last executing test programs: 4.868167838s ago: executing program 1 (id=2010): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x40800) r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 4.296064188s ago: executing program 0 (id=2020): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000680), 0x20002, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f0000000000)={0x1, 0x0, [{}]}) mmap(&(0x7f0000ff1000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0xca267000) 4.165368384s ago: executing program 0 (id=2022): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='dctcp', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) sendto$inet(r0, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, {0x306, @broadcast}, 0x40, {0x2, 0x4e22, @multicast1}, 'bond0\x00'}) 4.100504143s ago: executing program 0 (id=2023): pread64(0xffffffffffffffff, 0x0, 0x0, 0x1) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f00001e5000/0x2000)=nil, 0x2000, 0x14) 3.486917653s ago: executing program 3 (id=2025): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000240)="0000000000000040ff6943b80000000800003fecf20000000086070000", 0x1d, r0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x4, 0x62, 0xd, 0x4, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000, 0x1, 0x9, 0x10000}}) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, 0xd, 0xa, 0x0, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000881}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f00000001c0)={0x1d, r5}, 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}, {{0x3, 0x0, 0x1}}], 0x10) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r9 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r10 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x1}, &(0x7f00000009c0)="3e12d23d346cfdeb1716f738374bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b8beb84ef6d549eed5aaa86dbe646fc95b4b88e17fb55ae6f1221bcf13ecff7a5", 0xa1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r8, r9, r10}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974"], 0xdc}}, 0x0) write(r6, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000100)={'ip6_vti0\x00', r2, 0x0, 0x9, 0x7b, 0x1ff, 0x11, @mcast1, @empty, 0x1, 0x8000, 0x0, 0x7}}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r13, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x17b, 0x0, 0x5}]}) r14 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$FBIOGET_FSCREENINFO(r14, 0x4602, 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x180000, @empty}, 0x1c) 3.120016636s ago: executing program 1 (id=2026): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0x1c, 0x10d, 0x0, 0x1, [{0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3ff}, @NL80211_ATTR_FREQ_RANGE_END={0x8}]}]}]}, 0x30}}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x0, 0x3}, 0x20) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000140)={@local}, &(0x7f0000000040)=0xfffffffffffffff1) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r3, 0x114, 0x5, &(0x7f0000000080)=0x1, 0x4) fchdir(r2) 3.118880988s ago: executing program 3 (id=2027): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x901281, 0xa0) write$qrtrtun(r1, &(0x7f0000000040)="b4a2e40000000000", 0x8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5421, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 2.991668641s ago: executing program 1 (id=2028): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000080)="3b6773add2485f53272c6717c01f934a9e70e0d40de2f5a97a2dfbbf5dbefa78933a628f210fc4", 0x27}], 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r1, 0xff00, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x7590) 2.873682479s ago: executing program 1 (id=2029): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) r3 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)={0x0, 0xd, 0x2, 'Vx'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r3, &(0x7f0000000800)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="00210900f60710b43413051f4b6486bb"], 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000040)={0x2c, &(0x7f0000000580)=ANY=[@ANYBLOB="00007f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r4) sendmsg$NFC_CMD_LLC_SET_PARAMS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r5, 0x1, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x800) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'team0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xd, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x9, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xd, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xd, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x1, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x4, 0xb4d, 0x2c83, 0x4, 0x1, 0x9, 0x94}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9002}, 0x4) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0xffffffffffffff7a, r1, 0x1, 0x0, 0x1, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x257, 0x33, @assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @from_mac=@device_b, {0xe, 0xff}}, 0x20, 0x60, @random=0x8001, @void, @void, [{0xdd, 0x48, "a4515c542e420c8f0598f68dd129e4b2f983936563fe6adf9b290f005b1f69691bbd86aeb2701c2a1f3bd8e1a7ac4727a0708e80db613a0976ad10b5c85975040041a63d4bae6797"}, {0xdd, 0x90, "bc1b870d7accdbcd7be5d2ac6d314134cbc5c3c7179961092332627e09b8730ac686ca2c9001f28059abdca648b9fc5e4529c5fb9d3fe26ca5a092e8592345e472d1c5b2834e28c99290b91e4c82b58301e5c5258532ff7fc8d9ef5764401d3fd081072c32369db5aa70ac01fab754ec241ad9668d2db82b74b3eaa5fab9a4f04a9bfbece239e062d9aace979e377763"}, {0xdd, 0x6, "51a6e672a7ee"}, {0xdd, 0xa4, "6a39f381241130a9b1bd68586d6b2c49005b62c70205c152aba72828c3e4ce3ba399f93339fe38edfdd7829c5f724bbc66e5d25324f162fab499f8b2cad644af31aa45e9497e0708ac95bd08ae013f490640157197603eee827bc36f6bd905f7a472c207c06dff8e8766d28f1b0cd9d09647f189ab4f27ba03c303d9a68d2bbe6cef5c7711de3bd8f6d59400d221a8e1c8f3b0cde09e726825399f7e1214a7f4a67cdd38"}, {0xdd, 0xa9, "0d5a46327c06f898097a3ee1aeb62e352eea7e0bef0083fc01c8c9d9e1d2571f91c9d89692fbd1e9c497de8926b4e5d2b76593ef0b4bcb15949aaab6773ac4e20d6c87d428a8486756aa5e4a48e3dfded63881104946b9be565c7e8586b965f3ff3adaf14f8ff179f7bdce1b4c7a8c51c90e03644ecb1459791d7753314c647fca49bc36979e622f80ac5017e1a720d46a06809c19edb1557bf654efb5fae079bdb64a626de85aff18"}]}}]}, 0x26c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2.72868031s ago: executing program 3 (id=2030): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000f000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000300)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b8000000000f23c00f21f835010003000f23f8ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x4b}], 0x1, 0x3b, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x36, 0x40000000788, 0x80000000002, 0x183, 0x400000004, 0x0, 0xee, 0x80000001, 0x100000000, 0x1000045, 0x10000, 0x9, 0xf, 0xfffffffffffffffd, 0x0, 0xab], 0x8000000, 0x3c4210}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f00000000c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c009103", @ANYRES64=r4, @ANYBLOB="02002abd7000fcdbdf25450000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x8c0) socket(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x46}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x1) ioctl$SIOCAX25ADDFWD(0xffffffffffffffff, 0x89ea, &(0x7f0000000040)={@default, @default}) 2.528189574s ago: executing program 3 (id=2032): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x6, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e21, 0xff, @ipv4={'\x00', '\xff\xff', @local}, 0xff}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000002c0)="1f", 0x1}], 0x1}, 0x60) syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000300000010392a8c3f4000010203010902600003010910040904000000010100000a240100000a000201020904010000010200000904010101010200000905010900040601080725010000ef660904020087ad4d5148c2c3000102000009040201010102000009058209080005010907250104070800"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) 2.307108986s ago: executing program 0 (id=2033): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getenv(0x4201, r0, 0x4f000, &(0x7f0000000000)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x20, 0x0, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) get_robust_list(r0, &(0x7f0000000640)=&(0x7f0000000600)={&(0x7f0000000280), 0x0, &(0x7f0000000540)={&(0x7f0000000500)}}, &(0x7f0000000680)=0x18) fcntl$setsig(r1, 0xa, 0x2f) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/77, 0x4d}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x20, 0x0, 0x9, 0x801, 0x0, 0x0, {0x5}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4080) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.263140899s ago: executing program 0 (id=2034): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000000)={0x8, 0xdc, 0x40, 0x7, 0x1}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x3}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="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", 0xfb}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a59c3a97fe428e75e7707525647bd822", 0x7a}, {&(0x7f0000000580)}], 0x3, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8367384f034a7a011388990e94cd43e9f80ec3358dc596926960604b9f051", 0x83}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356257181e43b6e60349f69ec5f529734f76708a6c5eccb57005c1a513d8030d12c", 0x41}, {&(0x7f0000000d00)="dc6e94ac2db166801ffce85f6f44f2cb071c6b5113bc6bbf2f503d468253693a01102fcb8157c6e8a2b5620efa5d22400147cce896821150f95c0c69fa587a1f99fcb28cfeb09f45cb836f0ff891be10bb209dc04adc202ef866f27b74faa5ad3a2e5d40ebd6785c4e4a97ac13238c746d1109d12af5446c4e84591f121a494251e43bed18f6269bdd2e56f9c211dd7145f664286911b8bb3acf76a1b5ece94183a6c8cc47f2e1dd4e91dc10be8732e92e8620fa060fb15016c2dc9b6da18325e778660d499aec6215b0f9f679fa76d22cdd4ae3776203e2054240594f1c9b77ad77cf3f5631012fa0788c5b17f98cc34720b0", 0xf3}, {&(0x7f0000000fc0)="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", 0xfc}, {&(0x7f00000010c0)="978d1129fddf5e2f1be8be48f935ef4f71893a57f79be3e44522d3987ccee23f4e717d8c8e14573937040fb658a24f1c9e0c7f98a24fa1209a6ea754e1244234c715713d120b6929614443fd6b4223bc04c3a8c9241ccbb6a8b0bb19fe4eedae48642a74e97588dc36bf06a4c1fb17b47b39240a6a8e9b5daa97e63d777e665841a349c52022252eafc1c129e154ab390624dd7fb8ac1e44c203140d6aab524f61cd8642ee0f380ebb21dc9267a8fbefa6eec89ff97e7800f44f89b17d43206217941c34067892c05465382550a1da2519", 0xd1}, {&(0x7f0000000800)="b56380b7487ff3b0cd079ed795bdeeb3ad75fe878a", 0x15}, {&(0x7f00000011c0)}, {&(0x7f0000001200)="43979d4537ac96f6e22b12acd1fdd3ffc7ef440e65e2e70d511a408f743d4ce7516f4364a00a041dc7b1ffe56ebc713b158ea1aab13ce3db53ab8af3f76ffaa86df636018175c4a8ea922a193ad08ca30d5031b27a4a87bff93dc12a98b6e4f25b5550d98a5bf3e040a8902083eea93bdbde6da91df3a730dd2b8215e9840f04dd0ab667500fe952fa1b8845c2cee50f8322175049c4a994def6599287fb0f8d61029188945e9b273cded0", 0xab}, {&(0x7f0000001300)}], 0x9, &(0x7f00000014c0)}}], 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{0x0}, {&(0x7f0000000540)}, {&(0x7f00000006c0)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95be", 0x8b}, {0x0}, {0x0}, {0x0}], 0x6}}], 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x7, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x50000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa801, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) r4 = socket(0x400000010, 0x3, 0x0) write(r4, &(0x7f0000000200)="fc0000001400073eac093a00090007000aab0800080000000400e293210001c000000000060000000100000009000000fa2c1eff8656aaa79bffffffff0000002d00024000036c6c256f1a272fdf0d11512fd633d4400007f60eb8fa2e6b00000016fd368934d07302ade01720d7d5bbc91a3e2e80772c05f70c9ddef2fe082038f4f8b29d3ef3d92883170efdffffff3ae4f50504000000000040d815b2ccd243f295edbabc7c3f1a5f4e023dd16b176e83df150c3b8829a1ad0a4f41f0d48f6f0000080548deac270e37429f3694dec896592d69d381873cf1582740000000000000001ace36f071d0c22700"/252, 0xfc) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x8ad01, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0xf27, 0xd7b, 0x1, 0x4, 0x5, 0x5, 0x4, 0x7, 0x54c6cff3, 0xfd, 0x5, 0x1, 0x1, 0x1, 0x2000006, 0x6a, 0x0, 0xc7c, 0x3, 0x40000003, 0x89, 0xcaa3, 0x0, 0x20001e57, 0x3, 0x2000e66, 0x3, 0x1, 0x10004087, 0x0, 0xfffffff8]}) write(r5, 0x0, 0x0) r6 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) syz_kvm_add_vcpu$x86(0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f00000000c0)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) 1.255619972s ago: executing program 0 (id=2035): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 889.009496ms ago: executing program 3 (id=2037): r0 = syz_usb_connect$uac2(0x3, 0xcd, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000408c0d1400400001020301090286000301003003080b00020109200609040000000101200009240102000626000311240803010000000000000200010000000c24030402030103"], 0x0) (async) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pread64(r1, &(0x7f0000000080)=""/203, 0xcb, 0xa) (async, rerun: 64) r2 = syz_usb_connect(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYRES16=r1, @ANYBLOB="41d14dbd2cbea3ba7e849507409d8418964dcacc9452b06f389288e05e810ba26017a4614e9536ce1456158ea341a8dce012127a04ec57bf643a547c7259973baef5726e3566e2db641a7437f880c6aedccf7493ac8b763d2fe3b8"], 0x0) (rerun: 64) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) (async, rerun: 64) r4 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0xd, 0x81, 0xfffff034}, {0x6}]}, 0x10) (async) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000140)={0x60, 0x15, 0x20, "dba87faaea0dacb4322913558d2c5d270343aaedb862a5e848b426442e777a98"}, 0x0, 0x0}) (async) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000280)=0x2) (async) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x40, 0x2, 0x63, {0x63, 0x21, "18d5b45c2ee9edb08c851083cf7c571d354d0fc08039f2d011238878e330f720cc59a408cd65b309d5ea76701fe0049f8adb95eb091cc992649b22e17e6f1d5a1b088bdfafc3722a170615c376dba92fa9ca081069d081b1d2db93431c0efe711b"}}, &(0x7f00000004c0)={0x0, 0x3, 0x45, @string={0x45, 0x3, "a6c9677bf1b5f0ff9605f9174a1e5d87cef4432c42d51b9fa7131f4d640cff61aeef4a4b7fe749db81786c601a66b7e12d4a0be024f7123f57f0b04760242beecfac1b"}}, &(0x7f0000001100)={0x0, 0xf, 0x34, {0x5, 0xf, 0x34, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "1a633caf73ef7c5e90a0e5a1356c3f2b"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x2, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "e3731ea600"}]}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x2, 0xb3, 0x1, "9fe176c0", "f8b326b0"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xc, 0x0, 0xc, 0x3, 0x10, 0xcc60, 0x5}}}, &(0x7f0000000b00)={0x84, &(0x7f00000006c0)={0x40, 0x12, 0xd5, "984d1abd1945c3b3e33807c2c3e7c294490daa5211f79f22637522ec476e9f44838010c211fb4f52b72482efbfe3752e3a647936db582e13c872ed22875b039e9f07d135d626983c802381f6606e201c29d44c69e464c03eed1ce84ff2e3f5b6b59f734cc0a82fad9290e10cb86b1dd7449d0d1134c1256a8dbe5c4f7c3a52db38aa94b614c3dcf6fd7819f1cefb6d674995f524593fc73d5c8b23befb0f1342bfdd36e73a3f4526447e5ab3b0658b5d7122c5fb398126569fecadc5fe75667790835bfb96a72906b1e537255e0ee948588e33e12c"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0x2}}, &(0x7f00000011c0)=ANY=[@ANYBLOB="200200b7000000679317226c09275fdf19c3ee7c61283dbf10000000a2fef6e9d270b030cbffbd7460e0000000000048eefb0c03b48b365ac19c8743952d1f84684c8ff3cd476d5f8f02b9612a3c3bd88a37cc8cf59c8a26f7bb8756d42e99d71b46066c0bcfd92a8494155d833677f35e9963cdbcde02592598c0e1fe640a98e97e13f4086a307619d61ca4a0eb5e94d499eab104426d56fde036dcf8579725199dfc48ecb4ae1b2cad911bc612d9bfe57053e99e47697aa4ee08d450b5b26165c557240ff21834a95a8f0f579a577fb2b051fcbb891cb03d1247b60566eea3834ec7"], &(0x7f0000000840)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000880)={0x40, 0x9, 0x1, 0x3}, &(0x7f00000008c0)={0x40, 0xb, 0x2, "e7d5"}, &(0x7f0000000900)={0x40, 0xf, 0x2, 0x7f}, &(0x7f0000000940)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, &(0x7f0000000980)={0x40, 0x17, 0x6, @local}, &(0x7f00000009c0)={0x40, 0x19, 0x2}, &(0x7f0000000a00)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000a40)={0x40, 0x1c, 0x1, 0xb}, &(0x7f0000000a80)={0x40, 0x1e, 0x1, 0xff}, &(0x7f0000000ac0)={0x40, 0x21, 0x1, 0x8}}) (async, rerun: 64) r5 = socket$packet(0x11, 0x2, 0x300) (rerun: 64) setsockopt$packet_tx_ring(r5, 0x107, 0xd, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r2, &(0x7f0000000dc0)={0x24, &(0x7f0000000bc0)={0x0, 0x27, 0xdc, {0xdc, 0x11, "6e0070c38943c2696a15378af9b025725e48c0a8925ccfd50728a87e5bee6e9659d5c7429e469a14a949ad7b474cf2a2e7ccfe3eefd2d84250603ff9af8552cdb28a3bf5bfc0e84352896be61e3cb1c9dbfcd40b92965753f47069f5380780015f509eb7d66eea5d39b5b594851375d0fc4037af75188d24020d8ead818b126584edc1c2e885ac25131ac77b05f663cf60708a93b6edc5ceafcc9984b48f2cca6ff43e2bb4e76b3c5ee49e92fcf41f37ad053ec8032c53ac0873a5db76df489d5940c2858510b6f903534bc86ddd8c02bdb9344ed607f82110ca"}}, &(0x7f0000000cc0)={0x0, 0x3, 0x3e, @string={0x3e, 0x3, "c3ab72f3beba60a8addc54ae3e715650e556c012f799b87794d8c1909db67c6314f08d319f70787e9f79479f1069e342ea8775d2a59ab0dcffe98e96"}}, &(0x7f0000001180)=ANY=[@ANYBLOB="00220a00a848989d00001b1c0dc209000000000000001081f3069a9ebb50c07f766bc857af9f74"], &(0x7f0000000d80)={0x0, 0x21, 0x9, {0x9, 0x21, 0xe7d7, 0xfe, 0x1, {0x22, 0x346}}}}, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x40, 0x30, 0xc9, "5cb41aa9181270f2f864d25d94b0809427f1471ac2c03c8786f115b410a1b70f6845eb9ed2411f0532e9f73fe3c4eebb53acf7f18af60749bd598faeb2d6f852ecda13e0ab28eea46cc0275affd06959c81773839f1828395e623cd82d201e68401e92c71a3ad2d600741cee3feaf5afae2faba3e21ca6b15e6c5aacf471e165a249c67c5fc2cc776dedf4ec45b089ee6d6d933f68f316601b80e9b264d8cca87fee2bee0631ef03999455e370b198f57c5df711ab1dbe34c6e44a42c863260fe69f9708ae03183393"}, &(0x7f0000000f00)={0x0, 0xa, 0x1, 0x7c}, &(0x7f0000000f40)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000000f80)=ANY=[@ANYBLOB="200184000000154ef8a8111223268080063c43575530c4a71a6992824f19f960ff62ccf4bef144cdc119845433a765bd59feef155f070098877f030000000000000056b5388d869e405df504c23a8f4303e86bd8fec5a41432fd097d41d3013c42de71288bdcbba8fcf93702177b4f6f395e92cf00"/132], &(0x7f0000001040)={0x20, 0x3, 0x1}}) (async, rerun: 32) r6 = socket$kcm(0x21, 0x2, 0x2) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) (async) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) (async) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r11 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r10, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0x4000)=nil, r11, 0x200001b, 0x13, r9, 0x0) (async, rerun: 64) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, r11, 0x2, 0x4010, r1, 0x0) (async, rerun: 64) sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) (async) sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x10b8}, 0x200008c0) syz_open_dev$dri(&(0x7f00000010c0), 0xfffffffffffffff7, 0x2000) (async, rerun: 64) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a010200000000000000000100fffd0900010073797a30000000000900030073797a300200000074000000060a010400000000000000000100000008000b400000000038000480340001800a0001006d617463680000002400028008000300e4edf2b708000240000000000e000100636f6e6e6c6162656c0000000900010073797a30"], 0xe8}}, 0x0) 863.871494ms ago: executing program 1 (id=2038): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x0) r1 = syz_usbip_server_init(0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x6, 0x400004, 0xffffffff, 'syz0\x00', 0x8}, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 'syz1\x00', 0x0}) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000005e0001"], 