last executing test programs: 11.920831569s ago: executing program 2 (id=14304): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, &(0x7f0000001580)={{0x3, 0xffffffff, 0xfffffffe, 0x2, 0x10, 0x7ff}, 0x172, [0x9, 0xfe, 0x821, 0x2, 0x0, 0x7, 0x6, 0x46, 0x3, 0x7, 0x401, 0x3, 0x2, 0x7, 0x6, 0xd, 0x7, 0x3, 0xfffffff7, 0x5d, 0x8, 0x1, 0x30000, 0x1, 0x0, 0x4, 0x5, 0x9, 0x9, 0x8000000, 0x3, 0xfffffffc, 0x5, 0x2, 0x5, 0x10001, 0xedc4, 0xfffffffb, 0xc, 0x7, 0x9, 0x0, 0xfffffff8, 0x4, 0x85, 0x2, 0x5, 0x1, 0x2, 0x6, 0x9, 0x800, 0xb, 0x5, 0x3, 0x2, 0x2b, 0x2c34, 0x7, 0xdab8, 0xffff, 0x3585, 0x9, 0x5, 0x4, 0x8, 0x0, 0xb, 0x9, 0x4, 0xe70, 0x1, 0x7, 0x0, 0xfffffffd, 0x0, 0x2, 0xc, 0x3ff, 0x8, 0x1, 0x0, 0x8, 0x48b, 0x1, 0x8, 0x5, 0x6, 0x448, 0x6, 0x6, 0xffffffff, 0xe45c, 0xab74, 0x100, 0x7, 0x80000001, 0x8000000, 0x7, 0x0, 0x0, 0x6, 0xfffffff9, 0xb4d, 0xbd, 0xffff, 0x9, 0xfffffd49, 0x2, 0x5, 0x1, 0xfffff6d5, 0x9, 0x4, 0x5, 0xf, 0x3, 0x2000400, 0xe, 0x4800000, 0x7, 0x9, 0x6, 0xfffffff8, 0x8, 0x3, 0x5, 0x0, 0x8, 0xa2, 0xfffffffd, 0xfffffff9, 0x8, 0x3, 0x200, 0xd, 0x6, 0x0, 0x1, 0x0, 0x1, 0x1, 0x10, 0x6, 0x7ff, 0xd, 0x2, 0x5, 0x10000, 0xfffffffe, 0x81, 0x6, 0x0, 0x7fff, 0x1, 0x0, 0x7, 0x9f, 0x6, 0x7, 0x1, 0x8, 0x2, 0x2027, 0x8000, 0x8, 0x5, 0x5c79, 0x9, 0x4, 0x7, 0x3d, 0x53, 0xffffffff, 0xfffffff7, 0x2, 0x8, 0x6, 0x37, 0x3ff, 0x1, 0x7, 0x10001, 0x0, 0xffff, 0x500000, 0x40000000, 0x6, 0xfffffffe, 0x1, 0x9, 0x5, 0x966e, 0x1, 0xfffffffe, 0x0, 0x10000, 0x0, 0x2, 0x9, 0xb7a, 0x9, 0x2, 0x5, 0xa1c3, 0x80, 0x6, 0x9, 0x3, 0x0, 0x10, 0x9, 0x200, 0xa6, 0x2, 0x703e, 0x9, 0x0, 0x6, 0x7ff, 0x7ff, 0x4, 0x2, 0xfffffffb, 0x8a, 0x100, 0x4, 0x0, 0x80000000, 0x5, 0x4, 0x5, 0x6, 0x6, 0x3, 0x2dfb68ba, 0x3, 0x6, 0x5, 0x9, 0x9, 0x8, 0x7, 0x15, 0x8, 0x5, 0x238, 0xd5, 0xb3f1, 0x5, 0xdf, 0x6a4a1f7, 0x0, 0x0, 0x10, 0x8, 0x5, 0xe527, 0xf0d3, 0x5, 0x5, 0x0, 0xcd9, 0x8000, 0x7, 0x1, 0xffffffff, 0xfffffff9, 0x7, 0x3, 0x6a79, 0x5, 0x2, 0x2, 0x0, 0x3, 0x1, 0x6, 0xfffffffe, 0x5, 0x6, 0xd7, 0x4, 0x4, 0x1, 0x6, 0x4, 0xac5, 0x9, 0x5, 0xcc, 0x1, 0x3, 0x7, 0xf1f7, 0x4, 0x7, 0xb5ad, 0x74c36f13, 0xc89, 0x2, 0xbf, 0x1, 0x3da, 0x0, 0xffff, 0x7, 0x5, 0x8, 0x4, 0x7, 0x2, 0x5, 0x6, 0x80, 0x0, 0x17, 0x81, 0x4, 0x3, 0xfffffff7, 0x7, 0x0, 0x80000000, 0xa9, 0x7, 0x0, 0x1, 0x4, 0x10001, 0x5b8e, 0x7fffffff, 0x97, 0xb, 0x7, 0x9, 0x3, 0x4, 0x8, 0x6, 0x4, 0x2, 0x4, 0x8000000, 0x0, 0xd8b4, 0x2, 0x2, 0xbbf2, 0x800, 0x5, 0x2, 0x8, 0x2, 0x5f, 0xfd9c, 0x3cfa, 0x1, 0x2, 0x7, 0x5a6, 0x8, 0x8, 0xfffffff1, 0x0, 0x669ccda, 0xff, 0x9, 0x71c5, 0x6, 0x7, 0xff, 0x6, 0x5, 0xe232, 0x40, 0xa, 0xb4f8, 0x8, 0x9, 0x3, 0xd38e, 0x1ff, 0x7, 0x54a8, 0xc, 0xfffffff8, 0x1, 0x4, 0x1, 0x3bd, 0x6, 0xffffffff, 0x7f, 0x4, 0x6, 0x1, 0x0, 0xd, 0xe35, 0x3aa03290, 0x2, 0x9, 0x0, 0x4, 0x5, 0x200, 0x9, 0x1, 0xe3, 0xa, 0x7fffffff, 0x7, 0x7, 0x5, 0x7, 0x1, 0x7, 0x8, 0x4, 0x0, 0x7b6, 0x0, 0x6, 0x2, 0xe0, 0x3, 0x8, 0x0, 0x3, 0xc, 0x1, 0x6, 0x0, 0xb, 0x3ff, 0x80000, 0x5, 0x4, 0x4, 0x7, 0x3, 0x1, 0x4f3aff91, 0x83, 0x7f, 0x800, 0x4, 0xfff, 0x4, 0x80000000, 0x8, 0x5, 0x6, 0x2, 0x1, 0x80000000, 0x976, 0xe3, 0x2ea31eba, 0xffffffff, 0x9, 0x2, 0x7, 0xfffffff8, 0x10, 0x9, 0x8000, 0x7, 0x0, 0x6, 0xffffffff, 0x6db, 0x0, 0x8, 0x2, 0x7, 0x2, 0x3, 0xf, 0x4, 0xe9c7, 0x2, 0x7f, 0x73, 0xd2, 0x5, 0x1, 0x2, 0x9, 0x101, 0xef, 0x649, 0x100, 0x8, 0x7ff, 0x10, 0x1, 0x9, 0x2, 0x6a, 0x3, 0x1, 0x100, 0x8, 0x1, 0x7, 0x9, 0x24, 0xfff, 0x3, 0x0, 0xf, 0x8, 0xcc, 0xfff, 0x22, 0x7, 0x10001, 0x7ff, 0xcf12, 0x9, 0x542, 0x10, 0x400, 0x8001, 0x5, 0x197, 0xeafa, 0x5, 0x64c, 0x0, 0x8, 0x1000, 0xd2, 0xff, 0xfffffffb, 0x2d, 0x3, 0x6, 0x8000, 0x7fffffff, 0x98c, 0x6, 0x4, 0x8, 0x2, 0x455, 0x2, 0x6, 0xcb5, 0x800, 0x981, 0x0, 0x5, 0x3621, 0x7fff, 0x9, 0x4, 0x7, 0x5, 0x3, 0x4, 0x0, 0xfc, 0x7, 0x1, 0x1, 0x5, 0x6ead, 0x7, 0x6, 0x360, 0x81, 0x2, 0x13400, 0xfff, 0x6, 0xfffffffc, 0x4, 0x800, 0x1, 0x7, 0x6, 0x1, 0x17e, 0x4, 0x9, 0x5, 0x1, 0x9, 0x1, 0xf15, 0x8, 0x401, 0x9, 0x401, 0x6, 0x1, 0x8001, 0x400, 0x5, 0x0, 0x2, 0x26b, 0x5, 0x7, 0xf, 0x8, 0x0, 0x9, 0x7fff, 0x9, 0x2, 0x1, 0x9, 0x3, 0xc9, 0x400, 0x5, 0x2, 0x1f, 0x2, 0xf, 0x40, 0x8, 0x6, 0x5, 0xcf, 0x8001, 0x30, 0x98, 0x2, 0x3b0, 0x2f9df6e1, 0x10, 0x401, 0xfffffffb, 0x6, 0xfffffffb, 0x6, 0x7, 0x47e1, 0x8, 0xfffffff9, 0x2, 0x10, 0x1, 0x5, 0x0, 0x8, 0xff, 0x0, 0x4, 0x682b, 0x82, 0x0, 0xfffffffe, 0x7, 0x8, 0x78c3, 0x2, 0x4d, 0xd95, 0x80e9, 0xd, 0x7e, 0x1, 0x3, 0x9, 0x10001, 0x3, 0x53, 0x1, 0x7, 0xfff, 0x2, 0xffffffba, 0x9, 0x3, 0x4, 0x8, 0x1, 0x523, 0x7, 0x7fff, 0xc, 0x6, 0x7, 0x1, 0x101, 0x7, 0x59aa284c, 0x3, 0x1, 0xd, 0xfffff800, 0x5, 0x46aa, 0x7, 0x5, 0x6, 0x1, 0x12, 0x9, 0x9, 0x5, 0x4, 0x4, 0x80, 0x4, 0x2, 0x8, 0x3ff, 0x9, 0x401, 0x3, 0x4, 0xd, 0x0, 0x0, 0x5ba, 0x204000, 0x3, 0x5, 0x9, 0xfffffff9, 0x1ff, 0x7fffffff, 0x3, 0x8, 0x6e5, 0x8, 0xa1, 0x3ff, 0x5, 0xbb22, 0xbe, 0x8, 0x1, 0x2, 0x3, 0x1a3b71d0, 0x6, 0xf, 0x5, 0xfffffffc, 0x3, 0x5, 0xdc4e, 0x80000001, 0x2, 0x7, 0x1, 0x4, 0x3, 0x10001, 0x2, 0xffffffff, 0x5, 0x401, 0x6, 0x0, 0x7, 0x3, 0x3, 0x4, 0xffffff26, 0x3, 0x4cd, 0x2, 0xffffffff, 0x8, 0x5, 0x70, 0x1, 0x1, 0x8, 0x8, 0x8, 0xc1b, 0x7fff, 0x2, 0x3, 0x100, 0x6b3, 0x132d, 0x894, 0x84e, 0x4, 0x5, 0x9, 0x6, 0x4, 0x86bf, 0x7, 0x6, 0x5339, 0x4, 0x81, 0xf, 0x2, 0xfffffffe, 0xb7da, 0x1, 0x2, 0x1, 0x3, 0x8, 0x8, 0x6, 0xfff, 0xffffffff, 0x7, 0x7, 0xffffffff, 0xf25, 0x400, 0xffff, 0x9, 0xffff, 0x7, 0x3, 0x4, 0x5, 0x101, 0x0, 0x1, 0x2, 0xfff, 0x3, 0x6, 0x4, 0x1, 0x2, 0x40, 0x69, 0x7, 0x9, 0x0, 0x70cecd6, 0x80, 0x80000000, 0x1, 0x115, 0x7, 0x8, 0x5, 0x7, 0x3, 0x200, 0x5, 0x40, 0x101, 0x1, 0x6, 0x2, 0x6, 0xef36, 0xa, 0x6, 0x834, 0x3, 0x1, 0x34c17020, 0xb63, 0x2, 0x80000000, 0x7, 0x1, 0x5, 0x7, 0x4, 0x4, 0x2, 0x9, 0x4, 0x1, 0x1, 0x2, 0xa, 0x0, 0x6, 0x80000000, 0x4, 0x7, 0x8001, 0x5, 0x0, 0x9, 0xfffffff7, 0x8, 0xfffffff6, 0x1, 0x8, 0x3, 0xe2c, 0x6, 0x9, 0x81, 0x9, 0x80000001, 0x7, 0x6, 0xb1, 0x7f, 0xfffffff9, 0xe, 0x4, 0x4, 0x1, 0x78000, 0x3, 0x3, 0x2, 0x0, 0x3, 0x3, 0xb915, 0x3, 0x8, 0x6, 0x6, 0x6, 0x0, 0x7, 0x4, 0x6, 0x1, 0x7, 0x0, 0x400, 0x2, 0x4, 0x5, 0x750, 0x6, 0x2, 0x7, 0x9, 0x400, 0x8, 0x5, 0x5256, 0x80000001, 0x1, 0x4, 0x8, 0x0, 0x6, 0xffffff7f, 0xff0, 0xf6, 0x3, 0xa, 0x4, 0x1, 0x4, 0xfffff220, 0x1, 0x8000, 0x2, 0x0, 0x7, 0x1, 0x8, 0x4, 0x7, 0x0, 0x3, 0x9, 0xf, 0x0, 0x3, 0x7, 0x2, 0x6, 0xbe, 0xfffffffc, 0x9, 0x1, 0xf5d4, 0xf9, 0x6, 0x3, 0x7ed6, 0x2, 0x7, 0xbb, 0x9, 0x9, 0x2a7, 0x0, 0x2, 0x4, 0x5, 0x8, 0x4, 0x0, 0x10, 0x6, 0xd, 0x3, 0x4, 0x1000, 0xffffffff, 0xe, 0xb6, 0x2, 0x8, 0x80, 0x4, 0xfffffffa, 0x9079, 0x9, 0xfffffff8, 0x3, 0x9c6, 0x80000001, 0xffff, 0x6f4, 0x7, 0x8, 0x8]}) 10.127019152s ago: executing program 2 (id=14312): socket(0x1e, 0x4, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) r2 = userfaultfd(0x80001) request_key(&(0x7f0000000040)='dns_resolver\x00', 0x0, &(0x7f0000001fee)='y\xa9n::e\x00'/18, 0xfffffffffffffffe) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000180)={{&(0x7f0000a37000/0x3000)=nil, 0x3000}}) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x44040000) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x7, 0x90, 0x3, [{{0x9, 0x4, 0x0, 0x10, 0x1, 0x7, 0x1, 0x2, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x6, 0x1, 0xd}}}}}]}}]}}, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000f00)=@nat={'nat\x00', 0x670, 0x5, 0x4f0, 0x2c8, 0x1b8, 0xffffffff, 0x0, 0x2c8, 0x458, 0x458, 0xffffffff, 0x458, 0x458, 0x5, 0x0, {[{{@uncond, 0x0, 0x180, 0x1b8, 0x48, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@rand_addr=0x64010102, [0xffffff00, 0xff, 0xffffffff, 0xff000000], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0x0, 0xffffff00, 0xffffff00], @ipv6=@local, [0xff, 0xff, 0xffffffff, 0xffffffff], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff, 0xff, 0xffffffff, 0xff000000], 0xc9, 0x4, 0x0, 0x4e24, 0x4e24, 0x4e21, 0x4e22, 0x1800, 0x100}, 0x40, 0x800, 0x4e24, 0x4e24, 0x4e23, 0x4e22}}, @common=@unspec=@helper={{0x48}, {0x0, 'tftp-20000\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x19, @multicast2, @loopback, @icmp_id=0x66, @port=0x4e24}}}}, {{@ip={@broadcast, @remote, 0xff, 0xff, 'nicvf0\x00', 'ipvlan1\x00', {0xff}, {}, 0xc, 0x0, 0x30}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gre0\x00', {0x8, 0x5, 0xfffffffc, 0x8, 0x8, 0x51f2, 0x6dc0}, {0xff}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x11, @ipv6=@mcast1, @ipv4=@loopback, @icmp_id=0x64, @port=0x4e23}}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00'}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x890, 0x218, 0x0, 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @gre_key}}}, {{@ip={@broadcast, @rand_addr=0x1, 0x0, 0x0, 'nicvf0\x00', 'pim6reg\x00', {}, {0xff}, 0x1}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x21, @broadcast, @dev={0xac, 0x14, 0x14, 0x1c}, @gre_key=0x40, @port=0x4e23}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x550) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newsa={0x15c, 0x1a, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@dev={0xfe, 0x80, '\x00', 0x2e}, 0x0, 0x0, 0x4e21, 0x6, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@remote, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 8.918559981s ago: executing program 0 (id=14316): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0xb, &(0x7f00000000c0)={0xfffffff6}, 0x10) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r3, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) bind$unix(r1, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e24}, 0x6e) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000060000000800000008"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffff9839974900000100181200000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x16, 0x4, "94c161ee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000140)={0x0, 0xf, 0x4, "c7a13997"}, 0x0, 0x0}) 7.7059799s ago: executing program 1 (id=14319): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000200)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x7a) write$binfmt_elf32(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006"], 0x3a) close(r2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) fcntl$setlease(r1, 0x400, 0x1) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000004c00)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="a9861869a566ef7d12e4230965648a02e444b356635d9d010100000000000000d4b1195e006faf1d27860004a2da9cc6f9b669d457bf7da5b858b15c0e2e0100af28f1a77685198fd252ffc0be21220182592d68b031cf570f09d9bc4c3084cd8264ed8f0573e95c72", 0x69}, {0x0}], 0x2, &(0x7f0000001480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4012}], 0x1, 0x0) recvmmsg$unix(r4, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000034c0)=""/4096, 0x1000}], 0x1}}], 0x2, 0x10000, 0x0) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x604, 0x0, 0xa, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df, 0x2e}) r5 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x2000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000500)={0x800000, 0x210002, 0xffffffdd, 0x7fffffff, 0x2, 0x69}) socket(0x40000000015, 0x5, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4621, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) syz_open_dev$sndpcmp(&(0x7f0000000080), 0xfffffffffffffff7, 0x8000) ioctl$SNDCTL_TMR_START(r5, 0x5402) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYRES16], 0x0) 6.962128231s ago: executing program 2 (id=14323): pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000080)="6a5b3986af4597e55298f14c7f2017060f16a0ac9bf3a54e624ac84ccc7fc7f393c4ece527a20ab460470ed133df2a0d", 0x30}, {0x0}], 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000009c0), 0x42, 0x0) socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYRES16=r1], 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) r3 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) rmdir(&(0x7f0000000040)='./control\x00') getdents(r3, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) 5.763689006s ago: executing program 0 (id=14325): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x48, r2, 0x11, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e4}], @NL80211_ATTR_AUTH_TYPE={0x8}, @key_params=[@NL80211_ATTR_MAC={0xa}], @key_params=[@NL80211_ATTR_KEY_SEQ={0x4}]]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x40004) (fail_nth: 8) 5.212639281s ago: executing program 0 (id=14326): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080081000000060027"], 0x44}, 0x1, 0x0, 0x0, 0x24048004}, 0x4000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES64, @ANYRESHEX=r0], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000280), 0x105, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r1, &(0x7f0000000800)="60ec", &(0x7f0000000240)=""/246}, 0x20) r2 = syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRES16=r1], 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000140)=0xfffffffffffffffe, 0xb, 0x3) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) 4.820805027s ago: executing program 2 (id=14328): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socket$vsock_stream(0x28, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1e, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) fcntl$lock(r0, 0x6, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f00000001c0)={0x1, 0x0, &(0x7f0000000240)=[0x0]}) syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000380), 0x3, 0xbc01) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f0000000180)=""/135) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e61, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) sendfile(r3, r5, 0x0, 0x3fffffffffffff) 4.694921376s ago: executing program 4 (id=14329): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8993, 0x0) 4.61854475s ago: executing program 1 (id=14330): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) sendto$inet6(r0, &(0x7f00000000c0)="0a792fa3ac6394", 0x7, 0x20000045, &(0x7f0000000000)={0xa, 0x2, 0xffff, @loopback, 0x6c}, 0x1c) write$P9_RMKNOD(r0, &(0x7f0000000280)={0x14, 0x13, 0x2, {0x4, 0x2}}, 0xfffffe5c) 4.464957421s ago: executing program 1 (id=14331): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r2, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x80) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (fail_nth: 8) 4.451318599s ago: executing program 4 (id=14332): socket$alg(0x26, 0x5, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) lseek(0xffffffffffffffff, 0x6, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x600, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x200000, 0x8000, 0x0, 0x0, r2, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') quotactl_fd$Q_GETQUOTA(r3, 0x0, r1, &(0x7f00000003c0)) syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) 4.012040499s ago: executing program 1 (id=14333): socket(0x1e, 0x1, 0x7) r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) 3.855201608s ago: executing program 4 (id=14334): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r3, 0x8001}}, 0x48) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 3.136051873s ago: executing program 2 (id=14337): socket(0x1e, 0x4, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) r2 = userfaultfd(0x80001) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000180)={{&(0x7f0000a37000/0x3000)=nil, 0x3000}}) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x44040000) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x7, 0x90, 0x3, [{{0x9, 0x4, 0x0, 0x10, 0x1, 0x7, 0x1, 0x2, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x6, 0x1, 0xd}}}}}]}}]}}, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000f00)=@nat={'nat\x00', 0x670, 0x5, 0x4f0, 0x2c8, 0x1b8, 0xffffffff, 0x0, 0x2c8, 0x458, 0x458, 0xffffffff, 0x458, 0x458, 0x5, 0x0, {[{{@uncond, 0x0, 0x180, 0x1b8, 0x48, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@rand_addr=0x64010102, [0xffffff00, 0xff, 0xffffffff, 0xff000000], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0x0, 0xffffff00, 0xffffff00], @ipv6=@local, [0xff, 0xff, 0xffffffff, 0xffffffff], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff, 0xff, 0xffffffff, 0xff000000], 0xc9, 0x4, 0x0, 0x4e24, 0x4e24, 0x4e21, 0x4e22, 0x1800, 0x100}, 0x40, 0x800, 0x4e24, 0x4e24, 0x4e23, 0x4e22}}, @common=@unspec=@helper={{0x48}, {0x0, 'tftp-20000\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x19, @multicast2, @loopback, @icmp_id=0x66, @port=0x4e24}}}}, {{@ip={@broadcast, @remote, 0xff, 0xff, 'nicvf0\x00', 'ipvlan1\x00', {0xff}, {}, 0xc, 0x0, 0x30}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gre0\x00', {0x8, 0x5, 0xfffffffc, 0x8, 0x8, 0x51f2, 0x6dc0}, {0xff}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x11, @ipv6=@mcast1, @ipv4=@loopback, @icmp_id=0x64, @port=0x4e23}}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00'}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x890, 0x218, 0x0, 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @gre_key}}}, {{@ip={@broadcast, @rand_addr=0x1, 0x0, 0x0, 'nicvf0\x00', 'pim6reg\x00', {}, {0xff}, 0x1}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x21, @broadcast, @dev={0xac, 0x14, 0x14, 0x1c}, @gre_key=0x40, @port=0x4e23}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x550) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newsa={0x15c, 0x1a, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@dev={0xfe, 0x80, '\x00', 0x2e}, 0x0, 0x0, 0x4e21, 0x6, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@remote, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 2.97950796s ago: executing program 4 (id=14338): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], 0x0}, 0x94) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="12011003ea969420ca16021558510102030109021b0001050d9001090434000159492e260905030200047f42ff109e7845fa410ab4923aad5d59da116a1ef0b03227636aa686defb72ef78d1d023cc8888ec15e06dcc2d645f4db8e724d95b654d94a58390a7537a0da5825fab7882ebf37fbceda14365b94f8b1817246381aa00c89763822be17edef7b306561de180aed9e6b8f4e51edebc7072f997808800000000000000000000190d69c01671fc959e273941cd55c1545e7a42f1b58f7708eb68ca75a17fcf2d528bd3b83ce77ba94803c52f065b5d8a12147fac547d68cfd09f0b8f22c1a1"], &(0x7f0000000240)={0x0, 0x0, 0x1, 0x0, 0x155555555555564f, [{0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000394c2d2cc0e680fea48813fe0273acac8738d923da8c115c839c3a5e0909cdf7424e602a87e4b32918c008dd97756c97474fb10b9787e87146300"/71]}, {0x0, &(0x7f0000000040)=@lang_id={0x0, 0x3, 0x458}}, {0x0, &(0x7f0000000080)=@lang_id={0x0, 0x3, 0x441}}, {0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00039a888dba1f00c02f37229deaeca21ecabdbc4f403e2b4f6aa210cd6310000000b17e3f780b000000000000000494885c8425aa31d15cc2bd7c592909d2"]}, {0xfffffffffffffced, &(0x7f0000000200)=@lang_id={0x0, 0x3, 0x44c}}]}) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff00, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe53, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd4, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xcf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x7, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r2, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2.309045608s ago: executing program 1 (id=14339): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_usb_connect(0x3, 