last executing test programs: 9.795056905s ago: executing program 2 (id=3079): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000015c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000881}, 0x0) 9.722010331s ago: executing program 2 (id=3080): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') exit(0xfff) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000280)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@userxattr}], [], 0x2c}) setxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r2, 0xc008aeba, 0x0) llistxattr(&(0x7f0000002300)='./file0\x00', 0x0, 0xfffffdf3) 8.62951897s ago: executing program 2 (id=3089): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = accept4$packet(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0x14, 0x80800) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000240)=@req={0x1, 0x3, 0x4, 0x4}, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0xffffdfffffffffff, 0x800, 0x0, 0x3}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000900)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000740)={0x15c, 0x0, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}, @NL80211_ATTR_REG_RULES={0x130, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x100}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1ff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffffb}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x72}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x94}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2a}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6df0}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x55}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80000001}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x950}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x400}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}]}, 0x15c}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x4c, r3, 0x1, 0xfffffffd, 0x25dfdc00, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xb}, {0x6, 0x11, 0x100}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x22002040}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x9c, 0x2, 0x6, 0xa03, 0x0, 0x0, {0x6, 0x0, 0x7}, [@IPSET_ATTR_DATA={0x48, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x8}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x53}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x400c}, 0x4001) r6 = syz_usb_connect(0x3, 0x24, &(0x7f0000001680)={{0x12, 0x1, 0x250, 0x60, 0x24, 0x64, 0x8, 0x3fd, 0xebbe, 0x2ca5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x7, 0x0, 0x9, "", [{{0x9, 0x4, 0x96, 0x3, 0x0, 0xe3, 0x90, 0xbc}}]}}]}}, &(0x7f0000002040)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0x3d4, &(0x7f0000000340)={[{0x5, 0x4e00, "a6f722f53a"}, {0x1f, 0x4e00, "6328b1cd3d55666c2486ee9370ade5975e09c46af7c96b021513c245048cb4"}, {0x6, 0x4e00, "b5d33bd63a0a"}, {0x5c, 0x4e00, "7054b50a66090178566b2f115a39915b826cfa5d256cec83ebf6ff15c24303ed15263bc239df9406e5d94429ced40534c5bede91779a2467e5bcf5091bb7bc6baa83c6de0d11cfdc03b215728bb075df8515a5ddcd65ca85a8459f38"}, {0xe3, 0x4e00, "95eb5a5e9007c33d2a41ab968b14a966d5853f98b0153b1aab590dc5308da0346cbc45992206de5868bac307948c576f3fbb960631b092c5ec84ec9e98bd19f0a0bb20e76f5a493d0452eddcf0af3079bf84ea7af023528d8eed09eb51a2e3104ac2e19af487e9736b2c9fbb053cf771e9e9e179469516aa371f075cfcf8432a448016fe46c8b6a46161ee6952e4e4174e6ffe2d82ad28766e8951cd4df9b4761500e7973470260943b2455f8234080337fd09947aa5baa710641c9a62559523e61624a36974131a5b621faa50bac2ff834eea260d277d49b67c9c1e3766ba6927cd3c"}, {0x17e, 0x4e00, "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"}, {0x9, 0x4e00, "a15a8a8b4a17014e30"}, {0xb6, 0x4e00, "41239301c50b87a19c2bd5020cb398d8e3e5a4aaddd12611d1a76ea11eb637aee9b978d4f17c36e0d2298c0d4699a32f327d8314ede7a6202f240a3d7d96bb0c14a8bf41071500d2bd7e3b90811742ddd91fa65db78b5c0fb1f099b368ac9173d7ad9476ccf77caa7e66403ee738be79902b8abce11abc3be36b471e3306178b9dd580a8694284e6a40e0fedbef4ad6f5568275498c21ee3992d9886768894a5b6dcbc19206cac1515b927662b5004cb3f5d00ecefc1"}]}) 7.0967545s ago: executing program 2 (id=3097): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) r3 = openat2$dir(0xffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) mknod$loop(0x0, 0x2000, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202}) r4 = openat(0xffffffffffffff9c, 0x0, 0x101001, 0x0) vmsplice(r4, 0x0, 0x0, 0x7) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000300)={0x2, 0x0, [{0x0, 0x4, 0x0, 0x5, 0x3}, {0x1, 0x7ff, 0x5, 0x5, 0x5}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x10000) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x2100, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r5, 0x0, 0x8040) 6.513453583s ago: executing program 1 (id=3102): mknod$loop(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x1) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000013002108000000000000000008000000", @ANYBLOB="0600000021a500000c003a"], 0x2c}], 0x1}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x41, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x2, 0x5, 0x0, 0x3, 0x2, 0x2, 0xfffffffffffffffd], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.65841081s ago: executing program 1 (id=3104): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) write$P9_RAUTH(r1, &(0x7f0000001040)={0x14, 0x67, 0x1, {0x4, 0x4}}, 0x14) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) shutdown(r2, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0xffffff80}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 3.525111831s ago: executing program 1 (id=3108): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x5000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0xa9525000) ioctl$SNDRV_PCM_IOCTL_LINK(r2, 0x40044160, &(0x7f0000000180)=0x400) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r4 = socket$kcm(0x10, 0x2, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000002c0)={0x7, 0x0, [{0xa, 0x9, 0x0, 0x6, 0x101, 0x1, 0x6}, {0xa, 0x4, 0x9, 0x2, 0x0, 0x8, 0x7f}, {0x80000001, 0x8, 0x1, 0x7fffffff, 0x7, 0x4, 0x5}, {0x2, 0x3, 0x3, 0x6, 0x4, 0xa6576b0, 0x9}, {0x80000001, 0x80000001, 0x1, 0x80000001, 0x8d1, 0x2, 0x4}, {0x80000019, 0x7, 0x5, 0x5, 0x93c3, 0x13, 0xfffffff7}, {0x80000008, 0x2, 0x4, 0x7, 0x5, 0x183, 0xfffffffb}]}) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0xe82) ioctl$FE_SET_PROPERTY(r5, 0x40106f52, &(0x7f00000000c0)={0x29, &(0x7f0000000240)=[{0x9, '\x00', @data=0x800, 0x5}]}) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) 3.321499605s ago: executing program 2 (id=3109): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101e01, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000002c0)=0x7e) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f0000000380)=0x1) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x1, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) getsockopt$inet_tcp_buf(r4, 0x6, 0xb, 0x0, &(0x7f00000001c0)) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002c00070100000000ffdbdf25027c000008000180040006030000000000000080"], 0x24}, 0x1, 0x0, 0x0, 0x8044}, 0xc050) syz_usb_control_io(r3, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000540)=0xff) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)=0x12) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x1) r6 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r6, 0xc0106426, &(0x7f0000000280)={0x5, &(0x7f0000000240)=[{}, {}, {}, {}, {}]}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x7) 2.982406046s ago: executing program 1 (id=3112): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004000) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000040)=@gcm_128={{0x303}, "1b2fcb39a2d24a3f", "3176927120162c9891c2feb670bbea88", "2c2af280", "c367b1a8d1546100"}, 0x28) write$binfmt_elf64(r1, &(0x7f0000001280)=ANY=[@ANYRES16=r1], 0x4a2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) 2.334432164s ago: executing program 1 (id=3120): r0 = syz_usb_connect$cdc_ncm(0x3, 0x90, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e, 0x2, 0x1, 0x7, 0x10, 0xf4, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "b580628d"}, {0x5, 0x24, 0x0, 0x6ab}, {0xd, 0x24, 0xf, 0x1, 0xe94, 0x2, 0x82c, 0x8}, {0x6, 0x24, 0x1a, 0x7, 0x4}, [@mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x0, 0x9}, @mbim={0xc, 0x24, 0x1b, 0xa02, 0x97, 0x1, 0x48, 0x3, 0xad}, @obex={0x5, 0x24, 0x15, 0x9}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0xf}]}, {{0x9, 0x5, 0x81, 0x3, 0x7ff, 0xe6, 0x5, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x4, 0x5, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x80, 0x0, 0xdb}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x7a, 0x14, 0x8, 0xff, 0x6}, 0xf, &(0x7f0000000100)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0xfb, 0x3, 0xfff}]}, 0x3, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x438}}, {0xca, &(0x7f0000000180)=@string={0xca, 0x3, "d2a2ffe067c5058bf86d62744a08fea19f0569ce618eb12d72cb56217ee34eb2a1fe45bcdc4e12b59181ae2f1244fbfaf7dc0dca966024369bb2ce37b7f0b0cd545b4a3196d4803fce9d182a8f563c91988ecbbda86dfb1ba8628e51677c7f5a8d831f3913624b5d07d2c1b205970cc85ec3235cb976156a0074d9c261d109a7deb434f3672e5c1988f5dfd3f9d19ba99581c2b887870b90de25ce6b10c646c91493bf0721557d1cf54b0f581efb9fd44dd61c65713c99d2ac295cb20f40ba16630641cc30456020"}}, {0x81, &(0x7f0000000280)=@string={0x81, 0x3, "e6d34004966226fccb48bf7fd5c9c9bd47327223e47576c20169974daeccee7a4a77eb41ef3053eca78eda2d4fef71b0f8f87e94c51f369d102edbd698b34466946d32d15ff6c6a77f8ba208ad6636b4f2d435ae32ae089501a562132a42e34de9a45b657b116fe6dd3efb2114470210bcc9c2448a92c58b5b636913e3d41a"}}]}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000480)={0x14, &(0x7f0000000380)={0x40, 0x8, 0xa2, {0xa2, 0xb, "28649f35e7d858ee42084a37de69cf0e7503ac36f3a65abea1cba79e59321d104bfa6494a65055245d6ce77c81d6817e0e07b7450b0bb1c5624b5a7899c56d05f4b8b9d88910a38de415a61f8cf445a0c8a59639fd38eaea744c229ca9e0c3cbf6d9b64f95c51d988924bbfe73b434518657f71e3dbfa875e263c00c3cfa96e0beb3ec2fbceda75705418ecaf2dfde670391e6d462f11e983d321a529e5da038"}}, &(0x7f0000000440)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000006c0)={0x44, &(0x7f00000004c0)={0x0, 0xd, 0x8, "a72b68289411460b"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000580)={0x20, 0x80, 0x1c, {0x9, 0x4, 0x2, 0x9, 0x1ff, 0x4, 0x4, 0x2, 0x3, 0x8087, 0x5}}, &(0x7f00000005c0)={0x20, 0x85, 0x4, 0x9}, &(0x7f0000000600)={0x20, 0x83, 0x2}, &(0x7f0000000640)={0x20, 0x87, 0x2}, &(0x7f0000000680)={0x20, 0x89, 0x2, 0x1}}) syz_usb_connect$uac1(0x6, 0x105, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x200c, 0x1018, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf3, 0x3, 0x1, 0x7, 0x10, 0xa, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xadce, 0x2f}, [@processing_unit={0x7, 0x24, 0x7, 0x1, 0x1, 0x9d}, @selector_unit={0x8, 0x24, 0x5, 0x1, 0x77, "5ad7be"}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x307, 0x5, 0x4, 0x3}, @extension_unit={0xd, 0x24, 0x8, 0x1, 0x7, 0x8, "1274165a2766"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x10, 0xc, 0x97}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0xec, 0x0, 0xfe, 0x6}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x3, 0x1, 0xf9, 0x0, "d2579e91114ff30c"}, @as_header={0x7, 0x24, 0x1, 0xff, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xae, 0x7, 0x4, {0x7, 0x25, 0x1, 0x8, 0xc, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x0, 0x5, 0x10, "43ffe3822c1e"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0x2, 0x7, 0x9, 0x9}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0xe, 0xce6, 0xe, "9570a60659b4"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0x9, 0x1, 0x2}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x101, 0x7f, 0x8a, 0x9}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xc, 0x3, 0x2, 0xb}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x10, 0x4, 0x5, {0x7, 0x25, 0x1, 0xc, 0x6, 0x3}}}}}}}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000880)={0xa, 0x6, 0x250, 0x4, 0x6, 0xb, 0xff, 0x3d}, 0xf4, &(0x7f00000008c0)={0x5, 0xf, 0xf4, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x4, 0x3}, @generic={0xe8, 0x10, 0xa, "c9a410e90b11753e064a8b4d3fea5ff9a5ac3589e1e3115d5b7e8a7c425a550e3fce3dc817aa836b3615f7b02450526f4b0c53fccd41b15ab69aafda75462c855bef5be3d56c94eac69b5a3049f96a78d5d6455bc6447507bc366ddd7877467df64eb17e6070082fbb5f93cbe2016825037f5a893d2a3b24044ad01e576f717de41837a68c5a0213628804a11edb7d5f5edbfdcb8b59142d542d2b809931ad08e1a4daa8c7634051cc313740dcab7689f0fa81d25a1aa28ae87dd29f875d2707a439ec0d1394f70b2e1459f34b82594c9352c9643e8c27cd5575d1b5f742f5b069e8db3921"}]}, 0x6, [{0xe3, &(0x7f00000009c0)=@string={0xe3, 0x3, "6eb1ba0ccef56b9852d11993e93d839fd83ecf28441785f51db35d93066c711507559ffaf3b15998dd35acf16db8ec2295a9d739e083944ade8a63556c3afb51e21bd36ca5014c28a33f3aa39bbf5ce2a745f32221a72a5433b72104a951a70886b9fb42df338fa73b2c890752e3a284e73f0c9c209337630600b7b01932197b7c02ca48ca83231afb9dbee8e5e40a877144e016ac25e60286a7d6a55cd336e84d47392aa99ee14d33bf60919e85df75d667eb35a42111d0ebe469c9c255cf9a5dd4d5858bd3a9bbb6a95dd3e65826e55c4def1eb841f4f10af5868d28064293ba"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x3001}}, {0x47, &(0x7f0000000b00)=@string={0x47, 0x3, "12113d8f89fcfe11a750267782f8137b37442a85b1a70b7d014a5443ad0ad56d9eb7ae8f57d528f0f3b608a51500c7758e95b7d782ecbcf635f4f60bf24970bb0ecbba289e"}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x440a}}, {0x63, &(0x7f0000000bc0)=@string={0x63, 0x3, "0a446ec549a1d6c74f0d64d08f43afc0c78c624d75c301020a520545d5fc046bed2ec800d3501e2e13e701321c3f0c37117cfbe7dc0c834378b34da2c80d9d6eefc3d19f0641ccc9c145ea11140b98bc96bed758d88898c1ec31a521291efadbbb"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0xc07}}]}) (async) syz_usb_connect$uac1(0x6, 0x105, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x200c, 0x1018, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf3, 0x3, 0x1, 0x7, 0x10, 0xa, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xadce, 0x2f}, [@processing_unit={0x7, 0x24, 0x7, 0x1, 0x1, 0x9d}, @selector_unit={0x8, 0x24, 0x5, 0x1, 0x77, "5ad7be"}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x307, 0x5, 0x4, 0x3}, @extension_unit={0xd, 0x24, 0x8, 0x1, 0x7, 0x8, "1274165a2766"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x10, 0xc, 0x97}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0xec, 0x0, 0xfe, 0x6}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x3, 0x1, 0xf9, 0x0, "d2579e91114ff30c"}, @as_header={0x7, 0x24, 0x1, 0xff, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xae, 0x7, 0x4, {0x7, 0x25, 0x1, 0x8, 0xc, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x0, 0x5, 0x10, "43ffe3822c1e"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0x2, 0x7, 0x9, 0x9}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0xe, 0xce6, 0xe, "9570a60659b4"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0x9, 0x1, 0x2}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x101, 0x7f, 0x8a, 0x9}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xc, 0x3, 0x2, 0xb}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x10, 0x4, 0x5, {0x7, 0x25, 0x1, 0xc, 0x6, 0x3}}}}}}}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000880)={0xa, 0x6, 0x250, 0x4, 0x6, 0xb, 0xff, 0x3d}, 0xf4, &(0x7f00000008c0)={0x5, 0xf, 0xf4, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x4, 0x3}, @generic={0xe8, 0x10, 0xa, "c9a410e90b11753e064a8b4d3fea5ff9a5ac3589e1e3115d5b7e8a7c425a550e3fce3dc817aa836b3615f7b02450526f4b0c53fccd41b15ab69aafda75462c855bef5be3d56c94eac69b5a3049f96a78d5d6455bc6447507bc366ddd7877467df64eb17e6070082fbb5f93cbe2016825037f5a893d2a3b24044ad01e576f717de41837a68c5a0213628804a11edb7d5f5edbfdcb8b59142d542d2b809931ad08e1a4daa8c7634051cc313740dcab7689f0fa81d25a1aa28ae87dd29f875d2707a439ec0d1394f70b2e1459f34b82594c9352c9643e8c27cd5575d1b5f742f5b069e8db3921"}]}, 0x6, [{0xe3, &(0x7f00000009c0)=@string={0xe3, 0x3, "6eb1ba0ccef56b9852d11993e93d839fd83ecf28441785f51db35d93066c711507559ffaf3b15998dd35acf16db8ec2295a9d739e083944ade8a63556c3afb51e21bd36ca5014c28a33f3aa39bbf5ce2a745f32221a72a5433b72104a951a70886b9fb42df338fa73b2c890752e3a284e73f0c9c209337630600b7b01932197b7c02ca48ca83231afb9dbee8e5e40a877144e016ac25e60286a7d6a55cd336e84d47392aa99ee14d33bf60919e85df75d667eb35a42111d0ebe469c9c255cf9a5dd4d5858bd3a9bbb6a95dd3e65826e55c4def1eb841f4f10af5868d28064293ba"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x3001}}, {0x47, &(0x7f0000000b00)=@string={0x47, 0x3, "12113d8f89fcfe11a750267782f8137b37442a85b1a70b7d014a5443ad0ad56d9eb7ae8f57d528f0f3b608a51500c7758e95b7d782ecbcf635f4f60bf24970bb0ecbba289e"}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x440a}}, {0x63, &(0x7f0000000bc0)=@string={0x63, 0x3, "0a446ec549a1d6c74f0d64d08f43afc0c78c624d75c301020a520545d5fc046bed2ec800d3501e2e13e701321c3f0c37117cfbe7dc0c834378b34da2c80d9d6eefc3d19f0641ccc9c145ea11140b98bc96bed758d88898c1ec31a521291efadbbb"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0xc07}}]}) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000d00)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xdf, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x7, 0x70, 0x2, "", [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x7, 0x1, 0x1, 0xf4, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x2, 0x2, 0x68}}}}}]}}]}}, &(0x7f0000000dc0)={0xa, &(0x7f0000000d40)={0xa, 0x6, 0x110, 0xfe, 0x9, 0x5, 0x10, 0xf9}, 0xf, &(0x7f0000000d80)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xf, 0xb9, 0x9}]}}) (async) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000d00)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xdf, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x7, 0x70, 0x2, "", [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x7, 0x1, 0x1, 0xf4, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x2, 0x2, 0x68}}}}}]}}]}}, &(0x7f0000000dc0)={0xa, &(0x7f0000000d40)={0xa, 0x6, 0x110, 0xfe, 0x9, 0x5, 0x10, 0xf9}, 0xf, &(0x7f0000000d80)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xf, 0xb9, 0x9}]}}) syz_usb_control_io$uac2(0xffffffffffffffff, &(0x7f0000000f40)={0x14, &(0x7f0000000e00)={0x20, 0x11, 0xcc, {0xcc, 0x21, "7fa3432cfef045ebd6134cc744943988b0213e671bf6da8d651c20ad5f3f0f80f9bf03999b0a7f8ad617a84ca93f7e4f07e99eb19143fedad4c0642c6b48bde87adc8200a0e4b8f78b0cab9af0cd028304ff08c959d652f2154135f1ada6a72dfabdc74fcb6cf2f742df6d6e4ee073a3a0743fb0dc1de5d69ff37fc5da0f977199ce5d37a974623a083a232505db8d7dc85b23a82454dbd8645ff1a02932f2b68ca18f171b226010f9a8e7c19c73fdfaa7c09cd0a5fb63613c089dcf26817beda02269fb6a81dd5a3bc1"}}, &(0x7f0000000f00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x437}}}, &(0x7f0000001200)={0x44, &(0x7f0000000f80)={0x20, 0x17, 0x9b, "d290cb2f6fdbece9d6107242dbc32c38d9fc7d711cd8b287380b81308bfc55b5737d582f00a0dc099d44445b22505d818099f7890e38fb0381dd01e10c0742d337dea943bfecf98fb9d9842fe7e7fd4affafd2520404725ee5ac555125240c1c39832d0fcf7601ff060700dcdf136a714145c154680b4b007435d6269ff4adcd0d0c0eba157b04b035e2d6358ef4829475b4459ce98199eed2aebf"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000010c0)={0x20, 0x81, 0x2, "a67d"}, &(0x7f0000001100)={0x20, 0x82, 0x1, "e6"}, &(0x7f0000001140)={0x20, 0x83, 0x3, "547a1f"}, &(0x7f0000001180)={0x20, 0x84, 0x4, "b2ec0aeb"}, &(0x7f00000011c0)={0x20, 0x85, 0x3, "00d8b9"}}) r1 = syz_usb_connect$cdc_ecm(0x0, 0x6d, &(0x7f0000001280)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5b, 0x1, 0x1, 0xe, 0x80, 0xe5, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x1, {{0x9, 0x24, 0x6, 0x0, 0x0, "fc7e060d"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x1ff, 0x9, 0x2, 0xe}, [@mbim_extended={0x8, 0x24, 0x1c, 0xd, 0x2, 0xe7}, @obex={0x5, 0x24, 0x15, 0x7}, @ncm={0x6, 0x24, 0x1a, 0x4, 0x13}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x7, 0x40}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0xa, 0x7f, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x8, 0xc, 0x4}}}}}]}}]}}, &(0x7f00000016c0)={0xa, &(0x7f0000001300)={0xa, 0x6, 0x300, 0x8, 0xff, 0x7, 0x97, 0x4}, 0x15, &(0x7f0000001340)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x37, 0xf000, 0x9, [0x3f30]}]}, 0x7, [{0x92, &(0x7f0000001380)=@string={0x92, 0x3, "cd1730652affd41825aa8f36ca943c14baac501adef5c576fbb8a22f4821d3e2e6784914e254c39c4c0b5d13f7bbea09e8b89156e2abe065d758e3593d924bee76085f05267b2a64398fdcd0d9e684de7d21d7a2d6437fdce7be29e674f8bbb4490a659a3bbb63c0b687ac4edf03111c762de9bb62e017fd3165b23f8d8dc3e156c9c203a74c5efdf82be4b71a525ab4"}}, {0xf3, &(0x7f0000001440)=@string={0xf3, 0x3, "8e3cff9c98ded39d94988a18474118f2b4396f20b0d87d1df20c50d40ff22fda538653727649b20912e10151c4aeaafb756c071b2cc2c26c00e8cb62086c5a51672ad2b3644112791a558f395d17001b0b5308c58f7451fe0e524770450a7eaa8bafa6ebe23e6e6bf8dbfe799b3672df3b56f1e49b12d29d140e65354e65a3558b100302aa72fe0a56978e122f6d985a065c2bfefbfb905be76404ae56b8a2cba5d7c74ec9e2a8bd73e13916e45f20d16efebadb5b94acb7ca288ac22b5c6d84caa82f3b261222c7988a6628f374dac78cc0c16f23f35f26657b06d09d6c4c902be651e27c3a664c1687dbd004e54ef828"}}, {0x4, &(0x7f0000001540)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000001580)=@lang_id={0x4, 