200000000000000000000000000013c040000080000000a000a0028001e"], 0xf4}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYRES16, @ANYBLOB="07000000000000000000050000001800038014000380100001800b0002007d2e28215e5c0000180001801400020073797a5f74756e0000000000000000009c1fc0bf6611ce4271375ef643d1bc6c746534ed5f933f5f94103547c1f2bbb374ee0990facc99171b4f90a5352a0bebe1af8111e3e018464c23e81f4719640f12c2dabb29cd47"], 0x44}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYRES16, @ANYBLOB="07000000000000000000050000001800038014000380100001800b0002007d2e28215e5c0000180001801400020073797a5f74756e0000000000000000009c1fc0bf6611ce4271375ef643d1bc6c746534ed5f933f5f94103547c1f2bbb374ee0990facc99171b4f90a5352a0bebe1af8111e3e018464c23e81f4719640f12c2dabb29cd47"], 0x44}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x34, &(0x7f00000002c0)={0x40, 0x16, 0x3a, "e307d3b0eebe26d56b9b2b5f8d12f2a7c8faf3cb1722918b32db18df3dc0c84bd269854c09ff189e803c43073595cb5c1d2e4eb28e5426c9c586"}, 0x0, 0x0, &(0x7f0000000400)={0xc0, 0xa1, 0x4, 0x1ff}, 0x0, 0x0}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) (async) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r9, r8, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r10, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r10, 0xae80, 0x0) socket$igmp6(0xa, 0x3, 0x2) (async) r11 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 9.979661551s ago: executing program 1 (id=1318): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000080)=0x1, 0x4) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) fsetxattr$security_ima(r1, &(0x7f0000000000), &(0x7f0000000200)=ANY=[@ANYBLOB="05010300007fff00b94387d80c0bd9716c5cf8370826a939c3546bc5cae1e4f5e960ee14945f5b2e7fc24521123341ffc5b34cfcd6daa10a3d3305a0db952a18190e30552d9b0100000001000000e488396a052026397bc60bb1f4509ae4075c88461e297dc2ea3909b99eeec1c4861e32f5e33f36c24f903b5cfbfeef32d4ca6dbbcc304230c8106a21e9f51597f36fa03fabdad001bc38dc6434298ae7c8f859d00bd8969686b58d816fb519b439564b64006c5a90244cdfb5fba4ac615a88e100000000"], 0xc2, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000180)=0xffff0018) ioctl$SOUND_PCM_READ_BITS(r3, 0x80045005, 0x0) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080)) 9.456180306s ago: executing program 5 (id=1321): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000380)=ANY=[@ANYBLOB="3e000100000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @immediate={{0xe}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x4}, @NFTA_IMMEDIATE_DATA={0x4}, @NFTA_IMMEDIATE_DATA={0x4}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4c044}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) sendmsg$NFC_CMD_LLC_SET_PARAMS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000fbdbdf251000000008000100", @ANYRES32=0x0, @ANYBLOB="0500100021"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8880) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000380)=ANY=[@ANYBLOB="3e000100000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @immediate={{0xe}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x4}, @NFTA_IMMEDIATE_DATA={0x4}, @NFTA_IMMEDIATE_DATA={0x4}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4c044}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) (async) sendmsg$NFC_CMD_LLC_SET_PARAMS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000fbdbdf251000000008000100", @ANYRES32=0x0, @ANYBLOB="0500100021"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8880) (async) syz_usb_control_io$uac3(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) 8.994433157s ago: executing program 1 (id=1324): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f00000000c0)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000540)=ANY=[@ANYBLOB="3426a592d11500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_ENABLE_HIGH_LNB_VOLTAGE(r1, 0x6f44, 0x4) syz_usb_control_io$printer(r0, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000480)=ANY=[@ANYBLOB="bb8af6c6be69a2ed037beeb53a907e8c3c3631a99f53de0b10712fa5ee34826907e669ed6c0defbd1e9bd69c4df0ee9429378a3b0e3048c00d0881e3c50a35035392cf59098c0078a649a4d94098aa3b8262c7eafd008fb81b3b401e174a37404d7d4ab777ca71818da1a2d6e7b2709b8948"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/num_groups\x00', 0x1, 0x0) write(r4, &(0x7f0000000380)='2', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/midi1_num_groups\x00', 0x1, 0x0) write(r5, &(0x7f0000000440)='2', 0x1) symlinkat(&(0x7f0000000880)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000008c0)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00', 0x100, 0x1) write(r6, &(0x7f0000000940)='dummy_udc.0', 0xb) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)="17", 0x1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 7.536676542s ago: executing program 4 (id=1327): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x42, 0x40) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000002, 0x42031, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000002240)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000240)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x7, "df3017e91e9bc2"}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000001240)={{r7, 0x96, 0x1ff, 0x800, 0x7, 0x5, 0x1, 0xa42, 0x401, 0xb499, 0x6, 0x100000001, 0x6, 0x7f, 0xb2}}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), r8) sendmsg$SEG6_CMD_DUMPHMAC(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)=ANY=[@ANYBLOB="32000000bc81a3394c02fff0555935fecc0968397452278916081e540b9d6169bdcb7c07f355a078ada462a4734c41b0504adb620c1060a620", @ANYRES16=r9, @ANYBLOB="070327bd7000fedbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x4000) ioctl$UFFDIO_MOVE(r3, 0xc028aa05, 0x0) ioctl(r8, 0x5, &(0x7f0000002440)="f66546ec960972840bc33552570ae16951dcf9ce8c936d40d8750ef56fb3132c051bc9f54efd1cd80d635a9b508314b9e6b6ecc064e9c2276adc8f649ee976693dce8ead22379596e9f074ddfbb7b1d0") write$cgroup_pid(r2, &(0x7f0000000140), 0x12) 7.411699951s ago: executing program 5 (id=1328): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0xffff, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) r1 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r1, 0x0) ftruncate(r1, 0x2) write$P9_RWSTAT(r0, &(0x7f0000000080)={0x7, 0x7f, 0x2}, 0x7) r2 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e7cc94"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="000c04"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000a00)={0x44, &(0x7f0000000700)={0x40, 0x13, 0x4, "010aac14"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r2, &(0x7f00000008c0)={0x14, &(0x7f0000000780)={0x20, 0x21, 0xec, {0xec, 0xf, "fb394724cf353045545a336936f8ac7c580dc3e6aabbaa94f43ae603333288524ca1281cca961b59205a5a702a058821131ab1b19885fb42380b8ec1288a3e734cc5ea86bf995810ef962d015daf45d2cf76c53d40c3972c85c29c5aec55d167a521317fb3879b245e5696d8565e61d0853f14ea5d4e7ed380551211a05a4b6837000d31ca2353259a31e2ef124b584174bb687d0c367c35ed8b4e65bcba1832de60c421f6187bb06686ebdcf2eb6f0677ba5a6ad39277a0afea92143957c13e164ecc3e02559f750746bf96b27f9b5053665f5bfadcc506762cd3413d2d40c11873802e29f43251ba9b"}}, &(0x7f0000000880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3001}}}, &(0x7f0000000d40)={0x44, &(0x7f0000000a80)={0x40, 0x18, 0xe3, "3ab0cd5304f5c7a572a5806002f6dc86268e4b5d5b1a99f5b6d25321d455956031d04c721cc469ea947adf09c8b233185675abbf7f1eacacbe99282615403cc0051a58a9ed2b6b58feb01f678bbab496c292b15a946fc2102c3eb5333311bee68c04ea8e0ec6a6acad465de150e46e3be6effcaf82164fe0b79924b4d8f98c028e1e762bcc06f7d48f196639a2de94fe8d67bb2df33813eefababd5e622e5a4e54db7ff4fac8b26bd026764138e37906cb73f599c893ac6419525ffc5072351feb429fcd1e1c3e30f9654dfed4b5811e03606c746b2458f2e836f0b467bddb71cc2416"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000c00)={0x20, 0x81, 0x3, "45a84e"}, &(0x7f0000000c40)={0x20, 0x82, 0x1, "8f"}, &(0x7f0000000c80)={0x20, 0x83, 0x1, "a5"}, &(0x7f0000000cc0)={0x20, 0x84, 0x3, "b73496"}, &(0x7f0000000d00)={0x20, 0x85, 0x3, '=p2'}}) syz_usb_control_io$printer(r2, 0x0, &(0x7f00000009c0)={0x34, &(0x7f0000000740)={0x20, 0x14, 0x4, "84029129"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.244673712s ago: executing program 4 (id=1329): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100535414fbcc65721005000000200001800d0001007564703a73797a320900"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r3, 0x80089419, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000140)={@host}) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close_range(r2, r4, 0x0) futex_waitv(&(0x7f00000012c0)=[{0xfffffffffffffffd, 0x0, 0x82}, {0x4, 0x0, 0x82}], 0x2, 0x0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r5 = dup2(r2, r2) copy_file_range(r5, &(0x7f00000000c0), r3, &(0x7f0000000100), 0x24f, 0x0) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) write(r6, &(0x7f0000000300)='ACME', 0x4) 7.163512889s ago: executing program 4 (id=1330): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x9, 0x3}, 0x30, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(r4, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x3}, 0x30, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) landlock_restrict_self(r5, 0x0) connect$unix(r3, &(0x7f0000000640)=@file={0x1}, 0x6e) r8 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) r9 = syz_usb_connect$midi(0x2, 0xe9, &(0x7f0000000980)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x2466, 0x8010, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd7, 0x1, 0x1, 0x3, 0x0, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x6, 0x1, 0x3, 0x20, 0xf, [@ms_header={0x7, 0x24, 0x1, 0x8, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x1, 0x7}, @midi_out_jack={0xd, 0x24, 0x3, 0x1, 0x9d, 0x3, [{0x36, 0x9}, {0x6, 0x7f}, {0x81, 0x7}], 0x2}, @ms_header={0x7, 0x24, 0x1, 0x8001, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x8000, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x5, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0xf7, 0x42}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x4, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0xb, 0x3}], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x6, 0x0, 0x1, {0xf, 0x25, 0x1, 0xb, "1021c87aac92ff5d1b7c42"}}}, {{0x9, 0x5, 0x8e, 0x2, 0x20, 0x3, 0xe2, 0xff, {0xa, 0x25, 0x1, 0x6, "58207e6f6ba0"}}}, {{0x9, 0x5, 0x0, 0x13, 0x20, 0xff, 0x3, 0x3, {0x7, 0x25, 0x1, 0x3, "f22d75"}}}, {{0x9, 0x5, 0xd, 0x15, 0x0, 0x1, 0x7, 0x3, {0x10, 0x25, 0x1, 0xc, "60bfb07cac3b4f91dd0ee270"}}}, {{0x9, 0x5, 0xc, 0x4, 0x200, 0x0, 0x9, 0x10, {0xf, 0x25, 0x1, 0xb, "f48dc1563cbf03bca6da1a"}}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x1, 0xf, 0x0, {0xe, 0x25, 0x1, 0xa, "900761e21c0712dde9ab"}}}]}}}}}]}}, &(0x7f0000000ec0)={0xa, &(0x7f0000000ac0)={0xa, 0x6, 0x250, 0x9, 0x3, 0x2, 0x0, 0x5}, 0x20, &(0x7f0000000b00)={0x5, 0xf, 0x20, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x42, "c523540a1ec8e0b6a23332ca21f4f54d"}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x0, 0x7, 0x396}]}, 0x2, [{0xd2, &(0x7f0000000b40)=@string={0xd2, 0x3, "ce0e782f85ecdd87003c9faead8bac6436ab75a2289cc440eb7348f739a96e87bd4fdbab8191c5c0440a3f7d7bfc58c22d75159a1e2ad92ccc238936cadcc1005cd0f6c7ef45c04a940323ee0fe99b92684cc6cc666ec194d3b80095672fd92330bc8ab84fc358ddfebf292888336093b9a49d7fa80f020c0503d4f496da4c26550fb7e4417911c3e89b407bd5761b7d57992f4adbcc229c2158a2e2a508483ac92a374ff3ea584ef2a85efc437f35d4dbe706c40cec6ba8d0a1f5fe95f6407602b86f680c32bf8f714d75e3de9ed81a"}}, {0xb3, &(0x7f0000000280)=ANY=[@ANYRESDEC=r3, @ANYRES8=0x0, @ANYRESHEX=r7, @ANYBLOB="d843ead33000a53b5d57cc0edc347254394a00e1e072", @ANYRESDEC=r1, @ANYRES8=r1]}]}) syz_usb_control_io$uac1(r8, 0x0, 0x0) syz_usb_control_io$uac3(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$lan78xx(r8, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000340)=ANY=[@ANYBLOB="0014af"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r8, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r8, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000a80)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r8, 0x0, 0x0) syz_usb_control_io$printer(r8, &(0x7f00000001c0)={0x14, &(0x7f0000000000)={0x0, 0xf, 0x6c, {0x6c, 0xe, "fd9d3890331db26130ee1165099afe08d7a7f7e429da97e7570e1714007f1ffe19374d7fd19f5637e5aff081d691a8447806088393f89081c29b7c4ff96ae699981cbcf2bb54bf1c35cd21bc1ec3cdc23c14d2466f90bd9277fdb0479be33876491b1e7c52f15b68cc14"}}, &(0x7f0000000080)={0x0, 0x3, 0xdf, @string={0xdf, 0x3, "219c12b0750d527b71f8fa969f8b92149c2c8eee9992d44bfcbedd4836a7b682cc93a0effe79eeda6e4c7196f6004b0df99af596f7917e199d0ee4d16b3aeba58720cc7218acdfb690f39356bb4bf85b730706f81b20a33d125e27814c3fb2dea91081ee1b8de5e444fc8e6e0599f93aaa8efda0ca6a287338c5e09b533422f0b52fec0d2fa691ee1dfdbef9777abc622334fc97834e39b2633b555dfbc84f1f9b02d35574b7722bd199c171d72ebd096acef91f497636ca7383ef0a6e2babe8dcaf964cb89946ac71228e0d9baf6f1c6552aec86e3e4e88a2a1a960c2"}}}, &(0x7f0000000940)={0x34, &(0x7f0000000540)={0x20, 0x12, 0xbb, "a81d841b00cc3139c09fcdbbcb12838e131cb5e08f550cbb3d68d60baa70220e7074bfac3646ef549f44616c2f3d8bd5dc19813be7f485d893af15b471ff9345e992e7d5f6c12c54e5e89d94f8ee9624482ea6f5b94904ea52e04b6c30ac46f1dcdea2d79288857ca65ae7a3f564849bd00f0c5baa4fd6407a4e0be8c9eb6f2cb38ca617cc3808f0b29015ec0369cf4deba10afea2d12465a78be5c1398fe91ebc90a7513e0b1205567652610ccd1a513fe590723b33abd16a83f8"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0xe4}, &(0x7f0000000780)={0x20, 0x0, 0xff, {0xfd, "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"}}, &(0x7f00000008c0)={0x20, 0x1, 0x1, 0xd}, &(0x7f0000000900)={0x20, 0x0, 0x1, 0x9}}) syz_usb_control_io(r8, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000740)={0x20, 0x15, 0x4, "8b27be98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r9, &(0x7f00000010c0)={0x24, &(0x7f0000000f00)={0x0, 0x24, 0xfa, {0xfa, 0x6, "e163d3854d0ef3aa9b7d9f485da834bfb3eab9611ee2c4efcf260daddd4d6ad8fe9be1f83f90a300e297d268716eb46e7e45bf6b907ac6a5cb367c364b687d438d87b27eeca6e6f98289ac4a925bbe7adf0751f7f9a012cb12ac95b1013a85150288e06e6a45d8007d0274eb3944a63cf793ec7fc12012dcdf2c3e4da6a191d2e8912dbe9fa906bbc60fa3811a1745bbadda3bbae016388643e1e5933fa1b1d13d2697ec1e89be5e0e2483eb9ec5368bb4f6cee51d64367a4d28f0fcc0f3fcc98a5c99668298aab7e53d99928ec0d56d999ea428f70801f1d48f105fc5b9533892b659d669113225703e7d0cbbcf806bf6578d02b93bba60"}}, &(0x7f0000001000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41c}}, &(0x7f0000000300)=ANY=[@ANYBLOB="00221a00d19c0000002975b3892890ab19cd273f938d7499337bb68e1e180000000000"], &(0x7f0000001080)={0x0, 0x21, 0x9, {0x9, 0x21, 0xf, 0x2, 0x1, {0x22, 0x450}}}}, &(0x7f0000001380)={0x2c, &(0x7f0000001100)={0x0, 0xa, 0xf9, "10fe7d044ad764c8752f52c46b25d215e137d99c7d6d96a4ef292d449c6e9d8cc2897f2faa02961ebc14e21796823b55a0c7f32c75f03d5a1e7049cff182a88f11f2c01daa98b3f41a88786ae18ecf8c7bd6319747a32ac073255cda3cdbf6e7199ec94ee1d90ea0d30ddfc640fb565883844b5b9e34b6dba9db18b10c45dabdc285879e04d0b1f7dba335a90f567d31819a1a0344977847a694c38f072bea0413fae76c7b3eee66116ab8aca176611eaca0f0fea920f631f9a02ac48757ad1171d8173eff1f6480268082afc04b2876d245a56bfdc736f521cb9d14702b32d1fa118ae830d84e83d5e5d5e3b7372933cdc7ce1f5732912c5b"}, &(0x7f0000001200)={0x0, 0xa, 0x1}, &(0x7f0000001240)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001500)={0x20, 0x1, 0xf0, "f2386323d278c8347ad77ca02ccfa358182f355c3e8e448495a557e13cd8271eb5cef87b18a4e9f43fcd0db65d8183c5a30e64a043ccceb15f42d234c7e837fb313c5b7b8634aaca9708c2a68a061e39f288f56c557a08d02113282b3323ebe186c8a6d5e37c706fc93ff935d9ef97f1e1615b93aa8a2461fc7c0bfa9cdaf6858799311b4b48b942b12606ec0544167f8f2e60bc19c345a8489b52990a527b4d8cb7f41b3f6b5b3faabe9096c2d813140ecb9ea9a407eb2607d91ab5762d54c22cf05f2910381d3862f5b5e973340d083bb052d73c80ea0c1f91015d788fd758f904e200"/240}, &(0x7f0000001340)={0x20, 0x3, 0x1, 0x1}}) syz_usb_control_io$uac3(r8, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000180)={0x40, 0xd, 0x4, "fef890a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.620094776s ago: executing program 1 (id=1333): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x5f, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_usb_connect(0x5, 0x53, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x41, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x2, 0x5}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000180)=@x86={0x40, 0x40, 0x8, 0x0, 0x0, 0x0, 0x10, 0x3, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.747502516s ago: executing program 5 (id=1334): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x4) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) r2 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) lseek(r4, 0x3, 0x0) rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='.