0x2d, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000394c2d2cc0e680fea48813fe0273acac8738d923da8c115c839c3a5e0909cdf7424e602a87e4b32918c008dd97756c97474fb10b9787e87146300"/71]}, {0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x441}}, {0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00039a888dba1f00c02f37229deaeca21ecabdbc4f403e2b4f6aa210cd6310000000b17e3f780b000000000000000494885c8425aa31d15cc2bd7c592909d2"]}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x44c}}]}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r2, 0x8001}}, 0x48) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2.266652429s ago: executing program 3 (id=14340): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="0a792fa3ac6394", 0x7, 0x20000045, &(0x7f0000000000)={0xa, 0x2, 0xffff, @loopback, 0x6c}, 0x1c) write$P9_RMKNOD(r0, &(0x7f0000000280)={0x14, 0x13, 0x2, {0x4, 0x2}}, 0xfffffe5c) 2.193789851s ago: executing program 3 (id=14341): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000000)=0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r2, &(0x7f0000000040)=""/148, 0xffffff96) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x18}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) io_uring_enter(r2, 0x5775, 0x51ad, 0x34, &(0x7f0000000140)={[0x1]}, 0x8) 2.034833901s ago: executing program 0 (id=14342): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r2, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x80) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000080000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.956981816s ago: executing program 3 (id=14343): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x40, r0, 0x801, 0x400, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "6e615216fe"}]}]}, 0x40}}, 0x0) (fail_nth: 7) 1.937383733s ago: executing program 0 (id=14344): semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000000080)=""/23) r0 = semget(0x1, 0x4, 0x39c) semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) semop(r0, &(0x7f0000000000)=[{0x3, 0xbbdd, 0x1000}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040)=[0xabaa]) semctl$IPC_RMID(r0, 0x0, 0x0) 1.864759288s ago: executing program 3 (id=14345): sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)}], 0x1}}], 0x1, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffd, 0x6, 0xab, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000040)="198393c3aba8", 0xfffffffffffffffd, 0x0, 0x10030, 0x0, 0x0}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000340)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000000)=0x1, 0x4) bind$inet(r2, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r2, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)=""/156, 0x9c}, 0x6}], 0x1, 0x60010020, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000500)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 1.724381451s ago: executing program 0 (id=14346): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], 0x0}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'batadv_slave_0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x5, 0x80000000, 0x1, 0x4, 0x9, 0xa4, 0x0, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x6, 0x5, 0x101, 0x1002, 0x9, 0x1, 0x3, 0x800, 0x3, 0xe3bc, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x0, 0x40, 0xd, 0xe, 0x1, 0x100, 0x4, 0x1c00, 0xb, 0xb1a, 0xbed4, 0x20000008, 0x8000100, 0x7, 0x4, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x0, 0x83, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0xaf5, 0xaa, 0x101, 0x2, 0x180000, 0xf, 0x8b, 0x5, 0x2af, 0x6, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0xfffffffe, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0xe, 0xfffffffd, 0x6, 0x6, 0x9, 0x80000000, 0xfdfffffc, 0x2, 0x2, 0x84, 0x100, 0x7, 0x252, 0x81, 0x5d102cf1, 0x2, 0x20006, 0x5, 0x1, 0xb, 0x0, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0xfffff801, 0x8, 0x4000000, 0x4, 0x2, 0x40, 0x8, 0x4, 0x6, 0x100, 0x80066cd, 0xc, 0x8, 0x1, 0x1fc, 0xc5c, 0x3ff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="12011003ea969420ca16021558510102030109021b0001050d9001090434000159492e260905030200047f42ff109e7845fa410ab4923aad5d59da116a1ef0b03227636aa686defb72ef78d1d023cc8888ec15e06dcc2d645f4db8e724d95b654d94a58390a7537a0da5825fab7882ebf37fbceda14365b94f8b1817246381aa00c89763822be17edef7b306561de180aed9e6b8f4e51edebc7072f997808800000000000000000000190d69c016"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000394c2d2cc0e680fea48813fe0273acac8738d923da8c115c839c3a5e0909cdf7424e602a87e4b32918c008dd97756c97474fb10b9787e87146300"/71]}, {0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x441}}, {0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00039a888dba1f00c02f37229deaeca21ecabdbc4f403e2b4f6aa210cd6310000000b17e3f780b000000000000000494885c8425aa31d15cc2bd7c592909d2"]}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x44c}}]}) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff00, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe53, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd4, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xcf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x7, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c633774262eb5ab2c7b9c5cff6ce78185d8c4dc064744e042"}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r4, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r5, 0x8001}}, 0x48) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.678261412s ago: executing program 1 (id=14347): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socket$vsock_stream(0x28, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1e, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) fcntl$lock(r0, 0x6, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f00000001c0)={0x1, 0x0, &(0x7f0000000240)=[0x0]}) syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000380), 0x3, 0xbc01) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f0000000180)=""/135) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e61, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) sendfile(r3, r5, 0x0, 0x3fffffffffffff) 1.560002891s ago: executing program 4 (id=14348): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r3, 0x8001}}, 0x48) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.486971469s ago: executing program 3 (id=14349): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c00000013000500000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000006948000c001a80080004800a"], 0x2c}}, 0x4) 1.39827588s ago: executing program 3 (id=14350): socket(0x1e, 0x1, 0x7) r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) 662.712581ms ago: executing program 4 (id=14351): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201105"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000040)={&(0x7f00000001c0)=[{0x9, 0x8800, 0x0, 0x0}, {0x7, 0x801, 0x0, 0x0}], 0x2}) 0s ago: executing program 2 (id=14352): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000280)=0x80000001, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r3, 0x80304d65, &(0x7f0000000080)) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r4 = syz_open_dev$audion(0x0, 0x6, 0xa8c00) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket(0xa, 0x3, 0x3a) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x18, 0x24, 0x301, 0x0, 0x80, {0x11}, [@nested={0x4, 0x13d}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000006200)=[{{&(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000ac0)=[{&(0x7f0000000340)="91c02098f718a3074afae6a68814a49e7861fa1f577aeb83588dda0a2c25ee18f31dd941a2b76ff001a6ec876fda6836d09b4d0e5e52d5b3586922a739de506197da958605d6970f2ccaac6020d41d0edc4736932286bfaead7bbbe5607268491e270d3d1eb7b2d2e7f7789872053479355059144b5df9480de1bbe0d6618b6846f131d6ac411dc789f708cbcdd904c2ccf756f6d66a75c2839bc34de5ed7d5ab50395a191a508115f5214dc28587a8801", 0xb1}, {&(0x7f0000000400)="e1aec96e42fb95a51d57eff041eedee045303b85fae6da8b4dfec858c9b513b5bd8c62664cdccee070e00fd2e634e16582cc18b6ac1bffef6cb32d002404df07a5188d8549d469a76281db94bc6d6519d5f6a11e13794b1835d6d920a73d1960790ba5ad5e47b48fc311cb16fdcf2779cfbd1524f4728e8c725b5b5fbfa84d2bbc9eade0ed822fb37bede09c93768d", 0x8f}, {&(0x7f0000000940)="78614cc4650f5d1cf75e0e67bc2a1b4ff3b38c0fc4830e052bb7f6d67194e68a450e04a65dc7118b3d4dd01cbcf297d61eb3ff1defe9d78a177b4ead1fa918904b40bc13398cc49119540bc5fea913904965a7931437e079858c8d57d466fe952f9d6a0efb0ca2595022ff7b1423d61802a8a4be03a8cb8db7b17d5d4b063d9ec65d508e611b4d0e2dd6ce5120f6f669284be93b828cd12675605358de", 0x9d}, {&(0x7f0000000dc0)="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", 0x1bf}, {&(0x7f00000007c0)="292ec90eac2fdd883de89afff72b594a15c92e412e2d5da01b90490d6ef4f9e8791775d730062cb0a54f07aea54b222a0dd09d135d20dd389b2c1d0d873a5df09eb3d29ed8902244624ea53cf0c2ee50af848e14568fda86bf7af805da7c98a92ad8c796120e11d5969871604c10afef1b543a1bd3a7d7c5e7723e799c3bf97168a4f200974d5484771097bc9e38b7e8fcea1797467ef85276c6388f79bfe76cb4866202795d64c9a1", 0xa9}, {&(0x7f00000004c0)="c68624f702fe7b6c22e6486064d8b8d61afc58e7b4a289a0204da4dd555fa46ab615745090680fee199062730118eaca6652735f2c86f4d7023a37b57e384558d08133cc478376ed05e7bc59738b06ff5009fa3cea078f062e009a0d13eaaca1f438f9c7663d6856d23d", 0x6a}, {&(0x7f0000000880)="02e644128774bef2a9dd6621a7b2ea2e7265b00c032496528812817a89574eaf20642b85be4dcbcfcbd31b71a9261bd762896e9ce856aaffcb89a1f0f98719ae8b998f78734ebf7725e5e16c34de7479d61283890072145bb423e04567fe5d47a4ab177a64be2d785289027f844177846518ca0c1e97b1af615f2c33eb6eb34bd4bc296e68ed549b84f3ffffffff0000000028", 0x93}, {&(0x7f0000000b80)="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", 0x136}, {&(0x7f0000000a00)="386bec23499e036e63a8ce3d311c23927fd9c8da35d1cd81c401498a91bad1be6488a566130ecad5fa05c3e4807783e8eb2cd08b53e67118a3ac4f5350629d8ecbfe1566e6225dbcdda4a2739f05690f3564820038bd562fd001f111adec5cb99cd82999493884fb343830cdbea55e66c7bc2b003aa01752a55fcbfe8995b0ee10b26d493a18edad9028fd4e6c173b7984cc640d6ea36c947f57a6b4c51d3669fbd034a6c137069cd5", 0xa9}], 0x9, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1c0000000000000001632b0010b8e88791e8f3a4cc1500000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r7, @ANYRES8=r0, @ANYRES32=r2, @ANYRES32=r7, @ANYRES32=r6, @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001004000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xd0, 0xb1bc1c9f0d24bfe2}}], 0x1, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xe, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x8}, 0x0) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r11, &(0x7f0000000040)={0xa, 0x3, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc580000000c0a010100000000000000000a0000060900020073797a31000000000900"], 0xbc}}, 0x40) r13 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r13, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_EXPBUF(r13, 0xc0405610, &(0x7f0000000000)={0x1, 0xbc3, 0x3}) io_setup(0x6, &(0x7f0000000540)) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') kernel console output (not intermixed with test programs): .000848][T12493] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 2765.023375][T12923] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 2765.044621][T12493] dib0700: firmware download failed at 7 with -22 [ 2765.051648][ T7215] ath6kl: Failed to submit usb control message: -71 [ 2765.077831][ T7215] ath6kl: unable to send the bmi data to the device: -71 [ 2765.083751][T12493] usb 2-1: USB disconnect, device number 67 [ 2765.095621][ T7215] ath6kl: Unable to send get target info: -71 [ 2765.129412][ T7215] ath6kl: Failed to init ath6kl core: -71 [ 2765.138343][ T7215] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 2765.166048][ T7215] usb 4-1: USB disconnect, device number 75 [ 2765.270547][T16938] usb 3-1: USB disconnect, device number 45 [ 2765.285971][T16938] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 2765.301473][T16938] aircable 3-1:5.52: device disconnected [ 2765.644968][T12493] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 2765.804822][T12493] usb 5-1: Using ep0 maxpacket: 8 [ 2765.816918][T12493] usb 5-1: config 0 has an invalid interface number: 130 but max is 0 [ 2765.825485][T12493] usb 5-1: config 0 has no interface number 0 [ 2765.838941][T12493] usb 5-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 2765.856925][T12493] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2765.865608][T12493] usb 5-1: Product: syz [ 2765.869800][T12493] usb 5-1: Manufacturer: syz [ 2765.884758][T12493] usb 5-1: SerialNumber: syz [ 2765.891509][T12493] usb 5-1: config 0 descriptor?? [ 2765.908967][T12493] as10x_usb: device has been detected [ 2765.920092][T12493] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 2765.933492][T12493] usb 5-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 2765.945050][ T7215] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 2765.948667][T12493] as10x_usb: error during firmware upload part1 [ 2765.960626][T12493] Registered device PCTV Systems picoStick (74e) [ 2766.075138][T16938] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 2766.106653][ T7215] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2766.117200][ T7215] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2766.126349][ T7215] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2766.135548][ T7215] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2766.145735][ T7215] usb 2-1: config 0 descriptor?? [ 2766.154898][T12493] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 2766.254880][T16938] usb 4-1: Using ep0 maxpacket: 32 [ 2766.261388][T16938] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2766.270776][T16938] usb 4-1: config 5 has an invalid interface number: 52 but max is 0 [ 2766.280269][T16938] usb 4-1: config 5 has no interface number 0 [ 2766.287749][T16938] usb 4-1: config 5 interface 52 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 2766.300673][T16938] usb 4-1: string descriptor 0 read error: -22 [ 2766.304905][T12493] usb 3-1: Using ep0 maxpacket: 16 [ 2766.307670][T16938] usb 4-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=51.58 [ 2766.315826][T12493] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2766.321357][T16938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2766.332654][T12493] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 2766.350785][T18395] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 2766.362442][T12493] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x24, changing to 0x4 [ 2766.364518][T16938] aircable 4-1:5.52: aircable converter detected [ 2766.374129][T12493] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 61 [ 2766.391605][T12493] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 2766.409519][T12493] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2766.409840][T16938] usb 4-1: aircable converter now attached to ttyUSB0 [ 2766.418897][T12493] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2766.438267][T12493] usb 3-1: SerialNumber: syz [ 2766.448416][T18397] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 2766.455931][T18397] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 2766.632201][T12923] usb 4-1: USB disconnect, device number 76 [ 2766.643658][T12923] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 2766.654775][T12923] aircable 4-1:5.52: device disconnected [ 2766.671898][T12493] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 2766.689173][T12493] usb 3-1: USB disconnect, device number 46 [ 2767.444849][T12923] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 2767.524791][T12493] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 2767.604766][T12923] usb 3-1: Using ep0 maxpacket: 32 [ 2767.615313][T12923] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 2767.624858][T12923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2767.639694][T12923] usb 3-1: config 0 descriptor?? [ 2767.694835][T12493] usb 4-1: Using ep0 maxpacket: 32 [ 2767.708151][T12493] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 2767.720215][T12493] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2767.731978][T12493] usb 4-1: config 0 descriptor?? [ 2767.856618][T12923] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 2767.868289][T12923] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2767.879570][T12923] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 2767.886830][T12923] usb 3-1: media controller created [ 2767.900570][T12923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2767.953497][T12923] DVB: Unable to find symbol dib7000p_attach() [ 2767.960363][T12923] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 2768.026112][T12923] rc_core: IR keymap rc-dib0700-rc5 not found [ 2768.032362][T12923] Registered IR keymap rc-empty [ 2768.038237][T12923] dvb-usb: could not initialize remote control. [ 2768.044523][T12923] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 2768.072800][T12923] usb 3-1: USB disconnect, device number 47 [ 2768.105686][T12923] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 2768.406962][T12923] usb 5-1: USB disconnect, device number 15 [ 2768.438225][T12923] Unregistered device PCTV Systems picoStick (74e) [ 2768.444497][T12923] as10x_usb: device has been disconnected [ 2768.728302][ T7215] usb 2-1: USB disconnect, device number 68 [ 2768.834899][T12923] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 2768.996609][T12923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2769.006616][T12923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 2769.017788][T12923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 255, setting to 64 [ 2769.029013][T12923] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 2769.038307][T12923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2769.048653][T12923] usb 5-1: config 0 descriptor?? [ 2769.054803][T16938] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 2769.056283][T18418] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2769.164837][ T7215] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 2769.214762][T16938] usb 3-1: Using ep0 maxpacket: 32 [ 2769.221193][T16938] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2769.230667][T16938] usb 3-1: config 5 has an invalid interface number: 52 but max is 0 [ 2769.239054][T16938] usb 3-1: config 5 has no interface number 0 [ 2769.246235][T16938] usb 3-1: config 5 interface 52 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 2769.259237][T16938] usb 3-1: string descriptor 0 read error: -22 [ 2769.265683][T16938] usb 3-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=51.58 [ 2769.274971][T16938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2769.276725][T12923] ath6kl: Failed to submit usb control message: -71 [ 2769.293396][T12923] ath6kl: unable to send the bmi data to the device: -71 [ 2769.304315][T12923] ath6kl: Unable to send get target info: -71 [ 2769.313245][T18426] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 2769.321797][T12923] ath6kl: Failed to init ath6kl core: -71 [ 2769.329498][T12923] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 2769.334392][ T7215] usb 2-1: Using ep0 maxpacket: 32 [ 2769.351122][T16938] aircable 3-1:5.52: aircable converter detected [ 2769.360175][T12923] usb 5-1: USB disconnect, device number 16 [ 2769.372006][ T7215] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2769.382609][ T7215] usb 2-1: config 5 has an invalid interface number: 52 but max is 0 [ 2769.390846][ T7215] usb 2-1: config 5 has no interface number 0 [ 2769.397526][ T7215] usb 2-1: config 5 interface 52 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 