0x3, 0xc0c}}, {0x4, &(0x7f00000015c0)=@lang_id={0x4, 0x3, 0x400a}}, {0x47, &(0x7f0000001600)=@string={0x47, 0x3, "b75e0860bb1b7440c94deac80b96ed7eb32a7cf9c86f7c331bf1276d82e424c75d23cb9658ff103ae20628d818543a4807dd24b894e8b69a87cb0141e6f50c03ff43010b28"}}, {0x4, &(0x7f0000001680)=@lang_id={0x4, 0x3, 0x1007}}]}) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000017c0)={0x14, &(0x7f0000001740)={0x0, 0x31, 0x10, {0x10, 0xe, "544e5a9e83bf6ece9509dd0ab839"}}, &(0x7f0000001780)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001900)={0x1c, &(0x7f0000001800)={0x40, 0x17, 0x6c, "fd719ec2aed354a4d79212bb626f17f5b18c625be6f9b4f0ac194253265a1e7f7457cb1e56bfdce53a7e05326d75d3d99e0cc0bdfcdc7469d3b34194e93ebdaf859f43f55f668d6c76c692b26759f958da5bc197839ec055e5b649ec5cd49f20d4448eb8bc5237bc27c523a8"}, &(0x7f0000001880)={0x0, 0xa, 0x1, 0x81}, &(0x7f00000018c0)={0x0, 0x8, 0x1, 0x5}}) r2 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000001940)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x5ac, 0x224, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0x80, 0x1a, "", [{{0x9, 0x4, 0x0, 0x18, 0x2, 0x3, 0x1, 0x3, 0xda, {0x9, 0x21, 0x7, 0x1, 0x1, {0x22, 0xec4}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x4, 0x4, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x0, 0x58, 0x3b}}]}}}]}}]}}, &(0x7f0000001b40)={0xa, &(0x7f0000001980)={0xa, 0x6, 0x200, 0x1, 0xfd, 0x1, 0x40, 0x4}, 0x44, &(0x7f00000019c0)={0x5, 0xf, 0x44, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0xff, "7573d7725f856b5a8c7d1385b5e518e4"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x9, 0xfa, 0x1}, @wireless={0xb, 0x10, 0x1, 0x979e1d6487761678, 0x80, 0x0, 0x1, 0x101, 0x74}, @wireless={0xb, 0x10, 0x1, 0x2, 0xd0, 0x7f, 0x3, 0x3, 0x2}, @wireless={0xb, 0x10, 0x1, 0x8, 0x53, 0x9, 0x7, 0x9c1}]}, 0x4, [{0x4, &(0x7f0000001a40)=@lang_id={0x4, 0x3, 0x415}}, {0x4, &(0x7f0000001a80)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4, &(0x7f0000001ac0)=@lang_id={0x4, 0x3, 0x401}}, {0x4, &(0x7f0000001b00)=@lang_id={0x4, 0x3, 0x4001}}]}) syz_usb_control_io$hid(r2, &(0x7f0000001d00)={0x24, &(0x7f0000001bc0)={0x0, 0xb, 0x41, {0x41, 0x1, "3560eb20c0f324c02c097b9ac6a7090384d9892475d90be953093bb9eec469a62784a96a6ac3ff21af3451e025e20b6516b344a5d9c321dcc726cdfd082bc8"}}, &(0x7f0000001c40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c09}}, &(0x7f0000001c80)={0x0, 0x22, 0xc, {[@main=@item_4={0x3, 0x0, 0xc, "a7d6b943"}, @global=@item_012={0x0, 0x1, 0xb}, @local=@item_012={0x2, 0x2, 0x7, "21d9"}, @global=@item_012={0x2, 0x1, 0x8, "f9a2"}]}}, &(0x7f0000001cc0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2799, 0x3a, 0x1, {0x22, 0xb60}}}}, &(0x7f0000001f00)={0x2c, &(0x7f0000001d40)={0x40, 0x30, 0x54, "bcca5b51bc7f246a3115778d379ba02daf18f8d32ceab89b0bcd3c31f4f425ceb989225ceb444aaec9e49ca8b3b8f5a8cc17b6fa64145c88c339c2b6a8e668f4850b17799f908c86d0037d9b8fcbf55331f76d3f"}, &(0x7f0000001dc0)={0x0, 0xa, 0x1, 0x24}, &(0x7f0000001e00)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000001e40)={0x20, 0x1, 0x43, "37b20081800c61bdf3a2c6a0dbd59fec309f7b72888cb5b0795c5ce74881c4bb4adba39688bfa7b47798fc40e7d3bf8404aaa90d735c502b74803bb6e5724978a42423"}, &(0x7f0000001ec0)={0x20, 0x3, 0x1, 0x9}}) init_module(&(0x7f0000001f40)={{0x7f, 0x45, 0x4c, 0x46, 0x10, 0x2, 0x6, 0x40, 0xc78, 0x2, 0x6, 0x6, 0xbd, 0x40, 0x28c, 0x3ff, 0x0, 0x38, 0x1, 0x2, 0xffff, 0x100}, [{0x0, 0x2, 0x2, 0x4, 0x8, 0x6, 0x1ff, 0x1681}], "6ea283da5ca9d0890a0e1feb41da7df65196957c88885bd9bea1e719984d9126539ea0385d6b1d5315c7d81135e435b1c94923027982b81dbab8664eda6c9b5984385f1f2961f81f37931eccdd299b16de2f06c1b30a1d19076d6ae7b5912b271fa6d89cdf3e50a005ef54d040c9db718533c2a6610c2123ef9d2aa6a41d1976bcd76d99bf6717eaeeb4cff64566b877556066aefa3002b98143186105b69f3e892118bc43e148920395a11f2f2eafb150905739a058478ba1269c31e6c763e127525f51bb246e6220b131", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x943, &(0x7f00000028c0)='a{\xf0\x00') (async) init_module(&(0x7f0000001f40)={{0x7f, 0x45, 0x4c, 0x46, 0x10, 0x2, 0x6, 0x40, 0xc78, 0x2, 0x6, 0x6, 0xbd, 0x40, 0x28c, 0x3ff, 0x0, 0x38, 0x1, 0x2, 0xffff, 0x100}, [{0x0, 0x2, 0x2, 0x4, 0x8, 0x6, 0x1ff, 0x1681}], "6ea283da5ca9d0890a0e1feb41da7df65196957c88885bd9bea1e719984d9126539ea0385d6b1d5315c7d81135e435b1c94923027982b81dbab8664eda6c9b5984385f1f2961f81f37931eccdd299b16de2f06c1b30a1d19076d6ae7b5912b271fa6d89cdf3e50a005ef54d040c9db718533c2a6610c2123ef9d2aa6a41d1976bcd76d99bf6717eaeeb4cff64566b877556066aefa3002b98143186105b69f3e892118bc43e148920395a11f2f2eafb150905739a058478ba1269c31e6c763e127525f51bb246e6220b131", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x943, &(0x7f00000028c0)='a{\xf0\x00') syz_usb_connect$cdc_ecm(0x4, 0x7d, &(0x7f0000002900)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x1, 0x1, 0x3, 0x40, 0x5, "", [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0x80, {{0x6, 0x24, 0x6, 0x0, 0x0, "dc"}, {0x5, 0x24, 0x0, 0x6000}, {0xd, 0x24, 0xf, 0x1, 0x1bc, 0xfc00, 0x8, 0x6}, [@mdlm={0x15, 0x24, 0x12, 0x3}, @ncm={0x6, 0x24, 0x1a, 0x101, 0x9}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0x40, 0xf, 0x7b}, @acm={0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x3, 0xa7}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x5, 0x4d, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x7, 0xff, 0x3}}}}}]}}]}}, &(0x7f0000002b80)={0xa, &(0x7f0000002980)={0xa, 0x6, 0x250, 0x5, 0x80, 0x0, 0x10, 0x54}, 0x2b, &(0x7f00000029c0)={0x5, 0xf, 0x2b, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0xe, 0x5, 0xfffb}, @ssp_cap={0x1c, 0x10, 0xa, 0x4, 0x4, 0x1, 0x8800, 0x3, [0xc000, 0xff618f, 0xc0, 0xf]}]}, 0x6, [{0x9, &(0x7f0000002a00)=@string={0x9, 0x3, "b23cb6d3c4f678"}}, {0x4, &(0x7f0000002a40)=@lang_id={0x4, 0x3, 0x816}}, {0x13, &(0x7f0000002a80)=@string={0x13, 0x3, "a5bfc07c5a249c2bc54081b5a9ed1d6e73"}}, {0x4, &(0x7f0000002ac0)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f0000002b00)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000002b40)=@lang_id={0x4, 0x3, 0xc04}}]}) socket$inet_smc(0x2b, 0x1, 0x0) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r3, &(0x7f0000002c00)={0x2, 0x4e22, @loopback}, 0x10) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000002c40), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r4, &(0x7f0000002c80)={0xe, {0x6, 0xe0, 0x9, 0x6c, "fc5c4e440ba11e1c083ff96b1f3ac5f63e96b152ac7d44198377b7ed454aa199046d064ea87d8ad1a3ca50a567a0d4434c2ad4c28de185eb092150cebd5215e1956141ae9433a03ba5a3d1b0cdfff56200de5bd86dff9ae46f1a5bba12315bfd40fd6d9ae1f53509bd0a53e1"}}, 0x78) shutdown(r3, 0x0) (async) shutdown(r3, 0x0) setsockopt$inet_buf(r3, 0x0, 0x2f, &(0x7f0000002d00)="275da601012037259e513298d503566c197ae9865b09b8775ee1b135f23776618a5ccf1db96ca30677e686684ab58f69030f553f0b11a1ff22b3d9ad1e11b6e762e0525afca03d90775ad4854ae4695fe24a416f448f6e1970f310c05f32d482fbb3ec37c9e9e811b22cea7ea55751f4fb03522e22acae799d0ee45dc5648fdb7ac430e31cf0e62a43d7c389f7da8c958157a30562600de191573443d9599ea9a13897f54c50fb864e215bafa85ef0ee60329633aca7bf6281cb7f78fd4830c7055f", 0xc2) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002e00)={{0x7f, 0x45, 0x4c, 0x46, 0xf, 0x3, 0x0, 0x2, 0x4, 0x3, 0x3e, 0x8, 0x1db, 0x40, 0xcd, 0x60, 0x9, 0x38, 0x2, 0x7, 0xfe01, 0x7fff}, [{0x6, 0x8356, 0x7, 0x9, 0x100000000, 0x2, 0x0, 0xffffffffffffff80}, {0x6474e551, 0x5, 0x2, 0x1000, 0x8, 0xfd2, 0x9, 0x2}], "ce00473c35a1e1b6075784f32611cfc0955865d63dd29bbfddfef82e3197791e1552d58a5600c28b60ebabd391a155059e80b703ac14325307930b8c0f5474f1ee8e82172efcbc7ce981e91ce4d2664ad1ce87fac94776dd6574dfe73badc897d11ce1725c305377d566d1568848c1e222de23d08e6ef7aef2efa928b128ee9cabc0fa8b", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x834) socket$inet_sctp(0x2, 0x5, 0x84) (async) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000003640)={0x0, @in6={{0xa, 0x4e23, 0xa664, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}}, &(0x7f0000003700)=0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000003740)={r6, 0xdd, "89f197845c4019a1fab042132715546ba35c9942f2aca7f1cb79e3f5ce542260296b10067635984c6a7065a6c491e5595d1759ee0d85bd7f3d0b5b71c75f2a9867ba1648e33dbfffb1d2db50a83005773227e453a1001bd7467f59dc85bf6581cbf972f1a3a06c77861b4d6e864973e9426e4ef7e5a58d9cadd39a8a29b83fcdd2d928ecf425570282c345011257724ce1125678213aa2183d94df80234d77a436c6d5f1cf058f8346dd6b8a818c454df991810544ed0297d36cf45b08823cf5e6d89e54a1a6b1864bacb674d3795247d409027e8c50c5fd2a26b55079"}, &(0x7f0000003840)=0xe5) (async) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000003740)={r6, 0xdd, "89f197845c4019a1fab042132715546ba35c9942f2aca7f1cb79e3f5ce542260296b10067635984c6a7065a6c491e5595d1759ee0d85bd7f3d0b5b71c75f2a9867ba1648e33dbfffb1d2db50a83005773227e453a1001bd7467f59dc85bf6581cbf972f1a3a06c77861b4d6e864973e9426e4ef7e5a58d9cadd39a8a29b83fcdd2d928ecf425570282c345011257724ce1125678213aa2183d94df80234d77a436c6d5f1cf058f8346dd6b8a818c454df991810544ed0297d36cf45b08823cf5e6d89e54a1a6b1864bacb674d3795247d409027e8c50c5fd2a26b55079"}, &(0x7f0000003840)=0xe5) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003880)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_usb_connect$midi(0x1, 0xee, &(0x7f00000038c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8214, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdc, 0x1, 0x1, 0x6, 0x50, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x6, 0x1, 0x3, 0x10, 0x4, [@midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x6, 0x3}, @ms_header={0x7, 0x24, 0x1, 0x5, 0x7}, @midi_out_jack={0xd, 0x24, 0x3, 0x1, 0x67, 0x3, [{0x2, 0x7}, {0xe0, 0x7}, {0x2, 0x6}], 0x1}, @midi_out_jack={0x15, 0x24, 0x3, 0x6, 0x5, 0x7, [{0x0, 0x2}, {0xf1, 0x8}, {0x81, 0x4}, {0x0, 0x5}, {0x4, 0x1}, {0x2}, {0xd, 0xa}], 0x4}, @ms_header={0x7, 0x24, 0x1, 0xd, 0x7}, @midi_out_jack={0x11, 0x24, 0x3, 0x1, 0x1, 0x5, [{0x44, 0x5}, {0x6, 0x6}, {0xdb, 0xe}, {0xfd, 0x5}, {0x8, 0x3}], 0x84}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x3, 0x51}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x8, 0x4}, @ms_header={0x7, 0x24, 0x1, 0x4, 0x7}], [{{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x2, 0xff, 0x4, {0x6, 0x25, 0x1, 0x2, "df94"}}}, {{0x9, 0x5, 0xa, 0x8, 0x8, 0x77, 0x6, 0xb2, {0x4}}}, {{0x9, 0x5, 0x80, 0x3, 0x20, 0x7, 0xc, 0x0, {0x7, 0x25, 0x1, 0x3, "b31f73"}}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x2, 0x0, 0x50, {0xf, 0x25, 0x1, 0xb, "774510a95b919879f42b34"}}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0x7, 0x1, 0x2, {0xe, 0x25, 0x1, 0xa, "ee2c2bda452142a01ddb"}}}, {{0x9, 0x5, 0xe, 0x4, 0x200, 0xc, 0x3, 0x91, {0xc, 0x25, 0x1, 0x8, "63a8dd48f3ef715f"}}}]}}}}}]}}, &(0x7f0000003dc0)={0xa, &(0x7f00000039c0)={0xa, 0x6, 0x110, 0x9c, 0x3, 0x0, 0xff, 0x2}, 0x3e, &(0x7f0000003a00)={0x5, 0xf, 0x3e, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0xf, "4125fd23a34fca49440311491202ca58"}, @ss_container_id={0x14, 0x10, 0x4, 0xa, "3862d4835a170d84a52ec0d233a7149d"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x8, 0x4, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0x3, 0x9}]}, 0x8, [{0x4, &(0x7f0000003a40)=@lang_id={0x4}}, {0x4, &(0x7f0000003a80)=@lang_id={0x4, 0x3, 0x41f}}, {0xd0, &(0x7f0000003ac0)=@string={0xd0, 0x3, "215af1a5b88d27238a4b3349dc47e55dda3a51af72a7937fc6c7b05828adddb8e565c46169b95492dae974fd22f2bcff3d3628b6084fc78eb925fe1853364f40dadfe319a0c71df1e1cbb49bda98dfab332c04709bf9368ec22ac73228529acd6ac65d71e52f596ddc37c8780aefea7f962ca88b2501ae686cb0cd8106fd61def4ad612acfdedd4e6e3b4aaadd2c273c5a1cfd35ed2fa948eab532e569eb18b9f1a7f1c0d46d7b045f8c44e19bf5ee111a480fcb0d49691fc21132f1a3928bea35a7c2bdd5effdfdf5bfcc626b50"}}, {0xc2, &(0x7f0000003bc0)=@string={0xc2, 0x3, "0b64d1be50da5482d5d32885d169cbfef93a611f4880fa5708541ade8ed85c812f3147f4b6fb246b8d6d308ef06679023bccc090bd1c7c003b669939cd193f45375181027f9be9058bd8deb2b632fc4756b361cc325c34833c0b40cc3625b3a9701c5ea3972c0304477bc9a40a1ff494ec6e323e21ebefd81d8c37451a5d9a2d2581b3adc5157fe351af1421e84888df8ddc71782806083a718db9ea14c296fa9103a9da9afffe52745d719210511b547ce298f26f3ef6c682a2d7ec8d09cef3"}}, {0x4, &(0x7f0000003cc0)=@lang_id={0x4, 0x3, 0x441}}, {0x4, &(0x7f0000003d00)=@lang_id={0x4, 0x3, 0x1c0e}}, {0x4, &(0x7f0000003d40)=@lang_id={0x4, 0x3, 0x3021}}, {0x4, &(0x7f0000003d80)=@lang_id={0x4, 0x3, 0x1007}}]}) (async) syz_usb_connect$midi(0x1, 0xee, &(0x7f00000038c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8214, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdc, 0x1, 0x1, 0x6, 0x50, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x6, 0x1, 0x3, 0x10, 0x4, [@midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x6, 0x3}, @ms_header={0x7, 0x24, 0x1, 0x5, 0x7}, @midi_out_jack={0xd, 0x24, 0x3, 0x1, 0x67, 0x3, [{0x2, 0x7}, {0xe0, 0x7}, {0x2, 0x6}], 0x1}, @midi_out_jack={0x15, 0x24, 0x3, 0x6, 0x5, 0x7, [{0x0, 0x2}, {0xf1, 0x8}, {0x81, 0x4}, {0x0, 0x5}, {0x4, 0x1}, {0x2}, {0xd, 0xa}], 0x4}, @ms_header={0x7, 0x24, 0x1, 0xd, 0x7}, @midi_out_jack={0x11, 0x24, 0x3, 0x1, 0x1, 0x5, [{0x44, 0x5}, {0x6, 0x6}, {0xdb, 0xe}, {0xfd, 0x5}, {0x8, 0x3}], 0x84}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x3, 0x51}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x8, 0x4}, @ms_header={0x7, 0x24, 0x1, 0x4, 0x7}], [{{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x2, 0xff, 0x4, {0x6, 0x25, 0x1, 0x2, "df94"}}}, {{0x9, 0x5, 0xa, 0x8, 0x8, 0x77, 0x6, 0xb2, {0x4}}}, {{0x9, 0x5, 0x80, 0x3, 0x20, 0x7, 0xc, 0x0, {0x7, 0x25, 0x1, 0x3, "b31f73"}}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x2, 0x0, 0x50, {0xf, 0x25, 0x1, 0xb, "774510a95b919879f42b34"}}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0x7, 0x1, 0x2, {0xe, 0x25, 0x1, 0xa, "ee2c2bda452142a01ddb"}}}, {{0x9, 0x5, 0xe, 0x4, 0x200, 0xc, 0x3, 0x91, {0xc, 0x25, 0x1, 0x8, "63a8dd48f3ef715f"}}}]}}}}}]}}, &(0x7f0000003dc0)={0xa, &(0x7f00000039c0)={0xa, 0x6, 0x110, 0x9c, 0x3, 0x0, 0xff, 0x2}, 0x3e, &(0x7f0000003a00)={0x5, 0xf, 0x3e, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0xf, "4125fd23a34fca49440311491202ca58"}, @ss_container_id={0x14, 0x10, 0x4, 0xa, "3862d4835a170d84a52ec0d233a7149d"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x8, 0x4, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0x3, 0x9}]}, 0x8, [{0x4, &(0x7f0000003a40)=@lang_id={0x4}}, {0x4, &(0x7f0000003a80)=@lang_id={0x4, 0x3, 0x41f}}, {0xd0, &(0x7f0000003ac0)=@string={0xd0, 0x3, "215af1a5b88d27238a4b3349dc47e55dda3a51af72a7937fc6c7b05828adddb8e565c46169b95492dae974fd22f2bcff3d3628b6084fc78eb925fe1853364f40dadfe319a0c71df1e1cbb49bda98dfab332c04709bf9368ec22ac73228529acd6ac65d71e52f596ddc37c8780aefea7f962ca88b2501ae686cb0cd8106fd61def4ad612acfdedd4e6e3b4aaadd2c273c5a1cfd35ed2fa948eab532e569eb18b9f1a7f1c0d46d7b045f8c44e19bf5ee111a480fcb0d49691fc21132f1a3928bea35a7c2bdd5effdfdf5bfcc626b50"}}, {0xc2, &(0x7f0000003bc0)=@string={0xc2, 0x3, "0b64d1be50da5482d5d32885d169cbfef93a611f4880fa5708541ade8ed85c812f3147f4b6fb246b8d6d308ef06679023bccc090bd1c7c003b669939cd193f45375181027f9be9058bd8deb2b632fc4756b361cc325c34833c0b40cc3625b3a9701c5ea3972c0304477bc9a40a1ff494ec6e323e21ebefd81d8c37451a5d9a2d2581b3adc5157fe351af1421e84888df8ddc71782806083a718db9ea14c296fa9103a9da9afffe52745d719210511b547ce298f26f3ef6c682a2d7ec8d09cef3"}}, {0x4, &(0x7f0000003cc0)=@lang_id={0x4, 0x3, 0x441}}, {0x4, &(0x7f0000003d00)=@lang_id={0x4, 0x3, 0x1c0e}}, {0x4, &(0x7f0000003d40)=@lang_id={0x4, 0x3, 0x3021}}, {0x4, &(0x7f0000003d80)=@lang_id={0x4, 0x3, 0x1007}}]}) pivot_root(&(0x7f0000003e40)='./file0\x00', &(0x7f0000003e80)='./file0\x00') (async) pivot_root(&(0x7f0000003e40)='./file0\x00', &(0x7f0000003e80)='./file0\x00') socket$pptp(0x18, 0x1, 0x2) (async) socket$pptp(0x18, 0x1, 0x2) syz_usb_connect$uac3(0x2, 0xd5, &(0x7f0000003ec0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0xd8c, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc3, 0x3, 0x1, 0x1, 0x10, 0x4, {0x8, 0xb, 0x2, 0x1, 0x1, 0x0, 0x30, 0x4a}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x4e, 0x24}, [@source_unit={0xc, 0x24, 0xb, 0xc, 0x0, 0x80000000, 0xbe, 0x4}, @processing_unit={0x15, 0x24, 0x9, 0x1, 0x5, [0x3, 0x3, 0x2, 0x3]}, @mixer_unit={0xa, 0x24, 0x5, 0x3, 0xc, "ed1667744e"}, @feature_unit={0x19, 0x24, 0x7, 0x5, 0x6, [0xe, 0xe, 0x2, 0xb, 0x9]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x4, 0x1, 0x9, {0xa, 0x25, 0x25, 0x87, 0xcb, 0x62}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x7, 0x2, 0xfd, 0x3}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0x2, 0x3, 0x4, 0x6}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x5, 0x6, 0x16, {0xa, 0x25, 0x25, 0x0, 0x9, 0x1}}}}}}}}]}}, &(0x7f0000004200)={0xa, &(0x7f0000003fc0)={0xa, 0x6, 0x200, 0x0, 0x6, 0x6, 0x8, 0x8}, 0x68, &(0x7f0000004000)={0x5, 0xf, 0x68, 0x3, [@generic={0x56, 0x10, 0x4, "28fd720901c0fb0951555dec47a839b6f2b17c42aca93328fd8ca45cbe9952ca003fbb7d01fb04b4201b353ac365a2fc9d5623ba2fa6ba869067b429732115d3a19e4b4ca4f86af0ecb301a34e7272f26ca3ea"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x13, 0x3, 0x0, 0xd9}, @ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f0000004080)=@lang_id={0x4, 0x3, 0x3801}}, {0x4c, &(0x7f00000040c0)=@string={0x4c, 0x3, "bd475d2579897e17a268cccd10c04c5167a5f97051c8f74e9ab0a4255f97e1963d4458243f1ffd8c8a122eae12da8969bc97984aa9144d3197fc035f6b0baefae3e0db4f1398e26616e0"}}, {0x30, &(0x7f0000004140)=@string={0x30, 0x3, "f724c57edf7327307ad56936692016b0cd03a25c7488761bbd1cb48139406011ccef6333ef2eded2c578722f4d11"}}, {0x4, &(0x7f0000004180)=@lang_id={0x4, 0x3, 0x447}}, {0x4, &(0x7f00000041c0)=@lang_id={0x4, 0x3, 0x416}}]}) syz_open_dev$hidraw(&(0x7f0000004280), 0x0, 0x80000) r7 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000004300)={'veth1_virt_wifi\x00', &(0x7f00000042c0)=@ethtool_test={0x1a, 0x9, 0xe, 0x3, [0x1, 0x80, 0x101]}}) syz_usb_connect$uac2(0x0, 0xdf, &(0x7f0000004340)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x8e4, 0x163, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcd, 0x3, 0x1, 0x5, 0x0, 0x4, {0x8, 0xb, 0x0, 0x0, 0x1, 0xa, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x100, 0x4, 0x3b, 0x3}, [@effect_unit={0xb, 0x24, 0x7, 0x1, 0x0, 0x4, [0x1, 0x0]}, @source_unit={0x8, 0x24, 0xa, 0x40, 0x4, 0xf, 0x4, 0x2}, @extension_unit={0xd, 0x24, 0x9, 0x1, 0x0, 0x42, "b8a385ab915d"}, @processing_unit={0xb, 0x24, 0x8, 0x4, 0x2, [0x2, 0x3, 0x1]}, @processing_unit={0x7, 0x24, 0x8, 0x4, 0x2, [0x1]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x6}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x0, 0xa489, 0x6, "e1"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0xaf, 0x0, 0x5, 0x79}, @as_header={0x10, 0x24, 0x1, 0x5, 0x1, 0x3, 0x1002, 0x0, 0x2, 0xff}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x9, 0x2, 0x7f}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xa3, 0x2, 0x6, {0x8, 0x25, 0x1, 0x162bdc65c1fa99eb, 0x3c, 0x51, 0xae02}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x0, 0x75, 0x3, {0x8, 0x25, 0x1, 0x1, 0x14, 0xd, 0x4}}}}}}}}]}}, &(0x7f0000004940)={0xa, &(0x7f0000004440)={0xa, 0x6, 0x200, 0x3c, 0x0, 0xab, 0xff, 0x5}, 0x4f, &(0x7f0000004480)={0x5, 0xf, 0x4f, 0x4, [@wireless={0xb, 0x10, 0x1, 0x4, 0x20, 0x3, 0x1, 0xfbf8, 0x58}, @ssp_cap={0x14, 0x10, 0xa, 0x81, 0x2, 0x8000, 0xf, 0xff12, [0xffc000, 0xff0030]}, @wireless={0xb, 0x10, 0x1, 0x0, 0x40, 0x3, 0x1, 0x800, 0x4}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x0, 0xf, 0x0, [0xf, 0x3fc0, 0x0, 0xc0, 0xc000]}]}, 0x9, [{0x97, &(0x7f0000004500)=@string={0x97, 0x3, "43b3c9789a130bb25a857303c3bac3f4fb007ec33cbc71155ddbab8ce618136035af8a77d6d149675e7ba1ce399bab930395f60abd8fbdd3dadf7ba1ebf28ed20a2afc939ff0e2eba91688285542b09bbfcf8cd8eb2950bd3c74d4901b2caf7c152f22ca21d58d02375ed4bef002da373804ecb725d6f488e5e0a79bf71e15eab9c667fe910d2c437e6591f33048a40106b747c003"}}, {0x67, &(0x7f00000045c0)=@string={0x67, 0x3, "843480a476d1eba9be338b1336204fc0d81f3a89bbbdc77d9c3eebae5dfded0bc05fd5297889cf8b5efbbc341de3d1849569b744b028224e7d172a6ec3bf263cae7eaa906505a07aa98ce7a3212576290d47d24e627ade635bfd23ddae0e92108bf0ddc3ed"}}, {0x46, &(0x7f0000004640)=@string={0x46, 0x3, "2fbc359d29a7ec337bbee156deef4a394bd11ed9cb3fcced9427316dbf38064da94d8ec10f7178ea82a0560133441af387526c47868f8b7717106b5a358f72d9af66ada5"}}, {0x5f, &(0x7f00000046c0)=@string={0x5f, 0x3, "4682fba30cf55e0529d16c48a66818fec55dd0c627788f9b6f3e5b3a93eeff1e4e4b64ef4480a6af1aa71e2c53a135f927d3b78bbc16e916a2b09746f9fc727a91c0bf2def29a8ef1cbc51a8dcf9b267827b1a9eb402c11d2565e63871"}}, {0x4, &(0x7f0000004740)=@lang_id={0x4, 0x3, 0x1007}}, {0xf6, &(0x7f0000004780)=@string={0xf6, 0x3, "cb66bbb4e929d620c1992234964156ac69015c1a097c0abadfdfcbddbc63827a0c843d646fb11bbcd61162cb826a059ef0d1196023bb0e381ac8824512adfe0f0536d59b7282114a42209500d951e0ebd5f3164e165d8baa2e4138c2e3046ed6a20d51f0fb51f69872f7b69663c9426a43301c71448a8365e9d02a45c411214b78409620e4235dbf300a2faee7017a215b3bbcfac6340725ca259ef1401e093782261009ce2ed11b34bec6ae6d858f7210dc2cf1bbaa2bd3c1b958d045ebb54b0c849b36e520d51732af811379bb5777f982069ace21dad1a4bbd74d81c6d478d3758b76c29be8640963cbe92a82c999d1086668"}}, {0x4, &(0x7f0000004880)=@lang_id={0x4, 0x3, 0x457}}, {0x4, &(0x7f00000048c0)=@lang_id={0x4, 0x3, 0x419}}, {0x27, &(0x7f0000004900)=@string={0x27, 0x3, "02bfb503cb1e6304c2241092cd9e1988a71ad9faf9d126204d662ca0f1e63cc2a47429d0ca"}}]}) 2.067901397s ago: executing program 0 (id=3122): r0 = syz_usb_connect$lan78xx(0x5, 0x0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, &(0x7f0000000200)={0x14, 0x0, 0x0}, &(0x7f0000000540)={0x34, &(0x7f0000000340)={0x40, 0x31, 0x1, '!'