last executing test programs: 11.309647408s ago: executing program 2 (id=1050): bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_open_dev$video4linux(&(0x7f00000000c0), 0x3, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5960, 0x10, 0xfffffffd, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r0, r1, r2, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r5 = openat(r4, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) fcntl$getownex(r4, 0x10, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(r5, &(0x7f0000000d00)='nf ::7.0.0.1 2\\000000\\0 l\\calhost\n', 0x24) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x960, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r9, 0x400454c9, 0xba98575a95aeb70d) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000080)={'pim6reg0\x00', @random="eb8b2eb022f4"}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) madvise(&(0x7f00008df000/0x3000)=nil, 0x3000, 0x13) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYRESOCT, @ANYRES16=r3, @ANYRES32=r8], 0x3c}, 0x1, 0xba01}, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000000)="c744240077dd0000c74424027fbe0000c7442406000000000f011c2466460f3881460a0f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ba4100ed40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5f}], 0x1, 0xe8, 0x0, 0x0) 9.977165371s ago: executing program 2 (id=1053): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000080)=""/111, 0x6f}], 0x1, 0x7, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 9.51814306s ago: executing program 3 (id=1055): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x6484c2, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x8001) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r2, 0xc0245720, &(0x7f0000000040)={0x1000000}) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaab0c9420343758864450000280022000000069078ac"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0xc0, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xe, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x90, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_LOSS={0x64, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x2, 0x10000, 0x4, 0x0, 0x5400}}, @NETEM_LOSS_GI={0x18, 0x1, {0x6, 0x37b9, 0x3d4, 0x5, 0x1}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x5, 0x4, 0x5, 0x3}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1e8e7cbe, 0x4, 0x5e, 0x4, 0xc}}]}, @TCA_NETEM_CORR={0x10, 0x1, {0x8, 0x8, 0x11a3}}]}}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000240)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r6, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 8.924901754s ago: executing program 3 (id=1057): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000020000006a0a00fe00000000850000000b000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868ee30a0e8c1bf176db2a6b2feb4b6fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872971c7c"], 0x0}, 0x94) socket$unix(0x1, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="040e05003e20"], 0x8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="ad5a97"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="200103"], 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="ac184d"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000040)) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000200)={0x1, 0x87, 0x6, &(0x7f00000000c0)={0x50, "c7070000813ebc6600000087000200ce618e6361d39f5100"}}) 7.340692204s ago: executing program 0 (id=1060): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000008, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000006b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xcf1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000030000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) unshare(0x28000600) mq_open(&(0x7f0000000040)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxse\xee\x0e\xcd\xce6\xbf\xfa;\xb9-a\xb8\xef\x8de\x14\xbc\x9ej\xa1q\xa2\xa5\t\x98\x8a\x8f>\xba', 0x6e93ebbbcc088cf2, 0x0, 0x0) unshare(0x8000280) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 7.302011896s ago: executing program 2 (id=1061): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201100100000040c50f80b0000000000001090224000100009009090400fe01030001000921c100fe0122280009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x437b, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(&(0x7f0000000040), &(0x7f0000000000)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/trace_clock\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='counter\n', 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/trace_marker\x00', 0x1, 0x0) write(r3, &(0x7f0000000500)='test\n', 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyS0\x00', 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000400)=0xf) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000001c0)=0xfd) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB='`\")'], 0x0, 0x0, 0x0, 0x0}, 0x0) 7.197926252s ago: executing program 4 (id=1062): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) rseq(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="44000100000039040000008c4d8eed2a96000000", @ANYRES32=0x0, @ANYBLOB="8000000000000000240012800b000100627269646765000014000280080005000100000008000100feffff7f"], 0x44}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10122, 0x0, 0xffffffffffffff16) r4 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a4c0000000010109023b001202060000052506000005240000000d240f0100000000e600000000a018d8d7b0ca000000000009057a02000200771728a15b21fccf0b55faa42770032a65a413e17525df87cda3927bf92f566814bf7730cf1c97b78be93ac28ab98ccb"], &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0xe2a02) poll(&(0x7f0000000140)=[{r5, 0x4010}], 0x1, 0x3) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r4, 0x82, 0x5, &(0x7f0000002340)='hello') fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_dev$usbfs(0x0, 0xf, 0x240000) 6.545008772s ago: executing program 1 (id=1063): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc\x00', 0x1ff) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = open_tree(r0, &(0x7f00000001c0)='./cgroup\x00', 0x8901) move_mount(r0, 0x0, r1, 0x0, 0x164) 6.439394658s ago: executing program 1 (id=1064): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, &(0x7f0000000080)='size=4G\x00') socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20004450) r1 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) readv(r1, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsopen(&(0x7f0000000040)='cramfs\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='hpfs\x00', 0x20920d1, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000002380)={0x2020}, 0x2020) ioctl$KDSIGACCEPT(r0, 0x560f, 0x4) r4 = open(&(0x7f0000000000)='./file0\x00', 0x282080, 0x8e) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000480)={'tunl0\x00', &(0x7f0000000440)={'sit0\x00', 0x0, 0x1, 0x8, 0x2, 0x4, {{0x6, 0x4, 0x1, 0x0, 0x18, 0x65, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, {[@noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'syztnl0\x00', r5, 0x2f, 0x3, 0x50, 0x3, 0x8, @private0, @private0, 0x7800, 0x20, 0x7bed, 0x588}}) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000840)) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000880)={r6, 0x3, 0xfffe}) 6.385898375s ago: executing program 0 (id=1065): r0 = socket$rds(0x15, 0x5, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000002ac0), r2) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000002b40)={&(0x7f0000002b00)={0x14, r3, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x4010) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000400)={0x4, 0x0, [{0x4, 0x53, &(0x7f0000000080)=""/83}, {0x9000, 0xaf, &(0x7f0000000200)=""/175}, {0xe000, 0x16, &(0x7f00000002c0)=""/22}, {0x26000, 0x61, &(0x7f0000000000)=""/97}]}) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f00000001c0)=0x304008000) r4 = syz_usb_connect(0x2, 0x58, &(0x7f0000000080)=ANY=[@ANYBLOB="120110038e3ac6209406010013780102030109024600020e061003090439d8011adaa8080905081020000709800904e40503b956da020905080000040112fc09050b13200007039a0705d15b89"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00fce700000000000000"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) getsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f00000006c0), 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r5, &(0x7f00000034c0)=[{&(0x7f0000002340)=""/4096, 0x1000}], 0x1) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/cluster/comms/1\x00', 0x1ff) r6 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x104a, 0x28900) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r6, 0xc1105511, &(0x7f0000000740)={{0x5, 0x5, 0x4, 0x0, 'syz0\x00', 0x3ff}, 0x1, 0x100, 0x40, 0x0, 0x0, 0x2c, 'syz0\x00', 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) write(r7, &(0x7f0000000300)="020000007f00000100"/128, 0x80) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f00000003c0)={0x1}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r0}) 5.233126658s ago: executing program 1 (id=1066): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TIOCMIWAIT(r4, 0x545c, 0x7cb7562f2d67) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) preadv(r5, &(0x7f0000000700)=[{&(0x7f0000000080)=""/111, 0x6f}], 0x1, 0x7, 0x4) r6 = socket$netlink(0x10, 0x3, 0x14) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendfile(r6, 0xffffffffffffffff, 0x0, 0x6) timer_settime(r7, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 4.933088029s ago: executing program 4 (id=1067): r0 = socket(0x10, 0x803, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) pselect6(0x40, &(0x7f0000000040)={0x19, 0x9, 0x31f3, 0xffff, 0x92, 0x5, 0x200, 0x7fffffffffffffff}, &(0x7f00000000c0)={0x8754, 0x10000, 0x1000, 0xffffffffffffffff, 0xfffffffffffffffa, 0x80000001, 0x81, 0x80000001}, &(0x7f00000003c0)={0xa, 0x1000, 0x7, 0x7fffffffffffffff, 0x4, 0x3, 0x8, 0x6}, &(0x7f0000000440), &(0x7f0000000640)={&(0x7f0000000600)={[0x8]}, 0x8}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x26, 0x5, 0xffffffffc4e10885, 0x0, 0xfffc, 0x6, 0x5d2186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioprio_get$uid(0x0, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="58010000100005000100000000000000000000000000000000000000000000010000000000000000000000000000100100000000000000000a00808000000000", @ANYRES32=0x0, @ANYRES32=0x80, @ANYBLOB="00000000000000000000000000000001000012343300000000000000000000000000000000000001ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000800000000000000048000100686d616328736861312900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200017000100"/255], 0x158}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) sendmmsg$inet6(r3, &(0x7f00000000c0), 0x0, 0x4000801) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'dummy0\x00', &(0x7f0000000280)=@ethtool_channels={0x3c, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1, 0x0, 0xd0ed}}) 4.906877757s ago: executing program 3 (id=1068): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000080)=""/111, 0x6f}], 0x1, 0x7, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 4.358221502s ago: executing program 2 (id=1069): syz_io_uring_setup(0x66e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100, 0x1000000, 0x20000}, &(0x7f0000000040), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x20000) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000000)={0x2, {0xe, 0xfffffc01, 0x1000}}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x40, &(0x7f0000000080)=ANY=[]) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) 3.388830106s ago: executing program 1 (id=1070): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x15, 0x11, &(0x7f00000000c0)=@raw=[@alu={0x4, 0x1, 0x1, 0x2, 0x0, 0x80, 0xfffffffffffffffc}, @tail_call, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5c}, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x60000000}, @call={0x85, 0x0, 0x0, 0xc9}, @func, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], &(0x7f0000000180)='GPL\x00', 0x0, 0xa, &(0x7f00000001c0)=""/10, 0x41000, 0x8, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0xd, 0xfffffffb, 0xfffeffff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000300)=[{0x0, 0x1, 0x1, 0x6}, {0x0, 0x4, 0x4, 0x1}], 0x10, 0x7fff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x43}, 0x94) 2.796818831s ago: executing program 4 (id=1071): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x0, &(0x7f0000000100)}) mkdirat(0xffffffffffffff9c, &(0x7f000002b8c0)='tracing\x00', 0x1ff) mount(0x0, &(0x7f000002b940)='tracing\x00', &(0x7f000002b980)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000002ba80)='tracing/events/xfs/xfs_rmap_convert/trigger\x00', 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@mpls_delroute={0x24, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, {0x1100, 0x2}}]}, 0x24}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x80489439, 0x0) 2.72500653s ago: executing program 0 (id=1072): syz_io_uring_setup(0x66e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100, 0x1000000, 0x20000}, &(0x7f0000000040), &(0x7f0000000080), 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_open_dev$video(0x0, 0x8, 0x20000) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000000)={0x2, {0xe, 0xfffffc01, 0x1000}}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x40, &(0x7f0000000080)=ANY=[]) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) 2.619938572s ago: executing program 1 (id=1073): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000020000006a0a00fe00000000850000000b000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868ee30a0e8c1bf176db2a6b2feb4b6fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872971c7c"], 0x0}, 0x94) socket$unix(0x1, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="040e05003e20"], 0x8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000040)='GPL\x00', 0x210000, 0x0, 0x7fff, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="ad5a97"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="200103"], 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="ac184d"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000040)) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000200)={0x1, 0x87, 0x6, &(0x7f00000000c0)={0x50, "c7070000813ebc6600000087000200ce618e6361d39f5100"}}) 2.4648496s ago: executing program 4 (id=1074): r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000003400), 0x42300, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0x0, 0xf000, 0xfd, 0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1}, {0x1, 0xddccb000, 0xa, 0x0, 0x0, 0x7, 0x2, 0x10, 0x0, 0x1}, {0x0, 0xb000, 0x18, 0x8, 0xc9, 0x4, 0x3, 0x5, 0x80, 0xe, 0x4, 0x6}, {0x10b002, 0x2000, 0xc, 0xfd, 0x80, 0x0, 0x3}, {0x1000, 0x0, 0xd, 0xfa, 0x70, 0x80, 0x0, 0x0, 0xfd, 0x1c, 0x7, 0xa8}, {0x100026fff, 0xcccd4000, 0xd, 0x4, 0x0, 0x8f, 0x0, 0xb, 0x6, 0xfc, 0x86, 0xfe}, {0xeeee8000, 0xe000, 0xb, 0x0, 0x5, 0x0, 0x0, 0x80, 0x3, 0x4, 0x7}, {0x100000, 0x41000, 0x3, 0x82, 0x0, 0x10, 0xe8, 0xe, 0x0, 0x0, 0x7}, {0x100000, 0x1}, {0x1, 0xfffe}, 0x10000, 0x0, 0x0, 0x10, 0x1, 0x800, 0x900, [0x17a, 0x0, 0x10000, 0x5]}) ioctl$KVM_SET_MSRS(r6, 0x4140aecd, &(0x7f0000000100)) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0xff7b) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x8000002, 0xc5, @local}, 0x1c) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000001900)={&(0x7f00000018c0)=[{0xf, 0x4401, 0x93, &(0x7f0000000300)="ce9e45b312c447971ee0e4060e0a80bc4571647ed63d7dbac7cc4b941fe547229b1658388c20597801a266d02442c75153251994d35d2ec1f9ddab12d9efb52fe15f466162d4f34d2e8c495fb7398e48e60d3012e85f33ac1bd024bc00bbb0a1d710109d0f336919dd85e06aecbe7a16e024fc52dc26aaa78a1f874b125ca5f60f3d13c3fc1ea95527ca45a6995fecc06dd558"}, {0x3ff, 0x1a00, 0x1000, &(0x7f00000008c0)="7bf14b13b32ddee4594ca18dc3f9886f9a891aa6c94a3f24c932cb5209fc3b3906b10154d1387e442d80d7ad7c16fcabba66f2cde26d9d2c6a250929aa9e29c67d7d64459ae24adb6c75b33900e97c21f2e97c59d48f69ea4bd5c06fc65f7b496abc8710f97caf808cd7482ff6bc5008f91b621a4ec2d7f05c53c77bca8faeaa5b5e86969df5a21605f5505de856f4aeca0db3c29c96ead123d15b1b975ee682bc3d93d8339c6ca2306f417d8cf2a6c350e0191582fae6e940c2cffe39529562401bb60e6fc115fcd5168be4a73390196362b7caa2f77eb976723fa04f25ce171422ebac3a28848d06392fa847259bbbe8f50b9a9731d1f87afd69ef994ccd6443e7d22f31e21e3d44e31e29503726825aa03bf1063754abab5c23ea63f4d0c675529894dbdd7ae083db1a40db8a5fc450e3a1e9ca1afeb77523f6765a657cf6787c30b1aba361120d84179c60e9d2886c493b9a124f64079682076590896779a28d088353756af3a1f8970f1edf4d94e7642b561d9745e411aec107939aea87cc5e6718fbae75a02a363401c62c170dac6fc209523523d3f0896c05a0ff76676d79a8ee66c7479ad0e7626cd09605edd9adfcddf8e42f3b4076225441d389c4a335e6272003b62b5aa541a63cb70c5d2f8bb0d5f3b7e4b0132d4e180500ac92bbca33dc0d6a48d2de8f0713fd7de6c7f4c034c59bef5765ed4c9a927d3a72ca483255c2d3267ab806ab0f514eccf9e93468a3d3eae184f54d54812d5cb95004073a0b27af814d34cfa8af00110e9c5be6fd9daaf080d4891e969f175f84e0868f958a3a48b6db6c8cce3f1e99e91fdd8c13c2a3ff6c5ae03adae720be72a14d7ab75ceec7f134bd533810cb5e18f80102bd34d2cd929a33266d4aa10b59185345e8b8fc8e9bdc7264e85c3d1d9045a4eebf2c498599dbe0c63460dea0eff2958b10b55ceb9d108f49a4c36cee1c206950e9d37c7dd0b29370915729cb4ce06fa960bdf559a765bc1388a5191191dc83e0065035e9f7f3127f21200b35ea6267bcb5214dcb96cde9a6648b366ef9ae769f6f8cd073f83b6ba33aab9e71e400a30588996761089287d52fca278523fec3ab6248d8bcba0fbb7bd6aa49a3e42f3905eb76139400de590bd9392861ecd3b466bf05ae1f2d3ac4a70f48fe25df25b07dd1a9d7d3740edac24e3fe63cfa40c97c9a30216c1aaf556af5bdd96b674d63c55e42f4851da99ec458043757e5f5fceeb5a963251b9ddf1a772373bf2fde6e539b520faf47731d0f41ad252b6a1e6937e6d182178d5351965b5fb6a39a86bd201e70d7ede7abe965ddd1c0c872785fdfc6abc8ac4fa5a712500953f55695c3f7596d27f2e7c4538b07a0750818e0c7d3d4b7db8d9f8c766bd48f38b3fb19a8e1481e4be45f981e48b323e7384df80ed77ebe7483ee69bd7212692c35e5601cf0485df397ba920c5305a67c3576d1d9510165914c9143d2fdf8830bfa0ee8a1f8928968db73e66a60bc7ce600b0415ec4b5c16aca78b0f1875af23f290d7e8e7e9a9b131867001954ae22457c0ca61a71b29745c72adafb275de0bd21aec588fbd15c0447e6d3b60179470ca6645082cb69312dd50913f7f3468660f0a8e9fc37fadd58e473506c88c97734815c8ac56cf145439084d092b3ae580caa0cf1adfec1211a39f2fae020d67af99fc27812d0e3c2704447c7e5c44cfd8f336abff3173bb472b9e00df8df221b686bee5898812b2b3aba8c1beac0d6a8accf216c26b08bd146766912f15fc711adc8f9a007680d91a4e4c03f5e52a892c3d62ae2831f8cdba911937eb261367e5848564eb106c3c5dac34a4d029daa2e71c815e67a3a0ef7bf39b14e575ba311959cd791c9a748c87360ce85668c81c8b2d16318fd14e5028c009761565513916038d7841efd0b6a0e0b54d3a353ff4c942a7cb0aba20a1af84d59b2b02bf18465e11f7270ea44a919be57a24f8cabc2eaf0d69d556e427cc62db4631fd02d6ee84cc45d50bc3da8fc861f37f87bd0c89d13a70c089615c818b89f5e93e0f3959407ead56d472fe38e35e94864d6deafe560ed253d7113d7478dede68c3ec88355742867aea8c09fda8e56c0286f0295db974a5dac33d33adb822da92b2c6efcd417ed8aa30d820ee9d3cabaa84dbf7db4484fb6c026d8e57f8b8fa9a43b23695b354f8ac14aca5487f9b63b90026b8a74aede1a450a73eab7c2889dd90a3e20378aa9ddb94ff1ea845ec628b92bebdcc490b67f7311c594acd3f8eccd19af680000ca72ef7cd259857b6955d468bf3fc64599f374675bfe02c99d6026a9f97c820afb5601ad089c678a912cb0a8affc7f74cac16a0374ac858ca4c1020b0992c39a3234620a2fac463edea5eb79c26c98f6cb52dcea5850c16486388ba69e1544a9bac27dbb2d5a9043929a85f1c1b0b743cc73d13ea4332b7508a049de1dea554ab170f1a7a341ad51a1e5d9d2c52874fe5d259ea88618834ddfc348f2e7361737220fc99d7916cb5f52bf5dd9847ba6e0089b89652e9d47dbceaadb7fc7b81d77c06287a4e84929c653756ef039b29dc6f542a1fdfe3d0e6807af1ab31ed3f56207769b7036ada443de735eafb2eaef59f7cf8e44213861ed70b887803d98a4bd31bde881a269786d12573f76ac733f2be24e917c577c6b19f91cb70be717871d944af9382c35c24c16a0fed1d86b4497f1769110a5c8d518d8e88753b9449956069368b3cbe80d53120a4d84d4bb6427b33048470dbbacdea034fbfe0a23a46f7aea50e755665b15382a8c8bf2323fc05a666488d626a8e9f543c677762692d7b53d5d15e8bef18217582cf5a107db2ce806de3323696f61b5c0b50741ae75385caee2db51829fa384d73f19ba844abf442ba6de6691ce6abde6a0516f198391b575e2b848bdd231233380b92ead180b9cfed39b7c30d617addfb436748f27c62da4eb619cd8cc65292f1f1d49fa6a40c0b3a96fab112fd2ed099fcdab8701dde49adc10530a0b2ba8190547fef2e1f474f2e4c06621f50817b79362df08a98eb5a4985cd1df7522548a1f22955bc66638da556c22e3f84aeaefaa3cf110f6ee75aac583fa2a269c409114722f7ed54fd679a42e4778bb0640e024fdedd4bb2e99a3ac1ba193371633749dba3dd1693d63ef51abe6582ff9765fd38607743d3b175c136d243db13a15a5eb7573f69b5c982040d2c26d4b96441a63368765a20d604a110ddf6aa74d07a03a7873d9a4418b38983a2c12e726db107ddd2fff2e0481c2e6d439f6d5610543d76101275c500486b487ec7332dbd16c119da484f8c97b8da577dc298277fc87b17a5ee88d85eccb4d717a2026ac297221065460318d5089502386777182924ae32449526809786eff0bad9ae6dad58498cdff1c69a156fc96cc0990e8487e85a8cd157dce9fd157a2979ae0487dd26f3d3ef58bbecdddd34b8b1ac727d6bd499f5d26e169edbd04efe7bb5b179754c812510bd43c060dbefb4798c0e5ce5d7f56d1702cff9e7d2b1f04970dad3033eb7f84d2c5eefd885d277ee1a8a446997430abf14c0c2eb1a86cb935fa558a239df9a5b90d4ca1ef00d30cbacfc15da1919e38f2ec8c563da9911fc98c484782029e449c18491e2bdc20eea187281f50689b700f6fc0886ae54abcfbe2e0caa5cbba4e8894fe128d629c9d45def54933fe61b2a57fb0e0d05ac1c8e04c8b3838b28ef228d421e933cea79ff41ac3aa84688bdc8a9e1f76b8f768b7b455e12f69329c523dcce41d7f5b2648c880cc090d553ec77b182706a02a9712fde0a7952733bb1c5c3d43fb43bcb83f70674571acf18c863860cb7e818743f69d4a9914e05d174be428bf4e88991442f2c787c0b15a101044ecc9b1f8f17f62698dc9fc85f1e136d91abbb5431588f1e40d3001ba520d14e0982b27d8ddca4a61daf38f3644b022bbe83a82d8772b67e35c96961b381029248f5d231b942e1b8475d5023dc68f8c0cae1a25f9e9c533b300a37cbc1fbddb160556ac0e7d870646d1809e7e23eea2e54daad7e47e536ef9ad1df67090412e4423f09632ce345e0b90753a649734e917488d112ae268a032879a92d8722b02cbcc15ad22cc09d3b1db409fba0246badbb8a3a0389ecca1ad8ab6e67241939d799a1ce9a434e213bbfa5c9d761ff3e24c73e2a39445a2743c7f58a41cd8ad1a05eac22fc7912d335f96136fe4cef7e1e76aed1c07d2aac96d0ecc2b5fc381609d4c3238bc88a4c2ddd8a15c444a270f2cad8e20ae8fbe89f252d547812ebef7b3a8b98c0ce5ad22d12c8a0271f89003a09e6608fa2369e51189b1b1d9d5a1d70425d6f786c85fe6c3faf4eb5f2e891bfe61956ae217dcc7db6a433381949800b80c4d985118ee5c416031d6673ba48fa00503de0a35fb69afeb171a12afcfe0eff27b5c80513789684f3740936a36fb3b91c5e09705daef2ecdee16cc03cf27d5a49ecabbbc02312c7bcf1c9577b7c71a14eb418942baaa5adafb9007567256299b410d86835bc7848e555bb22d8f1b3278acaa4b41d228f1b144909cd8d19862fd53b2fd550e82c1c7b79156abcbd5ee27d4f6fe6e30214d234097d86faa818007e0a5136f895f1f4f3e365dfc15be2c816ab293e3d06c43a9e2afb28212a22854b42e4b45a2bb6a9ae7fd7a3d4b1b34f7a3fd49c5241d89179e36f4fe7fc9636b1de78f3e1a072faa9e910ef02086ffc4735f919b0a51ad4abba6456f3ecd08c7128e5c62794554a466c92563ca721a74c190aed90ad2697162ec2975508427cc2cdbbcd57f5d43a37a4e5ec3d28bc9297553d3abb91ae5fee55279a3935a8a99b4e174c6205f6404cf2cdd5b8fdcd5f0ca97b480f0b532d0f78b3c5253cdcc71c1f9be1149017bdb787ab4f6f958a3d473268cdaf15574a184c6ecf35bd33f220ede78809fdeb966eba827d1c2e9e0ef0e7d9566f641095b5a900381ad96a204d4f6c30741e2fd8ec3fb991e2a863a23a81944df1137e9d536b077f1998f58486a0fe676f68c67a04759cea5655e150af74874edbade3ac23e04d628575105f7266a8e77f884b39d868205ebdf6633508825b939088816fcd5fe548f50bed232fc30e7365ee7294fa600f06c7f6b7b97e7c01d1aec6b972aece8f8e35a7e1ad301ce765bfbdbfef474d3e4ba78f0228dd427fe26ba91e6f4545424009ad6b09f21fb1c32927c15daea458002bf91bc1f0497f8508dfcc9a83850c0765b47e822881bb0a2dd311563a65fc7e0e1f4d3d050cb2fba7af8ec93f68a2983d6e84b1e30f378c36359a4abe2183023ee97640403a6e4536fcdaba77db7abf7f8988d7ebaca3a979822bdd978ef07ba49c7ab8e455d387db29cbcf81eca520c7554227c312f9ca0a795c53e31e8de060ccc0805f3b650b99ee73dab30e4319f3dc75b69bdf59d836f7ba6f25494afa1fe4678d9ed25d9bf9946a7f4345ef2b06d5f6e14f69b94439827d7543233fa6a4e7d403de49013b8a2a2910cfe5982020fa7bf2fc63206bfd556057f27672543ff8f75bed04a939a7885f29c2a68d16383db5c40756465182de93b8485634444869a9a24feb29726843fc7d0802fb4bfd0c759cead60fa7196e1a12f725db48ae875bcaab337f4ba7447a37750d0d4176508c0ffab0ca1af17be9b67e1544dfc0e9f11c072049f31dd49588afe5bbbc47e783119e6786c05b2d4d27ad35a133ad3ce8857166e4b2a4ccaf3b564b4415b8816396d88046e817f2d783472d2c14b64182895a2bd098df51c374a041edc3ada4cef16e46b36f097"}], 0x2}) r9 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r9, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000100)={0x1, 0x0, [{0x1, 0x0, 0x5, 0x7, 0x800, 0x7fffffff, 0x2}]}) close_range(r0, 0xffffffffffffffff, 0x0) 2.444526633s ago: executing program 3 (id=1075): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000200)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0}, 0x300060c1) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 2.298013063s ago: executing program 3 (id=1076): r0 = socket$rds(0x15, 0x5, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000002ac0), r2) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000002b40)={&(0x7f0000002b00)={0x14, r3, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x4010) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000400)={0x4, 0x0, [{0x4, 0x53, &(0x7f0000000080)=""/83}, {0x9000, 0xaf, &(0x7f0000000200)=""/175}, {0xe000, 0x16, &(0x7f00000002c0)=""/22}, {0x26000, 0x61, &(0x7f0000000000)=""/97}]}) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f00000001c0)=0x304008000) r4 = syz_usb_connect(0x2, 0x58, &(0x7f0000000080)=ANY=[@ANYBLOB="120110038e3ac6209406010013780102030109024600020e061003090439d8011adaa8080905081020000709800904e40503b956da020905080000040112fc09050b13200007039a0705d15b89"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00fce700000000000000"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) getsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f00000006c0), 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r5, &(0x7f00000034c0)=[{&(0x7f0000002340)=""/4096, 0x1000}], 0x1) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/cluster/comms/1\x00', 0x1ff) r6 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x104a, 0x28900) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r6, 0xc1105511, &(0x7f0000000740)={{0x5, 0x5, 0x4, 0x0, 'syz0\x00', 0x3ff}, 0x1, 0x100, 0x40, 0x0, 0x0, 0x2c, 'syz0\x00', 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) write(r7, &(0x7f0000000300)="020000007f00000100"/128, 0x80) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f00000003c0)={0x1}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r0}) 1.313415691s ago: executing program 4 (id=1077): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) accept$alg(r5, 0x0, 0x0) r6 = dup(r4) syz_ublk_setup_queues(r6, r3, &(0x7f0000000880)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 1.308695998s ago: executing program 2 (id=1078): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000dc0), 0xffffffffffffffff) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r4, 0x227b, &(0x7f00000000c0)=0x2001) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r4, 0xec776000) pselect6(0x40, &(0x7f0000000180)={0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x808, 0xfffffffffffffffd, 0x4, 0x10000000}, 0x0, 0x0, 0x0, 0x0) readv(r4, &(0x7f0000000a80)=[{&(0x7f00000009c0)=""/65, 0x41}], 0x1) r6 = fcntl$dupfd(r4, 0x0, r4) write$sndseq(r6, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0xfffffffe]}}, {0x0, 0x0, 0x3, 0x0, @time}], 0x38) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000e00)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x24, r3, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c000}, 0x54) openat$autofs(0xffffffffffffff9c, 0x0, 0xc202, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000200)=ANY=[@ANYBLOB="12010002000000404b0c00010001000000010902270001010080320904000003ff0000000705830308000a0705810220000007050202"], 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev/ttyUSB0\x00', 0x2, 0x0) write$vhost_msg_v2(r8, 0x0, 0x0) r9 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r9, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 913.826087ms ago: executing program 2 (id=1079): r0 = openat$cuse(0xffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$FUSE_LSEEK(r0, &(0x7f0000002440)={0x18, 0x9, 0x0, {0x29}}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = socket(0xa, 0x3, 0x3a) syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fe857108480b0730644f010203010902120001000000000904"], 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) read$FUSE(r2, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x2, 0x1, 0x40, 0x0, 0x2}, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000440)={'bond0\x00', @ifru_names='netdevsim0\x00'}) ioctl$SIOCGETMIFCNT_IN6(r1, 0x89e0, &(0x7f0000000080)) 780.599942ms ago: executing program 3 (id=1080): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000200)={0xfffffffffffffcfd, 0xffffffffffffffff}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280), 0x8, 0x8b, 0x8, 0xfffffffffffffe5c, 0x0}}, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="60010000", @ANYRES16, @ANYBLOB="01000000000000000000140000000c00078008000200ff7f00000c00068004000200040005009000058007000100696200000700010069620000440002800800020007000000080004000400000008000400040000000800010017"], 0x160}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES64=r1, @ANYBLOB='\b\x00gA'], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) write(0xffffffffffffffff, &(0x7f0000000138)="0000000000000000008000000000000000000000000000007468696e2d706f6f6c00000000", 0x25) ioctl(r1, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e01000038010000010000000000000000000000000000000000000000000000000000006d79706f") bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_connect(0x2, 0x24, 0x0, 0x0) fsopen(0x0, 0x1) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) syz_usb_connect$uac3(0x6, 0xef, &(0x7f00000007c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x499, 0x1017, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdd, 0x3, 0x1, 0x8, 0x10, 0x5, {0x8, 0xb, 0x2, 0x2, 0x1, 0x1, 0x30, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x40, 0x2}, [@power_domain={0xe, 0x24, 0x10, 0x8, 0x0, 0x9, 0x4, "eeccf011bf"}, @input_terminal={0x14, 0x24, 0x2, 0x3, 0x101, 0x3, 0xfb, 0x10, 0x3ff, 0x0, 0x9, 0xfff2}, @source_unit={0xc, 0x24, 0xb, 0xae, 0x0, 0x7f, 0x3, 0x3}, @mixer_unit={0x8, 0x24, 0x5, 0x6, 0xff, "4120d5"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x0, 0x1, 0x7, {0xa, 0x25, 0x25, 0x9, 0xc7, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x4, 0x0, 0x67, "2797ac11289df09b45"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0xe, 0x4, 0x5, 0xff, "3675c2e72f"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x100, 0x10, 0x0, 0x6}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x8000, 0x9, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xd, 0x0, 0x1, {0xa, 0x25, 0x25, 0x5, 0x6}}}}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x4547df8c9b56a158, 0x6, 0x4, 0x8, 0x10, 0x43}, 0x55, &(0x7f00000006c0)=ANY=[@ANYBLOB="050f5500020710020888b424f8dbaafbd7e55d7eadbf0309c6eb098d006be2d69496520ce90250fee9183c079a634cd173a7d6d7d5211cb69f6c4ccb06c648c16ce0ac3f7378ff87a6b4fcd391d984ed"], 0x1, [{0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x42f}}]}) syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010003c3b6f640fd0b12019e9d010203010902240001040b10b40904"], &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) accept4(r6, 0x0, 0x0, 0x800) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000180)=[{0x5, 0x4000, 0x0, 0x0}], 0x1}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) 560.639683ms ago: executing program 0 (id=1081): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) listen(r0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 543.652578ms ago: executing program 0 (id=1082): r0 = userfaultfd(0x80801) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) prctl$PR_SET_SECUREBITS(0x1c, 0x7) setfsuid(0xee00) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc000, 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000100740)={r1, 0xffffffffffffffff, 0x5, 0x0, @val=@netkit={@void, @value=r1}}, 0x1c) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r1, 0xffffffffffffffff, 0x5, 0x0, @val=@tracing={0x0, 0xfff}}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000040)={0x5, 0x80000, 0xffffffffffffffff}) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, 0x0, 0x3, {0x1, 0x0, 0x6}, 0xff}, 0x18) r3 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev/ram0\x00', 0x2, 0x0) pwrite64(r3, &(0x7f0000001004)="01", 0x1, 0x1004) fsync(r3) openat$sequencer(0xffffffffffffff9c, 0x0, 0xa0200, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="b7000000ff00001fbfa300000000000007030000f0ffffff620af0fff8ffffff79a4"], 0x0}, 0x94) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000003f0009000000000000080000030000000400000010000180"], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x4) 494.08938ms ago: executing program 0 (id=1083): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x14e1}], 0x5) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x2) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) syz_open_dev$ttys(0xc, 0x2, 0x1) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0xb0e, 0xffffffff, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf8, 0x10, 0x9, "", [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x3, {0x9, 0x21, 0x7ff, 0x2, 0x1, {0x22, 0xede}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x5, 0x7, 0x9}}}}}]}}]}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000000)={0x0, 0x3, 0x1008, 0x1}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$MEMERASE(r3, 0x40084d02, &(0x7f0000000000)={0x7, 0xe}) 154.26595ms ago: executing program 4 (id=1084): r0 = socket$rds(0x15, 0x5, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000002ac0), r2) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000002b40)={&(0x7f0000002b00)={0x14, r3, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x4010) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000400)={0x4, 0x0, [{0x4, 0x53, &(0x7f0000000080)=""/83}, {0x9000, 0xaf, &(0x7f0000000200)=""/175}, {0xe000, 0x16, &(0x7f00000002c0)=""/22}, {0x26000, 0x61, &(0x7f0000000000)=""/97}]}) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f00000001c0)=0x304008000) r4 = syz_usb_connect(0x2, 0x58, &(0x7f0000000080)=ANY=[@ANYBLOB="120110038e3ac6209406010013780102030109024600020e061003090439d8011adaa8080905081020000709800904e40503b956da020905080000040112fc09050b13200007039a0705d15b89"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00fce700000000000000"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0003020002034aa246ff1a8ba26df5ceb83bd1ea1c0b84687f5cc7762e233ec56fef52e907adb17a828091b79f21190f7e26faf0326025d4b40d14e53ce5926abe63d22b0651cf49c60b0100000000000080158d73a766d4e63d3163e2522b789dd34bf8c7a7af424caba13098b55d75471bb399a5939cedc39e74f98a6120bf696f5493a8edc154ae201cdf5de73247912cb4a46fad43cc07c8bc4cf3689a3c0b4ac189e59be242d90803a70e13fcca2bd454835c9f01301ad2e18286edec481e96064a095e216ffe041adec5675599f8791c96c739d7832867c1ed84a0337f361d7a58d4c65ed88b8a5f5dcf7eaedf43d7e7131686b41a2b9b21bd891c5e620ee1a3e7af1dd6d2d30ecf66f42811107430dd835ae40bb4b7c4295dce6888be0a494268a6dbe1cab4e4ca5029695833b2c17b854ea23a11424c53d2ffd47bc1532319f548"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\b\b'], 0x0, 0x0, 0x0, 0x0}) getsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f00000006c0), &(0x7f0000000700)=0x4) syz_usb_control_io(r4, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000000440)=ANY=[@ANYBLOB="201404"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r5, &(0x7f00000034c0)=[{&(0x7f0000002340)=""/4096, 0x1000}], 0x1) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/cluster/comms/1\x00', 0x1ff) r6 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x104a, 0x28900) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r6, 0xc1105511, &(0x7f0000000740)={{0x5, 0x5, 0x4, 0x0, 'syz0\x00', 0x3ff}, 0x1, 0x100, 0x40, 0x0, 0x0, 0x2c, 'syz0\x00', 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) write(r7, &(0x7f0000000300)="020000007f00000100"/128, 0x80) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f00000003c0)={0x1}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r0}) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0x36, 0x0, 0x0) 0s ago: executing program 1 (id=1085): socket$inet(0x2, 0x1, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x10000) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x20004010) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000190c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_procfs(0x0, &(0x7f0000019080)='comm\x00') writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r3, &(0x7f0000019180)=""/102365, 0x18fdd, 0xff) kernel console output (not intermixed with test programs): dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 363.296170][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 363.296890][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 363.296928][ T10] usb 1-1: media controller created [ 363.335610][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 363.389317][ T5720] appletouch 4-1:0.85: Geyser mode initialized. [ 363.391368][ T5720] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input37 [ 363.518828][ T5783] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 363.550622][ T10] az6027: usb out operation failed. (-71) [ 363.550942][ T10] az6027: usb out operation failed. (-71) [ 363.550954][ T10] stb0899_attach: Driver disabled by Kconfig [ 363.550963][ T10] az6027: no front-end attached [ 363.550963][ T10] [ 363.551241][ T10] az6027: usb out operation failed. (-71) [ 363.551251][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 363.556060][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input38 [ 363.590702][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 363.590722][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 363.626612][ T10] usb 1-1: USB disconnect, device number 41 [ 363.668842][ T5783] usb 5-1: Using ep0 maxpacket: 8 [ 363.669563][ T5783] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 363.673017][ T5783] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.673041][ T5783] usb 5-1: Product: syz [ 363.673055][ T5783] usb 5-1: Manufacturer: syz [ 363.673068][ T5783] usb 5-1: SerialNumber: syz [ 363.797932][ T5698] usb 4-1: USB disconnect, device number 44 [ 363.811433][ T5783] usb 5-1: config 0 descriptor?? [ 363.846646][ T5783] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 363.846685][ T5783] pctv452e: pctv452e_power_ctrl: 1 [ 363.846685][ T5783] [ 363.846720][ T5783] usb 5-1: selecting invalid altsetting 3 [ 363.846735][ T5783] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 363.846735][ T5783] [ 363.846749][ T5783] dvb-usb: bulk message failed: -22 (5/0) [ 363.897443][ T5698] appletouch 4-1:0.85: input: appletouch disconnected [ 363.914184][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 363.916028][ T5783] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 363.916789][ T5783] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 363.916825][ T5783] usb 5-1: media controller created [ 363.916856][ T5783] dvb-usb: bulk message failed: -22 (8/0) [ 363.916867][ T5783] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 363.916905][ T5783] dvb-usb: MAC address reading failed. [ 363.917673][ T30] audit: type=1326 audit(1789597725.998:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8855 comm="syz.2.878" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31a7f9e159 code=0x7ffc0000 [ 363.917779][ T30] audit: type=1326 audit(1789597725.998:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8855 comm="syz.2.878" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31a7f9e159 code=0x7ffc0000 [ 363.918629][ T30] audit: type=1326 audit(1789597725.998:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8855 comm="syz.2.878" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f31a7f5e98e code=0x7ffc0000 [ 363.946371][ T30] audit: type=1326 audit(1789597726.008:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8855 comm="syz.2.878" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f31a7f5e98e code=0x7ffc0000 [ 363.946413][ T30] audit: type=1326 audit(1789597726.008:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8855 comm="syz.2.878" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f31a7f5e98e code=0x7ffc0000 [ 363.946450][ T30] audit: type=1326 audit(1789597726.008:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8855 comm="syz.2.878" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f31a7f5e98e code=0x7ffc0000 [ 363.946487][ T30] audit: type=1326 audit(1789597726.008:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8855 comm="syz.2.878" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f31a7f5e98e code=0x7ffc0000 [ 363.946523][ T30] audit: type=1326 audit(1789597726.018:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8855 comm="syz.2.878" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f31a7f5e98e code=0x7ffc0000 [ 363.946560][ T30] audit: type=1326 audit(1789597726.018:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8855 comm="syz.2.878" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f31a7f5e98e code=0x7ffc0000 [ 363.946596][ T30] audit: type=1326 audit(1789597726.018:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8855 comm="syz.2.878" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f31a7f5e98e code=0x7ffc0000 [ 364.094040][ T8851] bond0: (slave netdevsim0): Error: Device can not be enslaved while up [ 364.260916][ T5783] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 364.316648][ T5783] DVB: Unable to find symbol stb0899_attach() [ 364.316664][ T5783] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 365.252454][ T5783] rc_core: IR keymap rc-tt-1500 not found [ 365.252521][ T5783] Registered IR keymap rc-empty [ 365.414344][ T5783] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 365.446898][ T5783] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input39 [ 365.477415][ T5783] dvb-usb: schedule remote query interval to 100 msecs. [ 365.477437][ T5783] pctv452e: pctv452e_power_ctrl: 0 [ 365.477437][ T5783] [ 365.477447][ T5783] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 365.509424][ T5783] usb 5-1: USB disconnect, device number 42 [ 365.537964][ T8864] netlink: 'syz.1.880': attribute type 2 has an invalid length. [ 365.537979][ T8864] netlink: 'syz.1.880': attribute type 2 has an invalid length. [ 365.657081][ T5783] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 366.018184][ T5720] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 366.464046][ T5720] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 366.496583][ T5720] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 366.496618][ T5720] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.496640][ T5720] usb 3-1: config 0 interface 0 has no altsetting 0 [ 366.496705][ T5720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.796285][ T5720] usb 3-1: config 0 descriptor?? [ 367.070560][ T8886] FAULT_INJECTION: forcing a failure. [ 367.070560][ T8886] name failslab, interval 1, probability 0, space 0, times 0 [ 367.070591][ T8886] CPU: 0 UID: 0 PID: 8886 Comm: syz.0.887 Not tainted syzkaller #0 PREEMPT(full) [ 367.070614][ T8886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 367.070626][ T8886] Call Trace: [ 367.070631][ T8886] [ 367.070639][ T8886] dump_stack_lvl+0x100/0x190 [ 367.070670][ T8886] should_fail_ex.cold+0x5/0xa [ 367.070696][ T8886] should_failslab+0xc2/0x120 [ 367.070722][ T8886] __kmalloc_cache_noprof+0x91/0x6d0 [ 367.070751][ T8886] ? bus_add_driver+0x92/0x5b0 [ 367.070775][ T8886] bus_add_driver+0x92/0x5b0 [ 367.070796][ T8886] driver_register+0x1e2/0x360 [ 367.070818][ T8886] ? rcu_is_watching+0x13/0xc0 [ 367.070844][ T8886] usb_gadget_register_driver_owner+0x132/0x210 [ 367.070868][ T8886] raw_ioctl+0x1a85/0x2b80 [ 367.070892][ T8886] ? __pfx_raw_ioctl+0x10/0x10 [ 367.070909][ T8886] ? selinux_file_ioctl+0x13b/0x290 [ 367.070929][ T8886] ? selinux_file_ioctl+0xb6/0x290 [ 367.070950][ T8886] ? __pfx_raw_ioctl+0x10/0x10 [ 367.070969][ T8886] __x64_sys_ioctl+0x18e/0x210 [ 367.070991][ T8886] do_syscall_64+0x123/0x790 [ 367.071019][ T8886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.071038][ T8886] RIP: 0033:0x7f4b2e79ddeb [ 367.071053][ T8886] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 367.071068][ T8886] RSP: 002b:00007f4b2f6b2f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 367.071088][ T8886] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f4b2e79ddeb [ 367.071100][ T8886] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000008 [ 367.071111][ T8886] RBP: 00007f4b2f6b3fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 367.071122][ T8886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 367.071141][ T8886] R13: 0000200000000000 R14: 0000000000000000 R15: 0000000000000000 [ 367.071166][ T8886] [ 367.071173][ T8886] UDC core: USB Raw Gadget: driver registration failed: -12 [ 367.071188][ T8886] misc raw-gadget: fail, usb_gadget_register_driver returned -12 [ 367.200728][ T5789] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 367.305356][ T10] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 367.353620][ T5789] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 367.357129][ T5789] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.357164][ T5789] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.357218][ T5789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.363606][ T5789] usb 4-1: config 0 descriptor?? [ 367.413980][ T8892] sd 0:0:1:0: PR command failed: 1026 [ 367.414027][ T8892] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 367.414099][ T8892] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 367.481948][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 367.482390][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 367.482416][ T10] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 367.483243][ T10] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 367.483264][ T10] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 367.483309][ T10] usb 2-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 367.483326][ T10] usb 2-1: config 14 has no interface number 0 [ 367.483340][ T10] usb 2-1: config 14 has no interface number 1 [ 367.483382][ T10] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 367.483402][ T10] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 367.483424][ T10] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 367.483448][ T10] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 367.483473][ T10] usb 2-1: config 14 interface 57 has no altsetting 0 [ 367.483491][ T10] usb 2-1: config 14 interface 228 has no altsetting 0 [ 367.486280][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.486301][ T10] usb 2-1: Product: syz [ 367.486315][ T10] usb 2-1: Manufacturer: syz [ 367.486329][ T10] usb 2-1: SerialNumber: syz [ 367.525988][ T5720] usbhid 3-1:0.0: can't add hid device: -71 [ 367.526068][ T5720] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 367.549096][ T5720] usb 3-1: USB disconnect, device number 33 [ 368.405994][ T10] legousbtower 2-1:14.57: interrupt endpoints not found [ 368.424628][ T10] legousbtower 2-1:14.228: get version request failed: -71 [ 368.424762][ T10] legousbtower 2-1:14.228: probe with driver legousbtower failed with error -71 [ 368.461230][ T10] usb 2-1: USB disconnect, device number 38 [ 368.609310][ T5789] usbhid 4-1:0.0: can't add hid device: -71 [ 368.609404][ T5789] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 368.618527][ T5789] usb 4-1: USB disconnect, device number 45 [ 368.766145][ T8899] FAULT_INJECTION: forcing a failure. [ 368.766145][ T8899] name failslab, interval 1, probability 0, space 0, times 0 [ 368.766166][ T8899] CPU: 1 UID: 0 PID: 8899 Comm: syz.0.891 Not tainted syzkaller #0 PREEMPT(full) [ 368.766180][ T8899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 368.766187][ T8899] Call Trace: [ 368.766192][ T8899] [ 368.766197][ T8899] dump_stack_lvl+0x100/0x190 [ 368.766216][ T8899] should_fail_ex.cold+0x5/0xa [ 368.766233][ T8899] should_failslab+0xc2/0x120 [ 368.766248][ T8899] __kmalloc_cache_noprof+0x91/0x6d0 [ 368.766267][ T8899] ? bus_add_driver+0x92/0x5b0 [ 368.766282][ T8899] bus_add_driver+0x92/0x5b0 [ 368.766294][ T8899] driver_register+0x1e2/0x360 [ 368.766308][ T8899] ? rcu_is_watching+0x13/0xc0 [ 368.766323][ T8899] usb_gadget_register_driver_owner+0x132/0x210 [ 368.766339][ T8899] raw_ioctl+0x1a85/0x2b80 [ 368.766353][ T8899] ? __pfx_raw_ioctl+0x10/0x10 [ 368.766363][ T8899] ? selinux_file_ioctl+0x13b/0x290 [ 368.766375][ T8899] ? selinux_file_ioctl+0xb6/0x290 [ 368.766388][ T8899] ? __pfx_raw_ioctl+0x10/0x10 [ 368.766399][ T8899] __x64_sys_ioctl+0x18e/0x210 [ 368.766411][ T8899] do_syscall_64+0x123/0x790 [ 368.766427][ T8899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.766438][ T8899] RIP: 0033:0x7f4b2e79ddeb [ 368.766448][ T8899] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 368.766458][ T8899] RSP: 002b:00007f4b2f6b2f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 368.766469][ T8899] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f4b2e79ddeb [ 368.766477][ T8899] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000008 [ 368.766484][ T8899] RBP: 00007f4b2f6b3fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 368.766491][ T8899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 368.766498][ T8899] R13: 0000200000000000 R14: 0000000000000000 R15: 0000000000000000 [ 368.766511][ T8899] [ 368.766516][ T8899] UDC core: USB Raw Gadget: driver registration failed: -12 [ 368.766526][ T8899] misc raw-gadget: fail, usb_gadget_register_driver returned -12 [ 368.843276][ T8899] __nla_validate_parse: 3 callbacks suppressed [ 368.843293][ T8899] netlink: 24 bytes leftover after parsing attributes in process `syz.0.891'. [ 369.320567][ T8908] MPI: mpi too large (112776 bits) [ 369.480213][ T5789] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 369.633668][ T5789] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 369.636805][ T5789] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 369.636831][ T5789] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 369.636848][ T5789] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 369.636879][ T5789] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.657052][ T5789] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 369.657070][ T5789] usb 2-1: Product: syz [ 369.657078][ T5789] usb 2-1: Manufacturer: syz [ 369.670891][ T5789] cdc_wdm 2-1:1.0: skipping garbage [ 369.670912][ T5789] cdc_wdm 2-1:1.0: skipping garbage [ 369.702222][ T5789] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 369.702242][ T5789] cdc_wdm 2-1:1.0: Unknown control protocol [ 369.868832][ T10] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 369.876090][ T30] kauditd_printk_skb: 249 callbacks suppressed [ 369.876110][ T30] audit: type=1400 audit(1789597731.958:1854): avc: denied { read write } for pid=8910 comm="syz.1.895" name="cdc-wdm0" dev="devtmpfs" ino=3607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 369.879122][ T30] audit: type=1400 audit(1789597731.968:1855): avc: denied { open } for pid=8910 comm="syz.1.895" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 370.027962][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 370.028005][ T10] usb 1-1: New USB device found, idVendor=08ca, idProduct=2016, bcdDevice=f7.ed [ 370.036877][ T10] usb 1-1: config 4 has an invalid interface number: 4 but max is 0 [ 370.036906][ T10] usb 1-1: config 4 has no interface number 0 [ 370.036930][ T10] usb 1-1: config 4 interface 4 has no altsetting 0 [ 370.073967][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.074040][ T10] usb 1-1: Product: syz [ 370.074055][ T10] usb 1-1: Manufacturer: syz [ 370.074068][ T10] usb 1-1: SerialNumber: syz [ 370.398949][ T5789] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 370.548920][ T5789] usb 4-1: Using ep0 maxpacket: 16 [ 370.551921][ T5789] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 370.556250][ T5789] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.556283][ T5789] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 370.556337][ T5789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.564037][ T5789] usb 4-1: config 0 descriptor?? [ 370.623413][ T5790] usb 2-1: USB disconnect, device number 39 [ 370.799530][ T8933] sd 0:0:1:0: PR command failed: 1026 [ 370.799587][ T8933] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 370.799620][ T8933] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 370.815097][ T8928] digital: digital_start_poll: Unknown protocol [ 371.146924][ T8938] lo: entered allmulticast mode [ 371.157192][ T5789] microsoft 0003:045E:07DA.001E: ignoring exceeding usage max [ 371.159057][ T5789] hid_parser_main: 10 callbacks suppressed [ 371.159078][ T5789] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 371.159101][ T5789] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 371.159121][ T5789] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 371.159140][ T5789] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 371.159157][ T5789] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 371.159175][ T5789] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 371.159193][ T5789] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 371.159211][ T5789] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 371.159231][ T5789] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 371.159250][ T5789] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 371.160244][ T5789] hid_map_usage: 23542 callbacks suppressed [ 371.160256][ T5789] HID 045e:07da: Invalid code 65791 type 1 [ 371.161088][ T5789] HID 045e:07da: Invalid code 768 type 1 [ 371.161104][ T5789] HID 045e:07da: Invalid code 769 type 1 [ 371.161116][ T5789] HID 045e:07da: Invalid code 770 type 1 [ 371.161128][ T5789] HID 045e:07da: Invalid code 771 type 1 [ 371.161140][ T5789] HID 045e:07da: Invalid code 772 type 1 [ 371.161152][ T5789] HID 045e:07da: Invalid code 773 type 1 [ 371.161161][ T5789] HID 045e:07da: Invalid code 774 type 1 [ 371.161170][ T5789] HID 045e:07da: Invalid code 775 type 1 [ 371.161179][ T5789] HID 045e:07da: Invalid code 776 type 1 [ 371.176728][ T5789] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.001E/input/input40 [ 371.761679][ T8940] FAULT_INJECTION: forcing a failure. [ 371.761679][ T8940] name failslab, interval 1, probability 0, space 0, times 0 [ 371.761711][ T8940] CPU: 0 UID: 0 PID: 8940 Comm: syz.4.901 Not tainted syzkaller #0 PREEMPT(full) [ 371.761733][ T8940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 371.761745][ T8940] Call Trace: [ 371.761752][ T8940] [ 371.761760][ T8940] dump_stack_lvl+0x100/0x190 [ 371.761795][ T8940] should_fail_ex.cold+0x5/0xa [ 371.761820][ T8940] should_failslab+0xc2/0x120 [ 371.761844][ T8940] __kmalloc_cache_noprof+0x91/0x6d0 [ 371.761874][ T8940] ? bus_add_driver+0x92/0x5b0 [ 371.761898][ T8940] bus_add_driver+0x92/0x5b0 [ 371.761916][ T8940] driver_register+0x1e2/0x360 [ 371.761939][ T8940] ? rcu_is_watching+0x13/0xc0 [ 371.761966][ T8940] usb_gadget_register_driver_owner+0x132/0x210 [ 371.761990][ T8940] raw_ioctl+0x1a85/0x2b80 [ 371.762014][ T8940] ? __pfx_raw_ioctl+0x10/0x10 [ 371.762032][ T8940] ? selinux_file_ioctl+0x13b/0x290 [ 371.762052][ T8940] ? selinux_file_ioctl+0xb6/0x290 [ 371.762075][ T8940] ? __pfx_raw_ioctl+0x10/0x10 [ 371.762095][ T8940] __x64_sys_ioctl+0x18e/0x210 [ 371.762119][ T8940] do_syscall_64+0x123/0x790 [ 371.762146][ T8940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.762164][ T8940] RIP: 0033:0x7fa2e379ddeb [ 371.762179][ T8940] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 371.762195][ T8940] RSP: 002b:00007fa2e458cf00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 371.762224][ T8940] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007fa2e379ddeb [ 371.762238][ T8940] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000008 [ 371.762250][ T8940] RBP: 00007fa2e458dfd0 R08: 0000000000000001 R09: 00000000ffffffff [ 371.762264][ T8940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 371.762275][ T8940] R13: 0000200000000000 R14: 0000000000000000 R15: 0000000000000000 [ 371.762299][ T8940] [ 371.762386][ T5789] microsoft 0003:045E:07DA.001E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 371.764175][ T8940] UDC core: USB Raw Gadget: driver registration failed: -12 [ 371.764209][ T8940] misc raw-gadget: fail, usb_gadget_register_driver returned -12 [ 371.988878][ T5698] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 372.074445][ T30] audit: type=1400 audit(1789597734.158:1856): avc: denied { write } for pid=8948 comm="syz.1.904" name="instances" dev="tracefs" ino=4360 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 372.168710][ T5698] usb 3-1: not running at top speed; connect to a high speed hub [ 372.169462][ T5698] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 372.194276][ T5698] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.194318][ T5698] usb 3-1: Product: 圸ꌟ娨姪꟡윽짚ꮜ᳍饦帎꧘ᇐ砻垀δ☲⺀䦚鵖죱ᕃ婀栿♑髆忥嚷뿕鎛戣筏ᴠ妔䄕⣱㫣㝌妙䆯ꃿ襇Ⓓ涙⦹ꑟ찥부긥힞컕 [ 372.194339][ T5698] usb 3-1: Manufacturer: ࡡ [ 372.194353][ T5698] usb 3-1: SerialNumber: 䕳 [ 372.223547][ T5333] usb 4-1: USB disconnect, device number 46 [ 372.296702][ T10] gspca_main: sunplus-2.14.0 probing 08ca:2016 [ 372.300985][ T10] gspca_sunplus: reg_w_riv err -71 [ 372.301061][ T10] sunplus 1-1:4.4: probe with driver sunplus failed with error -71 [ 372.341759][ T10] usb 1-1: USB disconnect, device number 42 [ 372.358234][ T8951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.904'. [ 372.359327][ T8951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.904'. [ 372.359569][ T8951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.904'. [ 372.359801][ T8951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.904'. [ 372.567421][ T8937] lo: left allmulticast mode [ 372.583808][ T5698] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 372.597659][ T8953] netlink: 24 bytes leftover after parsing attributes in process `syz.0.905'. [ 372.654148][ T5698] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 372.687775][ T5698] usb 3-1: USB disconnect, device number 34 [ 372.743206][ T5608] udevd[5608]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 372.820386][ T8956] sctp: [Deprecated]: syz.4.906 (pid 8956) Use of int in max_burst socket option deprecated. [ 