2769.413768][T16938] usb 3-1: aircable converter now attached to ttyUSB0 [ 2769.422338][ T7215] usb 2-1: string descriptor 0 read error: -22 [ 2769.433320][ T7215] usb 2-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=51.58 [ 2769.444156][ T7215] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2769.458785][T18428] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 2769.469817][ T7215] aircable 2-1:5.52: aircable converter detected [ 2769.481774][ T7215] usb 2-1: aircable converter now attached to ttyUSB1 [ 2769.565106][T23700] usb 3-1: USB disconnect, device number 48 [ 2769.580658][T23700] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 2769.589766][T23700] aircable 3-1:5.52: device disconnected [ 2769.676230][ T7215] usb 2-1: USB disconnect, device number 69 [ 2769.693663][ T7215] aircable ttyUSB1: aircable converter now disconnected from ttyUSB1 [ 2769.712127][ T7215] aircable 2-1:5.52: device disconnected [ 2770.134931][T12923] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 2770.177030][T12493] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 2770.188916][T12493] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 2770.199370][T12493] dib0700: firmware download failed at 7 with -22 [ 2770.213499][T12493] usb 4-1: USB disconnect, device number 77 [ 2770.239977][T18437] netlink: 'syz.2.14077': attribute type 10 has an invalid length. [ 2770.282512][T18437] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 2770.291760][T12923] usb 5-1: Using ep0 maxpacket: 32 [ 2770.300376][T12923] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2770.311826][T12923] usb 5-1: config 5 has an invalid interface number: 52 but max is 0 [ 2770.321901][T12923] usb 5-1: config 5 has no interface number 0 [ 2770.328772][T12923] usb 5-1: config 5 interface 52 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 2770.353259][T12923] usb 5-1: string descriptor 0 read error: -22 [ 2770.364906][T12923] usb 5-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=51.58 [ 2770.374006][T12923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2770.407777][T18433] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2770.435345][T12923] aircable 5-1:5.52: aircable converter detected [ 2770.453661][T18443] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 2770.462250][T12923] usb 5-1: aircable converter now attached to ttyUSB0 [ 2770.515446][T16938] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 2770.696292][T12923] usb 5-1: USB disconnect, device number 17 [ 2770.705078][T16938] usb 2-1: Using ep0 maxpacket: 32 [ 2770.714387][T16938] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2770.730142][T12923] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 2770.731142][T16938] usb 2-1: config 5 has an invalid interface number: 52 but max is 0 [ 2770.772767][T16938] usb 2-1: config 5 has no interface number 0 [ 2770.772879][T12923] aircable 5-1:5.52: device disconnected [ 2770.790523][T16938] usb 2-1: config 5 interface 52 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 2770.805110][T16938] usb 2-1: string descriptor 0 read error: -22 [ 2770.811683][T16938] usb 2-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=51.58 [ 2770.821398][T16938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2770.836822][T18439] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2770.852196][T16938] aircable 2-1:5.52: aircable converter detected [ 2770.867409][T16938] usb 2-1: aircable converter now attached to ttyUSB0 [ 2771.118637][T12923] usb 2-1: USB disconnect, device number 70 [ 2771.141485][T12923] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 2771.151584][T12923] aircable 2-1:5.52: device disconnected [ 2771.225346][T16938] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 2771.419635][T16938] usb 3-1: Using ep0 maxpacket: 32 [ 2771.447126][T16938] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 2771.472820][T16938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2771.509800][T16938] usb 3-1: config 0 descriptor?? [ 2771.743574][T16938] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 2771.768942][T16938] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2771.800443][T16938] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 2771.812787][T18470] netlink: 5060 bytes leftover after parsing attributes in process `syz.0.14085'. [ 2771.822192][T16938] usb 3-1: media controller created [ 2771.851626][T16938] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2771.941845][T16938] DVB: Unable to find symbol dib7000p_attach() [ 2771.948407][T16938] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 2772.024926][T16938] rc_core: IR keymap rc-dib0700-rc5 not found [ 2772.027203][T23700] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 2772.031154][T16938] Registered IR keymap rc-empty [ 2772.048309][T16938] dvb-usb: could not initialize remote control. [ 2772.055065][T16938] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 2772.073791][T16938] usb 3-1: USB disconnect, device number 49 [ 2772.085997][T12923] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 2772.117754][T16938] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 2772.214755][T23700] usb 2-1: Using ep0 maxpacket: 32 [ 2772.224346][T23700] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2772.243704][T23700] usb 2-1: config 5 has an invalid interface number: 52 but max is 0 [ 2772.255229][T12923] usb 5-1: Using ep0 maxpacket: 32 [ 2772.266392][T23700] usb 2-1: config 5 has no interface number 0 [ 2772.276200][T12923] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2772.288268][T23700] usb 2-1: config 5 interface 52 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 2772.311470][T12923] usb 5-1: config 5 has an invalid interface number: 52 but max is 0 [ 2772.332854][T12923] usb 5-1: config 5 has no interface number 0 [ 2772.341335][T23700] usb 2-1: string descriptor 0 read error: -22 [ 2772.356388][T12923] usb 5-1: config 5 interface 52 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 2772.367128][T23700] usb 2-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=51.58 [ 2772.398941][T23700] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2772.420758][T12923] usb 5-1: string descriptor 0 read error: -22 [ 2772.429565][T18467] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2772.441362][T12923] usb 5-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=51.58 [ 2772.463802][T23700] aircable 2-1:5.52: aircable converter detected [ 2772.473487][T12923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2772.510253][T23700] usb 2-1: aircable converter now attached to ttyUSB0 [ 2772.547885][T18469] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 2772.622520][T12923] aircable 5-1:5.52: aircable converter detected [ 2772.663655][T12923] usb 5-1: aircable converter now attached to ttyUSB1 [ 2772.704270][T12923] usb 2-1: USB disconnect, device number 71 [ 2772.751432][T12923] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 2772.779219][T12923] aircable 2-1:5.52: device disconnected [ 2772.919489][T17990] usb 5-1: USB disconnect, device number 18 [ 2772.937857][T17990] aircable ttyUSB1: aircable converter now disconnected from ttyUSB1 [ 2772.958189][T17990] aircable 5-1:5.52: device disconnected [ 2772.994907][T23700] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 2773.164763][T23700] usb 4-1: Using ep0 maxpacket: 32 [ 2773.175695][T23700] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 2773.203049][T23700] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2773.238311][T23700] usb 4-1: config 0 descriptor?? [ 2773.420999][T18483] netlink: 'syz.1.14092': attribute type 10 has an invalid length. [ 2773.566900][T18483] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 2773.784883][T12923] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 2773.862129][T18491] netlink: 36 bytes leftover after parsing attributes in process `syz.2.14093'. [ 2773.879326][T18491] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14093'. [ 2773.901036][T18491] netlink: 36 bytes leftover after parsing attributes in process `syz.2.14093'. [ 2773.920814][T18491] netlink: 36 bytes leftover after parsing attributes in process `syz.2.14093'. [ 2773.964899][T12923] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2773.979127][T12923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2773.988661][T18491] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14093'. [ 2774.011734][T12923] usb 5-1: Product: syz [ 2774.022758][T12923] usb 5-1: Manufacturer: syz [ 2774.033028][T12923] usb 5-1: SerialNumber: syz [ 2774.055033][T12493] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 2774.214772][T12493] usb 2-1: Using ep0 maxpacket: 8 [ 2774.221833][T12493] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2774.231612][T12493] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2774.255788][T12493] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2774.262958][T12493] pvrusb2: ********** [ 2774.267294][T12493] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2774.278273][T12493] pvrusb2: Important functionality might not be entirely working. [ 2774.286709][T12493] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2774.298190][T12493] pvrusb2: ********** [ 2774.448276][ T2344] pvrusb2: Invalid write control endpoint [ 2774.458531][T12923] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2774.473852][T12923] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2774.524604][ T2344] pvrusb2: Invalid write control endpoint [ 2774.534665][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2774.546847][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2774.557907][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2774.578252][ T2344] pvrusb2: Device being rendered inoperable [ 2774.594380][ T2344] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 2774.604017][ T2344] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 2774.617712][ T2344] pvrusb2: Attached sub-driver cx25840 [ 2774.623206][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2774.637541][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 2774.643914][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 2774.655489][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2774.677480][T18489] pvrusb2: Attempted to execute control transfer when device not ok [ 2774.720749][T12493] usb 2-1: USB disconnect, device number 72 [ 2774.822916][T18498] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 2775.608667][T23700] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 2775.621173][T23700] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 2775.634888][T23700] dib0700: firmware download failed at 7 with -22 [ 2775.655287][T12493] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 2775.666421][T23700] usb 4-1: USB disconnect, device number 78 [ 2775.697284][T12923] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 2775.814945][T12493] usb 2-1: device descriptor read/64, error -71 [ 2775.964840][T16938] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 2775.984869][T23700] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 2776.054784][T12493] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 2776.114765][T16938] usb 3-1: Using ep0 maxpacket: 32 [ 2776.121505][T16938] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 2776.130851][T16938] usb 3-1: config 0 has no interface number 0 [ 2776.134924][T23700] usb 4-1: Using ep0 maxpacket: 32 [ 2776.139639][T16938] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2776.144652][T23700] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 2776.154586][T16938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2776.160597][T23700] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2776.170433][T16938] usb 3-1: Product: syz [ 2776.179448][T23700] usb 4-1: config 0 descriptor?? [ 2776.180813][T16938] usb 3-1: Manufacturer: syz [ 2776.186320][T12493] usb 2-1: device descriptor read/64, error -71 [ 2776.197033][T16938] usb 3-1: SerialNumber: syz [ 2776.206864][T16938] usb 3-1: config 0 descriptor?? [ 2776.214398][T16938] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2776.306171][T12493] usb usb2-port1: attempt power cycle [ 2776.405474][T23700] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 2776.421579][T23700] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2776.431936][T23700] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 2776.435220][T16938] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2776.439428][T23700] usb 4-1: media controller created [ 2776.470510][T23700] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2776.479563][T16938] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2776.586976][T23700] DVB: Unable to find symbol dib7000p_attach() [ 2776.594035][T23700] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 2776.657081][T12493] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 2776.691455][T18509] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2776.702644][T12923] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -EPROTO [ 2776.726195][T12923] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 2776.738534][T12493] usb 2-1: device descriptor read/8, error -71 [ 2776.748637][T23700] rc_core: IR keymap rc-dib0700-rc5 not found [ 2776.755632][T12923] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2776.765381][T23700] Registered IR keymap rc-empty [ 2776.770494][T23700] dvb-usb: could not initialize remote control. [ 2776.777532][T12923] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2776.786128][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2776.786438][T23700] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 2776.802900][T16938] usb 3-1: USB disconnect, device number 50 [ 2776.803895][T12923] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 2776.812504][T16938] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2776.836305][T23700] usb 4-1: USB disconnect, device number 79 [ 2776.853078][T12923] usb 5-1: USB disconnect, device number 19 [ 2776.858799][T16938] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2776.892343][T16938] quatech2 3-1:0.51: device disconnected [ 2776.892941][T23700] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 2777.004922][T12493] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 2777.025270][T12493] usb 2-1: device descriptor read/8, error -71 [ 2777.135146][T12493] usb usb2-port1: unable to enumerate USB device [ 2777.404870][T16938] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 2777.554754][T16938] usb 4-1: Using ep0 maxpacket: 32 [ 2777.561311][T16938] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2777.575999][T16938] usb 4-1: config 5 has an invalid interface number: 52 but max is 0 [ 2777.585352][T16938] usb 4-1: config 5 has no interface number 0 [ 2777.591536][T16938] usb 4-1: config 5 interface 52 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 2777.595008][T23700] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 2777.621198][T16938] usb 4-1: string descriptor 0 read error: -22 [ 2777.637397][T16938] usb 4-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=51.58 [ 2777.656565][T16938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2777.678792][T18514] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2777.691133][T16938] aircable 4-1:5.52: aircable converter detected [ 2777.715362][T16938] usb 4-1: aircable converter now attached to ttyUSB0 [ 2777.775128][T23700] usb 3-1: Using ep0 maxpacket: 32 [ 2777.783387][T23700] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2777.793338][T23700] usb 3-1: config 5 has an invalid interface number: 52 but max is 0 [ 2777.802756][T23700] usb 3-1: config 5 has no interface number 0 [ 2777.811859][T23700] usb 3-1: config 5 interface 52 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 2777.837536][T23700] usb 3-1: string descriptor 0 read error: -22 [ 2777.843949][T23700] usb 3-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=51.58 [ 2777.855332][T23700] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2777.877734][T18517] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2777.900958][T23700] aircable 3-1:5.52: aircable converter detected [ 2777.913692][T16938] usb 4-1: USB disconnect, device number 80 [ 2777.943253][T16938] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 2777.952877][T23700] usb 3-1: aircable converter now attached to ttyUSB1 [ 2777.985112][T16938] aircable 4-1:5.52: device disconnected [ 2778.109895][T23700] usb 3-1: USB disconnect, device number 51 [ 2778.126879][T23700] aircable ttyUSB1: aircable converter now disconnected from ttyUSB1 [ 2778.141178][T23700] aircable 3-1:5.52: device disconnected [ 2778.574798][T23700] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 2778.763172][T23700] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2778.772695][T23700] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2778.781222][T23700] usb 5-1: Product: syz [ 2778.786068][T23700] usb 5-1: Manufacturer: syz [ 2778.790782][T23700] usb 5-1: SerialNumber: syz [ 2778.806757][T23700] usb 5-1: config 0 descriptor?? [ 2779.017457][T23700] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2779.654871][T16938] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 2779.714514][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 2779.714530][ T30] audit: type=1326 audit(1768194087.743:2983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18543 comm="syz.1.14114" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5333b8f749 code=0x0 [ 2779.824809][T16938] usb 4-1: Using ep0 maxpacket: 32 [ 2779.832830][T16938] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 2779.842578][T16938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2779.853733][T16938] usb 4-1: config 0 descriptor?? [ 2780.045031][T12493] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 2780.075394][T16938] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 2780.096966][T16938] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2780.125428][T16938] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 2780.140205][T16938] usb 4-1: media controller created [ 2780.173678][T16938] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2780.188724][T12493] usb 3-1: device descriptor read/64, error -71 [ 2780.277467][T16938] DVB: Unable to find symbol dib7000p_attach() [ 2780.287560][T16938] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 2780.374883][T16938] rc_core: IR keymap rc-dib0700-rc5 not found [ 2780.390471][T16938] Registered IR keymap rc-empty [ 2780.400640][T16938] dvb-usb: could not initialize remote control. [ 2780.413700][T16938] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 2780.435323][T12493] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 2780.436813][T16938] usb 4-1: USB disconnect, device number 81 [ 2780.525650][T16938] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 2780.604802][T12493] usb 3-1: device descriptor read/64, error -71 [ 2780.663184][T23700] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2780.695377][T23700] usb 5-1: USB disconnect, device number 20 [ 2780.715282][T12493] usb usb3-port1: attempt power cycle [ 2781.074838][T12493] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 2781.115704][T12493] usb 3-1: device descriptor read/8, error -71 [ 