0x20}}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448cc, &(0x7f00000000c0)) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1, 0x9, 0x801, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x14}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x5) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x400000b5, 0x0, 0xffffffffffffffff}]}) ioctl$OCFS2_IOC_GROUP_EXTEND(r1, 0x40046f01, &(0x7f0000000000)=0x5) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x7) 643.335439ms ago: executing program 2 (id=2040): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000f000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000300)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b8000000000f23c00f21f835010003000f23f8ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x4b}], 0x1, 0x3b, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x36, 0x40000000788, 0x80000000002, 0x183, 0x400000004, 0x0, 0xee, 0x80000001, 0x100000000, 0x1000045, 0x10000, 0x9, 0xf, 0xfffffffffffffffd, 0x0, 0xab], 0x8000000, 0x3c4210}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f00000000c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c009103", @ANYRES64=r4, @ANYBLOB="02002abd7000fcdbdf25450000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x8c0) socket(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x46}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x1) ioctl$SIOCAX25ADDFWD(0xffffffffffffffff, 0x89ea, &(0x7f0000000040)={@default, @default}) 585.483681ms ago: executing program 3 (id=2041): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r1 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYRESDEC=r0, @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000440)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BLKRRPART(r0, 0x125f, 0x0) syz_usb_control_io$printer(r1, &(0x7f00000000c0)={0x14, &(0x7f0000002180)=ANY=[@ANYBLOB="2000f3000000f3239782aebb63c7318ee64bbcf47c88e819a7dc833bb0704748e18654b9f62db815a75569d6689b3219cc5ff30901093d901f296ab8f68b0751fa2aedceb7ab6dfa59394565ca399c1f34c9951674777e54088e9aff3cc364bc83459b8e57949ece4834c8d9bbe111b63302cae3dd90dd1e174bb2697ae9800527849ac05068c409c0beb553b6292f48bd63d7e63e4035005de2c23829116f4997501c00d5b8060e248ca6c683c17e32a843dd764a96e0cd618265c273812c87cfef7baf67274e979e5adca6bbed20bb4fcae35cf7ea2cd76a24ec47adfbdb90166aa6af586b7c285bd06407d2aa4ed091c1bea1a0cc36f991"], &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x430}}}, &(0x7f0000002540)={0x34, &(0x7f0000002280)={0x40, 0x10, 0xe6, "0bdc255af9b51b68ee45d5283a82025aea0a2487cce263adcde8d3e458263d8888d0ffd2893272983738cfe7c47714df7daab7a7e60a4160d5a62174ce6da210fd724303f802186e3e5b1149cebbb2f2f5e45860199cad9eb25be0a3d49cbaf705dd4564c62eecad5feecdaf428a997a676c37038f6bf79bdca47d4a4a5c77527d60f9264cd64b0aba2b128851910cb6234b71877f874e538a761aedd4af756d1b310e4936ea7eb5e2261306fdf92965e0b0fae08ab785bb4ac54983385eb284755aaf083aa1abd11e0a724a187ec969f854c69719a66d2c12f782a27b6765cfbc44fba4f22e"}, &(0x7f0000002380)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000023c0)={0x0, 0x8, 0x1, 0xa}, &(0x7f0000002580)=ANY=[@ANYBLOB="200091000000108fd1469c4908614fe2a71accdddba697199224b7e19dc6956b2faf0f8194dba9d3d6aa9e0e5c9a4396f85c51e57f21d39ce7db95a211e61d1af0bf6aa651149dc2aa893c46763d140247dc02f272d1ba73c9c8c2aa9770e559e6ef4b0df5875bf494244395a2a3d97fdf15c581fda8cb9029279a74887f57d76a684c2527eb1ae7e2db17047404ab6002169a850463000000000000000000"], &(0x7f00000024c0)={0x20, 0x1, 0x1, 0x3}, &(0x7f0000002500)={0x20, 0x0, 0x1, 0xfe}}) openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x2c001, 0x0) read$FUSE(r2, &(0x7f0000000140)={0x2020}, 0x2020) sendfile(r0, r0, 0x0, 0x2000fb) 412.966251ms ago: executing program 2 (id=2042): r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0xfffffb88, 0x200000000000000, 0x20000040}, 0x8000000) 299.667112ms ago: executing program 2 (id=2043): r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x1, 0x20000) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000601, 0x0, &(0x7f0000000040)={0x4, 0xffff, 0x0, 0x4}) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x2) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f00000001c0)={0x60, 0x4, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xc37d, &(0x7f00000000c0)=[{0xf7d}, {0xf, 0x4, 0x5d}, {0x6, 0x0, 0x3}, {0x6, 0xfffffffffffffe00, 0x401}, {0x6, 0x7fffffffffffffff, 0x10001}, {0x8, 0x4, 0x800}, {0xfffffffffffffff3, 0x80000001, 0x20}, {0x4, 0x200, 0x27}, {0x7, 0x0, 0x9}], 0x9, 0x5, 0x30, 0x29, 0x51}) ioctl$PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, &(0x7f0000000240)=0x2200) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000280)={0x10, 0x0, "bc2d0855e1e5c9148ba4dbfcbcfbf763"}) ioctl$NILFS_IOCTL_GET_SUINFO(r1, 0x80186e84, &(0x7f0000000340)={&(0x7f00000002c0)=[{0x8000000000000000, 0x8000, 0x2}, {0x2, 0x5}, {0x9, 0x3, 0x2}, {0xc, 0x7dfd, 0x2}, {0xa17, 0x100, 0x3}, {0xfffffffffffffffb, 0x6, 0x1}], 0x6, 0x10, 0x3, 0x4}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x2400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x37) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f00000003c0)={0x2}) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x4) flistxattr(r3, &(0x7f0000000400)=""/1, 0x1) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x12) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000440)={0x0, 0x7, 0xdddd1000, 0x1000, &(0x7f0000ffa000/0x1000)=nil}) pwritev(r2, &(0x7f0000000540)=[{&(0x7f0000000480)="e2a074756634fecdda2fea245807b589d02af460347296ebfce3495dc0b6a60b83b5eefb9f1cfd7cac56cf21eb7dd9e18d28980b9dab10576fb4988023ba211f0f19b4709b5d1a221e99b0e3ef365de89ae928cb4a43653a8e26a6f89a7a2874087f8d921cadfebedf4328b15b0ef1f8068f7ac67300b126a3f622bfa579ce592616a7a66a84e9cd0b3d143fc923", 0x8e}], 0x1, 0xdfe, 0x2) openat$cuse(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)) getgid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000700)) syz_emit_vhci(&(0x7f0000001c00)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x8, 0x1, 0x2016}}}, 0x7) 274.831931ms ago: executing program 2 (id=2044): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x3}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="d542f6300b61ca7913e7cd7b4036afcfddb3c77fc63db30ef223f1cc4fcdcbb56655be4873ea15e1a9d348fadc935180e702560acae65d42d95f6ddcae59879a1ce7e78eb197a0c8231a504b2614ac6dfd9a5760fe75ba4204694d382eb51806597cde99cedde3f0edd8bd3fce154f83e47f422d0e5bf427c23771a122bd0369cec32bbe791bfc2c0fce202d51df0862c31baa7b80bab6d64c1d5826a7f4c1982e3693e7a0677f2ad388ce872b890394a3ecfd1cec45ba7966945271fc033565d4a9bb17a41aacf550c4510ba99a24b48eab32e5d7549de9bae7954e0f750b55f706de3d5001638a1260dd8d2ad735d9ec409711851badf7e170fc50", 0xfc}, {0x0}, {&(0x7f0000000580)}], 0x3, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)}}], 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x900000000000000) 112.014012ms ago: executing program 2 (id=2045): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0x200f, {"20e30a30ed0d60f91b5e070987f70e06d038e7ff7fc6e5539b0d3e0e8b089b3f36306e030890e0879b0af8c6e70a9b334a959b669a240d0a0af3988f7ef319520100ffe8d178708c526db51b1b5b31070d0773090acd3b78130daa61d8e8042001000000b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19300305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c7f5e801119242ca026bfc821e7e7daf2451138e6c5bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c580263a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f6709000000a141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e960bac9c76600025e19c90f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a027d5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf050000008000000000f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b3f3f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7af1d0e54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c01008e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2f5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d21488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e1a63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4bf234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e09d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a603336c00000077cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2f22e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046ca5b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d4f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe6531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e6586df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59555e502dcea39cb313b0000000000004ca7c12f41858d6284ca6270d6b2f0d8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8ff07f028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb601203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f900000930dedf800", 0x1000}}, 0x1006) 394.301µs ago: executing program 2 (id=2046): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x8, 0x2, {0x3, 0x3, 0xfffffffc, 0x2, 0x4}, 0x4}) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/61, 0x3d}], 0x1) 0s ago: executing program 1 (id=2047): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x0, 0xf, 0x43, @dev={0xfe, 0x80, '\x00', 0x2a}, @remote, 0x8, 0x7800, 0x7, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl0\x00', r0, 0x29, 0x0, 0x3, 0x5, 0x21, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7800, 0x7, 0x7, 0x3ff}}) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000100)=@t={0x81, 0x3, 0x0, 0x0, @generic}) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000000000)={0x0, 0x0}) ioctl$KVM_SET_SREGS2(r7, 0x4140aecd, &(0x7f0000000240)={{0x2000, 0xf7f8a000, 0x9, 0x8, 0x80, 0x0, 0x5, 0x8, 0x0, 0x40, 0x1, 0xb4}, {0xeeef0000, 0xeeef0000, 0xb, 0xfc, 0x4, 0x5c, 0xd, 0x7, 0x3, 0x68, 0xf5, 0x2b}, {0x9000, 0xffffffff, 0xf, 0x7, 0x66, 0x8, 0xf5, 0x4, 0xe, 0x3, 0x9, 0x5}, {0xc000, 0xa000, 0x4, 0x2e, 0x5, 0x8, 0x4, 0xaa, 0x5, 0x7, 0x2, 0x40}, {0x7000, 0x0, 0xb, 0x7f, 0x0, 0x2, 0x9, 0x0, 0x9, 0x8, 0x2c, 0xb9}, {0x0, 0x1, 0xa, 0xb4, 0x6, 0x3, 0x0, 0xff, 0x3, 0xc0, 0x7}, {0xffff1000, 0xe000, 0xa, 0x10, 0xfe, 0x3, 0x6e, 0xd6, 0x4, 0x5, 0x47, 0x1}, {0xeeee8000, 0x0, 0x10, 0x3, 0x1, 0x40, 0xa, 0x1c, 0x9, 0x7, 0x7, 0x20}, {0x54000, 0x600}, {0xffff1000, 0x3}, 0x80000037, 0x0, 0x80a9002, 0x400e2, 0xe, 0xa000, 0xfee00900, 0x1, [0x1, 0x8a, 0xfffffffffffffff7, 0x8]}) sendmmsg$inet6(r2, &(0x7f0000000bc0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000280)}], 0x1}}], 0x1, 0x40c40c0) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0xc0686611, &(0x7f0000000180)={0x1fe, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) sendmmsg$alg(r9, &(0x7f0000000980)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)="b81313f1e4073bce231d583af78032d4be16ae24890f83beacb5a5b0e288f5bcfa6610ef2403a47c433eaac74e45d2a02fbbfb83efc605113e7f4768a6849fba49e4e21a14be72732f4646c3bb98f6ac2ee1c1578dda579e3e060103a2da103ed6b1e6374899031c32532ad05ae9d58f9e06b5", 0x73}], 0x1, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0xc8, 0x117, 0x2, 0xad, "197a5270cdabae3bb3045a4c21a4c01b21f5f012bfc03c7958587687015b34b7046d2238fb27728c2533405c76ce210f66a62b66c39ed38e4a7d44382b58843a7abab088354189879b80802358a6159e3660daefc0b13815ea6f425d4e1f8aaa5f4a4fb43c9a64b5277f73a4b2d85564cf94ff87cf36ac269b9722c5711985b521677d39a40884e961a7218e969dac5d17cfb579162851504ad38b29b06c3198b6afd1f25a787787efd8850cf1"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x800}, @iv={0xd0, 0x117, 0x2, 0xbc, "0346cacd7d01a6cd2a072c1f5fc96af8bda677110959da9515db7f6e633902235ee844ccaab1331a5d9ad5e6c133681d5383a43938eea83cb5dacf489374d9ab5a7e95036781977f1b7af92f168097cb7a48d8d34f53b00f4d614560c3b8e1478ebad0fef31d4030c203fc60b8bd4a2c1107e1043c15dd1086d3ccc57b5247dd265a74c7238622066fa902d1c7fb3d1b24c5d018fc4a9d33ed59dd87ca299c5b74d5a25828265e750f488dbd6f92b86f028e4ebe91dbe839eebca937"}], 0x210, 0x48004}, {0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000680)="22e1c9b24c88c879d5f52b684d62cef1485a9acefc9dbc4f347f72de1559eae4bfdafbdfa3a13448c441da4cd070379022c4dff422f9b796f8a2ac101f0deda8d47ee291c172fcda6e52de059f7ae53372bb4ffff8749a2e62", 0x59}, {&(0x7f0000000700)="48b03e84115d8b32e1a6f0814f6216a35257cf4dd1", 0x15}, {&(0x7f0000000740)="f700e777e3b6f681877afe038ef7c9726090d382aeea3e04ba344314f89aab8a", 0x20}], 0x3, &(0x7f00000007c0)=[@iv={0x30, 0x117, 0x2, 0x17, "6ba7440d744185106f22e5580e04f421e30ad241d2119f"}, @iv={0xe0, 0x117, 0x2, 0xc6, "1423145866e638f95c636acb312ab43d6debe89f9d574cb48823544194a7eb57d7c92a641eef5e4e0e4fce9989e9d8d4cc2e18df2a81922d13b6aff56bba2bfb27c18f1a07aa0a485463d49e1acf84258e0e37a83356e8aa3db30be18f646b504dcc08ebd27c0aca9fad3cbdb2fa92afb86cdf1a9d530a1d3d5fa99e215a3fb0062215d8fb9d973e1b656fbe5f59700590b91b7c0812276132868a274ddd03ccf368948a710bfe3c1d6f2f5e499b0da04acbffc3dfcfc56accf78231df8ad51321ba2cfd737b"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x4}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18, 0x117, 0x4, 0x8000}], 0x1a0, 0x20008010}], 0x2, 0x44) sendmsg$SOCK_DIAG_BY_FAMILY(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400050124bd70007bdbdf250a84312a09"], 0x48}, 0x1, 0x0, 0x0, 0x4004081}, 0x2005c840) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000000)=0x1) kernel console output (not intermixed with test programs): et 512, setting to 64 [ 734.542629][T10748] usb 3-1: config 169 interface 3 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 734.553795][T10748] usb 3-1: config 169 interface 3 altsetting 2 endpoint 0x4 has an invalid bInterval 243, changing to 4 [ 734.565344][T10748] usb 3-1: config 169 interface 3 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 734.576266][T10748] usb 3-1: config 169 interface 3 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 734.587325][T10748] usb 3-1: config 169 interface 3 altsetting 2 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 734.599079][T10748] usb 3-1: config 169 interface 3 altsetting 2 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 734.610344][T10748] usb 3-1: config 169 interface 3 altsetting 2 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 734.623459][T10748] usb 3-1: config 169 interface 3 altsetting 2 has 10 endpoint descriptors, different from the interface descriptor's value: 13 [ 734.638228][T10748] usb 3-1: too many endpoints for config 169 interface 166 altsetting 75: 115, using maximum allowed: 30 [ 734.649792][T10748] usb 3-1: config 169 interface 166 altsetting 75 has a duplicate endpoint with address 0xA, skipping [ 734.660949][T10748] usb 3-1: config 169 interface 166 altsetting 75 has a duplicate endpoint with address 0x4, skipping [ 734.672084][T10748] usb 3-1: config 169 interface 166 altsetting 75 has 3 endpoint descriptors, different from the interface descriptor's value: 115 [ 734.685826][T10748] usb 3-1: config 169 interface 108 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 734.697590][T10748] usb 3-1: config 169 interface 108 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 734.701378][ T1223] usb 1-1: USB disconnect, device number 11 [ 734.708629][T10748] usb 3-1: config 169 interface 108 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 734.726065][T10748] usb 3-1: config 169 interface 108 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 734.737517][T10748] usb 3-1: config 169 interface 108 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 734.755845][T10748] usb 3-1: too many endpoints for config 169 interface 138 altsetting 52: 218, using maximum allowed: 30 [ 734.767326][ T5937] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 734.777775][T10748] usb 3-1: config 169 interface 138 altsetting 52 has a duplicate endpoint with address 0x4, skipping [ 734.793789][T10748] usb 3-1: config 169 interface 138 altsetting 52 has 1 endpoint descriptor, different from the interface descriptor's value: 218 [ 734.807630][T10748] usb 3-1: config 169 interface 83 has no altsetting 0 [ 734.814736][T10748] usb 3-1: config 169 interface 3 has no altsetting 0 [ 734.821962][T10748] usb 3-1: config 169 interface 166 has no altsetting 0 [ 734.828992][T10748] usb 3-1: config 169 interface 138 has no altsetting 0 [ 734.839051][T10748] usb 3-1: New USB device found, idVendor=12d1, idProduct=1404, bcdDevice= 0.00 [ 734.849872][T10748] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.858859][T10748] usb 3-1: Product: Џ [ 734.863130][T10748] usb 3-1: Manufacturer: 迨ꮔ酨䰯졥䆝♣钘㽑혢ࠄꖁŗ忂弚墍 [ 734.872309][T10748] usb 3-1: SerialNumber: 潫ᙫ铱㈴푲⺭曄駗骠냥ꥌ덄忛ꉾ斯䋂퇤턊懕䂿媥䌻灉晄糜ᇶ㉔േ뫷ᢱ쨖ॠ⳵陉冖筺褿롴ꟛ첢鋯ᆢ [ 734.930082][ T5937] usb 4-1: config 0 has an invalid interface number: 66 but max is 0 [ 734.938422][ T5937] usb 4-1: config 0 has no interface number 0 [ 734.944775][ T5937] usb 4-1: too many endpoints for config 0 interface 66 altsetting 71: 66, using maximum allowed: 30 [ 734.956206][ T5937] usb 4-1: config 0 interface 66 altsetting 71 has 0 endpoint descriptors, different from the interface descriptor's value: 66 [ 734.970592][ T5937] usb 4-1: config 0 interface 66 has no altsetting 0 [ 734.977478][ T5937] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 734.986715][ T5937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.001861][ T5937] usb 4-1: config 0 descriptor?? [ 735.020959][ T5937] cp210x 4-1:0.66: cp210x converter detected [ 735.115443][T10748] usb-storage 3-1:169.83: USB Mass Storage device detected [ 735.193362][T10748] usb-storage 3-1:169.3: USB Mass Storage device detected [ 735.247152][T10748] usb-storage 3-1:169.166: USB Mass Storage device detected [ 735.378639][T10748] usb-storage 3-1:169.108: USB Mass Storage device detected [ 735.453302][T10748] usb-storage 3-1:169.138: USB Mass Storage device detected [ 735.512278][ T5937] cp210x 4-1:0.66: failed to get vendor val 0x000e size 3: -71 [ 735.533459][T10748] usb 3-1: USB disconnect, device number 23 [ 735.542889][ T5937] usb 4-1: cp210x converter now attached to ttyUSB0 [ 735.599751][ T5937] usb 4-1: USB disconnect, device number 127 [ 735.654964][ T5932] rc_core: IR keymap rc-hauppauge not found [ 735.661688][ T5932] Registered IR keymap rc-empty [ 735.668412][ T5932] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 735.680384][T12225] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1811'. [ 735.691804][T12225] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1811'. [ 735.708581][ T5932] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 735.717579][ T5937] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 735.735075][ T5937] cp210x 4-1:0.66: device disconnected [ 735.756030][ T5932] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 735.790170][ T5932] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input178 [ 735.808205][ T5932] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 735.837053][ T5932] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 735.858112][ T5932] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 735.879488][ T5932] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 735.900906][ T5932] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 735.922310][ T5932] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 735.943644][ T5932] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 735.965082][ T5932] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 735.989219][ T5932] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 735.994267][T12228] FAULT_INJECTION: forcing a failure. [ 735.994267][T12228] name failslab, interval 1, probability 0, space 0, times 0 [ 736.008356][ T5932] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 736.017017][T12228] CPU: 0 UID: 0 PID: 12228 Comm: syz.2.1812 Tainted: G L syzkaller #0 PREEMPT(full) [ 736.017120][T12228] Tainted: [L]=SOFTLOCKUP [ 736.017142][T12228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 736.017174][T12228] Call Trace: [ 736.017203][T12228] [ 736.017226][T12228] dump_stack_lvl+0xe8/0x150 [ 736.017332][T12228] should_fail_ex+0x412/0x560 [ 736.017416][T12228] should_failslab+0xa8/0x100 [ 736.017481][T12228] __kmalloc_cache_noprof+0x88/0x660 [ 736.017535][T12228] ? allocate_cgrp_cset_links+0xc9/0x320 [ 736.017597][T12228] ? __kmalloc_cache_noprof+0x15b/0x660 [ 736.017670][T12228] allocate_cgrp_cset_links+0xc9/0x320 [ 736.017755][T12228] find_css_set+0xb63/0x1b40 [ 736.017865][T12228] ? __pfx_find_css_set+0x10/0x10 [ 736.017955][T12228] ? lockdep_hardirqs_on+0x7a/0x110 [ 736.018050][T12228] cgroup_migrate_prepare_dst+0x130/0x700 [ 736.018087][T12228] cgroup_attach_task+0x47c/0x840 [ 736.018135][T12228] ? __pfx_cgroup_attach_task+0x10/0x10 [ 736.018236][T12228] ? iput+0xb25/0xe80 [ 736.018342][T12228] ? cgroup_attach_permissions+0x4f3/0x9e0 [ 736.018432][T12228] __cgroup_procs_write+0x2a9/0x300 [ 736.018529][T12228] cgroup_procs_write+0x27/0x50 [ 736.018590][T12228] ? __pfx_cgroup_procs_write+0x10/0x10 [ 736.018644][T12228] cgroup_file_write+0x331/0x8f0 [ 736.018719][T12228] ? __pfx_cgroup_file_write+0x10/0x10 [ 736.018807][T12228] ? __pfx_cgroup_file_write+0x10/0x10 [ 736.018898][T12228] kernfs_fop_write_iter+0x3af/0x540 [ 736.018976][T12228] vfs_write+0x61d/0xb90 [ 736.019058][T12228] ? __pfx_vfs_write+0x10/0x10 [ 736.019141][T12228] ? __fget_files+0x2a/0x420 [ 736.019235][T12228] ksys_write+0x150/0x270 [ 736.019291][T12228] ? __pfx_ksys_write+0x10/0x10 [ 736.019371][T12228] do_syscall_64+0x14d/0xf80 [ 736.019446][T12228] ? trace_irq_disable+0x3b/0x140 [ 736.019509][T12228] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.019569][T12228] ? clear_bhb_loop+0x40/0x90 [ 736.019663][T12228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.019733][T12228] RIP: 0033:0x7f64ce99c799 [ 736.019787][T12228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 736.019838][T12228] RSP: 002b:00007f64ccbee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 736.019901][T12228] RAX: ffffffffffffffda RBX: 00007f64cec15fa0 RCX: 00007f64ce99c799 [ 736.019944][T12228] RDX: 0000000000000012 RSI: 0000200000000080 RDI: 0000000000000004 [ 736.019977][T12228] RBP: 00007f64ccbee090 R08: 0000000000000000 R09: 0000000000000000 [ 736.020052][T12228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 736.020088][T12228] R13: 00007f64cec16038 R14: 00007f64cec15fa0 R15: 00007ffcfbc40aa8 [ 736.020185][T12228] [ 736.335782][ T5932] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 736.363634][ T5932] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 736.387487][ T5932] usb 2-1: USB disconnect, device number 21 [ 736.497636][T12235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1814'. [ 736.542302][ T5937] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 736.645453][T12239] FAULT_INJECTION: forcing a failure. [ 736.645453][T12239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 736.658747][T12239] CPU: 1 UID: 0 PID: 12239 Comm: syz.3.1817 Tainted: G L syzkaller #0 PREEMPT(full) [ 736.658806][T12239] Tainted: [L]=SOFTLOCKUP [ 736.658812][T12239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 736.658822][T12239] Call Trace: [ 736.658830][T12239] [ 736.658838][T12239] dump_stack_lvl+0xe8/0x150 [ 736.658866][T12239] should_fail_ex+0x412/0x560 [ 736.658890][T12239] _copy_from_user+0x2d/0xb0 [ 736.658914][T12239] kstrtouint_from_user+0xd6/0x180 [ 736.658934][T12239] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 736.658964][T12239] proc_fail_nth_write+0x8e/0x210 [ 736.658985][T12239] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 736.659010][T12239] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 736.659032][T12239] vfs_write+0x29a/0xb90 [ 736.659053][T12239] ? __pfx_vfs_write+0x10/0x10 [ 736.659069][T12239] ? __fget_files+0x2a/0x420 [ 736.659094][T12239] ? __fget_files+0x3a0/0x420 [ 736.659113][T12239] ? __fget_files+0x2a/0x420 [ 736.659140][T12239] ksys_write+0x150/0x270 [ 736.659157][T12239] ? __pfx_ksys_write+0x10/0x10 [ 736.659180][T12239] do_syscall_64+0x14d/0xf80 [ 736.659202][T12239] ? trace_irq_disable+0x3b/0x140 [ 736.659219][T12239] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.659233][T12239] ? clear_bhb_loop+0x40/0x90 [ 736.659252][T12239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.659268][T12239] RIP: 0033:0x7f003195cfce [ 736.659284][T12239] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 736.659297][T12239] RSP: 002b:00007f0032885fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 736.659313][T12239] RAX: ffffffffffffffda RBX: 00007f00328866c0 RCX: 00007f003195cfce [ 736.659324][T12239] RDX: 0000000000000001 RSI: 00007f00328860a0 RDI: 0000000000000003 [ 736.659334][T12239] RBP: 00007f0032886090 R08: 0000000000000000 R09: 0000000000000000 [ 736.659343][T12239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 736.659352][T12239] R13: 00007f0031c16038 R14: 00007f0031c15fa0 R15: 00007fff9296e9b8 [ 736.659375][T12239] [ 736.866677][ T5937] usb 3-1: device descriptor read/64, error -71 [ 736.915782][T12241] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 736.939272][ T5932] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 736.947134][ T1223] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 737.108977][ T5932] usb 2-1: Using ep0 maxpacket: 32 [ 737.117833][ T5932] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 737.128943][ T1223] usb 1-1: unable to get BOS descriptor or descriptor too short [ 737.130452][ T5937] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 737.139352][ T1223] usb 1-1: not running at top speed; connect to a high speed hub [ 737.153418][ T5932] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=bf.99 [ 737.162837][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 737.170998][ T5932] usb 2-1: Product: syz [ 737.175434][ T5932] usb 2-1: SerialNumber: syz [ 737.180586][ T1223] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 737.183885][ T10] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 737.196990][ T1223] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 737.208361][ T5932] usb 2-1: config 0 descriptor?? [ 737.222690][ T1223] usb 1-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 737.233099][ T1223] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.242225][ T1223] usb 1-1: Product: syz [ 737.246481][ T1223] usb 1-1: Manufacturer: syz [ 737.251240][ T1223] usb 1-1: SerialNumber: syz [ 737.280441][ T5937] usb 3-1: device descriptor read/64, error -71 [ 737.358364][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 737.368814][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 737.381261][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 737.392383][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 737.402466][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 737.415444][ T5937] usb usb3-port1: attempt power cycle [ 737.424259][ T10] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 737.433683][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 737.441862][ T10] usb 4-1: Product: syz [ 737.446071][ T10] usb 4-1: Manufacturer: syz [ 737.450728][ T10] usb 4-1: SerialNumber: syz [ 737.458907][ T10] usb 4-1: config 0 descriptor?? [ 737.487486][ T1223] usb 2-1: USB disconnect, device number 22 [ 737.681453][ T10] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 737.688657][ T10] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 737.704256][T12237] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1816'. [ 737.717047][T10748] usb 1-1: USB disconnect, device number 12 [ 737.783618][ T5937] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 737.815691][ T5937] usb 3-1: device descriptor read/8, error -71 [ 737.896175][ T10] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 737.904772][ T10] radio-si470x 4-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 737.914246][ T10] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 738.072569][ T5937] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 738.097210][ T5937] usb 3-1: device descriptor read/8, error -71 [ 738.142055][ T10] usb 4-1: USB disconnect, device number 2 [ 738.221167][ T5937] usb usb3-port1: unable to enumerate USB device [ 738.361980][ T1223] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 738.530791][ T1223] usb 2-1: Using ep0 maxpacket: 16 [ 738.539257][ T1223] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 738.549532][ T1223] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 738.560572][ T1223] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 738.577064][ T1223] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 738.586912][ T1223] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 738.601129][ T1223] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 738.610306][ T1223] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 738.616462][ T10] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 738.618507][ T1223] usb 2-1: Manufacturer: syz [ 738.633730][ T1223] usb 2-1: config 0 descriptor?? [ 738.777561][ T10] usb 1-1: device descriptor read/64, error -71 [ 739.000152][T12257] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1822'. [ 739.010648][T12257] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1822'. [ 739.044137][ T10] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 739.182853][ T10] usb 1-1: device descriptor read/64, error -71 [ 739.279056][ T5937] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 739.300739][ T10] usb usb1-port1: attempt power cycle [ 739.451984][ T5937] usb 4-1: config 0 has an invalid interface number: 66 but max is 0 [ 739.460187][ T5937] usb 4-1: config 0 has no interface number 0 [ 739.466682][ T5937] usb 4-1: too many endpoints for config 0 interface 66 altsetting 71: 66, using maximum allowed: 30 [ 739.483933][ T5937] usb 4-1: config 0 interface 66 altsetting 71 has 0 endpoint descriptors, different from the interface descriptor's value: 66 [ 739.509134][ T5937] usb 4-1: config 0 interface 66 has no altsetting 0 [ 739.518117][ T5937] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 739.528108][ T5937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.541328][ T5937] usb 4-1: config 0 descriptor?? [ 739.551343][ T5937] cp210x 4-1:0.66: cp210x converter detected [ 739.675409][ T10] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 739.696710][ T10] usb 1-1: device descriptor read/8, error -71 [ 739.759061][T12263] netlink: 'syz.2.1825': attribute type 21 has an invalid length. [ 739.767553][T12263] netlink: 'syz.2.1825': attribute type 22 has an invalid length. [ 739.984668][ T10] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 740.006930][ T10] usb 1-1: device descriptor read/8, error -71 [ 740.052250][ T5937] cp210x 4-1:0.66: failed to get vendor val 0x000e size 3: -71 [ 740.068945][ T5937] usb 4-1: cp210x converter now attached to ttyUSB0 [ 740.081524][ T5937] usb 4-1: USB disconnect, device number 3 [ 740.108367][ T5937] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 740.118233][ T5937] cp210x 4-1:0.66: device disconnected [ 740.125631][ T10] usb usb1-port1: unable to enumerate USB device [ 740.145091][ T5932] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 740.305453][ T5932] usb 3-1: Using ep0 maxpacket: 16 [ 740.312618][ T5932] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 740.322505][ T5932] usb 3-1: config 0 has no interface number 0 [ 740.329563][ T5932] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 740.342693][ T5932] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 740.351923][ T5932] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 740.360173][ T5932] usb 3-1: Product: syz [ 740.364436][ T5932] usb 3-1: SerialNumber: syz [ 740.372208][ T5932] usb 3-1: config 0 descriptor?? [ 740.383690][ T5932] cm109 3-1:0.8: invalid payload size 24, expected 4 [ 740.393090][ T5932] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input179 [ 740.812546][ C1] cm109 3-1:0.8: cm109_urb_irq_callback: urb status -71 [ 740.819959][ C1] cm109_urb_ctl_callback: 20 callbacks suppressed [ 740.819989][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 740.833850][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 740.841332][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 740.849035][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 740.857527][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 740.865172][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 740.873200][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 740.881046][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 740.888302][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 740.895560][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 740.902936][ T24] usb 3-1: USB disconnect, device number 28 [ 740.909020][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 740.932202][ T24] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 741.004937][T12272] netlink: 'syz.3.1828': attribute type 1 has an invalid length. [ 741.013000][T12272] netlink: 'syz.3.1828': attribute type 1 has an invalid length. [ 741.020861][T12272] netlink: 14946 bytes leftover after parsing attributes in process `syz.3.1828'. [ 741.384499][T12279] openvswitch: netlink: IP tunnel dst address not specified [ 741.440448][ T1223] rc_core: IR keymap rc-hauppauge not found [ 741.458137][ T1223] Registered IR keymap rc-empty [ 741.463345][ T1223] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 741.489148][T12284] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 741.493880][ T1223] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 741.495729][T12284] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 741.514277][T12284] vhci_hcd vhci_hcd.0: Device attached [ 741.525410][ T1223] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 741.554747][T12284] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(10) [ 741.561430][T12284] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 741.574036][ T1223] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input180 [ 741.588938][T12284] vhci_hcd vhci_hcd.0: Device attached [ 741.596879][ T1223] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 741.631927][ T1223] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 741.645043][T12284] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(12) [ 741.651733][T12284] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 741.663893][ T1223] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 741.664023][T12284] vhci_hcd vhci_hcd.0: Device attached [ 741.676786][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 741.699807][T12284] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(16) [ 741.706495][T12284] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 741.706736][ T1223] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 741.727285][ T5937] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 741.734847][T12284] vhci_hcd vhci_hcd.0: Device attached [ 741.752829][T12287] vhci_hcd: connection closed [ 741.753598][T12290] vhci_hcd: connection closed [ 741.772336][T12285] vhci_hcd: connection closed [ 741.777150][ T96] vhci_hcd vhci_hcd.1: stop threads [ 741.781325][ T1223] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 741.787285][T12297] vhci_hcd: connection closed [ 741.794914][ T96] vhci_hcd vhci_hcd.1: release socket [ 741.805308][ T5937] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 741.819071][ T96] vhci_hcd vhci_hcd.1: disconnect device [ 741.825061][T12286] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 741.831242][ T1223] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 741.840388][ T96] vhci_hcd vhci_hcd.1: stop threads [ 741.846873][ T96] vhci_hcd vhci_hcd.1: release socket [ 741.855597][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 741.863736][ T10] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 741.872672][ T96] vhci_hcd vhci_hcd.1: disconnect device [ 741.875859][ T1223] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 741.887670][ T96] vhci_hcd vhci_hcd.1: stop threads [ 741.893481][T12301] FAULT_INJECTION: forcing a failure. [ 741.893481][T12301] name failslab, interval 1, probability 0, space 0, times 0 [ 741.906814][ T10] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 741.912331][ T1223] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 741.916597][ T96] vhci_hcd vhci_hcd.1: release socket [ 741.927953][ T10] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 741.938365][T12301] CPU: 0 UID: 0 PID: 12301 Comm: syz.0.1834 Tainted: G L syzkaller #0 PREEMPT(full) [ 741.938394][T12301] Tainted: [L]=SOFTLOCKUP [ 741.938401][T12301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 741.938412][T12301] Call Trace: [ 741.938420][T12301] [ 741.938428][T12301] dump_stack_lvl+0xe8/0x150 [ 741.938462][T12301] should_fail_ex+0x412/0x560 [ 741.938490][T12301] should_failslab+0xa8/0x100 [ 741.938512][T12301] __kvmalloc_node_noprof+0x178/0x8a0 [ 741.938536][T12301] ? __kvm_mmu_topup_memory_cache+0x463/0x610 [ 741.938582][T12301] __kvm_mmu_topup_memory_cache+0x463/0x610 [ 741.938618][T12301] ? kvm_msr_allowed+0x9a/0x490 [ 741.938646][T12301] mmu_topup_memory_caches+0x21/0x170 [ 741.938668][T12301] kvm_mmu_load+0x9d/0x22d0 [ 741.938687][T12301] ? kvm_msr_allowed+0x9a/0x490 [ 741.938709][T12301] ? kvm_msr_allowed+0x9a/0x490 [ 741.938731][T12301] ? kvm_msr_allowed+0x3f4/0x490 [ 741.938753][T12301] ? kvm_msr_allowed+0x9a/0x490 [ 741.938778][T12301] ? kvm_apic_has_interrupt+0x73c/0x770 [ 741.938804][T12301] ? vmx_recalc_intercepts+0xec4/0x1b10 [ 741.938838][T12301] vcpu_run+0x5c84/0x7860 [ 741.938933][T12301] ? __pfx_vcpu_run+0x10/0x10 [ 741.938960][T12301] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 741.938988][T12301] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 741.939018][T12301] ? fpu_swap_kvm_fpstate+0xc1/0x4f0 [ 741.939044][T12301] ? rcu_is_watching+0x15/0xb0 [ 741.939070][T12301] kvm_arch_vcpu_ioctl_run+0x11e6/0x20d0 [ 741.939114][T12301] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 741.939141][T12301] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 741.939172][T12301] ? __lock_acquire+0x6b5/0x2cf0 [ 741.939202][T12301] ? __mutex_lock+0x320/0x1420 [ 741.939238][T12301] ? kasan_quarantine_put+0xbb/0x1f0 [ 741.939281][T12301] ? do_raw_write_lock+0x11d/0x260 [ 741.939331][T12301] kvm_vcpu_ioctl+0xa62/0xfd0 [ 741.939359][T12301] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 741.939380][T12301] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 741.939432][T12301] ? __fget_files+0x2a/0x420 [ 741.939465][T12301] ? __fget_files+0x2a/0x420 [ 741.939492][T12301] ? __fget_files+0x3a0/0x420 [ 741.939519][T12301] ? __fget_files+0x2a/0x420 [ 741.939551][T12301] ? bpf_lsm_file_ioctl+0x9/0x20 [ 741.939572][T12301] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 741.939595][T12301] __se_sys_ioctl+0xfc/0x170 [ 741.939620][T12301] do_syscall_64+0x14d/0xf80 [ 741.939648][T12301] ? trace_irq_disable+0x3b/0x140 [ 741.939672][T12301] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.939694][T12301] ? clear_bhb_loop+0x40/0x90 [ 741.939720][T12301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.939742][T12301] RIP: 0033:0x7f1a9d39c799 [ 741.939763][T12301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 741.939781][T12301] RSP: 002b:00007f1a9e31a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 741.939804][T12301] RAX: ffffffffffffffda RBX: 00007f1a9d616090 RCX: 00007f1a9d39c799 [ 741.939820][T12301] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 