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000280)={0x34, &(0x7f0000000080)={0x20, 0x11, 0x14, "586861c4acc78150468b9ba80100009921a50b15"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.01568064s ago: executing program 3 (id=3123): r0 = syz_open_dev$I2C(&(0x7f0000000080), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, 0x0) 1.877492086s ago: executing program 3 (id=3124): mknod$loop(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x1) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB], 0x2c}], 0x1}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x41, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x2, 0x5, 0x0, 0x3, 0x2, 0x2, 0xfffffffffffffffd], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.434718756s ago: executing program 3 (id=3125): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r0, 0x4b47, &(0x7f00000000c0)=""/110) 1.390993211s ago: executing program 3 (id=3126): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a1", 0xa}], 0x1}, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000500)={0x1, 0x0, @pic={0xe, 0x1, 0x9, 0x2, 0x7, 0x0, 0x5, 0x9, 0x1, 0x4, 0x8, 0xfc, 0x9, 0x7, 0x9, 0x3}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000340)={0x1, 0x0, [{0x48c, 0x0, 0x80000001}]}) ioctl$KVM_TDX_GET_CPUID(r5, 0xc008aeba, &(0x7f00000001c0)={0x5, 0x0, &(0x7f0000000100)={0x4, 0x0, [{0x80000008, 0x9, 0x4, 0xfff, 0x2, 0x40, 0x81}, {0x40000000, 0x6, 0x1, 0xed10b1f8, 0x5, 0x9f49, 0x45}, {0x40000001, 0x9, 0x3, 0x10001, 0x0, 0x100, 0x92e}, {0x7, 0x0, 0x3, 0x1, 0x10001, 0x7}]}}) 1.003694467s ago: executing program 2 (id=3127): r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) read(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f00000001c0)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000000)=0xf66, 0x4) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) add_key(&(0x7f0000000640)='big_key\x00', &(0x7f0000001000)={'syz', 0x3}, &(0x7f0000001000)='.', 0x1, 0x0) r2 = fanotify_init(0x200, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r2, 0x455, 0x8000001, r3, 0x0) fanotify_mark(r2, 0x41, 0x8000038, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(0xffffffffffffffff, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x6, 0xfffe}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b04000000000000000002000000300004802c0001800b0001006e756d67656e00001c000280080001400000000a080003400000000008000240000000000900010073797a30000000000900060073797a3200000000140000001100010000000000000000000000000a"], 0x84}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa9525000) link(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400000103000000092105000001220500090581030002"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 942.258231ms ago: executing program 0 (id=3128): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004000) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000040)=@gcm_128={{0x303}, "1b2fcb39a2d24a3f", "3176927120162c9891c2feb670bbea88", "2c2af280", "c367b1a8d1546100"}, 0x28) write$binfmt_elf64(r1, &(0x7f0000001280)=ANY=[], 0x4a2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) 817.549109ms ago: executing program 3 (id=3129): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x1, 0xffffffffffffffff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000890}, 0x4000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 606.107064ms ago: executing program 3 (id=3130): r0 = openat$rdma_cm(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_clone3(&(0x7f0000002500)={0x2000100, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, &(0x7f00000024c0)}, 0x58) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000180)={0xffffffffffffffff}, 0x0, {0xa, 0x4e22, 0xbf5b, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000000)={0x11, 0xffffffffffffffec, 0xfa00, {0x0, r1}}, 0x18) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x111000, 0x112, 0x7}, 0x18) r3 = fsopen(&(0x7f0000000640)='udf\x00', 0x0) r4 = fcntl$dupfd(r3, 0x406, r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000240)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100ffffffff00000000010000000c0005006c010000000000000c000200ff7f0000000000001c0007800c00018008000100", @ANYRES32=r7, @ANYBLOB="0c00018008000100", @ANYRES32=r7, @ANYBLOB="3c6a9a3b64cca49a1da72eacc2ec0202baf68464f836a355e0669cba015e9cf265f11c53aa1086ecb8e06316bc0d75e0a93412eb5896c6f2f6b3ff993fa6d51c78a9b65e3c544eb51b"], 0x48}}, 0x20000000) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000200)='7', 0x0) move_mount(r2, &(0x7f0000000100)='./file0\x00', r4, &(0x7f0000000140)='./file0\x00', 0x200) 526.276792ms ago: executing program 1 (id=3131): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001ec0), 0xffffffffffffffff) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc4c85513, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0xee01, 0xee01}}, './file0\x00'}) read$FUSE(0xffffffffffffffff, &(0x7f0000002080)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) (async) ptrace$getregset(0x4204, r5, 0x201, &(0x7f00000001c0)={0x0}) (async) fchown(r1, r3, r4) (async) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)=ANY=[@ANYBLOB="7e059a2c8c00de73fb1648935196eedd33f84a4f0151aed3db60af2bc365bb25f0df3b7955cda127e71fab9aa71d5bc3aeb8ed17d645d37704787f", @ANYRES16=r0, @ANYBLOB="01002bbd7000fddbdf250c00000008000400f9ffffff"], 0x1c}, 0x1, 0x0, 0x0, 0x8840}, 0xc000) (async, rerun: 64) socket$packet(0x11, 0x2, 0x300) (rerun: 64) r6 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r6, &(0x7f0000000080), 0x10) (async) close(r6) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') (async, rerun: 64) r7 = socket(0x10, 0x803, 0x0) (rerun: 64) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r2) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r7, &(0x7f0000000b80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a00)={0x124, r8, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffffeb83}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xc6b8}}]}, 0x124}, 0x1, 0x0, 0x0, 0x20008000}, 0x48000) (async) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000440)=""/86, 0x56}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/99, 0x63}, {&(0x7f00000006c0)=""/73, 0x49}, {&(0x7f0000000880)=""/84, 0x54}, {&(0x7f00000007c0)=""/134, 0x86}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x2}], 0x1, 0x2000, &(0x7f0000000300)={0x77359400}) (async, rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x7c, 0x0, 0x0) (rerun: 64) syz_usb_connect$midi(0x0, 0x39, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x200c, 0x100b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x27, 0x1, 0x1, 0x5, 0x40, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x0, [@midi_out_jack={0x15, 0x24, 0x3, 0x2, 0x0, 0x7, [{0x5, 0x5}, {0x66, 0x7}, {0xfa}, {0x81, 0x59}, {0xc, 0x4}, {0x7, 0x5}, {0xfd, 0x6}], 0x2}]}}}}}]}}, 0x0) (async) r9 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r9, 0x40946400, 0x0) (async) ioctl$COMEDI_DEVCONFIG(r9, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f29, 0x5, 0x3, 0x4, 0x1, 0xc, 0x12, 0x4, 0x81, 0xfffffffc, 0x2, 0xfffffffe, 0x1, 0x3, 0x2, 0x101, 0x8, 0x400009, 0x3, 0x5, 0x99, 0xcaa7, 0x80, 0x0, 0x7, 0x2000e67, 0x3c, 0x8, 0xfffffffe, 0x0, 0xfffffff8]}) (async) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) (async) accept4(r10, 0x0, 0x0, 0x0) 426.29959ms ago: executing program 0 (id=3132): r0 = syz_open_dev$I2C(&(0x7f0000000080), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, 0x0) 353.820307ms ago: executing program 0 (id=3133): mknod$loop(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x1) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB], 0x2c}], 0x1}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x41, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x2, 0x5, 0x0, 0x3, 0x2, 0x2, 0xfffffffffffffffd], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 61.91977ms ago: executing program 0 (id=3134): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r0, 0x4b47, &(0x7f00000000c0)=""/110) 0s ago: executing program 0 (id=3135): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101e01, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000002c0)=0x7e) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f0000000380)=0x1) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x1, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) getsockopt$inet_tcp_buf(r4, 0x6, 0xb, 0x0, &(0x7f00000001c0)) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002c00070100000000ffdbdf25027c000008000180040006030000000000000080"], 0x24}, 0x1, 0x0, 0x0, 0x8044}, 0xc050) syz_usb_control_io(r3, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000540)=0xff) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)=0x12) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x1) r6 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r6, 0xc0106426, &(0x7f0000000280)={0x5, &(0x7f0000000240)=[{}, {}, {}, {}, {}]}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x7) kernel console output (not intermixed with test programs): .669063][T14704] proc_fail_nth_read+0x1be/0x230 [ 594.669077][T14704] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 594.669092][T14704] ? rw_verify_area+0x2ac/0x4e0 [ 594.669106][T14704] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 594.669120][T14704] vfs_read+0x212/0xa80 [ 594.669138][T14704] ? __pfx_vfs_read+0x10/0x10 [ 594.669153][T14704] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 594.669169][T14704] ? lockdep_hardirqs_on+0x7a/0x110 [ 594.669183][T14704] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 594.669197][T14704] ? mutex_lock_nested+0x152/0x1d0 [ 594.669207][T14704] ? fdget_pos+0x252/0x320 [ 594.669224][T14704] ksys_read+0x156/0x270 [ 594.669240][T14704] ? __pfx_ksys_read+0x10/0x10 [ 594.669258][T14704] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.669270][T14704] do_syscall_64+0x15f/0xf80 [ 594.669284][T14704] ? trace_irq_disable+0x3b/0x140 [ 594.669297][T14704] ? clear_bhb_loop+0x40/0x90 [ 594.669310][T14704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.669321][T14704] RIP: 0033:0x7efd7221d04e [ 594.669333][T14704] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 594.669342][T14704] RSP: 002b:00007efd704adfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 594.669358][T14704] RAX: ffffffffffffffda RBX: 00007efd704ae6c0 RCX: 00007efd7221d04e [ 594.669366][T14704] RDX: 000000000000000f RSI: 00007efd704ae0a0 RDI: 000000000000000c [ 594.669373][T14704] RBP: 00007efd704ae090 R08: 0000000000000000 R09: 0000000000000000 [ 594.669380][T14704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 594.669386][T14704] R13: 00007efd724d6038 R14: 00007efd724d5fa0 R15: 00007fff10927f38 [ 594.669403][T14704] [ 595.239986][T11695] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 595.383520][ T5887] gspca_sunplus: reg_r err -71 [ 595.383584][ T5887] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 595.404222][ T5887] usb 2-1: USB disconnect, device number 24 [ 595.419481][T11695] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 595.419512][T11695] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.419540][T11695] usb 1-1: Product: syz [ 595.419554][T11695] usb 1-1: Manufacturer: syz [ 595.419569][T11695] usb 1-1: SerialNumber: syz [ 595.639908][ T5830] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 595.793961][ T5830] usb 3-1: unable to get BOS descriptor or descriptor too short [ 595.795178][ T5830] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 178, changing to 7 [ 595.795224][ T5830] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 595.797549][ T5830] usb 3-1: New USB device found, idVendor=0b05, idProduct=17a0, bcdDevice= 0.40 [ 595.797576][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.797596][ T5830] usb 3-1: Product: syz [ 595.797611][ T5830] usb 3-1: Manufacturer: syz [ 595.797626][ T5830] usb 3-1: SerialNumber: syz [ 595.875082][T11695] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 595.875346][T11695] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 595.876041][T11695] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 595.876093][T11695] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 595.877294][T11695] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 595.914647][T11695] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 596.076261][T14721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2809'. [ 596.222381][ T5830] usb 3-1: unit 15 not found! [ 596.395815][ T5830] usb 3-1: USB disconnect, device number 76 [ 596.506839][ T5979] udevd[5979]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 596.793706][T14787] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2814'. [ 597.462023][ T38] audit: type=1326 audit(1776219505.251:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14823 comm="syz.1.2822" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f518419c819 code=0x0 [ 597.594718][T14826] mkiss: ax0: crc mode is auto. [ 597.776413][T14833] tmpfs: Bad value for 'mpol' [ 598.049462][ T1916] usb 1-1: USB disconnect, device number 4 [ 598.567328][ T5984] usb 4-1: new full-speed USB device number 88 using dummy_hcd [ 598.712780][ T5984] usb 4-1: unable to get BOS descriptor or descriptor too short [ 598.713391][ T5984] usb 4-1: not running at top speed; connect to a high speed hub [ 598.714475][ T5984] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 598.714564][ T5984] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 598.714580][ T5984] usb 4-1: config 1 interface 1 has no altsetting 0 [ 598.717213][ T5984] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 598.717246][ T5984] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.717267][ T5984] usb 4-1: Product: syz [ 598.717280][ T5984] usb 4-1: Manufacturer: syz [ 598.717288][ T5984] usb 4-1: SerialNumber: syz [ 599.004263][ T5984] snd-ua101 4-1:1.1: invalid format type [ 599.004284][ T5984] snd-ua101 4-1:1.0: invalid num_altsetting [ 599.004318][ T5984] usb 4-1: selecting invalid altsetting 0 [ 599.008493][ T5984] usb 4-1: selecting invalid altsetting 0 [ 599.008540][ T5984] usbtest 4-1:1.1: probe with driver usbtest failed with error -22 [ 599.011431][ T5984] usb 4-1: selecting invalid altsetting 0 [ 599.011483][ T5984] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 599.011912][ T5984] usb 4-1: selecting invalid altsetting 0 [ 599.011940][ T5984] snd-ua101 4-1:1.1: probe with driver snd-ua101 failed with error -22 [ 599.023377][ T5984] usb 4-1: USB disconnect, device number 88 [ 599.838209][ T5984] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 599.910259][ T5830] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 600.012404][ T5984] usb 3-1: Using ep0 maxpacket: 16 [ 600.015710][ T5984] usb 3-1: unable to get BOS descriptor or descriptor too short [ 600.022525][ T5984] usb 3-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=d4.05 [ 600.022554][ T5984] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.022574][ T5984] usb 3-1: Product: syz [ 600.022588][ T5984] usb 3-1: Manufacturer: syz [ 600.022598][ T5984] usb 3-1: SerialNumber: syz [ 600.086840][ T5830] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 600.086871][ T5830] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.086891][ T5830] usb 4-1: Product: syz [ 600.086906][ T5830] usb 4-1: Manufacturer: syz [ 600.086921][ T5830] usb 4-1: SerialNumber: syz [ 600.290631][ T5984] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 600.293545][ T5984] gspca_vc032x: reg_w err -71 [ 600.293573][ T5984] gspca_vc032x: I2c Bus Busy Wait 00 [ 600.293580][ T5984] gspca_vc032x: I2c Bus Busy Wait 00 [ 600.293589][ T5984] gspca_vc032x: I2c Bus Busy Wait 00 [ 600.293598][ T5984] gspca_vc032x: I2c Bus Busy Wait 00 [ 600.293607][ T5984] gspca_vc032x: I2c Bus Busy Wait 00 [ 600.293616][ T5984] gspca_vc032x: I2c Bus Busy Wait 00 [ 600.293625][ T5984] gspca_vc032x: I2c Bus Busy Wait 00 [ 600.293634][ T5984] gspca_vc032x: I2c Bus Busy Wait 00 [ 600.293643][ T5984] gspca_vc032x: I2c Bus Busy Wait 00 [ 600.293653][ T5984] gspca_vc032x: I2c Bus Busy Wait 00 [ 600.293662][ T5984] gspca_vc032x: I2c Bus Busy Wait 00 [ 600.293670][ T5984] gspca_vc032x: I2c Bus Busy Wait 00 [ 600.293680][ T5984] gspca_vc032x: I2c Bus Busy Wait 00 [ 600.293689][ T5984] gspca_vc032x: I2c Bus Busy Wait 00 [ 600.293698][ T5984] gspca_vc032x: I2c Bus Busy Wait 00 [ 600.293706][ T5984] gspca_vc032x: I2c Bus Busy Wait 00 [ 600.293711][ T5984] gspca_vc032x: I2c Bus Busy Wait 00 [ 600.293716][ T5984] gspca_vc032x: I2c Bus Busy Wait 00 [ 600.293721][ T5984] gspca_vc032x: I2c Bus Busy Wait 00 [ 600.293725][ T5984] gspca_vc032x: Unknown sensor... [ 600.293799][ T5984] vc032x 3-1:12.0: probe with driver vc032x failed with error -22 [ 600.361060][ T5984] usb 3-1: USB disconnect, device number 77 [ 600.528500][ T5830] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 600.528552][ T5830] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 600.529360][ T5830] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 600.529409][ T5830] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 600.566763][ T5830] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 600.603287][ T5830] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 600.775908][T14962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.776308][T14962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.854112][T14972] FAULT_INJECTION: forcing a failure. [ 600.854112][T14972] name failslab, interval 1, probability 0, space 0, times 0 [ 600.854148][T14972] CPU: 1 UID: 0 PID: 14972 Comm: syz.2.2843 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 600.854175][T14972] Tainted: [L]=SOFTLOCKUP [ 600.854183][T14972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 600.854195][T14972] Call Trace: [ 600.854204][T14972] [ 600.854213][T14972] dump_stack_lvl+0xe8/0x150 [ 600.854241][T14972] should_fail_ex+0x46b/0x600 [ 600.854268][T14972] should_failslab+0xa8/0x100 [ 600.854298][T14972] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 600.854324][T14972] ? __alloc_skb+0x1d0/0x7d0 [ 600.854351][T14972] ? lockdep_hardirqs_on+0x7a/0x110 [ 600.854382][T14972] __alloc_skb+0x1d0/0x7d0 [ 600.854419][T14972] netlink_sendmsg+0x5d4/0xb40 [ 600.854457][T14972] ? __pfx_netlink_sendmsg+0x10/0x10 [ 600.854489][T14972] ? aa_sock_msg_perm+0x122/0x200 [ 600.854513][T14972] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 600.854535][T14972] ____sys_sendmsg+0x94c/0x9c0 [ 600.854561][T14972] ? __pfx_____sys_sendmsg+0x10/0x10 [ 600.854590][T14972] ? import_iovec+0x73/0xa0 [ 600.854617][T14972] ___sys_sendmsg+0x2a5/0x360 [ 600.854636][T14972] ? __lock_acquire+0x6b5/0x2cf0 [ 600.854665][T14972] ? __pfx____sys_sendmsg+0x10/0x10 [ 600.854720][T14972] ? __fget_files+0x2a/0x420 [ 600.854742][T14972] ? __fget_files+0x3a6/0x420 [ 600.854781][T14972] __x64_sys_sendmsg+0x1c3/0x2a0 [ 600.854803][T14972] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 600.854832][T14972] ? __pfx_ksys_write+0x10/0x10 [ 600.854868][T14972] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.854890][T14972] do_syscall_64+0x15f/0xf80 [ 600.854914][T14972] ? trace_irq_disable+0x3b/0x140 [ 600.854936][T14972] ? clear_bhb_loop+0x40/0x90 [ 600.854962][T14972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.854982][T14972] RIP: 0033:0x7efd7225c819 [ 600.855000][T14972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 600.855017][T14972] RSP: 002b:00007efd704ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 600.855038][T14972] RAX: ffffffffffffffda RBX: 00007efd724d5fa0 RCX: 00007efd7225c819 [ 600.855053][T14972] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000004 [ 600.855067][T14972] RBP: 00007efd704ae090 R08: 0000000000000000 R09: 0000000000000000 [ 600.855081][T14972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 600.855093][T14972] R13: 00007efd724d6038 R14: 00007efd724d5fa0 R15: 00007fff10927f38 [ 600.855124][T14972] [ 601.130166][ T5984] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 601.271813][ T5984] usb 1-1: device descriptor read/64, error -71 [ 601.430071][ T1916] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 601.519937][ T5984] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 601.529913][ T5830] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 601.602393][ T1916] usb 2-1: Using ep0 maxpacket: 8 [ 601.609119][ T1916] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 601.609173][ T1916] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 601.609197][ T1916] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 601.609221][ T1916] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 601.609245][ T1916] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 601.609289][ T1916] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 601.609306][ T1916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.658016][ T5984] usb 1-1: device descriptor read/64, error -71 [ 601.700032][ T5830] usb 3-1: Using ep0 maxpacket: 8 [ 601.702996][ T5830] usb 3-1: config 7 has an invalid interface number: 184 but max is 0 [ 601.703024][ T5830] usb 3-1: config 7 has no interface number 0 [ 601.703056][ T5830] usb 3-1: config 7 interface 184 has no altsetting 0 [ 601.705451][ T5830] usb 3-1: New USB device found, idVendor=12d1, idProduct=2f7b, bcdDevice=de.da [ 601.705479][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.705538][ T5830] usb 3-1: Product: syz [ 601.705547][ T5830] usb 3-1: Manufacturer: syz [ 601.705555][ T5830] usb 3-1: SerialNumber: syz [ 601.775427][ T5984] usb usb1-port1: attempt power cycle [ 601.862055][ T1916] usb 2-1: usb_control_msg returned -32 [ 601.862211][ T1916] usbtmc 2-1:16.0: can't read capabilities [ 601.937499][ T5830] huawei_cdc_ncm 3-1:7.184: CDC Union missing and no IAD found [ 601.937529][ T5830] huawei_cdc_ncm 3-1:7.184: bind() failure [ 601.964159][ T5830] usb 3-1: USB disconnect, device number 78 [ 602.110136][ T5984] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 602.130795][ T5984] usb 1-1: device descriptor read/8, error -71 [ 602.369962][ T5984] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 602.392060][ T5984] usb 1-1: device descriptor read/8, error -71 [ 602.498239][ T38] audit: type=1326 audit(1776219510.291:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15014 comm="syz.2.2849" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd7225c819 code=0x0 [ 602.500509][ T5984] usb usb1-port1: unable to enumerate USB device [ 602.596735][ T5984] usb 4-1: USB disconnect, device number 89 [ 602.634417][T15016] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 602.736606][T15020] mkiss: ax0: crc mode is auto. [ 602.890544][T15040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2851'. [ 602.911234][ T5984] usb 2-1: USB disconnect, device number 25 [ 604.420067][ T5984] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 604.574039][ T5984] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 604.574070][ T5984] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.574081][ T5984] usb 2-1: Product: syz [ 604.574089][ T5984] usb 2-1: Manufacturer: syz [ 604.574097][ T5984] usb 2-1: SerialNumber: syz [ 605.023115][ T5984] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 605.023162][ T5984] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 605.023684][ T5984] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 605.023728][ T5984] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 605.024273][ T5984] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 605.055613][ T5984] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 605.605782][T15092] netlink: 'syz.3.2860': attribute type 1 has an invalid length. [ 605.605805][T15092] netlink: 276 bytes leftover after parsing attributes in process `syz.3.2860'. [ 605.698551][T15102] netlink: 'syz.2.2861': attribute type 2 has an invalid length. [ 605.870083][ T1916] usb 4-1: new full-speed USB device number 90 using dummy_hcd [ 606.043687][ T1916] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 606.043716][ T1916] usb 4-1: config 179 has no interface number 0 [ 606.043758][ T1916] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 606.043782][ T1916] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 606.043797][ T1916] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 64 [ 606.043812][ T1916] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 606.043836][ T1916] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 606.043848][ T1916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.052842][T15092] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 606.052962][T15092] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 606.167251][ T5984] IPVS: starting estimator thread 0... [ 606.167902][T15118] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 606.276786][T15122] IPVS: using max 12 ests per chain, 28800 per kthread [ 606.299532][ T1916] usb 4-1: USB disconnect, device number 90 [ 606.299608][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 606.299672][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 606.389488][T15136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.399663][T15136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.492723][T15145] tmpfs: Bad value for 'mpol' [ 606.536870][ T38] audit: type=1326 audit(1776219514.331:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15147 comm="syz.2.2869" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd7225c819 code=0x0 [ 606.610001][ T5984] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 606.651221][T15149] mkiss: ax0: crc mode is auto. [ 606.740210][ T5984] usb 1-1: device descriptor read/64, error -71 [ 606.980076][ T5984] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 607.049181][T15164] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 15164 comm: syz.3.2872) [ 607.068404][ T38] audit: type=1800 audit(1776219514.851:234): pid=15164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2872" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=83477 res=0 errno=0 [ 607.110510][ T5984] usb 1-1: device descriptor read/64, error -71 [ 607.201875][ T5865] usb 2-1: USB disconnect, device number 26 [ 607.220537][ T5984] usb usb1-port1: attempt power cycle [ 607.300032][ T5887] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 607.453897][ T5887] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 607.453951][ T5887] usb 4-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 607.454060][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.458638][ T5887] usb 4-1: config 0 descriptor?? [ 607.481684][ T5887] ttusbir 4-1:0.0: probe with driver ttusbir failed with error -12 [ 607.560607][ T5984] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 607.583203][ T5984] usb 1-1: device descriptor read/8, error -71 [ 607.668290][ T5887] usb 4-1: USB disconnect, device number 91 [ 607.830021][ T5984] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 607.851314][ T5984] usb 1-1: device descriptor read/8, error -71 [ 607.960278][ T5984] usb usb1-port1: unable to enumerate USB device [ 608.569998][ T5887] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 608.720054][ T5887] usb 4-1: Using ep0 maxpacket: 32 [ 608.722602][ T5887] usb 4-1: config 0 has an invalid interface number: 6 but max is 0 [ 608.722627][ T5887] usb 4-1: config 0 has no interface number 0 [ 608.722664][ T5887] usb 4-1: config 0 interface 6 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 608.722680][ T5887] usb 4-1: config 0 interface 6 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 608.722692][ T5887] usb 4-1: config 0 interface 6 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 608.722707][ T5887] usb 4-1: config 0 interface 6 has no altsetting 0 [ 608.722726][ T5887] usb 4-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 608.722739][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.726447][ T5887] usb 4-1: config 0 descriptor?? [ 608.930860][T15194] netlink: 'syz.3.2877': attribute type 21 has an invalid length. [ 608.930925][T15194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2877'. [ 609.142481][ T5887] uclogic 0003:28BD:0933.0010: interface is invalid, ignoring [ 609.334600][ T5830] usb 4-1: USB disconnect, device number 92 [ 609.738171][T15235] FAULT_INJECTION: forcing a failure. [ 609.738171][T15235] name failslab, interval 1, probability 0, space 0, times 0 [ 609.738195][T15235] CPU: 1 UID: 0 PID: 15235 Comm: syz.2.2882 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 609.738211][T15235] Tainted: [L]=SOFTLOCKUP [ 609.738215][T15235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 609.738222][T15235] Call Trace: [ 609.738227][T15235] [ 609.738233][T15235] dump_stack_lvl+0xe8/0x150 [ 609.738250][T15235] should_fail_ex+0x46b/0x600 [ 609.738265][T15235] should_failslab+0xa8/0x100 [ 609.738283][T15235] kmem_cache_alloc_noprof+0x87/0x680 [ 609.738297][T15235] ? __netlink_lookup+0xc6/0x8b0 [ 609.738307][T15235] ? skb_clone+0x212/0x3a0 [ 609.738320][T15235] skb_clone+0x212/0x3a0 [ 609.738334][T15235] __netlink_deliver_tap+0x404/0x850 [ 609.738356][T15235] ? netlink_deliver_tap+0x2e/0x1b0 [ 609.738373][T15235] netlink_deliver_tap+0x19c/0x1b0 [ 609.738389][T15235] netlink_unicast+0x754/0x920 [ 609.738409][T15235] netlink_sendmsg+0x813/0xb40 [ 609.738429][T15235] ? __pfx_netlink_sendmsg+0x10/0x10 [ 609.738445][T15235] ? aa_sock_msg_perm+0x122/0x200 [ 609.738459][T15235] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 609.738471][T15235] ____sys_sendmsg+0x94c/0x9c0 [ 609.738486][T15235] ? __pfx_____sys_sendmsg+0x10/0x10 [ 609.738501][T15235] ? import_iovec+0x73/0xa0 [ 609.738516][T15235] ___sys_sendmsg+0x2a5/0x360 [ 609.738527][T15235] ? __lock_acquire+0x6b5/0x2cf0 [ 609.738543][T15235] ? __pfx____sys_sendmsg+0x10/0x10 [ 609.738570][T15235] ? __fget_files+0x2a/0x420 [ 609.738583][T15235] ? __fget_files+0x3a6/0x420 [ 609.738600][T15235] __x64_sys_sendmsg+0x1c3/0x2a0 [ 609.738612][T15235] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 609.738628][T15235] ? __pfx_ksys_write+0x10/0x10 [ 609.738647][T15235] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.738659][T15235] do_syscall_64+0x15f/0xf80 [ 609.738673][T15235] ? trace_irq_disable+0x3b/0x140 [ 609.738686][T15235] ? clear_bhb_loop+0x40/0x90 [ 609.738699][T15235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.738710][T15235] RIP: 0033:0x7efd7225c819 [ 609.738720][T15235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 609.738730][T15235] RSP: 002b:00007efd704ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 609.738742][T15235] RAX: ffffffffffffffda RBX: 00007efd724d5fa0 RCX: 00007efd7225c819 [ 609.738750][T15235] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 609.738757][T15235] RBP: 00007efd704ae090 R08: 0000000000000000 R09: 0000000000000000 [ 609.738764][T15235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 609.738770][T15235] R13: 00007efd724d6038 R14: 00007efd724d5fa0 R15: 00007fff10927f38 [ 609.738787][T15235] [ 610.030047][ T5984] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 610.113629][T15249] FAULT_INJECTION: forcing a failure. [ 610.113629][T15249] name failslab, interval 1, probability 0, space 0, times 0 [ 610.113653][T15249] CPU: 1 UID: 0 PID: 15249 Comm: syz.3.2886 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 610.113669][T15249] Tainted: [L]=SOFTLOCKUP [ 610.113673][T15249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 610.113680][T15249] Call Trace: [ 610.113685][T15249] [ 610.113694][T15249] dump_stack_lvl+0xe8/0x150 [ 610.113712][T15249] should_fail_ex+0x46b/0x600 [ 610.113726][T15249] should_failslab+0xa8/0x100 [ 610.113744][T15249] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 610.113759][T15249] ? __alloc_skb+0x1d0/0x7d0 [ 610.113776][T15249] ? lockdep_hardirqs_on+0x7a/0x110 [ 610.113795][T15249] __alloc_skb+0x1d0/0x7d0 [ 610.113812][T15249] netlink_sendmsg+0x5d4/0xb40 [ 610.113840][T15249] ? __pfx_netlink_sendmsg+0x10/0x10 [ 610.113863][T15249] ? aa_sock_msg_perm+0x122/0x200 [ 610.113885][T15249] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 610.113902][T15249] ____sys_sendmsg+0x94c/0x9c0 [ 610.113917][T15249] ? __pfx_____sys_sendmsg+0x10/0x10 [ 610.113932][T15249] ? import_iovec+0x73/0xa0 [ 610.113946][T15249] ___sys_sendmsg+0x2a5/0x360 [ 610.113957][T15249] ? __lock_acquire+0x6b5/0x2cf0 [ 610.113973][T15249] ? __pfx____sys_sendmsg+0x10/0x10 [ 610.113999][T15249] ? __fget_files+0x2a/0x420 [ 610.114012][T15249] ? __fget_files+0x3a6/0x420 [ 610.114034][T15249] __x64_sys_sendmsg+0x1c3/0x2a0 [ 610.114047][T15249] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 610.114062][T15249] ? __pfx_ksys_write+0x10/0x10 [ 610.114081][T15249] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.114093][T15249] do_syscall_64+0x15f/0xf80 [ 610.114107][T15249] ? trace_irq_disable+0x3b/0x140 [ 610.114119][T15249] ? clear_bhb_loop+0x40/0x90 [ 610.114132][T15249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.114143][T15249] RIP: 0033:0x7f395895c819 [ 610.114154][T15249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 610.114163][T15249] RSP: 002b:00007f3956bb6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 610.114176][T15249] RAX: ffffffffffffffda RBX: 00007f3958bd5fa0 RCX: 00007f395895c819 [ 610.114184][T15249] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 610.114191][T15249] RBP: 00007f3956bb6090 R08: 0000000000000000 R09: 0000000000000000 [ 610.114198][T15249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 610.114204][T15249] R13: 00007f3958bd6038 R14: 00007f3958bd5fa0 R15: 00007ffd6af644c8 [ 610.114220][T15249] [ 610.192497][ T1916] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 610.277196][ T5984] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 610.277216][ T5984] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.277228][ T5984] usb 1-1: Product: syz [ 610.277235][ T5984] usb 1-1: Manufacturer: syz [ 610.277243][ T5984] usb 1-1: SerialNumber: syz [ 610.319915][ T1916] usb 3-1: device descriptor read/64, error -71 [ 610.580130][ T1916] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 610.709990][ T1916] usb 3-1: device descriptor read/64, error -71 [ 610.820586][ T1916] usb usb3-port1: attempt power cycle [ 611.062874][ T5984] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 611.063007][ T5984] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 611.063540][ T5984] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 611.101589][ T5984] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 611.170362][ T1916] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 611.200575][ T1916] usb 3-1: device descriptor read/8, error -71 [ 611.460079][ T1916] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 611.491035][ T1916] usb 3-1: device descriptor read/8, error -71 [ 611.600304][ T1916] usb usb3-port1: unable to enumerate USB device [ 611.635005][ T38] audit: type=1326 audit(1776219519.431:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15269 comm="syz.3.2891" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f395895c819 code=0x0 [ 611.781620][T15271] mkiss: ax0: crc mode is auto. [ 612.731865][ T5865] usb 1-1: USB disconnect, device number 13 [ 613.082931][ T5865] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 613.230034][ T5865] usb 1-1: Using ep0 maxpacket: 32 [ 613.234112][ T5865] usb 1-1: config 51 has an invalid interface number: 208 but max is 0 [ 613.234139][ T5865] usb 1-1: config 51 has no interface number 0 [ 613.234171][ T5865] usb 1-1: config 51 interface 208 has no altsetting 0 [ 613.244466][ T5865] usb 1-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=8b.70 [ 613.244496][ T5865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.244515][ T5865] usb 1-1: Product: syz [ 613.244529][ T5865] usb 1-1: Manufacturer: syz [ 613.244544][ T5865] usb 1-1: SerialNumber: syz [ 613.490759][ T5865] f81534a_ctrl 1-1:51.208: probe with driver f81534a_ctrl failed with error -71 [ 613.524949][ T5865] usb 1-1: USB disconnect, device number 14 [ 614.412111][ T1916] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 614.585380][ T1916] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 614.585411][ T1916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.585431][ T1916] usb 3-1: Product: syz [ 614.585447][ T1916] usb 3-1: Manufacturer: syz [ 614.585460][ T1916] usb 3-1: SerialNumber: syz [ 615.162520][T15366] 9p: Unknown Cache mode or invalid value n [ 615.228957][ T1916] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 615.229016][ T1916] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 615.229626][ T1916] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 615.262926][ T1916] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 615.733159][ T5830] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 615.750179][T15389] syzkaller1: entered promiscuous mode [ 615.750207][T15389] syzkaller1: entered allmulticast mode [ 615.950160][ T5830] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 615.950178][ T5830] usb 4-1: config 0 has no interface number 0 [ 615.950199][ T5830] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 615.950233][ T5830] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 615.950249][ T5830] usb 4-1: config 0 interface 255 has no altsetting 0 [ 615.950269][ T5830] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 615.950281][ T5830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.958544][ T5830] usb 4-1: config 0 descriptor?? [ 616.032481][ T5830] ums-realtek 4-1:0.255: USB Mass Storage device detected [ 616.206955][ T38] audit: type=1326 audit(1776219524.001:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15403 comm="syz.0.2914" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa957edc819 code=0x0 [ 616.351204][T15408] mkiss: ax0: crc mode is auto. [ 616.442164][ T5830] usb 4-1: USB disconnect, device number 93 [ 616.988538][T15422] binder: 15421:15422 ioctl c0306201 200000000080 returned -14 [ 616.999383][T15422] binder: 15421:15422 ioctl c0306201 2000000003c0 returned -14 [ 617.170445][ T5830] usb 3-1: USB disconnect, device number 83 [ 617.193762][T15428] FAULT_INJECTION: forcing a failure. [ 617.193762][T15428] name failslab, interval 1, probability 0, space 0, times 0 [ 617.193797][T15428] CPU: 1 UID: 0 PID: 15428 Comm: syz.3.2917 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 617.193824][T15428] Tainted: [L]=SOFTLOCKUP [ 617.193832][T15428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 617.193844][T15428] Call Trace: [ 617.193852][T15428] [ 617.193861][T15428] dump_stack_lvl+0xe8/0x150 [ 617.193889][T15428] should_fail_ex+0x46b/0x600 [ 617.193916][T15428] should_failslab+0xa8/0x100 [ 617.193945][T15428] kmem_cache_alloc_noprof+0x87/0x680 [ 617.193971][T15428] ? __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 617.193997][T15428] __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 617.194031][T15428] mmu_topup_memory_caches+0x21/0x170 [ 617.194133][T15428] kvm_mmu_load+0x9d/0x2320 [ 617.194160][T15428] ? kvm_msr_allowed+0x9a/0x490 [ 617.194184][T15428] ? kvm_msr_allowed+0x9a/0x490 [ 617.194214][T15428] ? vmx_set_intercept_for_msr+0x2ea/0x3e0 [ 617.194242][T15428] ? kvm_apic_has_interrupt+0x73c/0x770 [ 617.194268][T15428] ? kvm_deliver_exception_payload+0xcf/0x1f0 [ 617.194297][T15428] vcpu_run+0x5c84/0x7860 [ 617.194391][T15428] ? __pfx_vcpu_run+0x10/0x10 [ 617.194421][T15428] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 617.194452][T15428] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 617.194495][T15428] kvm_arch_vcpu_ioctl_run+0x11e6/0x20d0 [ 617.194535][T15428] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 617.194564][T15428] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 617.194610][T15428] ? do_raw_spin_lock+0x12b/0x2f0 [ 617.194709][T15428] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 617.194742][T15428] ? lockdep_hardirqs_on+0x7a/0x110 [ 617.194767][T15428] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 617.194792][T15428] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 617.194817][T15428] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 617.194839][T15428] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 617.194864][T15428] ? lockdep_hardirqs_on+0x7a/0x110 [ 617.194890][T15428] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 617.194916][T15428] ? rt_write_unlock+0x190/0x230 [ 617.194947][T15428] kvm_vcpu_ioctl+0xa65/0xfe0 [ 617.194984][T15428] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 617.195030][T15428] ? __fget_files+0x2a/0x420 [ 617.195056][T15428] ? __fget_files+0x2a/0x420 [ 617.195078][T15428] ? __fget_files+0x3a6/0x420 [ 617.195099][T15428] ? __fget_files+0x2a/0x420 [ 617.195133][T15428] ? bpf_lsm_file_ioctl+0x9/0x20 [ 617.195156][T15428] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 617.195182][T15428] __se_sys_ioctl+0xff/0x170 [ 617.195210][T15428] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.195232][T15428] do_syscall_64+0x15f/0xf80 [ 617.195260][T15428] ? clear_bhb_loop+0x40/0x90 [ 