372.820386][ T8956] Use struct sctp_assoc_value instead [ 372.931740][ T10] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 373.054594][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.062130][ T5333] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 373.078969][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 373.079440][ T10] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 373.082422][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.082444][ T10] usb 1-1: Product: syz [ 373.082457][ T10] usb 1-1: Manufacturer: syz [ 373.082472][ T10] usb 1-1: SerialNumber: syz [ 373.128860][ T5789] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 373.208917][ T5333] usb 5-1: Using ep0 maxpacket: 32 [ 373.210047][ T5333] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 373.211647][ T5333] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 373.211675][ T5333] usb 5-1: config 0 has no interface number 0 [ 373.211733][ T5333] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 373.211759][ T5333] usb 5-1: config 0 interface 196 has no altsetting 0 [ 373.214144][ T5333] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.214171][ T5333] usb 5-1: Product: syz [ 373.214187][ T5333] usb 5-1: Manufacturer: syz [ 373.214227][ T5333] usb 5-1: SerialNumber: syz [ 373.217320][ T5333] usb 5-1: config 0 descriptor?? [ 373.219168][ T8956] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 373.278888][ T5698] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 373.305743][ T10] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 373.313713][ T10] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 373.314045][ T10] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 373.314079][ T10] usb 1-1: media controller created [ 373.328112][ T5789] usb 4-1: Using ep0 maxpacket: 16 [ 373.339882][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 373.356431][ T5789] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 373.366930][ T5789] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.366965][ T5789] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 373.367000][ T5789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.381508][ T5789] usb 4-1: config 0 descriptor?? [ 373.428885][ T5698] usb 2-1: Using ep0 maxpacket: 8 [ 374.578205][ T5698] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 374.599814][ T10] zl10353_read_register: readreg error (reg=127, ret==-110) [ 374.627163][ T5698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.627209][ T5698] usb 2-1: Product: syz [ 374.627224][ T5698] usb 2-1: Manufacturer: syz [ 374.627239][ T5698] usb 2-1: SerialNumber: syz [ 374.635821][ T8953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.640514][ T8953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.679290][ T5698] usb 2-1: config 0 descriptor?? [ 374.694191][ T5698] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 374.694232][ T5698] pctv452e: pctv452e_power_ctrl: 1 [ 374.694232][ T5698] [ 374.694271][ T5698] usb 2-1: selecting invalid altsetting 3 [ 374.694285][ T5698] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 374.694285][ T5698] [ 374.694298][ T5698] dvb-usb: bulk message failed: -22 (5/0) [ 374.739212][ T5698] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 374.739887][ T5698] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 374.739931][ T5698] usb 2-1: media controller created [ 374.739990][ T5698] dvb-usb: bulk message failed: -22 (8/0) [ 374.740004][ T5698] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 374.740049][ T5698] dvb-usb: MAC address reading failed. [ 374.811376][ T5698] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 374.873395][ T5789] microsoft 0003:045E:07DA.001F: ignoring exceeding usage max [ 374.892777][ T10] dvb_usb_gl861 1-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 374.928664][ T10] usb 1-1: USB disconnect, device number 43 [ 374.930638][ T8963] bond0: (slave netdevsim0): Error: Device can not be enslaved while up [ 374.963952][ T5698] DVB: Unable to find symbol stb0899_attach() [ 374.963970][ T5698] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 375.013368][ T5789] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.001F/input/input41 [ 375.035211][ T5333] ipheth 5-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 375.035397][ T5333] ipheth 5-1:0.196: probe with driver ipheth failed with error -71 [ 375.068554][ T5333] usb 5-1: USB disconnect, device number 43 [ 375.102873][ T5789] microsoft 0003:045E:07DA.001F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 375.121325][ T5698] rc_core: IR keymap rc-tt-1500 not found [ 375.121346][ T5698] Registered IR keymap rc-empty [ 375.122458][ T5698] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 375.157231][ T5698] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input42 [ 375.173116][ T5698] dvb-usb: schedule remote query interval to 100 msecs. [ 375.173143][ T5698] pctv452e: pctv452e_power_ctrl: 0 [ 375.173143][ T5698] [ 375.173154][ T5698] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 375.177497][ T5698] usb 2-1: USB disconnect, device number 40 [ 375.251807][ T5698] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 375.531760][ T5698] usb 4-1: USB disconnect, device number 47 [ 376.524641][ T5698] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 376.574783][ T8984] loop4: detected capacity change from 0 to 2640 [ 376.583926][ T5608] buffer_io_error: 325 callbacks suppressed [ 376.583945][ T5608] Buffer I/O error on dev loop4, logical block 0, async page read [ 376.586200][ T5608] Buffer I/O error on dev loop4, logical block 0, async page read [ 376.587661][ T5608] Buffer I/O error on dev loop4, logical block 0, async page read [ 376.587986][ T5608] Buffer I/O error on dev loop4, logical block 0, async page read [ 376.590923][ T5608] Buffer I/O error on dev loop4, logical block 0, async page read [ 376.591231][ T5333] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 376.679246][ T5698] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.c0 [ 376.680403][ T5698] usb 1-1: config 2 has an invalid descriptor of length 160, skipping remainder of the config [ 376.680429][ T5698] usb 1-1: config 2 has 0 interfaces, different from the descriptor's value: 18 [ 376.682817][ T5698] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 376.682840][ T5698] usb 1-1: SerialNumber: syz [ 376.735479][ T8984] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 376.735550][ T8984] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 376.735585][ T8984] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 376.735606][ T8984] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 376.735639][ T8984] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 376.801825][ T5333] usb 5-1: unable to get BOS descriptor or descriptor too short [ 376.802280][ T5333] usb 5-1: not running at top speed; connect to a high speed hub [ 376.802307][ T5333] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 376.803173][ T5333] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 376.803215][ T5333] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 376.803234][ T5333] usb 5-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 376.803251][ T5333] usb 5-1: config 14 has no interface number 0 [ 376.803266][ T5333] usb 5-1: config 14 has no interface number 1 [ 376.803311][ T5333] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 376.803352][ T5333] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 376.803375][ T5333] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 376.803398][ T5333] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 376.803419][ T5333] usb 5-1: config 14 interface 57 has no altsetting 0 [ 376.803435][ T5333] usb 5-1: config 14 interface 228 has no altsetting 0 [ 376.806383][ T5333] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.806408][ T5333] usb 5-1: Product: syz [ 376.806423][ T5333] usb 5-1: Manufacturer: syz [ 376.806437][ T5333] usb 5-1: SerialNumber: syz [ 376.901707][ T8988] netlink: 'syz.1.916': attribute type 2 has an invalid length. [ 376.901727][ T8988] netlink: 'syz.1.916': attribute type 2 has an invalid length. [ 376.913154][ T8988] netlink: 104 bytes leftover after parsing attributes in process `syz.1.916'. [ 377.508858][ T5698] usb 1-1: USB disconnect, device number 44 [ 378.233550][ T5333] legousbtower 5-1:14.57: interrupt endpoints not found [ 378.957258][ T5333] legousbtower 5-1:14.228: get version request failed: -71 [ 378.957396][ T5333] legousbtower 5-1:14.228: probe with driver legousbtower failed with error -71 [ 379.136038][ T5333] usb 5-1: USB disconnect, device number 44 [ 379.137840][ T8998] FAULT_INJECTION: forcing a failure. [ 379.137840][ T8998] name failslab, interval 1, probability 0, space 0, times 0 [ 379.137860][ T8998] CPU: 1 UID: 0 PID: 8998 Comm: syz.0.918 Not tainted syzkaller #0 PREEMPT(full) [ 379.137875][ T8998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 379.137882][ T8998] Call Trace: [ 379.137887][ T8998] [ 379.137892][ T8998] dump_stack_lvl+0x100/0x190 [ 379.137913][ T8998] should_fail_ex.cold+0x5/0xa [ 379.137931][ T8998] should_failslab+0xc2/0x120 [ 379.137948][ T8998] __kmalloc_cache_noprof+0x91/0x6d0 [ 379.137966][ T8998] ? bus_add_driver+0x92/0x5b0 [ 379.137980][ T8998] bus_add_driver+0x92/0x5b0 [ 379.137993][ T8998] driver_register+0x1e2/0x360 [ 379.138008][ T8998] ? rcu_is_watching+0x13/0xc0 [ 379.138024][ T8998] usb_gadget_register_driver_owner+0x132/0x210 [ 379.138040][ T8998] raw_ioctl+0x1a85/0x2b80 [ 379.138055][ T8998] ? __pfx_raw_ioctl+0x10/0x10 [ 379.138065][ T8998] ? selinux_file_ioctl+0x13b/0x290 [ 379.138077][ T8998] ? selinux_file_ioctl+0xb6/0x290 [ 379.138091][ T8998] ? __pfx_raw_ioctl+0x10/0x10 [ 379.138102][ T8998] __x64_sys_ioctl+0x18e/0x210 [ 379.138115][ T8998] do_syscall_64+0x123/0x790 [ 379.138131][ T8998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.138144][ T8998] RIP: 0033:0x7f4b2e79ddeb [ 379.138156][ T8998] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 379.138168][ T8998] RSP: 002b:00007f4b2f6b2f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 379.138179][ T8998] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f4b2e79ddeb [ 379.138186][ T8998] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000008 [ 379.138193][ T8998] RBP: 00007f4b2f6b3fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 379.138200][ T8998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 379.138206][ T8998] R13: 0000200000000000 R14: 0000000000000000 R15: 0000000000000000 [ 379.138220][ T8998] [ 379.138225][ T8998] UDC core: USB Raw Gadget: driver registration failed: -12 [ 379.138234][ T8998] misc raw-gadget: fail, usb_gadget_register_driver returned -12 [ 379.387010][ T9004] lo: entered allmulticast mode [ 379.896105][ T44] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 379.896224][ T5789] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 380.131422][ T5789] usb 4-1: Using ep0 maxpacket: 32 [ 380.134371][ T5789] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 380.184046][ T44] usb 2-1: not running at top speed; connect to a high speed hub [ 380.184079][ T44] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 380.184569][ T5789] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 380.184614][ T5789] usb 4-1: config 0 has no interface number 0 [ 380.184649][ T5789] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 380.185211][ T5789] usb 4-1: config 0 interface 85 has no altsetting 0 [ 380.276189][ T5789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.276216][ T5789] usb 4-1: Product: syz [ 380.276231][ T5789] usb 4-1: Manufacturer: syz [ 380.276245][ T5789] usb 4-1: SerialNumber: syz [ 380.278657][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.278682][ T44] usb 2-1: Product: 圸ꌟ娨姪꟡윽짚ꮜ᳍饦帎꧘ᇐ砻垀δ☲⺀䦚鵖죱ᕃ婀栿♑髆忥嚷뿕鎛戣筏ᴠ妔䄕⣱㫣㝌妙䆯ꃿ襇Ⓓ涙⦹ꑟ찥부긥힞컕 [ 380.278705][ T44] usb 2-1: Manufacturer: ࡡ [ 380.278770][ T44] usb 2-1: SerialNumber: 䕳 [ 380.349741][ T5789] usb 4-1: config 0 descriptor?? [ 380.409076][ T9014] netlink: 104 bytes leftover after parsing attributes in process `syz.2.923'. [ 381.166451][ T9020] sctp: [Deprecated]: syz.0.924 (pid 9020) Use of int in max_burst socket option deprecated. [ 381.166451][ T9020] Use struct sctp_assoc_value instead [ 381.303430][ T9003] lo: left allmulticast mode [ 381.305871][ T44] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 381.433661][ T5790] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 381.806849][ T5789] appletouch 4-1:0.85: Geyser mode initialized. [ 381.831723][ T5789] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input43 [ 381.852561][ T44] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 381.874575][ T44] usb 2-1: USB disconnect, device number 41 [ 381.879110][ T5333] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 381.894096][ T5790] usb 5-1: Using ep0 maxpacket: 16 [ 381.904086][ T5790] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 381.905123][ T5790] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.905157][ T5790] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 381.905193][ T5790] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.966354][ T5790] usb 5-1: config 0 descriptor?? [ 381.992582][ T7875] udevd[7875]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 382.029409][ T5333] usb 1-1: Using ep0 maxpacket: 32 [ 382.030628][ T5333] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 382.031915][ T5333] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 382.031948][ T5333] usb 1-1: config 0 has no interface number 0 [ 382.031982][ T5333] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 382.032005][ T5333] usb 1-1: config 0 interface 196 has no altsetting 0 [ 382.035803][ T5333] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.035828][ T5333] usb 1-1: Product: syz [ 382.035842][ T5333] usb 1-1: Manufacturer: syz [ 382.035857][ T5333] usb 1-1: SerialNumber: syz [ 382.042504][ T5333] usb 1-1: config 0 descriptor?? [ 382.043954][ T9020] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 382.218119][ T5783] usb 4-1: USB disconnect, device number 48 [ 382.373023][ T9019] digital: digital_start_poll: Unknown protocol [ 382.404623][ T5783] appletouch 4-1:0.85: input: appletouch disconnected [ 383.073155][ T5790] microsoft 0003:045E:07DA.0020: ignoring exceeding usage max [ 383.076412][ T5790] hid_parser_main: 10 callbacks suppressed [ 383.076438][ T5790] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 383.076460][ T5790] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 383.076481][ T5790] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 383.076499][ T5790] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 383.076518][ T5790] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 383.076536][ T5790] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 383.076555][ T5790] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 383.076573][ T5790] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 383.076604][ T5790] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 383.076623][ T5790] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 383.079200][ T5790] hid_map_usage: 23542 callbacks suppressed [ 383.079215][ T5790] HID 045e:07da: Invalid code 65791 type 1 [ 383.079509][ T5790] HID 045e:07da: Invalid code 768 type 1 [ 383.079522][ T5790] HID 045e:07da: Invalid code 769 type 1 [ 383.079534][ T5790] HID 045e:07da: Invalid code 770 type 1 [ 383.079545][ T5790] HID 045e:07da: Invalid code 771 type 1 [ 383.079556][ T5790] HID 045e:07da: Invalid code 772 type 1 [ 383.079567][ T5790] HID 045e:07da: Invalid code 773 type 1 [ 383.079578][ T5790] HID 045e:07da: Invalid code 774 type 1 [ 383.079589][ T5790] HID 045e:07da: Invalid code 775 type 1 [ 383.079601][ T5790] HID 045e:07da: Invalid code 776 type 1 [ 383.096213][ T5333] ipheth 1-1:0.196: ipheth_get_macaddr: usb_control_msg: -110 [ 383.096376][ T5333] ipheth 1-1:0.196: probe with driver ipheth failed with error -110 [ 383.248829][ T30] audit: type=1400 audit(1789597745.278:1857): avc: denied { mount } for pid=9036 comm="syz.1.929" name="/" dev="ramfs" ino=23260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 383.439131][ T5790] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0020/input/input44 [ 383.444341][ T30] audit: type=1804 audit(1789597745.428:1858): pid=9037 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.929" name="bus" dev="ramfs" ino=23261 res=1 errno=0 [ 383.519150][ T5790] microsoft 0003:045E:07DA.0020: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 383.924649][ T5783] usb 5-1: USB disconnect, device number 45 [ 384.198642][ T5783] usb 1-1: USB disconnect, device number 45 [ 384.220244][ T9059] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 384.520830][ T30] audit: type=1400 audit(1789597746.588:1859): avc: denied { write } for pid=9070 comm="syz.2.945" name="instances" dev="tracefs" ino=4360 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 385.182026][ T9079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.945'. [ 385.505774][ T9080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.945'. [ 385.506102][ T9080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.945'. [ 385.506344][ T9080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.945'. [ 385.506498][ T9080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.945'. [ 385.819334][ T9089] sd 0:0:1:0: PR command failed: 1026 [ 385.819360][ T9089] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 385.819380][ T9089] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 385.928796][ T5790] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 385.968923][ T5789] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 386.045223][ T30] audit: type=1400 audit(1789597748.128:1860): avc: denied { ioctl } for pid=9092 comm="syz.3.951" path="cgroup:[4026532792]" dev="nsfs" ino=4026532792 ioctlcmd=0x940c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 386.089566][ T5790] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 386.090434][ T5790] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 386.090467][ T5790] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.090488][ T5790] usb 1-1: config 0 interface 0 has no altsetting 0 [ 386.090515][ T5790] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.095063][ T5790] usb 1-1: config 0 descriptor?? [ 386.138300][ T5789] usb 5-1: Using ep0 maxpacket: 8 [ 386.161159][ T5789] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 386.165648][ T5789] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.165673][ T5789] usb 5-1: Product: syz [ 386.165687][ T5789] usb 5-1: Manufacturer: syz [ 386.165701][ T5789] usb 5-1: SerialNumber: syz [ 386.218045][ T5789] usb 5-1: config 0 descriptor?? [ 386.230033][ T5789] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 386.230091][ T5789] pctv452e: pctv452e_power_ctrl: 1 [ 386.230091][ T5789] [ 386.230147][ T5789] usb 5-1: selecting invalid altsetting 3 [ 386.230163][ T5789] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 386.230163][ T5789] [ 386.230178][ T5789] dvb-usb: bulk message failed: -22 (5/0) [ 386.271350][ T5789] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 386.289652][ T5789] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 386.289697][ T5789] usb 5-1: media controller created [ 386.289751][ T5789] dvb-usb: bulk message failed: -22 (8/0) [ 386.289765][ T5789] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 