741.939833][T12301] RBP: 00007f1a9e31a090 R08: 0000000000000000 R09: 0000000000000000 [ 741.939846][T12301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 741.939859][T12301] R13: 00007f1a9d616128 R14: 00007f1a9d616090 R15: 00007ffd40e7fb68 [ 741.939893][T12301] [ 741.940729][ T96] vhci_hcd vhci_hcd.1: disconnect device [ 741.974424][ T1223] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 741.979501][ T10] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 742.032385][ T1223] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 742.036383][ T96] vhci_hcd vhci_hcd.1: stop threads [ 742.108427][ T1223] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 742.117026][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 742.148276][ T1223] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 742.151763][ T10] usb 4-1: config 0 has no interface number 0 [ 742.267083][ T1223] usb 2-1: USB disconnect, device number 23 [ 742.275696][ T96] vhci_hcd vhci_hcd.1: release socket [ 742.358363][ T96] vhci_hcd vhci_hcd.1: disconnect device [ 742.364236][ T10] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 742.377834][ T10] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 742.388144][ T10] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 742.406582][ T10] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 742.420048][ T10] usb 4-1: config 0 interface 125 has no altsetting 2 [ 742.430319][ T10] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 742.442592][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.489526][ T10] usb 4-1: Product: syz [ 742.495364][ T10] usb 4-1: Manufacturer: syz [ 742.509806][ T10] usb 4-1: SerialNumber: syz [ 742.527694][ T10] usb 4-1: config 0 descriptor?? [ 742.549301][ T10] usb 4-1: selecting invalid altsetting 2 [ 742.567891][ T10] uss720 4-1:0.125: probe with driver uss720 failed with error -22 [ 742.594933][T12306] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1836'. [ 742.625884][T12306] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1836'. [ 742.765630][T10748] usb 4-1: USB disconnect, device number 4 [ 742.924760][ T10] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 743.097821][ T10] usb 3-1: config 0 has an invalid interface number: 66 but max is 0 [ 743.106369][ T7930] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 743.114274][ T10] usb 3-1: config 0 has no interface number 0 [ 743.123987][ T10] usb 3-1: too many endpoints for config 0 interface 66 altsetting 71: 66, using maximum allowed: 30 [ 743.136443][ T10] usb 3-1: config 0 interface 66 altsetting 71 has 0 endpoint descriptors, different from the interface descriptor's value: 66 [ 743.150290][ T10] usb 3-1: config 0 interface 66 has no altsetting 0 [ 743.157133][ T10] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 743.166558][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.179646][ T10] usb 3-1: config 0 descriptor?? [ 743.187939][ T10] cp210x 3-1:0.66: cp210x converter detected [ 743.290376][ T7930] usb 2-1: Using ep0 maxpacket: 16 [ 743.298722][ T7930] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 743.315713][ T7930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 743.330285][ T7930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 743.340133][ T7930] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 743.350033][ T7930] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 743.368385][ T7930] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 743.378163][ T7930] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 743.386910][ T7930] usb 2-1: Manufacturer: syz [ 743.398885][ T7930] usb 2-1: config 0 descriptor?? [ 743.626841][T12338] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1847'. [ 743.681118][ T10] cp210x 3-1:0.66: failed to get vendor val 0x000e size 3: -71 [ 743.711633][ T10] usb 3-1: cp210x converter now attached to ttyUSB0 [ 743.722006][ T10] usb 3-1: USB disconnect, device number 29 [ 743.737578][ T7930] rc_core: IR keymap rc-hauppauge not found [ 743.747698][ T7930] Registered IR keymap rc-empty [ 743.756472][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 743.764416][T12345] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1847'. [ 743.778617][ T7930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 743.807957][ T10] cp210x 3-1:0.66: device disconnected [ 743.822617][ T7930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 743.857237][ T7930] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 743.885400][ T7930] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input182 [ 743.921790][ T7930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 743.940991][ T7930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 743.994533][ T7930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 744.016396][ T7930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 744.047864][ T7930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 744.068768][ T7930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 744.083706][T12352] kvm: pic: single mode not supported [ 744.083769][T12352] picdev_read: 8 callbacks suppressed [ 744.083781][T12352] kvm: pic: non byte read [ 744.101080][ T7930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 744.108628][T12352] kvm: pic: non byte read [ 744.113642][T12352] kvm: pic: non byte read [ 744.118271][T12352] kvm: pic: non byte read [ 744.123711][T12352] kvm: pic: single mode not supported [ 744.123732][T12352] kvm: pic: level sensitive irq not supported [ 744.129385][T12352] kvm: pic: non byte read [ 744.143421][ T7930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 744.152175][T12352] kvm: pic: non byte read [ 744.156902][T12352] kvm: pic: single mode not supported [ 744.156979][T12352] kvm: pic: non byte read [ 744.167607][T12352] kvm: pic: single mode not supported [ 744.167622][T12352] kvm: pic: level sensitive irq not supported [ 744.173119][T12352] kvm: pic: non byte read [ 744.175902][ T7930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 744.182793][T12352] kvm: pic: non byte read [ 744.196831][ T7930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 744.220481][ T7930] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 744.230040][ T7930] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 744.239517][ T1223] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 744.248088][ T7930] usb 2-1: USB disconnect, device number 24 [ 744.407484][T12358] FAULT_INJECTION: forcing a failure. [ 744.407484][T12358] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 744.407530][T12358] CPU: 1 UID: 0 PID: 12358 Comm: syz.0.1851 Tainted: G L syzkaller #0 PREEMPT(full) [ 744.407609][T12358] Tainted: [L]=SOFTLOCKUP [ 744.407641][T12358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 744.407688][T12358] Call Trace: [ 744.407722][T12358] [ 744.407761][T12358] dump_stack_lvl+0xe8/0x150 [ 744.407851][T12358] should_fail_ex+0x412/0x560 [ 744.407936][T12358] _copy_to_user+0x31/0xb0 [ 744.408074][T12358] simple_read_from_buffer+0xe1/0x170 [ 744.408162][T12358] proc_fail_nth_read+0x1bb/0x230 [ 744.408249][T12358] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 744.408334][T12358] ? rw_verify_area+0x2a6/0x4d0 [ 744.408386][T12358] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 744.408467][T12358] vfs_read+0x20c/0xa70 [ 744.408523][T12358] ? fdget_pos+0x246/0x320 [ 744.408615][T12358] ? __pfx___mutex_lock+0x10/0x10 [ 744.408687][T12358] ? __pfx_vfs_read+0x10/0x10 [ 744.408748][T12358] ? __fget_files+0x2a/0x420 [ 744.408836][T12358] ? __fget_files+0x3a0/0x420 [ 744.408904][T12358] ? __fget_files+0x2a/0x420 [ 744.409019][T12358] ksys_read+0x150/0x270 [ 744.409101][T12358] ? __pfx_ksys_read+0x10/0x10 [ 744.409195][T12358] do_syscall_64+0x14d/0xf80 [ 744.409269][T12358] ? trace_irq_disable+0x3b/0x140 [ 744.409332][T12358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.409378][T12358] ? clear_bhb_loop+0x40/0x90 [ 744.409443][T12358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.409508][T12358] RIP: 0033:0x7f1a9d35cfce [ 744.409568][T12358] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 744.409614][T12358] RSP: 002b:00007f1a9e33afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 744.409666][T12358] RAX: ffffffffffffffda RBX: 00007f1a9e33b6c0 RCX: 00007f1a9d35cfce [ 744.409694][T12358] RDX: 000000000000000f RSI: 00007f1a9e33b0a0 RDI: 0000000000000004 [ 744.409726][T12358] RBP: 00007f1a9e33b090 R08: 0000000000000000 R09: 0000000000000000 [ 744.409757][T12358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 744.409797][T12358] R13: 00007f1a9d616038 R14: 00007f1a9d615fa0 R15: 00007ffd40e7fb68 [ 744.409865][T12358] [ 744.421581][ T1223] usb 4-1: Using ep0 maxpacket: 16 [ 744.423863][ T1223] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 744.423899][ T1223] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 744.423924][ T1223] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 744.423968][ T1223] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 744.423994][ T1223] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.427039][ T1223] usb 4-1: config 0 descriptor?? [ 744.791085][T12362] wg0 speed is unknown, defaulting to 1000 [ 744.809412][ T7930] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 744.941181][ T1223] input: HID 05ac:8241 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:05AC:8241.0013/input/input183 [ 744.983587][ T7930] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 745.001624][ T7930] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 745.013202][ T7930] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 745.028671][ T7930] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 745.044302][ T7930] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 745.054902][ T7930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 745.063489][ T7930] usb 2-1: SerialNumber: syz [ 745.156395][ T1223] appleir 0003:05AC:8241.0013: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0 [ 745.180392][ T1223] usb 4-1: USB disconnect, device number 5 [ 745.314565][ T7930] usb 2-1: 0:2 : does not exist [ 745.333853][ T7930] usb 2-1: unit 5 not found! [ 745.423621][ T7930] usb 2-1: USB disconnect, device number 25 [ 745.530468][ T6168] udevd[6168]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 745.685026][T12368] fido_id[12368]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 745.840278][T12376] kAFS: unable to lookup cell '(,c' [ 746.017796][T12382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1860'. [ 746.079893][T12382] syzkaller1: entered promiscuous mode [ 746.094060][T12382] syzkaller1: entered allmulticast mode [ 746.101666][T12380] kvm: pic: single mode not supported [ 746.101757][T12380] kvm: pic: non byte read [ 746.117113][T12380] kvm: pic: single mode not supported [ 746.117136][T12380] kvm: pic: level sensitive irq not supported [ 746.445967][T12388] EXT4-fs (loop1): unable to read superblock [ 746.479006][T12388] netlink: 'syz.1.1862': attribute type 2 has an invalid length. [ 746.548924][T12388] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.1862'. [ 746.675992][ T1223] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 746.878591][ T1223] usb 3-1: Using ep0 maxpacket: 16 [ 746.883059][ T1223] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 746.895643][ T1223] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 746.906734][ T1223] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 746.916891][ T1223] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 746.932581][ T1223] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 746.949595][ T1223] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 746.959272][ T1223] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 746.967776][ T1223] usb 3-1: Manufacturer: syz [ 746.978190][ T1223] usb 3-1: config 0 descriptor?? [ 747.013825][T12399] binder: 12398:12399 ioctl c0306201 200000000180 returned -14 [ 747.084284][ T5932] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 747.104942][ T7930] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 747.202636][T12405] FAULT_INJECTION: forcing a failure. [ 747.202636][T12405] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 747.218758][T12405] CPU: 0 UID: 0 PID: 12405 Comm: syz.0.1870 Tainted: G L syzkaller #0 PREEMPT(full) [ 747.218790][T12405] Tainted: [L]=SOFTLOCKUP [ 747.218799][T12405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 747.218811][T12405] Call Trace: [ 747.218819][T12405] [ 747.218828][T12405] dump_stack_lvl+0xe8/0x150 [ 747.218865][T12405] should_fail_ex+0x412/0x560 [ 747.218896][T12405] _copy_to_user+0x31/0xb0 [ 747.218926][T12405] drm_ioctl+0x6da/0xb80 [ 747.218954][T12405] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 747.219070][T12405] ? __pfx_drm_ioctl+0x10/0x10 [ 747.219104][T12405] ? __fget_files+0x2a/0x420 [ 747.219134][T12405] ? bpf_lsm_file_ioctl+0x9/0x20 [ 747.219156][T12405] ? __pfx_drm_ioctl+0x10/0x10 [ 747.219178][T12405] __se_sys_ioctl+0xfc/0x170 [ 747.219204][T12405] do_syscall_64+0x14d/0xf80 [ 747.219233][T12405] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.219253][T12405] ? clear_bhb_loop+0x40/0x90 [ 747.219278][T12405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.219298][T12405] RIP: 0033:0x7f1a9d39c799 [ 747.219319][T12405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 747.219337][T12405] RSP: 002b:00007f1a9e33b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 747.219357][T12405] RAX: ffffffffffffffda RBX: 00007f1a9d615fa0 RCX: 00007f1a9d39c799 [ 747.219372][T12405] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 000000000000000f [ 747.219385][T12405] RBP: 00007f1a9e33b090 R08: 0000000000000000 R09: 0000000000000000 [ 747.219399][T12405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 747.219412][T12405] R13: 00007f1a9d616038 R14: 00007f1a9d615fa0 R15: 00007ffd40e7fb68 [ 747.219444][T12405] [ 747.245719][ T5932] usb 2-1: Using ep0 maxpacket: 32 [ 747.297293][ T7930] usb 4-1: not running at top speed; connect to a high speed hub [ 747.397876][ T5932] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 747.402198][ T5937] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 747.409983][ T5932] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 747.448877][ T5932] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 747.459047][ T5932] usb 2-1: config 1 has no interface number 0 [ 747.466663][ T5932] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 747.479596][ T5932] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 747.493124][ T1223] rc_core: IR keymap rc-hauppauge not found [ 747.510451][ T1223] Registered IR keymap rc-empty [ 747.516156][ T7930] usb 4-1: config 169 has an invalid interface number: 83 but max is 2 [ 747.517018][ T1223] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 747.527990][ T7930] usb 4-1: config 169 contains an unexpected descriptor of type 0x2, skipping [ 747.536674][ T5932] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 747.547328][ T7930] usb 4-1: config 169 contains an unexpected descriptor of type 0x2, skipping [ 747.553450][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.567792][ T1223] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 747.577205][ T7930] usb 4-1: config 169 has an invalid interface number: 3 but max is 2 [ 747.591242][ T1223] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 747.601222][ T7930] usb 4-1: config 169 has an invalid interface number: 166 but max is 2 [ 747.616623][ T5932] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 747.623861][ T1223] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input185 [ 747.632791][ T7930] usb 4-1: config 169 has an invalid interface number: 108 but max is 2 [ 747.650415][ T1223] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 747.662749][ T7930] usb 4-1: config 169 has an invalid interface number: 138 but max is 2 [ 747.676872][ T1223] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 747.683255][ T7930] usb 4-1: config 169 has 5 interfaces, different from the descriptor's value: 3 [ 747.695798][ T7930] usb 4-1: config 169 has no interface number 0 [ 747.702565][ T7930] usb 4-1: config 169 has no interface number 1 [ 747.708964][ T1223] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 747.710294][ T7930] usb 4-1: config 169 has no interface number 2 [ 747.723991][ T7930] usb 4-1: config 169 has no interface number 4 [ 747.731126][ T7930] usb 4-1: config 169 interface 83 altsetting 150 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 747.741649][ T1223] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 747.748572][ T7930] usb 4-1: config 169 interface 83 altsetting 150 endpoint 0x1 has invalid wMaxPacketSize 0 [ 747.760110][ T7930] usb 4-1: config 169 interface 83 altsetting 150 has a duplicate endpoint with address 0x7, skipping [ 747.772664][ T7930] usb 4-1: config 169 interface 3 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 747.773864][ T1223] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 747.784902][ T7930] usb 4-1: config 169 interface 3 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 747.798873][T12408] kvm: pic: single mode not supported [ 747.804025][T12408] kvm: pic: single mode not supported [ 747.809642][T12408] kvm: pic: level sensitive irq not supported [ 747.811978][ T7930] usb 4-1: config 169 interface 3 altsetting 2 endpoint 0x4 has an invalid bInterval 243, changing to 4 [ 747.832819][ T7930] usb 4-1: config 169 interface 3 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 747.839791][ T1223] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 747.844596][ T7930] usb 4-1: config 169 interface 3 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 747.851302][ T5932] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 747.869908][T12408] kvm: pic: level sensitive irq not supported [ 747.870617][ T7930] usb 4-1: config 169 interface 3 altsetting 2 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 747.881648][ T1223] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 747.897674][ T7930] usb 4-1: config 169 interface 3 altsetting 2 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 747.921407][ T7930] usb 4-1: config 169 interface 3 altsetting 2 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 747.933548][ T7930] usb 4-1: config 169 interface 3 altsetting 2 has 10 endpoint descriptors, different from the interface descriptor's value: 13 [ 747.935879][ T1223] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 747.951289][ T7930] usb 4-1: too many endpoints for config 169 interface 166 altsetting 75: 115, using maximum allowed: 30 [ 747.969098][ T7930] usb 4-1: config 169 interface 166 altsetting 75 has a duplicate endpoint with address 0xA, skipping [ 747.977966][ T1223] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 747.980981][ T7930] usb 4-1: config 169 interface 166 altsetting 75 has a duplicate endpoint with address 0x4, skipping [ 748.010448][ T1223] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 748.018568][ T7930] usb 4-1: config 169 interface 166 altsetting 75 has 3 endpoint descriptors, different from the interface descriptor's value: 115 [ 748.035123][ T7930] usb 4-1: config 169 interface 108 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 748.046210][ T7930] usb 4-1: config 169 interface 108 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 748.057185][ T7930] usb 4-1: config 169 interface 108 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 748.068540][ T7930] usb 4-1: config 169 interface 108 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 748.083514][ T1223] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 748.089836][ T7930] usb 4-1: config 169 interface 108 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 748.109387][ T7930] usb 4-1: too many endpoints for config 169 interface 138 altsetting 52: 218, using maximum allowed: 30 [ 748.120947][ T7930] usb 4-1: config 169 interface 138 altsetting 52 has a duplicate endpoint with address 0x4, skipping [ 748.132871][ T1223] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 748.144111][ T7930] usb 4-1: config 169 interface 138 altsetting 52 has 1 endpoint descriptor, different from the interface descriptor's value: 218 [ 748.160645][ T7930] usb 4-1: config 169 interface 83 has no altsetting 0 [ 748.179089][ T1223] usb 3-1: USB disconnect, device number 30 [ 748.180574][ T7930] usb 4-1: config 169 interface 3 has no altsetting 0 [ 748.216806][ T7930] usb 4-1: config 169 interface 166 has no altsetting 0 [ 748.232284][ T7930] usb 4-1: config 169 interface 138 has no altsetting 0 [ 748.251776][ T7930] usb 4-1: New USB device found, idVendor=12d1, idProduct=1404, bcdDevice= 0.00 [ 748.268074][ T7930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.280280][ T7930] usb 4-1: Product: Џ [ 748.291813][ T7930] usb 4-1: Manufacturer: 迨ꮔ酨䰯졥䆝♣钘㽑혢ࠄꖁŗ忂弚墍 [ 748.310065][ T7930] usb 4-1: SerialNumber: 潫ᙫ铱㈴푲⺭曄駗骠냥ꥌ덄忛ꉾ斯䋂퇤턊懕䂿媥䌻灉晄糜ᇶ㉔േ뫷ᢱ쨖ॠ⳵陉冖筺褿롴ꟛ첢鋯ᆢ [ 748.352124][T12395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 748.362115][T12395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 748.451851][T12415] binder: 12414:12415 ioctl c0306201 2000000004c0 returned -14 [ 748.461990][T12415] binder: 12414:12415 ioctl c0306201 2000000001c0 returned -14 [ 748.473044][T12415] binder: 12414:12415 ioctl c0306201 200000000180 returned -14 [ 748.563321][ T7930] usb-storage 4-1:169.83: USB Mass Storage device detected [ 748.614707][ T1223] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 748.649012][ T7930] usb-storage 4-1:169.3: USB Mass Storage device detected [ 748.742299][ T7930] usb-storage 4-1:169.166: USB Mass Storage device detected [ 748.786168][ T1223] usb 3-1: Using ep0 maxpacket: 16 [ 748.798556][ T1223] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 748.826920][ T1223] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 748.844313][ T7930] usb-storage 4-1:169.108: USB Mass Storage device detected [ 748.847481][ T1223] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 748.877814][ T1223] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.886869][ T1223] usb 3-1: Product: syz [ 748.891243][ T1223] usb 3-1: Manufacturer: syz [ 748.896529][ T1223] usb 3-1: SerialNumber: syz [ 748.913664][ T1223] usb 3-1: config 0 descriptor?? [ 748.927710][ T7930] usb-storage 4-1:169.138: USB Mass Storage device detected [ 748.950617][ T5914] snd_usb_pod 2-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 748.967552][ T1223] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 748.987373][ T1223] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 749.080773][ T7930] usb 4-1: USB disconnect, device number 6 [ 749.637690][ T1223] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 749.645431][ T1223] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 749.702011][ T7930] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 749.863630][ T7930] usb 4-1: device descriptor read/64, error -71 [ 750.132988][ T7930] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 750.273015][ T7930] usb 4-1: device descriptor read/64, error -71 [ 750.391765][ T7930] usb usb4-port1: attempt power cycle [ 750.768636][ T7930] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 750.790825][ T7930] usb 4-1: device descriptor read/8, error -71 [ 750.797913][ T1223] em28xx 3-1:0.0: AC97 vendor ID = 0x00fc00fe [ 751.049024][ T7930] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 751.065008][ T1223] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 751.076228][ T1223] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 751.083373][ T7930] usb 4-1: device descriptor read/8, error -71 [ 751.084927][ T1223] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 751.096528][ T1223] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 751.105731][ T1223] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 751.114432][ T1223] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 751.125342][ T1223] usb 3-1: USB disconnect, device number 31 [ 751.187076][T10748] usb 2-1: USB disconnect, device number 26 [ 751.202670][ T7930] usb usb4-port1: unable to enumerate USB device [ 751.211283][T10748] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 751.676917][T12441] netlink: 'syz.2.1878': attribute type 21 has an invalid length. [ 751.685032][T12441] netlink: 'syz.2.1878': attribute type 1 has an invalid length. [ 751.695109][ T1223] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 751.856734][ T1223] usb 2-1: device descriptor read/64, error -71 [ 752.039815][ T5932] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 752.082963][T10748] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 752.115500][ T1223] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 752.201362][ T5932] usb 3-1: Using ep0 maxpacket: 16 [ 752.208371][ T5932] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 752.219045][ T5932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 752.230188][ T5932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 752.240005][ T5932] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 752.249796][ T5932] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 752.260624][T10748] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 752.263742][ T1223] usb 2-1: device descriptor read/64, error -71 [ 752.280660][T10748] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 752.290554][ T5932] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 752.293097][T10748] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0003, bcdDevice= 0.00 [ 752.300227][ T5932] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 752.310725][T10748] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 752.317503][ T5932] usb 3-1: Manufacturer: syz [ 752.328562][T10748] usb 1-1: SerialNumber: syz [ 752.336954][ T5932] usb 3-1: config 0 descriptor?? [ 752.352912][T10748] usb 1-1: 0:2 : does not exist [ 752.406766][ T1223] usb usb2-port1: attempt power cycle [ 752.634393][ T5932] rc_core: IR keymap rc-hauppauge not found [ 752.641777][ T5932] Registered IR keymap rc-empty [ 752.647227][ T5932] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 752.675453][ T5932] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 752.697432][T10748] usb 1-1: USB disconnect, device number 17 [ 752.724580][ T5932] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 752.756837][ T5932] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input186 [ 752.774006][ T1223] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 752.793040][ T5932] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 752.806046][ T1223] usb 2-1: device descriptor read/8, error -71 [ 752.815980][ T5932] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 752.836921][ T5932] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 752.859279][ T5932] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 752.880116][ T5932] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 752.901781][ T5932] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 752.923794][ T5932] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 752.944602][ T5932] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 752.966219][ T5932] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 752.987797][ T5932] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 753.012232][ T5932] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 753.021579][ T5932] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 753.034939][ T5932] usb 3-1: USB disconnect, device number 32 [ 753.063124][ T1223] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 753.088812][ T1223] usb 2-1: device descriptor read/8, error -71 [ 753.116934][ T5914] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 753.227753][ T1223] usb usb2-port1: unable to enumerate USB device [ 753.266416][T12453] kvm: MWAIT instruction emulated as NOP! [ 753.282113][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 753.295726][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 753.305672][ T5914] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 753.315338][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.326605][ T5914] usb 4-1: config 0 descriptor?? [ 753.474284][T12457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1884'. [ 753.655434][T10748] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 753.771168][ T5914] steelseries 0003:1038:12B6.0014: unknown main item tag 0x0 [ 753.779028][ T5914] steelseries 0003:1038:12B6.0014: unknown main item tag 0x0 [ 753.786724][ T5914] steelseries 0003:1038:12B6.0014: item fetching failed at offset 5/7 [ 753.796105][ T5914] steelseries 0003:1038:12B6.0014: probe with driver steelseries failed with error -22 [ 753.817282][T10748] usb 3-1: Using ep0 maxpacket: 8 [ 753.824309][T10748] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 753.835094][T10748] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 753.845769][T10748] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 753.855796][T10748] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 753.869591][T10748] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 753.878835][T10748] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.992133][ T5914] usb 4-1: USB disconnect, device number 11 [ 754.108592][T10748] usb 3-1: GET_CAPABILITIES returned 0 [ 754.114254][T10748] usbtmc 3-1:16.0: can't read capabilities [ 754.326773][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 754.336241][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 754.345343][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 754.354437][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 754.363649][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 754.372768][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 754.383719][T12460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 754.383974][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 754.401287][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 754.403044][T12460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 754.431469][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 754.443000][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 754.452354][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 754.461591][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 754.470685][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 754.481347][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 754.490513][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 754.499639][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 754.527061][ T5932] usb 3-1: USB disconnect, device number 33 [ 754.756441][T12472] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 754.769781][T12472] netlink: 'syz.1.1890': attribute type 29 has an invalid length. [ 754.779222][T12472] netlink: 'syz.1.1890': attribute type 29 has an invalid length. [ 754.796517][T12472] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1890'. [ 754.883086][ T1223] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 755.003808][ T5932] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 755.081150][ T1223] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 755.102051][ T1223] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 755.121662][ T1223] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 755.136449][ T1223] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.149655][ T1223] usb 4-1: config 0 descriptor?? [ 755.195462][ T5932] usb 3-1: Using ep0 maxpacket: 32 [ 755.203609][ T5932] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 755.214549][ T5932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.231316][ T5932] usb 3-1: config 0 descriptor?? [ 755.252757][ T5932] gspca_main: sunplus-2.14.0 probing 041e:400b [ 755.464250][T12470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1889'. [ 755.810560][T12490] kvm: pic: single mode not supported [ 755.810649][T12490] picdev_read: 17 callbacks suppressed [ 755.810681][T12490] kvm: pic: non byte read [ 755.827729][T12490] kvm: pic: non byte read [ 755.834051][T12490] kvm: pic: non byte read [ 755.840123][T12490] kvm: pic: non byte read [ 755.845334][T12490] kvm: pic: single mode not supported [ 755.845367][T12490] kvm: pic: level sensitive irq not supported [ 755.852594][T12490] kvm: pic: non byte read [ 755.867168][T12490] kvm: pic: non byte read [ 755.875275][T12493] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1895'. [ 755.877824][T12490] kvm: pic: non byte read [ 756.045432][ T1223] hid-led 0003:27B8:01ED.0015: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.3-1/input0 [ 756.082141][ T1223] hid-led 0003:27B8:01ED.0015: ThingM blink(1) v1 initialized [ 756.105122][T12498] sd 0:0:1:0: PR command failed: 1026 [ 756.114947][T12498] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 756.122234][T12498] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 756.129595][T12470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 756.160449][T12470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 756.213389][ T5932] gspca_sunplus: reg_w_riv err -71 [ 756.221009][ T5932] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 756.229537][ T7930] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 756.270134][T10748] usb 4-1: USB disconnect, device number 12 [ 756.276817][ T5932] usb 3-1: USB disconnect, device number 34 [ 756.335485][T12507] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1899'. [ 756.351865][T12507] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1899'. [ 756.390582][ T7930] usb 1-1: Using ep0 maxpacket: 32 [ 756.403754][ T7930] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 756.416495][ T7930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.435209][ T7930] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 756.724323][ T5932] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 756.747576][T12516] : renamed from wg2 (while UP) [ 756.789012][ T5849] Bluetooth: hci3: command 0x0405 tx timeout [ 756.865279][ T7930] gspca_nw80x: reg_r err -71 [ 756.881316][ T7930] nw80x 1-1:3.0: probe with driver nw80x failed with error -71 [ 756.899523][ T5932] usb 3-1: config 0 has an invalid interface number: 66 but max is 0 [ 756.908178][ T5932] usb 3-1: config 0 has no interface number 0 [ 756.916921][ T7930] usb 1-1: USB disconnect, device number 18 [ 756.923416][ T5932] usb 3-1: too many endpoints for config 0 interface 66 altsetting 71: 66, using maximum allowed: 30 [ 756.943172][ T5932] usb 3-1: config 0 interface 66 altsetting 71 has 0 endpoint descriptors, different from the interface descriptor's value: 66 [ 756.968790][ T5932] usb 3-1: config 0 interface 66 has no altsetting 0 [ 756.978045][ T5932] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 756.996631][ T5932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.024077][ T5932] usb 3-1: config 0 descriptor?? [ 757.039668][ T5932] cp210x 3-1:0.66: cp210x converter detected [ 757.307447][ T1223] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 757.465007][ T30] audit: type=1326 audit(1774945071.060:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12525 comm="syz.3.1906" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f003199c799 code=0x0 [ 757.487712][ T30] audit: type=1326 audit(1774945071.060:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12525 comm="syz.3.1906" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f003199c799 code=0x0 [ 757.513172][ T5932] cp210x 3-1:0.66: failed to get vendor val 0x000e size 3: -71 [ 757.523714][ T1223] usb 2-1: unable to get BOS descriptor or descriptor too short [ 757.546304][ T1223] usb 2-1: config 254 has an invalid interface association descriptor of length 2, skipping [ 757.572724][ T1223] usb 2-1: config 254 has 0 interfaces, different from the descriptor's value: 1 [ 757.588702][ T5932] usb 3-1: cp210x converter now attached to ttyUSB0 [ 757.615483][ T1223] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice= 1.2e [ 757.631839][ T5932] usb 3-1: USB disconnect, device number 35 [ 757.642522][ T1223] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.667587][ T5932] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 757.676085][ T1223] usb 2-1: Product: syz [ 757.680385][ T1223] usb 2-1: Manufacturer: syz [ 757.686190][ T5932] cp210x 3-1:0.66: device disconnected [ 757.695963][ T1223] usb 2-1: SerialNumber: syz [ 757.936503][ T1223] usb 2-1: USB disconnect, device number 31 [ 758.119881][T12541] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1910'. [ 758.275678][ T5932] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 758.437869][ T5932] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 758.448018][ T7930] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 758.456372][ T5932] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 758.465912][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.476368][ T5932] usb 1-1: config 0 descriptor?? [ 758.486724][ T5932] pwc: Askey VC010 type 2 USB webcam detected. [ 758.618993][ T7930] usb 3-1: Using ep0 maxpacket: 32 [ 758.625960][ T7930] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 758.635275][ T7930] usb 3-1: config 0 has no interface number 0 [ 758.641636][T10748] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 758.649319][ T7930] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 758.662517][ T7930] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 758.671674][ T7930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.679769][ T7930] usb 3-1: Product: syz [ 758.684799][ T7930] usb 3-1: Manufacturer: syz [ 758.689503][ T7930] usb 3-1: SerialNumber: syz [ 758.698628][ T7930] usb 3-1: config 0 descriptor?? [ 758.711587][T12543] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 758.815621][T10748] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 758.826987][T10748] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 758.836292][T10748] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.845113][ T24] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 758.853272][T10748] usb 4-1: config 0 descriptor?? [ 758.866026][T10748] pwc: Askey VC010 type 2 USB webcam detected. [ 758.923168][ T5932] pwc: recv_control_msg error -32 req 02 val 2b00 [ 758.930898][ T5932] pwc: recv_control_msg error -32 req 02 val 2700 [ 758.939234][ T5932] pwc: recv_control_msg error -32 req 02 val 2c00 [ 758.947665][ T5932] pwc: recv_control_msg error -32 req 04 val 1000 [ 758.954802][T12543] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 758.955774][ T5932] pwc: recv_control_msg error -32 req 04 val 1300 [ 758.970007][ T5932] pwc: recv_control_msg error -32 req 04 val 1400 [ 758.977435][ T5932] pwc: recv_control_msg error -32 req 02 val 2000 [ 758.985234][ T5932] pwc: recv_control_msg error -32 req 02 val 2100 [ 758.993312][ T5932] pwc: recv_control_msg error -32 req 04 val 1500 [ 759.001238][ T5932] pwc: recv_control_msg error -32 req 02 val 2500 [ 759.009622][ T5932] pwc: recv_control_msg error -32 req 02 val 2400 [ 759.019679][ T24] usb 2-1: config 1 interface 0 has no altsetting 0 [ 759.030782][ T24] usb 2-1: string descriptor 0 read error: -22 [ 759.037385][ T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40 [ 