617.195285][T15428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.195306][T15428] RIP: 0033:0x7f395895c819 [ 617.195325][T15428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 617.195342][T15428] RSP: 002b:00007f3956bb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 617.195363][T15428] RAX: ffffffffffffffda RBX: 00007f3958bd5fa0 RCX: 00007f395895c819 [ 617.195376][T15428] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 617.195387][T15428] RBP: 00007f3956bb6090 R08: 0000000000000000 R09: 0000000000000000 [ 617.195404][T15428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 617.195419][T15428] R13: 00007f3958bd6038 R14: 00007f3958bd5fa0 R15: 00007ffd6af644c8 [ 617.195449][T15428] [ 617.303554][T15439] comedi comedi2: 8255: I/O base address or length out of range [ 617.596252][ T38] audit: type=1326 audit(1776219525.391:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15446 comm="syz.1.2919" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f518419c819 code=0x0 [ 617.700628][ T38] audit: type=1326 audit(1776219525.501:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15446 comm="syz.1.2919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518419c819 code=0x7ffc0000 [ 617.700684][ T38] audit: type=1326 audit(1776219525.501:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15446 comm="syz.1.2919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518419c819 code=0x7ffc0000 [ 617.701199][ T38] audit: type=1326 audit(1776219525.501:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15446 comm="syz.1.2919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518419c819 code=0x7ffc0000 [ 617.701253][ T38] audit: type=1326 audit(1776219525.501:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15446 comm="syz.1.2919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f518419c819 code=0x7ffc0000 [ 617.701296][ T38] audit: type=1326 audit(1776219525.501:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15446 comm="syz.1.2919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518419c819 code=0x7ffc0000 [ 617.701460][ T38] audit: type=1326 audit(1776219525.501:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15446 comm="syz.1.2919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518419c819 code=0x7ffc0000 [ 617.719928][ T38] audit: type=1326 audit(1776219525.511:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15446 comm="syz.1.2919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518419c819 code=0x7ffc0000 [ 617.719978][ T38] audit: type=1326 audit(1776219525.511:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15446 comm="syz.1.2919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518419c819 code=0x7ffc0000 [ 617.720025][ T38] audit: type=1326 audit(1776219525.511:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15446 comm="syz.1.2919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518419c819 code=0x7ffc0000 [ 617.726827][T15464] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2922'. [ 617.817552][T15466] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2923'. [ 617.825037][T15466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 617.918263][T15466] FAULT_INJECTION: forcing a failure. [ 617.918263][T15466] name failslab, interval 1, probability 0, space 0, times 0 [ 617.918303][T15466] CPU: 1 UID: 0 PID: 15466 Comm: syz.3.2923 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 617.918328][T15466] Tainted: [L]=SOFTLOCKUP [ 617.918335][T15466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 617.918347][T15466] Call Trace: [ 617.918355][T15466] [ 617.918363][T15466] dump_stack_lvl+0xe8/0x150 [ 617.918391][T15466] should_fail_ex+0x46b/0x600 [ 617.918417][T15466] should_failslab+0xa8/0x100 [ 617.918446][T15466] __kmalloc_cache_noprof+0x84/0x690 [ 617.918471][T15466] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 617.918496][T15466] ? __request_module+0x2d0/0x630 [ 617.918527][T15466] __request_module+0x2d0/0x630 [ 617.918560][T15466] ? __pfx___request_module+0x10/0x10 [ 617.918589][T15466] ? apparmor_capable+0x126/0x170 [ 617.918621][T15466] ? capable+0x88/0xe0 [ 617.918639][T15466] ? dev_load+0x21/0x1f0 [ 617.918665][T15466] devinet_ioctl+0x138/0x1b30 [ 617.918701][T15466] ? __pfx_devinet_ioctl+0x10/0x10 [ 617.918729][T15466] ? get_user_ifreq+0x12b/0x180 [ 617.918753][T15466] inet_ioctl+0x42a/0x560 [ 617.918774][T15466] ? __pfx_inet_ioctl+0x10/0x10 [ 617.918812][T15466] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 617.918845][T15466] sock_do_ioctl+0x101/0x320 [ 617.918870][T15466] ? __pfx_sock_do_ioctl+0x10/0x10 [ 617.918907][T15466] sock_ioctl+0x5c9/0x7f0 [ 617.918932][T15466] ? __pfx_sock_ioctl+0x10/0x10 [ 617.918955][T15466] ? __fget_files+0x2a/0x420 [ 617.918975][T15466] ? __fget_files+0x3a6/0x420 [ 617.918995][T15466] ? __fget_files+0x2a/0x420 [ 617.919019][T15466] ? bpf_lsm_file_ioctl+0x9/0x20 [ 617.919040][T15466] ? __pfx_sock_ioctl+0x10/0x10 [ 617.919061][T15466] __se_sys_ioctl+0xff/0x170 [ 617.919086][T15466] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.919106][T15466] do_syscall_64+0x15f/0xf80 [ 617.919129][T15466] ? trace_irq_disable+0x3b/0x140 [ 617.919150][T15466] ? clear_bhb_loop+0x40/0x90 [ 617.919173][T15466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.919192][T15466] RIP: 0033:0x7f395895c819 [ 617.919210][T15466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 617.919226][T15466] RSP: 002b:00007f3956bb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 617.919247][T15466] RAX: ffffffffffffffda RBX: 00007f3958bd5fa0 RCX: 00007f395895c819 [ 617.919261][T15466] RDX: 0000200000002280 RSI: 0000000000008914 RDI: 0000000000000007 [ 617.919274][T15466] RBP: 00007f3956bb6090 R08: 0000000000000000 R09: 0000000000000000 [ 617.919291][T15466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 617.919303][T15466] R13: 00007f3958bd6038 R14: 00007f3958bd5fa0 R15: 00007ffd6af644c8 [ 617.919332][T15466] [ 618.520230][ T5865] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 618.671788][ T5865] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 618.671837][ T5865] usb 3-1: config 5 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 618.674132][ T5865] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 618.674161][ T5865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.674182][ T5865] usb 3-1: Product: syz [ 618.674197][ T5865] usb 3-1: Manufacturer: syz [ 618.674212][ T5865] usb 3-1: SerialNumber: syz [ 618.740138][T14023] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 618.789953][ T5887] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 618.906312][T14023] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 618.906345][T14023] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.906366][T14023] usb 4-1: Product: syz [ 618.906380][T14023] usb 4-1: Manufacturer: syz [ 618.906394][T14023] usb 4-1: SerialNumber: syz [ 618.940197][ T5887] usb 2-1: Using ep0 maxpacket: 32 [ 618.945619][T15469] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 618.958321][ T5887] usb 2-1: config 0 has an invalid interface number: 162 but max is 0 [ 618.958348][ T5887] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 618.958367][ T5887] usb 2-1: config 0 has no interface number 0 [ 618.988681][ T5887] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 618.988712][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.988786][ T5887] usb 2-1: Product: syz [ 618.988801][ T5887] usb 2-1: Manufacturer: syz [ 618.988815][ T5887] usb 2-1: SerialNumber: syz [ 618.998223][ T5887] usb 2-1: config 0 descriptor?? [ 619.012044][ T5887] cdc_ether 2-1:0.162: skipping garbage [ 619.012064][ T5887] usb 2-1: No union descriptors [ 619.014117][ T5887] usb 2-1: unsupported MDLM descriptors [ 619.390007][T15492] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2925'. [ 619.577350][T14023] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 619.577471][T14023] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 619.578400][T14023] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 619.615307][T14023] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 619.644275][T15469] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 619.966972][ T5865] cdc_ncm 3-1:5.0: failed to get mac address [ 619.996566][ T5865] cdc_ncm 3-1:5.0: bind() failure [ 620.007650][ T5865] cdc_ncm 3-1:5.1: probe with driver cdc_ncm failed with error -71 [ 620.008237][ T5865] cdc_mbim 3-1:5.1: probe with driver cdc_mbim failed with error -71 [ 620.009265][ T5865] usbtest 3-1:5.1: probe with driver usbtest failed with error -71 [ 620.020208][ T5865] usb 3-1: USB disconnect, device number 84 [ 621.521007][ T5865] usb 4-1: USB disconnect, device number 94 [ 621.568928][T14023] usb 2-1: USB disconnect, device number 27 [ 621.677462][T15565] binder: 15560:15565 ioctl 8400941f 200000000500 returned -22 [ 621.734125][T15566] mkiss: ax0: crc mode is auto. [ 622.092298][T14023] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 622.269947][T14023] usb 3-1: Using ep0 maxpacket: 32 [ 622.272082][T14023] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 622.274401][T14023] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 622.274426][T14023] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.274439][T14023] usb 3-1: Product: syz [ 622.274447][T14023] usb 3-1: Manufacturer: syz [ 622.274455][T14023] usb 3-1: SerialNumber: syz [ 622.278358][T14023] usb 3-1: config 0 descriptor?? [ 622.333397][T14023] gs_usb 3-1:0.0: Required endpoints not found [ 622.484657][T15578] netlink: 'syz.2.2939': attribute type 10 has an invalid length. [ 622.520784][T15578] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 622.521936][T15576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 622.546004][T14023] usb 3-1: USB disconnect, device number 85 [ 622.620027][ T5865] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 622.775546][ T5865] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 622.775577][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.775598][ T5865] usb 2-1: Product: syz [ 622.775613][ T5865] usb 2-1: Manufacturer: syz [ 622.775627][ T5865] usb 2-1: SerialNumber: syz [ 623.018233][ T5865] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 623.018278][ T5865] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 623.018291][ T5865] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 623.053060][ T5865] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 623.116281][T15629] binder_alloc: 15628: binder_alloc_buf, no vma [ 623.240006][T14023] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 623.405625][T14023] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 623.405664][T14023] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.405683][T14023] usb 1-1: Product: syz [ 623.405696][T14023] usb 1-1: Manufacturer: syz [ 623.405704][T14023] usb 1-1: SerialNumber: syz [ 623.589985][ T5887] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 623.680553][T14023] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 623.685448][T14023] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 623.685474][T14023] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 623.685484][T14023] usb 1-1: 2:1 : invalid channels 0 [ 623.739994][ T5887] usb 3-1: Using ep0 maxpacket: 32 [ 623.742656][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 623.742686][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 623.742721][ T5887] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 623.742743][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.783831][ T5887] usb 3-1: config 0 descriptor?? [ 623.804730][T14023] usb 1-1: USB disconnect, device number 15 [ 623.894491][ T5979] udevd[5979]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 624.208624][ T5887] hid_parser_main: 7 callbacks suppressed [ 624.208640][ T5887] ft260 0003:0403:6030.0011: unknown main item tag 0x0 [ 624.208659][ T5887] ft260 0003:0403:6030.0011: unknown main item tag 0x0 [ 624.386216][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.390611][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.404133][T15638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2951'. [ 624.414330][ T5887] ft260 0003:0403:6030.0011: chip code: 0000 0000 [ 624.615689][ T5887] ft260 0003:0403:6030.0011: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 624.817032][ T5887] ft260 0003:0403:6030.0011: failed to retrieve status: -32, no wakeup [ 624.817921][ T5887] ft260 0003:0403:6030.0011: failed to retrieve status: -32 [ 625.028248][ T1916] usb 3-1: USB disconnect, device number 86 [ 625.412976][ T5887] usb 2-1: USB disconnect, device number 28 [ 625.480613][ T5984] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 625.632703][ T5984] usb 4-1: Using ep0 maxpacket: 32 [ 625.647061][ T5984] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 625.676393][ T5984] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 625.676433][ T5984] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 625.676453][ T5984] usb 4-1: Product: syz [ 625.676467][ T5984] usb 4-1: Manufacturer: syz [ 625.676480][ T5984] usb 4-1: SerialNumber: syz [ 625.695633][ T5984] usb 4-1: config 0 descriptor?? [ 625.696392][T15706] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 625.702340][ T5984] hub 4-1:0.0: bad descriptor, ignoring hub [ 625.702376][ T5984] hub 4-1:0.0: probe with driver hub failed with error -5 [ 625.868274][ T5822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 625.946643][ T5822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 625.958880][ T5822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 626.002248][ T5822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 626.008539][ T5822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 626.935335][ T1916] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 627.037920][T14023] usb 4-1: USB disconnect, device number 95 [ 627.109922][ T1916] usb 3-1: Using ep0 maxpacket: 16 [ 627.112336][ T1916] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 627.112363][ T1916] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 627.112380][ T1916] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 627.112397][ T1916] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 627.112417][ T1916] usb 3-1: config 0 has no interface number 0 [ 627.170997][ T1916] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 627.171030][ T1916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.171055][ T1916] usb 3-1: Product: syz [ 627.171089][ T1916] usb 3-1: Manufacturer: syz [ 627.171113][ T1916] usb 3-1: SerialNumber: syz [ 627.213926][ T1916] usb 3-1: config 0 descriptor?? [ 627.229951][T14023] usb 4-1: new full-speed USB device number 96 using dummy_hcd [ 627.318155][T15719] chnl_net:caif_netlink_parms(): no params data found [ 627.392663][T14023] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 627.401713][T14023] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 627.401743][T14023] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 627.401764][T14023] usb 4-1: Product: syz [ 627.401780][T14023] usb 4-1: Manufacturer: syz [ 627.401795][T14023] usb 4-1: SerialNumber: syz [ 627.463394][T14023] usb 4-1: config 0 descriptor?? [ 627.464212][T15737] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 627.467119][T14023] hub 4-1:0.0: bad descriptor, ignoring hub [ 627.467156][T14023] hub 4-1:0.0: probe with driver hub failed with error -5 [ 627.803500][T15719] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.803660][T15719] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.803824][T15719] bridge_slave_0: entered allmulticast mode [ 627.806045][T15719] bridge_slave_0: entered promiscuous mode [ 627.837815][T15719] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.837887][T15719] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.838048][T15719] bridge_slave_1: entered allmulticast mode [ 627.853731][T15719] bridge_slave_1: entered promiscuous mode [ 628.058454][T15719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 628.090583][T15719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 628.127217][ T5984] usb 3-1: USB disconnect, device number 87 [ 628.309947][ T5834] Bluetooth: hci0: command tx timeout [ 628.551416][ T38] kauditd_printk_skb: 366 callbacks suppressed [ 628.551435][ T38] audit: type=1326 audit(1776219536.351:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15933 comm="syz.0.2961" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa957edc819 code=0x0 [ 628.847808][T15719] team0: Port device team_slave_0 added [ 628.870588][ T1916] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 628.983773][T15940] mkiss: ax0: crc mode is auto. [ 628.989024][T15719] team0: Port device team_slave_1 added [ 629.039954][ T1916] usb 3-1: Using ep0 maxpacket: 16 [ 629.043954][ T1916] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 629.043980][ T1916] usb 3-1: config 0 has no interface number 0 [ 629.057456][ T1916] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 629.057475][ T1916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.057486][ T1916] usb 3-1: Product: syz [ 629.057494][ T1916] usb 3-1: Manufacturer: syz [ 629.057502][ T1916] usb 3-1: SerialNumber: syz [ 629.116323][ T1916] usb 3-1: config 0 descriptor?? [ 629.130421][ T1916] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 629.140723][ T5887] usb 4-1: USB disconnect, device number 96 [ 629.476451][ T183] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.688452][T15719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 629.688463][T15719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 629.688478][T15719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 629.774845][T15719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 629.774985][T15719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 629.775106][T15719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 630.140757][ T183] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.224149][T15719] hsr_slave_0: entered promiscuous mode [ 630.225414][T15719] hsr_slave_1: entered promiscuous mode [ 630.226195][T15719] debugfs: 'hsr0' already exists in 'hsr' [ 630.226219][T15719] Cannot create hsr debugfs directory [ 630.390018][ T5834] Bluetooth: hci0: command tx timeout [ 630.587984][ T183] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.732593][ T1916] gspca_spca1528: reg_w err -71 [ 630.732690][ T1916] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 630.764115][ T1916] usb 3-1: USB disconnect, device number 88 [ 631.017563][ T183] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.486511][ T183] bridge_slave_1: left allmulticast mode [ 631.486547][ T183] bridge_slave_1: left promiscuous mode [ 631.486760][ T183] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.583576][ T183] bridge_slave_0: left allmulticast mode [ 631.583597][ T183] bridge_slave_0: left promiscuous mode [ 631.622493][ T183] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.462171][ T5834] Bluetooth: hci0: command tx timeout [ 632.733071][ T5487] 8021q: adding VLAN 0 to HW filter on device eth1 [ 634.170050][ T5887] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 634.219864][ T38] audit: type=1326 audit(1776219542.011:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16164 comm="syz.0.2976" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa957edc819 code=0x0 [ 634.303763][ T5887] usb 3-1: device descriptor read/64, error -71 [ 634.465699][T16172] mkiss: ax0: crc mode is auto. [ 634.544381][ T5887] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 634.549900][ T5834] Bluetooth: hci0: command tx timeout [ 634.679969][ T5887] usb 3-1: device descriptor read/64, error -71 [ 634.790339][ T5887] usb usb3-port1: attempt power cycle [ 634.866517][T14981] wlan1: Trigger new scan to find an IBSS to join [ 635.142252][ T5887] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 635.161281][ T5887] usb 3-1: device descriptor read/8, error -71 [ 635.390437][ T183] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 635.390470][ T183] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 635.410005][ T5887] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 635.430921][ T5887] usb 3-1: device descriptor read/8, error -71 [ 635.431761][ T183] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 635.431779][ T183] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 635.540283][ T5887] usb usb3-port1: unable to enumerate USB device [ 635.548117][ T183] veth1_macvtap: left promiscuous mode [ 635.548226][ T183] veth0_macvtap: left promiscuous mode [ 635.548473][ T183] veth1_vlan: left allmulticast mode [ 635.548509][ T183] veth1_vlan: left promiscuous mode [ 635.548662][ T183] veth0_vlan: left promiscuous mode [ 636.141489][ T183] team0 (unregistering): Port device macvlan0 removed [ 636.310476][ T183] team0 (unregistering): Port device team_slave_1 removed [ 