386.289807][ T5789] dvb-usb: MAC address reading failed. [ 386.372628][ T5789] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 386.449401][ T9097] sctp: [Deprecated]: syz.3.952 (pid 9097) Use of int in max_burst socket option deprecated. [ 386.449401][ T9097] Use struct sctp_assoc_value instead [ 386.453475][ T9085] bond0: (slave netdevsim0): Error: Device can not be enslaved while up [ 386.606565][ T5789] DVB: Unable to find symbol stb0899_attach() [ 386.606583][ T5789] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 386.708860][ T5333] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 386.768772][ T5789] rc_core: IR keymap rc-tt-1500 not found [ 386.768790][ T5789] Registered IR keymap rc-empty [ 386.770008][ T5789] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 386.801275][ T5789] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input45 [ 386.817300][ T5789] dvb-usb: schedule remote query interval to 100 msecs. [ 386.817322][ T5789] pctv452e: pctv452e_power_ctrl: 0 [ 386.817322][ T5789] [ 386.817351][ T5789] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 386.859153][ T5333] usb 4-1: Using ep0 maxpacket: 32 [ 386.859877][ T5333] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 386.863773][ T5333] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 386.863798][ T5333] usb 4-1: config 0 has no interface number 0 [ 386.863824][ T5333] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 386.863839][ T5333] usb 4-1: config 0 interface 196 has no altsetting 0 [ 386.874439][ T5333] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.874467][ T5333] usb 4-1: Product: syz [ 386.874484][ T5333] usb 4-1: Manufacturer: syz [ 386.874525][ T5333] usb 4-1: SerialNumber: syz [ 386.892374][ T5333] usb 4-1: config 0 descriptor?? [ 386.896636][ T9097] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 386.938587][ T44] dvb-usb: bulk message failed: -22 (4/0) [ 386.938614][ T44] dvb-usb: error -22 while querying for an remote control event. [ 386.965717][ T5789] usb 5-1: USB disconnect, device number 46 [ 387.093783][ T5789] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 387.333326][ T5333] ipheth 4-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 387.333513][ T5333] ipheth 4-1:0.196: probe with driver ipheth failed with error -71 [ 387.370075][ T5333] usb 4-1: USB disconnect, device number 49 [ 387.673648][ T9105] netlink: 24 bytes leftover after parsing attributes in process `syz.4.954'. [ 387.774604][ T9107] netlink: 'syz.2.955': attribute type 2 has an invalid length. [ 387.774626][ T9107] netlink: 'syz.2.955': attribute type 2 has an invalid length. [ 387.775833][ T9107] netlink: 104 bytes leftover after parsing attributes in process `syz.2.955'. [ 387.929036][ T5789] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 388.100250][ T5789] usb 5-1: Using ep0 maxpacket: 16 [ 388.101091][ T5789] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 388.105990][ T5789] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.106015][ T5789] usb 5-1: Product: syz [ 388.106030][ T5789] usb 5-1: Manufacturer: syz [ 388.106044][ T5789] usb 5-1: SerialNumber: syz [ 388.140486][ T9114] FAULT_INJECTION: forcing a failure. [ 388.140486][ T9114] name failslab, interval 1, probability 0, space 0, times 0 [ 388.140523][ T9114] CPU: 0 UID: 0 PID: 9114 Comm: syz.3.959 Not tainted syzkaller #0 PREEMPT(full) [ 388.140546][ T9114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 388.140558][ T9114] Call Trace: [ 388.140566][ T9114] [ 388.140573][ T9114] dump_stack_lvl+0x100/0x190 [ 388.140605][ T9114] should_fail_ex.cold+0x5/0xa [ 388.140630][ T9114] should_failslab+0xc2/0x120 [ 388.140654][ T9114] __kmalloc_noprof+0xfc/0x840 [ 388.140675][ T9114] ? tomoyo_encode2+0xfb/0x3c0 [ 388.140700][ T9114] tomoyo_encode2+0xfb/0x3c0 [ 388.140724][ T9114] tomoyo_encode+0x29/0x50 [ 388.140743][ T9114] tomoyo_realpath_from_path+0x18c/0x690 [ 388.140769][ T9114] tomoyo_path_number_perm+0x23c/0x580 [ 388.140786][ T9114] ? tomoyo_path_number_perm+0x22e/0x580 [ 388.140804][ T9114] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 388.140831][ T9114] ? __lock_acquire+0x5c0/0x1f40 [ 388.140860][ T9114] ? __fget_files+0x34/0x3d0 [ 388.140886][ T9114] ? find_held_lock+0x2b/0x80 [ 388.140909][ T9114] ? hook_file_ioctl_common+0x140/0x440 [ 388.140936][ T9114] ? __fget_files+0x21f/0x3d0 [ 388.140960][ T9114] security_file_ioctl+0xd3/0x230 [ 388.140979][ T9114] __x64_sys_ioctl+0xb7/0x210 [ 388.140999][ T9114] do_syscall_64+0x123/0x790 [ 388.141024][ T9114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.141041][ T9114] RIP: 0033:0x7fc3ee19ddeb [ 388.141055][ T9114] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 388.141072][ T9114] RSP: 002b:00007fc3ec3f3f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 388.141095][ T9114] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007fc3ee19ddeb [ 388.141107][ T9114] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000008 [ 388.141120][ T9114] RBP: 00007fc3ec3f4fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 388.141130][ T9114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 388.141140][ T9114] R13: 0000200000000000 R14: 0000000000000000 R15: 0000000000000000 [ 388.141163][ T9114] [ 388.141204][ T9114] ERROR: Out of memory at tomoyo_realpath_from_path. [ 388.428812][ T5333] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 388.781989][ T5789] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 388.890764][ T5333] usb 4-1: Using ep0 maxpacket: 8 [ 388.916180][ T5333] usb 4-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 388.993344][ T5333] usb 4-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 388.993380][ T5333] usb 4-1: config 1 interface 0 has no altsetting 0 [ 389.040718][ T9105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.072615][ T9105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.124605][ T5333] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.124633][ T5333] usb 4-1: Product: syz [ 389.124645][ T5333] usb 4-1: Manufacturer: syz [ 389.124657][ T5333] usb 4-1: SerialNumber: syz [ 389.402822][ T5790] usbhid 1-1:0.0: can't add hid device: -71 [ 389.402912][ T5790] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 389.435400][ T5790] usb 1-1: USB disconnect, device number 46 [ 389.437053][ T5789] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 389.437287][ T5789] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 389.437323][ T5789] usb 5-1: media controller created [ 389.512432][ T5333] usbhid 4-1:1.0: can't add hid device: -71 [ 389.512517][ T5333] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 389.512809][ T5789] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 389.523795][ T5333] usb 4-1: USB disconnect, device number 50 [ 389.587948][ T5789] zl10353_read_register: readreg error (reg=127, ret==-71) [ 389.631494][ T5789] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 389.653095][ T5789] usb 5-1: USB disconnect, device number 47 [ 389.676800][ T30] audit: type=1400 audit(1789597751.758:1861): avc: denied { write } for pid=9127 comm="syz.1.963" name="instances" dev="tracefs" ino=4360 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 389.826381][ T9131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.963'. [ 389.827111][ T9131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.963'. [ 389.827391][ T9131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.963'. [ 390.004175][ T5790] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 390.163544][ T5790] usb 1-1: Using ep0 maxpacket: 16 [ 390.186034][ T5790] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 390.217917][ T5790] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.217985][ T5790] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 390.218117][ T5790] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.366794][ T5790] usb 1-1: config 0 descriptor?? [ 390.724832][ T9126] digital: digital_start_poll: Unknown protocol [ 390.810809][ T9135] netlink: 'syz.4.965': attribute type 2 has an invalid length. [ 390.810831][ T9135] netlink: 'syz.4.965': attribute type 2 has an invalid length. [ 390.840932][ T9135] __nla_validate_parse: 1 callbacks suppressed [ 390.840951][ T9135] netlink: 104 bytes leftover after parsing attributes in process `syz.4.965'. [ 390.854134][ T9137] netlink: 'syz.2.966': attribute type 2 has an invalid length. [ 390.854155][ T9137] netlink: 'syz.2.966': attribute type 2 has an invalid length. [ 390.944723][ T5790] microsoft 0003:045E:07DA.0021: ignoring exceeding usage max [ 390.948316][ T5790] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 390.965131][ T5790] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 390.965171][ T5790] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 390.965193][ T5790] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 390.965214][ T5790] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 390.965234][ T5790] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 390.965254][ T5790] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 390.965274][ T5790] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 390.965294][ T5790] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 390.965315][ T5790] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 390.966290][ T5790] hid_map_usage: 11766 callbacks suppressed [ 390.966305][ T5790] HID 045e:07da: Invalid code 65791 type 1 [ 390.968235][ T5790] HID 045e:07da: Invalid code 768 type 1 [ 390.968251][ T5790] HID 045e:07da: Invalid code 769 type 1 [ 390.968264][ T5790] HID 045e:07da: Invalid code 770 type 1 [ 390.968284][ T5790] HID 045e:07da: Invalid code 771 type 1 [ 390.968296][ T5790] HID 045e:07da: Invalid code 772 type 1 [ 390.968308][ T5790] HID 045e:07da: Invalid code 773 type 1 [ 390.968320][ T5790] HID 045e:07da: Invalid code 774 type 1 [ 390.968332][ T5790] HID 045e:07da: Invalid code 775 type 1 [ 390.968344][ T5790] HID 045e:07da: Invalid code 776 type 1 [ 391.000651][ T9137] netlink: 104 bytes leftover after parsing attributes in process `syz.2.966'. [ 391.675025][ T5790] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0021/input/input46 [ 391.861893][ T5790] microsoft 0003:045E:07DA.0021: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 392.187404][ T9158] netlink: 32 bytes leftover after parsing attributes in process `syz.3.972'. [ 392.313934][ T30] audit: type=1400 audit(1789597754.398:1862): avc: denied { write } for pid=9159 comm="syz.1.973" name="instances" dev="tracefs" ino=4360 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 392.358812][ T5790] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 392.691988][ T5790] usb 3-1: Using ep0 maxpacket: 32 [ 394.231245][ T42] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 394.245391][ T5790] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 394.250125][ T5790] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 394.250211][ T5790] usb 3-1: config 0 has no interface number 0 [ 394.250376][ T5790] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 394.250420][ T5790] usb 3-1: config 0 interface 196 has no altsetting 0 [ 394.319606][ T5790] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.319654][ T5790] usb 3-1: Product: syz [ 394.319669][ T5790] usb 3-1: Manufacturer: syz [ 394.319683][ T5790] usb 3-1: SerialNumber: syz [ 394.322272][ T5790] usb 3-1: config 0 descriptor?? [ 394.323834][ T9157] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 394.335643][ T9152] sctp: [Deprecated]: syz.2.970 (pid 9152) Use of int in max_burst socket option deprecated. [ 394.335643][ T9152] Use struct sctp_assoc_value instead [ 394.431061][ T44] usb 1-1: USB disconnect, device number 47 [ 394.478643][ T9164] lo: entered allmulticast mode [ 394.748804][ T5789] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 394.868446][ T5790] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 394.868612][ T5790] ipheth 3-1:0.196: probe with driver ipheth failed with error -71 [ 394.898590][ T5790] usb 3-1: USB disconnect, device number 35 [ 394.906807][ T5789] usb 2-1: not running at top speed; connect to a high speed hub [ 394.906835][ T5789] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 394.941517][ T5789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.941545][ T5789] usb 2-1: Product: 圸ꌟ娨姪꟡윽짚ꮜ᳍饦帎꧘ᇐ砻垀δ☲⺀䦚鵖죱ᕃ婀栿♑髆忥嚷뿕鎛戣筏ᴠ妔䄕⣱㫣㝌妙䆯ꃿ襇Ⓓ涙⦹ꑟ찥부긥힞컕 [ 394.941570][ T5789] usb 2-1: Manufacturer: ࡡ [ 394.941585][ T5789] usb 2-1: SerialNumber: 䕳 [ 395.034809][ T9177] netlink: 'syz.4.980': attribute type 2 has an invalid length. [ 395.034834][ T9177] netlink: 'syz.4.980': attribute type 2 has an invalid length. [ 395.036222][ T9177] netlink: 104 bytes leftover after parsing attributes in process `syz.4.980'. [ 395.104160][ T9172] FAULT_INJECTION: forcing a failure. [ 395.104160][ T9172] name failslab, interval 1, probability 0, space 0, times 0 [ 395.104193][ T9172] CPU: 1 UID: 0 PID: 9172 Comm: syz.0.978 Not tainted syzkaller #0 PREEMPT(full) [ 395.104216][ T9172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 395.104230][ T9172] Call Trace: [ 395.104237][ T9172] [ 395.104246][ T9172] dump_stack_lvl+0x100/0x190 [ 395.104284][ T9172] should_fail_ex.cold+0x5/0xa [ 395.104312][ T9172] should_failslab+0xc2/0x120 [ 395.104337][ T9172] __kmalloc_cache_noprof+0x91/0x6d0 [ 395.104376][ T9172] ? bus_add_driver+0x92/0x5b0 [ 395.104402][ T9172] bus_add_driver+0x92/0x5b0 [ 395.104426][ T9172] driver_register+0x1e2/0x360 [ 395.104450][ T9172] ? rcu_is_watching+0x13/0xc0 [ 395.104479][ T9172] usb_gadget_register_driver_owner+0x132/0x210 [ 395.104504][ T9172] raw_ioctl+0x1a85/0x2b80 [ 395.104529][ T9172] ? __pfx_raw_ioctl+0x10/0x10 [ 395.104548][ T9172] ? selinux_file_ioctl+0x13b/0x290 [ 395.104569][ T9172] ? selinux_file_ioctl+0xb6/0x290 [ 395.104591][ T9172] ? __pfx_raw_ioctl+0x10/0x10 [ 395.104611][ T9172] __x64_sys_ioctl+0x18e/0x210 [ 395.104633][ T9172] do_syscall_64+0x123/0x790 [ 395.104664][ T9172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.104684][ T9172] RIP: 0033:0x7f4b2e79ddeb [ 395.104700][ T9172] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 395.104718][ T9172] RSP: 002b:00007f4b2f6b2f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 395.104738][ T9172] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f4b2e79ddeb [ 395.104751][ T9172] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000008 [ 395.104763][ T9172] RBP: 00007f4b2f6b3fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 395.104774][ T9172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 395.104786][ T9172] R13: 0000200000000000 R14: 0000000000000000 R15: 0000000000000000 [ 395.104811][ T9172] [ 395.104837][ T9172] UDC core: USB Raw Gadget: driver registration failed: -12 [ 395.104852][ T9172] misc raw-gadget: fail, usb_gadget_register_driver returned -12 [ 395.995872][ T9163] lo: left allmulticast mode [ 396.005602][ T5789] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 396.082303][ T5789] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 396.111489][ T5789] usb 2-1: USB disconnect, device number 42 [ 396.210694][ T9186] netlink: 24 bytes leftover after parsing attributes in process `syz.4.982'. [ 396.276404][ T5608] udevd[5608]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 396.459499][ T44] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 396.608796][ T5789] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 396.608933][ T44] usb 5-1: Using ep0 maxpacket: 16 [ 396.610087][ T44] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 396.617267][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.617294][ T44] usb 5-1: Product: syz [ 396.617309][ T44] usb 5-1: Manufacturer: syz [ 396.617324][ T44] usb 5-1: SerialNumber: syz [ 396.770868][ T5789] usb 1-1: unable to get BOS descriptor or descriptor too short [ 396.772711][ T5789] usb 1-1: not running at top speed; connect to a high speed hub [ 396.772741][ T5789] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 396.777700][ T5789] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 396.777726][ T5789] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 396.777745][ T5789] usb 1-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 396.777764][ T5789] usb 1-1: config 14 has no interface number 0 [ 396.777801][ T5789] usb 1-1: config 14 has no interface number 1 [ 396.777850][ T5789] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 396.777872][ T5789] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 396.777894][ T5789] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 396.777915][ T5789] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 396.777961][ T5789] usb 1-1: config 14 interface 57 has no altsetting 0 [ 396.777978][ T5789] usb 1-1: config 14 interface 228 has no altsetting 0 [ 396.922891][ T5789] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.922941][ T5789] usb 1-1: Product: syz [ 396.922957][ T5789] usb 1-1: Manufacturer: syz [ 396.922978][ T5789] usb 1-1: SerialNumber: syz [ 397.022430][ T44] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 397.055567][ T44] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 397.055877][ T44] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 397.055913][ T44] usb 5-1: media controller created [ 397.142471][ T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 397.531153][ T9186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.544493][ T9186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.811077][ T44] zl10353_read_register: readreg error (reg=127, ret==-110) [ 397.868382][ T5789] legousbtower 1-1:14.57: interrupt endpoints not found [ 397.904998][ T5789] legousbtower 1-1:14.228: get version request failed: -71 [ 397.905072][ T5789] legousbtower 1-1:14.228: probe with driver legousbtower failed with error -71 [ 398.022310][ T5789] usb 1-1: USB disconnect, device number 48 [ 398.309978][ T30] audit: type=1400 audit(1789597760.398:1863): avc: denied { write } for pid=9209 comm="syz.3.986" name="instances" dev="tracefs" ino=4360 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 398.349775][ T44] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 398.357886][ T44] usb 5-1: USB disconnect, device number 48 [ 398.370370][ T30] audit: type=1400 audit(1789597760.448:1864): avc: denied { write } for pid=9209 comm="syz.3.986" name="instances" dev="tracefs" ino=4360 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 399.540197][ T9220] netlink: 32 bytes leftover after parsing attributes in process `syz.1.987'. [ 400.517074][ T30] audit: type=1326 audit(1789597762.598:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9227 comm="syz.2.995" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31a7f9e159 code=0x7ffc0000 [ 400.517190][ T30] audit: type=1326 audit(1789597762.598:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9227 comm="syz.2.995" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31a7f9e159 code=0x7ffc0000 [ 400.545387][ T30] audit: type=1326 audit(1789597762.608:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9227 comm="syz.2.995" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f31a7f9e159 code=0x7ffc0000 [ 400.545436][ T30] audit: type=1326 audit(1789597762.608:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9227 comm="syz.2.995" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f31a7f9e159 code=0x7ffc0000 [ 400.582245][ T9225] FAULT_INJECTION: forcing a failure. [ 400.582245][ T9225] name failslab, interval 