2781.374769][T12493] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 2781.396251][T12493] usb 3-1: device descriptor read/8, error -71 [ 2781.505097][T12493] usb usb3-port1: unable to enumerate USB device [ 2781.921653][T18573] veth1_to_bond: entered allmulticast mode [ 2781.931111][T18573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14122'. [ 2783.285924][T18586] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14125'. [ 2783.487885][T18590] FAULT_INJECTION: forcing a failure. [ 2783.487885][T18590] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2783.501421][T18590] CPU: 0 UID: 0 PID: 18590 Comm: syz.2.14127 Tainted: G L syzkaller #0 PREEMPT(full) [ 2783.501449][T18590] Tainted: [L]=SOFTLOCKUP [ 2783.501456][T18590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2783.501467][T18590] Call Trace: [ 2783.501475][T18590] [ 2783.501483][T18590] dump_stack_lvl+0xe8/0x150 [ 2783.501510][T18590] should_fail_ex+0x414/0x560 [ 2783.501540][T18590] fpu__restore_sig+0x1bb/0x10d0 [ 2783.501572][T18590] ? __pfx_fpu__restore_sig+0x10/0x10 [ 2783.501628][T18590] __ia32_sys_rt_sigreturn+0x704/0x860 [ 2783.501661][T18590] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 2783.501683][T18590] ? _raw_spin_unlock_irq+0x2e/0x50 [ 2783.501725][T18590] ? __task_pid_nr_ns+0x28/0x490 [ 2783.501756][T18590] do_syscall_64+0xec/0xf80 [ 2783.501775][T18590] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2783.501791][T18590] ? trace_irq_disable+0x37/0x100 [ 2783.501811][T18590] ? clear_bhb_loop+0x60/0xb0 [ 2783.501830][T18590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2783.501847][T18590] RIP: 0033:0x7ff443f8f749 [ 2783.501864][T18590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2783.501879][T18590] RSP: 002b:00007ff444eed038 EFLAGS: 00000246 [ 2783.501896][T18590] RAX: ffffffffffffff92 RBX: 00007ff4441e5fa0 RCX: 00007ff443f8f749 [ 2783.501909][T18590] RDX: 0000200000000000 RSI: 00000000c0386106 RDI: 0000000000000003 [ 2783.501921][T18590] RBP: 00007ff444eed090 R08: 0000000000000000 R09: 0000000000000000 [ 2783.501933][T18590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2783.501944][T18590] R13: 00007ff4441e6038 R14: 00007ff4441e5fa0 R15: 00007ff44430fa28 [ 2783.501972][T18590] [ 2784.024799][T12923] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 2784.177392][T12923] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2784.188069][T12923] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2784.197419][T12923] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2784.207372][T12923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2784.262263][T12923] usb 2-1: config 0 descriptor?? [ 2785.033183][T18573] veth1_to_bond: left allmulticast mode [ 2785.401751][T18625] FAULT_INJECTION: forcing a failure. [ 2785.401751][T18625] name failslab, interval 1, probability 0, space 0, times 0 [ 2785.414740][T18625] CPU: 1 UID: 0 PID: 18625 Comm: syz.2.14140 Tainted: G L syzkaller #0 PREEMPT(full) [ 2785.414767][T18625] Tainted: [L]=SOFTLOCKUP [ 2785.414773][T18625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2785.414783][T18625] Call Trace: [ 2785.414791][T18625] [ 2785.414798][T18625] dump_stack_lvl+0xe8/0x150 [ 2785.414826][T18625] should_fail_ex+0x414/0x560 [ 2785.414856][T18625] should_failslab+0xa8/0x100 [ 2785.414879][T18625] __kmalloc_cache_noprof+0x84/0x700 [ 2785.414899][T18625] ? nfnetlink_rcv+0xf97/0x2590 [ 2785.414924][T18625] nfnetlink_rcv+0xf97/0x2590 [ 2785.414975][T18625] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2785.415010][T18625] ? ref_tracker_free+0x63a/0x7d0 [ 2785.415054][T18625] ? __netlink_deliver_tap+0x807/0x850 [ 2785.415076][T18625] ? netlink_deliver_tap+0x2e/0x1b0 [ 2785.415111][T18625] netlink_unicast+0x82f/0x9e0 [ 2785.415137][T18625] ? __pfx_netlink_unicast+0x10/0x10 [ 2785.415155][T18625] ? __alloc_skb+0x198/0x3a0 [ 2785.415167][T18625] ? netlink_sendmsg+0x642/0xb30 [ 2785.415178][T18625] ? skb_put+0x11b/0x210 [ 2785.415190][T18625] netlink_sendmsg+0x805/0xb30 [ 2785.415206][T18625] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2785.415220][T18625] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2785.415235][T18625] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2785.415244][T18625] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2785.415257][T18625] __sock_sendmsg+0x21c/0x270 [ 2785.415273][T18625] ____sys_sendmsg+0x505/0x820 [ 2785.415287][T18625] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2785.415302][T18625] ? import_iovec+0x74/0xa0 [ 2785.415317][T18625] ___sys_sendmsg+0x21f/0x2a0 [ 2785.415329][T18625] ? __pfx____sys_sendmsg+0x10/0x10 [ 2785.415358][T18625] ? __fget_files+0x2a/0x420 [ 2785.415372][T18625] ? __fget_files+0x3a0/0x420 [ 2785.415389][T18625] __x64_sys_sendmsg+0x19b/0x260 [ 2785.415402][T18625] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2785.415418][T18625] ? __pfx_ksys_write+0x10/0x10 [ 2785.415433][T18625] do_syscall_64+0xec/0xf80 [ 2785.415444][T18625] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2785.415454][T18625] ? trace_irq_disable+0x37/0x100 [ 2785.415466][T18625] ? clear_bhb_loop+0x60/0xb0 [ 2785.415477][T18625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2785.415487][T18625] RIP: 0033:0x7ff443f8f749 [ 2785.415498][T18625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2785.415506][T18625] RSP: 002b:00007ff444eed038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2785.415518][T18625] RAX: ffffffffffffffda RBX: 00007ff4441e5fa0 RCX: 00007ff443f8f749 [ 2785.415526][T18625] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 2785.415532][T18625] RBP: 00007ff444eed090 R08: 0000000000000000 R09: 0000000000000000 [ 2785.415538][T18625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2785.415544][T18625] R13: 00007ff4441e6038 R14: 00007ff4441e5fa0 R15: 00007ff44430fa28 [ 2785.415560][T18625] [ 2785.486911][ T472] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 2785.624799][T12923] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 2785.824779][ T472] usb 4-1: Using ep0 maxpacket: 32 [ 2785.833618][ T472] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2785.842581][ T472] usb 4-1: config 5 has an invalid interface number: 52 but max is 0 [ 2785.851024][ T472] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 2785.861240][ T472] usb 4-1: config 5 has no interface number 0 [ 2785.867449][ T472] usb 4-1: config 5 interface 52 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2785.874805][T12923] usb 5-1: Using ep0 maxpacket: 16 [ 2785.884277][ T472] usb 4-1: string descriptor 0 read error: -22 [ 2785.888469][T12923] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2785.892367][ T472] usb 4-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=51.58 [ 2785.902784][T12923] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2785.923633][ T472] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2785.936495][T12923] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2785.946508][T12923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2785.954549][T12923] usb 5-1: Product: syz [ 2785.959033][T12923] usb 5-1: Manufacturer: syz [ 2785.963852][T12923] usb 5-1: SerialNumber: syz [ 2786.229210][T12493] usb 4-1: USB disconnect, device number 82 [ 2786.905572][T26515] usb 2-1: USB disconnect, device number 77 [ 2787.002430][T12923] usb 5-1: 0:2 : does not exist [ 2787.013224][T12923] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 2787.072428][T12923] usb 5-1: USB disconnect, device number 21 [ 2787.119949][ T9982] udevd[9982]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2787.283982][T18647] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14142'. [ 2787.866155][T18652] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 2788.615444][ T472] usb 2-1: new full-speed USB device number 78 using dummy_hcd [ 2788.827140][ T472] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2788.850098][ T472] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 2788.878122][ T472] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2788.885103][ T7215] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 2788.901466][ T472] usb 2-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 2788.921563][ T472] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2788.949080][ T472] usb 2-1: config 0 descriptor?? [ 2788.983531][T18661] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2789.055366][ T7215] usb 5-1: Using ep0 maxpacket: 32 [ 2789.066545][ T7215] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2789.081163][ T7215] usb 5-1: config 5 has an invalid interface number: 52 but max is 0 [ 2789.097672][ T7215] usb 5-1: config 5 has no interface number 0 [ 2789.111195][ T7215] usb 5-1: config 5 interface 52 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 2789.172607][ T7215] usb 5-1: string descriptor 0 read error: -22 [ 2789.179029][ T7215] usb 5-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=51.58 [ 2789.190462][ T7215] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2789.201437][T18663] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 2789.218349][ T7215] aircable 5-1:5.52: aircable converter detected [ 2789.233336][ T7215] usb 5-1: aircable converter now attached to ttyUSB0 [ 2789.282215][T18673] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 2789.419089][ T472] hid-u2fzero 0003:10C4:8ACF.00CB: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.1-1/input0 [ 2789.459405][ T472] hid-u2fzero 0003:10C4:8ACF.00CB: U2F Zero LED initialised [ 2789.475137][ T472] hid-u2fzero 0003:10C4:8ACF.00CB: U2F Zero RNG initialised [ 2789.622673][ T472] usb 2-1: USB disconnect, device number 78 [ 2789.771161][T12493] usb 5-1: USB disconnect, device number 22 [ 2789.794836][ T7215] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 2789.806864][T12493] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 2789.826782][T12493] aircable 5-1:5.52: device disconnected [ 2789.991388][ T7215] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2790.005273][ T7215] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2790.034792][ T7215] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2790.044585][ T7215] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2790.077230][ T7215] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2790.093215][ T7215] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2790.108019][ T7215] usb 4-1: config 0 descriptor?? [ 2790.424814][T12923] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 2790.454820][ T472] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 2790.524621][ T7215] usbhid 4-1:0.0: can't add hid device: -71 [ 2790.532569][ T7215] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2790.542957][ T7215] usb 4-1: USB disconnect, device number 83 [ 2790.577383][T12923] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 2790.585699][T12923] usb 3-1: config 0 has no interface number 0 [ 2790.593686][T12923] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 2790.602921][T12923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2790.611043][T12493] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 2790.614808][ T472] usb 2-1: Using ep0 maxpacket: 32 [ 2790.618704][T12923] usb 3-1: Product: syz [ 2790.627126][ T472] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2790.637908][ T472] usb 2-1: config 5 has an invalid interface number: 52 but max is 0 [ 2790.646010][T12923] usb 3-1: Manufacturer: syz [ 2790.646032][T12923] usb 3-1: SerialNumber: syz [ 2790.648582][T12923] usb 3-1: config 0 descriptor?? [ 2790.652130][ T472] usb 2-1: config 5 has no interface number 0 [ 2790.667097][ T472] usb 2-1: config 5 interface 52 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 2790.680563][ T472] usb 2-1: string descriptor 0 read error: -22 [ 2790.687250][ T472] usb 2-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=51.58 [ 2790.696516][ T472] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2790.715185][T18681] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2790.725418][ T472] aircable 2-1:5.52: aircable converter detected [ 2790.745426][ T472] usb 2-1: aircable converter now attached to ttyUSB0 [ 2790.786547][T12493] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 2790.795860][T12493] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2790.806522][T12493] usb 5-1: config 0 descriptor?? [ 2790.869966][T18679] netlink: 36 bytes leftover after parsing attributes in process `syz.2.14156'. [ 2790.893526][T12923] uvcvideo 3-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 2790.901013][T12923] uvcvideo 3-1:0.64: No valid video chain found. [ 2790.912608][T12923] usb 3-1: USB disconnect, device number 56 [ 2790.995710][ T472] usb 2-1: USB disconnect, device number 79 [ 2791.017365][ T472] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 2791.027900][ T472] aircable 2-1:5.52: device disconnected [ 2791.316816][T12923] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 2791.474751][T12923] usb 4-1: Using ep0 maxpacket: 8 [ 2791.491943][T12923] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 2791.518041][T12923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2791.544205][T12923] usb 4-1: Product: syz [ 2791.562072][T12923] usb 4-1: Manufacturer: syz [ 2791.585041][T12923] usb 4-1: SerialNumber: syz [ 2791.608492][T12923] usb 4-1: config 0 descriptor?? [ 2791.829718][T12923] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 2791.852427][T12923] dvb_usb_af9015 4-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 2791.866430][T12923] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 2791.872968][T12923] dvb_usb_af9035 4-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 2791.885990][ T472] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 2791.894627][T12923] usb 4-1: USB disconnect, device number 84 [ 2791.908525][T17990] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 2792.005681][T18708] usb usb8: usbfs: process 18708 (syz.0.14165) did not claim interface 0 before use [ 2792.054812][ T472] usb 2-1: Using ep0 maxpacket: 32 [ 2792.064911][T17990] usb 3-1: device descriptor read/64, error -71 [ 2792.074283][ T472] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2792.097047][ T472] usb 2-1: config 5 has an invalid interface number: 52 but max is 0 [ 2792.114894][ T472] usb 2-1: config 5 has no interface number 0 [ 2792.124920][ T472] usb 2-1: config 5 interface 52 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 2792.151448][ T472] usb 2-1: string descriptor 0 read error: -22 [ 2792.164844][ T472] usb 2-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=51.58 [ 2792.190195][ T472] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2792.223666][T18695] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2792.234665][T12493] pegasus 5-1:0.0: probe with driver pegasus failed with error -32 [ 2792.257045][ T472] aircable 2-1:5.52: aircable converter detected [ 2792.275616][ T472] usb 2-1: aircable converter now attached to ttyUSB0 [ 2792.314933][T17990] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 2792.382025][T18713] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 2792.427305][T18715] input: syz0 as /devices/virtual/input/input276 [ 2792.454797][T17990] usb 3-1: device descriptor read/64, error -71 [ 2792.526669][ T472] usb 2-1: USB disconnect, device number 80 [ 2792.536750][ T472] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 2792.547374][ T472] aircable 2-1:5.52: device disconnected [ 2792.605007][T17990] usb usb3-port1: attempt power cycle [ 2792.956197][T17990] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 2792.985694][T17990] usb 3-1: device descriptor read/8, error -71 [ 2793.117133][T24908] hid_parser_main: 38 callbacks suppressed [ 2793.117147][T24908] hid-generic 0000:0000:0000.00CC: unknown main item tag 0x0 [ 2793.163852][T24908] hid-generic 0000:0000:0000.00CC: hidraw0: HID v0.00 Device [syz0] on syz0 [ 2793.244797][T17990] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 2793.281166][T17990] usb 3-1: device descriptor read/8, error -71 [ 2793.397940][T17990] usb usb3-port1: unable to enumerate USB device [ 2793.414971][T24908] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 2793.449466][T18728] sctp: [Deprecated]: syz.0.14169 (pid 18728) Use of int in max_burst socket option. [ 2793.449466][T18728] Use struct sctp_assoc_value instead [ 2793.586711][T24908] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 2793.617924][T24908] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 2793.655987][T24908] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2793.697930][T24908] usb 2-1: config 220 has no interface number 2 [ 2793.717098][T24908] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 2793.752430][T17990] usb 5-1: USB disconnect, device number 23 [ 2793.777596][T24908] usb 2-1: config 220 interface 0 has no altsetting 0 [ 2793.811812][T24908] usb 2-1: config 220 interface 76 has no altsetting 0 [ 2793.842336][T24908] usb 2-1: config 220 interface 1 has no altsetting 0 [ 2793.869410][T24908] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2793.898390][T24908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2793.926833][T24908] usb 2-1: Product: syz [ 2793.943492][T24908] usb 2-1: Manufacturer: syz [ 2793.962759][T24908] usb 2-1: SerialNumber: syz [ 2794.202257][T18720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2794.247357][T18720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2794.292420][T24908] usb 2-1: selecting invalid altsetting 0 [ 2794.345178][T24908] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 2794.352660][T24908] uvcvideo 2-1:220.0: No valid video chain found. [ 2794.392816][T24908] usb 2-1: selecting invalid altsetting 0 [ 2794.407564][T24908] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 2794.430813][T24908] usb 2-1: USB disconnect, device number 81 [ 2795.443784][T18758] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 2796.315475][T12923] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 2796.514842][T12923] usb 5-1: device descriptor read/64, error -71 [ 2796.764818][T12923] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 2796.846166][T18777] sctp: [Deprecated]: syz.3.14183 (pid 18777) Use of int in max_burst socket option. [ 2796.846166][T18777] Use struct sctp_assoc_value instead [ 2796.945051][T12923] usb 5-1: device descriptor read/64, error -71 [ 2797.050956][T18780] FAULT_INJECTION: forcing a failure. [ 2797.050956][T18780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2797.073738][T12923] usb usb5-port1: attempt power cycle [ 2797.087982][T18780] CPU: 1 UID: 0 PID: 18780 Comm: syz.2.14184 Tainted: G L syzkaller #0 PREEMPT(full) [ 2797.088008][T18780] Tainted: [L]=SOFTLOCKUP [ 2797.088014][T18780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2797.088024][T18780] Call Trace: [ 2797.088031][T18780] [ 2797.088040][T18780] dump_stack_lvl+0xe8/0x150 [ 2797.088065][T18780] should_fail_ex+0x414/0x560 [ 2797.088095][T18780] _copy_from_user+0x2d/0xb0 [ 2797.088121][T18780] ucma_write+0x158/0x2e0 [ 2797.088143][T18780] ? __pfx_ucma_write+0x10/0x10 [ 2797.088162][T18780] ? iov_iter_iovec_advance+0x1e0/0x290 [ 2797.088189][T18780] vfs_writev+0x4b6/0x960 [ 2797.088213][T18780] ? __pfx_ucma_write+0x10/0x10 [ 2797.088235][T18780] ? __pfx_vfs_writev+0x10/0x10 [ 2797.088267][T18780] ? __fget_files+0x2a/0x420 [ 2797.088373][T18780] ? __fget_files+0x3a0/0x420 [ 2797.088392][T18780] ? __fget_files+0x2a/0x420 [ 2797.088420][T18780] do_writev+0x14d/0x2d0 [ 2797.088442][T18780] ? __pfx_do_writev+0x10/0x10 [ 2797.088472][T18780] do_syscall_64+0xec/0xf80 [ 2797.088491][T18780] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2797.088508][T18780] ? trace_irq_disable+0x37/0x100 [ 2797.088528][T18780] ? clear_bhb_loop+0x60/0xb0 [ 2797.088548][T18780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2797.088566][T18780] RIP: 0033:0x7ff443f8f749 [ 2797.088583][T18780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2797.088598][T18780] RSP: 002b:00007ff444eed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2797.088618][T18780] RAX: ffffffffffffffda RBX: 00007ff4441e5fa0 RCX: 00007ff443f8f749 [ 2797.088631][T18780] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000003 [ 2797.088643][T18780] RBP: 00007ff444eed090 R08: 0000000000000000 R09: 0000000000000000 [ 2797.088655][T18780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2797.088666][T18780] R13: 00007ff4441e6038 R14: 00007ff4441e5fa0 R15: 00007ff44430fa28 [ 2797.088693][T18780] [ 2797.522346][T18786] sit1: entered allmulticast mode [ 2797.584803][T12923] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 2797.607192][T12923] usb 5-1: device descriptor read/8, error -71 [ 2797.914842][T12923] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 2798.065699][T12923] usb 5-1: device descriptor read/8, error -71 [ 2798.110481][T18795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14188'. [ 2798.175259][T12923] usb usb5-port1: unable to enumerate USB device [ 2798.228941][T18802] program syz.1.14191 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2798.374805][ T7215] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 2798.529946][ T7215] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2798.539386][ T7215] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2798.547935][ T7215] usb 3-1: Product: syz [ 2798.552306][ T7215] usb 3-1: Manufacturer: syz [ 2798.557439][ T7215] usb 3-1: SerialNumber: syz [ 2798.568176][ T7215] usb 3-1: config 0 descriptor?? [ 2798.775470][ T7215] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2798.846754][T18809] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 2799.224837][T27996] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 2799.404750][T27996] usb 4-1: Using ep0 maxpacket: 16 [ 2799.434299][T27996] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2799.465235][T27996] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2799.508206][T27996] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2799.537411][T27996] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2799.568289][T27996] usb 4-1: Product: syz [ 2799.585327][T27996] usb 4-1: Manufacturer: syz [ 2799.598633][T27996] usb 4-1: SerialNumber: syz [ 2799.624780][T26515] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 2799.804833][T26515] usb 2-1: Using ep0 maxpacket: 32 [ 2799.819484][T26515] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2799.838680][T26515] usb 2-1: config 5 has an invalid interface number: 52 but max is 0 [ 2799.857121][T26515] usb 2-1: config 5 has no interface number 0 [ 2799.872007][T26515] usb 2-1: config 5 interface 52 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 2799.932169][T26515] usb 2-1: string descriptor 0 read error: -22 [ 2799.951425][T26515] usb 2-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=51.58 [ 2799.972330][T27996] usb 4-1: USB disconnect, device number 85 [ 2799.984790][T26515] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2800.040156][T10092] udevd[10092]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2800.108455][T18821] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2800.140669][T26515] aircable 2-1:5.52: aircable converter detected [ 2800.176773][T26515] usb 2-1: aircable converter now attached to ttyUSB0 [ 2800.429002][T27996] usb 2-1: USB disconnect, device number 82 [ 2800.438448][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 2800.446450][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 2800.453825][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 2800.463282][ T7215] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 2800.530257][T27996] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 2800.539321][ T7215] usb 3-1: USB disconnect, device number 61 [ 2800.560989][T27996] aircable 2-1:5.52: device disconnected [ 2800.571828][T18829] sctp: [Deprecated]: syz.0.14198 (pid 18829) Use of int in max_burst socket option. [ 2800.571828][T18829] Use struct sctp_assoc_value instead [ 2801.384795][T27996] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 2801.534861][T27996] usb 3-1: device descriptor read/64, error -71 [ 2801.766666][T18857] netlink: 'syz.3.14206': attribute type 4 has an invalid length. [ 2801.795620][T27996] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 2801.803602][T18857] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14206'. [ 2801.871754][T18857] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2801.900130][T18857] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14206'. [ 2801.944773][T27996] usb 3-1: device descriptor read/64, error -71 [ 2802.065348][T27996] usb usb3-port1: attempt power cycle [ 2802.502092][T27996] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 2802.663509][T27996] usb 3-1: device descriptor read/8, error -71 [ 2802.924794][T27996] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 2802.964890][T27996] usb 3-1: device descriptor read/8, error -71 [ 2803.097874][T27996] usb usb3-port1: unable to enumerate USB device [ 2803.325044][T12493] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 2803.499305][T12493] usb 2-1: Using ep0 maxpacket: 32 [ 2803.522766][T12493] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2803.576818][T12493] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 2803.599642][T12493] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2803.711051][T12493] usb 2-1: config 0 descriptor?? [ 2803.723319][ T30] audit: type=1326 audit(1768194111.753:2984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18873 comm="syz.0.14212" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa4b4f8f749 code=0x0 [ 2804.005110][T18880] netlink: 80 bytes leftover after parsing attributes in process `syz.3.14213'. [ 2804.162116][T12493] zydacron 0003:13EC:0006.00CD: hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.1-1/input0 [ 2804.378276][T12493] usb 2-1: USB disconnect, device number 83 [ 2804.447343][T18882] fido_id[18882]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 2804.889239][T18890] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14215'. [ 2804.947303][T18904] __vm_enough_memory: pid: 18904, comm: syz.4.14220, bytes: 4503599627366400 not enough memory for the allocation [ 2805.005960][T18896] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 2805.243142][T18890] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14215'. [ 2805.815916][T18922] gtp0: entered promiscuous mode [ 2805.821650][T18922] gtp0: entered allmulticast mode [ 2806.047138][T18922] netlink: 'syz.0.14223': attribute type 6 has an invalid length. [ 2806.087221][T18922] deleting an unspecified loop device is not supported. [ 2806.541970][T18931] FAULT_INJECTION: forcing a failure. [ 2806.541970][T18931] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2806.600603][T18931] CPU: 0 UID: 0 PID: 18931 Comm: syz.3.14225 Tainted: G L syzkaller #0 PREEMPT(full) [ 2806.600631][T18931] Tainted: [L]=SOFTLOCKUP [ 2806.600637][T18931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2806.600648][T18931] Call Trace: [ 2806.600662][T18931] [ 2806.600670][T18931] dump_stack_lvl+0xe8/0x150 [ 2806.600697][T18931] should_fail_ex+0x414/0x560 [ 2806.600727][T18931] _copy_to_user+0x31/0xb0 [ 2806.600750][T18931] simple_read_from_buffer+0xe1/0x170 [ 2806.600775][T18931] proc_fail_nth_read+0x1b3/0x220 [ 2806.600797][T18931] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2806.600817][T18931] ? rw_verify_area+0x2a6/0x4d0 [ 2806.600839][T18931] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2806.600858][T18931] vfs_read+0x200/0xa30 [ 2806.600872][T18931] ? fdget_pos+0x247/0x320 [ 2806.600895][T18931] ? __pfx___mutex_lock+0x10/0x10 [ 2806.600915][T18931] ? __pfx_vfs_read+0x10/0x10 [ 2806.600932][T18931] ? __fget_files+0x2a/0x420 [ 2806.600953][T18931] ? __fget_files+0x3a0/0x420 [ 2806.600972][T18931] ? __fget_files+0x2a/0x420 [ 2806.600998][T18931] ksys_read+0x145/0x250 [ 2806.601017][T18931] ? __pfx_ksys_read+0x10/0x10 [ 2806.601042][T18931] do_syscall_64+0xec/0xf80 [ 2806.601060][T18931] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2806.601077][T18931] ? trace_irq_disable+0x37/0x100 [ 2806.601098][T18931] ? clear_bhb_loop+0x60/0xb0 [ 2806.601118][T18931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2806.601135][T18931] RIP: 0033:0x7f5fe118e15c [ 2806.601151][T18931] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2806.601165][T18931] RSP: 002b:00007f5fe2084030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2806.601185][T18931] RAX: ffffffffffffffda RBX: 00007f5fe13e5fa0 RCX: 00007f5fe118e15c [ 2806.601198][T18931] RDX: 000000000000000f RSI: 00007f5fe20840a0 RDI: 0000000000000004 [ 2806.601209][T18931] RBP: 00007f5fe2084090 R08: 0000000000000000 R09: 0000000000000000 [ 2806.601221][T18931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2806.601232][T18931] R13: 00007f5fe13e6038 R14: 00007f5fe13e5fa0 R15: 00007f5fe150fa28 [ 2806.601261][T18931] [ 2807.322864][T18955] syz_tun: entered allmulticast mode [ 2807.347773][T18957] netlink: 'syz.0.14237': attribute type 21 has an invalid length. [ 2807.356273][T18957] netlink: 128 bytes leftover after parsing attributes in process `syz.0.14237'. [ 2807.365786][T18957] netlink: 'syz.0.14237': attribute type 5 has an invalid length. [ 2807.374007][T18957] netlink: 3 bytes leftover after parsing attributes in process `syz.0.14237'. [ 2807.389267][T18955] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 2807.475022][T24908] usb 2-1: new full-speed USB device number 84 using dummy_hcd [ 2807.499127][T18959] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 2807.655036][T24908] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2807.678527][T24908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2807.713654][T24908] usb 2-1: Product: syz [ 2807.719769][T24908] usb 2-1: Manufacturer: syz [ 2807.756250][T24908] usb 2-1: SerialNumber: syz [ 2807.776943][T24908] usb 2-1: config 0 descriptor?? [ 2808.079447][T24908] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2808.655666][T18970] FAULT_INJECTION: forcing a failure. [ 2808.655666][T18970] name failslab, interval 1, probability 0, space 0, times 0 [ 2808.703879][T18970] CPU: 1 UID: 0 PID: 18970 Comm: syz.3.14239 Tainted: G L syzkaller #0 PREEMPT(full) [ 2808.703901][T18970] Tainted: [L]=SOFTLOCKUP [ 2808.703905][T18970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2808.703912][T18970] Call Trace: [ 2808.703917][T18970] [ 2808.703922][T18970] dump_stack_lvl+0xe8/0x150 [ 2808.703940][T18970] should_fail_ex+0x414/0x560 [ 2808.703958][T18970] should_failslab+0xa8/0x100 [ 2808.703974][T18970] __kmalloc_noprof+0xdf/0x800 [ 2808.703984][T18970] ? kfree+0x4d/0x660 [ 2808.703996][T18970] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2808.704012][T18970] tomoyo_realpath_from_path+0xe3/0x5d0 [ 2808.704026][T18970] ? tomoyo_domain+0xd8/0x130 [ 2808.704041][T18970] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2808.704051][T18970] tomoyo_path_number_perm+0x1e8/0x5a0 [ 2808.704064][T18970] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2808.704074][T18970] ? __lock_acquire+0x6b6/0x2cf0 [ 2808.704092][T18970] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 2808.704113][T18970] ? __fget_files+0x2a/0x420 [ 2808.704126][T18970] ? __fget_files+0x2a/0x420 [ 2808.704137][T18970] ? __fget_files+0x3a0/0x420 [ 2808.704147][T18970] ? __fget_files+0x2a/0x420 [ 2808.704160][T18970] security_file_ioctl+0xcb/0x2d0 [ 2808.704172][T18970] __se_sys_ioctl+0x47/0x170 [ 2808.704195][T18970] do_syscall_64+0xec/0xf80 [ 2808.704206][T18970] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2808.704216][T18970] ? trace_irq_disable+0x37/0x100 [ 2808.704228][T18970] ? clear_bhb_loop+0x60/0xb0 [ 2808.704239][T18970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2808.704249][T18970] RIP: 0033:0x7f5fe118f749 [ 2808.704259][T18970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2808.704268][T18970] RSP: 002b:00007f5fe2084038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2808.704280][T18970] RAX: ffffffffffffffda RBX: 00007f5fe13e5fa0 RCX: 00007f5fe118f749 [ 2808.704287][T18970] RDX: 0000200000000100 RSI: 00000000c034564b RDI: 0000000000000003 [ 2808.704294][T18970] RBP: 00007f5fe2084090 R08: 0000000000000000 R09: 0000000000000000 [ 2808.704300][T18970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2808.704306][T18970] R13: 00007f5fe13e6038 R14: 00007f5fe13e5fa0 R15: 00007f5fe150fa28 [ 2808.704321][T18970] [ 2808.704340][T18970] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2809.228080][T18979] binder: BINDER_SET_CONTEXT_MGR already set [ 2809.240478][T18979] binder: 18973:18979 ioctl 4018620d 200000004a80 returned -16 [ 2809.252139][T18981] FAULT_INJECTION: forcing a failure. [ 2809.252139][T18981] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2809.267999][T18981] CPU: 1 UID: 0 PID: 18981 Comm: syz.2.14243 Tainted: G L syzkaller #0 PREEMPT(full) [ 2809.268031][T18981] Tainted: [L]=SOFTLOCKUP [ 2809.268038][T18981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2809.268049][T18981] Call Trace: [ 2809.268057][T18981] [ 2809.268066][T18981] dump_stack_lvl+0xe8/0x150 [ 2809.268087][T18981] should_fail_ex+0x414/0x560 [ 2809.268105][T18981] _copy_to_user+0x31/0xb0 [ 2809.268122][T18981] simple_read_from_buffer+0xe1/0x170 [ 2809.268136][T18981] proc_fail_nth_read+0x1b3/0x220 [ 2809.268149][T18981] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2809.268161][T18981] ? rw_verify_area+0x2a6/0x4d0 [ 2809.268175][T18981] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2809.268186][T18981] vfs_read+0x200/0xa30 [ 2809.268195][T18981] ? fdget_pos+0x247/0x320 [ 2809.268208][T18981] ? __pfx___mutex_lock+0x10/0x10 [ 2809.268221][T18981] ? __pfx_vfs_read+0x10/0x10 [ 2809.268230][T18981] ? __fget_files+0x2a/0x420 [ 2809.268244][T18981] ? __fget_files+0x3a0/0x420 [ 2809.268254][T18981] ? __fget_files+0x2a/0x420 [ 2809.268269][T18981] ksys_read+0x145/0x250 [ 2809.268279][T18981] ? __pfx_ksys_read+0x10/0x10 [ 2809.268294][T18981] do_syscall_64+0xec/0xf80 [ 2809.268304][T18981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2809.268314][T18981] ? trace_irq_disable+0x37/0x100 [ 2809.268325][T18981] ? clear_bhb_loop+0x60/0xb0 [ 2809.268337][T18981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2809.268346][T18981] RIP: 0033:0x7ff443f8e15c [ 2809.268357][T18981] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2809.268372][T18981] RSP: 002b:00007ff444eed030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2809.268383][T18981] RAX: ffffffffffffffda RBX: 00007ff4441e5fa0 RCX: 00007ff443f8e15c [ 2809.268391][T18981] RDX: 000000000000000f RSI: 00007ff444eed0a0 RDI: 0000000000000004 [ 2809.268397][T18981] RBP: 00007ff444eed090 R08: 0000000000000000 R09: 0000000000000000 [ 2809.268403][T18981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2809.268409][T18981] R13: 00007ff4441e6038 R14: 00007ff4441e5fa0 R15: 00007ff44430fa28 [ 2809.268425][T18981] [ 2809.896965][T24908] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2809.913152][T24908] usb 2-1: USB disconnect, device number 84 [ 2810.212727][T18986] netlink: 203340 bytes leftover after parsing attributes in process `syz.2.14244'. [ 2810.339142][T18960] syz_tun: left allmulticast mode [ 2811.301721][T19010] kvm: requested 129904 ns i8254 timer period limited to 200000 ns [ 2811.364968][T19010] kvm: requested 183542 ns i8254 timer period limited to 200000 ns [ 2811.880251][T19021] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 2811.891076][T24908] usb 2-1: new full-speed USB device number 85 using dummy_hcd [ 2812.074819][T24908] usb 2-1: device descriptor read/64, error -71 [ 2812.174909][ T453] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 2812.334781][T24908] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 2812.346629][ T453] usb 4-1: Using ep0 maxpacket: 16 [ 2812.371167][ T453] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2812.411021][ T453] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2812.447396][ T453] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2812.467193][ T453] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2812.484794][T24908] usb 2-1: device descriptor read/64, error -71 [ 2812.492099][ T453] usb 4-1: Product: syz [ 2812.510814][ T453] usb 4-1: Manufacturer: syz [ 2812.524615][ T453] usb 4-1: SerialNumber: syz [ 2812.616726][T24908] usb usb2-port1: attempt power cycle [ 2812.967110][T24908] usb 2-1: new full-speed USB device number 87 using dummy_hcd [ 2813.015324][T24908] usb 2-1: device descriptor read/8, error -71 [ 2813.305187][T24908] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 2813.335495][T24908] usb 2-1: device descriptor read/8, error -71 [ 2813.414967][ T472] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 2813.455033][T24908] usb usb2-port1: unable to enumerate USB device [ 2813.574786][ T472] usb 3-1: Using ep0 maxpacket: 8 [ 2813.583666][ T472] usb 3-1: too many endpoints for config 0 interface 0 altsetting 8: 255, using maximum allowed: 30 [ 2813.610227][ T472] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 2813.641788][ T472] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2813.680878][ T472] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 2813.731004][ T472] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2813.752566][ T453] usb 4-1: 0:2 : does not exist [ 2813.755111][ T472] usb 3-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 2813.779517][ T453] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 2813.784812][ T472] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2813.818603][ T472] usb 3-1: config 0 descriptor?? [ 2813.841174][ T453] usb 4-1: USB disconnect, device number 86 [ 2813.948617][ T9982] udevd[9982]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2814.272024][ T472] logitech-djreceiver 0003:046D:C53A.00CE: hidraw0: USB HID v0.81 Device [HID 046d:c53a] on usb-dummy_hcd.2-1/input0 [ 2814.627763][T19055] __vm_enough_memory: pid: 19055, comm: syz.3.14262, bytes: 4503599627366400 not enough memory for the allocation [ 2814.808891][ T472] usb 3-1: USB disconnect, device number 66 [ 2815.002119][T19068] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 2815.267102][T19076] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14268'. [ 2816.164981][ T453] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 2816.317771][T19087] netlink: 'syz.1.14272': attribute type 3 has an invalid length. [ 2816.334767][ T453] usb 4-1: Using ep0 maxpacket: 32 [ 2816.341067][ T453] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2816.365951][ T453] usb 4-1: config 5 has an invalid interface number: 52 but max is 0 [ 2816.399519][ T453] usb 4-1: config 5 has no interface number 0 [ 2816.438077][ T453] usb 4-1: config 5 interface 52 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 2816.486371][ T453] usb 4-1: string descriptor 0 read error: -22 [ 2816.511457][ T453] usb 4-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=51.58 [ 2816.514880][T26515] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 2816.551424][ T453] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2816.590823][T19081] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2816.670486][ T453] aircable 4-1:5.52: aircable converter detected [ 2816.687089][T26515] usb 5-1: Using ep0 maxpacket: 16 [ 2816.716181][T26515] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 2816.744339][T26515] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2816.765177][T26515] usb 5-1: Product: syz [ 2816.769627][ T453] usb 4-1: aircable converter now attached to ttyUSB0 [ 2816.809116][T26515] usb 5-1: Manufacturer: syz [ 2816.813748][T26515] usb 5-1: SerialNumber: syz [ 2816.841149][T26515] usb 5-1: config 0 descriptor?? [ 2816.852461][T26515] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 2816.876013][ T7215] usb 4-1: USB disconnect, device number 87 [ 2816.884651][ T7215] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 2816.897284][ T7215] aircable 4-1:5.52: device disconnected [ 2817.053329][T19085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2817.080149][T19085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2817.195026][T26515] ssu100 5-1:0.0: probe with driver ssu100 failed with error -110 [ 2817.204027][T19094] futex_wake_op: syz.4.14271 tries to shift op by -1; fix this program [ 2817.738588][ T472] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 2817.904887][ T472] usb 3-1: Using ep0 maxpacket: 32 [ 2817.916873][ T472] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2817.939392][ T472] usb 3-1: config 5 has an invalid interface number: 52 but max is 0 [ 2817.948059][ T472] usb 3-1: config 5 has no interface number 0 [ 2817.955709][ T472] usb 3-1: config 5 interface 52 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 2817.977705][ T472] usb 3-1: string descriptor 0 read error: -22 [ 2817.984308][ T472] usb 3-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=51.58 [ 2817.994907][ T472] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2818.007769][T19100] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 2818.020392][ T472] aircable 3-1:5.52: aircable converter detected [ 2818.029479][ T472] usb 3-1: aircable converter now attached to ttyUSB0 [ 2818.327954][ T453] usb 3-1: USB disconnect, device number 67 [ 2818.347079][ T453] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 2818.364369][ T453] aircable 3-1:5.52: device disconnected [ 2818.934802][ T472] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 2818.941898][T19121] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 2819.117255][ T472] usb 4-1: Using ep0 maxpacket: 16 [ 2819.136971][ T472] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 2819.155249][ T472] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2819.190163][ T472] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2819.204897][ T453] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 2819.232229][ T472] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 2819.268541][T12923] usb 5-1: USB disconnect, device number 28 [ 2819.316300][ T472] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 2819.368347][ T453] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2819.386839][ T453] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2819.397639][ T453] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 2819.407076][ T453] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2819.422207][ T453] usb 3-1: config 0 descriptor?? [ 2819.448709][ T472] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2819.458374][ T472] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2819.466559][ T472] usb 4-1: SerialNumber: syz [ 2819.498903][T19115] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 2819.513942][ T472] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 2819.538885][ T472] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -12 [ 2819.654390][ T453] ath6kl: Failed to submit usb control message: -71 [ 2819.678724][ T453] ath6kl: unable to send the bmi data to the device: -71 [ 2819.694392][ T453] ath6kl: Unable to send get target info: -71 [ 2819.736172][T12923] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 2819.743765][ T453] ath6kl: Failed to init ath6kl core: -71 [ 2819.759643][ T453] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 2819.771512][T12493] usb 4-1: USB disconnect, device number 88 [ 2819.813997][ T453] usb 3-1: USB disconnect, device number 68 [ 2819.927769][T12923] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2819.941455][T12923] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 2819.965806][T12923] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2819.983399][T12923] usb 5-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 2819.994224][T12923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2820.006128][T12923] usb 5-1: config 0 descriptor?? [ 2820.012149][T19132] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2820.204973][ T453] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 2820.254408][T19141] fuse: Bad value for 'fd' [ 2820.364767][ T453] usb 2-1: Using ep0 maxpacket: 32 [ 2820.372016][ T453] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2820.387983][ T453] usb 2-1: config 5 has an invalid interface number: 52 but max is 0 [ 2820.396549][ T453] usb 2-1: config 5 has no interface number 0 [ 2820.402873][ T453] usb 2-1: config 5 interface 52 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 2820.429804][ T453] usb 2-1: string descriptor 0 read error: -22 [ 2820.438706][T12923] logitech 0003:046D:C24F.00CF: item fetching failed at offset 5/7 [ 2820.447010][ T453] usb 2-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=51.58 [ 2820.457242][T12923] logitech 0003:046D:C24F.00CF: parse failed [ 2820.463299][ T453] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2820.473544][T12923] logitech 0003:046D:C24F.00CF: probe with driver logitech failed with error -22 [ 2820.507771][T19135] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2820.531817][ T453] aircable 2-1:5.52: aircable converter detected [ 2820.543374][ T453] usb 2-1: aircable converter now attached to ttyUSB0 [ 2820.553105][T12493] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 2820.706972][T12493] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2820.722889][T12493] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 2820.735568][T12493] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2820.745304][T12493] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2820.753384][T12493] usb 4-1: Product: syz [ 2820.760950][ T453] usb 2-1: USB disconnect, device number 89 [ 2820.771091][T12493] usb 4-1: Manufacturer: syz [ 2820.778749][ T453] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 2820.788776][T12493] usb 4-1: SerialNumber: syz [ 2820.801495][T12493] cdc_mbim 4-1:1.0: skipping garbage [ 2820.807594][ T453] aircable 2-1:5.52: device disconnected [ 2820.884992][ T472] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 2821.006187][T19143] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 2821.026759][ T472] usb 3-1: device descriptor read/64, error -71 [ 2821.264824][ T472] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 2821.394825][ T472] usb 3-1: device descriptor read/64, error -71 [ 2821.515814][ T472] usb usb3-port1: attempt power cycle [ 2821.624084][T19143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2821.646335][T19143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2821.663516][T19143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2821.681107][T19143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2821.719078][T19143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2821.736689][T19143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2821.772600][T19156] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 2821.780755][T12493] cdc_mbim 4-1:1.0: dwNtbInMaxSize=4 is too small. Using 2048 [ 2821.789901][T12493] cdc_mbim 4-1:1.0: setting rx_max = 2048 [ 2821.864835][ T472] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 2821.896905][ T472] usb 3-1: device descriptor read/8, error -71 [ 2821.995176][T12493] cdc_mbim 4-1:1.0: setting tx_max = 16384 [ 2822.012393][T12493] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 2822.026503][T12493] wwan wwan0: port wwan0mbim0 attached [ 2822.047194][T12493] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 26:23:3c:35:a1:40 [ 2822.078783][T12493] usb 4-1: USB disconnect, device number 89 [ 2822.111674][T12493] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 2822.164951][ T472] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 2822.186569][ T472] usb 3-1: device descriptor read/8, error -71 [ 2822.187798][T12493] wwan wwan0: port wwan0mbim0 disconnected [ 2822.306844][ T472] usb usb3-port1: unable to enumerate USB device [ 2822.337251][ T472] usb 5-1: USB disconnect, device number 29 [ 2822.424039][T19165] FAULT_INJECTION: forcing a failure. [ 2822.424039][T19165] name failslab, interval 1, probability 0, space 0, times 0 [ 2822.437091][T19165] CPU: 0 UID: 0 PID: 19165 Comm: syz.4.14296 Tainted: G L syzkaller #0 PREEMPT(full) [ 2822.437109][T19165] Tainted: [L]=SOFTLOCKUP [ 2822.437113][T19165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2822.437120][T19165] Call Trace: [ 2822.437124][T19165] [ 2822.437129][T19165] dump_stack_lvl+0xe8/0x150 [ 2822.437148][T19165] should_fail_ex+0x414/0x560 [ 2822.437166][T19165] should_failslab+0xa8/0x100 [ 2822.437180][T19165] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 2822.437198][T19165] ? __alloc_skb+0x1dc/0x3a0 [ 2822.437208][T19165] ? __local_bh_enable_ip+0xd0/0x130 [ 2822.437220][T19165] ? __alloc_skb+0x198/0x3a0 [ 2822.437230][T19165] __alloc_skb+0x1dc/0x3a0 [ 2822.437240][T19165] ? __pfx_nf_tables_getgen+0x10/0x10 [ 2822.437252][T19165] nf_tables_getgen+0x33/0x220 [ 2822.437262][T19165] ? __pfx_nf_tables_getgen+0x10/0x10 [ 2822.437272][T19165] nfnetlink_rcv_msg+0x80e/0x1130 [ 2822.437284][T19165] ? unwind_get_return_address+0x4d/0x90 [ 2822.437296][T19165] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2822.437310][T19165] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 2822.437329][T19165] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 2822.437361][T19165] netlink_rcv_skb+0x208/0x470 [ 2822.437375][T19165] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 2822.437387][T19165] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2822.437404][T19165] ? bpf_lsm_capable+0x9/0x20 [ 2822.437425][T19165] ? security_capable+0x7e/0x2e0 [ 2822.437440][T19165] nfnetlink_rcv+0x282/0x2590 [ 2822.437456][T19165] ? lockdep_hardirqs_on+0x7b/0x110 [ 2822.437467][T19165] ? __dev_queue_xmit+0x289/0x31c0 [ 2822.437480][T19165] ? __local_bh_enable_ip+0xd0/0x130 [ 2822.437489][T19165] ? __dev_queue_xmit+0x289/0x31c0 [ 2822.437501][T19165] ? __dev_queue_xmit+0x19cb/0x31c0 [ 2822.437512][T19165] ? ___sys_sendmsg+0x21f/0x2a0 [ 2822.437530][T19165] ? __dev_queue_xmit+0x289/0x31c0 [ 2822.437554][T19165] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2822.437576][T19165] ? __pfx___dev_queue_xmit+0x10/0x10 [ 2822.437601][T19165] ? ref_tracker_free+0x63a/0x7d0 [ 2822.437619][T19165] ? __asan_memcpy+0x40/0x70 [ 2822.437636][T19165] ? __pfx_ref_tracker_free+0x10/0x10 [ 2822.437645][T19165] ? __skb_clone+0x63/0x7a0 [ 2822.437659][T19165] ? __skb_clone+0x483/0x7a0 [ 2822.437674][T19165] ? skb_clone+0x246/0x3a0 [ 2822.437687][T19165] ? __netlink_deliver_tap+0x807/0x850 [ 2822.437699][T19165] ? netlink_deliver_tap+0x2e/0x1b0 [ 2822.437714][T19165] ? netlink_deliver_tap+0x2e/0x1b0 [ 2822.437732][T19165] netlink_unicast+0x82f/0x9e0 [ 2822.437750][T19165] ? __pfx_netlink_unicast+0x10/0x10 [ 2822.437760][T19165] ? __alloc_skb+0x198/0x3a0 [ 2822.437770][T19165] ? netlink_sendmsg+0x642/0xb30 [ 2822.437782][T19165] ? skb_put+0x11b/0x210 [ 2822.437793][T19165] netlink_sendmsg+0x805/0xb30 [ 2822.437812][T19165] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2822.437825][T19165] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2822.437839][T19165] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2822.437848][T19165] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2822.437861][T19165] __sock_sendmsg+0x21c/0x270 [ 2822.437877][T19165] ____sys_sendmsg+0x505/0x820 [ 2822.437891][T19165] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2822.437907][T19165] ? import_iovec+0x74/0xa0 [ 2822.437921][T19165] ___sys_sendmsg+0x21f/0x2a0 [ 2822.437939][T19165] ? __pfx____sys_sendmsg+0x10/0x10 [ 2822.437967][T19165] ? __fget_files+0x2a/0x420 [ 2822.437980][T19165] ? __fget_files+0x3a0/0x420 [ 2822.437996][T19165] __x64_sys_sendmsg+0x19b/0x260 [ 2822.438009][T19165] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2822.438025][T19165] ? __pfx_ksys_write+0x10/0x10 [ 2822.438040][T19165] do_syscall_64+0xec/0xf80 [ 2822.438051][T19165] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2822.438060][T19165] ? trace_irq_disable+0x37/0x100 [ 2822.438072][T19165] ? clear_bhb_loop+0x60/0xb0 [ 2822.438083][T19165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2822.438093][T19165] RIP: 0033:0x7fd1ecf8f749 [ 2822.438104][T19165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2822.438112][T19165] RSP: 002b:00007fd1edec0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2822.438124][T19165] RAX: ffffffffffffffda RBX: 00007fd1ed1e5fa0 RCX: 00007fd1ecf8f749 [ 2822.438132][T19165] RDX: 0000000004040044 RSI: 0000200000000240 RDI: 0000000000000003 [ 2822.438138][T19165] RBP: 00007fd1edec0090 R08: 0000000000000000 R09: 0000000000000000 [ 2822.438145][T19165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2822.438151][T19165] R13: 00007fd1ed1e6038 R14: 00007fd1ed1e5fa0 R15: 00007fd1ed30fa28 [ 2822.438166][T19165] [ 2823.004854][T12493] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 2823.157162][T12493] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2823.164826][ T472] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 2823.167428][T12493] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2823.185353][T12493] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2823.194618][T12493] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2823.202841][T17990] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 2823.210704][T12493] usb 2-1: SerialNumber: syz [ 2823.324888][ T472] usb 4-1: Using ep0 maxpacket: 32 [ 2823.333314][ T472] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2823.342746][ T472] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2823.344835][T17990] usb 5-1: device descriptor read/64, error -71 [ 2823.353158][ T472] usb 4-1: config 0 has no interfaces? [ 2823.368700][ T472] usb 4-1: string descriptor 0 read error: -22 [ 2823.375393][ T472] usb 4-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=51.58 [ 2823.384448][ T472] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2823.395242][ T472] usb 4-1: config 0 descriptor?? [ 2823.476375][T19170] FAULT_INJECTION: forcing a failure. [ 2823.476375][T19170] name failslab, interval 1, probability 0, space 0, times 0 [ 2823.489171][T19170] CPU: 0 UID: 0 PID: 19170 Comm: syz.1.14295 Tainted: G L syzkaller #0 PREEMPT(full) [ 2823.489192][T19170] Tainted: [L]=SOFTLOCKUP [ 2823.489197][T19170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2823.489203][T19170] Call Trace: [ 2823.489208][T19170] [ 2823.489213][T19170] dump_stack_lvl+0xe8/0x150 [ 2823.489229][T19170] should_fail_ex+0x414/0x560 [ 2823.489255][T19170] should_failslab+0xa8/0x100 [ 2823.489279][T19170] __kmalloc_noprof+0xdf/0x800 [ 2823.489297][T19170] ? tomoyo_encode+0x28b/0x550 [ 2823.489324][T19170] tomoyo_encode+0x28b/0x550 [ 2823.489344][T19170] tomoyo_realpath_from_path+0x58d/0x5d0 [ 2823.489362][T19170] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2823.489373][T19170] tomoyo_path_number_perm+0x1e8/0x5a0 [ 2823.489385][T19170] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2823.489398][T19170] ? __lock_acquire+0x6b6/0x2cf0 [ 2823.489428][T19170] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 2823.489469][T19170] ? __fget_files+0x2a/0x420 [ 2823.489490][T19170] ? __fget_files+0x2a/0x420 [ 2823.489500][T19170] ? __fget_files+0x3a0/0x420 [ 2823.489517][T19170] ? __fget_files+0x2a/0x420 [ 2823.489530][T19170] security_file_ioctl+0xcb/0x2d0 [ 2823.489541][T19170] __se_sys_ioctl+0x47/0x170 [ 2823.489567][T19170] do_syscall_64+0xec/0xf80 [ 2823.489586][T19170] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2823.489603][T19170] ? trace_irq_disable+0x37/0x100 [ 2823.489624][T19170] ? clear_bhb_loop+0x60/0xb0 [ 2823.489641][T19170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2823.489651][T19170] RIP: 0033:0x7f5333b8f749 [ 2823.489661][T19170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2823.489669][T19170] RSP: 002b:00007f5331dbc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2823.489681][T19170] RAX: ffffffffffffffda RBX: 00007f5333de6090 RCX: 00007f5333b8f749 [ 2823.489688][T19170] RDX: 0000200000000040 RSI: 00000000c008561c RDI: 0000000000000009 [ 2823.489695][T19170] RBP: 00007f5331dbc090 R08: 0000000000000000 R09: 0000000000000000 [ 2823.489706][T19170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2823.489717][T19170] R13: 00007f5333de6128 R14: 00007f5333de6090 R15: 00007f5333f0fa28 [ 2823.489745][T19170] [ 2823.489769][T19170] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2823.594912][T17990] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 2823.732725][T12493] usb 2-1: 0:2 : does not exist [ 2823.768981][T12493] usb 2-1: USB disconnect, device number 90 [ 2823.788661][ T472] usb 4-1: USB disconnect, device number 90 [ 2823.812047][ T9982] udevd[9982]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2823.831906][T19172] fuse: Bad value for 'fd' [ 2823.924907][T17990] usb 5-1: device descriptor read/64, error -71 [ 2824.040273][T17990] usb usb5-port1: attempt power cycle [ 2824.385047][T17990] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 2824.405302][T17990] usb 5-1: device descriptor read/8, error -71 [ 2824.504884][T26515] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 2824.555301][T12493] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 2824.654832][T26515] usb 2-1: Using ep0 maxpacket: 32 [ 2824.654832][T17990] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 2824.669262][T26515] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2824.676502][T17990] usb 5-1: device descriptor read/8, error -71 [ 2824.685017][T26515] usb 2-1: config 5 has an invalid interface number: 52 but max is 0 [ 2824.693150][T26515] usb 2-1: config 5 has no interface number 0 [ 2824.700332][T26515] usb 2-1: config 5 interface 52 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 2824.714313][T26515] usb 2-1: string descriptor 0 read error: -22 [ 2824.714899][T12493] usb 4-1: Using ep0 maxpacket: 8 [ 2824.735131][T26515] usb 2-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=51.58 [ 2824.736443][T12493] usb 4-1: too many endpoints for config 0 interface 0 