\x02\x00') setxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f0000000100)={'U-'}, 0x16, 0x1) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, 0x0, &(0x7f0000000140)) 4.215794835s ago: executing program 5 (id=1335): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x28, r1, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0x24000) 4.166496216s ago: executing program 5 (id=1336): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0xca200) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000001e40)={0xe9c, {"0d06d96fff2900", "3dfa7700", "0000ff4a70f300"}, 0x4000c, 0x4}) preadv(r1, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r1, 0x40026f34, &(0x7f0000000100)=0xe256) 3.574637491s ago: executing program 0 (id=1337): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000600)={0x24, r3, 0x62c21a4ade68aba1, 0x0, 0x6, {{0x32}, {@val={0x8, 0x1, 0x60}, @val={0x8, 0x3, r5}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004854}, 0x40050) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r6, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0x33, &(0x7f0000000040)=0x6, 0x4) recvmmsg(r6, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x10162, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@empty, @in6=@remote}}, {{@in=@private}, 0x0, @in=@loopback}}, &(0x7f0000000300)=0xe8) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) pipe2$watch_queue(&(0x7f00000002c0), 0x80) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/190, 0xfffffffffffffeff, 0x0, 0x0}, &(0x7f0000001380)=0x40) sendmsg$inet6(r0, &(0x7f0000004200)={0x0, 0x0, &(0x7f0000003f40)=[{&(0x7f0000002f40)="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", 0x1000}], 0x1}, 0x20000000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000000)=0x40) 3.288948341s ago: executing program 4 (id=1338): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0xca200) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000001e40)={0xe9c, {"0d06d96fff2900", "3dfa7700", "0000ff4a70f300"}, 0x4000c, 0x4}) preadv(r1, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r1, 0x40026f34, &(0x7f0000000100)=0xe256) (fail_nth: 2) 3.1542631s ago: executing program 1 (id=1339): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fddbdf253900000008000300", @ANYRES32=r2, @ANYBLOB="0c00a56b48d3f5c3423d0100eca7452db2df2fe451b81c7fc0cf1d72565427f4fa0d787429a1509d375878b892c94a1efd7725a7039172bd51b92286bf151134d140558349cb773a8fddfda20738733650299e73b57e87de02ff9619f74d9153f3e7d094f88f447858cf421df4be8fc30172ad8f7432b7c0aab21ae9fc0988675386379a6b9b4d8103a072b8511d4e476460049b19cd483d5c0fb4e1ce60867e36e3e9177d0678b4405635f4613bae1a5243f07cc8d19c81"], 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0x24000) 2.917983558s ago: executing program 0 (id=1340): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20040040) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x5f, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_usb_connect(0x5, 0x53, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x41, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x2, 0x5}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.596194103s ago: executing program 1 (id=1341): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f00000000c0)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000540)=ANY=[@ANYBLOB="3426a592d11500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_ENABLE_HIGH_LNB_VOLTAGE(r1, 0x6f44, 0x4) syz_usb_control_io$printer(r0, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000480)=ANY=[@ANYBLOB="bb8af6c6be69a2ed037beeb53a907e8c3c3631a99f53de0b10712fa5ee34826907e669ed6c0defbd1e9bd69c4df0ee9429378a3b0e3048c00d0881e3c50a35035392cf59098c0078a649a4d94098aa3b8262c7eafd008fb81b3b401e174a37404d7d4ab777ca71818da1a2d6e7b2709b8948"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/num_groups\x00', 0x1, 0x0) write(r4, &(0x7f0000000380)='2', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/midi1_num_groups\x00', 0x1, 0x0) write(r5, &(0x7f0000000440)='2', 0x1) symlinkat(&(0x7f0000000880)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000008c0)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00', 0x100, 0x1) write(r6, &(0x7f0000000940)='dummy_udc.0', 0xb) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)="17", 0x1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 2.595821037s ago: executing program 4 (id=1342): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000002500)=""/4102, 0x100000}], 0x10000000000001e1, 0x3000, 0x0, 0x11) r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x0, 0x82042) writev(r1, &(0x7f0000000540)=[{&(0x7f00000005c0)="0800000014001923", 0xfff2}], 0x1) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x2, @win={{0x401, 0x4, 0x4, 0x2}, 0x4, 0x3ff, &(0x7f0000000100)={{0x4, 0x0, 0x7, 0x8}, &(0x7f00000000c0)={{0x1bb, 0x0, 0x5d9, 0x9}, &(0x7f0000000040)={{0x8df, 0x4, 0x8, 0x3}}}}, 0xfffff480, &(0x7f0000000140)="006f0bbd3d81f7705e9b6e61720a7486345b35c234", 0x3}}) 2.560176563s ago: executing program 5 (id=1343): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0xffff, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) r1 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r1, 0x0) ftruncate(r1, 0x2) write$P9_RWSTAT(r0, &(0x7f0000000080)={0x7, 0x7f, 0x2}, 0x7) r2 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e7cc94"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="000c04"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000a00)={0x44, &(0x7f0000000700)={0x40, 0x13, 0x4, "010aac14"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r2, &(0x7f00000008c0)={0x14, &(0x7f0000000780)={0x20, 0x21, 0xec, {0xec, 0xf, "fb394724cf353045545a336936f8ac7c580dc3e6aabbaa94f43ae603333288524ca1281cca961b59205a5a702a058821131ab1b19885fb42380b8ec1288a3e734cc5ea86bf995810ef962d015daf45d2cf76c53d40c3972c85c29c5aec55d167a521317fb3879b245e5696d8565e61d0853f14ea5d4e7ed380551211a05a4b6837000d31ca2353259a31e2ef124b584174bb687d0c367c35ed8b4e65bcba1832de60c421f6187bb06686ebdcf2eb6f0677ba5a6ad39277a0afea92143957c13e164ecc3e02559f750746bf96b27f9b5053665f5bfadcc506762cd3413d2d40c11873802e29f43251ba9b"}}, &(0x7f0000000880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3001}}}, &(0x7f0000000d40)={0x44, &(0x7f0000000a80)={0x40, 0x18, 0xe3, "3ab0cd5304f5c7a572a5806002f6dc86268e4b5d5b1a99f5b6d25321d455956031d04c721cc469ea947adf09c8b233185675abbf7f1eacacbe99282615403cc0051a58a9ed2b6b58feb01f678bbab496c292b15a946fc2102c3eb5333311bee68c04ea8e0ec6a6acad465de150e46e3be6effcaf82164fe0b79924b4d8f98c028e1e762bcc06f7d48f196639a2de94fe8d67bb2df33813eefababd5e622e5a4e54db7ff4fac8b26bd026764138e37906cb73f599c893ac6419525ffc5072351feb429fcd1e1c3e30f9654dfed4b5811e03606c746b2458f2e836f0b467bddb71cc2416"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000c00)={0x20, 0x81, 0x3, "45a84e"}, &(0x7f0000000c40)={0x20, 0x82, 0x1, "8f"}, &(0x7f0000000c80)={0x20, 0x83, 0x1, "a5"}, &(0x7f0000000cc0)={0x20, 0x84, 0x3, "b73496"}, &(0x7f0000000d00)={0x20, 0x85, 0x3, '=p2'}}) syz_usb_control_io$printer(r2, 0x0, &(0x7f00000009c0)={0x34, &(0x7f0000000740)={0x20, 0x14, 0x4, "84029129"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.036284917s ago: executing program 4 (id=1344): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xec, &(0x7f0000000080)={[{0xa6, 0x4e00, "189d769ec9cca2a618fa2bbf744a366ae0b5074cc6fb9bd098ded91a38c6f37bfdc0f7863f823e34c76b743b184d14d9797f037b707bbbf4568293a7d06eb8875d7838680d3dd19224e754ba0b3d2aa6421e42acaf5923590d7524a167c1a653f19d68e6db513833b73339f4a657d78ad0918f155602a6a24b5e23a08a55a0c4e5b2fb84dec51f97d02248162e26f52cd9e5096e4757340c03f18791d2ae440d7b3685e2dedd"}, {0x3b, 0x4e00, "9c94211c60298a16b6bb696c742b37caafdbe2fe170ae25a6c3b7e058d57f93b00e05ac96bf03207fe28eedc1c5db0c6c1b084dfe9d2483322d759"}]}) 823.834097ms ago: executing program 0 (id=1345): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d61637674615a0000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}}, 0x0) 711.450488ms ago: executing program 0 (id=1346): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0x7, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="da5b284fbfef9e8b662b49f49ae071000800000000000040b1feddf0ec3bb7b4db65805f94ef57ec6ce402847876db211fb90f910bac4c052ecb6ac61cc65e6d7fb69bd638d2e95cfd61a02d408e00c4ed7cab1e8dcc182cc509bc9618f69591e1c80d036cff8e0155fea10ca340f9779fac580e39312d3fb256a6feff935a85178e02a093447c4a7b0ef0dfe25c645bb477e796d0797f0f6bcc096d0a094da209ad37f2f1360c3a2b7a843111c81ecfe16f055cf8f1cd18740a1c3e5443", @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf251c000000000001007063690000000200303030303a30303a31302e300000000000000b0007000000000001007063690000000200303030303a30303a31302e300000000000000b0009000000000001007063690000000200303030303a30303a31302e300000000000000b0008000000000001007063690000000200303030303a30303a31302e300000000000000b0002000000000001006e657464657673696d000000000002006e657464657673696d30000000000b000b000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x408c4) 588.33608ms ago: executing program 0 (id=1347): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d61637674615a0000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}}, 0x0) (fail_nth: 2) 0s ago: executing program 0 (id=1348): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x5f, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_usb_connect(0x5, 0x53, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x41, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x2, 0x5}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000180)=@x86={0x40, 0x40, 0x8, 0x0, 0x0, 0x0, 0x10, 0x3, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): 86] ? __pfx_ksys_write+0x10/0x10 [ 546.262979][ T9786] __x64_sys_sendmmsg+0xa0/0xc0 [ 546.263016][ T9786] do_syscall_64+0x17b/0x530 [ 546.263038][ T9786] ? irqentry_exit+0x10f/0x8f0 [ 546.263064][ T9786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.263082][ T9786] ? clear_bhb_loop+0x40/0x90 [ 546.263125][ T9786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.263150][ T9786] RIP: 0033:0x7fedc151de99 [ 546.263172][ T9786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 546.263192][ T9786] RSP: 002b:00007fedbf776028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 546.263216][ T9786] RAX: ffffffffffffffda RBX: 00007fedc17a5fa0 RCX: 00007fedc151de99 [ 546.263235][ T9786] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000009 [ 546.263246][ T9786] RBP: 00007fedbf776090 R08: 0000000000000000 R09: 0000000000000000 [ 546.263257][ T9786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 546.263281][ T9786] R13: 00007fedc17a6038 R14: 00007fedc17a5fa0 R15: 00007ffcbef3f0c8 [ 546.263317][ T9786] [ 546.514843][ T5604] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 546.514888][ T5604] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 546.515461][ T5604] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 546.515492][ T5604] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 546.515515][ T5604] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 546.515536][ T5604] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 546.516674][ T5604] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 546.601716][ T5604] usb 2-1: USB disconnect, device number 15 [ 546.889830][ T9062] usb 6-1: USB disconnect, device number 39 [ 546.968765][ T5773] legousbtower 5-1:14.57: interrupt endpoints not found [ 547.012420][ T5773] legousbtower 5-1:14.228: interrupt endpoints not found [ 547.077200][ T5773] usb 5-1: USB disconnect, device number 113 [ 547.452880][ T9062] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 547.612882][ T9062] usb 6-1: Using ep0 maxpacket: 32 [ 547.620864][ T9062] usb 6-1: unable to get BOS descriptor or descriptor too short [ 547.623568][ T9062] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 547.623652][ T9062] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 547.623716][ T9062] usb 6-1: config 14 has no interface number 0 [ 547.623769][ T9062] usb 6-1: config 14 has no interface number 1 [ 547.623964][ T9062] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 547.624040][ T9062] usb 6-1: config 14 interface 228 altsetting 5 has an invalid endpoint descriptor of length 2, skipping [ 547.624122][ T9062] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 547.624200][ T9062] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 547.624280][ T9062] usb 6-1: config 14 interface 57 has no altsetting 0 [ 547.624334][ T9062] usb 6-1: config 14 interface 228 has no altsetting 0 [ 547.647497][ T9062] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 547.647606][ T9062] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.647661][ T9062] usb 6-1: Product: syz [ 547.647706][ T9062] usb 6-1: Manufacturer: syz [ 547.647750][ T9062] usb 6-1: SerialNumber: syz [ 547.993319][ T9062] legousbtower 6-1:14.57: interrupt endpoints not found [ 548.005436][ T9062] legousbtower 6-1:14.228: interrupt endpoints not found [ 548.028102][ T9062] usb 6-1: USB disconnect, device number 40 [ 548.192892][ T37] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 548.304236][ T5604] usb 5-1: new full-speed USB device number 114 using dummy_hcd [ 548.345963][ T37] usb 2-1: Using ep0 maxpacket: 32 [ 548.357669][ T37] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 548.357806][ T37] usb 2-1: config 0 has no interface number 0 [ 548.381042][ T37] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 548.381076][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.381104][ T37] usb 2-1: Product: syz [ 548.381116][ T37] usb 2-1: Manufacturer: syz [ 548.381127][ T37] usb 2-1: SerialNumber: syz [ 548.408441][ T37] usb 2-1: config 0 descriptor?? [ 548.457147][ T5604] usb 5-1: unable to get BOS descriptor or descriptor too short [ 548.467911][ T5604] usb 5-1: not running at top speed; connect to a high speed hub [ 548.470230][ T5604] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 548.485622][ T5604] usb 5-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 0.40 [ 548.485879][ T5604] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.486128][ T5604] usb 5-1: Product: syz [ 548.486326][ T5604] usb 5-1: Manufacturer: syz [ 548.486386][ T5604] usb 5-1: SerialNumber: syz [ 548.607481][ T9815] FAULT_INJECTION: forcing a failure. [ 548.607481][ T9815] name failslab, interval 1, probability 0, space 0, times 0 [ 548.607530][ T9815] CPU: 0 UID: 0 PID: 9815 Comm: syz.0.1183 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 548.607564][ T9815] Tainted: [L]=SOFTLOCKUP [ 548.607573][ T9815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 548.607589][ T9815] Call Trace: [ 548.607599][ T9815] [ 548.607609][ T9815] dump_stack_lvl+0xe8/0x150 [ 548.607645][ T9815] should_fail_ex+0x467/0x600 [ 548.607681][ T9815] should_failslab+0xa8/0x100 [ 548.607707][ T9815] kmem_cache_alloc_node_noprof+0xac/0x660 [ 548.607744][ T9815] ? __alloc_skb+0x1d7/0x7a0 [ 548.607774][ T9815] ? __alloc_skb+0x1d7/0x7a0 [ 548.607810][ T9815] __alloc_skb+0x1d7/0x7a0 [ 548.607843][ T9815] netlink_sendmsg+0x5d4/0xb40 [ 548.607888][ T9815] ? __pfx_netlink_sendmsg+0x10/0x10 [ 548.607928][ T9815] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 548.607967][ T9815] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 548.608002][ T9815] ? arch_stack_walk+0xfb/0x150 [ 548.608042][ T9815] ? __pfx_netlink_sendmsg+0x10/0x10 [ 548.608076][ T9815] sock_sendmsg_nosec+0x13a/0x180 [ 548.608105][ T9815] ____sys_sendmsg+0x565/0x870 [ 548.608151][ T9815] ? __pfx_____sys_sendmsg+0x10/0x10 [ 548.608195][ T9815] ? import_iovec+0x73/0xa0 [ 548.608235][ T9815] ___sys_sendmsg+0x2a5/0x360 [ 548.608268][ T9815] ? __lock_acquire+0x6df/0x2e40 [ 548.608302][ T9815] ? __pfx____sys_sendmsg+0x10/0x10 [ 548.608374][ T9815] ? __fget_files+0x2a/0x420 [ 548.608399][ T9815] ? __fget_files+0x3a8/0x420 [ 548.608432][ T9815] __x64_sys_sendmsg+0x1b7/0x290 [ 548.608470][ T9815] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 548.608524][ T9815] do_syscall_64+0x17b/0x530 [ 548.608551][ T9815] ? irqentry_exit+0x10f/0x8f0 [ 548.608573][ T9815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.608596][ T9815] ? clear_bhb_loop+0x40/0x90 [ 548.608625][ T9815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.608649][ T9815] RIP: 0033:0x7fedc151de99 [ 548.608671][ T9815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 548.608693][ T9815] RSP: 002b:00007fedbf776028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 548.608720][ T9815] RAX: ffffffffffffffda RBX: 00007fedc17a5fa0 RCX: 00007fedc151de99 [ 548.608738][ T9815] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 548.608754][ T9815] RBP: 00007fedbf776090 R08: 0000000000000000 R09: 0000000000000000 [ 548.608769][ T9815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 548.608783][ T9815] R13: 00007fedc17a6038 R14: 00007fedc17a5fa0 R15: 00007ffcbef3f0c8 [ 548.608818][ T9815] [ 549.048305][ T5604] usb 5-1: found format II with max.bitrate = 1024, frame size=65531 [ 549.048449][ T5604] usb 5-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 549.069208][ T5604] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 549.132982][ T37] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 549.133013][ T37] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 549.303971][ T5782] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 549.341771][ T37] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 549.342062][ T37] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 549.438747][ T5604] usb 5-1: USB disconnect, device number 114 [ 549.459282][ T5782] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 549.459324][ T5782] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.509829][ T32] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 549.510308][ T5782] usb 6-1: config 0 descriptor?? [ 549.535050][ T5782] cp210x 6-1:0.0: cp210x converter detected [ 549.595468][ T9821] FAULT_INJECTION: forcing a failure. [ 549.595468][ T9821] name failslab, interval 1, probability 0, space 0, times 0 [ 549.595514][ T9821] CPU: 0 UID: 0 PID: 9821 Comm: syz.4.1186 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 549.595547][ T9821] Tainted: [L]=SOFTLOCKUP [ 549.595556][ T9821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 549.595571][ T9821] Call Trace: [ 549.595581][ T9821] [ 549.595592][ T9821] dump_stack_lvl+0xe8/0x150 [ 549.595629][ T9821] should_fail_ex+0x467/0x600 [ 549.595665][ T9821] should_failslab+0xa8/0x100 [ 549.595698][ T9821] ? sctp_get_port_local+0x749/0x17a0 [ 549.595722][ T9821] kmem_cache_alloc_noprof+0x9e/0x680 [ 549.595758][ T9821] ? sctp_get_port_local+0x749/0x17a0 [ 549.595789][ T9821] sctp_get_port_local+0x749/0x17a0 [ 549.595823][ T9821] ? sctp_get_port_local+0x50c/0x17a0 [ 549.595845][ T9821] ? __pfx_sctp_get_port_local+0x10/0x10 [ 549.595869][ T9821] ? sctp_bind_addr_match+0x30/0x2b0 [ 549.595899][ T9821] ? sctp_bind_addr_match+0x28b/0x2b0 [ 549.595935][ T9821] sctp_do_bind+0x4d9/0x9a0 [ 549.595966][ T9821] sctp_connect_new_asoc+0x270/0x6b0 [ 549.596006][ T9821] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 549.596048][ T9821] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 549.596078][ T9821] ? lockdep_hardirqs_on+0x7a/0x110 [ 549.596101][ T9821] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 549.596135][ T9821] ? security_sctp_bind_connect+0x74/0x280 [ 549.596166][ T9821] sctp_sendmsg+0x1506/0x2a50 [ 549.596216][ T9821] ? kstrtouint+0x6e/0xe0 [ 549.596246][ T9821] ? __pfx_sctp_sendmsg+0x10/0x10 [ 549.596304][ T9821] ? sock_rps_record_flow+0x19/0x350 [ 549.596340][ T9821] ? inet_sendmsg+0x298/0x320 [ 549.596374][ T9821] ? __pfx_inet_sendmsg+0x10/0x10 [ 549.596403][ T9821] sock_sendmsg_nosec+0x10e/0x180 [ 549.596433][ T9821] __sys_sendto+0x41e/0x5d0 [ 549.596471][ T9821] ? __pfx___sys_sendto+0x10/0x10 [ 549.596535][ T9821] ? __pfx_ksys_write+0x10/0x10 [ 549.596568][ T9821] __x64_sys_sendto+0xde/0x100 [ 549.596604][ T9821] do_syscall_64+0x17b/0x530 [ 549.596629][ T9821] ? irqentry_exit+0x10f/0x8f0 [ 549.596651][ T9821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.596685][ T9821] ? clear_bhb_loop+0x40/0x90 [ 549.596715][ T9821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.596740][ T9821] RIP: 0033:0x7fc9aeb2de99 [ 549.596763][ T9821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 549.596784][ T9821] RSP: 002b:00007fc9acd86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 549.596808][ T9821] RAX: ffffffffffffffda RBX: 00007fc9aedb5fa0 RCX: 00007fc9aeb2de99 [ 549.596826][ T9821] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000004 [ 549.596841][ T9821] RBP: 00007fc9acd86090 R08: 000020000005ffe4 R09: 000000000000001c [ 549.596858][ T9821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 549.596872][ T9821] R13: 00007fc9aedb6038 R14: 00007fc9aedb5fa0 R15: 00007ffeab6fae28 [ 549.596911][ T9821] [ 549.708836][ T32] usb 1-1: Using ep0 maxpacket: 32 [ 549.921716][ T32] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 549.921744][ T32] usb 1-1: config 0 has no interface number 0 [ 549.921786][ T32] usb 1-1: config 0 interface 184 has no altsetting 0 [ 549.951106][ T32] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 549.951178][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.951195][ T32] usb 1-1: Product: syz [ 549.951206][ T32] usb 1-1: Manufacturer: syz [ 549.951218][ T32] usb 1-1: SerialNumber: syz [ 550.049739][ T32] usb 1-1: config 0 descriptor?? [ 550.148895][ T5782] usb 6-1: cp210x converter now attached to ttyUSB0 [ 550.216808][ T8715] udevd[8715]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 550.391424][ T5782] usb 6-1: USB disconnect, device number 41 [ 550.478965][ T5782] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 550.479864][ T5782] cp210x 6-1:0.0: device disconnected [ 551.102925][ T5782] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 551.254383][ T5782] usb 5-1: Using ep0 maxpacket: 32 [ 551.257565][ T5782] usb 5-1: unable to get BOS descriptor or descriptor too short [ 551.259133][ T5782] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 551.259162][ T5782] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 551.259186][ T5782] usb 5-1: config 14 has no interface number 0 [ 551.259273][ T5782] usb 5-1: config 14 has no interface number 1 [ 551.259328][ T5782] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 551.259353][ T5782] usb 5-1: config 14 interface 228 altsetting 5 has an invalid endpoint descriptor of length 2, skipping [ 551.259417][ T5782] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 551.259439][ T5782] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 551.259461][ T5782] usb 5-1: config 14 interface 57 has no altsetting 0 [ 551.259476][ T5782] usb 5-1: config 14 interface 228 has no altsetting 0 [ 551.262122][ T5782] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 551.262151][ T5782] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.262219][ T5782] usb 5-1: Product: syz [ 551.262231][ T5782] usb 5-1: Manufacturer: syz [ 551.266717][ T5782] usb 5-1: SerialNumber: syz [ 551.351722][ T37] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 551.587964][ T32] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 551.588076][ T32] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 551.588816][ T32] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 551.588848][ T32] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 551.588927][ T32] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 551.588949][ T32] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 551.589472][ T32] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 551.706596][ T32] usb 1-1: USB disconnect, device number 8 [ 552.004598][ T5773] usb 2-1: USB disconnect, device number 16 [ 552.006409][ T5782] legousbtower 5-1:14.57: interrupt endpoints not found [ 552.090879][ T5782] legousbtower 5-1:14.228: interrupt endpoints not found [ 552.163033][ T5782] usb 5-1: USB disconnect, device number 115 [ 552.175028][ T37] usb 6-1: device descriptor read/64, error -71 [ 552.372612][ T9850] netlink: 'syz.0.1194': attribute type 3 has an invalid length. [ 552.422908][ T37] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 552.603119][ T37] usb 6-1: Using ep0 maxpacket: 32 [ 552.618659][ T37] usb 6-1: unable to get BOS descriptor or descriptor too short [ 552.620291][ T37] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 552.620323][ T37] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 552.620347][ T37] usb 6-1: config 14 has no interface number 0 [ 552.620365][ T37] usb 6-1: config 14 has no interface number 1 [ 552.620428][ T37] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 552.620448][ T37] usb 6-1: config 14 interface 228 altsetting 5 has an invalid endpoint descriptor of length 2, skipping [ 552.620467][ T37] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 552.620488][ T37] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 552.620510][ T37] usb 6-1: config 14 interface 57 has no altsetting 0 [ 552.620524][ T37] usb 6-1: config 14 interface 228 has no altsetting 0 [ 552.665414][ T37] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 552.665527][ T37] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.665593][ T37] usb 6-1: Product: syz [ 552.665629][ T37] usb 6-1: Manufacturer: syz [ 552.665674][ T37] usb 6-1: SerialNumber: syz [ 553.016400][ T37] legousbtower 6-1:14.57: interrupt endpoints not found [ 553.060808][ T37] legousbtower 6-1:14.228: interrupt endpoints not found [ 553.129338][ T37] usb 6-1: USB disconnect, device number 43 [ 553.355491][ T9868] FAULT_INJECTION: forcing a failure. [ 553.355491][ T9868] name failslab, interval 1, probability 0, space 0, times 0 [ 553.355537][ T9868] CPU: 1 UID: 0 PID: 9868 Comm: syz.0.1202 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 553.355569][ T9868] Tainted: [L]=SOFTLOCKUP [ 553.355578][ T9868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 553.355593][ T9868] Call Trace: [ 553.355602][ T9868] [ 553.355613][ T9868] dump_stack_lvl+0xe8/0x150 [ 553.355650][ T9868] should_fail_ex+0x467/0x600 [ 553.355687][ T9868] should_failslab+0xa8/0x100 [ 553.355713][ T9868] kmem_cache_alloc_node_noprof+0xac/0x660 [ 553.355748][ T9868] ? __alloc_skb+0x1d7/0x7a0 [ 553.355777][ T9868] ? __alloc_skb+0x1d7/0x7a0 [ 553.355813][ T9868] __alloc_skb+0x1d7/0x7a0 [ 553.355849][ T9868] netlink_sendmsg+0x5d4/0xb40 [ 553.355906][ T9868] ? __pfx_netlink_sendmsg+0x10/0x10 [ 553.355945][ T9868] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 553.355986][ T9868] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 553.356021][ T9868] ? arch_stack_walk+0xfb/0x150 [ 553.356060][ T9868] ? __pfx_netlink_sendmsg+0x10/0x10 [ 553.356095][ T9868] sock_sendmsg_nosec+0x13a/0x180 [ 553.356126][ T9868] ____sys_sendmsg+0x565/0x870 [ 553.356170][ T9868] ? __pfx_____sys_sendmsg+0x10/0x10 [ 553.356216][ T9868] ? import_iovec+0x73/0xa0 [ 553.356256][ T9868] ___sys_sendmsg+0x2a5/0x360 [ 553.356289][ T9868] ? __lock_acquire+0x6df/0x2e40 [ 553.356316][ T9868] ? __pfx____sys_sendmsg+0x10/0x10 [ 553.356389][ T9868] ? __fget_files+0x2a/0x420 [ 553.356413][ T9868] ? __fget_files+0x3a8/0x420 [ 553.356451][ T9868] __x64_sys_sendmsg+0x1b7/0x290 [ 553.356490][ T9868] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 553.356546][ T9868] do_syscall_64+0x17b/0x530 [ 553.356572][ T9868] ? irqentry_exit+0x10f/0x8f0 [ 553.356594][ T9868] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.356619][ T9868] ? clear_bhb_loop+0x40/0x90 [ 553.356648][ T9868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.356671][ T9868] RIP: 0033:0x7fedc151de99 [ 553.356695][ T9868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 553.356715][ T9868] RSP: 002b:00007fedbf776028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 553.356742][ T9868] RAX: ffffffffffffffda RBX: 00007fedc17a5fa0 RCX: 00007fedc151de99 [ 553.356759][ T9868] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 553.356775][ T9868] RBP: 00007fedbf776090 R08: 0000000000000000 R09: 0000000000000000 [ 553.356791][ T9868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 553.356806][ T9868] R13: 00007fedc17a6038 R14: 00007fedc17a5fa0 R15: 00007ffcbef3f0c8 [ 553.356841][ T9868] [ 553.437892][ T32] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 553.712839][ T32] usb 2-1: Using ep0 maxpacket: 32 [ 553.721456][ T32] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 553.721494][ T32] usb 2-1: config 0 has no interface number 0 [ 553.754824][ T32] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 553.754862][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.754884][ T32] usb 2-1: Product: syz [ 553.754905][ T32] usb 2-1: Manufacturer: syz [ 553.754918][ T32] usb 2-1: SerialNumber: syz [ 553.804592][ T32] usb 2-1: config 0 descriptor?? [ 554.234131][ T32] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 554.234170][ T32] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 554.283095][ T5773] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 554.432891][ T5773] usb 1-1: Using ep0 maxpacket: 32 [ 554.435439][ T5773] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 554.435470][ T5773] usb 1-1: config 0 has no interface number 0 [ 554.435523][ T5773] usb 1-1: config 0 interface 184 has no altsetting 0 [ 554.447040][ T5773] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 554.447077][ T5773] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.447101][ T5773] usb 1-1: Product: syz [ 554.447118][ T5773] usb 1-1: Manufacturer: syz [ 554.447135][ T5773] usb 1-1: SerialNumber: syz [ 554.468177][ T32] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 554.469127][ T32] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 554.525579][ T5773] usb 1-1: config 0 descriptor?? [ 554.672560][ T9883] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1207'. [ 554.983837][ T9889] FAULT_INJECTION: forcing a failure. [ 554.983837][ T9889] name failslab, interval 1, probability 0, space 0, times 0 [ 554.983888][ T9889] CPU: 1 UID: 0 PID: 9889 Comm: syz.5.1208 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 554.983921][ T9889] Tainted: [L]=SOFTLOCKUP [ 554.983930][ T9889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 554.983945][ T9889] Call Trace: [ 554.983956][ T9889] [ 554.983967][ T9889] dump_stack_lvl+0xe8/0x150 [ 554.984011][ T9889] should_fail_ex+0x467/0x600 [ 554.984053][ T9889] should_failslab+0xa8/0x100 [ 554.984083][ T9889] __kmalloc_noprof+0xfb/0x790 [ 554.984119][ T9889] ? tomoyo_encode+0x2ad/0x570 [ 554.984168][ T9889] ? tomoyo_encode+0x2ad/0x570 [ 554.984224][ T9889] tomoyo_encode+0x2ad/0x570 [ 554.984273][ T9889] tomoyo_realpath_from_path+0x5fa/0x640 [ 554.984323][ T9889] ? tomoyo_path_number_perm+0x219/0x5f0 [ 554.984359][ T9889] tomoyo_path_number_perm+0x246/0x5f0 [ 554.984396][ T9889] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 554.984431][ T9889] ? do_raw_spin_lock+0x12b/0x2f0 [ 554.984483][ T9889] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 554.984513][ T9889] ? lockdep_hardirqs_on+0x7a/0x110 [ 554.984560][ T9889] ? __fget_files+0x2a/0x420 [ 554.984590][ T9889] ? __fget_files+0x3a8/0x420 [ 554.984614][ T9889] ? __fget_files+0x2a/0x420 [ 554.984645][ T9889] security_file_ioctl+0xb9/0x260 [ 554.984679][ T9889] __se_sys_ioctl+0x47/0x170 [ 554.984717][ T9889] do_syscall_64+0x17b/0x530 [ 554.984744][ T9889] ? irqentry_exit+0x10f/0x8f0 [ 554.984769][ T9889] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.984796][ T9889] ? clear_bhb_loop+0x40/0x90 [ 554.984828][ T9889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.984855][ T9889] RIP: 0033:0x7ff67ccdde99 [ 554.984881][ T9889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 554.984905][ T9889] RSP: 002b:00007ff67af36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 554.984933][ T9889] RAX: ffffffffffffffda RBX: 00007ff67cf65fa0 RCX: 00007ff67ccdde99 [ 554.984953][ T9889] RDX: 0000200000000000 RSI: 00000000400261f2 RDI: 0000000000000003 [ 554.984971][ T9889] RBP: 00007ff67af36090 R08: 0000000000000000 R09: 0000000000000000 [ 554.984988][ T9889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.985003][ T9889] R13: 00007ff67cf66038 R14: 00007ff67cf65fa0 R15: 00007ffc9b7d8d28 [ 554.985045][ T9889] [ 554.985161][ T9889] ERROR: Out of memory at tomoyo_realpath_from_path. [ 555.213066][ T9891] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1201'. [ 555.612912][ T32] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 555.762899][ T32] usb 5-1: Using ep0 maxpacket: 32 [ 555.769107][ T32] usb 5-1: unable to get BOS descriptor or descriptor too short [ 555.783745][ T32] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 555.783781][ T32] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 555.783806][ T32] usb 5-1: config 14 has no interface number 0 [ 555.783825][ T32] usb 5-1: config 14 has no interface number 1 [ 555.784088][ T32] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 555.784120][ T32] usb 5-1: config 14 interface 228 altsetting 5 has an invalid endpoint descriptor of length 2, skipping [ 555.784148][ T32] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 555.784184][ T32] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 555.784215][ T32] usb 5-1: config 14 interface 57 has no altsetting 0 [ 555.784229][ T32] usb 5-1: config 14 interface 228 has no altsetting 0 [ 555.787609][ T32] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 555.787645][ T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.787671][ T32] usb 5-1: Product: syz [ 555.787687][ T32] usb 5-1: Manufacturer: syz [ 555.787704][ T32] usb 5-1: SerialNumber: syz [ 555.954465][ T5773] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 555.954508][ T5773] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 555.956324][ T5773] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 555.956362][ T5773] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 555.956386][ T5773] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 555.956407][ T5773] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 555.956747][ T5773] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 556.039772][ T5773] usb 1-1: USB disconnect, device number 9 [ 556.129128][ T32] legousbtower 5-1:14.57: interrupt endpoints not found [ 556.141383][ T32] legousbtower 5-1:14.228: interrupt endpoints not found [ 556.164203][ T32] usb 5-1: USB disconnect, device number 116 [ 556.452898][ T37] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 556.602951][ T37] usb 6-1: Using ep0 maxpacket: 32 [ 556.609982][ T37] usb 6-1: unable to get BOS descriptor or descriptor too short [ 556.611273][ T37] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 556.611305][ T37] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 556.611330][ T37] usb 6-1: config 14 has no interface number 0 [ 556.611350][ T37] usb 6-1: config 14 has no interface number 1 [ 556.611429][ T37] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 556.611457][ T37] usb 6-1: config 14 interface 228 altsetting 5 has an invalid endpoint descriptor of length 2, skipping [ 556.611484][ T37] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 556.611512][ T37] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 556.611540][ T37] usb 6-1: config 14 interface 57 has no altsetting 0 [ 556.611559][ T37] usb 6-1: config 14 interface 228 has no altsetting 0 [ 556.736645][ T37] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 556.736683][ T37] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.736708][ T37] usb 6-1: Product: syz [ 556.736720][ T37] usb 6-1: Manufacturer: syz [ 556.736732][ T37] usb 6-1: SerialNumber: syz [ 556.868895][ T32] usb 2-1: USB disconnect, device number 17 [ 557.000032][ T37] legousbtower 6-1:14.57: interrupt endpoints not found [ 557.024362][ T37] legousbtower 6-1:14.228: interrupt endpoints not found [ 557.049207][ T37] usb 6-1: USB disconnect, device number 44 [ 557.078042][ T9912] FAULT_INJECTION: forcing a failure. [ 557.078042][ T9912] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 557.078083][ T9912] CPU: 1 UID: 0 PID: 9912 Comm: syz.4.1217 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 557.078106][ T9912] Tainted: [L]=SOFTLOCKUP [ 557.078113][ T9912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 557.078124][ T9912] Call Trace: [ 557.078131][ T9912] [ 557.078140][ T9912] dump_stack_lvl+0xe8/0x150 [ 557.078170][ T9912] should_fail_ex+0x467/0x600 [ 557.078197][ T9912] _copy_from_user+0x2d/0xb0 [ 557.078213][ T9912] do_handle_open+0xf2/0xae0 [ 557.078268][ T9912] ? __pfx_do_handle_open+0x10/0x10 [ 557.078294][ T9912] ? ksys_write+0x248/0x270 [ 557.078316][ T9912] ? __pfx_ksys_write+0x10/0x10 [ 557.078342][ T9912] do_syscall_64+0x17b/0x530 [ 557.078360][ T9912] ? irqentry_exit+0x10f/0x8f0 [ 557.078376][ T9912] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.078395][ T9912] ? clear_bhb_loop+0x40/0x90 [ 557.078416][ T9912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.078433][ T9912] RIP: 0033:0x7fc9aeb2de99 [ 557.078448][ T9912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 557.078463][ T9912] RSP: 002b:00007fc9acd86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 557.078480][ T9912] RAX: ffffffffffffffda RBX: 00007fc9aedb5fa0 RCX: 00007fc9aeb2de99 [ 557.078493][ T9912] RDX: 0000000000004000 RSI: 0000200000000000 RDI: 0000000000000003 [ 557.078504][ T9912] RBP: 00007fc9acd86090 R08: 0000000000000000 R09: 0000000000000000 [ 557.078514][ T9912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 557.078524][ T9912] R13: 00007fc9aedb6038 R14: 00007fc9aedb5fa0 R15: 00007ffeab6fae28 [ 557.078548][ T9912] [ 557.332130][ T9913] CUSE: info not properly terminated [ 557.724487][ T37] usb 5-1: new full-speed USB device number 117 using dummy_hcd [ 557.875886][ T37] usb 5-1: unable to get BOS descriptor or descriptor too short [ 557.876535][ T37] usb 5-1: not running at top speed; connect to a high speed hub [ 557.878211][ T37] usb 5-1: config 46 has an invalid interface number: 200 but max is 0 [ 557.878241][ T37] usb 5-1: config 46 has no interface number 0 [ 557.878277][ T37] usb 5-1: config 46 interface 200 has no altsetting 0 [ 557.880738][ T37] usb 5-1: New USB device found, idVendor=13d8, idProduct=0002, bcdDevice=2a.9e [ 557.880769][ T37] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.880797][ T37] usb 5-1: Product: syz [ 557.880809][ T37] usb 5-1: Manufacturer: syz [ 557.880821][ T37] usb 5-1: SerialNumber: syz [ 557.931740][ T9062] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 558.013148][ T5805] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 558.112813][ T9062] usb 2-1: Using ep0 maxpacket: 32 [ 558.116156][ T9062] usb 2-1: unable to get BOS descriptor or descriptor too short [ 558.117870][ T9062] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 558.117901][ T9062] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 558.117926][ T9062] usb 2-1: config 14 has no interface number 0 [ 558.117946][ T9062] usb 2-1: config 14 has no interface number 1 [ 558.118025][ T9062] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 558.118051][ T9062] usb 2-1: config 14 interface 228 altsetting 5 has an invalid endpoint descriptor of length 2, skipping [ 558.118080][ T9062] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 558.118102][ T9062] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 558.118149][ T9062] usb 2-1: config 14 interface 57 has no altsetting 0 [ 558.118172][ T9062] usb 2-1: config 14 interface 228 has no altsetting 0 [ 558.121715][ T9062] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 558.121750][ T9062] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.121773][ T9062] usb 2-1: Product: syz [ 558.121789][ T9062] usb 2-1: Manufacturer: syz [ 558.121806][ T9062] usb 2-1: SerialNumber: syz [ 558.173177][ T5805] usb 6-1: Using ep0 maxpacket: 32 [ 558.281379][ T5805] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 558.281474][ T5805] usb 6-1: config 0 has no interface number 0 [ 558.281527][ T5805] usb 6-1: config 0 interface 184 has no altsetting 0 [ 558.309057][ T5805] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 558.309140][ T5805] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.309161][ T5805] usb 6-1: Product: syz [ 558.309174][ T5805] usb 6-1: Manufacturer: syz [ 558.309190][ T5805] usb 6-1: SerialNumber: syz [ 558.413333][ T5805] usb 6-1: config 0 descriptor?? [ 558.563535][ T9927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.567477][ T9927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.592901][ T9062] legousbtower 2-1:14.57: interrupt endpoints not found [ 558.601177][ T9062] legousbtower 2-1:14.228: interrupt endpoints not found [ 558.615756][ T9062] usb 2-1: USB disconnect, device number 18 [ 559.007431][ T37] usb 5-1: selecting invalid altsetting 3 [ 559.007498][ T37] comedi comedi5: could not set alternate setting 3 in high speed [ 559.007551][ T37] usbdux 5-1:46.200: driver 'usbdux' failed to auto-configure device. [ 559.057583][ T37] usbdux 5-1:46.200: probe with driver usbdux failed with error -22 [ 559.075520][ T37] usb 5-1: USB disconnect, device number 117 [ 559.442892][ T9062] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 559.593137][ T9062] usb 2-1: Using ep0 maxpacket: 32 [ 559.595922][ T9062] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 559.595959][ T9062] usb 2-1: config 0 has no interface number 0 [ 559.599914][ T9062] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 559.599954][ T9062] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.599979][ T9062] usb 2-1: Product: syz [ 559.599996][ T9062] usb 2-1: Manufacturer: syz [ 559.600014][ T9062] usb 2-1: SerialNumber: syz [ 559.663966][ T9062] usb 2-1: config 0 descriptor?? [ 559.887469][ T5805] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 559.887512][ T5805] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 559.888720][ T5805] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 559.888753][ T5805] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 559.888795][ T5805] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 559.888864][ T5805] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 559.889415][ T5805] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 559.961161][ T5805] usb 6-1: USB disconnect, device number 45 [ 560.192176][ T9062] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 560.192204][ T9062] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 560.272893][ T5773] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 560.401331][ T9062] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 560.401682][ T9062] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 560.447179][ T5773] usb 1-1: unable to get BOS descriptor or descriptor too short [ 560.448775][ T5773] usb 1-1: config 1 has an invalid interface number: 255 but max is 1 [ 560.448806][ T5773] usb 1-1: config 1 has no interface number 1 [ 560.448854][ T5773] usb 1-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 560.448895][ T5773] usb 1-1: config 1 interface 0 has no altsetting 0 [ 560.454588][ T5773] usb 1-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 560.454623][ T5773] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.454645][ T5773] usb 1-1: Product: syz [ 560.454661][ T5773] usb 1-1: Manufacturer: syz [ 560.454677][ T5773] usb 1-1: SerialNumber: syz [ 560.716243][ T9941] FAULT_INJECTION: forcing a failure. [ 560.716243][ T9941] name failslab, interval 1, probability 0, space 0, times 0 [ 560.716291][ T9941] CPU: 1 UID: 0 PID: 9941 Comm: syz.4.1228 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 560.716321][ T9941] Tainted: [L]=SOFTLOCKUP [ 560.716328][ T9941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 560.716342][ T9941] Call Trace: [ 560.716352][ T9941] [ 560.716363][ T9941] dump_stack_lvl+0xe8/0x150 [ 560.716403][ T9941] should_fail_ex+0x467/0x600 [ 560.716443][ T9941] should_failslab+0xa8/0x100 [ 560.716469][ T9941] __kmalloc_noprof+0xfb/0x790 [ 560.716503][ T9941] ? tomoyo_encode+0x2ad/0x570 [ 560.716537][ T9941] ? tomoyo_encode+0x2ad/0x570 [ 560.716581][ T9941] tomoyo_encode+0x2ad/0x570 [ 560.716622][ T9941] tomoyo_realpath_from_path+0x5fa/0x640 [ 560.716664][ T9941] ? tomoyo_path_number_perm+0x219/0x5f0 [ 560.716691][ T9941] tomoyo_path_number_perm+0x246/0x5f0 [ 560.716723][ T9941] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 560.716755][ T9941] ? do_raw_spin_lock+0x12b/0x2f0 [ 560.716801][ T9941] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 560.716836][ T9941] ? lockdep_hardirqs_on+0x7a/0x110 [ 560.716878][ T9941] ? __fget_files+0x2a/0x420 [ 560.716909][ T9941] ? __fget_files+0x3a8/0x420 [ 560.716932][ T9941] ? __fget_files+0x2a/0x420 [ 560.716962][ T9941] security_file_ioctl+0xb9/0x260 [ 560.716990][ T9941] __se_sys_ioctl+0x47/0x170 [ 560.717022][ T9941] do_syscall_64+0x17b/0x530 [ 560.717045][ T9941] ? irqentry_exit+0x10f/0x8f0 [ 560.717067][ T9941] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.717093][ T9941] ? clear_bhb_loop+0x40/0x90 [ 560.717119][ T9941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.717141][ T9941] RIP: 0033:0x7fc9aeb2de99 [ 560.717162][ T9941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 560.717183][ T9941] RSP: 002b:00007fc9acd86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 560.717209][ T9941] RAX: ffffffffffffffda RBX: 00007fc9aedb5fa0 RCX: 00007fc9aeb2de99 [ 560.717228][ T9941] RDX: 0000200000000200 RSI: 00000000c058565d RDI: 0000000000000004 [ 560.717245][ T9941] RBP: 00007fc9acd86090 R08: 0000000000000000 R09: 0000000000000000 [ 560.717261][ T9941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 560.717275][ T9941] R13: 00007fc9aedb6038 R14: 00007fc9aedb5fa0 R15: 00007ffeab6fae28 [ 560.717309][ T9941] [ 560.720070][ T9941] ERROR: Out of memory at tomoyo_realpath_from_path. [ 561.061900][ T9949] 9p: p9: multiple sources not supported [ 561.088084][ T9946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1227'. [ 561.101083][ T9949] 9pnet_virtio: no channels available for device c::: [ 561.187240][ T9953] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1224'. [ 561.191645][ T9947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1227'. [ 561.249799][ T5773] smsusb:smsusb_probe: board id=8, interface number 0 [ 561.264844][ T5773] smsusb:smsusb_probe: board id=8, interface number 255 [ 561.276506][ T5773] usb 1-1: USB disconnect, device number 10 [ 561.383153][ T37] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 561.534004][ T37] usb 6-1: too many configurations: 164, using maximum allowed: 8 [ 561.552948][ T5805] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 561.554390][ T37] usb 6-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 561.554421][ T37] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.565695][ T37] usb 6-1: config 0 descriptor?? [ 561.722857][ T5805] usb 5-1: Using ep0 maxpacket: 32 [ 561.725811][ T5805] usb 5-1: unable to get BOS descriptor or descriptor too short [ 561.727303][ T5805] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 561.727335][ T5805] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 561.727362][ T5805] usb 5-1: config 14 has no interface number 0 [ 561.727376][ T5805] usb 5-1: config 14 has no interface number 1 [ 561.727430][ T5805] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 561.727449][ T5805] usb 5-1: config 14 interface 228 altsetting 5 has an invalid endpoint descriptor of length 2, skipping [ 561.727467][ T5805] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 561.727488][ T5805] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 561.727509][ T5805] usb 5-1: config 14 interface 57 has no altsetting 0 [ 561.727525][ T5805] usb 5-1: config 14 interface 228 has no altsetting 0 [ 561.730443][ T5805] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 561.730481][ T5805] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.730497][ T5805] usb 5-1: Product: syz [ 561.730509][ T5805] usb 5-1: Manufacturer: syz [ 561.730520][ T5805] usb 5-1: SerialNumber: syz [ 561.903833][ T32] usb 6-1: USB disconnect, device number 46 [ 562.105871][ T9954] kvm: pic: non byte write [ 562.252875][ T37] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 562.402908][ T37] usb 1-1: Using ep0 maxpacket: 32 [ 562.405896][ T37] usb 1-1: unable to get BOS descriptor or descriptor too short [ 562.407416][ T37] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 562.407445][ T37] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 562.407469][ T37] usb 1-1: config 14 has no interface number 0 [ 562.407533][ T37] usb 1-1: config 14 has no interface number 1 [ 562.407587][ T37] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 562.407607][ T37] usb 1-1: config 14 interface 228 altsetting 5 has an invalid endpoint descriptor of length 2, skipping [ 562.407626][ T37] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 562.407730][ T37] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 562.407763][ T37] usb 1-1: config 14 interface 57 has no altsetting 0 [ 562.407785][ T37] usb 1-1: config 14 interface 228 has no altsetting 0 [ 562.410849][ T37] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 562.410932][ T37] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.410949][ T37] usb 1-1: Product: syz [ 562.410961][ T37] usb 1-1: Manufacturer: syz [ 562.410973][ T37] usb 1-1: SerialNumber: syz [ 562.607731][ T5805] legousbtower 5-1:14.57: interrupt endpoints not found [ 562.656288][ T5805] legousbtower 5-1:14.228: interrupt endpoints not found [ 562.705139][ T5805] usb 5-1: USB disconnect, device number 118 [ 562.845209][ T32] usb 2-1: USB disconnect, device number 19 [ 562.878002][ T37] legousbtower 1-1:14.57: interrupt endpoints not found [ 562.943196][ T37] legousbtower 1-1:14.228: interrupt endpoints not found [ 562.986395][ T37] usb 1-1: USB disconnect, device number 11 [ 563.034619][ T823] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 563.613789][ T37] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 563.672874][ T5778] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 563.775163][ T37] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 563.775192][ T37] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.780744][ T37] usb 2-1: config 0 descriptor?? [ 563.820622][ T37] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 563.832890][ T5778] usb 1-1: Using ep0 maxpacket: 32 [ 563.835657][ T5778] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 563.835690][ T5778] usb 1-1: config 0 has no interface number 0 [ 563.835743][ T5778] usb 1-1: config 0 interface 184 has no altsetting 0 [ 563.841807][ T5778] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 563.841844][ T5778] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.841865][ T5778] usb 1-1: Product: syz [ 563.841881][ T5778] usb 1-1: Manufacturer: syz [ 563.841897][ T5778] usb 1-1: SerialNumber: syz [ 563.916407][ T5778] usb 1-1: config 0 descriptor?? [ 564.019878][ T9973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.021085][ T9973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.085282][ T37] gspca_cpia1: usb_control_msg 05, error -71 [ 564.090619][ T37] gspca_cpia1: usb_control_msg 01, error -71 [ 564.090644][ T37] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 564.112961][ T37] usb 2-1: USB disconnect, device number 20 [ 564.378463][ T823] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 564.542962][ T823] usb 6-1: Using ep0 maxpacket: 32 [ 564.546405][ T823] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 564.546446][ T823] usb 6-1: config 0 has no interface number 0 [ 564.549225][ T823] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 564.549250][ T823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.549308][ T823] usb 6-1: Product: syz [ 564.549320][ T823] usb 6-1: Manufacturer: syz [ 564.549332][ T823] usb 6-1: SerialNumber: syz [ 564.552927][ T32] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 564.621167][ T823] usb 6-1: config 0 descriptor?? [ 564.702990][ T32] usb 5-1: Using ep0 maxpacket: 8 [ 564.712278][ T32] usb 5-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 564.712319][ T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.712343][ T32] usb 5-1: Product: 妒悐㵞宰ꌭﲻఓ롋횟醊⿤껠౯᥾撼ᯚ䱼ㅪ쓸瀧郭ꔨ謻෹놡텥ល鎤怂⅚⯏뱎갶ᄱ邈缁줽ᐊ礛ꆑ땞沜ｚ锠゙䎴ࣵᆤ놕佈쵣丩꺦菙혇ދ쾅浵幒餢넷箌溰㕊꫌柚ׁᐩ엂蟔前椌嶮昢馰梗嚋寬㉫᧴厂꺔鱞塪耉➝⪑∮扵党岾뚋쪾 [ 564.712383][ T32] usb 5-1: Manufacturer: 精۪஋毸辴慢柱镦籼澃錭ퟒ︪㮈菱謟緀놵᜝ᰚ꜈빌鶙첋㔰ᓅ챃買ᖦ䮺먟뻳꩐֥勒搰絭爆鬽㑆橺뢒ᣂ齑侒逹蘲⍍팊㷬짢㹄쭵衱蹢ᬁ￈禐ꔩ [ 564.712414][ T32] usb 5-1: SerialNumber: ﹧撊땴ヱ鵲嫰ᨮዎꓶಧ갋Ľ樻釔怒䍃뽦ﰰﯵ卌ꁮ篬鷒瀲ᮬﻜ袡ᴔሲ邞ꍂ㧗쉃慒蒉톸ꪊ㇤皆ꖻ⪏羿젲耣寞뚩纊켝⍃곂⭜슃劯馕ﷱᔆꕬ꣇곐㞠낄䆉ၐꡨ㽃冿䵱蕗᷇ᙴ킣㪛絤欂읨抿辬代䨹랒頂ᕟ醲浾㿦谿ꢙꎂ䗀눺甆꣬衺둬騈뛨㹾꒢꧊ƺ䍁ព䚓몜詋爱㷒쏅 [ 564.849451][ T9991] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 564.890076][ T9991] CIFS: Attempting to mount //127.0.0.1/share [ 565.020773][ T9995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.026972][ T9995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.030897][ T32] usb 5-1: BAAD HEADPHONE p_chmask mismatch [ 565.084226][ T9997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.084865][ T9997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.151627][ T823] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 565.151680][ T823] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 565.219450][ T9997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.318665][ T9997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.361380][ T9997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.369653][ T9991] CIFS: VFS: Error connecting to socket. Aborting operation. [ 565.370092][ T9991] CIFS: VFS: cifs_mount failed w/return code = -4 [ 565.405271][ T823] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 565.406183][ T823] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -32 [ 565.446362][ T9997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.451916][ T5778] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 565.451957][ T5778] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 565.482949][ T5778] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 565.482991][ T5778] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 565.483015][ T5778] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 565.483037][ T5778] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 565.483360][ T5778] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 565.565858][ T9997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.626405][ T9997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.692906][ T5778] usb 1-1: USB disconnect, device number 12 [ 565.885250][ T823] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 565.931711][ T32] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 565.967912][ T32] usb 5-1: USB disconnect, device number 119 [ 566.042972][ T5977] udevd[5977]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 566.062848][ T823] usb 2-1: Using ep0 maxpacket: 32 [ 566.081150][ T823] usb 2-1: unable to get BOS descriptor or descriptor too short [ 566.086207][ T823] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 566.086239][ T823] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 566.086263][ T823] usb 2-1: config 14 has no