1, probability 0, space 0, times 0 [ 400.582276][ T9225] CPU: 1 UID: 0 PID: 9225 Comm: syz.0.991 Not tainted syzkaller #0 PREEMPT(full) [ 400.582297][ T9225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 400.582308][ T9225] Call Trace: [ 400.582316][ T9225] [ 400.582324][ T9225] dump_stack_lvl+0x100/0x190 [ 400.582358][ T9225] should_fail_ex.cold+0x5/0xa [ 400.582382][ T9225] should_failslab+0xc2/0x120 [ 400.582406][ T9225] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 400.582430][ T9225] ? kasan_save_stack+0x30/0x50 [ 400.582448][ T9225] ? kasan_save_track+0x14/0x30 [ 400.582465][ T9225] ? __kasan_kmalloc+0xaa/0xb0 [ 400.582490][ T9225] ? kstrdup_const+0x63/0x80 [ 400.582520][ T9225] kstrdup+0x51/0xe0 [ 400.582545][ T9225] kstrdup_const+0x63/0x80 [ 400.582569][ T9225] __kernfs_new_node+0x9b/0xa10 [ 400.582600][ T9225] ? __pfx___kernfs_new_node+0x10/0x10 [ 400.582628][ T9225] ? lock_acquire+0x1d1/0x380 [ 400.582645][ T9225] ? kernfs_root+0x23/0x2a0 [ 400.582668][ T9225] ? find_held_lock+0x2b/0x80 [ 400.582695][ T9225] ? kernfs_root+0xee/0x2a0 [ 400.582716][ T9225] ? kernfs_root+0xee/0x2a0 [ 400.582743][ T9225] kernfs_create_dir_ns+0xa6/0x2b0 [ 400.582763][ T9225] sysfs_create_dir_ns+0x13a/0x2b0 [ 400.582786][ T9225] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 400.582807][ T9225] ? find_held_lock+0x2b/0x80 [ 400.582829][ T9225] ? kobject_add_internal+0x25f/0x930 [ 400.582847][ T9225] ? kobject_add_internal+0x25f/0x930 [ 400.582866][ T9225] ? do_raw_spin_unlock+0x145/0x1e0 [ 400.582888][ T9225] kobject_add_internal+0x2c8/0x930 [ 400.582909][ T9225] kobject_init_and_add+0x121/0x180 [ 400.582928][ T9225] ? __pfx_kobject_init_and_add+0x10/0x10 [ 400.582947][ T9225] ? __kasan_kmalloc+0xaa/0xb0 [ 400.582966][ T9225] ? lockdep_init_map_type+0x5c/0x250 [ 400.582986][ T9225] ? __raw_spin_lock_init+0x3a/0x110 [ 400.583011][ T9225] bus_add_driver+0x186/0x5b0 [ 400.583031][ T9225] driver_register+0x1e2/0x360 [ 400.583050][ T9225] ? rcu_is_watching+0x13/0xc0 [ 400.583074][ T9225] usb_gadget_register_driver_owner+0x132/0x210 [ 400.583096][ T9225] raw_ioctl+0x1a85/0x2b80 [ 400.583118][ T9225] ? __pfx_raw_ioctl+0x10/0x10 [ 400.583134][ T9225] ? selinux_file_ioctl+0x13b/0x290 [ 400.583154][ T9225] ? selinux_file_ioctl+0xb6/0x290 [ 400.583174][ T9225] ? __pfx_raw_ioctl+0x10/0x10 [ 400.583191][ T9225] __x64_sys_ioctl+0x18e/0x210 [ 400.583210][ T9225] do_syscall_64+0x123/0x790 [ 400.583234][ T9225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.583251][ T9225] RIP: 0033:0x7f4b2e79ddeb [ 400.583266][ T9225] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 400.583282][ T9225] RSP: 002b:00007f4b2f6b2f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 400.583300][ T9225] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f4b2e79ddeb [ 400.583311][ T9225] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000008 [ 400.583321][ T9225] RBP: 00007f4b2f6b3fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 400.583331][ T9225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 400.583342][ T9225] R13: 0000200000000000 R14: 0000000000000000 R15: 0000000000000000 [ 400.583364][ T9225] [ 400.584527][ T9225] kobject: kobject_add_internal failed for raw-gadget.0 (error: -12 parent: drivers) [ 400.584568][ T9225] UDC core: USB Raw Gadget: driver registration failed: -12 [ 400.584583][ T9225] misc raw-gadget: fail, usb_gadget_register_driver returned -12 [ 400.775976][ T9234] netlink: 'syz.3.992': attribute type 2 has an invalid length. [ 400.775998][ T9234] netlink: 'syz.3.992': attribute type 2 has an invalid length. [ 400.780616][ T9234] netlink: 104 bytes leftover after parsing attributes in process `syz.3.992'. [ 401.369124][ T9239] loop4: detected capacity change from 0 to 2640 [ 401.700220][ T5608] buffer_io_error: 325 callbacks suppressed [ 401.700234][ T5608] Buffer I/O error on dev loop4, logical block 0, async page read [ 401.738102][ T9239] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 401.738145][ T9239] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 401.738165][ T9239] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 401.738178][ T9239] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 401.738198][ T9239] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 401.738211][ T9239] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 401.738224][ T9239] Buffer I/O error on dev loop4, logical block 6, lost async page write [ 401.738236][ T9239] Buffer I/O error on dev loop4, logical block 7, lost async page write [ 401.738257][ T9239] Buffer I/O error on dev loop4, logical block 8, lost async page write [ 402.129475][ T5333] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 402.311194][ T5333] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 402.314891][ T5333] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.314992][ T5333] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.315152][ T5333] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.592978][ T5333] usb 1-1: config 0 descriptor?? [ 402.632401][ T9265] FAULT_INJECTION: forcing a failure. [ 402.632401][ T9265] name failslab, interval 1, probability 0, space 0, times 0 [ 402.632452][ T9265] CPU: 0 UID: 0 PID: 9265 Comm: syz.3.1002 Not tainted syzkaller #0 PREEMPT(full) [ 402.632476][ T9265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 402.632489][ T9265] Call Trace: [ 402.632497][ T9265] [ 402.632505][ T9265] dump_stack_lvl+0x100/0x190 [ 402.632538][ T9265] should_fail_ex.cold+0x5/0xa [ 402.632567][ T9265] should_failslab+0xc2/0x120 [ 402.632594][ T9265] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 402.632619][ T9265] ? kstrdup_const+0x63/0x80 [ 402.632652][ T9265] kstrdup+0x51/0xe0 [ 402.632680][ T9265] kstrdup_const+0x63/0x80 [ 402.632708][ T9265] kvasprintf_const+0x10f/0x1a0 [ 402.632731][ T9265] kobject_set_name_vargs+0x5a/0x140 [ 402.632753][ T9265] kobject_init_and_add+0xe7/0x180 [ 402.632774][ T9265] ? __pfx_kobject_init_and_add+0x10/0x10 [ 402.632796][ T9265] ? __kasan_kmalloc+0xaa/0xb0 [ 402.632817][ T9265] ? lockdep_init_map_type+0x5c/0x250 [ 402.632839][ T9265] ? __raw_spin_lock_init+0x3a/0x110 [ 402.632867][ T9265] bus_add_driver+0x186/0x5b0 [ 402.632890][ T9265] driver_register+0x1e2/0x360 [ 402.632920][ T9265] ? rcu_is_watching+0x13/0xc0 [ 402.632947][ T9265] usb_gadget_register_driver_owner+0x132/0x210 [ 402.632973][ T9265] raw_ioctl+0x1a85/0x2b80 [ 402.633000][ T9265] ? __pfx_raw_ioctl+0x10/0x10 [ 402.633018][ T9265] ? selinux_file_ioctl+0x13b/0x290 [ 402.633040][ T9265] ? selinux_file_ioctl+0xb6/0x290 [ 402.633062][ T9265] ? __pfx_raw_ioctl+0x10/0x10 [ 402.633080][ T9265] __x64_sys_ioctl+0x18e/0x210 [ 402.633102][ T9265] do_syscall_64+0x123/0x790 [ 402.633129][ T9265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.633149][ T9265] RIP: 0033:0x7fc3ee19ddeb [ 402.633165][ T9265] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 402.633183][ T9265] RSP: 002b:00007fc3ec3b1f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 402.633201][ T9265] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007fc3ee19ddeb [ 402.633214][ T9265] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000008 [ 402.633225][ T9265] RBP: 00007fc3ec3b2fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 402.633237][ T9265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 402.633249][ T9265] R13: 0000200000000000 R14: 0000000000000000 R15: 0000000000000000 [ 402.633273][ T9265] [ 402.634464][ T9265] kobject: can not set name properly! [ 402.634487][ T9265] UDC core: USB Raw Gadget: driver registration failed: -12 [ 402.634504][ T9265] misc raw-gadget: fail, usb_gadget_register_driver returned -12 [ 402.898203][ T44] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 403.141574][ T44] usb 3-1: unable to get BOS descriptor or descriptor too short [ 403.142017][ T44] usb 3-1: not running at top speed; connect to a high speed hub [ 403.142044][ T44] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 403.142899][ T44] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 403.142922][ T44] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 403.142941][ T44] usb 3-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 403.142959][ T44] usb 3-1: config 14 has no interface number 0 [ 403.142974][ T44] usb 3-1: config 14 has no interface number 1 [ 403.143030][ T44] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 403.143052][ T44] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 403.143073][ T44] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 403.143095][ T44] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 403.143116][ T44] usb 3-1: config 14 interface 57 has no altsetting 0 [ 403.143131][ T44] usb 3-1: config 14 interface 228 has no altsetting 0 [ 403.144847][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.144869][ T44] usb 3-1: Product: syz [ 403.144882][ T44] usb 3-1: Manufacturer: syz [ 403.144902][ T44] usb 3-1: SerialNumber: syz [ 403.325685][ T5333] cp2112 0003:10C4:EA90.0022: unknown main item tag 0x0 [ 403.325716][ T5333] cp2112 0003:10C4:EA90.0022: unknown main item tag 0x0 [ 403.325736][ T5333] cp2112 0003:10C4:EA90.0022: unknown main item tag 0x0 [ 403.325793][ T5333] cp2112 0003:10C4:EA90.0022: unknown main item tag 0x0 [ 403.325814][ T5333] cp2112 0003:10C4:EA90.0022: unknown main item tag 0x0 [ 403.325834][ T5333] cp2112 0003:10C4:EA90.0022: unknown main item tag 0x0 [ 403.325854][ T5333] cp2112 0003:10C4:EA90.0022: unknown main item tag 0x0 [ 403.384573][ T5333] cp2112 0003:10C4:EA90.0022: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 403.388099][ T44] legousbtower 3-1:14.57: interrupt endpoints not found [ 403.413045][ T44] legousbtower 3-1:14.228: get version request failed: -71 [ 403.413124][ T44] legousbtower 3-1:14.228: probe with driver legousbtower failed with error -71 [ 403.425020][ T44] usb 3-1: USB disconnect, device number 36 [ 403.524642][ T5333] cp2112 0003:10C4:EA90.0022: Part Number: 0x00 Device Version: 0x00 [ 403.575014][ T5783] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 403.760102][ T9272] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1004'. [ 403.898793][ T5783] usb 2-1: Using ep0 maxpacket: 16 [ 403.988146][ T5783] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 404.217666][ T5783] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.217688][ T5783] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 404.217711][ T5783] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.672188][ T5783] usb 2-1: config 0 descriptor?? [ 404.917905][ T5333] cp2112 0003:10C4:EA90.0022: error reading lock byte: -71 [ 404.922282][ T9268] digital: digital_start_poll: Unknown protocol [ 405.298958][ T44] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 405.517169][ T44] usb 3-1: unable to get BOS descriptor or descriptor too short [ 405.563415][ T44] usb 3-1: not running at top speed; connect to a high speed hub [ 405.563516][ T44] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 405.616955][ T44] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 405.617039][ T44] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 405.617084][ T44] usb 3-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 405.617111][ T44] usb 3-1: config 14 has no interface number 0 [ 405.617205][ T44] usb 3-1: config 14 has no interface number 1 [ 405.617758][ T44] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 405.617813][ T44] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 405.617847][ T44] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 405.617904][ T44] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 405.617934][ T44] usb 3-1: config 14 interface 57 has no altsetting 0 [ 405.617960][ T44] usb 3-1: config 14 interface 228 has no altsetting 0 [ 405.874301][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.874362][ T44] usb 3-1: Product: syz [ 405.874398][ T44] usb 3-1: Manufacturer: syz [ 405.874434][ T44] usb 3-1: SerialNumber: syz [ 406.016934][ T5783] microsoft 0003:045E:07DA.0023: ignoring exceeding usage max [ 406.050924][ T5783] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 406.050954][ T5783] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 406.050976][ T5783] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 406.055089][ T5783] hid_map_usage: 11766 callbacks suppressed [ 406.055108][ T5783] HID 045e:07da: Invalid code 65791 type 1 [ 406.055410][ T5783] HID 045e:07da: Invalid code 768 type 1 [ 406.055423][ T5783] HID 045e:07da: Invalid code 769 type 1 [ 406.055435][ T5783] HID 045e:07da: Invalid code 770 type 1 [ 406.055446][ T5783] HID 045e:07da: Invalid code 771 type 1 [ 406.055457][ T5783] HID 045e:07da: Invalid code 772 type 1 [ 406.055468][ T5783] HID 045e:07da: Invalid code 773 type 1 [ 406.055480][ T5783] HID 045e:07da: Invalid code 774 type 1 [ 406.055491][ T5783] HID 045e:07da: Invalid code 775 type 1 [ 406.055501][ T5783] HID 045e:07da: Invalid code 776 type 1 [ 406.059939][ T5333] usb 1-1: USB disconnect, device number 49 [ 406.077590][ T5783] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0023/input/input47 [ 406.170103][ T5783] microsoft 0003:045E:07DA.0023: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 406.281933][ T9287] netlink: 'syz.0.1008': attribute type 2 has an invalid length. [ 406.281950][ T9287] netlink: 'syz.0.1008': attribute type 2 has an invalid length. [ 406.298804][ T9287] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1008'. [ 406.516421][ T5333] usb 2-1: USB disconnect, device number 43 [ 407.606592][ T44] legousbtower 3-1:14.57: interrupt endpoints not found [ 407.626318][ T44] legousbtower 3-1:14.228: get version request failed: -71 [ 407.626443][ T44] legousbtower 3-1:14.228: probe with driver legousbtower failed with error -71 [ 407.658911][ T44] usb 3-1: USB disconnect, device number 37 [ 407.728284][ T9298] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1012'. [ 407.998842][ T5333] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 408.058957][ T5783] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 408.169180][ T5333] usb 1-1: Using ep0 maxpacket: 16 [ 408.170991][ T5333] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 408.178129][ T5333] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.178146][ T5333] usb 1-1: Product: syz [ 408.178155][ T5333] usb 1-1: Manufacturer: syz [ 408.178163][ T5333] usb 1-1: SerialNumber: syz [ 408.209713][ T9305] FAULT_INJECTION: forcing a failure. [ 408.209713][ T9305] name failslab, interval 1, probability 0, space 0, times 0 [ 408.209742][ T9305] CPU: 0 UID: 0 PID: 9305 Comm: syz.1.1014 Not tainted syzkaller #0 PREEMPT(full) [ 408.209765][ T9305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 408.209777][ T9305] Call Trace: [ 408.209784][ T9305] [ 408.209791][ T9305] dump_stack_lvl+0x100/0x190 [ 408.209822][ T9305] should_fail_ex.cold+0x5/0xa [ 408.209846][ T9305] should_failslab+0xc2/0x120 [ 408.209875][ T9305] __kmalloc_cache_noprof+0x91/0x6d0 [ 408.209902][ T9305] ? bus_add_driver+0x92/0x5b0 [ 408.209924][ T9305] bus_add_driver+0x92/0x5b0 [ 408.209946][ T9305] driver_register+0x1e2/0x360 [ 408.209968][ T9305] ? rcu_is_watching+0x13/0xc0 [ 408.209992][ T9305] usb_gadget_register_driver_owner+0x132/0x210 [ 408.210015][ T9305] raw_ioctl+0x1a85/0x2b80 [ 408.210037][ T9305] ? __pfx_raw_ioctl+0x10/0x10 [ 408.210053][ T9305] ? selinux_file_ioctl+0x13b/0x290 [ 408.210071][ T9305] ? selinux_file_ioctl+0xb6/0x290 [ 408.210091][ T9305] ? __pfx_raw_ioctl+0x10/0x10 [ 408.210108][ T9305] __x64_sys_ioctl+0x18e/0x210 [ 408.210128][ T9305] do_syscall_64+0x123/0x790 [ 408.210153][ T9305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.210171][ T9305] RIP: 0033:0x7ff39379ddeb [ 408.210186][ T9305] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 408.210202][ T9305] RSP: 002b:00007ff3946daf00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 408.210220][ T9305] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007ff39379ddeb [ 408.210231][ T9305] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000008 [ 408.210241][ T9305] RBP: 00007ff3946dbfd0 R08: 0000000000000001 R09: 00000000ffffffff [ 408.210251][ T9305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 408.210261][ T9305] R13: 0000200000000000 R14: 0000000000000000 R15: 0000000000000000 [ 408.210283][ T9305] [ 408.210726][ T9305] UDC core: USB Raw Gadget: driver registration failed: -12 [ 408.210759][ T9305] misc raw-gadget: fail, usb_gadget_register_driver returned -12 [ 408.239660][ T5783] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 408.240593][ T5783] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.240616][ T5783] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.240664][ T5783] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.243049][ T5783] usb 4-1: config 0 descriptor?? [ 408.392198][ T5333] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 408.398236][ T5333] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 408.398503][ T5333] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 408.398533][ T5333] usb 1-1: media controller created [ 408.426207][ T5333] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 408.593833][ T9298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.596469][ T9298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.659657][ T5333] zl10353_read_register: readreg error (reg=127, ret==-110) [ 409.185129][ T5783] hid_parser_main: 7 callbacks suppressed [ 409.185144][ T5783] cp2112 0003:10C4:EA90.0024: unknown main item tag 0x0 [ 409.185159][ T5783] cp2112 0003:10C4:EA90.0024: unknown main item tag 0x0 [ 409.185171][ T5783] cp2112 0003:10C4:EA90.0024: unknown main item tag 0x0 [ 409.185183][ T5783] cp2112 0003:10C4:EA90.0024: unknown main item tag 0x0 [ 409.443102][ T5783] cp2112 0003:10C4:EA90.0024: unknown main item tag 0x0 [ 409.443133][ T5783] cp2112 0003:10C4:EA90.0024: unknown main item tag 0x0 [ 409.443153][ T5783] cp2112 0003:10C4:EA90.0024: unknown main item tag 0x0 [ 409.755137][ T5783] cp2112 0003:10C4:EA90.0024: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 409.793289][ T5333] dvb_usb_gl861 1-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 409.816274][ T5333] usb 1-1: USB disconnect, device number 50 [ 409.817564][ T5783] cp2112 0003:10C4:EA90.0024: Part Number: 0x00 Device Version: 0x00 [ 410.330875][ T10] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 410.681534][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 410.693156][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 410.728354][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.728387][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 410.728435][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.862866][ T10] usb 5-1: config 0 descriptor?? [ 410.865799][ T5783] cp2112 0003:10C4:EA90.0024: error reading lock byte: -71 [ 410.873622][ T5783] usb 4-1: USB disconnect, device number 51 [ 411.095715][ T9313] digital: digital_start_poll: Unknown protocol [ 411.126737][ T9328] lo: entered allmulticast mode [ 411.208821][ T44] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 411.300803][ T10] microsoft 0003:045E:07DA.0025: ignoring exceeding usage max [ 411.306932][ T10] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 411.306960][ T10] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 411.306981][ T10] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 411.309963][ T10] hid_map_usage: 11766 callbacks suppressed [ 411.309978][ T10] HID 045e:07da: Invalid code 65791 type 1 [ 411.310246][ T10] HID 045e:07da: Invalid code 768 type 1 [ 411.310256][ T10] HID 045e:07da: Invalid code 769 type 1 [ 411.310267][ T10] HID 045e:07da: Invalid code 770 type 1 [ 411.310277][ T10] HID 045e:07da: Invalid code 771 type 1 [ 411.310288][ T10] HID 045e:07da: Invalid code 772 type 1 [ 411.310298][ T10] HID 045e:07da: Invalid code 773 type 1 [ 411.310308][ T10] HID 045e:07da: Invalid code 774 type 1 [ 411.310318][ T10] HID 045e:07da: Invalid code 775 type 1 [ 411.310328][ T10] HID 045e:07da: Invalid code 776 type 1 [ 411.373463][ T5789] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 411.379534][ T44] usb 3-1: Using ep0 maxpacket: 32 [ 411.403476][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0025/input/input48 [ 411.403644][ T44] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 411.444643][ T44] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 411.444666][ T44] usb 3-1: config 0 has no interface number 0 [ 411.444686][ T44] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 411.444701][ T44] usb 3-1: config 0 interface 85 has no altsetting 0 [ 411.482908][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.482926][ T44] usb 3-1: Product: syz [ 411.482941][ T44] usb 3-1: Manufacturer: syz [ 411.482955][ T44] usb 3-1: SerialNumber: syz [ 411.484775][ T44] usb 3-1: config 0 descriptor?? [ 411.518046][ T10] microsoft 0003:045E:07DA.0025: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 411.562021][ T5789] usb 4-1: not running at top speed; connect to a high speed hub [ 411.562081][ T5789] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 411.577535][ T5789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.577584][ T5789] usb 4-1: Product: 圸ꌟ娨姪꟡윽짚ꮜ᳍饦帎꧘ᇐ砻垀δ☲⺀䦚鵖죱ᕃ婀栿♑髆忥嚷뿕鎛戣筏ᴠ妔䄕⣱㫣㝌妙䆯ꃿ襇Ⓓ涙⦹ꑟ찥부긥힞컕 [ 411.577610][ T5789] usb 4-1: Manufacturer: ࡡ [ 411.577624][ T5789] usb 4-1: SerialNumber: 䕳 [ 411.914618][ T9327] lo: left allmulticast mode [ 411.917725][ T5789] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 412.046464][ T5789] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 412.073688][ T5789] usb 4-1: USB disconnect, device number 52 [ 412.113053][ T5720] usb 5-1: USB disconnect, device number 49 [ 412.140502][ T44] appletouch 3-1:0.85: Geyser mode initialized. [ 412.145178][ T44] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input49 [ 412.187942][ T5608] udevd[5608]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 412.196779][ T9338] lo: entered allmulticast mode [ 412.392035][ T5333] usb 3-1: USB disconnect, device number 38 [ 412.406672][ T5333] appletouch 3-1:0.85: input: appletouch disconnected [ 412.438997][ T10] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 412.592686][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 412.592717][ T10] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 412.624759][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.624777][ T10] usb 1-1: Product: 圸ꌟ娨姪꟡윽짚ꮜ᳍饦帎꧘ᇐ砻垀δ☲⺀䦚鵖죱ᕃ婀栿♑髆忥嚷뿕鎛戣筏ᴠ妔䄕⣱㫣㝌妙䆯ꃿ襇Ⓓ涙⦹ꑟ찥부긥힞컕 [ 412.624793][ T10] usb 1-1: Manufacturer: ࡡ [ 412.624802][ T10] usb 1-1: SerialNumber: 䕳 [ 412.904958][ T9337] lo: left allmulticast mode [ 412.920367][ T10] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 413.442278][ T10] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 413.482427][ T10] usb 1-1: USB disconnect, device number 51 [ 413.544271][ T5608] udevd[5608]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 413.639460][ T5333] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 413.740376][ T9351] sctp: [Deprecated]: syz.2.1028 (pid 9351) Use of int in max_burst socket option deprecated. [ 413.740376][ T9351] Use struct sctp_assoc_value instead [ 413.789908][ T5333] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.c0 [ 413.791603][ T5333] usb 5-1: config 2 has an invalid descriptor of length 160, skipping remainder of the config [ 413.791627][ T5333] usb 5-1: config 2 has 0 interfaces, different from the descriptor's value: 18 [ 413.792457][ T5333] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 413.792476][ T5333] usb 5-1: SerialNumber: syz [ 414.009068][ T10] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 414.158817][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 414.162323][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 414.164935][ T10] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 414.164964][ T10] usb 3-1: config 0 has no interface number 0 [ 414.164997][ T10] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 414.165022][ T10] usb 3-1: config 0 interface 196 has no altsetting 0 [ 414.167184][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.167208][ T10] usb 3-1: Product: syz [ 414.167223][ T10] usb 3-1: Manufacturer: syz [ 414.167237][ T10] usb 3-1: SerialNumber: syz [ 414.242326][ T10] usb 3-1: config 0 descriptor?? [ 414.244261][ T9350] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 414.518389][ T5720] usb 5-1: USB disconnect, device number 50 [ 414.924695][ T10] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 414.924883][ T10] ipheth 3-1:0.196: probe with driver ipheth failed with error -71 [ 414.966826][ T10] usb 3-1: USB disconnect, device number 39 [ 415.020416][ T9363] lo: entered allmulticast mode [ 415.609069][ T5789] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 415.855265][ T5789] usb 1-1: not running at top speed; connect to a high speed hub [ 415.855298][ T5789] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 416.082743][ T5789] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.082772][ T5789] usb 1-1: Product: 圸ꌟ娨姪꟡윽짚ꮜ᳍饦帎꧘ᇐ砻垀δ☲⺀䦚鵖죱ᕃ婀栿♑髆忥嚷뿕鎛戣筏ᴠ妔䄕⣱㫣㝌妙䆯ꃿ襇Ⓓ涙⦹ꑟ찥부긥힞컕 [ 416.082795][ T5789] usb 1-1: Manufacturer: ࡡ [ 416.082809][ T5789] usb 1-1: SerialNumber: 䕳 [ 416.199566][ T5333] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 416.349469][ T5333] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.c0 [ 416.350311][ T5333] usb 4-1: config 2 has an invalid descriptor of length 160, skipping remainder of the config [ 416.350333][ T5333] usb 4-1: config 2 has 0 interfaces, different from the descriptor's value: 18 [ 416.351177][ T5333] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 416.351194][ T5333] usb 4-1: SerialNumber: syz [ 417.081515][ T9374] sctp: [Deprecated]: syz.2.1036 (pid 9374) Use of int in max_burst socket option deprecated. [ 417.081515][ T9374] Use struct sctp_assoc_value instead [ 417.122332][ T9362] lo: left allmulticast mode [ 417.126875][ T5789] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 417.222496][ T5789] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 417.269623][ T5789] usb 1-1: USB disconnect, device number 52 [ 417.339672][ T44] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 417.426549][ T5608] udevd[5608]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 417.529201][ T9387] lo: entered allmulticast mode [ 417.545472][ T5789] usb 4-1: USB disconnect, device number 53 [ 417.554817][ T44] usb 3-1: Using ep0 maxpacket: 32 [ 417.555515][ T44] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 417.556459][ T44] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 417.556482][ T44] usb 3-1: config 0 has no interface number 0 [ 417.556515][ T44] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 417.556539][ T44] usb 3-1: config 0 interface 196 has no altsetting 0 [ 417.558305][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.558326][ T44] usb 3-1: Product: syz [ 417.558340][ T44] usb 3-1: Manufacturer: syz [ 417.558354][ T44] usb 3-1: SerialNumber: syz [ 417.628941][ T44] usb 3-1: config 0 descriptor?? [ 417.629587][ T9374] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 417.868856][ T5720] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 418.031900][ T5720] usb 5-1: not running at top speed; connect to a high speed hub [ 418.031930][ T5720] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 418.037900][ T5720] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.037925][ T5720] usb 5-1: Product: 圸ꌟ娨姪꟡윽짚ꮜ᳍饦帎꧘ᇐ砻垀δ☲⺀䦚鵖죱ᕃ婀栿♑髆忥嚷뿕鎛戣筏ᴠ妔䄕⣱㫣㝌妙䆯ꃿ襇Ⓓ涙⦹ꑟ찥부긥힞컕 [ 418.037948][ T5720] usb 5-1: Manufacturer: ࡡ [ 418.037963][ T5720] usb 5-1: SerialNumber: 䕳 [ 418.198419][ T44] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 418.198632][ T44] ipheth 3-1:0.196: probe with driver ipheth failed with error -71 [ 418.225873][ T44] usb 3-1: USB disconnect, device number 40 [ 418.229050][ T5333] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 418.468787][ T5333] usb 1-1: Using ep0 maxpacket: 8 [ 418.469418][ T5333] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 418.474754][ T5333] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.474778][ T5333] usb 1-1: Product: syz [ 418.474792][ T5333] usb 1-1: Manufacturer: syz [ 418.474806][ T5333] usb 1-1: SerialNumber: syz [ 418.479558][ T5333] usb 1-1: config 0 descriptor?? [ 418.486753][ T5333] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 418.486790][ T5333] pctv452e: pctv452e_power_ctrl: 1 [ 418.486790][ T5333] [ 418.486824][ T5333] usb 1-1: selecting invalid altsetting 3 [ 418.486837][ T5333] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 418.486837][ T5333] [ 418.486850][ T5333] dvb-usb: bulk message failed: -22 (5/0) [ 418.499344][ T5333] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 418.499998][ T5333] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 418.500036][ T5333] usb 1-1: media controller created [ 418.500068][ T5333] dvb-usb: bulk message failed: -22 (8/0) [ 418.500083][ T5333] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 418.500120][ T5333] dvb-usb: MAC address reading failed. [ 418.516304][ T5333] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 419.185780][ T9392] dvb-usb: bulk message failed: -22 (7/0) [ 419.185800][ T9392] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 419.206645][ T9392] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 419.226230][ T9392] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 419.289328][ T5720] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 419.338675][ T9386] lo: left allmulticast mode [ 419.514235][ T5720] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 419.533187][ T5333] DVB: Unable to find symbol stb0899_attach() [ 419.533202][ T5333] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 419.586492][ T5720] usb 5-1: USB disconnect, device number 51 [ 419.612660][ T5608] udevd[5608]: setting owner of /dev/bus/usb/005/051 to uid=0, gid=0 failed: No such file or directory [ 419.678683][ T5608] udevd[5608]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 419.840567][ T5333] rc_core: IR keymap rc-tt-1500 not found [ 419.840586][ T5333] Registered IR keymap rc-empty [ 419.841522][ T5333] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 419.847935][ T5333] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input50 [ 419.994023][ T5333] dvb-usb: schedule remote query interval to 100 msecs. [ 419.994045][ T5333] pctv452e: pctv452e_power_ctrl: 0 [ 419.994045][ T5333] [ 419.994055][ T5333] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 419.999146][ T5333] usb 1-1: USB disconnect, device number 53 [ 420.039683][ T10] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 420.208184][ T10] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 420.223713][ T10] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 420.223745][ T10] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.223764][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 420.223790][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.234975][ T10] usb 4-1: config 0 descriptor?? [ 420.368998][ T5333] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 421.065851][ T30] audit: type=1326 audit(1789597783.148:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9418 comm="syz.1.1047" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39379e159 code=0x7ffc0000 [ 421.065897][ T30] audit: type=1326 audit(1789597783.148:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9418 comm="syz.1.1047" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39379e159 code=0x7ffc0000 [ 421.065933][ T30] audit: type=1326 audit(1789597783.148:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9418 comm="syz.1.1047" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff39375e98e code=0x7ffc0000 [ 421.065969][ T30] audit: type=1326 audit(1789597783.148:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9418 comm="syz.1.1047" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff39375e98e code=0x7ffc0000 [ 421.066004][ T30] audit: type=1326 audit(1789597783.148:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9418 comm="syz.1.1047" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff39375e98e code=0x7ffc0000 [ 421.067809][ T30] audit: type=1326 audit(1789597783.148:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9418 comm="syz.1.1047" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff39375e98e code=0x7ffc0000 [ 421.074910][ T30] audit: type=1326 audit(1789597783.158:1875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9418 comm="syz.1.1047" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff39375e98e code=0x7ffc0000 [ 421.077215][ T30] audit: type=1326 audit(1789597783.158:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9418 comm="syz.1.1047" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff39375e98e code=0x7ffc0000 [ 421.079095][ T30] audit: type=1326 audit(1789597783.168:1877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9418 comm="syz.1.1047" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff39375e98e code=0x7ffc0000 [ 421.080403][ T30] audit: type=1326 audit(1789597783.168:1878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9418 comm="syz.1.1047" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff39375e98e code=0x7ffc0000 [ 421.509525][ T9425] syzkaller1: tun_chr_ioctl cmd 35108 [ 421.768492][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 421.769100][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 421.804702][ T10] usb 4-1: USB disconnect, device number 54 [ 422.735440][ T9444] syzkaller0: entered promiscuous mode [ 422.735462][ T9444] syzkaller0: entered allmulticast mode [ 422.959679][ T10] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 423.143459][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 423.143908][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 423.143936][ T10] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 423.176854][ T10] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 423.176885][ T10] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 423.176905][ T10] usb 2-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 423.176923][ T10] usb 2-1: config 14 has no interface number 0 [ 423.176938][ T10] usb 2-1: config 14 has no interface number 1 [ 423.176988][ T10] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 423.177011][ T10] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 423.177035][ T10] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 423.177061][ T10] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 423.177091][ T10] usb 2-1: config 14 interface 57 has no altsetting 0 [ 423.177108][ T10] usb 2-1: config 14 interface 228 has no altsetting 0 [ 423.213920][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.213948][ T10] usb 2-1: Product: syz [ 423.213963][ T10] usb 2-1: Manufacturer: syz [ 423.213978][ T10] usb 2-1: SerialNumber: syz [ 423.548812][ T5720] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 424.683011][ T5720] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 424.698883][ T5720] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.698914][ T5720] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 424.698946][ T5720] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.709578][ T5720] usb 4-1: config 0 descriptor?? [ 424.899282][ T10] legousbtower 2-1:14.57: interrupt endpoints not found [ 424.906396][ T10] legousbtower 2-1:14.228: get version request failed: -71 [ 424.906525][ T10] legousbtower 2-1:14.228: probe with driver legousbtower failed with error -71 [ 424.936559][ T10] usb 2-1: USB disconnect, device number 44 [ 425.189248][ T5789] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 425.207320][ T5720] hid_parser_main: 7 callbacks suppressed [ 425.207341][ T5720] cp2112 0003:10C4:EA90.0026: unknown main item tag 0x0 [ 425.207363][ T5720] cp2112 0003:10C4:EA90.0026: unknown main item tag 0x0 [ 425.207384][ T5720] cp2112 0003:10C4:EA90.0026: unknown main item tag 0x0 [ 425.207403][ T5720] cp2112 0003:10C4:EA90.0026: unknown main item tag 0x0 [ 425.207421][ T5720] cp2112 0003:10C4:EA90.0026: unknown main item tag 0x0 [ 425.207439][ T5720] cp2112 0003:10C4:EA90.0026: unknown main item tag 0x0 [ 425.207456][ T5720] cp2112 0003:10C4:EA90.0026: unknown main item tag 0x0 [ 425.223242][ T5720] cp2112 0003:10C4:EA90.0026: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 425.251312][ T5698] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 425.341618][ T5789] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 425.343638][ T5789] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 425.343670][ T5789] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.343691][ T5789] usb 3-1: config 0 interface 0 has no altsetting 0 [ 425.343717][ T5789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.348194][ T5789] usb 3-1: config 0 descriptor?? [ 425.396340][ T5720] cp2112 0003:10C4:EA90.0026: Part Number: 0x00 Device Version: 0x00 [ 425.459190][ T5698] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.c0 [ 425.460048][ T5698] usb 5-1: config 2 has an invalid descriptor of length 160, skipping remainder of the config [ 425.460068][ T5698] usb 5-1: config 2 has 0 interfaces, different from the descriptor's value: 18 [ 425.462605][ T5698] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 425.462629][ T5698] usb 5-1: SerialNumber: syz [ 425.812141][ T1116] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 426.065097][ T9450] cp2112 0003:10C4:EA90.0026: Error starting transaction: -38 [ 426.643963][ T5790] usb 5-1: USB disconnect, device number 52 [ 426.644937][ T5720] cp2112 0003:10C4:EA90.0026: error reading lock byte: -71 [ 426.666710][ T5720] usb 4-1: USB disconnect, device number 55 [ 426.695596][ T5789] usbhid 3-1:0.0: can't add hid device: -71 [ 426.695690][ T5789] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 426.716963][ T5789] usb 3-1: USB disconnect, device number 41 [ 426.835241][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 426.835261][ T30] audit: type=1400 audit(1789597788.918:1904): avc: denied { unmount } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 426.865553][ T5698] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 427.011933][ T5698] usb 1-1: unable to get BOS descriptor or descriptor too short [ 427.012373][ T5698] usb 1-1: not running at top speed; connect to a high speed hub [ 427.012400][ T5698] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 427.013374][ T5698] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 427.013397][ T5698] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 427.013417][ T5698] usb 1-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 427.013436][ T5698] usb 1-1: config 14 has no interface number 0 [ 427.013451][ T5698] usb 1-1: config 14 has no interface number 1 [ 427.013537][ T5698] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 427.013561][ T5698] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 