759.046873][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.235478][ T5932] pwc: recv_control_msg error -71 req 02 val 2900 [ 759.248553][ T5932] pwc: recv_control_msg error -71 req 02 val 2800 [ 759.257059][ T5932] pwc: recv_control_msg error -71 req 04 val 1100 [ 759.264657][ T5932] pwc: recv_control_msg error -71 req 04 val 1200 [ 759.287308][ T5932] pwc: Registered as video103. [ 759.300850][ T5932] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input187 [ 759.305337][T10748] pwc: recv_control_msg error -32 req 02 val 2b00 [ 759.319626][T10748] pwc: recv_control_msg error -32 req 02 val 2700 [ 759.332245][ T5932] usb 1-1: USB disconnect, device number 19 [ 759.343931][T10748] pwc: recv_control_msg error -32 req 02 val 2c00 [ 759.359841][T10748] pwc: recv_control_msg error -32 req 04 val 1000 [ 759.367690][T10748] pwc: recv_control_msg error -32 req 04 val 1300 [ 759.385143][T10748] pwc: recv_control_msg error -32 req 04 val 1400 [ 759.400585][T10748] pwc: recv_control_msg error -32 req 02 val 2000 [ 759.415843][T10748] pwc: recv_control_msg error -32 req 02 val 2100 [ 759.496499][ T24] usbhid 2-1:1.0: can't add hid device: -32 [ 759.509464][ T24] usbhid 2-1:1.0: probe with driver usbhid failed with error -32 [ 759.527819][ T24] usb 2-1: USB disconnect, device number 32 [ 759.898479][T10748] pwc: recv_control_msg error -32 req 02 val 2400 [ 759.906756][T10748] pwc: recv_control_msg error -32 req 02 val 2600 [ 759.914829][T10748] pwc: recv_control_msg error -32 req 02 val 2900 [ 760.116740][ T24] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 760.289431][ T24] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 760.305468][ T24] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 760.320566][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.328672][ T24] usb 1-1: Product: syz [ 760.333170][ T24] usb 1-1: Manufacturer: syz [ 760.337853][ T24] usb 1-1: SerialNumber: syz [ 760.353910][ T24] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 760.412262][T12563] FAULT_INJECTION: forcing a failure. [ 760.412262][T12563] name failslab, interval 1, probability 0, space 0, times 0 [ 760.427398][T12563] CPU: 1 UID: 0 PID: 12563 Comm: syz.1.1917 Tainted: G L syzkaller #0 PREEMPT(full) [ 760.427433][T12563] Tainted: [L]=SOFTLOCKUP [ 760.427453][T12563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 760.427467][T12563] Call Trace: [ 760.427476][T12563] [ 760.427486][T12563] dump_stack_lvl+0xe8/0x150 [ 760.427524][T12563] should_fail_ex+0x412/0x560 [ 760.427558][T12563] should_failslab+0xa8/0x100 [ 760.427584][T12563] __kmalloc_noprof+0xe8/0x760 [ 760.427604][T12563] ? down_write_nested+0x174/0x210 [ 760.427630][T12563] ? security_sb_alloc+0x48/0x310 [ 760.427657][T12563] security_sb_alloc+0x48/0x310 [ 760.427679][T12563] alloc_super+0x294/0xab0 [ 760.427717][T12563] sget_fc+0x329/0xa40 [ 760.427750][T12563] ? __pfx_set_anon_super_fc+0x10/0x10 [ 760.427771][T12563] ? __pfx_shmem_fill_super+0x10/0x10 [ 760.427803][T12563] get_tree_nodev+0x2a/0x150 [ 760.427827][T12563] vfs_get_tree+0x92/0x2a0 [ 760.427852][T12563] do_new_mount+0x341/0xd30 [ 760.427878][T12563] ? apparmor_capable+0x126/0x170 [ 760.427910][T12563] ? __pfx_do_new_mount+0x10/0x10 [ 760.427937][T12563] ? ns_capable+0x89/0xe0 [ 760.427969][T12563] ? path_mount+0x690/0x10e0 [ 760.428002][T12563] ? user_path_at+0xd4/0x160 [ 760.428035][T12563] __se_sys_mount+0x31d/0x420 [ 760.428070][T12563] ? __pfx___se_sys_mount+0x10/0x10 [ 760.428104][T12563] ? __x64_sys_mount+0x20/0xc0 [ 760.428134][T12563] do_syscall_64+0x14d/0xf80 [ 760.428164][T12563] ? trace_irq_disable+0x3b/0x140 [ 760.428189][T12563] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.428211][T12563] ? clear_bhb_loop+0x40/0x90 [ 760.428238][T12563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.428260][T12563] RIP: 0033:0x7f3f5299c799 [ 760.428299][T12563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 760.428317][T12563] RSP: 002b:00007f3f50bf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 760.428340][T12563] RAX: ffffffffffffffda RBX: 00007f3f52c15fa0 RCX: 00007f3f5299c799 [ 760.428357][T12563] RDX: 0000200000000180 RSI: 00002000000000c0 RDI: 0000000000000000 [ 760.428371][T12563] RBP: 00007f3f50bf6090 R08: 00002000000001c0 R09: 0000000000000000 [ 760.428386][T12563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 760.428398][T12563] R13: 00007f3f52c16038 R14: 00007f3f52c15fa0 R15: 00007ffd5293be78 [ 760.428432][T12563] [ 760.491432][T10748] pwc: recv_control_msg error -71 req 04 val 1200 [ 760.701799][ T7930] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 760.719139][ T7930] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 760.730036][T10748] pwc: Registered as video103. [ 760.747310][T10748] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input188 [ 760.766541][ T7930] asix 3-1:0.188: probe with driver asix failed with error -71 [ 760.787282][ T7930] usb 3-1: USB disconnect, device number 36 [ 760.826867][T10748] usb 4-1: USB disconnect, device number 13 [ 760.873248][ T24] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 760.900236][ T24] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 760.929809][ T24] usb 1-1: media controller created [ 760.960619][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 761.008531][ T5914] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 761.191409][ T5914] usb 2-1: Using ep0 maxpacket: 16 [ 761.198931][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 761.210296][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 761.220269][ T5914] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 761.233220][ T5914] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 761.242503][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.255433][ T5914] usb 2-1: config 0 descriptor?? [ 761.342805][T12571] Device name not specified. [ 761.342805][T12571] [ 761.654326][T10748] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 761.693904][T12578] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 761.704047][T12565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 761.722259][T12565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 761.752712][ T5914] usbhid 2-1:0.0: can't add hid device: -71 [ 761.769913][ T5914] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 761.790647][ T5914] usb 2-1: USB disconnect, device number 33 [ 761.826239][T10748] usb 3-1: Using ep0 maxpacket: 8 [ 761.833733][T10748] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 761.843158][T10748] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 761.853175][T10748] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 761.863120][T10748] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 761.873125][T10748] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 761.888227][T10748] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 761.898081][T10748] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.133998][T10748] usb 3-1: usb_control_msg returned -32 [ 762.151813][T10748] usbtmc 3-1:16.0: can't read capabilities [ 762.469705][T12596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1927'. [ 762.551590][T12598] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 762.827142][ T7930] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 762.880802][T10748] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 762.940296][T12605] usbtmc 3-1:16.0: usb_clear_halt returned -32 [ 762.990587][ T7930] usb 4-1: Using ep0 maxpacket: 32 [ 762.997749][ T7930] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 763.006434][ T7930] usb 4-1: config 0 has no interface number 0 [ 763.013393][ T7930] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 763.025843][ T7930] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 763.035013][ T7930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.043303][ T7930] usb 4-1: Product: syz [ 763.047611][ T7930] usb 4-1: Manufacturer: syz [ 763.052560][ T7930] usb 4-1: SerialNumber: syz [ 763.058985][T10748] usb 2-1: not running at top speed; connect to a high speed hub [ 763.069127][ T7930] usb 4-1: config 0 descriptor?? [ 763.076936][T12601] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 763.084535][T10748] usb 2-1: config 169 has an invalid interface number: 83 but max is 2 [ 763.095549][T10748] usb 2-1: config 169 contains an unexpected descriptor of type 0x2, skipping [ 763.104643][T10748] usb 2-1: config 169 contains an unexpected descriptor of type 0x2, skipping [ 763.114802][T10748] usb 2-1: config 169 has an invalid interface number: 3 but max is 2 [ 763.123975][T10748] usb 2-1: config 169 has an invalid interface number: 166 but max is 2 [ 763.132606][T10748] usb 2-1: config 169 has an invalid interface number: 108 but max is 2 [ 763.141301][T10748] usb 2-1: config 169 has an invalid interface number: 138 but max is 2 [ 763.149764][T10748] usb 2-1: config 169 has 5 interfaces, different from the descriptor's value: 3 [ 763.159055][T10748] usb 2-1: config 169 has no interface number 0 [ 763.166308][T10748] usb 2-1: config 169 has no interface number 1 [ 763.172758][T10748] usb 2-1: config 169 has no interface number 2 [ 763.180705][T10748] usb 2-1: config 169 has no interface number 4 [ 763.190383][T10748] usb 2-1: config 169 interface 83 altsetting 150 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 763.202088][T10748] usb 2-1: config 169 interface 83 altsetting 150 endpoint 0x1 has invalid wMaxPacketSize 0 [ 763.212500][T10748] usb 2-1: config 169 interface 83 altsetting 150 has a duplicate endpoint with address 0x7, skipping [ 763.223899][T10748] usb 2-1: config 169 interface 3 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 763.236500][T10748] usb 2-1: config 169 interface 3 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 763.248602][T10748] usb 2-1: config 169 interface 3 altsetting 2 endpoint 0x4 has an invalid bInterval 243, changing to 4 [ 763.268944][ T10] usb 3-1: USB disconnect, device number 37 [ 763.277814][T10748] usb 2-1: config 169 interface 3 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 763.291180][T10748] usb 2-1: config 169 interface 3 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 763.303347][T10748] usb 2-1: config 169 interface 3 altsetting 2 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 763.325590][T12601] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 763.333333][T10748] usb 2-1: config 169 interface 3 altsetting 2 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 763.347184][T10748] usb 2-1: config 169 interface 3 altsetting 2 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 763.359187][T10748] usb 2-1: config 169 interface 3 altsetting 2 has 10 endpoint descriptors, different from the interface descriptor's value: 13 [ 763.372565][T10748] usb 2-1: too many endpoints for config 169 interface 166 altsetting 75: 115, using maximum allowed: 30 [ 763.384254][T10748] usb 2-1: config 169 interface 166 altsetting 75 has a duplicate endpoint with address 0xA, skipping [ 763.395495][T10748] usb 2-1: config 169 interface 166 altsetting 75 has a duplicate endpoint with address 0x4, skipping [ 763.407013][T10748] usb 2-1: config 169 interface 166 altsetting 75 has 3 endpoint descriptors, different from the interface descriptor's value: 115 [ 763.421271][T10748] usb 2-1: config 169 interface 108 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 763.432610][T10748] usb 2-1: config 169 interface 108 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 763.443932][T10748] usb 2-1: config 169 interface 108 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 763.455774][T10748] usb 2-1: config 169 interface 108 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 763.466967][T10748] usb 2-1: config 169 interface 108 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 763.480320][T10748] usb 2-1: too many endpoints for config 169 interface 138 altsetting 52: 218, using maximum allowed: 30 [ 763.492312][T10748] usb 2-1: config 169 interface 138 altsetting 52 has a duplicate endpoint with address 0x4, skipping [ 763.503615][T10748] usb 2-1: config 169 interface 138 altsetting 52 has 1 endpoint descriptor, different from the interface descriptor's value: 218 [ 763.517512][T10748] usb 2-1: config 169 interface 83 has no altsetting 0 [ 763.524683][T10748] usb 2-1: config 169 interface 3 has no altsetting 0 [ 763.531598][T10748] usb 2-1: config 169 interface 166 has no altsetting 0 [ 763.538725][T10748] usb 2-1: config 169 interface 138 has no altsetting 0 [ 763.548208][T10748] usb 2-1: New USB device found, idVendor=12d1, idProduct=1404, bcdDevice= 0.00 [ 763.557579][T10748] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.567212][T10748] usb 2-1: Product: Џ [ 763.571761][T10748] usb 2-1: Manufacturer: 迨ꮔ酨䰯졥䆝♣钘㽑혢ࠄꖁŗ忂弚墍 [ 763.580968][T10748] usb 2-1: SerialNumber: 潫ᙫ铱㈴푲⺭曄駗骠냥ꥌ덄忛ꉾ斯䋂퇤턊懕䂿媥䌻灉晄糜ᇶ㉔േ뫷ᢱ쨖ॠ⳵陉冖筺褿롴ꟛ첢鋯ᆢ [ 763.835054][T10748] usb-storage 2-1:169.83: USB Mass Storage device detected [ 763.940196][T10748] usb-storage 2-1:169.3: USB Mass Storage device detected [ 764.015354][T10748] usb-storage 2-1:169.166: USB Mass Storage device detected [ 764.103189][T10748] usb-storage 2-1:169.108: USB Mass Storage device detected [ 764.186603][T10748] usb-storage 2-1:169.138: USB Mass Storage device detected [ 764.311295][T10748] usb 2-1: USB disconnect, device number 34 [ 764.427411][ T5914] usb 1-1: USB disconnect, device number 20 [ 764.787708][T12639] FAULT_INJECTION: forcing a failure. [ 764.787708][T12639] name failslab, interval 1, probability 0, space 0, times 0 [ 764.807427][T12639] CPU: 1 UID: 0 PID: 12639 Comm: syz.1.1938 Tainted: G L syzkaller #0 PREEMPT(full) [ 764.807462][T12639] Tainted: [L]=SOFTLOCKUP [ 764.807471][T12639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 764.807485][T12639] Call Trace: [ 764.807495][T12639] [ 764.807505][T12639] dump_stack_lvl+0xe8/0x150 [ 764.807548][T12639] should_fail_ex+0x412/0x560 [ 764.807590][T12639] should_failslab+0xa8/0x100 [ 764.807614][T12639] ? do_getname+0x2e/0x250 [ 764.807640][T12639] kmem_cache_alloc_noprof+0x87/0x650 [ 764.807682][T12639] do_getname+0x2e/0x250 [ 764.807706][T12639] ? getname_flags+0x11/0x20 [ 764.807735][T12639] __se_sys_acct+0xe1/0x9c0 [ 764.807760][T12639] ? ksys_write+0x242/0x270 [ 764.807784][T12639] ? __pfx___se_sys_acct+0x10/0x10 [ 764.807819][T12639] do_syscall_64+0x14d/0xf80 [ 764.807874][T12639] ? trace_irq_disable+0x3b/0x140 [ 764.807899][T12639] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.807921][T12639] ? clear_bhb_loop+0x40/0x90 [ 764.807947][T12639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.807969][T12639] RIP: 0033:0x7f3f5299c799 [ 764.807990][T12639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 764.808010][T12639] RSP: 002b:00007f3f50bd5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 764.808032][T12639] RAX: ffffffffffffffda RBX: 00007f3f52c16090 RCX: 00007f3f5299c799 [ 764.808048][T12639] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 764.808061][T12639] RBP: 00007f3f50bd5090 R08: 0000000000000000 R09: 0000000000000000 [ 764.808074][T12639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 764.808087][T12639] R13: 00007f3f52c16128 R14: 00007f3f52c16090 R15: 00007ffd5293be78 [ 764.808121][T12639] [ 765.093696][ T7930] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 765.105389][ T7930] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 765.118353][ T7930] asix 4-1:0.188: probe with driver asix failed with error -71 [ 765.137144][ T5914] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 765.148029][ T7930] usb 4-1: USB disconnect, device number 14 [ 765.221214][T12648] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1943'. [ 765.314439][ T5914] usb 1-1: unable to get BOS descriptor or descriptor too short [ 765.323710][ T5914] usb 1-1: config 194 has an invalid interface number: 50 but max is 0 [ 765.332297][ T5914] usb 1-1: config 194 has no interface number 0 [ 765.338803][ T5914] usb 1-1: config 194 interface 50 has no altsetting 0 [ 765.349077][ T5914] usb 1-1: string descriptor 0 read error: -22 [ 765.355605][ T5914] usb 1-1: New USB device found, idVendor=0b95, idProduct=2791, bcdDevice=9d.87 [ 765.364815][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.495214][T10748] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 765.596819][ T5932] usb 1-1: USB disconnect, device number 21 [ 765.658550][T10748] usb 2-1: Using ep0 maxpacket: 16 [ 765.670573][T10748] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 765.691223][T10748] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 765.702744][T10748] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.711639][T10748] usb 2-1: Product: syz [ 765.715960][T10748] usb 2-1: Manufacturer: syz [ 765.723506][T10748] usb 2-1: SerialNumber: syz [ 765.735970][T10748] usb 2-1: config 0 descriptor?? [ 765.747936][T10748] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 765.757458][T10748] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 765.979237][ T7930] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 766.042044][T12654] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 766.059736][T12654] exFAT-fs (nullb0): invalid boot record signature [ 766.066866][T12654] exFAT-fs (nullb0): failed to read boot sector [ 766.075037][T12654] exFAT-fs (nullb0): failed to recognize exfat type [ 766.084903][T12654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1946'. [ 766.153597][ T7930] usb 4-1: Using ep0 maxpacket: 16 [ 766.164707][ T7930] usb 4-1: unable to get BOS descriptor or descriptor too short [ 766.175902][T12656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1947'. [ 766.185216][ T7930] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 7 [ 766.213164][ T7930] usb 4-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 766.228452][ T7930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.236945][ T7930] usb 4-1: Product: syz [ 766.241672][ T7930] usb 4-1: Manufacturer: syz [ 766.246413][ T7930] usb 4-1: SerialNumber: syz [ 766.413184][T10748] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 766.421125][T10748] em28xx 2-1:0.0: Config register raw data: 0xa1 [ 766.430119][T10748] em28xx 2-1:0.0: I2S Audio (1 sample rate(s)) [ 766.437911][T10748] em28xx 2-1:0.0: No AC97 audio processor [ 766.479899][T12650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 766.491271][T12650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 766.511783][ T7930] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 766.522755][ T7930] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 766.625610][ T5932] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 766.630554][ T7930] usb 4-1: USB disconnect, device number 15 [ 766.693345][ T5963] udevd[5963]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 766.807494][ T5932] usb 3-1: Using ep0 maxpacket: 16 [ 766.815373][ T5932] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 766.827439][ T5932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 766.840165][ T5932] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 766.849332][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.857500][ T5932] usb 3-1: Product: syz [ 766.861888][ T5932] usb 3-1: Manufacturer: syz [ 766.866536][ T5932] usb 3-1: SerialNumber: syz [ 766.882000][T10748] usb 2-1: USB disconnect, device number 35 [ 766.893273][ T5932] usb 3-1: config 0 descriptor?? [ 766.913834][ T5932] em28xx 3-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 767.127479][T12661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 767.137992][T12661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 767.148555][ T7930] usb 