interface number 0 [ 566.086283][ T823] usb 2-1: config 14 has no interface number 1 [ 566.086362][ T823] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 566.086388][ T823] usb 2-1: config 14 interface 228 altsetting 5 has an invalid endpoint descriptor of length 2, skipping [ 566.086416][ T823] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 566.086445][ T823] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 566.086474][ T823] usb 2-1: config 14 interface 57 has no altsetting 0 [ 566.086494][ T823] usb 2-1: config 14 interface 228 has no altsetting 0 [ 566.183437][ T823] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 566.183474][ T823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.183495][ T823] usb 2-1: Product: syz [ 566.183512][ T823] usb 2-1: Manufacturer: syz [ 566.183528][ T823] usb 2-1: SerialNumber: syz [ 566.188130][T10003] FAULT_INJECTION: forcing a failure. [ 566.188130][T10003] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 566.188174][T10003] CPU: 1 UID: 0 PID: 10003 Comm: syz.4.1247 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 566.188205][T10003] Tainted: [L]=SOFTLOCKUP [ 566.188214][T10003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 566.188228][T10003] Call Trace: [ 566.188238][T10003] [ 566.188249][T10003] dump_stack_lvl+0xe8/0x150 [ 566.188287][T10003] should_fail_ex+0x467/0x600 [ 566.188324][T10003] _copy_from_user+0x2d/0xb0 [ 566.188348][T10003] sctp_setsockopt+0x1c4/0x12c0 [ 566.188390][T10003] ? sock_common_setsockopt+0x36/0xc0 [ 566.188435][T10003] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 566.188465][T10003] do_sock_setsockopt+0x17c/0x1b0 [ 566.188502][T10003] __x64_sys_setsockopt+0x143/0x1b0 [ 566.188538][T10003] do_syscall_64+0x17b/0x530 [ 566.188563][T10003] ? irqentry_exit+0x10f/0x8f0 [ 566.188584][T10003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.188609][T10003] ? clear_bhb_loop+0x40/0x90 [ 566.188639][T10003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.188662][T10003] RIP: 0033:0x7fc9aeb2de99 [ 566.188684][T10003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 566.188705][T10003] RSP: 002b:00007fc9acd86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 566.188731][T10003] RAX: ffffffffffffffda RBX: 00007fc9aedb5fa0 RCX: 00007fc9aeb2de99 [ 566.188749][T10003] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000004 [ 566.188763][T10003] RBP: 00007fc9acd86090 R08: 000000000000009c R09: 0000000000000000 [ 566.188786][T10003] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 566.188801][T10003] R13: 00007fc9aedb6038 R14: 00007fc9aedb5fa0 R15: 00007ffeab6fae28 [ 566.188835][T10003] [ 566.242198][T10005] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1242'. [ 566.660492][ T823] legousbtower 2-1:14.57: interrupt endpoints not found [ 566.674751][ T823] legousbtower 2-1:14.228: interrupt endpoints not found [ 566.698276][ T823] usb 2-1: USB disconnect, device number 21 [ 566.977625][ T5610] Bluetooth: hci2: unexpected event for opcode 0x2062 [ 566.992919][ T5805] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 567.142844][ T5805] usb 1-1: Using ep0 maxpacket: 32 [ 567.146303][ T5805] usb 1-1: unable to get BOS descriptor or descriptor too short [ 567.148759][ T5805] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 567.148791][ T5805] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 567.148816][ T5805] usb 1-1: config 14 has no interface number 0 [ 567.148836][ T5805] usb 1-1: config 14 has no interface number 1 [ 567.148914][ T5805] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 567.148943][ T5805] usb 1-1: config 14 interface 228 altsetting 5 has an invalid endpoint descriptor of length 2, skipping [ 567.148971][ T5805] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 567.149002][ T5805] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 567.149034][ T5805] usb 1-1: config 14 interface 57 has no altsetting 0 [ 567.149056][ T5805] usb 1-1: config 14 interface 228 has no altsetting 0 [ 567.154860][ T5805] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 567.154949][ T5805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.155012][ T5805] usb 1-1: Product: syz [ 567.155063][ T5805] usb 1-1: Manufacturer: syz [ 567.155108][ T5805] usb 1-1: SerialNumber: syz [ 567.563058][T10011] kvm: pic: non byte write [ 567.800043][ T5704] usb 6-1: USB disconnect, device number 48 [ 567.826365][ T5805] legousbtower 1-1:14.57: interrupt endpoints not found [ 567.863754][ T5773] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 567.871952][ T5805] legousbtower 1-1:14.228: interrupt endpoints not found [ 567.943356][ T5805] usb 1-1: USB disconnect, device number 13 [ 568.017300][ T5773] usb 2-1: Using ep0 maxpacket: 32 [ 568.025962][ T5773] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 568.025995][ T5773] usb 2-1: config 0 has no interface number 0 [ 568.026048][ T5773] usb 2-1: config 0 interface 184 has no altsetting 0 [ 568.063953][ T5773] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 568.063991][ T5773] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.064014][ T5773] usb 2-1: Product: syz [ 568.064031][ T5773] usb 2-1: Manufacturer: syz [ 568.064048][ T5773] usb 2-1: SerialNumber: syz [ 568.085219][ T5773] usb 2-1: config 0 descriptor?? [ 568.447765][T10037] FAULT_INJECTION: forcing a failure. [ 568.447765][T10037] name failslab, interval 1, probability 0, space 0, times 0 [ 568.447813][T10037] CPU: 1 UID: 0 PID: 10037 Comm: syz.4.1259 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 568.447846][T10037] Tainted: [L]=SOFTLOCKUP [ 568.447855][T10037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 568.447878][T10037] Call Trace: [ 568.447888][T10037] [ 568.447899][T10037] dump_stack_lvl+0xe8/0x150 [ 568.447941][T10037] should_fail_ex+0x467/0x600 [ 568.447980][T10037] should_failslab+0xa8/0x100 [ 568.448005][T10037] __kmalloc_cache_noprof+0xa1/0x670 [ 568.448049][T10037] ? __vb2_init_fileio+0x1e2/0x1040 [ 568.448133][T10037] ? __vb2_init_fileio+0x1e2/0x1040 [ 568.448187][T10037] __vb2_init_fileio+0x1e2/0x1040 [ 568.448226][T10037] ? rt_spin_unlock+0x157/0x200 [ 568.448265][T10037] ? rt_spin_unlock+0x163/0x200 [ 568.448300][T10037] vb2_core_poll+0x44b/0x7b0 [ 568.448335][T10037] ? vb2_fop_poll+0xce/0x310 [ 568.448380][T10037] vb2_fop_poll+0x19c/0x310 [ 568.448420][T10037] ? __pfx_vb2_fop_poll+0x10/0x10 [ 568.448458][T10037] v4l2_poll+0x14a/0x2c0 [ 568.448531][T10037] ? __pfx_v4l2_poll+0x10/0x10 [ 568.448592][T10037] do_sys_poll+0x92e/0xf50 [ 568.448652][T10037] ? __pfx_do_sys_poll+0x10/0x10 [ 568.448675][T10037] ? kernel_text_address+0xa5/0xe0 [ 568.448711][T10037] ? __kernel_text_address+0xd/0x30 [ 568.448744][T10037] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 568.448789][T10037] ? __pfx___pollwait+0x10/0x10 [ 568.448828][T10037] ? __pfx_pollwake+0x10/0x10 [ 568.448959][T10037] ? __pfx_timespec64_add_safe+0x10/0x10 [ 568.448999][T10037] __x64_sys_poll+0x190/0x360 [ 568.449037][T10037] ? __pfx___x64_sys_poll+0x10/0x10 [ 568.449082][T10037] do_syscall_64+0x17b/0x530 [ 568.449108][T10037] ? irqentry_exit+0x10f/0x8f0 [ 568.449130][T10037] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.449164][T10037] ? clear_bhb_loop+0x40/0x90 [ 568.449193][T10037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.449217][T10037] RIP: 0033:0x7fc9aeb2de99 [ 568.449239][T10037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 568.449256][T10037] RSP: 002b:00007fc9acd86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 568.449281][T10037] RAX: ffffffffffffffda RBX: 00007fc9aedb5fa0 RCX: 00007fc9aeb2de99 [ 568.449295][T10037] RDX: 0000000000000009 RSI: 0000000000000001 RDI: 0000200000000180 [ 568.449306][T10037] RBP: 00007fc9acd86090 R08: 0000000000000000 R09: 0000000000000000 [ 568.449318][T10037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 568.449329][T10037] R13: 00007fc9aedb6038 R14: 00007fc9aedb5fa0 R15: 00007ffeab6fae28 [ 568.449358][T10037] [ 568.784226][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.784371][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.271359][ T823] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 569.415086][ T5778] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 569.432836][ T823] usb 6-1: Using ep0 maxpacket: 32 [ 569.441342][ T823] usb 6-1: unable to get BOS descriptor or descriptor too short [ 569.450904][ T823] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 569.450945][ T823] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 569.451052][ T823] usb 6-1: config 14 has no interface number 0 [ 569.451066][ T823] usb 6-1: config 14 has no interface number 1 [ 569.451321][ T823] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 569.451343][ T823] usb 6-1: config 14 interface 228 altsetting 5 has an invalid endpoint descriptor of length 2, skipping [ 569.451361][ T823] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 569.451381][ T823] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 569.451403][ T823] usb 6-1: config 14 interface 57 has no altsetting 0 [ 569.451417][ T823] usb 6-1: config 14 interface 228 has no altsetting 0 [ 569.506779][ T823] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 569.522277][ T823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.522299][ T823] usb 6-1: Product: syz [ 569.522311][ T823] usb 6-1: Manufacturer: syz [ 569.522324][ T823] usb 6-1: SerialNumber: syz [ 569.562932][ T5773] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 569.562974][ T5773] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 569.578461][ T5773] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 569.578491][ T5773] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 569.578507][ T5773] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 569.578523][ T5773] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 569.578791][ T5773] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 569.658662][ T5778] usb 5-1: unable to get BOS descriptor or descriptor too short [ 569.659619][ T5778] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 569.659663][ T5778] usb 5-1: can't read configurations, error -71 [ 569.706505][ T5773] usb 2-1: USB disconnect, device number 22 [ 569.919262][ T823] legousbtower 6-1:14.57: interrupt endpoints not found [ 569.932190][ T823] legousbtower 6-1:14.228: interrupt endpoints not found [ 569.946195][ T823] usb 6-1: USB disconnect, device number 49 [ 570.043186][ T5805] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 570.128358][T10055] netlink: 'syz.1.1267': attribute type 1 has an invalid length. [ 570.128379][T10055] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1267'. [ 570.192922][ T5805] usb 1-1: Using ep0 maxpacket: 32 [ 570.210674][ T5805] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 570.210709][ T5805] usb 1-1: config 0 has no interface number 0 [ 570.240069][ T5805] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 570.240110][ T5805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.240134][ T5805] usb 1-1: Product: syz [ 570.240150][ T5805] usb 1-1: Manufacturer: syz [ 570.240167][ T5805] usb 1-1: SerialNumber: syz [ 570.282083][ T5805] usb 1-1: config 0 descriptor?? [ 570.379802][T10059] FAULT_INJECTION: forcing a failure. [ 570.379802][T10059] name failslab, interval 1, probability 0, space 0, times 0 [ 570.379843][T10059] CPU: 0 UID: 0 PID: 10059 Comm: syz.4.1268 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 570.379872][T10059] Tainted: [L]=SOFTLOCKUP [ 570.379879][T10059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 570.379892][T10059] Call Trace: [ 570.379900][T10059] [ 570.379909][T10059] dump_stack_lvl+0xe8/0x150 [ 570.379944][T10059] should_fail_ex+0x467/0x600 [ 570.379976][T10059] should_failslab+0xa8/0x100 [ 570.380002][T10059] __kmalloc_noprof+0xfb/0x790 [ 570.380033][T10059] ? tomoyo_encode+0x2ad/0x570 [ 570.380062][T10059] ? tomoyo_encode+0x2ad/0x570 [ 570.380094][T10059] tomoyo_encode+0x2ad/0x570 [ 570.380126][T10059] tomoyo_realpath_from_path+0x5fa/0x640 [ 570.380163][T10059] ? tomoyo_path_number_perm+0x219/0x5f0 [ 570.380187][T10059] tomoyo_path_number_perm+0x246/0x5f0 [ 570.380214][T10059] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 570.380238][T10059] ? do_raw_spin_lock+0x12b/0x2f0 [ 570.380278][T10059] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 570.380300][T10059] ? lockdep_hardirqs_on+0x7a/0x110 [ 570.380337][T10059] ? __fget_files+0x2a/0x420 [ 570.380363][T10059] ? __fget_files+0x3a8/0x420 [ 570.380382][T10059] ? __fget_files+0x2a/0x420 [ 570.380405][T10059] security_file_ioctl+0xb9/0x260 [ 570.380434][T10059] __se_sys_ioctl+0x47/0x170 [ 570.380465][T10059] do_syscall_64+0x17b/0x530 [ 570.380494][T10059] ? irqentry_exit+0x10f/0x8f0 [ 570.380513][T10059] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.380544][T10059] ? clear_bhb_loop+0x40/0x90 [ 570.380568][T10059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.380588][T10059] RIP: 0033:0x7fc9aeb2de99 [ 570.380608][T10059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 570.380626][T10059] RSP: 002b:00007fc9acd86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 570.380648][T10059] RAX: ffffffffffffffda RBX: 00007fc9aedb5fa0 RCX: 00007fc9aeb2de99 [ 570.380663][T10059] RDX: 0000200000000080 RSI: 00000000c0285629 RDI: 0000000000000004 [ 570.380677][T10059] RBP: 00007fc9acd86090 R08: 0000000000000000 R09: 0000000000000000 [ 570.380690][T10059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 570.380702][T10059] R13: 00007fc9aedb6038 R14: 00007fc9aedb5fa0 R15: 00007ffeab6fae28 [ 570.380734][T10059] [ 570.380790][T10059] ERROR: Out of memory at tomoyo_realpath_from_path. [ 570.809662][ T5805] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 570.809706][ T5805] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 571.020960][ T5610] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 571.021312][ T5610] Bluetooth: hci2: Injecting HCI hardware error event [ 571.050538][ T5610] Bluetooth: hci2: hardware error 0x00 [ 571.066793][ T5805] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 571.067153][ T5805] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 571.436971][ T823] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 571.653059][ T823] usb 6-1: Using ep0 maxpacket: 32 [ 571.655714][ T823] usb 6-1: unable to get BOS descriptor or descriptor too short [ 571.657719][ T823] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 571.657754][ T823] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 571.657785][ T823] usb 6-1: config 14 has no interface number 0 [ 571.657800][ T823] usb 6-1: config 14 has no interface number 1 [ 571.657862][ T823] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 571.657883][ T823] usb 6-1: config 14 interface 228 altsetting 5 has an invalid endpoint descriptor of length 2, skipping [ 571.657904][ T823] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 571.657929][ T823] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 571.657959][ T823] usb 6-1: config 14 interface 57 has no altsetting 0 [ 571.657975][ T823] usb 6-1: config 14 interface 228 has no altsetting 0 [ 571.660400][ T823] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 571.660436][ T823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.660454][ T823] usb 6-1: Product: syz [ 571.660466][ T823] usb 6-1: Manufacturer: syz [ 571.660479][ T823] usb 6-1: SerialNumber: syz [ 572.055972][ T823] legousbtower 6-1:14.57: interrupt endpoints not found [ 572.080343][ T823] legousbtower 6-1:14.228: interrupt endpoints not found [ 572.101268][ T823] usb 6-1: USB disconnect, device number 50 [ 572.430812][T10084] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 572.430838][T10084] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 572.498030][T10087] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 572.498068][T10087] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 572.532160][T10084] vhci_hcd vhci_hcd.0: Device attached [ 572.539489][T10087] vhci_hcd vhci_hcd.0: Device attached [ 572.602305][T10087] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1275'. [ 572.606372][T10087] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1275'. [ 572.653029][ T37] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 572.670526][T10084] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(12) [ 572.670550][T10084] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 572.698127][T10084] vhci_hcd vhci_hcd.0: Device attached [ 572.700734][T10084] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(14) [ 572.704695][T10084] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 572.739874][T10084] vhci_hcd vhci_hcd.0: Device attached [ 572.793461][ T5805] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 572.812845][ T37] usb 5-1: Using ep0 maxpacket: 32 [ 572.820301][ T37] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 572.820337][ T37] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.863250][ T37] usb 5-1: config 0 descriptor?? [ 572.878322][ T37] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 573.205201][ T823] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 573.241875][T10090] vhci_hcd: connection closed [ 573.242791][T10092] vhci_hcd: connection closed [ 573.324046][ T37] gspca_nw80x: reg_r err -71 [ 573.324218][ T37] nw80x 5-1:0.0: probe with driver nw80x failed with error -71 [ 573.327590][T10088] vhci_hcd: connection closed [ 573.328454][T10085] vhci_hcd: connection reset by peer [ 573.342274][ T48] vhci_hcd vhci_hcd.1: stop threads [ 573.363523][ T37] usb 5-1: USB disconnect, device number 122 [ 573.401526][ T48] vhci_hcd vhci_hcd.1: release socket [ 573.412879][ T5610] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 573.428527][ T823] usb 6-1: Using ep0 maxpacket: 32 [ 573.436462][ T823] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 573.436549][ T823] usb 6-1: config 0 has no interface number 0 [ 573.436773][ T823] usb 6-1: config 0 interface 184 has no altsetting 0 [ 573.472731][ T823] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 573.472766][ T823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.472788][ T823] usb 6-1: Product: syz [ 573.472804][ T823] usb 6-1: Manufacturer: syz [ 573.472819][ T823] usb 6-1: SerialNumber: syz [ 573.521072][ T823] usb 6-1: config 0 descriptor?? [ 573.553306][ T5778] usb 1-1: USB disconnect, device number 14 [ 573.581900][ T48] vhci_hcd vhci_hcd.1: disconnect device [ 573.582357][ T48] vhci_hcd vhci_hcd.1: stop threads [ 573.582381][ T48] vhci_hcd vhci_hcd.1: release socket [ 573.628584][ T48] vhci_hcd vhci_hcd.1: disconnect device [ 573.670216][ T48] vhci_hcd vhci_hcd.1: stop threads [ 573.670240][ T48] vhci_hcd vhci_hcd.1: release socket [ 573.702558][ T48] vhci_hcd vhci_hcd.1: disconnect device [ 573.703118][ T48] vhci_hcd vhci_hcd.1: stop threads [ 573.703137][ T48] vhci_hcd vhci_hcd.1: release socket [ 573.703522][ T48] vhci_hcd vhci_hcd.1: disconnect device [ 573.890415][T10099] FAULT_INJECTION: forcing a failure. [ 573.890415][T10099] name failslab, interval 1, probability 0, space 0, times 0 [ 573.890464][T10099] CPU: 1 UID: 0 PID: 10099 Comm: syz.1.1278 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 573.890496][T10099] Tainted: [L]=SOFTLOCKUP [ 573.890505][T10099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 573.890520][T10099] Call Trace: [ 573.890529][T10099] [ 573.890539][T10099] dump_stack_lvl+0xe8/0x150 [ 573.890575][T10099] should_fail_ex+0x467/0x600 [ 573.890614][T10099] should_failslab+0xa8/0x100 [ 573.890642][T10099] __kmalloc_noprof+0xfb/0x790 [ 573.890676][T10099] ? tomoyo_encode+0x2ad/0x570 [ 573.890711][T10099] ? tomoyo_encode+0x2ad/0x570 [ 573.890754][T10099] tomoyo_encode+0x2ad/0x570 [ 573.890796][T10099] tomoyo_realpath_from_path+0x5fa/0x640 [ 573.890851][T10099] ? tomoyo_path_number_perm+0x219/0x5f0 [ 573.890879][T10099] tomoyo_path_number_perm+0x246/0x5f0 [ 573.890912][T10099] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 573.890944][T10099] ? do_raw_spin_lock+0x12b/0x2f0 [ 573.890991][T10099] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 573.891016][T10099] ? lockdep_hardirqs_on+0x7a/0x110 [ 573.891057][T10099] ? __fget_files+0x2a/0x420 [ 573.891088][T10099] ? __fget_files+0x3a8/0x420 [ 573.891112][T10099] ? __fget_files+0x2a/0x420 [ 573.891140][T10099] security_file_ioctl+0xb9/0x260 [ 573.891170][T10099] __se_sys_ioctl+0x47/0x170 [ 573.891203][T10099] do_syscall_64+0x17b/0x530 [ 573.891226][T10099] ? irqentry_exit+0x10f/0x8f0 [ 573.891249][T10099] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.891273][T10099] ? clear_bhb_loop+0x40/0x90 [ 573.891302][T10099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.891326][T10099] RIP: 0033:0x7faeb259de99 [ 573.891348][T10099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 573.891369][T10099] RSP: 002b:00007faeb07f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 573.891395][T10099] RAX: ffffffffffffffda RBX: 00007faeb2825fa0 RCX: 00007faeb259de99 [ 573.891414][T10099] RDX: 0000200000000480 RSI: 00000000000007a0 RDI: 0000000000000004 [ 573.891430][T10099] RBP: 00007faeb07f6090 R08: 0000000000000000 R09: 0000000000000000 [ 573.891446][T10099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 573.891461][T10099] R13: 00007faeb2826038 R14: 00007faeb2825fa0 R15: 00007ffc37c68678 [ 573.891497][T10099] [ 573.891705][T10099] ERROR: Out of memory at tomoyo_realpath_from_path. [ 574.295769][ T5778] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 574.452965][ T5778] usb 1-1: Using ep0 maxpacket: 32 [ 574.458278][ T5778] usb 1-1: unable to get BOS descriptor or descriptor too short [ 574.461135][ T5778] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 574.461164][ T5778] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 574.461197][ T5778] usb 1-1: config 14 has no interface number 0 [ 574.461569][ T5778] usb 1-1: config 14 has no interface number 1 [ 574.461624][ T5778] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 574.461644][ T5778] usb 1-1: config 14 interface 228 altsetting 5 has an invalid endpoint descriptor of length 2, skipping [ 574.461662][ T5778] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 574.461876][ T5778] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 574.461897][ T5778] usb 1-1: config 14 interface 57 has no altsetting 0 [ 574.461912][ T5778] usb 1-1: config 14 interface 228 has no altsetting 0 [ 574.602366][ T5778] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 574.602393][ T5778] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.602409][ T5778] usb 1-1: Product: syz [ 574.602420][ T5778] usb 1-1: Manufacturer: syz [ 574.602431][ T5778] usb 1-1: SerialNumber: syz [ 574.713618][ T5704] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 574.868004][ T5778] legousbtower 1-1:14.57: interrupt endpoints not found [ 574.884020][ T5778] legousbtower 1-1:14.228: interrupt endpoints not found [ 574.903275][ T5778] usb 1-1: USB disconnect, device number 15 [ 574.905862][ T5704] usb 2-1: unable to get BOS descriptor or descriptor too short [ 574.906922][ T5704] usb 2-1: not running at top speed; connect to a high speed hub [ 574.908715][ T5704] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 574.912439][ T5704] usb 2-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40 [ 574.912463][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.912497][ T5704] usb 2-1: Product: syz [ 574.913616][ T5704] usb 2-1: Manufacturer: syz [ 574.913640][ T5704] usb 2-1: SerialNumber: syz [ 575.102288][ T823] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 575.102468][ T823] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 575.131162][ T823] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 575.131439][ T823] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 575.131471][ T823] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 575.131486][ T823] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 575.140947][ T823] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 575.240517][ T823] usb 6-1: USB disconnect, device number 51 [ 575.293717][ T5704] usb 2-1: unit 6 not found! [ 575.293807][ T5704] usb 2-1: unit 127 not found! [ 575.293854][ T5704] usb 2-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8213); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 575.293931][ T5704] usb 2-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 575.384878][ T5704] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 575.410021][ T5704] usb 2-1: USB disconnect, device number 23 [ 575.450051][ T5977] udevd[5977]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 575.812873][ T823] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 575.996992][ T823] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 575.997034][ T823] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 575.997064][ T823] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 575.997093][ T823] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 576.004308][ T823] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 576.004345][ T823] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.004368][ T823] usb 5-1: Product: syz [ 576.004385][ T823] usb 5-1: Manufacturer: syz [ 576.004402][ T823] usb 5-1: SerialNumber: syz [ 576.085607][ T823] usb 5-1: config 0 descriptor?? [ 576.106642][ T823] iguanair 5-1:0.0: failed to get version [ 576.107077][ T823] iguanair 5-1:0.0: probe with driver iguanair failed with error -90 [ 576.124756][ T5704] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 576.222899][ T5778] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 576.284617][ T5704] usb 1-1: Using ep0 maxpacket: 32 [ 576.287945][ T5704] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 576.287980][ T5704] usb 1-1: config 0 has no interface number 0 [ 576.298745][ T5704] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 576.298783][ T5704] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.298806][ T5704] usb 1-1: Product: syz [ 576.298823][ T5704] usb 1-1: Manufacturer: syz [ 576.298840][ T5704] usb 1-1: SerialNumber: syz [ 576.363023][ T5704] usb 1-1: config 0 descriptor?? [ 576.368260][T10108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.368936][T10108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.403633][ T5778] usb 6-1: Using ep0 maxpacket: 32 [ 576.411257][ T9062] usb 5-1: USB disconnect, device number 123 [ 576.454677][ T5778] usb 6-1: unable to get BOS descriptor or descriptor too short [ 576.478806][ T5778] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 576.478831][ T5778] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 576.478847][ T5778] usb 6-1: config 14 has no interface number 0 [ 576.478860][ T5778] usb 6-1: config 14 has no interface number 1 [ 576.486674][ T5778] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 576.491303][ T5778] usb 6-1: config 14 interface 228 altsetting 5 has an invalid endpoint descriptor of length 2, skipping [ 576.497025][ T5778] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 576.500379][ T5778] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 576.505992][ T5778] usb 6-1: config 14 interface 57 has no altsetting 0 [ 576.509526][ T5778] usb 6-1: config 14 interface 228 has no altsetting 0 [ 576.577096][ T5778] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 576.578602][ T5778] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.578622][ T5778] usb 6-1: Product: syz [ 576.578634][ T5778] usb 6-1: Manufacturer: syz [ 576.578646][ T5778] usb 6-1: SerialNumber: syz [ 576.861314][ T5704] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 576.861342][ T5704] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 576.897998][T10113] kvm: pic: non byte write [ 577.063923][ T5704] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 577.064840][ T5704] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 577.163761][ T5778] legousbtower 6-1:14.57: interrupt endpoints not found [ 577.229007][ T5778] legousbtower 6-1:14.228: interrupt endpoints not found [ 577.254396][ T5778] usb 6-1: USB disconnect, device number 52 [ 577.872904][ T37] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 578.022872][ T37] usb 5-1: Using ep0 maxpacket: 32 [ 578.026500][ T37] usb 5-1: unable to get BOS descriptor or descriptor too short [ 578.027793][ T37] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 578.027826][ T37] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 578.027855][ T37] usb 5-1: config 14 has no interface number 0 [ 578.027875][ T37] usb 5-1: config 14 has no interface number 1 [ 578.027955][ T37] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 578.027984][ T37] usb 5-1: config 14 interface 228 altsetting 5 has an invalid endpoint descriptor of length 2, skipping [ 578.028017][ T37] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 578.028039][ T37] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 578.028062][ T37] usb 5-1: config 14 interface 57 has no altsetting 0 [ 578.028077][ T37] usb 5-1: config 14 interface 228 has no altsetting 0 [ 578.031370][ T37] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 578.031405][ T37] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.031425][ T37] usb 5-1: Product: syz [ 578.031437][ T37] usb 5-1: Manufacturer: syz [ 578.031448][ T37] usb 5-1: SerialNumber: syz [ 578.054446][ T5805] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 578.353451][T10137] kvm: pic: non byte write [ 578.552967][ T9062] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 578.702861][ T9062] usb 6-1: Using ep0 maxpacket: 32 [ 578.706928][ T9062] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 578.706953][ T9062] usb 6-1: config 0 has no interface number 0 [ 578.707024][ T9062] usb 6-1: config 0 interface 184 has no altsetting 0 [ 578.712046][ T9062] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 578.712086][ T9062] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.712109][ T9062] usb 6-1: Product: syz [ 578.712127][ T9062] usb 6-1: Manufacturer: syz [ 578.712144][ T9062] usb 6-1: SerialNumber: syz [ 578.730140][ T9062] usb 6-1: config 0 descriptor?? [ 578.840033][ T37] legousbtower 5-1:14.57: interrupt endpoints not found [ 578.866688][ T37] legousbtower 5-1:14.228: interrupt endpoints not found [ 578.915512][ T37] usb 5-1: USB disconnect, device number 124 [ 579.294389][ T5778] usb 1-1: USB disconnect, device number 16 [ 579.419730][T10150] FAULT_INJECTION: forcing a failure. [ 579.419730][T10150] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 579.419788][T10150] CPU: 1 UID: 0 PID: 10150 Comm: syz.1.1296 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 579.419820][T10150] Tainted: [L]=SOFTLOCKUP [ 579.419830][T10150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 579.419844][T10150] Call Trace: [ 579.419854][T10150] [ 579.419864][T10150] dump_stack_lvl+0xe8/0x150 [ 579.419902][T10150] should_fail_ex+0x467/0x600 [ 579.419940][T10150] _copy_from_user+0x2d/0xb0 [ 579.419965][T10150] core_sys_select+0x673/0xb40 [ 579.420000][T10150] ? get_pid_task+0x20/0x1f0 [ 579.420043][T10150] ? __pfx_core_sys_select+0x10/0x10 [ 579.420099][T10150] ? __pfx_set_user_sigmask+0x10/0x10 [ 579.420139][T10150] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 579.420178][T10150] __se_sys_pselect6+0x267/0x320 [ 579.420216][T10150] ? __pfx___se_sys_pselect6+0x10/0x10 [ 579.420250][T10150] ? __pfx_ksys_write+0x10/0x10 [ 579.420282][T10150] ? __x64_sys_pselect6+0x21/0xf0 [ 579.420321][T10150] do_syscall_64+0x17b/0x530 [ 579.420353][T10150] ? irqentry_exit+0x10f/0x8f0 [ 579.420374][T10150] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.420397][T10150] ? clear_bhb_loop+0x40/0x90 [ 579.420425][T10150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.420449][T10150] RIP: 0033:0x7faeb259de99 [ 579.420472][T10150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 579.420493][T10150] RSP: 002b:00007faeb07f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 579.420518][T10150] RAX: ffffffffffffffda RBX: 00007faeb2825fa0 RCX: 00007faeb259de99 [ 579.420536][T10150] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000040 [ 579.420552][T10150] RBP: 00007faeb07f6090 R08: 0000000000000000 R09: 0000000000000000 [ 579.420566][T10150] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 579.420582][T10150] R13: 00007faeb2826038 R14: 00007faeb2825fa0 R15: 00007ffc37c68678 [ 579.420617][T10150] [ 579.982943][ T37] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 580.099068][T10162] netlink: 57 bytes leftover after parsing attributes in process `syz.1.1298'. [ 580.123007][T10164] netlink: 57 bytes leftover after parsing attributes in process `syz.1.1298'. [ 580.177018][ T37] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 580.177060][ T37] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 580.177090][ T37] usb 1-1: config 0 interface 0 has no altsetting 0 [ 580.177129][ T37] usb 1-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 580.177157][ T37] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.236604][ T37] usb 1-1: config 0 descriptor?? [ 580.237696][T10152] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 580.276592][T10158] netlink: 57 bytes leftover after parsing attributes in process `syz.1.1298'. [ 580.318900][ T9062] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 580.318940][ T9062] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 580.321019][ T9062] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 580.321053][ T9062] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 580.321074][ T9062] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 580.321096][ T9062] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 580.321419][ T9062] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 580.465996][ T9062] usb 6-1: USB disconnect, device number 53 [ 580.683874][ T37] pantherlord 0003:0F30:0111.000B: unknown main item tag 0x6 [ 580.683906][ T37] pantherlord 0003:0F30:0111.000B: unknown main item tag 0x6 [ 580.683930][ T37] pantherlord 0003:0F30:0111.000B: reserved main item tag 0xd [ 580.683950][ T37] pantherlord 0003:0F30:0111.000B: item fetching failed at offset 24/44 [ 580.684530][ T37] pantherlord 0003:0F30:0111.000B: parse failed [ 580.684634][ T37] pantherlord 0003:0F30:0111.000B: probe with driver pantherlord failed with error -22 [ 581.024855][T10172] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1301'. [ 581.026380][T10172] netlink: 'syz.5.1301': attribute type 2 has an invalid length. [ 581.252930][ T37] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 581.422399][ T37] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 581.422438][ T37] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.422467][ T37] usb 5-1: Product: syz [ 581.422479][ T37] usb 5-1: Manufacturer: syz [ 581.422491][ T37] usb 5-1: SerialNumber: syz [ 581.461049][ T37] usb 5-1: config 0 descriptor?? [ 581.476406][ T37] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 581.515417][ T5704] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 581.662758][ T5704] usb 6-1: Using ep0 maxpacket: 32 [ 581.672956][ T5704] usb 6-1: unable to get BOS descriptor or descriptor too short [ 581.674898][ T5704] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 581.674931][ T5704] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 581.674956][ T5704] usb 6-1: config 14 has no interface number 0 [ 581.674976][ T5704] usb 6-1: config 14 has no interface number 1 [ 581.676929][ T5704] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 581.676965][ T5704] usb 6-1: config 14 interface 228 altsetting 5 has an invalid endpoint descriptor of length 2, skipping [ 581.676993][ T5704] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 581.677026][ T5704] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 581.677057][ T5704] usb 6-1: config 14 interface 57 has no altsetting 