636.350564][ T183] team0 (unregistering): Port device team_slave_0 removed [ 636.571374][T16201] : renamed from bond_slave_0 (while UP) [ 637.189440][T14023] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 637.485480][T14023] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 637.485534][T14023] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 637.485562][T14023] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 637.485600][T14023] usb 4-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 637.485623][T14023] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.492553][T14023] usb 4-1: config 0 descriptor?? [ 637.775778][T14023] wacom 0003:056A:0010.0012: Unknown device_type for 'HID 056a:0010'. Assuming pen. [ 637.901193][T14981] wlan1: Trigger new scan to find an IBSS to join [ 637.901810][T14023] wacom 0003:056A:0010.0012: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.3-1/input0 [ 637.914991][T14023] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0010.0012/input/input24 [ 637.924596][T16211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 637.925161][T16211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 638.079952][ T5830] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 638.302909][ T5830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 638.302943][ T5830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 638.302983][ T5830] usb 1-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00 [ 638.303007][ T5830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.400630][ T5830] usb 1-1: config 0 descriptor?? [ 638.610063][T15719] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 638.756464][T15719] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 638.757359][T15719] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 638.849127][T16253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.852381][T16253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 638.873079][T15719] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 638.878265][T15719] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 638.967628][T15719] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 638.970993][T15719] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 638.971888][ T183] IPVS: stop unused estimator thread 0... [ 639.018755][T15719] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 639.105229][ T5830] usb 1-1: USB disconnect, device number 16 [ 639.122276][ T10] usb 4-1: USB disconnect, device number 97 [ 639.388649][T15719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 639.407877][T15719] 8021q: adding VLAN 0 to HW filter on device team0 [ 639.416219][T14981] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.416423][T14981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 639.430168][ T183] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.430357][ T183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 639.879954][T16341] FAULT_INJECTION: forcing a failure. [ 639.879954][T16341] name failslab, interval 1, probability 0, space 0, times 0 [ 639.879987][T16341] CPU: 1 UID: 0 PID: 16341 Comm: syz.0.2984 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 639.880012][T16341] Tainted: [L]=SOFTLOCKUP [ 639.880019][T16341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 639.880029][T16341] Call Trace: [ 639.880036][T16341] [ 639.880044][T16341] dump_stack_lvl+0xe8/0x150 [ 639.880070][T16341] should_fail_ex+0x46b/0x600 [ 639.880097][T16341] should_failslab+0xa8/0x100 [ 639.880126][T16341] __kvmalloc_node_noprof+0x170/0x8e0 [ 639.880156][T16341] ? rhashtable_init_noprof+0x536/0xa80 [ 639.880178][T16341] ? rhashtable_init_noprof+0x135/0xa80 [ 639.880203][T16341] rhashtable_init_noprof+0x536/0xa80 [ 639.880230][T16341] rhltable_init_noprof+0x1e/0x60 [ 639.880251][T16341] nf_tables_newtable+0x68f/0x1910 [ 639.880291][T16341] nfnetlink_rcv+0x1247/0x27b0 [ 639.880349][T16341] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 639.880391][T16341] ? ref_tracker_free+0x673/0x820 [ 639.880444][T16341] ? __netlink_deliver_tap+0x807/0x850 [ 639.880479][T16341] ? netlink_deliver_tap+0x2e/0x1b0 [ 639.880506][T16341] ? netlink_deliver_tap+0x2e/0x1b0 [ 639.880557][T16341] netlink_unicast+0x780/0x920 [ 639.880594][T16341] netlink_sendmsg+0x813/0xb40 [ 639.880635][T16341] ? __pfx_netlink_sendmsg+0x10/0x10 [ 639.880665][T16341] ? aa_sock_msg_perm+0x122/0x200 [ 639.880689][T16341] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 639.880712][T16341] ____sys_sendmsg+0x94c/0x9c0 [ 639.880740][T16341] ? __pfx_____sys_sendmsg+0x10/0x10 [ 639.880769][T16341] ? import_iovec+0x73/0xa0 [ 639.880794][T16341] ___sys_sendmsg+0x2a5/0x360 [ 639.880820][T16341] ? __pfx____sys_sendmsg+0x10/0x10 [ 639.880874][T16341] ? __fget_files+0x2a/0x420 [ 639.880897][T16341] ? __fget_files+0x3a6/0x420 [ 639.880927][T16341] __x64_sys_sendmsg+0x1c3/0x2a0 [ 639.880957][T16341] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 639.880987][T16341] ? __pfx_ksys_write+0x10/0x10 [ 639.881022][T16341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.881044][T16341] do_syscall_64+0x15f/0xf80 [ 639.881069][T16341] ? trace_irq_disable+0x3b/0x140 [ 639.881092][T16341] ? clear_bhb_loop+0x40/0x90 [ 639.881116][T16341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.881136][T16341] RIP: 0033:0x7fa957edc819 [ 639.881155][T16341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 639.881171][T16341] RSP: 002b:00007fa956136028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 639.881193][T16341] RAX: ffffffffffffffda RBX: 00007fa958155fa0 RCX: 00007fa957edc819 [ 639.881208][T16341] RDX: 0000000000000800 RSI: 0000200000000080 RDI: 0000000000000003 [ 639.881219][T16341] RBP: 00007fa956136090 R08: 0000000000000000 R09: 0000000000000000 [ 639.881232][T16341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 639.881243][T16341] R13: 00007fa958156038 R14: 00007fa958155fa0 R15: 00007ffd131301e8 [ 639.881270][T16341] [ 640.247657][T15719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 640.446135][ T38] audit: type=1326 audit(1776219548.241:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16354 comm="syz.3.2988" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f395895c819 code=0x0 [ 640.449685][T15719] veth0_vlan: entered promiscuous mode [ 640.477511][T15719] veth1_vlan: entered promiscuous mode [ 640.626774][T16360] mkiss: ax0: crc mode is auto. [ 640.673806][T15719] veth0_macvtap: entered promiscuous mode [ 640.677334][T15719] veth1_macvtap: entered promiscuous mode [ 640.702608][T15719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 640.726264][T15719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 640.744426][ T3539] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.744530][ T3539] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.744565][ T3539] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.744599][ T3539] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.867785][ T3539] wlan1: Creating new IBSS network, BSSID 06:09:3a:0c:fa:45 [ 641.578494][ T3539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.578512][ T3539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.643180][ T5887] usb 3-1: new full-speed USB device number 93 using dummy_hcd [ 641.866829][ T5887] usb 3-1: config 2 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 641.866863][ T5887] usb 3-1: config 2 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 641.866885][ T5887] usb 3-1: config 2 interface 0 has no altsetting 0 [ 641.866914][ T5887] usb 3-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 641.866935][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.912798][ T157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.912819][ T157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.167826][T16393] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2993'. [ 642.350579][ T5887] elo 0003:04E7:0009.0014: item fetching failed at offset 0/5 [ 642.351372][ T5887] elo 0003:04E7:0009.0014: parse failed [ 642.351474][ T5887] elo 0003:04E7:0009.0014: probe with driver elo failed with error -22 [ 642.360582][T16398] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 642.360598][T16398] overlayfs: missing 'lowerdir' [ 642.547200][ T5830] usb 3-1: USB disconnect, device number 93 [ 642.602106][T16420] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 642.602134][T16420] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 642.664727][T16420] vhci_hcd vhci_hcd.0: Device attached [ 642.909910][T11695] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 643.131898][T16421] vhci_hcd: connection reset by peer [ 643.149275][ T3539] vhci_hcd vhci_hcd.1: stop threads [ 643.162962][ T3539] vhci_hcd vhci_hcd.1: release socket [ 643.192345][ T3539] vhci_hcd vhci_hcd.1: disconnect device [ 643.618997][T16444] FAULT_INJECTION: forcing a failure. [ 643.618997][T16444] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 643.619023][T16444] CPU: 0 UID: 0 PID: 16444 Comm: syz.3.3000 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 643.619039][T16444] Tainted: [L]=SOFTLOCKUP [ 643.619043][T16444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 643.619050][T16444] Call Trace: [ 643.619056][T16444] [ 643.619061][T16444] dump_stack_lvl+0xe8/0x150 [ 643.619079][T16444] should_fail_ex+0x46b/0x600 [ 643.619094][T16444] _copy_from_iter+0x1d3/0x1670 [ 643.619113][T16444] ? __pfx__copy_from_iter+0x10/0x10 [ 643.619132][T16444] file_tty_write+0x4c9/0xa10 [ 643.619150][T16444] vfs_write+0x629/0xba0 [ 643.619170][T16444] ? __pfx_vfs_write+0x10/0x10 [ 643.619190][T16444] ? __fget_files+0x2a/0x420 [ 643.619207][T16444] ksys_write+0x156/0x270 [ 643.619223][T16444] ? __pfx_ksys_write+0x10/0x10 [ 643.619242][T16444] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.619254][T16444] do_syscall_64+0x15f/0xf80 [ 643.619269][T16444] ? trace_irq_disable+0x3b/0x140 [ 643.619281][T16444] ? clear_bhb_loop+0x40/0x90 [ 643.619295][T16444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.619306][T16444] RIP: 0033:0x7f395895c819 [ 643.619319][T16444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 643.619329][T16444] RSP: 002b:00007f3956bb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 643.619342][T16444] RAX: ffffffffffffffda RBX: 00007f3958bd5fa0 RCX: 00007f395895c819 [ 643.619350][T16444] RDX: 0000000000001006 RSI: 0000200000001980 RDI: 0000000000000004 [ 643.619357][T16444] RBP: 00007f3956bb6090 R08: 0000000000000000 R09: 0000000000000000 [ 643.619364][T16444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 643.619371][T16444] R13: 00007f3958bd6038 R14: 00007f3958bd5fa0 R15: 00007ffd6af644c8 [ 643.619389][T16444] [ 643.622691][T14023] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 643.772004][T14023] usb 3-1: Using ep0 maxpacket: 16 [ 643.774025][T14023] usb 3-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 643.774071][T14023] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 643.774096][T14023] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 643.774121][T14023] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 643.778434][T14023] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 643.778461][T14023] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.778481][T14023] usb 3-1: Product: syz [ 643.778496][T14023] usb 3-1: Manufacturer: syz [ 643.778511][T14023] usb 3-1: SerialNumber: syz [ 643.790499][T14023] usb 3-1: config 0 descriptor?? [ 644.194597][T14023] appledisplay 3-1:0.0: Error while getting initial brightness: -71 [ 644.203678][T14023] appledisplay 3-1:0.0: probe with driver appledisplay failed with error -71 [ 644.219191][T14023] usb 3-1: USB disconnect, device number 94 [ 644.362313][T16474] FAULT_INJECTION: forcing a failure. [ 644.362313][T16474] name failslab, interval 1, probability 0, space 0, times 0 [ 644.362347][T16474] CPU: 1 UID: 0 PID: 16474 Comm: syz.3.3007 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 644.362375][T16474] Tainted: [L]=SOFTLOCKUP [ 644.362382][T16474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 644.362394][T16474] Call Trace: [ 644.362402][T16474] [ 644.362411][T16474] dump_stack_lvl+0xe8/0x150 [ 644.362438][T16474] should_fail_ex+0x46b/0x600 [ 644.362463][T16474] should_failslab+0xa8/0x100 [ 644.362492][T16474] kmem_cache_alloc_noprof+0x87/0x680 [ 644.362518][T16474] ? skb_clone+0x212/0x3a0 [ 644.362543][T16474] skb_clone+0x212/0x3a0 [ 644.362567][T16474] __netlink_deliver_tap+0x404/0x850 [ 644.362607][T16474] ? netlink_deliver_tap+0x2e/0x1b0 [ 644.362636][T16474] netlink_deliver_tap+0x19c/0x1b0 [ 644.362664][T16474] netlink_sendskb+0x68/0x140 [ 644.362693][T16474] netlink_rcv_skb+0x2b6/0x4b0 [ 644.362720][T16474] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 644.362749][T16474] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 644.362788][T16474] ? bpf_lsm_capable+0x9/0x20 [ 644.362811][T16474] ? security_capable+0x7e/0x2c0 [ 644.362848][T16474] nfnetlink_rcv+0x2c0/0x27b0 [ 644.362877][T16474] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 644.362897][T16474] ? lockdep_hardirqs_on+0x7a/0x110 [ 644.362923][T16474] ? __dev_queue_xmit+0x2b3/0x3900 [ 644.362947][T16474] ? __dev_queue_xmit+0x1eaf/0x3900 [ 644.362967][T16474] ? __netlink_deliver_tap+0x404/0x850 [ 644.362997][T16474] ? netlink_deliver_tap+0x19c/0x1b0 [ 644.363023][T16474] ? netlink_unicast+0x754/0x920 [ 644.363055][T16474] ? __dev_queue_xmit+0x2b3/0x3900 [ 644.363081][T16474] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 644.363113][T16474] ? __pfx___dev_queue_xmit+0x10/0x10 [ 644.363142][T16474] ? ref_tracker_free+0x673/0x820 [ 644.363166][T16474] ? __pfx_ref_tracker_free+0x10/0x10 [ 644.363185][T16474] ? __asan_memcpy+0x40/0x70 [ 644.363213][T16474] ? __skb_clone+0x63/0x7a0 [ 644.363238][T16474] ? __skb_clone+0x483/0x7a0 [ 644.363264][T16474] ? skb_clone+0x246/0x3a0 [ 644.363287][T16474] ? __netlink_deliver_tap+0x807/0x850 [ 644.363315][T16474] ? netlink_deliver_tap+0x2e/0x1b0 [ 644.363345][T16474] ? netlink_deliver_tap+0x2e/0x1b0 [ 644.363372][T16474] ? netlink_deliver_tap+0x2e/0x1b0 [ 644.363402][T16474] netlink_unicast+0x780/0x920 [ 644.363435][T16474] netlink_sendmsg+0x813/0xb40 [ 644.363472][T16474] ? __pfx_netlink_sendmsg+0x10/0x10 [ 644.363503][T16474] ? aa_sock_msg_perm+0x122/0x200 [ 644.363525][T16474] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 644.363546][T16474] ____sys_sendmsg+0x94c/0x9c0 [ 644.363572][T16474] ? __pfx_____sys_sendmsg+0x10/0x10 [ 644.363600][T16474] ? import_iovec+0x73/0xa0 [ 644.363624][T16474] ___sys_sendmsg+0x2a5/0x360 [ 644.363643][T16474] ? __lock_acquire+0x6b5/0x2cf0 [ 644.363672][T16474] ? __pfx____sys_sendmsg+0x10/0x10 [ 644.363725][T16474] ? __fget_files+0x2a/0x420 [ 644.363747][T16474] ? __fget_files+0x3a6/0x420 [ 644.363778][T16474] __x64_sys_sendmsg+0x1c3/0x2a0 [ 644.363801][T16474] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 644.363830][T16474] ? __pfx_ksys_write+0x10/0x10 [ 644.363862][T16474] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.363882][T16474] do_syscall_64+0x15f/0xf80 [ 644.363905][T16474] ? trace_irq_disable+0x3b/0x140 [ 644.363925][T16474] ? clear_bhb_loop+0x40/0x90 [ 644.363948][T16474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.363967][T16474] RIP: 0033:0x7f395895c819 [ 644.363986][T16474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 644.364002][T16474] RSP: 002b:00007f3956bb6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 644.364022][T16474] RAX: ffffffffffffffda RBX: 00007f3958bd5fa0 RCX: 00007f395895c819 [ 644.364037][T16474] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000003 [ 644.364048][T16474] RBP: 00007f3956bb6090 R08: 0000000000000000 R09: 0000000000000000 [ 644.364060][T16474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 644.364072][T16474] R13: 00007f3958bd6038 R14: 00007f3958bd5fa0 R15: 00007ffd6af644c8 [ 644.364103][T16474] [ 644.615457][ T38] audit: type=1326 audit(1776219552.401:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16476 comm="syz.1.3008" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ee59dc819 code=0x0 [ 644.853007][T16480] mkiss: ax0: crc mode is auto. [ 644.911401][T16488] FAULT_INJECTION: forcing a failure. [ 644.911401][T16488] name failslab, interval 1, probability 0, space 0, times 0 [ 644.911423][T16488] CPU: 1 UID: 0 PID: 16488 Comm: syz.3.3010 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 644.911439][T16488] Tainted: [L]=SOFTLOCKUP [ 644.911443][T16488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 644.911450][T16488] Call Trace: [ 644.911455][T16488] [ 644.911460][T16488] dump_stack_lvl+0xe8/0x150 [ 644.911479][T16488] should_fail_ex+0x46b/0x600 [ 644.911495][T16488] should_failslab+0xa8/0x100 [ 644.911512][T16488] __kmalloc_noprof+0xdf/0x7b0 [ 644.911527][T16488] ? kfree+0x4d/0x6c0 [ 644.911539][T16488] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 644.911555][T16488] tomoyo_realpath_from_path+0xe3/0x5d0 [ 644.911568][T16488] ? tomoyo_domain+0xd7/0x130 [ 644.911583][T16488] ? tomoyo_path_number_perm+0x219/0x630 [ 644.911599][T16488] tomoyo_path_number_perm+0x246/0x630 [ 644.911620][T16488] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 644.911635][T16488] ? __lock_acquire+0x6b5/0x2cf0 [ 644.911651][T16488] ? do_raw_spin_lock+0x12b/0x2f0 [ 644.911678][T16488] ? __fget_files+0x2a/0x420 [ 644.911692][T16488] ? __fget_files+0x2a/0x420 [ 644.911704][T16488] ? __fget_files+0x3a6/0x420 [ 644.911715][T16488] ? __fget_files+0x2a/0x420 [ 644.911729][T16488] security_file_ioctl+0xc3/0x2a0 [ 644.911746][T16488] __se_sys_ioctl+0x47/0x170 [ 644.911761][T16488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.911774][T16488] do_syscall_64+0x15f/0xf80 [ 644.911788][T16488] ? trace_irq_disable+0x3b/0x140 [ 644.911801][T16488] ? clear_bhb_loop+0x40/0x90 [ 644.911814][T16488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.911825][T16488] RIP: 0033:0x7f395895c819 [ 644.911837][T16488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 644.911847][T16488] RSP: 002b:00007f3956b95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 644.911859][T16488] RAX: ffffffffffffffda RBX: 00007f3958bd6090 RCX: 00007f395895c819 [ 644.911867][T16488] RDX: 0000200000000080 RSI: 0000000000005412 RDI: 0000000000000003 [ 644.911874][T16488] RBP: 00007f3956b95090 R08: 0000000000000000 R09: 0000000000000000 [ 644.911881][T16488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 644.911887][T16488] R13: 00007f3958bd6128 R14: 00007f3958bd6090 R15: 00007ffd6af644c8 [ 644.911903][T16488] [ 644.934063][T16488] ERROR: Out of memory at tomoyo_realpath_from_path. [ 645.743681][T16508] netlink: 'syz.3.3017': attribute type 2 has an invalid length. [ 645.890693][T16514] binder: 16510:16514 ioctl c0306201 200000000540 returned -14 [ 646.210019][ T5887] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 646.365718][ T5887] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 646.365745][ T5887] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 646.365771][ T5887] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 646.365804][ T5887] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 646.365818][ T5887] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 646.367715][ T5887] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 646.367742][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 646.367762][ T5887] usb 4-1: Product: syz [ 646.367770][ T5887] usb 4-1: Manufacturer: syz [ 646.422377][ T5887] cdc_wdm 4-1:1.0: skipping garbage [ 646.422397][ T5887] cdc_wdm 4-1:1.0: skipping garbage [ 646.429085][ T5887] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 646.429112][ T5887] cdc_wdm 4-1:1.0: Unknown control protocol [ 646.645781][ T5887] usb 4-1: USB disconnect, device number 98 [ 646.652233][T14023] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 646.810259][T14023] usb 3-1: Using ep0 maxpacket: 16 [ 646.811806][T14023] usb 3-1: config 3 has an invalid interface number: 201 but max is 0 [ 646.811822][T14023] usb 3-1: config 3 has no interface number 0 [ 646.811839][T14023] usb 3-1: config 3 interface 201 has no altsetting 0 [ 646.813807][T14023] usb 3-1: New USB device found, idVendor=0545, idProduct=800d, bcdDevice= 3.0a [ 646.813824][T14023] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.813835][T14023] usb 3-1: Product: syz [ 646.813843][T14023] usb 3-1: Manufacturer: syz [ 646.813851][T14023] usb 3-1: SerialNumber: syz [ 646.946283][T16551] FAULT_INJECTION: forcing a failure. [ 646.946283][T16551] name failslab, interval 1, probability 0, space 0, times 0 [ 646.946318][T16551] CPU: 1 UID: 0 PID: 16551 Comm: syz.0.3022 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 646.946353][T16551] Tainted: [L]=SOFTLOCKUP [ 646.946362][T16551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 646.946372][T16551] Call Trace: [ 646.946378][T16551] [ 646.946386][T16551] dump_stack_lvl+0xe8/0x150 [ 