3-1: USB disconnect, device number 38 [ 767.157941][T12670] tmpfs: Bad value for 'mpol' [ 767.406236][T12679] netlink: 'syz.0.1955': attribute type 10 has an invalid length. [ 767.421162][ T5932] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 767.433880][T12679] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.457372][T12679] bridge_slave_1: left allmulticast mode [ 767.463150][T12679] bridge_slave_1: left promiscuous mode [ 767.471768][T12679] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.496266][T12679] team0: Port device bridge_slave_1 added [ 767.595307][ T5932] usb 4-1: device descriptor read/64, error -71 [ 767.721413][T12695] FAULT_INJECTION: forcing a failure. [ 767.721413][T12695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 767.743927][T12695] CPU: 1 UID: 0 PID: 12695 Comm: syz.0.1959 Tainted: G L syzkaller #0 PREEMPT(full) [ 767.743966][T12695] Tainted: [L]=SOFTLOCKUP [ 767.743975][T12695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 767.743990][T12695] Call Trace: [ 767.743999][T12695] [ 767.744010][T12695] dump_stack_lvl+0xe8/0x150 [ 767.744054][T12695] should_fail_ex+0x412/0x560 [ 767.744090][T12695] _copy_to_user+0x31/0xb0 [ 767.744124][T12695] simple_read_from_buffer+0xe1/0x170 [ 767.744158][T12695] proc_fail_nth_read+0x1bb/0x230 [ 767.744190][T12695] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 767.744221][T12695] ? rw_verify_area+0x2a6/0x4d0 [ 767.744241][T12695] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 767.744270][T12695] vfs_read+0x20c/0xa70 [ 767.744289][T12695] ? fdget_pos+0x246/0x320 [ 767.744322][T12695] ? __pfx___mutex_lock+0x10/0x10 [ 767.744354][T12695] ? __pfx_vfs_read+0x10/0x10 [ 767.744376][T12695] ? __fget_files+0x2a/0x420 [ 767.744409][T12695] ? __fget_files+0x3a0/0x420 [ 767.744440][T12695] ? __fget_files+0x2a/0x420 [ 767.744478][T12695] ksys_read+0x150/0x270 [ 767.744501][T12695] ? __pfx_ksys_read+0x10/0x10 [ 767.744521][T12695] ? __pfx_sock_ioctl+0x10/0x10 [ 767.744553][T12695] do_syscall_64+0x14d/0xf80 [ 767.744581][T12695] ? trace_irq_disable+0x3b/0x140 [ 767.744612][T12695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.744633][T12695] ? clear_bhb_loop+0x40/0x90 [ 767.744656][T12695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.744675][T12695] RIP: 0033:0x7f1a9d35cfce [ 767.744695][T12695] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 767.744712][T12695] RSP: 002b:00007f1a9e33afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 767.744732][T12695] RAX: ffffffffffffffda RBX: 00007f1a9e33b6c0 RCX: 00007f1a9d35cfce [ 767.744747][T12695] RDX: 000000000000000f RSI: 00007f1a9e33b0a0 RDI: 0000000000000004 [ 767.744760][T12695] RBP: 00007f1a9e33b090 R08: 0000000000000000 R09: 0000000000000000 [ 767.744771][T12695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 767.744784][T12695] R13: 00007f1a9d616038 R14: 00007f1a9d615fa0 R15: 00007ffd40e7fb68 [ 767.744815][T12695] [ 767.978991][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 767.985755][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 768.054018][T12698] program syz.2.1960 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 768.124780][T12701] FAULT_INJECTION: forcing a failure. [ 768.124780][T12701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 768.167680][T12701] CPU: 0 UID: 0 PID: 12701 Comm: syz.0.1961 Tainted: G L syzkaller #0 PREEMPT(full) [ 768.167715][T12701] Tainted: [L]=SOFTLOCKUP [ 768.167723][T12701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 768.167737][T12701] Call Trace: [ 768.167746][T12701] [ 768.167756][T12701] dump_stack_lvl+0xe8/0x150 [ 768.167794][T12701] should_fail_ex+0x412/0x560 [ 768.167829][T12701] _copy_to_user+0x31/0xb0 [ 768.167862][T12701] simple_read_from_buffer+0xe1/0x170 [ 768.167898][T12701] proc_fail_nth_read+0x1bb/0x230 [ 768.167931][T12701] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 768.167963][T12701] ? rw_verify_area+0x2a6/0x4d0 [ 768.167982][T12701] ? tun_chr_write_iter+0xe0/0x200 [ 768.168008][T12701] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 768.168038][T12701] vfs_read+0x20c/0xa70 [ 768.168066][T12701] ? fdget_pos+0x246/0x320 [ 768.168100][T12701] ? __pfx___mutex_lock+0x10/0x10 [ 768.168131][T12701] ? __pfx_vfs_read+0x10/0x10 [ 768.168154][T12701] ? __fget_files+0x2a/0x420 [ 768.168187][T12701] ? __fget_files+0x3a0/0x420 [ 768.168215][T12701] ? __fget_files+0x2a/0x420 [ 768.168252][T12701] ksys_read+0x150/0x270 [ 768.168303][T12701] ? __pfx_ksys_read+0x10/0x10 [ 768.168338][T12701] do_syscall_64+0x14d/0xf80 [ 768.168367][T12701] ? trace_irq_disable+0x3b/0x140 [ 768.168391][T12701] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.168412][T12701] ? clear_bhb_loop+0x40/0x90 [ 768.168439][T12701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.168460][T12701] RIP: 0033:0x7f1a9d35cfce [ 768.168480][T12701] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 768.168498][T12701] RSP: 002b:00007f1a9e33afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 768.168521][T12701] RAX: ffffffffffffffda RBX: 00007f1a9e33b6c0 RCX: 00007f1a9d35cfce [ 768.168536][T12701] RDX: 000000000000000f RSI: 00007f1a9e33b0a0 RDI: 0000000000000006 [ 768.168549][T12701] RBP: 00007f1a9e33b090 R08: 0000000000000000 R09: 0000000000000000 [ 768.168562][T12701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 768.168575][T12701] R13: 00007f1a9d616038 R14: 00007f1a9d615fa0 R15: 00007ffd40e7fb68 [ 768.168609][T12701] [ 768.281209][ T5932] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 768.487787][T12707] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1964'. [ 768.501481][T12709] program syz.1.1962 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 768.614557][ T5932] usb 4-1: device descriptor read/64, error -71 [ 768.734556][ T5932] usb usb4-port1: attempt power cycle [ 769.010944][T12720] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 769.020084][T12720] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 769.044432][ T1223] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 769.109002][ T5932] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 769.131151][ T9] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 769.152607][ T5932] usb 4-1: device descriptor read/8, error -71 [ 769.205751][ T1223] usb 3-1: Using ep0 maxpacket: 16 [ 769.212893][ T1223] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 769.221795][ T1223] usb 3-1: config 0 has no interface number 0 [ 769.228366][ T1223] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 769.245180][ T1223] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 769.259550][ T1223] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 769.267799][ T1223] usb 3-1: Product: syz [ 769.273691][ T1223] usb 3-1: SerialNumber: syz [ 769.284237][ T1223] usb 3-1: config 0 descriptor?? [ 769.299971][ T1223] cm109 3-1:0.8: invalid payload size 24, expected 4 [ 769.310314][ T1223] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input189 [ 769.333954][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 769.358353][ T9] usb 2-1: config 0 has no interface number 0 [ 769.370938][ T9] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 769.388511][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.398390][ T9] usb 2-1: Product: syz [ 769.409318][ T9] usb 2-1: Manufacturer: syz [ 769.420201][ T9] usb 2-1: SerialNumber: syz [ 769.421296][ T5932] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 769.455116][ T9] usb 2-1: config 0 descriptor?? [ 769.475163][ T5932] usb 4-1: device descriptor read/8, error -71 [ 769.601480][T12728] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1971'. [ 769.615598][ T5932] usb usb4-port1: unable to enumerate USB device [ 769.678579][ T9] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 769.696519][ T9] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 769.710040][ T9] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 769.718470][ T9] usb 2-1: media controller created [ 769.742757][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 769.787799][ C1] cm109 3-1:0.8: cm109_urb_irq_callback: urb status -71 [ 769.795052][ C1] cm109_urb_ctl_callback: 2 callbacks suppressed [ 769.795079][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 769.796416][ T7930] usb 3-1: USB disconnect, device number 39 [ 769.801460][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 769.855030][ T7930] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 770.133417][ T9] usb 2-1: USB disconnect, device number 36 [ 770.475533][T12739] sd 0:0:1:0: PR command failed: 1026 [ 770.483659][T12739] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 770.492364][T12739] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 770.560711][ T1223] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 770.738864][T12739] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 770.750281][ T9] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 770.754459][ T1223] usb 1-1: Using ep0 maxpacket: 8 [ 770.776484][ T1223] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 770.797202][ T1223] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 770.818048][ T1223] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 770.835764][ T1223] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 770.859900][ T1223] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 770.878184][ T1223] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 770.898616][ T1223] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.918428][ T1223] usb 1-1: config 0 descriptor?? [ 770.930172][T12737] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 770.948924][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 770.971122][ T9] usb 3-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 771.003518][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.026709][ T9] usb 3-1: Product: syz [ 771.046338][ T9] usb 3-1: Manufacturer: syz [ 771.056105][ T9] usb 3-1: SerialNumber: syz [ 771.109588][ T9] usb 3-1: config 0 descriptor?? [ 771.143371][ T9] gspca_main: spca508-2.14.0 probing 041e:4018 [ 771.181313][T12737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 771.198901][T12737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 771.249328][ T5848] Bluetooth: hci3: command 0x0405 tx timeout [ 771.255476][ T5848] Bluetooth: hci2: command 0x0c1a tx timeout [ 771.343337][ T9] gspca_spca508: reg_read err -32 [ 771.366369][ T9] gspca_spca508: reg_read err -32 [ 771.384992][ T9] gspca_spca508: reg_read err -32 [ 771.399522][ T9] gspca_spca508: reg_read err -32 [ 771.409375][ T9] gspca_spca508: reg_read err -32 [ 771.462392][ T7930] usb 1-1: USB disconnect, device number 22 [ 771.468691][ T5849] Bluetooth: hci4: Opcode 0x0c03 failed: -19 [ 771.593060][ T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 771.653762][T12741] Bluetooth: MGMT ver 1.23 [ 771.663439][T12741] Bluetooth: hci2: invalid len left 7, exp >= 199 [ 771.672383][ T30] audit: type=1326 audit(1774945084.269:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12740 comm="syz.2.1976" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f64ce99c799 code=0x0 [ 771.791685][ T9] gspca_spca508: reg write: error -71 [ 771.800052][ T10] usb 4-1: config 0 has an invalid interface number: 66 but max is 0 [ 771.810010][ T9] spca508 3-1:0.0: probe with driver spca508 failed with error -71 [ 771.819437][ T10] usb 4-1: config 0 has no interface number 0 [ 771.826224][T12753] : renamed from syz_tun (while UP) [ 771.837107][ T9] usb 3-1: USB disconnect, device number 40 [ 771.845515][ T10] usb 4-1: too many endpoints for config 0 interface 66 altsetting 71: 66, using maximum allowed: 30 [ 771.861290][T12756] bpf: Bad value for 'gid' [ 771.877566][ T10] usb 4-1: config 0 interface 66 altsetting 71 has 0 endpoint descriptors, different from the interface descriptor's value: 66 [ 771.900095][ T10] usb 4-1: config 0 interface 66 has no altsetting 0 [ 771.909724][ T10] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 771.921951][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.942487][ T10] usb 4-1: config 0 descriptor?? [ 771.963615][ T10] cp210x 4-1:0.66: cp210x converter detected [ 772.334703][ T9] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 772.391378][ T10] cp210x 4-1:0.66: failed to get vendor val 0x000e size 3: -71 [ 772.413419][ T10] usb 4-1: cp210x converter now attached to ttyUSB0 [ 772.423092][ T10] usb 4-1: USB disconnect, device number 20 [ 772.451287][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 772.470616][ T10] cp210x 4-1:0.66: device disconnected [ 772.850720][ T7930] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 773.033456][ T7930] usb 2-1: Using ep0 maxpacket: 8 [ 773.042860][ T7930] usb 2-1: unable to get BOS descriptor or descriptor too short [ 773.054037][ T7930] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 773.066770][ T7930] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 773.078180][ T7930] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 773.102897][ T7930] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 773.125444][ T7930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.135508][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 773.157296][ T7930] usb 2-1: Product: syz [ 773.169550][T12790] openvswitch: netlink: Missing valid actions attribute. [ 773.174359][ T7930] usb 2-1: Manufacturer: Ѓ [ 773.181544][ T9] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 773.188866][T12790] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 773.192361][ T7930] usb 2-1: SerialNumber: syz [ 773.203164][ T9] usb 3-1: can't read configurations, error -71 [ 773.220330][T12790] delete_channel: no stack [ 773.233487][ T7930] usb 2-1: config 0 descriptor?? [ 773.246662][ T7930] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 773.403482][ T7930] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 773.447477][ T5858] udevd[5858]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 773.624725][ T24] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 773.785878][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 773.793712][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 773.806117][ T24] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 773.816094][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.824261][ T24] usb 4-1: Product: syz [ 773.828685][ T24] usb 4-1: Manufacturer: syz [ 773.833654][ T24] usb 4-1: SerialNumber: syz [ 773.905637][ T9] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 774.072315][ T24] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 774.083923][ T24] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 774.097707][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 774.105756][ T9] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 774.114953][ T9] usb 3-1: config 0 has no interface number 0 [ 774.121423][ T9] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 774.137805][ T9] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 774.150419][ T9] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 774.159978][ T9] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 774.168517][ T9] usb 3-1: Product: syz [ 774.173152][ T9] usb 3-1: SerialNumber: syz [ 774.186120][ T9] usb 3-1: config 0 descriptor?? [ 774.207376][ T9] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 774.218071][ T9] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input190 [ 774.224992][ T24] usb 4-1: USB disconnect, device number 21 [ 774.297739][ T6168] udevd[6168]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 774.425484][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 774.641765][ T24] usb 3-1: USB disconnect, device number 42 [ 774.663353][ T24] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 774.741818][T12809] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1999'. [ 774.755564][T12811] 9p: Bad value for 'rfdno' [ 775.032799][ T7930] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 775.195930][ T7930] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 775.217589][ T7930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.231186][ T7930] usb 4-1: config 0 descriptor?? [ 775.382728][T12824] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2004'. [ 775.478628][ T7930] usb 4-1: Cannot read MAC address [ 775.491242][ T7930] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 775.539785][ T7930] usb 4-1: USB disconnect, device number 22 [ 775.773885][T12829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2006'. [ 775.856249][ T7930] usb 2-1: USB disconnect, device number 37 [ 776.098592][T12843] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 776.197423][T12848] binder: BINDER_SET_CONTEXT_MGR already set [ 776.216108][T12848] binder: 12844:12848 ioctl 4018620d 200000004a80 returned -16 [ 776.290285][ T7930] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 776.462443][ T7930] usb 2-1: Using ep0 maxpacket: 16 [ 776.477676][ T7930] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 776.497635][ T7930] usb 2-1: config 0 has no interface number 0 [ 776.514546][ T7930] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 776.526388][ T7930] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 776.539738][ T7930] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 776.549144][ T7930] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 776.558577][ T7930] usb 2-1: Product: syz [ 776.563228][ T7930] usb 2-1: SerialNumber: syz [ 776.576495][ T7930] usb 2-1: config 0 descriptor?? [ 776.592246][ T7930] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 776.601644][ T7930] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input191 [ 776.811388][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 776.926179][T10748] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 777.044687][ T7930] usb 2-1: USB disconnect, device number 38 [ 777.068915][ T7930] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 777.096427][T10748] usb 3-1: Using ep0 maxpacket: 8 [ 777.104214][T10748] usb 3-1: config 6 has an invalid interface number: 2 but max is 0 [ 777.119584][T10748] usb 3-1: config 6 has no interface number 0 [ 777.138540][T10748] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 777.154692][T10748] usb 3-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 777.166811][T10748] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 777.181915][T10748] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 777.196877][T10748] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 777.207002][T10748] usb 3-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 777.216080][T10748] usb 3-1: Product: syz [ 777.221180][T10748] usb 3-1: Manufacturer: syz [ 777.226273][T10748] usb 3-1: SerialNumber: syz [ 777.251074][T10748] hso 3-1:6.2: Failed to find BULK IN ep [ 777.317702][T12873] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2025'. [ 777.327736][T12873] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2025'. [ 777.344702][T12873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2025'. [ 777.465360][ T24] usb 3-1: USB disconnect, device number 43 [ 778.118293][ T5914] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 778.323677][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 778.334891][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 778.345175][ T5914] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 778.359577][ T5914] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 778.369073][ T24] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 778.378945][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.391356][ T5914] usb 2-1: config 0 