0 [ 581.677077][ T5704] usb 6-1: config 14 interface 228 has no altsetting 0 [ 581.681096][ T5704] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 581.681128][ T5704] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.681153][ T5704] usb 6-1: Product: syz [ 581.681170][ T5704] usb 6-1: Manufacturer: syz [ 581.681187][ T5704] usb 6-1: SerialNumber: syz [ 582.051919][ T37] gspca_sunplus: reg_w_riv err -71 [ 582.052099][ T37] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 582.088308][ T37] usb 5-1: USB disconnect, device number 125 [ 582.154916][T10175] kvm: pic: non byte write [ 582.376588][ T5704] legousbtower 6-1:14.57: interrupt endpoints not found [ 582.406376][ T5704] legousbtower 6-1:14.228: interrupt endpoints not found [ 582.426480][ T5704] usb 6-1: USB disconnect, device number 54 [ 582.721411][ T37] usb 1-1: USB disconnect, device number 17 [ 582.882904][ T5805] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 582.941287][T10186] FAULT_INJECTION: forcing a failure. [ 582.941287][T10186] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 582.941318][T10186] CPU: 0 UID: 0 PID: 10186 Comm: syz.0.1305 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 582.941341][T10186] Tainted: [L]=SOFTLOCKUP [ 582.941348][T10186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 582.941358][T10186] Call Trace: [ 582.941365][T10186] [ 582.941374][T10186] dump_stack_lvl+0xe8/0x150 [ 582.941405][T10186] should_fail_ex+0x467/0x600 [ 582.941432][T10186] strncpy_from_user+0x36/0x2c0 [ 582.941456][T10186] do_getname+0x77/0x250 [ 582.941486][T10186] do_sys_openat2+0xcc/0x200 [ 582.941516][T10186] ? __pfx_do_sys_openat2+0x10/0x10 [ 582.941545][T10186] ? ksys_write+0x248/0x270 [ 582.941566][T10186] ? __pfx_ksys_write+0x10/0x10 [ 582.941587][T10186] __x64_sys_openat+0x138/0x170 [ 582.941617][T10186] do_syscall_64+0x17b/0x530 [ 582.941636][T10186] ? irqentry_exit+0x10f/0x8f0 [ 582.941678][T10186] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.941703][T10186] ? clear_bhb_loop+0x40/0x90 [ 582.941732][T10186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.941756][T10186] RIP: 0033:0x7fedc14de6ce [ 582.941778][T10186] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 582.941804][T10186] RSP: 002b:00007fedbf775b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 582.941822][T10186] RAX: ffffffffffffffda RBX: 00007fedbf7766c0 RCX: 00007fedc14de6ce [ 582.941834][T10186] RDX: 0000000000000000 RSI: 00007fedbf775c00 RDI: ffffffffffffff9c [ 582.941846][T10186] RBP: 00007fedbf775c00 R08: 0000000000000000 R09: 0000000000000000 [ 582.941856][T10186] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 582.941870][T10186] R13: 00007fedc17a6038 R14: 00007fedc17a5fa0 R15: 00007ffcbef3f0c8 [ 582.941894][T10186] [ 583.232804][ T5805] usb 5-1: Using ep0 maxpacket: 32 [ 583.236418][ T5805] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 583.236449][ T5805] usb 5-1: config 0 has no interface number 0 [ 583.262490][ T5805] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 583.262526][ T5805] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.262549][ T5805] usb 5-1: Product: syz [ 583.262566][ T5805] usb 5-1: Manufacturer: syz [ 583.262584][ T5805] usb 5-1: SerialNumber: syz [ 583.305354][ T5805] usb 5-1: config 0 descriptor?? [ 583.405886][T10192] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1307'. [ 583.722864][ T9062] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 583.752486][ T5805] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 583.752525][ T5805] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 583.882982][ T9062] usb 2-1: Using ep0 maxpacket: 32 [ 583.885541][ T9062] usb 2-1: unable to get BOS descriptor or descriptor too short [ 583.886662][ T9062] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 583.886694][ T9062] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 583.886717][ T9062] usb 2-1: config 14 has no interface number 0 [ 583.886735][ T9062] usb 2-1: config 14 has no interface number 1 [ 583.886799][ T9062] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 583.886828][ T9062] usb 2-1: config 14 interface 228 altsetting 5 has an invalid endpoint descriptor of length 2, skipping [ 583.886853][ T9062] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 583.886885][ T9062] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 583.886916][ T9062] usb 2-1: config 14 interface 57 has no altsetting 0 [ 583.886940][ T9062] usb 2-1: config 14 interface 228 has no altsetting 0 [ 583.889433][ T9062] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 583.889463][ T9062] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.889484][ T9062] usb 2-1: Product: syz [ 583.889499][ T9062] usb 2-1: Manufacturer: syz [ 583.889513][ T9062] usb 2-1: SerialNumber: syz [ 584.028996][ T5805] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 584.029367][ T5805] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -32 [ 584.306053][T10189] kvm: pic: non byte write [ 584.837293][ T9062] legousbtower 2-1:14.57: interrupt endpoints not found [ 584.874537][ T9062] legousbtower 2-1:14.228: interrupt endpoints not found [ 584.895452][ T9062] usb 2-1: USB disconnect, device number 24 [ 584.932851][ T5604] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 585.083021][ T5604] usb 1-1: Using ep0 maxpacket: 32 [ 585.085504][ T5604] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 585.085542][ T5604] usb 1-1: config 0 has no interface number 0 [ 585.085581][ T5604] usb 1-1: config 0 interface 184 has no altsetting 0 [ 585.089063][ T5604] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 585.089110][ T5604] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.089127][ T5604] usb 1-1: Product: syz [ 585.089138][ T5604] usb 1-1: Manufacturer: syz [ 585.089149][ T5604] usb 1-1: SerialNumber: syz [ 585.157742][ T5604] usb 1-1: config 0 descriptor?? [ 585.553798][T10222] FAULT_INJECTION: forcing a failure. [ 585.553798][T10222] name failslab, interval 1, probability 0, space 0, times 0 [ 585.553905][T10222] CPU: 1 UID: 0 PID: 10222 Comm: syz.5.1313 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 585.553939][T10222] Tainted: [L]=SOFTLOCKUP [ 585.553947][T10222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 585.553962][T10222] Call Trace: [ 585.553972][T10222] [ 585.553983][T10222] dump_stack_lvl+0xe8/0x150 [ 585.554026][T10222] should_fail_ex+0x467/0x600 [ 585.554053][T10222] should_failslab+0xa8/0x100 [ 585.554072][T10222] __kmalloc_cache_noprof+0xa1/0x670 [ 585.554097][T10222] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 585.554122][T10222] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 585.554150][T10222] tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 585.554178][T10222] tcp_sendmsg_locked+0x4ce2/0x55c0 [ 585.554204][T10222] ? tcp_sendmsg_locked+0x641/0x55c0 [ 585.554261][T10222] ? __lock_acquire+0x6df/0x2e40 [ 585.554292][T10222] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 585.554316][T10222] ? lockdep_hardirqs_on+0x7a/0x110 [ 585.554345][T10222] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 585.554368][T10222] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 585.554407][T10222] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 585.554440][T10222] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 585.554459][T10222] ? lockdep_hardirqs_on+0x7a/0x110 [ 585.554479][T10222] tcp_sendmsg+0x2f/0x50 [ 585.554502][T10222] ? __pfx_inet_sendmsg+0x10/0x10 [ 585.554524][T10222] sock_sendmsg_nosec+0x10e/0x180 [ 585.554546][T10222] __sys_sendto+0x41e/0x5d0 [ 585.554574][T10222] ? __pfx___sys_sendto+0x10/0x10 [ 585.554616][T10222] ? __pfx_ksys_write+0x10/0x10 [ 585.554639][T10222] __x64_sys_sendto+0xde/0x100 [ 585.554663][T10222] do_syscall_64+0x17b/0x530 [ 585.554681][T10222] ? irqentry_exit+0x10f/0x8f0 [ 585.554696][T10222] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.554713][T10222] ? clear_bhb_loop+0x40/0x90 [ 585.554734][T10222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.554751][T10222] RIP: 0033:0x7ff67ccdde99 [ 585.554767][T10222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.554781][T10222] RSP: 002b:00007ff67af36028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 585.554799][T10222] RAX: ffffffffffffffda RBX: 00007ff67cf65fa0 RCX: 00007ff67ccdde99 [ 585.554812][T10222] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 585.554822][T10222] RBP: 00007ff67af36090 R08: 0000200000e68000 R09: 0000000000000010 [ 585.554834][T10222] R10: 00000000200007bd R11: 0000000000000246 R12: 0000000000000001 [ 585.554846][T10222] R13: 00007ff67cf66038 R14: 00007ff67cf65fa0 R15: 00007ffc9b7d8d28 [ 585.554870][T10222] [ 586.058568][T10227] netlink: 'syz.1.1314': attribute type 30 has an invalid length. [ 586.058606][T10227] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1314'. [ 586.061797][T10228] netlink: 'syz.1.1314': attribute type 30 has an invalid length. [ 586.061823][T10228] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1314'. [ 586.261657][ T9062] usb 5-1: USB disconnect, device number 126 [ 586.614764][ T5604] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 586.614806][ T5604] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 586.615460][ T5604] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 586.615491][ T5604] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 586.615511][ T5604] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 586.615528][ T5604] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 586.615840][ T5604] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 586.698470][ T5604] usb 1-1: USB disconnect, device number 18 [ 586.862906][ T37] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 587.032929][ T37] usb 5-1: Using ep0 maxpacket: 32 [ 587.071346][ T37] usb 5-1: unable to get BOS descriptor or descriptor too short [ 587.077828][ T37] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 587.077864][ T37] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 587.077895][ T37] usb 5-1: config 14 has no interface number 0 [ 587.077915][ T37] usb 5-1: config 14 has no interface number 1 [ 587.077992][ T37] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 587.078022][ T37] usb 5-1: config 14 interface 228 altsetting 5 has an invalid endpoint descriptor of length 2, skipping [ 587.078048][ T37] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 587.078079][ T37] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 587.078109][ T37] usb 5-1: config 14 interface 57 has no altsetting 0 [ 587.078129][ T37] usb 5-1: config 14 interface 228 has no altsetting 0 [ 587.188852][ T37] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 587.188887][ T37] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.188907][ T37] usb 5-1: Product: syz [ 587.188921][ T37] usb 5-1: Manufacturer: syz [ 587.188958][ T37] usb 5-1: SerialNumber: syz [ 587.468793][T10233] kvm: pic: non byte write [ 587.558172][ T37] legousbtower 5-1:14.57: interrupt endpoints not found [ 587.589000][ T37] legousbtower 5-1:14.228: interrupt endpoints not found [ 587.607175][ T37] usb 5-1: USB disconnect, device number 127 [ 587.902971][ T9] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 588.059291][ T9] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 588.059334][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.059352][ T9] usb 6-1: Product: syz [ 588.059363][ T9] usb 6-1: Manufacturer: syz [ 588.059375][ T9] usb 6-1: SerialNumber: syz [ 588.090314][ T9] usb 6-1: config 0 descriptor?? [ 588.116371][ T9] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 588.232821][ T5604] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 588.272869][ T37] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 588.382837][ T5604] usb 2-1: Using ep0 maxpacket: 32 [ 588.386661][ T5604] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 588.386694][ T5604] usb 2-1: config 0 has no interface number 0 [ 588.390188][ T5604] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 588.390224][ T5604] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.390248][ T5604] usb 2-1: Product: syz [ 588.390264][ T5604] usb 2-1: Manufacturer: syz [ 588.390280][ T5604] usb 2-1: SerialNumber: syz [ 588.400965][ T5604] usb 2-1: config 0 descriptor?? [ 588.433169][ T37] usb 1-1: Using ep0 maxpacket: 32 [ 588.475691][ T37] usb 1-1: unable to get BOS descriptor or descriptor too short [ 588.477554][ T37] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 588.477587][ T37] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 588.477612][ T37] usb 1-1: config 14 has no interface number 0 [ 588.477632][ T37] usb 1-1: config 14 has no interface number 1 [ 588.477709][ T37] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 588.477746][ T37] usb 1-1: config 14 interface 228 altsetting 5 has an invalid endpoint descriptor of length 2, skipping [ 588.477772][ T37] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 588.477800][ T37] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 588.477821][ T37] usb 1-1: config 14 interface 57 has no altsetting 0 [ 588.477856][ T37] usb 1-1: config 14 interface 228 has no altsetting 0 [ 588.574549][ T37] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 588.577438][ T37] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.577483][ T37] usb 1-1: Product: syz [ 588.579868][ T37] usb 1-1: Manufacturer: syz [ 588.579914][ T37] usb 1-1: SerialNumber: syz [ 588.885282][ T5604] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 588.885321][ T5604] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 588.987335][T10256] kvm: pic: non byte write [ 589.071382][T10262] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1326'. [ 589.071564][T10262] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1326'. [ 589.099813][T10262] sg_write: data in/out 4530140/136 bytes for SCSI command 0x0-- guessing data in; [ 589.099813][T10262] program syz.4.1326 not setting count and/or reply_len properly [ 589.099963][ T5604] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 589.112097][ T5604] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 589.256293][ T37] legousbtower 1-1:14.57: interrupt endpoints not found [ 589.280786][ T37] legousbtower 1-1:14.228: interrupt endpoints not found [ 589.312117][ T37] usb 1-1: USB disconnect, device number 19 [ 589.418606][T10249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 589.419281][T10249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 589.467974][ T9] gspca_sunplus: reg_r err -71 [ 589.468083][ T9] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 589.490492][ T9] usb 6-1: USB disconnect, device number 55 [ 589.973023][ T9] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 590.122971][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 590.125243][ T9] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 590.125276][ T9] usb 6-1: config 0 has no interface number 0 [ 590.125329][ T9] usb 6-1: config 0 interface 184 has no altsetting 0 [ 590.127875][ T9] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 590.127909][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.127932][ T9] usb 6-1: Product: syz [ 590.127949][ T9] usb 6-1: Manufacturer: syz [ 590.127965][ T9] usb 6-1: SerialNumber: syz [ 590.144392][ T5704] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 590.206571][ T9] usb 6-1: config 0 descriptor?? [ 590.343155][ T5704] usb 5-1: Using ep0 maxpacket: 32 [ 590.345398][ T5704] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 590.345429][ T5704] usb 5-1: config 0 has no interface number 0 [ 590.348113][ T5704] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 590.348136][ T5704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.348194][ T5704] usb 5-1: Product: syz [ 590.348207][ T5704] usb 5-1: Manufacturer: syz [ 590.348218][ T5704] usb 5-1: SerialNumber: syz [ 590.406999][ T5704] usb 5-1: config 0 descriptor?? [ 590.533126][ T9062] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 590.612431][T10279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.614340][T10279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.689488][ T9062] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 590.689570][ T9062] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.689588][ T9062] usb 1-1: Product: syz [ 590.689599][ T9062] usb 1-1: Manufacturer: syz [ 590.689610][ T9062] usb 1-1: SerialNumber: syz [ 590.729721][ T9062] usb 1-1: config 0 descriptor?? [ 590.821223][ T5704] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 590.821268][ T5704] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 591.035729][T10285] sctp: [Deprecated]: syz.0.1332 (pid 10285) Use of struct sctp_assoc_value in delayed_ack socket option. [ 591.035729][T10285] Use struct sctp_sack_info instead [ 591.292327][ T9062] usb 2-1: USB disconnect, device number 25 [ 591.627689][ T9] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 591.627795][ T9] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 591.628984][ T9] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 591.629014][ T9] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 591.629037][ T9] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 591.629447][ T9] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 591.630424][ T9] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 591.720263][ T9] usb 6-1: USB disconnect, device number 56 [ 591.793026][ T37] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 591.942798][ T37] usb 2-1: Using ep0 maxpacket: 32 [ 591.953829][ T37] usb 2-1: unable to get BOS descriptor or descriptor too short [ 591.955556][ T37] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 591.955589][ T37] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 591.955615][ T37] usb 2-1: config 14 has no interface number 0 [ 591.955635][ T37] usb 2-1: config 14 has no interface number 1 [ 591.955784][ T37] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 