646.946412][T16551] should_fail_ex+0x46b/0x600 [ 646.946436][T16551] should_failslab+0xa8/0x100 [ 646.946462][T16551] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 646.946486][T16551] ? __alloc_skb+0x1d0/0x7d0 [ 646.946510][T16551] ? lockdep_hardirqs_on+0x7a/0x110 [ 646.946536][T16551] __alloc_skb+0x1d0/0x7d0 [ 646.946557][T16551] ? netlink_ack_tlv_len+0x6c/0x210 [ 646.946581][T16551] netlink_ack+0x146/0xa50 [ 646.946604][T16551] ? __pfx_genl_rcv_msg+0x10/0x10 [ 646.946623][T16551] ? ref_tracker_free+0x673/0x820 [ 646.946641][T16551] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 646.946659][T16551] ? __pfx_nl80211_post_doit+0x10/0x10 [ 646.946677][T16551] ? __pfx_ref_tracker_free+0x10/0x10 [ 646.946694][T16551] ? __asan_memcpy+0x40/0x70 [ 646.946714][T16551] ? __skb_clone+0x63/0x7a0 [ 646.946742][T16551] netlink_rcv_skb+0x2b6/0x4b0 [ 646.946769][T16551] ? __pfx_genl_rcv_msg+0x10/0x10 [ 646.946790][T16551] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 646.946826][T16551] ? netlink_deliver_tap+0x2e/0x1b0 [ 646.946853][T16551] ? netlink_deliver_tap+0x2e/0x1b0 [ 646.946881][T16551] genl_rcv+0x28/0x40 [ 646.946897][T16551] netlink_unicast+0x780/0x920 [ 646.946931][T16551] netlink_sendmsg+0x813/0xb40 [ 646.946966][T16551] ? __pfx_netlink_sendmsg+0x10/0x10 [ 646.946992][T16551] ? aa_sock_msg_perm+0x122/0x200 [ 646.947013][T16551] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 646.947032][T16551] ____sys_sendmsg+0x94c/0x9c0 [ 646.947048][T16551] ? __pfx_____sys_sendmsg+0x10/0x10 [ 646.947063][T16551] ? import_iovec+0x73/0xa0 [ 646.947078][T16551] ___sys_sendmsg+0x2a5/0x360 [ 646.947088][T16551] ? __lock_acquire+0x6b5/0x2cf0 [ 646.947104][T16551] ? __pfx____sys_sendmsg+0x10/0x10 [ 646.947133][T16551] ? __fget_files+0x2a/0x420 [ 646.947145][T16551] ? __fget_files+0x3a6/0x420 [ 646.947172][T16551] __x64_sys_sendmsg+0x1c3/0x2a0 [ 646.947185][T16551] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 646.947201][T16551] ? __pfx_ksys_write+0x10/0x10 [ 646.947226][T16551] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.947238][T16551] do_syscall_64+0x15f/0xf80 [ 646.947252][T16551] ? trace_irq_disable+0x3b/0x140 [ 646.947265][T16551] ? clear_bhb_loop+0x40/0x90 [ 646.947278][T16551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.947289][T16551] RIP: 0033:0x7fa957edc819 [ 646.947300][T16551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 646.947309][T16551] RSP: 002b:00007fa956115028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 646.947322][T16551] RAX: ffffffffffffffda RBX: 00007fa958156090 RCX: 00007fa957edc819 [ 646.947330][T16551] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 646.947337][T16551] RBP: 00007fa956115090 R08: 0000000000000000 R09: 0000000000000000 [ 646.947344][T16551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 646.947350][T16551] R13: 00007fa958156128 R14: 00007fa958156090 R15: 00007ffd131301e8 [ 646.947367][T16551] [ 647.318631][T14023] usb 3-1: USB disconnect, device number 95 [ 647.430496][ T10] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 647.543013][T16578] netlink: 'syz.0.3026': attribute type 4 has an invalid length. [ 647.567545][T16578] netlink: 'syz.0.3026': attribute type 4 has an invalid length. [ 647.582921][ T10] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 647.582940][ T10] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 647.582951][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 647.582979][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 647.582996][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 647.584936][ T10] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 647.584965][ T10] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 647.584982][ T10] usb 4-1: Product: syz [ 647.584990][ T10] usb 4-1: Manufacturer: syz [ 647.607492][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 647.607512][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 647.615859][ T10] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 647.615890][ T10] cdc_wdm 4-1:1.0: Unknown control protocol [ 647.805962][ T5984] usb 4-1: USB disconnect, device number 99 [ 648.068732][T11695] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 648.341355][ T5984] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 648.386704][T16624] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3030'. [ 648.473840][T16622] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3030'. [ 648.531567][ T5984] usb 1-1: Using ep0 maxpacket: 32 [ 648.537641][ T5984] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 648.537671][ T5984] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 648.537707][ T5984] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 648.537729][ T5984] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.564564][ T5984] usb 1-1: config 0 descriptor?? [ 649.012794][ T5984] ft260 0003:0403:6030.0015: unknown main item tag 0x0 [ 649.012831][ T5984] ft260 0003:0403:6030.0015: unknown main item tag 0x0 [ 649.179315][T16616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3029'. [ 649.188657][ T5984] ft260 0003:0403:6030.0015: chip code: 0000 0000 [ 649.393726][ T5984] ft260 0003:0403:6030.0015: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 649.528584][ T38] audit: type=1326 audit(1776219557.321:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16648 comm="syz.1.3035" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ee59dc819 code=0x0 [ 649.600639][ T5984] ft260 0003:0403:6030.0015: failed to retrieve status: -32, no wakeup [ 649.603493][ T5984] ft260 0003:0403:6030.0015: failed to retrieve status: -32 [ 649.752205][T16649] mkiss: ax0: crc mode is auto. [ 649.789971][ T5830] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 649.813230][ T1916] usb 1-1: USB disconnect, device number 17 [ 649.951895][ T5830] usb 3-1: config 69 has an invalid interface number: 110 but max is 1 [ 649.951926][ T5830] usb 3-1: config 69 has an invalid interface number: 110 but max is 1 [ 649.951942][ T5830] usb 3-1: config 69 has 1 interface, different from the descriptor's value: 2 [ 649.951957][ T5830] usb 3-1: config 69 has no interface number 0 [ 649.951977][ T5830] usb 3-1: config 69 interface 110 has no altsetting 0 [ 649.951987][ T5830] usb 3-1: config 69 interface 110 has no altsetting 1 [ 649.954270][ T5830] usb 3-1: New USB device found, idVendor=056c, idProduct=8100, bcdDevice=4a.c9 [ 649.954307][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.954329][ T5830] usb 3-1: Product: syz [ 649.954338][ T5830] usb 3-1: Manufacturer: syz [ 649.954345][ T5830] usb 3-1: SerialNumber: syz [ 650.191637][T16651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.194762][T16651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.245259][ T5830] cdc_subset 3-1:69.110: probe with driver cdc_subset failed with error -22 [ 650.264967][ T5830] usb 3-1: USB disconnect, device number 96 [ 650.392948][T16696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3040'. [ 650.629103][T16696] netlink: 41 bytes leftover after parsing attributes in process `syz.0.3040'. [ 650.629117][T16696] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3040'. [ 650.629129][T16696] netlink: 41 bytes leftover after parsing attributes in process `syz.0.3040'. [ 650.797263][ T5984] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 650.906363][T16708] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 650.951879][ T5984] usb 4-1: Using ep0 maxpacket: 16 [ 650.954309][ T5984] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 650.954341][ T5984] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 650.957287][ T5984] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 650.957317][ T5984] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.957338][ T5984] usb 4-1: Product: syz [ 650.957351][ T5984] usb 4-1: Manufacturer: syz [ 650.957360][ T5984] usb 4-1: SerialNumber: syz [ 650.966444][ T5984] usb 4-1: config 0 descriptor?? [ 650.994997][T16711] FAULT_INJECTION: forcing a failure. [ 650.994997][T16711] name failslab, interval 1, probability 0, space 0, times 0 [ 650.995031][T16711] CPU: 0 UID: 0 PID: 16711 Comm: syz.2.3044 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 650.995062][T16711] Tainted: [L]=SOFTLOCKUP [ 650.995069][T16711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 650.995081][T16711] Call Trace: [ 650.995088][T16711] [ 650.995096][T16711] dump_stack_lvl+0xe8/0x150 [ 650.995123][T16711] should_fail_ex+0x46b/0x600 [ 650.995149][T16711] should_failslab+0xa8/0x100 [ 650.995177][T16711] __kmalloc_noprof+0xdf/0x7b0 [ 650.995202][T16711] ? kfree+0x4d/0x6c0 [ 650.995222][T16711] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 650.995250][T16711] tomoyo_realpath_from_path+0xe3/0x5d0 [ 650.995272][T16711] ? tomoyo_domain+0xd7/0x130 [ 650.995299][T16711] ? tomoyo_path_number_perm+0x219/0x630 [ 650.995326][T16711] tomoyo_path_number_perm+0x246/0x630 [ 650.995356][T16711] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 650.995382][T16711] ? __lock_acquire+0x6b5/0x2cf0 [ 650.995407][T16711] ? do_raw_spin_lock+0x12b/0x2f0 [ 650.995458][T16711] ? __fget_files+0x2a/0x420 [ 650.995482][T16711] ? __fget_files+0x2a/0x420 [ 650.995502][T16711] ? __fget_files+0x3a6/0x420 [ 650.995522][T16711] ? __fget_files+0x2a/0x420 [ 650.995547][T16711] security_file_ioctl+0xc3/0x2a0 [ 650.995575][T16711] __se_sys_ioctl+0x47/0x170 [ 650.995601][T16711] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.995621][T16711] do_syscall_64+0x15f/0xf80 [ 650.995648][T16711] ? clear_bhb_loop+0x40/0x90 [ 650.995672][T16711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.995690][T16711] RIP: 0033:0x7efd7225c819 [ 650.995708][T16711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 650.995724][T16711] RSP: 002b:00007efd704ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 650.995743][T16711] RAX: ffffffffffffffda RBX: 00007efd724d5fa0 RCX: 00007efd7225c819 [ 650.995758][T16711] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 650.995770][T16711] RBP: 00007efd704ae090 R08: 0000000000000000 R09: 0000000000000000 [ 650.995783][T16711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 650.995795][T16711] R13: 00007efd724d6038 R14: 00007efd724d5fa0 R15: 00007fff10927f38 [ 650.995831][T16711] [ 651.002263][T16711] ERROR: Out of memory at tomoyo_realpath_from_path. [ 651.002385][T16711] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 651.005498][ T5984] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 651.005528][ T5984] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 651.159021][T16721] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3045'. [ 651.390488][T16729] netlink: 'syz.0.3047': attribute type 13 has an invalid length. [ 651.390513][T16729] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3047'. [ 651.394911][T16726] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 651.636250][ T5984] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 651.637221][ T5984] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 651.719959][ T5830] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 651.839968][T11695] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 651.869912][ T5830] usb 1-1: Using ep0 maxpacket: 32 [ 651.876312][ T5830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 651.876345][ T5830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 651.876383][ T5830] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 651.876407][ T5830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.928362][ T5830] usb 1-1: config 0 descriptor?? [ 651.990017][T11695] usb 3-1: Using ep0 maxpacket: 32 [ 651.992746][T11695] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 651.992776][T11695] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.006837][T11695] usb 3-1: config 0 descriptor?? [ 652.018005][T11695] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 652.044474][ T5984] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 652.044553][ T5984] em28xx 4-1:0.0: No AC97 audio processor [ 652.237663][T11695] gspca_vc032x: reg_w err -71 [ 652.237684][T11695] gspca_vc032x: I2c Bus Busy Wait 00 [ 652.237694][T11695] gspca_vc032x: I2c Bus Busy Wait 00 [ 652.237703][T11695] gspca_vc032x: I2c Bus Busy Wait 00 [ 652.237711][T11695] gspca_vc032x: I2c Bus Busy Wait 00 [ 652.237720][T11695] gspca_vc032x: I2c Bus Busy Wait 00 [ 652.237729][T11695] gspca_vc032x: I2c Bus Busy Wait 00 [ 652.237739][T11695] gspca_vc032x: I2c Bus Busy Wait 00 [ 652.237748][T11695] gspca_vc032x: I2c Bus Busy Wait 00 [ 652.237757][T11695] gspca_vc032x: I2c Bus Busy Wait 00 [ 652.237823][T11695] gspca_vc032x: I2c Bus Busy Wait 00 [ 652.237833][T11695] gspca_vc032x: I2c Bus Busy Wait 00 [ 652.237841][T11695] gspca_vc032x: I2c Bus Busy Wait 00 [ 652.237850][T11695] gspca_vc032x: I2c Bus Busy Wait 00 [ 652.237859][T11695] gspca_vc032x: I2c Bus Busy Wait 00 [ 652.237868][T11695] gspca_vc032x: I2c Bus Busy Wait 00 [ 652.237877][T11695] gspca_vc032x: I2c Bus Busy Wait 00 [ 652.237886][T11695] gspca_vc032x: I2c Bus Busy Wait 00 [ 652.237896][T11695] gspca_vc032x: I2c Bus Busy Wait 00 [ 652.237904][T11695] gspca_vc032x: Unknown sensor... [ 652.237982][T11695] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 652.250917][T11695] usb 3-1: USB disconnect, device number 97 [ 652.371312][ T5830] ft260 0003:0403:6030.0016: unknown main item tag 0x0 [ 652.371348][ T5830] ft260 0003:0403:6030.0016: unknown main item tag 0x0 [ 652.550931][T16733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3048'. [ 652.552842][ T5830] ft260 0003:0403:6030.0016: chip code: 0000 0000 [ 652.633739][T11695] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 652.756768][ T5830] ft260 0003:0403:6030.0016: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 652.788278][T11695] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 652.788308][T11695] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.788328][T11695] usb 3-1: Product: syz [ 652.788343][T11695] usb 3-1: Manufacturer: syz [ 652.788357][T11695] usb 3-1: SerialNumber: syz [ 652.796083][T11695] usb 3-1: config 0 descriptor?? [ 652.853909][T11695] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 652.956766][ T5830] ft260 0003:0403:6030.0016: failed to retrieve status: -32, no wakeup [ 652.957562][ T5830] ft260 0003:0403:6030.0016: failed to retrieve status: -32 [ 653.149946][ T5984] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 653.175396][ T5887] usb 1-1: USB disconnect, device number 18 [ 653.303575][ T5984] usb 2-1: config 1 has an invalid interface number: 78 but max is 0 [ 653.303604][ T5984] usb 2-1: config 1 has no interface number 0 [ 653.303633][ T5984] usb 2-1: config 1 interface 78 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 653.303685][ T5984] usb 2-1: config 1 interface 78 has no altsetting 0 [ 653.309173][ T5984] usb 2-1: New USB device found, idVendor=1b3d, idProduct=01ae, bcdDevice=9c.f6 [ 653.309191][ T5984] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.309203][ T5984] usb 2-1: Manufacturer: В [ 653.309211][ T5984] usb 2-1: SerialNumber: ﳿ [ 653.350723][T16780] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 653.586623][ T5887] usb 4-1: USB disconnect, device number 100 [ 653.588851][ T5887] em28xx 4-1:0.0: Disconnecting em28xx [ 653.806853][ T5984] ftdi_sio 2-1:1.78: FTDI USB Serial Device converter detected [ 653.810754][ T5984] ftdi_sio ttyUSB0: unknown device type: 0x9cf6 [ 653.862908][ T5984] usb 2-1: USB disconnect, device number 29 [ 653.923089][ T5984] ftdi_sio 2-1:1.78: device disconnected [ 653.953384][ T5887] em28xx 4-1:0.0: Freeing device [ 654.270067][ T5887] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 654.420357][ T5887] usb 4-1: Using ep0 maxpacket: 8 [ 654.425286][ T5887] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 654.425313][ T5887] usb 4-1: config 179 has no interface number 0 [ 654.425491][ T5887] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 654.425574][ T5887] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 654.425602][ T5887] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 654.425628][ T5887] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 654.425651][ T5887] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 654.426060][ T5887] usb 4-1: config 179 interface 65 has no altsetting 0 [ 654.426098][ T5887] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 654.426121][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.722105][T11695] gspca_sunplus: reg_r err -32 [ 654.722207][T11695] sunplus 3-1:0.0: probe with driver sunplus failed with error -32 [ 654.836703][T16845] FAULT_INJECTION: forcing a failure. [ 654.836703][T16845] name failslab, interval 1, probability 0, space 0, times 0 [ 654.836739][T16845] CPU: 0 UID: 0 PID: 16845 Comm: syz.1.3058 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 654.836765][T16845] Tainted: [L]=SOFTLOCKUP [ 654.836773][T16845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 654.836785][T16845] Call Trace: [ 654.836793][T16845] [ 654.836801][T16845] dump_stack_lvl+0xe8/0x150 [ 654.836829][T16845] should_fail_ex+0x46b/0x600 [ 654.836856][T16845] should_failslab+0xa8/0x100 [ 654.836886][T16845] kmem_cache_alloc_noprof+0x87/0x680 [ 654.836911][T16845] ? skb_clone+0x212/0x3a0 [ 654.836937][T16845] skb_clone+0x212/0x3a0 [ 654.836960][T16845] __netlink_deliver_tap+0x404/0x850 [ 654.837004][T16845] ? netlink_deliver_tap+0x2e/0x1b0 [ 654.837034][T16845] netlink_deliver_tap+0x19c/0x1b0 [ 654.837063][T16845] netlink_dump+0x8ed/0xe10 [ 654.837101][T16845] ? __pfx_netlink_dump+0x10/0x10 [ 654.837140][T16845] ? netlink_recvmsg+0x5d6/0xa50 [ 654.837166][T16845] ? kmem_cache_free+0x187/0x6c0 [ 654.837192][T16845] ? netlink_recvmsg+0x5d6/0xa50 [ 654.837224][T16845] netlink_recvmsg+0x690/0xa50 [ 654.837261][T16845] ? __pfx_netlink_recvmsg+0x10/0x10 [ 654.837293][T16845] ? __lock_acquire+0x6b5/0x2cf0 [ 654.837320][T16845] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 654.837339][T16845] ? security_socket_recvmsg+0x7e/0x2c0 [ 654.837364][T16845] ? __pfx_netlink_recvmsg+0x10/0x10 [ 654.837394][T16845] sock_recvmsg_nosec+0x10c/0x140 [ 654.837422][T16845] ____sys_recvmsg+0x3ef/0x4b0 [ 654.837457][T16845] ? __pfx_____sys_recvmsg+0x10/0x10 [ 654.837493][T16845] ? import_iovec+0x73/0xa0 [ 654.837520][T16845] ___sys_recvmsg+0x215/0x590 [ 654.837546][T16845] ? __pfx____sys_recvmsg+0x10/0x10 [ 654.837571][T16845] ? __fget_files+0x2a/0x420 [ 654.837621][T16845] do_recvmmsg+0x33a/0x800 [ 654.837650][T16845] ? __pfx_do_recvmmsg+0x10/0x10 [ 654.837679][T16845] ? rt_mutex_slowunlock+0x1cb/0x300 [ 654.837713][T16845] __x64_sys_recvmmsg+0x198/0x250 [ 654.837737][T16845] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 654.837766][T16845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.837788][T16845] do_syscall_64+0x15f/0xf80 [ 654.837811][T16845] ? trace_irq_disable+0x3b/0x140 [ 654.837833][T16845] ? clear_bhb_loop+0x40/0x90 [ 654.837858][T16845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.837877][T16845] RIP: 0033:0x7f0ee59dc819 [ 654.837896][T16845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 654.837912][T16845] RSP: 002b:00007f0ee3c2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 654.837932][T16845] RAX: ffffffffffffffda RBX: 00007f0ee5c55fa0 RCX: 00007f0ee59dc819 [ 654.837947][T16845] RDX: 0000000000000007 RSI: 0000200000006040 RDI: 0000000000000003 [ 654.837960][T16845] RBP: 00007f0ee3c2e090 R08: 0000000000000000 R09: 0000000000000000 [ 654.837972][T16845] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 654.837985][T16845] R13: 00007f0ee5c56038 R14: 00007f0ee5c55fa0 R15: 00007ffcc0995b38 [ 654.838016][T16845] [ 654.937804][T11695] usb 3-1: USB disconnect, device number 98 [ 655.186583][T16858] FAULT_INJECTION: forcing a failure. [ 655.186583][T16858] name failslab, interval 1, probability 0, space 0, times 0 [ 655.186618][T16858] CPU: 1 UID: 0 PID: 16858 Comm: syz.1.3059 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 655.186644][T16858] Tainted: [L]=SOFTLOCKUP [ 655.186651][T16858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 655.186662][T16858] Call Trace: [ 655.186669][T16858] [ 655.186677][T16858] dump_stack_lvl+0xe8/0x150 [ 655.186702][T16858] should_fail_ex+0x46b/0x600 [ 655.186728][T16858] should_failslab+0xa8/0x100 [ 655.186757][T16858] kmem_cache_alloc_noprof+0x87/0x680 [ 655.186782][T16858] ? skb_clone+0x212/0x3a0 [ 655.186806][T16858] skb_clone+0x212/0x3a0 [ 655.186828][T16858] __netlink_deliver_tap+0x404/0x850 [ 655.186867][T16858] ? netlink_deliver_tap+0x2e/0x1b0 [ 655.186896][T16858] netlink_deliver_tap+0x19c/0x1b0 [ 655.186924][T16858] netlink_sendskb+0x68/0x140 [ 655.186950][T16858] netlink_rcv_skb+0x2b6/0x4b0 [ 655.186979][T16858] ? __pfx_genl_rcv_msg+0x10/0x10 [ 655.187003][T16858] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 