descriptor?? [ 778.515617][T10748] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 778.531173][T12898] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2034'. [ 778.547138][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 778.560989][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 778.578038][ T24] usb 3-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40 [ 778.587991][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.596423][ T24] usb 3-1: Product: syz [ 778.601180][ T24] usb 3-1: Manufacturer: syz [ 778.606330][ T24] usb 3-1: SerialNumber: syz [ 778.623271][T12884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 778.632428][T12884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 778.654065][ T24] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 778.686988][T10748] usb 4-1: Using ep0 maxpacket: 16 [ 778.694855][T10748] usb 4-1: unable to get BOS descriptor or descriptor too short [ 778.709699][T10748] usb 4-1: config 1 has an invalid descriptor of length 194, skipping remainder of the config [ 778.720381][T10748] usb 4-1: too many endpoints for config 1 interface 2 altsetting 0: 135, using maximum allowed: 30 [ 778.731418][T10748] usb 4-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 135 [ 778.753770][T10748] usb 4-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40 [ 778.764423][T10748] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.782701][T10748] usb 4-1: Product: syz [ 778.787182][T10748] usb 4-1: Manufacturer: syz [ 778.791861][T10748] usb 4-1: SerialNumber: syz [ 778.869513][T12888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 778.886307][ T5914] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 778.892622][T12888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 778.895234][ T5914] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 778.918646][ T24] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 778.927420][ T5914] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 778.936148][ T5914] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 778.951198][ T5914] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 778.967247][ T5914] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 778.988081][ T5914] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 779.003838][ T5914] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 779.022987][ T5914] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 779.035117][ T24] usb 3-1: USB disconnect, device number 44 [ 779.041541][ T5914] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 779.106241][ T5914] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 779.112298][T10748] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 779.135014][ T6168] udevd[6168]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 779.205461][ T7930] usb 2-1: USB disconnect, device number 39 [ 779.282012][T12903] fido_id[12903]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 779.340555][T10748] usb 4-1: USB disconnect, device number 23 [ 779.387532][ T6168] udevd[6168]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 779.570206][T12907] FAULT_INJECTION: forcing a failure. [ 779.570206][T12907] name failslab, interval 1, probability 0, space 0, times 0 [ 779.585611][T12907] CPU: 0 UID: 0 PID: 12907 Comm: syz.2.2036 Tainted: G L syzkaller #0 PREEMPT(full) [ 779.585646][T12907] Tainted: [L]=SOFTLOCKUP [ 779.585655][T12907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 779.585668][T12907] Call Trace: [ 779.585677][T12907] [ 779.585687][T12907] dump_stack_lvl+0xe8/0x150 [ 779.585725][T12907] should_fail_ex+0x412/0x560 [ 779.585758][T12907] should_failslab+0xa8/0x100 [ 779.585784][T12907] __kmalloc_noprof+0xe8/0x760 [ 779.585807][T12907] ? mpi_alloc+0x77/0x140 [ 779.585922][T12907] ? __kmalloc_cache_noprof+0x15b/0x660 [ 779.585948][T12907] mpi_alloc+0x77/0x140 [ 779.585978][T12907] mpi_read_raw_data+0x139/0x970 [ 779.586014][T12907] dh_set_secret+0x200/0x320 [ 779.586109][T12907] ? crypto_create_tfm_node+0x83/0x3f0 [ 779.586162][T12907] ? __kmalloc_node_noprof+0x34f/0x7c0 [ 779.586185][T12907] ? __pfx_dh_set_secret+0x10/0x10 [ 779.586211][T12907] ? crypto_alloc_tfm_node+0x3c0/0x3f0 [ 779.586241][T12907] ? __keyctl_dh_compute+0x3df/0xd10 [ 779.586268][T12907] __keyctl_dh_compute+0x5ae/0xd10 [ 779.586302][T12907] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 779.586339][T12907] ? __might_fault+0xaf/0x130 [ 779.586418][T12907] keyctl_dh_compute+0x124/0x180 [ 779.586446][T12907] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 779.586486][T12907] __se_sys_keyctl+0x44c/0x9e0 [ 779.586550][T12907] ? __pfx___se_sys_keyctl+0x10/0x10 [ 779.586583][T12907] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 779.586619][T12907] ? __fget_files+0x3a0/0x420 [ 779.586655][T12907] ? fput+0xa0/0xd0 [ 779.586683][T12907] ? ksys_write+0x242/0x270 [ 779.586706][T12907] ? __pfx_ksys_write+0x10/0x10 [ 779.586734][T12907] ? __x64_sys_keyctl+0x20/0xc0 [ 779.586764][T12907] do_syscall_64+0x14d/0xf80 [ 779.586793][T12907] ? trace_irq_disable+0x3b/0x140 [ 779.586817][T12907] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.586839][T12907] ? clear_bhb_loop+0x40/0x90 [ 779.586864][T12907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.586886][T12907] RIP: 0033:0x7f64ce99c799 [ 779.586906][T12907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 779.586926][T12907] RSP: 002b:00007f64ccbee028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 779.586949][T12907] RAX: ffffffffffffffda RBX: 00007f64cec15fa0 RCX: 00007f64ce99c799 [ 779.586965][T12907] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000017 [ 779.586978][T12907] RBP: 00007f64ccbee090 R08: 0000200000001180 R09: 0000000000000000 [ 779.586992][T12907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 779.587004][T12907] R13: 00007f64cec16038 R14: 00007f64cec15fa0 R15: 00007ffcfbc40aa8 [ 779.587039][T12907] [ 779.905930][T12912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.914973][T12912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 779.928178][T12912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.938597][T12912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 779.947617][T12912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.956580][T12912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 779.974664][T12912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.985634][T12912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 779.994868][T12912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 780.004055][T12913] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 780.009982][T12912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 780.010625][T12913] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 780.028627][T12913] vhci_hcd vhci_hcd.0: Device attached [ 780.105865][ T7930] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 780.139198][T12917] vhci_hcd: connection closed [ 780.139504][ T96] vhci_hcd vhci_hcd.1: stop threads [ 780.151780][ T96] vhci_hcd vhci_hcd.1: release socket [ 780.170626][ T96] vhci_hcd vhci_hcd.1: disconnect device [ 780.223792][ T9] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 780.266196][ T7930] usb 1-1: Using ep0 maxpacket: 16 [ 780.273206][ T7930] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 780.282385][ T7930] usb 1-1: config 0 has no interface number 0 [ 780.289078][ T7930] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 780.311185][ T7930] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 780.320891][ T7930] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 780.329050][ T7930] usb 1-1: Product: syz [ 780.341526][ T7930] usb 1-1: SerialNumber: syz [ 780.355611][ T7930] usb 1-1: config 0 descriptor?? [ 780.368835][ T7930] cm109 1-1:0.8: invalid payload size 24, expected 4 [ 780.380115][ T7930] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input192 [ 780.438829][ T5849] Bluetooth: hci3: unexpected event for opcode 0x2016 [ 780.567118][T10748] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 780.735593][T10748] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 780.753500][T10748] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.763106][T10748] usb 4-1: Product: syz [ 780.767703][T10748] usb 4-1: Manufacturer: syz [ 780.774459][T10748] usb 4-1: SerialNumber: syz [ 780.784137][T10748] usb 4-1: config 0 descriptor?? [ 780.800468][ C0] cm109 1-1:0.8: cm109_urb_irq_callback: urb status -71 [ 780.807514][ C0] ------------[ cut here ]------------ [ 780.813012][ C0] URB ffff88805b428d00 submitted while active [ 780.819129][ C0] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x7b/0x18b0, CPU#0: syz.0.2035/12904 [ 780.829425][ C0] Modules linked in: [ 780.833661][ C0] CPU: 0 UID: 0 PID: 12904 Comm: syz.0.2035 Tainted: G L syzkaller #0 PREEMPT(full) [ 780.844624][ C0] Tainted: [L]=SOFTLOCKUP [ 780.848991][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 780.859100][ C0] RIP: 0010:usb_submit_urb+0x7e/0x18b0 [ 780.864586][ C0] Code: 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 27 47 eb fa 49 83 3e 00 74 40 e8 bc d8 81 fa 48 8d 3d a5 f6 1c 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 a1 d8 81 fa eb 05 e8 9a d8 [ 780.884216][ C0] RSP: 0018:ffffc90000007a00 EFLAGS: 00010087 [ 780.890302][ C0] RAX: ffffffff8744b2e4 RBX: ffff88805b428d00 RCX: 0000000000040000 [ 780.898282][ C0] RDX: ffffc90002051000 RSI: ffff88805b428d00 RDI: ffffffff9061a990 [ 780.906268][ C0] RBP: 000000000000000f R08: 0000000000000003 R09: 0000000000000004 [ 780.914252][ C0] R10: dffffc0000000000 R11: fffff52000000f40 R12: 0000000000000820 [ 780.922234][ C0] R13: ffff88802c49b030 R14: ffff88805b428d08 R15: dffffc0000000000 [ 780.930217][ C0] FS: 000055556cde0500(0000) GS:ffff888124ff2000(0000) knlGS:0000000000000000 [ 780.939163][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 780.945764][ C0] CR2: 0000001b31f23ffc CR3: 00000000286a8000 CR4: 00000000003526f0 [ 780.953775][ C0] Call Trace: [ 780.957071][ C0] [ 780.959926][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 780.965784][ C0] ? ___ratelimit+0x58c/0x8d0 [ 780.970490][ C0] cm109_urb_irq_callback+0x6e2/0xc90 [ 780.975961][ C0] __usb_hcd_giveback_urb+0x376/0x540 [ 780.981351][ C0] dummy_timer+0xbc0/0x4650 [ 780.985945][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 780.990910][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 780.996312][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 781.001264][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 781.007094][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 781.012048][ C0] __hrtimer_run_queues+0x3c0/0xa20 [ 781.017273][ C0] hrtimer_run_softirq+0x17a/0x240 [ 781.022423][ C0] handle_softirqs+0x22a/0x840 [ 781.027227][ C0] ? __irq_exit_rcu+0xca/0x220 [ 781.032015][ C0] __irq_exit_rcu+0xca/0x220 [ 781.036622][ C0] irq_exit_rcu+0x9/0x30 [ 781.040883][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 781.046542][ C0] [ 781.049484][ C0] [ 781.052462][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 781.058459][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 781.064915][ C0] Code: f7 e8 bd 54 e4 f5 f7 c3 00 02 00 00 74 05 e8 e0 a2 0f f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 e4 ee d5 f5 65 8b 05 8d e9 a3 07 85 c0 74 18 5b 41 5e c3 cc cc [ 781.084539][ C0] RSP: 0018:ffffc9001acafa68 EFLAGS: 00000206 [ 781.090648][ C0] RAX: 0000000000000002 RBX: 0000000000000202 RCX: 0000000080000001 [ 781.098648][ C0] RDX: 0000000000000006 RSI: ffffffff8e25fbe7 RDI: 0000000000000001 [ 781.106636][ C0] RBP: ffffc9001acafb48 R08: ffffffff90544bf7 R09: 1ffffffff20a897e [ 781.114627][ C0] R10: dffffc0000000000 R11: fffffbfff20a897f R12: ffff88802accdc18 [ 781.122618][ C0] R13: ffff88802accdc00 R14: ffffffff8f89f900 R15: 0000000000000001 [ 781.130623][ C0] usb_hcd_poll_rh_status+0x40c/0x620 [ 781.136029][ C0] ? __pfx_usb_hcd_poll_rh_status+0x10/0x10 [ 781.141951][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 781.147779][ C0] dummy_pullup+0xde/0x120 [ 781.152283][ C0] ? __pfx_dummy_pullup+0x10/0x10 [ 781.157340][ C0] usb_gadget_disconnect_locked+0x143/0x4a0 [ 781.163251][ C0] gadget_unbind_driver+0xc7/0x450 [ 781.168383][ C0] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 781.174123][ C0] device_release_driver_internal+0x46f/0x870 [ 781.180327][ C0] driver_detach+0x1f3/0x2d0 [ 781.184940][ C0] bus_remove_driver+0x226/0x320 [ 781.189956][ C0] usb_gadget_unregister_driver+0x4e/0x70 [ 781.195701][ C0] raw_release+0xd7/0x260 [ 781.200147][ C0] ? __pfx_raw_release+0x10/0x10 [ 781.205140][ C0] __fput+0x44f/0xa70 [ 781.209155][ C0] task_work_run+0x1d9/0x270 [ 781.213762][ C0] ? __pfx_task_work_run+0x10/0x10 [ 781.218898][ C0] exit_to_user_mode_loop+0xed/0x480 [ 781.224200][ C0] ? rcu_is_watching+0x15/0xb0 [ 781.228984][ C0] do_syscall_64+0x32d/0xf80 [ 781.233600][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.239686][ C0] ? clear_bhb_loop+0x40/0x90 [ 781.244386][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.250299][ C0] RIP: 0033:0x7f1a9d39c799 [ 781.254726][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 781.274346][ C0] RSP: 002b:00007ffd40e7fcc8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 781.282822][ C0] RAX: 0000000000000000 RBX: 00007ffd40e7fdb0 RCX: 00007f1a9d39c799 [ 781.290809][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 781.298797][ C0] RBP: 00000000000b9196 R08: 0000000000000001 R09: 0000000000000000 [ 781.307059][ C0] R10: 0000001b30d20000 R11: 0000000000000246 R12: 00007ffd40e7fdf0 [ 781.315060][ C0] R13: 00007f1a9d615fac R14: 00000000000b96d2 R15: 00007f1a9d615fa0 [ 781.323079][ C0] [ 781.326132][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 781.333425][ C0] CPU: 0 UID: 0 PID: 12904 Comm: syz.0.2035 Tainted: G L syzkaller #0 PREEMPT(full) [ 781.344477][ C0] Tainted: [L]=SOFTLOCKUP [ 781.348813][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 781.358929][ C0] Call Trace: [ 781.362226][ C0] [ 781.365091][ C0] vpanic+0x56c/0xa60 [ 781.369093][ C0] ? __pfx__printk+0x10/0x10 [ 781.373802][ C0] ? __pfx_vpanic+0x10/0x10 [ 781.378325][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 781.383637][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 781.388866][ C0] panic+0xc5/0xd0 [ 781.392607][ C0] ? __pfx_panic+0x10/0x10 [ 781.397063][ C0] __warn+0x315/0x4c0 [ 781.401063][ C0] ? usb_submit_urb+0x7b/0x18b0 [ 781.405950][ C0] ? usb_submit_urb+0x7b/0x18b0 [ 781.410826][ C0] __report_bug+0x29a/0x540 [ 781.415489][ C0] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 781.420897][ C0] ? usb_submit_urb+0x7b/0x18b0 [ 781.425797][ C0] ? __pfx___report_bug+0x10/0x10 [ 781.430881][ C0] ? dev_printk_emit+0xee/0x140 [ 781.435772][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 781.440747][ C0] report_bug_entry+0x19a/0x290 [ 781.445640][ C0] ? usb_submit_urb+0x7e/0x18b0 [ 781.450524][ C0] ? usb_submit_urb+0x83/0x18b0 [ 781.455394][ C0] handle_bug+0xce/0x200 [ 781.459657][ C0] exc_invalid_op+0x1a/0x50 [ 781.464182][ C0] asm_exc_invalid_op+0x1a/0x20 [ 781.469051][ C0] RIP: 0010:usb_submit_urb+0x7e/0x18b0 [ 781.474559][ C0] Code: 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 27 47 eb fa 49 83 3e 00 74 40 e8 bc d8 81 fa 48 8d 3d a5 f6 1c 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 a1 d8 81 fa eb 05 e8 9a d8 [ 781.494183][ C0] RSP: 0018:ffffc90000007a00 EFLAGS: 00010087 [ 781.500284][ C0] RAX: ffffffff8744b2e4 RBX: ffff88805b428d00 RCX: 0000000000040000 [ 781.508272][ C0] RDX: ffffc90002051000 RSI: ffff88805b428d00 RDI: ffffffff9061a990 [ 781.516269][ C0] RBP: 000000000000000f R08: 0000000000000003 R09: 0000000000000004 [ 781.524269][ C0] R10: dffffc0000000000 R11: fffff52000000f40 R12: 0000000000000820 [ 781.532263][ C0] R13: ffff88802c49b030 R14: ffff88805b428d08 R15: dffffc0000000000 [ 781.540280][ C0] ? usb_submit_urb+0x74/0x18b0 [ 781.545182][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 781.551054][ C0] ? ___ratelimit+0x58c/0x8d0 [ 781.555764][ C0] cm109_urb_irq_callback+0x6e2/0xc90 [ 781.561218][ C0] __usb_hcd_giveback_urb+0x376/0x540 [ 781.566617][ C0] dummy_timer+0xbc0/0x4650 [ 781.571160][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 781.576147][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 781.581565][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 781.586526][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 781.592354][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 781.597306][ C0] __hrtimer_run_queues+0x3c0/0xa20 [ 781.602534][ C0] hrtimer_run_softirq+0x17a/0x240 [ 781.607675][ C0] handle_softirqs+0x22a/0x840 [ 781.612505][ C0] ? __irq_exit_rcu+0xca/0x220 [ 781.617299][ C0] __irq_exit_rcu+0xca/0x220 [ 781.621953][ C0] irq_exit_rcu+0x9/0x30 [ 781.626223][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 781.631886][ C0] [ 781.634826][ C0] [ 781.637767][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 781.643765][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 781.650216][ C0] Code: f7 e8 bd 54 e4 f5 f7 c3 00 02 00 00 74 05 e8 e0 a2 0f f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 e4 ee d5 f5 65 8b 05 8d e9 a3 07 85 c0 74 18 5b 41 5e c3 cc cc [ 781.669861][ C0] RSP: 0018:ffffc9001acafa68 EFLAGS: 00000206 [ 781.675974][ C0] RAX: 0000000000000002 RBX: 0000000000000202 RCX: 0000000080000001 [ 781.683958][ C0] RDX: 0000000000000006 RSI: ffffffff8e25fbe7 RDI: 0000000000000001 [ 781.691971][ C0] RBP: ffffc9001acafb48 R08: ffffffff90544bf7 R09: 1ffffffff20a897e [ 781.699962][ C0] R10: dffffc0000000000 R11: fffffbfff20a897f R12: ffff88802accdc18 [ 781.707978][ C0] R13: ffff88802accdc00 R14: ffffffff8f89f900 R15: 0000000000000001 [ 781.715986][ C0] usb_hcd_poll_rh_status+0x40c/0x620 [ 781.721393][ C0] ? __pfx_usb_hcd_poll_rh_status+0x10/0x10 [ 781.727312][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 781.733146][ C0] dummy_pullup+0xde/0x120 [ 781.737612][ C0] ? __pfx_dummy_pullup+0x10/0x10 [ 781.742656][ C0] usb_gadget_disconnect_locked+0x143/0x4a0 [ 781.748567][ C0] gadget_unbind_driver+0xc7/0x450 [ 781.753702][ C0] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 781.759453][ C0] device_release_driver_internal+0x46f/0x870 [ 781.765606][ C0] driver_detach+0x1f3/0x2d0 [ 781.770241][ C0] bus_remove_driver+0x226/0x320 [ 781.775225][ C0] usb_gadget_unregister_driver+0x4e/0x70 [ 781.780964][ C0] raw_release+0xd7/0x260 [ 781.785314][ C0] ? __pfx_raw_release+0x10/0x10 [ 781.790302][ C0] __fput+0x44f/0xa70 [ 781.794315][ C0] task_work_run+0x1d9/0x270 [ 781.798961][ C0] ? __pfx_task_work_run+0x10/0x10 [ 781.804127][ C0] exit_to_user_mode_loop+0xed/0x480 [ 781.809436][ C0] ? rcu_is_watching+0x15/0xb0 [ 781.814216][ C0] do_syscall_64+0x32d/0xf80 [ 781.818828][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.824911][ C0] ? clear_bhb_loop+0x40/0x90 [ 781.829614][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.835525][ C0] RIP: 0033:0x7f1a9d39c799 [ 781.839954][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 781.859596][ C0] RSP: 002b:00007ffd40e7fcc8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 781.868037][ C0] RAX: 0000000000000000 RBX: 00007ffd40e7fdb0 RCX: 00007f1a9d39c799 [ 781.876029][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 781.884015][ C0] RBP: 00000000000b9196 R08: 0000000000000001 R09: 0000000000000000 [ 781.892003][ C0] R10: 0000001b30d20000 R11: 0000000000000246 R12: 00007ffd40e7fdf0 [ 781.899989][ C0] R13: 00007f1a9d615fac R14: 00000000000b96d2 R15: 00007f1a9d615fa0 [ 781.907989][ C0] [ 783.012736][ C0] Shutting down cpus with NMI [ 783.018207][ C0] Kernel Offset: disabled [ 783.022570][ C0] Rebooting in 86400 seconds..