altsetting 8: 255, using maximum allowed: 30 [ 2824.744436][T26515] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2824.776042][T12493] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 2824.790502][T17990] usb usb5-port1: unable to enumerate USB device [ 2824.796590][T19182] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2824.814566][T26515] aircable 2-1:5.52: aircable converter detected [ 2824.821241][T12493] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2824.821270][T12493] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 2824.821297][T12493] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2824.821330][T12493] usb 4-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 2824.821351][T12493] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2824.829554][T12493] usb 4-1: config 0 descriptor?? [ 2824.897998][T26515] usb 2-1: aircable converter now attached to ttyUSB0 [ 2825.118156][T17990] usb 2-1: USB disconnect, device number 91 [ 2825.132012][T17990] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 2825.141454][T17990] aircable 2-1:5.52: device disconnected [ 2825.164886][T26515] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 2825.292258][T12493] logitech-djreceiver 0003:046D:C53A.00D0: hidraw0: USB HID v0.81 Device [HID 046d:c53a] on usb-dummy_hcd.3-1/input0 [ 2825.316528][T26515] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2825.329433][T26515] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2825.342550][T26515] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2825.352941][T26515] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2825.369428][T26515] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2825.378802][T26515] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2825.390271][T26515] usb 3-1: config 0 descriptor?? [ 2825.555014][ T472] usb 4-1: USB disconnect, device number 91 [ 2825.805634][T26515] plantronics 0003:047F:FFFF.00D1: unknown main item tag 0x0 [ 2825.813070][T26515] plantronics 0003:047F:FFFF.00D1: unknown main item tag 0x0 [ 2825.821558][T26515] plantronics 0003:047F:FFFF.00D1: unknown main item tag 0x0 [ 2825.832340][T26515] plantronics 0003:047F:FFFF.00D1: unknown main item tag 0x0 [ 2825.840307][T26515] plantronics 0003:047F:FFFF.00D1: unknown main item tag 0x0 [ 2825.847846][T26515] plantronics 0003:047F:FFFF.00D1: unknown main item tag 0x0 [ 2825.856743][T26515] plantronics 0003:047F:FFFF.00D1: unknown main item tag 0x0 [ 2825.857570][ T30] audit: type=1326 audit(1768194133.893:2985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19194 comm="syz.1.14308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5333b8f749 code=0x7ffc0000 [ 2825.864290][T26515] plantronics 0003:047F:FFFF.00D1: unknown main item tag 0x0 [ 2825.888063][ T30] audit: type=1326 audit(1768194133.893:2986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19194 comm="syz.1.14308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5333b8f749 code=0x7ffc0000 [ 2825.906956][T26515] plantronics 0003:047F:FFFF.00D1: unknown main item tag 0x0 [ 2825.926248][T26515] plantronics 0003:047F:FFFF.00D1: unknown main item tag 0x0 [ 2825.927779][ T30] audit: type=1326 audit(1768194133.933:2987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19194 comm="syz.1.14308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5333b8f749 code=0x7ffc0000 [ 2825.958383][ T30] audit: type=1326 audit(1768194133.933:2988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19194 comm="syz.1.14308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5333b8f749 code=0x7ffc0000 [ 2825.982384][ T30] audit: type=1326 audit(1768194133.933:2989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19194 comm="syz.1.14308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f5333b8f749 code=0x7ffc0000 [ 2826.006348][T26515] plantronics 0003:047F:FFFF.00D1: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 2826.009355][ T30] audit: type=1326 audit(1768194133.933:2990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19194 comm="syz.1.14308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5333b8f749 code=0x7ffc0000 [ 2826.101339][ T453] usb 3-1: USB disconnect, device number 73 [ 2826.125071][ T30] audit: type=1326 audit(1768194133.933:2991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19194 comm="syz.1.14308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f5333b8f749 code=0x7ffc0000 [ 2826.149304][ T30] audit: type=1326 audit(1768194133.933:2992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19194 comm="syz.1.14308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5333b8f749 code=0x7ffc0000 [ 2826.157373][ T472] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 2826.180972][ T30] audit: type=1326 audit(1768194133.933:2993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19194 comm="syz.1.14308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f5333b8f749 code=0x7ffc0000 [ 2826.216728][ T30] audit: type=1326 audit(1768194133.933:2994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19194 comm="syz.1.14308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5333b8f749 code=0x7ffc0000 [ 2826.280912][T19200] fuse: Bad value for 'fd' [ 2826.364850][ T472] usb 2-1: Using ep0 maxpacket: 16 [ 2826.377005][ T472] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 2826.387944][ T472] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 2826.397977][ T472] usb 2-1: Product: syz [ 2826.402291][ T472] usb 2-1: Manufacturer: syz [ 2826.407019][ T472] usb 2-1: SerialNumber: syz [ 2826.419215][ T472] usb 2-1: config 0 descriptor?? [ 2826.805351][ T453] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 2826.964877][ T453] usb 4-1: Using ep0 maxpacket: 32 [ 2826.976676][ T453] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2827.003993][ T453] usb 4-1: config 5 has an invalid interface number: 52 but max is 0 [ 2827.028719][ T453] usb 4-1: config 5 has no interface number 0 [ 2827.036306][ T453] usb 4-1: config 5 interface 52 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 2827.066880][ T453] usb 4-1: string descriptor 0 read error: -22 [ 2827.073388][ T453] usb 4-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=51.58 [ 2827.083191][ T453] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2827.092303][T17990] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 2827.129447][T19205] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 2827.138896][ T453] aircable 4-1:5.52: aircable converter detected [ 2827.153413][ T453] usb 4-1: aircable converter now attached to ttyUSB0 [ 2827.264950][T17990] usb 3-1: Using ep0 maxpacket: 8 [ 2827.284420][T17990] usb 3-1: config 1 interface 0 altsetting 16 bulk endpoint 0x1 has invalid maxpacket 64 [ 2827.307949][T17990] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2827.336747][T17990] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2827.362844][T17990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2827.375463][ T453] usb 4-1: USB disconnect, device number 92 [ 2827.393378][T17990] usb 3-1: Product: syz [ 2827.400023][ T453] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 2827.414824][T17990] usb 3-1: Manufacturer: syz [ 2827.426136][T17990] usb 3-1: SerialNumber: syz [ 2827.431273][ T453] aircable 4-1:5.52: device disconnected [ 2827.448974][T19211] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 2827.576372][ T472] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 2827.619252][T19221] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14315'. [ 2827.681186][ T453] IPVS: starting estimator thread 0... [ 2827.745151][ T472] usb 5-1: Using ep0 maxpacket: 32 [ 2827.766084][ T472] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 2827.795711][T19222] IPVS: using max 51 ests per chain, 122400 per kthread [ 2827.809407][ T472] usb 5-1: config 0 has no interface number 0 [ 2827.832038][ T472] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2827.855293][ T472] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2827.873287][ T472] usb 5-1: Product: syz [ 2827.887187][ T472] usb 5-1: Manufacturer: syz [ 2827.896231][ T472] usb 5-1: SerialNumber: syz [ 2827.906800][ T472] usb 5-1: config 0 descriptor?? [ 2827.925017][ T472] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2828.138919][ T472] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2828.171306][ T472] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2828.562209][T19217] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2828.628448][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2828.636783][ T472] usb 5-1: USB disconnect, device number 34 [ 2828.657428][ T472] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2828.698302][ T472] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2828.729709][ T472] quatech2 5-1:0.51: device disconnected [ 2828.889129][T27996] usb 2-1: USB disconnect, device number 92 [ 2829.392536][T19237] fuse: Invalid rootmode [ 2829.425441][T27996] usb 2-1: new full-speed USB device number 93 using dummy_hcd [ 2829.484825][ T472] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 2829.564842][T27996] usb 2-1: device descriptor read/64, error -71 [ 2829.646961][ T472] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2829.658339][ T472] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 2829.669583][ T472] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2829.676490][ T472] usb 5-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 2829.686359][T26515] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 2829.693966][ T472] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2829.706660][ T472] usb 5-1: config 0 descriptor?? [ 2829.712362][T19235] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2829.808829][T17990] usb 3-1: USB disconnect, device number 74 [ 2829.814798][T27996] usb 2-1: new full-speed USB device number 94 using dummy_hcd [ 2829.848739][T26515] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2829.877997][T26515] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2829.903661][T26515] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2829.919208][T26515] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2829.950002][T26515] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2829.959286][T27996] usb 2-1: device descriptor read/64, error -71 [ 2829.966052][T26515] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2829.982315][T26515] usb 4-1: config 0 descriptor?? [ 2830.085701][T27996] usb usb2-port1: attempt power cycle [ 2830.144150][ T472] hid-u2fzero 0003:10C4:8ACF.00D2: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.4-1/input0 [ 2830.169617][ T472] hid-u2fzero 0003:10C4:8ACF.00D2: U2F Zero LED initialised [ 2830.179552][ T472] hid-u2fzero 0003:10C4:8ACF.00D2: U2F Zero RNG initialised [ 2830.224877][T17990] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 2830.342138][T19235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2830.351224][T19235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2830.369051][ T472] usb 5-1: USB disconnect, device number 35 [ 2830.374783][T17990] usb 3-1: Using ep0 maxpacket: 16 [ 2830.384053][T17990] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2830.395196][T17990] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2830.406718][T17990] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2830.416726][T17990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2830.424828][T27996] usb 2-1: new full-speed USB device number 95 using dummy_hcd [ 2830.429794][T17990] usb 3-1: Product: syz [ 2830.432908][T26515] plantronics 0003:047F:FFFF.00D3: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 2830.436615][T17990] usb 3-1: Manufacturer: syz [ 2830.457856][T17990] usb 3-1: SerialNumber: syz [ 2830.477434][T27996] usb 2-1: device descriptor read/8, error -71 [ 2830.666126][T12493] usb 4-1: USB disconnect, device number 93 [ 2830.748535][T27996] usb 2-1: new full-speed USB device number 96 using dummy_hcd [ 2830.775621][T27996] usb 2-1: device descriptor read/8, error -71 [ 2830.895159][T27996] usb usb2-port1: unable to enumerate USB device [ 2831.028892][T19252] FAULT_INJECTION: forcing a failure. [ 2831.028892][T19252] name failslab, interval 1, probability 0, space 0, times 0 [ 2831.047973][T19252] CPU: 0 UID: 0 PID: 19252 Comm: syz.0.14325 Tainted: G L syzkaller #0 PREEMPT(full) [ 2831.048004][T19252] Tainted: [L]=SOFTLOCKUP [ 2831.048010][T19252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2831.048022][T19252] Call Trace: [ 2831.048030][T19252] [ 2831.048039][T19252] dump_stack_lvl+0xe8/0x150 [ 2831.048065][T19252] should_fail_ex+0x414/0x560 [ 2831.048112][T19252] should_failslab+0xa8/0x100 [ 2831.048135][T19252] kmem_cache_alloc_noprof+0x88/0x710 [ 2831.048162][T19252] ? skb_clone+0x212/0x3a0 [ 2831.048188][T19252] skb_clone+0x212/0x3a0 [ 2831.048213][T19252] __netlink_deliver_tap+0x404/0x850 [ 2831.048247][T19252] ? netlink_deliver_tap+0x2e/0x1b0 [ 2831.048271][T19252] netlink_deliver_tap+0x19c/0x1b0 [ 2831.048294][T19252] netlink_sendskb+0x68/0x140 [ 2831.048317][T19252] netlink_unicast+0x397/0x9e0 [ 2831.048335][T19252] ? __asan_memcpy+0x40/0x70 [ 2831.048373][T19252] ? __pfx_netlink_unicast+0x10/0x10 [ 2831.048403][T19252] netlink_rcv_skb+0x28c/0x470 [ 2831.048425][T19252] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2831.048444][T19252] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2831.048464][T19252] ? genl_rcv+0x19/0x40 [ 2831.048496][T19252] ? down_read+0x274/0x2e0 [ 2831.048515][T19252] ? genl_rcv+0xd/0x40 [ 2831.048533][T19252] genl_rcv+0x28/0x40 [ 2831.048549][T19252] netlink_unicast+0x82f/0x9e0 [ 2831.048577][T19252] ? __pfx_netlink_unicast+0x10/0x10 [ 2831.048596][T19252] ? __alloc_skb+0x198/0x3a0 [ 2831.048615][T19252] ? netlink_sendmsg+0x642/0xb30 [ 2831.048635][T19252] ? skb_put+0x11b/0x210 [ 2831.048658][T19252] netlink_sendmsg+0x805/0xb30 [ 2831.048689][T19252] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2831.048714][T19252] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2831.048738][T19252] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2831.048755][T19252] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2831.048778][T19252] __sock_sendmsg+0x21c/0x270 [ 2831.048806][T19252] ____sys_sendmsg+0x505/0x820 [ 2831.048833][T19252] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2831.048863][T19252] ? import_iovec+0x74/0xa0 [ 2831.048888][T19252] ___sys_sendmsg+0x21f/0x2a0 [ 2831.048913][T19252] ? __pfx____sys_sendmsg+0x10/0x10 [ 2831.048967][T19252] ? __fget_files+0x2a/0x420 [ 2831.048987][T19252] ? __fget_files+0x3a0/0x420 [ 2831.049017][T19252] __x64_sys_sendmsg+0x19b/0x260 [ 2831.049041][T19252] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2831.049071][T19252] ? __pfx_ksys_write+0x10/0x10 [ 2831.049100][T19252] do_syscall_64+0xec/0xf80 [ 2831.049119][T19252] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2831.049136][T19252] ? clear_bhb_loop+0x60/0xb0 [ 2831.049157][T19252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2831.049175][T19252] RIP: 0033:0x7fa4b4f8f749 [ 2831.049193][T19252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2831.049206][T19252] RSP: 002b:00007fa4b5e09038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2831.049226][T19252] RAX: ffffffffffffffda RBX: 00007fa4b51e5fa0 RCX: 00007fa4b4f8f749 [ 2831.049240][T19252] RDX: 0000000000040004 RSI: 0000200000000300 RDI: 0000000000000005 [ 2831.049251][T19252] RBP: 00007fa4b5e09090 R08: 0000000000000000 R09: 0000000000000000 [ 2831.049263][T19252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2831.049274][T19252] R13: 00007fa4b51e6038 R14: 00007fa4b51e5fa0 R15: 00007fa4b530fa28 [ 2831.049303][T19252] [ 2831.527321][T17990] usb 3-1: 0:2 : does not exist [ 2831.579625][T17990] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 2831.682523][T19256] netlink: 'syz.0.14326': attribute type 8 has an invalid length. [ 2831.707102][T17990] usb 3-1: USB disconnect, device number 75 [ 2831.821233][ T9982] udevd[9982]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2831.971174][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 2831.971192][ T30] audit: type=1326 audit(1768194140.003:3038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19260 comm="syz.2.14328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff443f8f749 code=0x7ffc0000 [ 2832.028469][ T30] audit: type=1326 audit(1768194140.043:3039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19260 comm="syz.2.14328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff443f8f749 code=0x7ffc0000 [ 2832.052734][ T30] audit: type=1326 audit(1768194140.043:3040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19260 comm="syz.2.14328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff443f8f749 code=0x7ffc0000 [ 2832.094925][T12923] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 2832.127766][ T30] audit: type=1326 audit(1768194140.043:3041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19260 comm="syz.2.14328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff443f8f749 code=0x7ffc0000 [ 2832.152124][ T30] audit: type=1326 audit(1768194140.043:3042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19260 comm="syz.2.14328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff443f8f749 code=0x7ffc0000 [ 2832.179501][ T30] audit: type=1326 audit(1768194140.043:3043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19260 comm="syz.2.14328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff443f8f749 code=0x7ffc0000 [ 2832.206267][ T30] audit: type=1326 audit(1768194140.043:3044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19260 comm="syz.2.14328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff443f8f749 code=0x7ffc0000 [ 2832.229959][ T30] audit: type=1326 audit(1768194140.043:3045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19260 comm="syz.2.14328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff443f8f749 code=0x7ffc0000 [ 2832.253118][ T30] audit: type=1326 audit(1768194140.043:3046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19260 comm="syz.2.14328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff443f8f749 code=0x7ffc0000 [ 2832.254791][T24908] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 2832.276006][ T30] audit: type=1326 audit(1768194140.043:3047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19260 comm="syz.2.14328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff443f8f749 code=0x7ffc0000 [ 2832.315027][T12923] usb 4-1: Using ep0 maxpacket: 32 [ 2832.339943][T19267] FAULT_INJECTION: forcing a failure. [ 2832.339943][T19267] name failslab, interval 1, probability 0, space 0, times 0 [ 2832.353077][T12923] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2832.363698][T19267] CPU: 1 UID: 0 PID: 19267 Comm: syz.1.14331 Tainted: G L syzkaller #0 PREEMPT(full) [ 2832.363716][T19267] Tainted: [L]=SOFTLOCKUP [ 2832.363720][T19267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2832.363727][T19267] Call Trace: [ 2832.363732][T19267] [ 2832.363738][T19267] dump_stack_lvl+0xe8/0x150 [ 2832.363756][T19267] should_fail_ex+0x414/0x560 [ 2832.363774][T19267] should_failslab+0xa8/0x100 [ 2832.363788][T19267] kmem_cache_alloc_noprof+0x88/0x710 [ 2832.363804][T19267] ? skb_clone+0x212/0x3a0 [ 2832.363818][T19267] skb_clone+0x212/0x3a0 [ 2832.363832][T19267] __netlink_deliver_tap+0x404/0x850 [ 2832.363851][T19267] ? netlink_deliver_tap+0x2e/0x1b0 [ 2832.363864][T19267] netlink_deliver_tap+0x19c/0x1b0 [ 2832.363877][T19267] netlink_sendskb+0x68/0x140 [ 2832.363889][T19267] netlink_unicast+0x397/0x9e0 [ 2832.363899][T19267] ? __asan_memcpy+0x40/0x70 [ 2832.363913][T19267] ? cake_get_tcphdr+0x41a/0x8b0 [ 2832.363930][T19267] ? __pfx_netlink_unicast+0x10/0x10 [ 2832.363945][T19267] netlink_rcv_skb+0x28c/0x470 [ 2832.363958][T19267] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2832.363968][T19267] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2832.363978][T19267] ? genl_rcv+0x19/0x40 [ 2832.363995][T19267] ? down_read+0x274/0x2e0 [ 2832.364005][T19267] ? genl_rcv+0xd/0x40 [ 2832.364022][T19267] genl_rcv+0x28/0x40 [ 2832.364031][T19267] netlink_unicast+0x82f/0x9e0 [ 2832.364046][T19267] ? __pfx_netlink_unicast+0x10/0x10 [ 2832.364056][T19267] ? __alloc_skb+0x198/0x3a0 [ 2832.364066][T19267] ? netlink_sendmsg+0x642/0xb30 [ 2832.364077][T19267] ? skb_put+0x11b/0x210 [ 2832.364089][T19267] netlink_sendmsg+0x805/0xb30 [ 2832.364105][T19267] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2832.364119][T19267] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2832.364133][T19267] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2832.364142][T19267] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2832.364154][T19267] __sock_sendmsg+0x21c/0x270 [ 2832.364171][T19267] ____sys_sendmsg+0x505/0x820 [ 2832.364185][T19267] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2832.364201][T19267] ? import_iovec+0x74/0xa0 [ 2832.364214][T19267] ___sys_sendmsg+0x21f/0x2a0 [ 2832.364227][T19267] ? __pfx____sys_sendmsg+0x10/0x10 [ 2832.364255][T19267] ? __fget_files+0x2a/0x420 [ 2832.364269][T19267] ? __fget_files+0x3a0/0x420 [ 2832.364285][T19267] __x64_sys_sendmsg+0x19b/0x260 [ 2832.364298][T19267] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2832.364314][T19267] ? __pfx_ksys_write+0x10/0x10 [ 2832.364329][T19267] do_syscall_64+0xec/0xf80 [ 2832.364340][T19267] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2832.364349][T19267] ? trace_irq_disable+0x37/0x100 [ 2832.364361][T19267] ? clear_bhb_loop+0x60/0xb0 [ 2832.364372][T19267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2832.364382][T19267] RIP: 0033:0x7f5333b8f749 [ 2832.364392][T19267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2832.364400][T19267] RSP: 002b:00007f5331df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2832.364412][T19267] RAX: ffffffffffffffda RBX: 00007f5333de5fa0 RCX: 00007f5333b8f749 [ 2832.364420][T19267] RDX: 0000000000000000 RSI: 0000200000001380 RDI: 0000000000000003 [ 2832.364426][T19267] RBP: 00007f5331df6090 R08: 0000000000000000 R09: 0000000000000000 [ 2832.364432][T19267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2832.364438][T19267] R13: 00007f5333de6038 R14: 00007f5333de5fa0 R15: 00007f5333f0fa28 [ 2832.364453][T19267] [ 2832.716442][T12923] usb 4-1: config 5 has an invalid interface number: 52 but max is 0 [ 2832.724632][T12923] usb 4-1: config 5 has no interface number 0 [ 2832.730900][T12923] usb 4-1: config 5 interface 52 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 2832.744608][T12923] usb 4-1: string descriptor 0 read error: -22 [ 2832.750938][T12923] usb 4-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=51.58 [ 2832.760507][T12923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2832.776235][T19269] fuse: Invalid rootmode [ 2832.781689][T19259] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 2832.791310][T12923] aircable 4-1:5.52: aircable converter detected [ 2832.799268][T24908] usb 3-1: Using ep0 maxpacket: 16 [ 2832.810336][T24908] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 2832.819994][T24908] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 2832.828256][T24908] usb 3-1: Product: syz [ 2832.832555][T24908] usb 3-1: Manufacturer: syz [ 2832.837201][T24908] usb 3-1: SerialNumber: syz [ 2832.843845][T12923] usb 4-1: aircable converter now attached to ttyUSB0 [ 2832.854808][T24908] usb 3-1: config 0 descriptor?? [ 2833.035549][T27996] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 2833.048593][T24908] usb 4-1: USB disconnect, device number 94 [ 2833.057423][T24908] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 2833.066452][T24908] aircable 4-1:5.52: device disconnected [ 2833.086826][T26515] usb 3-1: USB disconnect, device number 76 [ 2833.196610][T27996] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2833.207176][T27996] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2833.216264][T27996] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2833.226373][T27996] usb 2-1: config 0 descriptor?? [ 2833.238516][T27996] pwc: Askey VC010 type 2 USB webcam detected. [ 2833.633795][T27996] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2833.641717][T27996] pwc: recv_control_msg error -32 req 02 val 2700 [ 2833.649263][T27996] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2833.657096][T27996] pwc: recv_control_msg error -32 req 04 val 1000 [ 2833.664300][T27996] pwc: recv_control_msg error -32 req 04 val 1300 [ 2833.671520][T27996] pwc: recv_control_msg error -32 req 04 val 1400 [ 2833.681391][T27996] pwc: recv_control_msg error -32 req 02 val 2000 [ 2833.689698][T27996] pwc: recv_control_msg error -32 req 02 val 2100 [ 2833.696992][T27996] pwc: recv_control_msg error -32 req 04 val 1500 [ 2833.905900][T27996] pwc: recv_control_msg error -71 req 02 val 2400 [ 2833.922044][T27996] pwc: recv_control_msg error -71 req 02 val 2600 [ 2833.929915][T27996] pwc: recv_control_msg error -71 req 02 val 2900 [ 2833.939981][T27996] pwc: recv_control_msg error -71 req 02 val 2800 [ 2833.948283][T27996] pwc: recv_control_msg error -71 req 04 val 1100 [ 2833.956666][T27996] pwc: recv_control_msg error -71 req 04 val 1200 [ 2833.968588][T27996] pwc: Registered as video103. [ 2833.982671][T27996] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input278 [ 2833.998052][T27996] usb 2-1: USB disconnect, device number 97 [ 2834.084798][ T472] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 2834.094859][T26515] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 2834.244934][ T472] usb 3-1: Using ep0 maxpacket: 8 [ 2834.250083][T26515] usb 5-1: Using ep0 maxpacket: 32 [ 2834.258388][ T472] usb 3-1: config 1 interface 0 altsetting 16 bulk endpoint 0x1 has invalid maxpacket 64 [ 2834.269036][ T472] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2834.276418][T26515] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2834.286671][T26515] usb 5-1: config 5 has an invalid interface number: 52 but max is 0 [ 2834.296796][ T472] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2834.307078][T26515] usb 5-1: config 5 has no interface number 0 [ 2834.313814][T26515] usb 5-1: config 5 interface 52 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 2834.324007][ T472] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2834.332589][ T472] usb 3-1: Product: syz [ 2834.337528][ T472] usb 3-1: Manufacturer: syz [ 2834.343896][ T472] usb 3-1: SerialNumber: syz [ 2834.350415][T26515] usb 5-1: string descriptor 0 read error: -22 [ 2834.356942][T26515] usb 5-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=51.58 [ 2834.367758][T26515] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2834.377590][T19286] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 2834.396966][T19287] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 2834.410203][T26515] aircable 5-1:5.52: aircable converter detected [ 2834.426640][T26515] usb 5-1: aircable converter now attached to ttyUSB0 [ 2834.629869][T12923] usb 5-1: USB disconnect, device number 36 [ 2834.644364][T12923] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 2834.671640][T12923] aircable 5-1:5.52: device disconnected [ 2835.103752][T19304] loop5: detected capacity change from 0 to 7 [ 2835.122904][T19304] Dev loop5: unable to read RDB block 7 [ 2835.128979][T19304] loop5: unable to read partition table [ 2835.136350][T19304] loop5: partition table beyond EOD, truncated [ 2835.143994][T19304] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2835.307413][T19316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14349'. [ 2835.404923][T12923] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 2835.564825][T12923] usb 2-1: Using ep0 maxpacket: 16 [ 2835.575879][T12923] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 2835.585108][T12923] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 2835.593211][T12923] usb 2-1: Product: syz [ 2835.597592][T12923] usb 2-1: Manufacturer: syz [ 2835.602223][T12923] usb 2-1: SerialNumber: syz [ 2835.610309][T12923] usb 2-1: config 0 descriptor?? [ 2835.694863][T16938] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 2835.847101][T16938] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2835.857676][T16938] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2835.866858][T16938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2835.880256][T16938] usb 4-1: config 0 descriptor?? [ 2835.891062][T16938] pwc: Askey VC010 type 2 USB webcam detected. [ 2836.077579][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 2836.084381][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 2836.289834][T16938] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2836.297396][T16938] pwc: recv_control_msg error -32 req 02 val 2700 [ 2836.304542][T16938] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2836.312330][T16938] pwc: recv_control_msg error -32 req 04 val 1000 [ 2836.320220][T16938] pwc: recv_control_msg error -32 req 04 val 1300 [ 2836.327729][T16938] pwc: recv_control_msg error -32 req 04 val 1400 [ 2836.335077][T16938] pwc: recv_control_msg error -32 req 02 val 2000 [ 2836.342274][T16938] pwc: recv_control_msg error -32 req 02 val 2100 [ 2836.349767][T16938] pwc: recv_control_msg error -32 req 04 val 1500 [ 2836.364820][T26515] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 2836.514904][T26515] usb 5-1: Using ep0 maxpacket: 32 [ 2836.522245][T26515] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 2836.531552][T26515] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2836.542439][T26515] usb 5-1: config 0 descriptor?? [ 2836.557545][T16938] pwc: recv_control_msg error -71 req 02 val 2400 [ 2836.566186][T16938] pwc: recv_control_msg error -71 req 02 val 2600 [ 2836.575568][T16938] pwc: recv_control_msg error -71 req 02 val 2900 [ 2836.582418][T16938] pwc: recv_control_msg error -71 req 02 val 2800 [ 2836.589725][T16938] pwc: recv_control_msg error -71 req 04 val 1100 [ 2836.596599][T16938] pwc: recv_control_msg error -71 req 04 val 1200 [ 2836.608122][T16938] pwc: Registered as video103. [ 2836.616463][T16938] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input279 [ 2836.649815][T16938] usb 4-1: USB disconnect, device number 95 [ 2836.775508][ T472] usb 3-1: USB disconnect, device number 77 [ 2836.793567][T26515] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 2836.822828][T26515] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2836.841982][T26515] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 2836.850680][T26515] usb 5-1: media controller created [ 2836.871588][T26515] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2836.920995][T19326] netlink: 44 bytes leftover after parsing attributes in process `syz.2.14352'. [ 2836.930431][T26515] DVB: Unable to find symbol dib7000p_attach() [ 2836.936684][T26515] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 2836.992790][T19322] ------------[ cut here ]------------ [ 2836.999080][T19322] usb 5-1: BOGUS control dir, pipe 80002580 doesn't match bRequestType c0 [ 2837.008366][T19322] WARNING: drivers/usb/core/urb.c:414 at usb_submit_urb+0x105c/0x18d0, CPU#0: syz.4.14351/19322 [ 2837.019206][T19322] Modules linked in: [ 2837.024199][T19322] CPU: 0 UID: 0 PID: 19322 Comm: syz.4.14351 Tainted: G L syzkaller #0 PREEMPT(full) [ 2837.036688][T19322] Tainted: [L]=SOFTLOCKUP [ 2837.041014][T19322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2837.051532][T19322] RIP: 0010:usb_submit_urb+0x111c/0x18d0 [ 2837.057769][T19322] Code: b8 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 a7 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 20 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 b7 f2 ff ff 89 e9 [ 2837.077808][T19322] RSP: 0018:ffffc900033a7940 EFLAGS: 00010246 [ 2837.083872][T19322] RAX: 0000000000000000 RBX: ffff88804de30d00 RCX: 0000000080002580 [ 2837.092245][T19322] RDX: ffff88807ccd4e80 RSI: ffffffff8c140d20 RDI: ffffffff8f8ee730 [ 2837.100508][T19322] RBP: 1ffff11009cbf404 R08: 00000000000000c0 R09: 0000000000000000 [ 2837.108802][T19322] R10: ffffc900033a7a40 R11: fffff52000674f54 R12: ffff88804d800100 [ 2837.117122][T19322] R13: ffff88804e5fa020 R14: 0000000080002580 R15: ffff88807ccd4e80 [ 2837.125385][T19322] FS: 00007fd1edec06c0(0000) GS:ffff888125e1f000(0000) knlGS:0000000000000000 [ 2837.135031][T19322] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2837.141668][T19322] CR2: 000000110c3b5d82 CR3: 0000000064858000 CR4: 00000000003526f0 [ 2837.149707][T19322] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000036 [ 2837.157748][T19322] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2837.165770][T19322] Call Trace: [ 2837.169062][T19322] [ 2837.172030][T19322] ? __init_swait_queue_head+0xa9/0x150 [ 2837.177646][T19322] usb_start_wait_urb+0x115/0x4f0 [ 2837.182686][T19322] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 2837.188321][T19322] usb_control_msg+0x232/0x3e0 [ 2837.193105][T19322] dib0700_i2c_xfer+0xba7/0xf70 [ 2837.198035][T19322] __i2c_transfer+0x79a/0x1f00 [ 2837.202813][T19322] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2837.209128][T19322] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2837.215004][T19322] ? i2c_transfer+0xc8/0x2d0 [ 2837.219591][T19322] i2c_transfer+0x1cc/0x2d0 [ 2837.224123][T19322] i2cdev_ioctl_rdwr+0x460/0x740 [ 2837.229104][T19322] i2cdev_ioctl+0x64b/0x820 [ 2837.233626][T19322] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 2837.238969][T19322] ? __fget_files+0x3a0/0x420 [ 2837.243655][T19322] ? __fget_files+0x2a/0x420 [ 2837.248291][T19322] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2837.253239][T19322] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 2837.258271][T19322] __se_sys_ioctl+0xfc/0x170 [ 2837.262856][T19322] do_syscall_64+0xec/0xf80 [ 2837.267401][T19322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2837.273482][T19322] ? clear_bhb_loop+0x60/0xb0 [ 2837.278179][T19322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2837.284144][T19322] RIP: 0033:0x7fd1ecf8f749 [ 2837.288591][T19322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2837.308281][T19322] RSP: 002b:00007fd1edec0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2837.316714][T19322] RAX: ffffffffffffffda RBX: 00007fd1ed1e5fa0 RCX: 00007fd1ecf8f749 [ 2837.324710][T19322] RDX: 0000200000000040 RSI: 0000000000000707 RDI: 0000000000000004 [ 2837.332676][T19322] RBP: 00007fd1ed013f91 R08: 0000000000000000 R09: 0000000000000000 [ 2837.340864][T19322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2837.348883][T19322] R13: 00007fd1ed1e6038 R14: 00007fd1ed1e5fa0 R15: 00007fd1ed30fa28 [ 2837.356881][T19322] [ 2837.359885][T19322] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2837.367161][T19322] CPU: 0 UID: 0 PID: 19322 Comm: syz.4.14351 Tainted: G L syzkaller #0 PREEMPT(full) [ 2837.378166][T19322] Tainted: [L]=SOFTLOCKUP [ 2837.382489][T19322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2837.392521][T19322] Call Trace: [ 2837.395793][T19322] [ 2837.398721][T19322] vpanic+0x1e0/0x670 [ 2837.402691][T19322] panic+0xb9/0xc0 [ 2837.406837][T19322] ? __pfx_panic+0x10/0x10 [ 2837.411329][T19322] __warn+0x317/0x4b0 [ 2837.415320][T19322] ? usb_submit_urb+0x105c/0x18d0 [ 2837.420325][T19322] ? usb_submit_urb+0x105c/0x18d0 [ 2837.425326][T19322] __report_bug+0x288/0x500 [ 2837.430135][T19322] ? usb_submit_urb+0x105c/0x18d0 [ 2837.435142][T19322] ? __pfx___report_bug+0x10/0x10 [ 2837.440150][T19322] ? lockdep_hardirqs_on+0x7b/0x110 [ 2837.445411][T19322] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2837.451198][T19322] report_bug_entry+0x19a/0x290 [ 2837.456028][T19322] ? usb_submit_urb+0x111c/0x18d0 [ 2837.461030][T19322] ? usb_submit_urb+0x1121/0x18d0 [ 2837.466032][T19322] handle_bug+0xca/0x200 [ 2837.470271][T19322] exc_invalid_op+0x1a/0x50 [ 2837.474764][T19322] asm_exc_invalid_op+0x1a/0x20 [ 2837.479665][T19322] RIP: 0010:usb_submit_urb+0x111c/0x18d0 [ 2837.485288][T19322] Code: b8 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 a7 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 20 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 b7 f2 ff ff 89 e9 [ 2837.504872][T19322] RSP: 0018:ffffc900033a7940 EFLAGS: 00010246 [ 2837.510919][T19322] RAX: 0000000000000000 RBX: ffff88804de30d00 RCX: 0000000080002580 [ 2837.518868][T19322] RDX: ffff88807ccd4e80 RSI: ffffffff8c140d20 RDI: ffffffff8f8ee730 [ 2837.526830][T19322] RBP: 1ffff11009cbf404 R08: 00000000000000c0 R09: 0000000000000000 [ 2837.534778][T19322] R10: ffffc900033a7a40 R11: fffff52000674f54 R12: ffff88804d800100 [ 2837.542726][T19322] R13: ffff88804e5fa020 R14: 0000000080002580 R15: ffff88807ccd4e80 [ 2837.550745][T19322] ? __init_swait_queue_head+0xa9/0x150 [ 2837.556279][T19322] usb_start_wait_urb+0x115/0x4f0 [ 2837.561288][T19322] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 2837.566821][T19322] usb_control_msg+0x232/0x3e0 [ 2837.571586][T19322] dib0700_i2c_xfer+0xba7/0xf70 [ 2837.576428][T19322] __i2c_transfer+0x79a/0x1f00 [ 2837.581174][T19322] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2837.586967][T19322] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2837.592765][T19322] ? i2c_transfer+0xc8/0x2d0 [ 2837.597331][T19322] i2c_transfer+0x1cc/0x2d0 [ 2837.601813][T19322] i2cdev_ioctl_rdwr+0x460/0x740 [ 2837.606731][T19322] i2cdev_ioctl+0x64b/0x820 [ 2837.611215][T19322] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 2837.616217][T19322] ? __fget_files+0x3a0/0x420 [ 2837.620887][T19322] ? __fget_files+0x2a/0x420 [ 2837.625471][T19322] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2837.630396][T19322] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 2837.635414][T19322] __se_sys_ioctl+0xfc/0x170 [ 2837.639999][T19322] do_syscall_64+0xec/0xf80 [ 2837.644488][T19322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2837.650544][T19322] ? clear_bhb_loop+0x60/0xb0 [ 2837.655209][T19322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2837.661080][T19322] RIP: 0033:0x7fd1ecf8f749 [ 2837.665483][T19322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2837.685119][T19322] RSP: 002b:00007fd1edec0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2837.693549][T19322] RAX: ffffffffffffffda RBX: 00007fd1ed1e5fa0 RCX: 00007fd1ecf8f749 [ 2837.701507][T19322] RDX: 0000200000000040 RSI: 0000000000000707 RDI: 0000000000000004 [ 2837.709459][T19322] RBP: 00007fd1ed013f91 R08: 0000000000000000 R09: 0000000000000000 [ 2837.717417][T19322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2837.725457][T19322] R13: 00007fd1ed1e6038 R14: 00007fd1ed1e5fa0 R15: 00007fd1ed30fa28 [ 2837.733451][T19322] [ 2837.736845][T19322] Kernel Offset: disabled [ 2837.741153][T19322] Rebooting in 86400 seconds..