427.013585][ T5698] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 427.013610][ T5698] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 427.013635][ T5698] usb 1-1: config 14 interface 57 has no altsetting 0 [ 427.013654][ T5698] usb 1-1: config 14 interface 228 has no altsetting 0 [ 427.015401][ T5698] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.015424][ T5698] usb 1-1: Product: syz [ 427.015439][ T5698] usb 1-1: Manufacturer: syz [ 427.015454][ T5698] usb 1-1: SerialNumber: syz [ 427.635986][ T5698] legousbtower 1-1:14.57: interrupt endpoints not found [ 427.656009][ T5698] legousbtower 1-1:14.228: get version request failed: -71 [ 427.656144][ T5698] legousbtower 1-1:14.228: probe with driver legousbtower failed with error -71 [ 427.669745][ T5698] usb 1-1: USB disconnect, device number 54 [ 428.748866][ T5789] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 428.898874][ T5789] usb 3-1: Using ep0 maxpacket: 32 [ 428.900446][ T5789] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 428.902874][ T5789] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 428.902919][ T5789] usb 3-1: config 0 has no interface number 0 [ 428.903060][ T5789] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 428.903089][ T5789] usb 3-1: config 0 interface 85 has no altsetting 0 [ 428.988809][ T5789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.988841][ T5789] usb 3-1: Product: syz [ 428.988878][ T5789] usb 3-1: Manufacturer: syz [ 428.988915][ T5789] usb 3-1: SerialNumber: syz [ 429.180908][ T5789] usb 3-1: config 0 descriptor?? [ 429.639258][ T5720] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 429.788851][ T5790] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 429.791072][ T5720] usb 1-1: Using ep0 maxpacket: 32 [ 429.793002][ T5720] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 429.795845][ T5720] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 429.795872][ T5720] usb 1-1: config 0 has no interface number 0 [ 429.795906][ T5720] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 429.795930][ T5720] usb 1-1: config 0 interface 85 has no altsetting 0 [ 429.797753][ T5720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.797777][ T5720] usb 1-1: Product: syz [ 429.797791][ T5720] usb 1-1: Manufacturer: syz [ 429.797805][ T5720] usb 1-1: SerialNumber: syz [ 429.822217][ T30] audit: type=1400 audit(1789597791.908:1905): avc: denied { name_bind } for pid=9505 comm="syz.4.1074" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 429.822955][ T30] audit: type=1400 audit(1789597791.908:1906): avc: denied { node_bind } for pid=9505 comm="syz.4.1074" saddr=fe80::aa src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 429.880657][ T5789] appletouch 3-1:0.85: Geyser mode initialized. [ 429.927376][ T5720] usb 1-1: config 0 descriptor?? [ 429.942670][ T5789] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input51 [ 429.943767][ T5790] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 429.944649][ T5790] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.944675][ T5790] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.944707][ T5790] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.947000][ T5790] usb 2-1: config 0 descriptor?? [ 430.099670][ T10] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 430.144454][ T5698] usb 3-1: USB disconnect, device number 42 [ 430.231827][ T5698] appletouch 3-1:0.85: input: appletouch disconnected [ 430.256448][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 430.257394][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 430.257420][ T10] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 430.260314][ T10] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 430.260335][ T10] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 430.260353][ T10] usb 4-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 430.260367][ T10] usb 4-1: config 14 has no interface number 0 [ 430.260382][ T10] usb 4-1: config 14 has no interface number 1 [ 430.260425][ T10] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 430.260443][ T10] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 430.260462][ T10] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 430.260481][ T10] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 430.260501][ T10] usb 4-1: config 14 interface 57 has no altsetting 0 [ 430.260516][ T10] usb 4-1: config 14 interface 228 has no altsetting 0 [ 430.267568][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.267594][ T10] usb 4-1: Product: syz [ 430.267615][ T10] usb 4-1: Manufacturer: syz [ 430.267630][ T10] usb 4-1: SerialNumber: syz [ 430.463947][ T5790] cp2112 0003:10C4:EA90.0027: unknown main item tag 0x0 [ 430.463980][ T5790] cp2112 0003:10C4:EA90.0027: unknown main item tag 0x0 [ 430.464002][ T5790] cp2112 0003:10C4:EA90.0027: unknown main item tag 0x0 [ 430.464023][ T5790] cp2112 0003:10C4:EA90.0027: unknown main item tag 0x0 [ 430.464064][ T5790] cp2112 0003:10C4:EA90.0027: unknown main item tag 0x0 [ 430.464085][ T5790] cp2112 0003:10C4:EA90.0027: unknown main item tag 0x0 [ 430.464110][ T5790] cp2112 0003:10C4:EA90.0027: unknown main item tag 0x0 [ 430.468128][ T5790] cp2112 0003:10C4:EA90.0027: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 430.530367][ T10] legousbtower 4-1:14.57: interrupt endpoints not found [ 430.542291][ T10] legousbtower 4-1:14.228: get version request failed: -71 [ 430.542418][ T10] legousbtower 4-1:14.228: probe with driver legousbtower failed with error -71 [ 430.553297][ T10] usb 4-1: USB disconnect, device number 56 [ 430.592764][ T5720] appletouch 1-1:0.85: Geyser mode initialized. [ 430.596324][ T5720] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input52 [ 430.661231][ T5790] cp2112 0003:10C4:EA90.0027: Part Number: 0x00 Device Version: 0x00 [ 430.814576][ T10] usb 1-1: USB disconnect, device number 55 [ 430.843669][ T10] appletouch 1-1:0.85: input: appletouch disconnected [ 431.268318][ T9504] cp2112 0003:10C4:EA90.0027: Error starting transaction: -38 [ 431.277892][ T5790] cp2112 0003:10C4:EA90.0027: error reading lock byte: -71 [ 431.297853][ T5790] usb 2-1: USB disconnect, device number 45 [ 431.351277][ T9526] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1080'. [ 431.608786][ T10] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 431.648913][ T5789] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 431.734467][ T9532] FAULT_INJECTION: forcing a failure. [ 431.734467][ T9532] name failslab, interval 1, probability 0, space 0, times 0 [ 431.734498][ T9532] CPU: 0 UID: 0 PID: 9532 Comm: syz.0.1083 Not tainted syzkaller #0 PREEMPT(full) [ 431.734522][ T9532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 431.734537][ T9532] Call Trace: [ 431.734545][ T9532] [ 431.734554][ T9532] dump_stack_lvl+0x100/0x190 [ 431.734591][ T9532] should_fail_ex.cold+0x5/0xa [ 431.734619][ T9532] should_failslab+0xc2/0x120 [ 431.734649][ T9532] __kmalloc_cache_noprof+0x91/0x6d0 [ 431.734678][ T9532] ? bus_add_driver+0x92/0x5b0 [ 431.734703][ T9532] bus_add_driver+0x92/0x5b0 [ 431.734725][ T9532] driver_register+0x1e2/0x360 [ 431.734746][ T9532] ? rcu_is_watching+0x13/0xc0 [ 431.734775][ T9532] usb_gadget_register_driver_owner+0x132/0x210 [ 431.734800][ T9532] raw_ioctl+0x1a85/0x2b80 [ 431.734826][ T9532] ? __pfx_raw_ioctl+0x10/0x10 [ 431.734844][ T9532] ? selinux_file_ioctl+0x13b/0x290 [ 431.734865][ T9532] ? selinux_file_ioctl+0xb6/0x290 [ 431.734890][ T9532] ? __pfx_raw_ioctl+0x10/0x10 [ 431.734912][ T9532] __x64_sys_ioctl+0x18e/0x210 [ 431.734935][ T9532] do_syscall_64+0x123/0x790 [ 431.734965][ T9532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.734986][ T9532] RIP: 0033:0x7f4b2e79ddeb [ 431.735003][ T9532] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 431.735022][ T9532] RSP: 002b:00007f4b2f6b2f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 431.735041][ T9532] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f4b2e79ddeb [ 431.735054][ T9532] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000008 [ 431.735065][ T9532] RBP: 00007f4b2f6b3fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 431.735077][ T9532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 431.735089][ T9532] R13: 0000200000000000 R14: 0000000000000000 R15: 0000000000000000 [ 431.735115][ T9532] [ 431.735136][ T9532] UDC core: USB Raw Gadget: driver registration failed: -12 [ 431.735152][ T9532] misc raw-gadget: fail, usb_gadget_register_driver returned -12 [ 431.758820][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 431.759731][ T10] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 431.762898][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.762919][ T10] usb 4-1: Product: syz [ 431.762931][ T10] usb 4-1: Manufacturer: syz [ 431.762947][ T10] usb 4-1: SerialNumber: syz [ 432.016018][ T5789] usb 3-1: Using ep0 maxpacket: 8 [ 432.032347][ T5789] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 432.065137][ T10] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 432.098560][ T10] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 432.100022][ T10] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 432.100057][ T10] usb 4-1: media controller created [ 432.136378][ T5789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.136404][ T5789] usb 3-1: Product: syz [ 432.136418][ T5789] usb 3-1: Manufacturer: syz [ 432.136433][ T5789] usb 3-1: SerialNumber: syz [ 432.148080][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 432.169304][ T5789] usb 3-1: config 0 descriptor?? [ 432.173691][ T5789] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 432.173726][ T5789] pctv452e: pctv452e_power_ctrl: 1 [ 432.173726][ T5789] [ 432.173761][ T5789] usb 3-1: selecting invalid altsetting 3 [ 432.173775][ T5789] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 432.173775][ T5789] [ 432.173789][ T5789] dvb-usb: bulk message failed: -22 (5/0) [ 432.192291][ T5789] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 432.222650][ T5789] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 432.222695][ T5789] usb 3-1: media controller created [ 432.222730][ T5789] dvb-usb: bulk message failed: -22 (8/0) [ 432.222744][ T5789] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 432.222785][ T5789] dvb-usb: MAC address reading failed. [ 432.276287][ T5789] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 432.276552][ T9526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.276964][ T9526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.429010][ T10] zl10353_read_register: readreg error (reg=127, ret==-110) [ 432.644450][ T9542] bond0: (slave netdevsim0): Error: Device can not be enslaved while up [ 432.675813][ T9524] ------------[ cut here ]------------ [ 432.675830][ T9524] usb 4-1: BOGUS control dir, pipe 80003980 doesn't match bRequestType c0 [ 432.675849][ T9524] WARNING: drivers/usb/core/urb.c:411 at usb_submit_urb+0x15ff/0x19b0, CPU#1: syz.2.1079/9524 [ 432.682622][ T5698] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 432.709584][ T9524] Modules linked in: [ 432.713507][ T9524] CPU: 1 UID: 0 PID: 9524 Comm: syz.2.1079 Not tainted syzkaller #0 PREEMPT(full) [ 432.722813][ T9524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 432.732952][ T9524] RIP: 0010:usb_submit_urb+0x160d/0x19b0 [ 432.738597][ T9524] Code: 48 89 54 24 40 e8 43 cd 7c fa 4c 89 e7 e8 2b e0 da fe 48 89 c6 48 8d 3d 81 03 c3 09 44 8b 44 24 20 8b 4c 24 30 48 8b 54 24 40 <67> 48 0f b9 3a e9 28 ed ff ff e8 14 cd 7c fa 89 ee bf ff 00 00 00 [ 432.758278][ T9524] RSP: 0000:ffffc9000fa9f7c8 EFLAGS: 00010287 [ 432.765106][ T9524] RAX: ffffffff8cc86140 RBX: ffff88802f21ed00 RCX: 0000000080003980 [ 432.773820][ T9524] RDX: ffff888059ab1800 RSI: ffffffff8cc86140 RDI: ffffffff915255a0 [ 432.782319][ T9524] RBP: ffff88804f4c9058 R08: 00000000000000c0 R09: 0000000000000000 [ 432.790395][ T9524] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88804f4c90b0 [ 432.798385][ T9524] R13: ffff888073440ea0 R14: ffff888073440ea6 R15: ffff888073440ea7 [ 432.806387][ T9524] FS: 00007f31a8e906c0(0000) GS:ffff888123c59000(0000) knlGS:0000000000000000 [ 432.815549][ T9524] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 432.822261][ T9524] CR2: 0000001b32b11ff8 CR3: 000000002dbab000 CR4: 00000000003526f0 [ 432.830346][ T9524] Call Trace: [ 432.833623][ T9524] [ 432.836563][ T9524] ? __init_swait_queue_head+0xca/0x150 [ 432.842241][ T9524] usb_start_wait_urb+0x10e/0x580 [ 432.847294][ T9524] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 432.852945][ T9524] ? __asan_memset+0x23/0x50 [ 432.857547][ T9524] usb_control_msg+0x328/0x4b0 [ 432.862416][ T9524] ? __pfx_usb_control_msg+0x10/0x10 [ 432.867713][ T9524] gl861_ctrl_msg+0x1a5/0x4a0 [ 432.872427][ T9524] ? lockdep_hardirqs_on+0xb0/0x110 [ 432.878357][ T9524] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 432.884094][ T9524] gl861_i2c_master_xfer+0x545/0x690 [ 432.889432][ T9524] ? __i2c_transfer+0x69/0x1740 [ 432.894290][ T9524] __i2c_transfer+0x5d4/0x1740 [ 432.899083][ T9524] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 432.904928][ T9524] ? __pfx___i2c_transfer+0x10/0x10 [ 432.910229][ T9524] ? rt_mutex_slowtrylock+0x93/0x100 [ 432.915529][ T9524] i2c_transfer+0x158/0x380 [ 432.920061][ T9524] i2c_transfer_buffer_flags+0x10c/0x190 [ 432.925699][ T9524] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 432.931870][ T9524] ? i2cdev_read+0xe4/0x2b0 [ 432.936398][ T9524] i2cdev_read+0x111/0x2b0 [ 432.940845][ T9524] ? __pfx_i2cdev_read+0x10/0x10 [ 432.945792][ T9524] vfs_read+0x1e4/0xb40 [ 432.949983][ T9524] ? lock_acquire+0x1d1/0x380 [ 432.954664][ T9524] ? __fget_files+0x34/0x3d0 [ 432.959285][ T9524] ? __pfx_vfs_read+0x10/0x10 [ 432.963959][ T9524] ? find_held_lock+0x2b/0x80 [ 432.968641][ T9524] ? __fget_files+0x215/0x3d0 [ 432.973411][ T9524] ? __fget_files+0x215/0x3d0 [ 432.978828][ T9524] ? __fget_files+0x21f/0x3d0 [ 432.983524][ T9524] ksys_read+0x12a/0x250 [ 432.987765][ T9524] ? __pfx_ksys_read+0x10/0x10 [ 432.993050][ T9524] ? trace_irq_enable.constprop.0+0x2f/0x160 [ 432.999076][ T9524] do_syscall_64+0x123/0x790 [ 433.003681][ T9524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.009600][ T9524] RIP: 0033:0x7f31a7f9e159 [ 433.014024][ T9524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.033752][ T9524] RSP: 002b:00007f31a8e90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 433.042198][ T9524] RAX: ffffffffffffffda RBX: 00007f31a8225fa0 RCX: 00007f31a7f9e159 [ 433.050208][ T9524] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 433.058176][ T9524] RBP: 00007f31a803506b R08: 0000000000000000 R09: 0000000000000000 [ 433.066163][ T9524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 433.074157][ T9524] R13: 00007f31a8226038 R14: 00007f31a8225fa0 R15: 00007ffed046b9c8 [ 433.082891][ T9524] [ 433.085921][ T9524] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 433.093197][ T9524] CPU: 1 UID: 0 PID: 9524 Comm: syz.2.1079 Not tainted syzkaller #0 PREEMPT(full) [ 433.102489][ T9524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 433.112539][ T9524] Call Trace: [ 433.115816][ T9524] [ 433.118741][ T9524] dump_stack_lvl+0x100/0x190 [ 433.123433][ T9524] vpanic+0x553/0x970 [ 433.127415][ T9524] ? __pfx_vpanic+0x10/0x10 [ 433.131924][ T9524] panic+0xd1/0xe0 [ 433.135647][ T9524] ? __pfx_panic+0x10/0x10 [ 433.140073][ T9524] check_panic_on_warn.cold+0x19/0x34 [ 433.145454][ T9524] ? usb_submit_urb+0x15ff/0x19b0 [ 433.150479][ T9524] __warn.cold+0x191/0x318 [ 433.154896][ T9524] __report_bug+0x30f/0x440 [ 433.159406][ T9524] ? usb_submit_urb+0x15ff/0x19b0 [ 433.164435][ T9524] ? __pfx___report_bug+0x10/0x10 [ 433.169461][ T9524] ? lockdep_hardirqs_on+0x7d/0x110 [ 433.174669][ T9524] ? usb_submit_urb+0x160d/0x19b0 [ 433.179699][ T9524] report_bug_entry+0xe2/0x290 [ 433.184467][ T9524] ? usb_submit_urb+0x160d/0x19b0 [ 433.189495][ T9524] handle_bug+0x1cd/0x2a0 [ 433.193833][ T9524] exc_invalid_op+0x17/0x50 [ 433.198343][ T9524] asm_exc_invalid_op+0x1a/0x20 [ 433.203191][ T9524] RIP: 0010:usb_submit_urb+0x160d/0x19b0 [ 433.208822][ T9524] Code: 48 89 54 24 40 e8 43 cd 7c fa 4c 89 e7 e8 2b e0 da fe 48 89 c6 48 8d 3d 81 03 c3 09 44 8b 44 24 20 8b 4c 24 30 48 8b 54 24 40 <67> 48 0f b9 3a e9 28 ed ff ff e8 14 cd 7c fa 89 ee bf ff 00 00 00 [ 433.228513][ T9524] RSP: 0000:ffffc9000fa9f7c8 EFLAGS: 00010287 [ 433.234674][ T9524] RAX: ffffffff8cc86140 RBX: ffff88802f21ed00 RCX: 0000000080003980 [ 433.242642][ T9524] RDX: ffff888059ab1800 RSI: ffffffff8cc86140 RDI: ffffffff915255a0 [ 433.250611][ T9524] RBP: ffff88804f4c9058 R08: 00000000000000c0 R09: 0000000000000000 [ 433.258604][ T9524] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88804f4c90b0 [ 433.266577][ T9524] R13: ffff888073440ea0 R14: ffff888073440ea6 R15: ffff888073440ea7 [ 433.274573][ T9524] ? usb_submit_urb+0x15f5/0x19b0 [ 433.279627][ T9524] ? __init_swait_queue_head+0xca/0x150 [ 433.285201][ T9524] usb_start_wait_urb+0x10e/0x580 [ 433.290252][ T9524] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 433.295830][ T9524] ? __asan_memset+0x23/0x50 [ 433.300534][ T9524] usb_control_msg+0x328/0x4b0 [ 433.305331][ T9524] ? __pfx_usb_control_msg+0x10/0x10 [ 433.310670][ T9524] gl861_ctrl_msg+0x1a5/0x4a0 [ 433.315374][ T9524] ? lockdep_hardirqs_on+0xb0/0x110 [ 433.320589][ T9524] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 433.325812][ T9524] gl861_i2c_master_xfer+0x545/0x690 [ 433.331102][ T9524] ? __i2c_transfer+0x69/0x1740 [ 433.335970][ T9524] __i2c_transfer+0x5d4/0x1740 [ 433.340758][ T9524] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 433.346585][ T9524] ? __pfx___i2c_transfer+0x10/0x10 [ 433.351891][ T9524] ? rt_mutex_slowtrylock+0x93/0x100 [ 433.357247][ T9524] i2c_transfer+0x158/0x380 [ 433.361774][ T9524] i2c_transfer_buffer_flags+0x10c/0x190 [ 433.367428][ T9524] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 433.373627][ T9524] ? i2cdev_read+0xe4/0x2b0 [ 433.378178][ T9524] i2cdev_read+0x111/0x2b0 [ 433.382628][ T9524] ? __pfx_i2cdev_read+0x10/0x10 [ 433.387586][ T9524] vfs_read+0x1e4/0xb40 [ 433.391760][ T9524] ? lock_acquire+0x1d1/0x380 [ 433.396453][ T9524] ? __fget_files+0x34/0x3d0 [ 433.401051][ T9524] ? __pfx_vfs_read+0x10/0x10 [ 433.405729][ T9524] ? find_held_lock+0x2b/0x80 [ 433.410411][ T9524] ? __fget_files+0x215/0x3d0 [ 433.415095][ T9524] ? __fget_files+0x215/0x3d0 [ 433.419780][ T9524] ? __fget_files+0x21f/0x3d0 [ 433.424466][ T9524] ksys_read+0x12a/0x250 [ 433.428741][ T9524] ? __pfx_ksys_read+0x10/0x10 [ 433.433504][ T9524] ? trace_irq_enable.constprop.0+0x2f/0x160 [ 433.439499][ T9524] do_syscall_64+0x123/0x790 [ 433.444187][ T9524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.450086][ T9524] RIP: 0033:0x7f31a7f9e159 [ 433.454593][ T9524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.474201][ T9524] RSP: 002b:00007f31a8e90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 433.482621][ T9524] RAX: ffffffffffffffda RBX: 00007f31a8225fa0 RCX: 00007f31a7f9e159 [ 433.490596][ T9524] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 433.498571][ T9524] RBP: 00007f31a803506b R08: 0000000000000000 R09: 0000000000000000 [ 433.506572][ T9524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 433.514539][ T9524] R13: 00007f31a8226038 R14: 00007f31a8225fa0 R15: 00007ffed046b9c8 [ 433.522525][ T9524] [ 433.525785][ T9524] Kernel Offset: disabled [ 433.530106][ T9524] Rebooting in 86400 seconds..