591.955815][ T37] usb 2-1: config 14 interface 228 altsetting 5 has an invalid endpoint descriptor of length 2, skipping [ 591.955844][ T37] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 591.955871][ T37] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 591.955903][ T37] usb 2-1: config 14 interface 57 has no altsetting 0 [ 591.955939][ T37] usb 2-1: config 14 interface 228 has no altsetting 0 [ 591.959327][ T37] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 591.959361][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.959385][ T37] usb 2-1: Product: syz [ 591.959402][ T37] usb 2-1: Manufacturer: syz [ 591.959419][ T37] usb 2-1: SerialNumber: syz [ 592.307065][T10288] kvm: pic: non byte write [ 592.460909][ T5704] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -32 [ 592.461269][ T5704] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -32 [ 592.802715][ T37] legousbtower 2-1:14.57: interrupt endpoints not found [ 592.869077][ T37] legousbtower 2-1:14.228: interrupt endpoints not found [ 592.889735][ T37] usb 2-1: USB disconnect, device number 26 [ 593.341314][ T5704] usb 1-1: USB disconnect, device number 20 [ 593.574299][ T37] usb 5-1: USB disconnect, device number 2 [ 594.009089][T10307] FAULT_INJECTION: forcing a failure. [ 594.009089][T10307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 594.009209][T10307] CPU: 0 UID: 0 PID: 10307 Comm: syz.4.1338 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 594.009241][T10307] Tainted: [L]=SOFTLOCKUP [ 594.009250][T10307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 594.009264][T10307] Call Trace: [ 594.009275][T10307] [ 594.009286][T10307] dump_stack_lvl+0xe8/0x150 [ 594.009326][T10307] should_fail_ex+0x467/0x600 [ 594.009364][T10307] _copy_to_user+0x31/0xb0 [ 594.009389][T10307] copy_siginfo_to_user+0x22/0xc0 [ 594.009421][T10307] x64_setup_rt_frame+0x764/0xc50 [ 594.009450][T10307] ? rt_spin_unlock+0x157/0x200 [ 594.009503][T10307] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 594.009540][T10307] arch_do_signal_or_restart+0x456/0x860 [ 594.009571][T10307] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 594.009617][T10307] exit_to_user_mode_loop+0x104/0x730 [ 594.009653][T10307] ? rcu_is_watching+0x15/0xb0 [ 594.009683][T10307] do_syscall_64+0x33d/0x530 [ 594.009706][T10307] ? irqentry_exit+0x10f/0x8f0 [ 594.009727][T10307] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.009752][T10307] ? clear_bhb_loop+0x40/0x90 [ 594.009789][T10307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.009813][T10307] RIP: 0033:0x7fc9aeaee6ce [ 594.009835][T10307] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 594.009858][T10307] RSP: 002b:00007fc9acd64fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 594.009882][T10307] RAX: 0000000000000001 RBX: 00007fc9acd656c0 RCX: 00007fc9aeaee6ce [ 594.009898][T10307] RDX: 0000000000000001 RSI: 00007fc9acd65090 RDI: 0000000000000004 [ 594.009913][T10307] RBP: 00007fc9acd65090 R08: 0000000000000000 R09: 0000000000000000 [ 594.009928][T10307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 594.009941][T10307] R13: 00007fc9aedb6128 R14: 00007fc9aedb6090 R15: 00007ffeab6fae28 [ 594.009972][T10307] [ 594.593057][ T32] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 594.723114][ T5704] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 594.747076][ T32] usb 2-1: Using ep0 maxpacket: 32 [ 594.760689][ T32] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 594.760724][ T32] usb 2-1: config 0 has no interface number 0 [ 594.763956][ T9062] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 594.789700][ T32] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 594.789742][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.789775][ T32] usb 2-1: Product: syz [ 594.789794][ T32] usb 2-1: Manufacturer: syz [ 594.789813][ T32] usb 2-1: SerialNumber: syz [ 594.830506][ T32] usb 2-1: config 0 descriptor?? [ 594.892862][ T5704] usb 1-1: Using ep0 maxpacket: 32 [ 594.897482][ T5704] usb 1-1: unable to get BOS descriptor or descriptor too short [ 594.899607][ T5704] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 594.899643][ T5704] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 594.899668][ T5704] usb 1-1: config 14 has no interface number 0 [ 594.899688][ T5704] usb 1-1: config 14 has no interface number 1 [ 594.899764][ T5704] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 594.899792][ T5704] usb 1-1: config 14 interface 228 altsetting 5 has an invalid endpoint descriptor of length 2, skipping [ 594.899819][ T5704] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 594.899851][ T5704] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 594.899883][ T5704] usb 1-1: config 14 interface 57 has no altsetting 0 [ 594.899904][ T5704] usb 1-1: config 14 interface 228 has no altsetting 0 [ 594.971502][ T9062] usb 6-1: Using ep0 maxpacket: 32 [ 595.025396][ T9062] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 595.025432][ T9062] usb 6-1: config 0 has no interface number 0 [ 595.025488][ T9062] usb 6-1: config 0 interface 184 has no altsetting 0 [ 595.061350][ T5704] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 595.061456][ T5704] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.061482][ T5704] usb 1-1: Product: syz [ 595.061500][ T5704] usb 1-1: Manufacturer: syz [ 595.061517][ T5704] usb 1-1: SerialNumber: syz [ 595.064585][ T9062] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 595.064697][ T9062] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.064722][ T9062] usb 6-1: Product: syz [ 595.064739][ T9062] usb 6-1: Manufacturer: syz [ 595.064758][ T9062] usb 6-1: SerialNumber: syz [ 595.170521][ T9062] usb 6-1: config 0 descriptor?? [ 595.338088][ T5704] legousbtower 1-1:14.57: interrupt endpoints not found [ 595.341667][ T32] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 595.341706][ T32] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 595.419607][ T5704] legousbtower 1-1:14.228: interrupt endpoints not found [ 595.453101][ T5704] usb 1-1: USB disconnect, device number 21 [ 595.544244][ T32] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 595.544665][ T32] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 595.712772][ T32] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 595.862813][ T32] usb 5-1: Using ep0 maxpacket: 32 [ 595.869932][ T32] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 595.869971][ T32] usb 5-1: config 0 has no interface number 0 [ 595.870024][ T32] usb 5-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 595.870053][ T32] usb 5-1: config 0 interface 89 has no altsetting 0 [ 595.919897][ T32] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 595.919938][ T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.919962][ T32] usb 5-1: Product: syz [ 595.920000][ T32] usb 5-1: Manufacturer: syz [ 595.920018][ T32] usb 5-1: SerialNumber: syz [ 595.950828][ T32] usb 5-1: config 0 descriptor?? [ 595.991996][ T32] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 595.992042][ T32] em28xx 5-1:0.89: Video interface 89 found: [ 596.464979][T10328] FAULT_INJECTION: forcing a failure. [ 596.464979][T10328] name failslab, interval 1, probability 0, space 0, times 0 [ 596.465028][T10328] CPU: 1 UID: 0 PID: 10328 Comm: syz.0.1347 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 596.465058][T10328] Tainted: [L]=SOFTLOCKUP [ 596.465071][T10328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 596.465083][T10328] Call Trace: [ 596.465090][T10328] [ 596.465097][T10328] dump_stack_lvl+0xe8/0x150 [ 596.465147][T10328] should_fail_ex+0x467/0x600 [ 596.465184][T10328] should_failslab+0xa8/0x100 [ 596.465210][T10328] kmem_cache_alloc_node_noprof+0xac/0x660 [ 596.465248][T10328] ? __alloc_skb+0x1d7/0x7a0 [ 596.465271][T10328] ? __alloc_skb+0x1d7/0x7a0 [ 596.465313][T10328] __alloc_skb+0x1d7/0x7a0 [ 596.465349][T10328] netlink_sendmsg+0x5d4/0xb40 [ 596.465395][T10328] ? __pfx_netlink_sendmsg+0x10/0x10 [ 596.465432][T10328] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 596.465474][T10328] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 596.465511][T10328] ? arch_stack_walk+0xfb/0x150 [ 596.465551][T10328] ? __pfx_netlink_sendmsg+0x10/0x10 [ 596.465584][T10328] sock_sendmsg_nosec+0x13a/0x180 [ 596.465616][T10328] ____sys_sendmsg+0x565/0x870 [ 596.465667][T10328] ? __pfx_____sys_sendmsg+0x10/0x10 [ 596.465713][T10328] ? import_iovec+0x73/0xa0 [ 596.465752][T10328] ___sys_sendmsg+0x2a5/0x360 [ 596.465784][T10328] ? __lock_acquire+0x6df/0x2e40 [ 596.465804][T10328] ? __pfx____sys_sendmsg+0x10/0x10 [ 596.465884][T10328] ? __fget_files+0x2a/0x420 [ 596.465908][T10328] ? __fget_files+0x3a8/0x420 [ 596.465942][T10328] __x64_sys_sendmsg+0x1b7/0x290 [ 596.465969][T10328] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 596.466034][T10328] do_syscall_64+0x17b/0x530 [ 596.466060][T10328] ? irqentry_exit+0x10f/0x8f0 [ 596.466080][T10328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.466108][T10328] ? clear_bhb_loop+0x40/0x90 [ 596.466131][T10328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.466146][T10328] RIP: 0033:0x7fedc151de99 [ 596.466181][T10328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 596.466204][T10328] RSP: 002b:00007fedbf776028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 596.466229][T10328] RAX: ffffffffffffffda RBX: 00007fedc17a5fa0 RCX: 00007fedc151de99 [ 596.466246][T10328] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 596.466259][T10328] RBP: 00007fedbf776090 R08: 0000000000000000 R09: 0000000000000000 [ 596.466274][T10328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 596.466289][T10328] R13: 00007fedc17a6038 R14: 00007fedc17a5fa0 R15: 00007ffcbef3f0c8 [ 596.466314][T10328] [ 596.714700][ T9062] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 596.714742][ T9062] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 596.770570][ T9062] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 596.770618][ T9062] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 596.770643][ T9062] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 596.770665][ T9062] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 596.771016][ T9062] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 596.855573][ T9062] usb 6-1: USB disconnect, device number 57 [ 596.867921][ T32] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 596.940548][ T32] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 596.940588][ T32] em28xx 5-1:0.89: board has no eeprom [ 596.994065][ T32] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 596.994092][ T32] em28xx 5-1:0.89: analog set to bulk mode. [ 596.995197][ T37] em28xx 5-1:0.89: Registering V4L2 extension [ 597.023757][ T32] usb 5-1: USB disconnect, device number 3 [ 597.040496][ T32] em28xx 5-1:0.89: Disconnecting em28xx [ 597.122281][ T37] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 597.122305][ T37] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 597.122316][ T37] em28xx 5-1:0.89: No AC97 audio processor [ 597.218933][ T37] usb 5-1: Decoder not found [ 597.218953][ T37] em28xx 5-1:0.89: failed to create media graph [ 597.219035][ T37] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 597.251448][ T37] INFO: trying to register non-static key. [ 597.251513][ T37] The code [ 597.251513][ T37] The code is fine but needs lockdep annotation, or maybe [ 597.251520][ T37] you didn't initialize this object before use? [ 597.251549][ T37] turning off the locking correctness validator. [ 597.251589][ T37] CPU: 1 UID: 0 PID: 37 Comm: kworker/1:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 597.251612][ T37] Tainted: [L]=SOFTLOCKUP [ 597.251619][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 597.251631][ T37] Workqueue: events request_module_async [ 597.251693][ T37] Call Trace: [ 597.251703][ T37] [ 597.251713][ T37] dump_stack_lvl+0xe8/0x150 [ 597.251745][ T37] assign_lock_key+0x133/0x150 [ 597.251777][ T37] register_lock_class+0xcc/0x2e0 [ 597.251806][ T37] __lock_acquire+0xaf/0x2e40 [ 597.251822][ T37] ? ret_from_fork_asm+0x1a/0x30 [ 597.251846][ T37] ? stack_trace_save+0xa9/0x100 [ 597.251871][ T37] ? __pfx_stack_trace_save+0x10/0x10 [ 597.251897][ T37] lock_acquire+0x115/0x350 [ 597.251924][ T37] ? __wake_up_common_lock+0x2f/0x1f0 [ 597.251961][ T37] rt_spin_lock+0x83/0x400 [ 597.251984][ T37] ? __wake_up_common_lock+0x2f/0x1f0 [ 597.252007][ T37] ? __pfx_rt_spin_lock+0x10/0x10 [ 597.252031][ T37] __wake_up_common_lock+0x2f/0x1f0 [ 597.252056][ T37] __vb2_queue_cancel+0x2de/0xdc0 [ 597.252083][ T37] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 597.252100][ T37] ? lockdep_hardirqs_on+0x7a/0x110 [ 597.252115][ T37] ? __vb2_cleanup_fileio+0x134/0x1f0 [ 597.252141][ T37] vb2_core_queue_release+0x2f/0x150 [ 597.252168][ T37] vb2_video_unregister_device+0x15b/0x200 [ 597.252196][ T37] em28xx_v4l2_init+0x1c60/0x3140 [ 597.252219][ T37] em28xx_init_extension+0x120/0x1d0 [ 597.252245][ T37] ? process_one_work+0x7fd/0x1480 [ 597.252262][ T37] process_one_work+0xaaf/0x1480 [ 597.252285][ T37] ? __pfx_process_one_work+0x10/0x10 [ 597.252300][ T37] ? do_raw_spin_lock+0x12b/0x2f0 [ 597.252325][ T37] ? assign_work+0x3cf/0x5d0 [ 597.252342][ T37] worker_thread+0xb05/0x10d0 [ 597.252362][ T37] ? __kthread_parkme+0x71/0x1f0 [ 597.252384][ T37] kthread+0x388/0x470 [ 597.252405][ T37] ? __pfx_worker_thread+0x10/0x10 [ 597.252427][ T37] ? __pfx_kthread+0x10/0x10 [ 597.252449][ T37] ret_from_fork+0x514/0xb70 [ 597.252473][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 597.252494][ T37] ? __switch_to+0xc89/0x1420 [ 597.252515][ T37] ? __pfx_kthread+0x10/0x10 [ 597.252536][ T37] ret_from_fork_asm+0x1a/0x30 [ 597.252563][ T37] [ 597.252709][ T37] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 597.252854][ T37] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 597.252941][ T37] CPU: 1 UID: 0 PID: 37 Comm: kworker/1:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 597.252968][ T37] Tainted: [L]=SOFTLOCKUP [ 597.252976][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 597.252989][ T37] Workqueue: events request_module_async [ 597.253015][ T37] RIP: 0010:__wake_up_common_lock+0xd6/0x1f0 [ 597.253048][ T37] Code: 0f 84 d4 00 00 00 44 8b 7c 24 04 eb 13 48 ba 00 00 00 00 00 fc ff df 4c 39 ed 0f 84 ba 00 00 00 49 89 ee 48 89 e8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 f7 e8 1c ce 93 00 48 ba 00 00 00 00 00 fc [ 597.253067][ T37] RSP: 0018:ffffc90000ac7908 EFLAGS: 00010246 [ 597.253085][ T37] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 597.253097][ T37] RDX: dffffc0000000000 RSI: ffffffff8bcbd060 RDI: 00000000ffffffff [ 597.253113][ T37] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 597.253127][ T37] R10: dffffc0000000000 R11: fffffbfff1fa1890 R12: ffff888044f75b14 [ 597.253143][ T37] R13: ffff888044f75c28 R14: 0000000000000000 R15: 0000000000000000 [ 597.253157][ T37] FS: 0000000000000000(0000) GS:ffff888125af2000(0000) knlGS:0000000000000000 [ 597.253174][ T37] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 597.253188][ T37] CR2: 0000001b3251eff8 CR3: 0000000037f94000 CR4: 00000000003526f0 [ 597.253208][ T37] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 597.253221][ T37] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 597.253237][ T37] Call Trace: [ 597.253245][ T37] [ 597.253258][ T37] __vb2_queue_cancel+0x2de/0xdc0 [ 597.253290][ T37] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 597.253312][ T37] ? lockdep_hardirqs_on+0x7a/0x110 [ 597.253330][ T37] ? __vb2_cleanup_fileio+0x134/0x1f0 [ 597.253366][ T37] vb2_core_queue_release+0x2f/0x150 [ 597.253402][ T37] vb2_video_unregister_device+0x15b/0x200 [ 597.253447][ T37] em28xx_v4l2_init+0x1c60/0x3140 [ 597.253477][ T37] em28xx_init_extension+0x120/0x1d0 [ 597.253509][ T37] ? process_one_work+0x7fd/0x1480 [ 597.253529][ T37] process_one_work+0xaaf/0x1480 [ 597.253558][ T37] ? __pfx_process_one_work+0x10/0x10 [ 597.253577][ T37] ? do_raw_spin_lock+0x12b/0x2f0 [ 597.253608][ T37] ? assign_work+0x3cf/0x5d0 [ 597.253631][ T37] worker_thread+0xb05/0x10d0 [ 597.253655][ T37] ? __kthread_parkme+0x71/0x1f0 [ 597.253682][ T37] kthread+0x388/0x470 [ 597.253709][ T37] ? __pfx_worker_thread+0x10/0x10 [ 597.253731][ T37] ? __pfx_kthread+0x10/0x10 [ 597.253761][ T37] ret_from_fork+0x514/0xb70 [ 597.253790][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 597.253819][ T37] ? __switch_to+0xc89/0x1420 [ 597.253846][ T37] ? __pfx_kthread+0x10/0x10 [ 597.253875][ T37] ret_from_fork_asm+0x1a/0x30 [ 597.253911][ T37] [ 597.253926][ T37] Modules linked in: [ 597.253954][ T37] ---[ end trace 0000000000000000 ]--- [ 597.260915][ T37] RIP: 0010:__wake_up_common_lock+0xd6/0x1f0 [ 597.261058][ T37] Code: 0f 84 d4 00 00 00 44 8b 7c 24 04 eb 13 48 ba 00 00 00 00 00 fc ff df 4c 39 ed 0f 84 ba 00 00 00 49 89 ee 48 89 e8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 f7 e8 1c ce 93 00 48 ba 00 00 00 00 00 fc [ 597.261157][ T37] RSP: 0018:ffffc90000ac7908 EFLAGS: 00010246 [ 597.261220][ T37] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 597.261254][ T37] RDX: dffffc0000000000 RSI: ffffffff8bcbd060 RDI: 00000000ffffffff [ 597.261301][ T37] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 597.261335][ T37] R10: dffffc0000000000 R11: fffffbfff1fa1890 R12: ffff888044f75b14 [ 597.261387][ T37] R13: ffff888044f75c28 R14: 0000000000000000 R15: 0000000000000000 [ 597.261424][ T37] FS: 0000000000000000(0000) GS:ffff888125af2000(0000) knlGS:0000000000000000 [ 597.261472][ T37] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 597.261488][ T37] CR2: 0000001b3251eff8 CR3: 0000000011676000 CR4: 00000000003526f0 [ 597.261542][ T37] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 597.261592][ T37] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 597.261732][ T37] Kernel panic - not syncing: Fatal exception [ 597.262370][ T37] Kernel Offset: disabled