655.187043][T16858] ? netlink_deliver_tap+0x2e/0x1b0 [ 655.187071][T16858] ? netlink_deliver_tap+0x2e/0x1b0 [ 655.187102][T16858] genl_rcv+0x28/0x40 [ 655.187122][T16858] netlink_unicast+0x780/0x920 [ 655.187162][T16858] netlink_sendmsg+0x813/0xb40 [ 655.187207][T16858] ? __pfx_netlink_sendmsg+0x10/0x10 [ 655.187237][T16858] ? aa_sock_msg_perm+0x122/0x200 [ 655.187261][T16858] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 655.187285][T16858] ____sys_sendmsg+0x94c/0x9c0 [ 655.187311][T16858] ? __pfx_____sys_sendmsg+0x10/0x10 [ 655.187340][T16858] ? import_iovec+0x73/0xa0 [ 655.187367][T16858] ___sys_sendmsg+0x2a5/0x360 [ 655.187384][T16858] ? __lock_acquire+0x6b5/0x2cf0 [ 655.187414][T16858] ? __pfx____sys_sendmsg+0x10/0x10 [ 655.187467][T16858] ? __fget_files+0x2a/0x420 [ 655.187488][T16858] ? __fget_files+0x3a6/0x420 [ 655.187520][T16858] __x64_sys_sendmsg+0x1c3/0x2a0 [ 655.187543][T16858] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 655.187572][T16858] ? __pfx_ksys_write+0x10/0x10 [ 655.187606][T16858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.187628][T16858] do_syscall_64+0x15f/0xf80 [ 655.187652][T16858] ? trace_irq_disable+0x3b/0x140 [ 655.187674][T16858] ? clear_bhb_loop+0x40/0x90 [ 655.187698][T16858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.187717][T16858] RIP: 0033:0x7f0ee59dc819 [ 655.187735][T16858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 655.187751][T16858] RSP: 002b:00007f0ee3c2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 655.187770][T16858] RAX: ffffffffffffffda RBX: 00007f0ee5c55fa0 RCX: 00007f0ee59dc819 [ 655.187783][T16858] RDX: 0000000004004054 RSI: 0000200000000180 RDI: 0000000000000003 [ 655.187795][T16858] RBP: 00007f0ee3c2e090 R08: 0000000000000000 R09: 0000000000000000 [ 655.187805][T16858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 655.187815][T16858] R13: 00007f0ee5c56038 R14: 00007f0ee5c55fa0 R15: 00007ffcc0995b38 [ 655.187841][T16858] [ 655.233299][ T5887] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input28 [ 655.392120][ T5887] usb 4-1: USB disconnect, device number 101 [ 655.871331][ T1916] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 656.029897][ T1916] usb 2-1: Using ep0 maxpacket: 32 [ 656.034645][ T1916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 656.034678][ T1916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 656.034715][ T1916] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 656.034739][ T1916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.088882][ T1916] usb 2-1: config 0 descriptor?? [ 656.113189][T16907] comedi comedi3: 8255: I/O base address not correctly aligned [ 656.505333][ T1916] ft260 0003:0403:6030.0017: unknown main item tag 0x0 [ 656.505370][ T1916] ft260 0003:0403:6030.0017: unknown main item tag 0x0 [ 656.590162][ T5887] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 656.701359][T16878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3063'. [ 656.706807][ T1916] ft260 0003:0403:6030.0017: chip code: 0000 0000 [ 656.750571][ T5887] usb 1-1: unable to get BOS descriptor or descriptor too short [ 656.757863][ T5887] usb 1-1: config 1 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 656.757896][ T5887] usb 1-1: config 1 interface 0 has no altsetting 0 [ 656.771848][ T5887] usb 1-1: string descriptor 0 read error: -22 [ 656.771982][ T5887] usb 1-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.40 [ 656.772005][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.907843][ T1916] ft260 0003:0403:6030.0017: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 657.049962][T11695] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 657.108619][ T1916] ft260 0003:0403:6030.0017: failed to retrieve status: -32, no wakeup [ 657.109451][ T1916] ft260 0003:0403:6030.0017: failed to retrieve status: -32 [ 657.191462][ T5887] usbhid 1-1:1.0: can't add hid device: -32 [ 657.191536][ T5887] usbhid 1-1:1.0: probe with driver usbhid failed with error -32 [ 657.200088][T11695] usb 3-1: Using ep0 maxpacket: 32 [ 657.205192][T11695] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 657.205221][T11695] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.205240][T11695] usb 3-1: Product: syz [ 657.205254][T11695] usb 3-1: Manufacturer: syz [ 657.205269][T11695] usb 3-1: SerialNumber: syz [ 657.214290][T11695] usb 3-1: config 0 descriptor?? [ 657.318326][ T5887] usb 2-1: USB disconnect, device number 30 [ 657.547611][T16920] 9p: Bad value for 'version' [ 657.855811][T11695] peak_usb 3-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 658.120471][T16981] FAULT_INJECTION: forcing a failure. [ 658.120471][T16981] name failslab, interval 1, probability 0, space 0, times 0 [ 658.120516][T16981] CPU: 1 UID: 0 PID: 16981 Comm: syz.1.3076 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 658.120543][T16981] Tainted: [L]=SOFTLOCKUP [ 658.120551][T16981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 658.120563][T16981] Call Trace: [ 658.120571][T16981] [ 658.120580][T16981] dump_stack_lvl+0xe8/0x150 [ 658.120607][T16981] should_fail_ex+0x46b/0x600 [ 658.120633][T16981] should_failslab+0xa8/0x100 [ 658.120663][T16981] __kvmalloc_node_noprof+0x170/0x8e0 [ 658.120692][T16981] ? __kvm_mmu_topup_memory_cache+0x463/0x610 [ 658.120723][T16981] __kvm_mmu_topup_memory_cache+0x463/0x610 [ 658.120751][T16981] ? trace_irq_disable+0x3b/0x140 [ 658.120787][T16981] mmu_topup_memory_caches+0x21/0x170 [ 658.120813][T16981] kvm_mmu_load+0x9d/0x2320 [ 658.120845][T16981] ? kvm_apic_has_interrupt+0x4bd/0x770 [ 658.120876][T16981] ? vmx_recalc_intercepts+0xec4/0x1b10 [ 658.120912][T16981] vcpu_run+0x5c84/0x7860 [ 658.121010][T16981] ? __pfx_vcpu_run+0x10/0x10 [ 658.121037][T16981] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 658.121068][T16981] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 658.121109][T16981] kvm_arch_vcpu_ioctl_run+0x11e6/0x20d0 [ 658.121156][T16981] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 658.121185][T16981] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 658.121216][T16981] ? do_raw_spin_lock+0x12b/0x2f0 [ 658.121246][T16981] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 658.121272][T16981] ? lockdep_hardirqs_on+0x7a/0x110 [ 658.121296][T16981] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 658.121321][T16981] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 658.121348][T16981] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 658.121371][T16981] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 658.121396][T16981] ? lockdep_hardirqs_on+0x7a/0x110 [ 658.121421][T16981] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 658.121447][T16981] ? rt_write_unlock+0x190/0x230 [ 658.121471][T16981] kvm_vcpu_ioctl+0xa65/0xfe0 [ 658.121502][T16981] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 658.121548][T16981] ? __fget_files+0x2a/0x420 [ 658.121573][T16981] ? __fget_files+0x2a/0x420 [ 658.121594][T16981] ? __fget_files+0x3a6/0x420 [ 658.121615][T16981] ? __fget_files+0x2a/0x420 [ 658.121640][T16981] ? bpf_lsm_file_ioctl+0x9/0x20 [ 658.121663][T16981] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 658.121688][T16981] __se_sys_ioctl+0xff/0x170 [ 658.121716][T16981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.121739][T16981] do_syscall_64+0x15f/0xf80 [ 658.121770][T16981] ? trace_irq_disable+0x3b/0x140 [ 658.121791][T16981] ? clear_bhb_loop+0x40/0x90 [ 658.121815][T16981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.121834][T16981] RIP: 0033:0x7f0ee59dc819 [ 658.121854][T16981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 658.121870][T16981] RSP: 002b:00007f0ee3c2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 658.121891][T16981] RAX: ffffffffffffffda RBX: 00007f0ee5c55fa0 RCX: 00007f0ee59dc819 [ 658.121906][T16981] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 658.121918][T16981] RBP: 00007f0ee3c2e090 R08: 0000000000000000 R09: 0000000000000000 [ 658.121930][T16981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 658.121942][T16981] R13: 00007f0ee5c56038 R14: 00007f0ee5c55fa0 R15: 00007ffcc0995b38 [ 658.121974][T16981] [ 658.140104][ T10] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 658.142293][T11695] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 658.227197][T11695] usb 3-1: USB disconnect, device number 99 [ 658.329909][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 658.401058][ T10] usb 4-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice= 0.40 [ 658.401088][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.401107][ T10] usb 4-1: Product: syz [ 658.401121][ T10] usb 4-1: Manufacturer: syz [ 658.401135][ T10] usb 4-1: SerialNumber: syz [ 658.652186][T16954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 658.656177][T16954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 658.899080][T17009] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3081'. [ 659.000669][ T10] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 659.029419][ T10] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 659.053361][ T10] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 659.058881][ T10] usb 4-1: USB disconnect, device number 102 [ 659.371894][T11695] usb 1-1: USB disconnect, device number 19 [ 659.549992][ T10] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 659.699966][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 659.703613][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 659.703645][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 659.703683][ T10] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 659.703708][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.722567][ T10] usb 2-1: config 0 descriptor?? [ 660.159975][ T1916] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 660.162713][ T10] ft260 0003:0403:6030.0018: unknown main item tag 0x0 [ 660.162747][ T10] ft260 0003:0403:6030.0018: unknown main item tag 0x0 [ 660.330158][ T1916] usb 3-1: Using ep0 maxpacket: 8 [ 660.332947][ T1916] usb 3-1: unable to get BOS descriptor or descriptor too short [ 660.334154][ T1916] usb 3-1: config 7 has an invalid interface number: 150 but max is 0 [ 660.334178][ T1916] usb 3-1: config 7 has no interface number 0 [ 660.334208][ T1916] usb 3-1: config 7 interface 150 has no altsetting 0 [ 660.337458][ T1916] usb 3-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=2c.a5 [ 660.337485][ T1916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.337506][ T1916] usb 3-1: Product: syz [ 660.337521][ T1916] usb 3-1: Manufacturer: syz [ 660.337536][ T1916] usb 3-1: SerialNumber: syz [ 660.359264][T17037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3084'. [ 660.364532][ T10] ft260 0003:0403:6030.0018: chip code: 0000 0000 [ 660.565801][ T10] ft260 0003:0403:6030.0018: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 660.671213][ T1916] usb 3-1: USB disconnect, device number 100 [ 660.768575][ T10] ft260 0003:0403:6030.0018: failed to retrieve status: -32, no wakeup [ 660.770935][ T10] ft260 0003:0403:6030.0018: failed to retrieve status: -32 [ 660.779366][ T5830] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 660.969942][ T5830] usb 4-1: Using ep0 maxpacket: 16 [ 660.974119][ T5830] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 660.974150][ T5830] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.974171][ T5830] usb 4-1: Product: syz [ 660.974183][ T5830] usb 4-1: Manufacturer: syz [ 660.974191][ T5830] usb 4-1: SerialNumber: syz [ 660.990129][ T5830] usb 4-1: config 0 descriptor?? [ 661.028265][ T5830] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 661.038728][ T1916] usb 2-1: USB disconnect, device number 31 [ 661.465078][ T5830] usb 4-1: clie_3_5_startup: get interface number failed: -32 [ 661.465177][ T5830] visor 4-1:0.0: probe with driver visor failed with error -32 [ 661.700761][T17142] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 661.700781][T17142] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 661.701357][T17142] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 661.701370][T17142] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 663.582181][ T10] usb 4-1: USB disconnect, device number 103 [ 663.740016][ T5834] Bluetooth: hci2: command 0x0419 tx timeout [ 663.740417][T17129] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 664.348692][T17129] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 664.472436][T17129] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 664.562958][T17129] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 664.563034][T17129] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 664.624033][T17129] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 665.192780][T17181] netlink: 'syz.1.3108': attribute type 10 has an invalid length. [ 665.246551][T17190] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 665.247981][T17190] netlink: 'syz.1.3108': attribute type 10 has an invalid length. [ 665.283119][T17181] team0: Port device dummy0 added [ 665.325767][T17190] team0: Port device dummy0 removed [ 665.338661][T17190] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 665.360168][T11695] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 665.510521][T11695] usb 3-1: Using ep0 maxpacket: 32 [ 665.517660][T11695] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 665.517693][T11695] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 665.517730][T11695] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 665.517753][T11695] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.568756][T11695] usb 3-1: config 0 descriptor?? [ 665.820334][ T5834] Bluetooth: hci2: command 0x0419 tx timeout [ 665.824994][T17213] netlink: 'syz.0.3117': attribute type 13 has an invalid length. [ 665.825018][T17213] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3117'. [ 665.899292][T17215] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 665.902007][T17215] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 666.015592][T11695] ft260 0003:0403:6030.0019: unknown main item tag 0x0 [ 666.015627][T11695] ft260 0003:0403:6030.0019: unknown main item tag 0x0 [ 666.203965][T17184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3109'. [ 666.205071][T11695] ft260 0003:0403:6030.0019: chip code: 0000 0000 [ 666.269212][T17230] FAULT_INJECTION: forcing a failure. [ 666.269212][T17230] name failslab, interval 1, probability 0, space 0, times 0 [ 666.269246][T17230] CPU: 1 UID: 0 PID: 17230 Comm: syz.3.3121 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 666.269273][T17230] Tainted: [L]=SOFTLOCKUP [ 666.269280][T17230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 666.269292][T17230] Call Trace: [ 666.269300][T17230] [ 666.269309][T17230] dump_stack_lvl+0xe8/0x150 [ 666.269336][T17230] should_fail_ex+0x46b/0x600 [ 666.269362][T17230] should_failslab+0xa8/0x100 [ 666.269392][T17230] kmem_cache_alloc_noprof+0x87/0x680 [ 666.269417][T17230] ? __netlink_lookup+0xc6/0x8b0 [ 666.269436][T17230] ? skb_clone+0x212/0x3a0 [ 666.269461][T17230] skb_clone+0x212/0x3a0 [ 666.269485][T17230] __netlink_deliver_tap+0x404/0x850 [ 666.269525][T17230] ? netlink_deliver_tap+0x2e/0x1b0 [ 666.269554][T17230] netlink_deliver_tap+0x19c/0x1b0 [ 666.269585][T17230] netlink_unicast+0x754/0x920 [ 666.269622][T17230] netlink_sendmsg+0x813/0xb40 [ 666.269659][T17230] ? __pfx_netlink_sendmsg+0x10/0x10 [ 666.269690][T17230] ? aa_sock_msg_perm+0x122/0x200 [ 666.269713][T17230] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 666.269738][T17230] ? __pfx_netlink_sendmsg+0x10/0x10 [ 666.269762][T17230] sock_write_iter+0x4a1/0x4f0 [ 666.269787][T17230] ? __pfx_sock_write_iter+0x10/0x10 [ 666.269828][T17230] vfs_write+0x629/0xba0 [ 666.269858][T17230] ? __pfx_vfs_write+0x10/0x10 [ 666.269891][T17230] ? __fget_files+0x2a/0x420 [ 666.269921][T17230] ksys_write+0x156/0x270 [ 666.269950][T17230] ? __pfx_ksys_write+0x10/0x10 [ 666.269988][T17230] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.270010][T17230] do_syscall_64+0x15f/0xf80 [ 666.270036][T17230] ? trace_irq_disable+0x3b/0x140 [ 666.270057][T17230] ? clear_bhb_loop+0x40/0x90 [ 666.270082][T17230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.270101][T17230] RIP: 0033:0x7f395895c819 [ 666.270120][T17230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 666.270137][T17230] RSP: 002b:00007f3956bb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 666.270158][T17230] RAX: ffffffffffffffda RBX: 00007f3958bd5fa0 RCX: 00007f395895c819 [ 666.270172][T17230] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000003 [ 666.270185][T17230] RBP: 00007f3956bb6090 R08: 0000000000000000 R09: 0000000000000000 [ 666.270198][T17230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 666.270210][T17230] R13: 00007f3958bd6038 R14: 00007f3958bd5fa0 R15: 00007ffd6af644c8 [ 666.270240][T17230] [ 666.280623][T17230] netlink: 'syz.3.3121': attribute type 13 has an invalid length. [ 666.280645][T17230] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3121'. [ 666.370425][ T1916] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 666.406138][T11695] ft260 0003:0403:6030.0019: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 666.549851][ T1916] usb 2-1: Using ep0 maxpacket: 16 [ 666.577775][ T1916] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 230, changing to 11 [ 666.577810][ T1916] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2047, setting to 1024 [ 666.577852][ T1916] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 666.577878][ T1916] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 666.609511][T11695] ft260 0003:0403:6030.0019: failed to retrieve status: -32, no wakeup [ 666.610704][T11695] ft260 0003:0403:6030.0019: failed to retrieve status: -32 [ 666.623345][ T5822] Bluetooth: hci0: command 0x0c1a tx timeout [ 666.652925][ T1916] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 666.652954][ T1916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.652974][ T1916] usb 2-1: Product: 폦р抖ﰦ䣋羿징뷉㉇⍲痤쉶椁䶗첮竮睊䇫ワ躧ⷚ끱鑾῅鴶⸐훛뎘晄涔턲Ᶎ譿ࢢ暭됶퓲긵긲锈ꔁ።䈪䷣ꓩ敛ᅻ㻝⇻䜔ဂ즼䓂銊诅捛፩퓣 [ 666.653005][ T1916] usb 2-1: Manufacturer: ꋒ앧謅淸瑢ࡊꇾ֟칩蹡ⶱ쭲⅖뉎ﺡ뱅仜딒膑⾮䐒﫻쨍悖㘤늛㟎춰孔ㅊ풖㾀鷎⨘嚏鄼躘뷋涨᯻抨冎籧婿莍㤟戓嵋툇닁霅젌썞尣皹樕琀싙텡꜉듞⹧ᥜ폟퇹ꦛ膕룂螇逋◞毎옐쥆錔޿唡ᱽ䯵堏ﬞ풟홍攜㱱튙⦬뉜䀏ᚺ٣챁䔰⁠ [ 666.653036][ T1916] usb 2-1: SerialNumber: syz [ 666.743115][T17224] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 666.828246][T11695] usb 3-1: USB disconnect, device number 101 [ 667.151132][T17263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 667.151271][T17224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 667.153516][T17263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 667.155014][T17224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 667.157611][T17224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 667.158093][T17224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 667.161628][T17263] Invalid ELF header type: 2 != 1 [ 667.161760][T17224] Invalid ELF header type: 2 != 1 [ 667.327234][ T1916] cdc_ncm 2-1:1.0: bind() failure [ 667.343523][ T1916] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 667.343551][ T1916] cdc_ncm 2-1:1.1: bind() failure [ 667.364036][ T1916] usb 2-1: USB disconnect, device number 32 [ 667.859926][ T10] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 667.900622][ T5834] Bluetooth: hci2: command 0x0419 tx timeout [ 668.009915][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 668.013140][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 668.013183][ T10] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 668.013204][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.022240][ T10] usb 3-1: config 0 descriptor?? [ 668.501525][ T10] mcp2221 0003:04D8:00DD.001A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 668.707500][ T5822] Bluetooth: hci0: command 0x0c1a tx timeout [ 668.739936][ T1916] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 668.815213][ T5834] block nbd0: Receive control failed (result -32) [ 668.816522][ T5822] block nbd0: Receive control failed (result -32) [ 668.925720][T17298] nbd0: detected capacity change from 0 to 63 [ 668.952987][ T1916] usb 1-1: Using ep0 maxpacket: 32 [ 668.982615][ T5964] [ 668.982626][ T5964] ====================================================== [ 668.982634][ T5964] WARNING: possible circular locking dependency detected [ 668.982650][ T5964] syzkaller #0 Tainted: G L [ 668.982660][ T5964] ------------------------------------------------------ [ 668.982666][ T5964] udevd/5964 is trying to acquire lock: [ 668.982677][ T5964] ffff88803b5b2e60 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_queue_rq+0x37b/0x1100 [ 668.982727][ T5964] [ 668.982727][ T5964] but task is already holding lock: [ 668.982734][ T5964] ffff88804f2551f0 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100 [ 668.982772][ T5964] [ 668.982772][ T5964] which lock already depends on the new lock. [ 668.982772][ T5964] [ 668.982779][ T5964] [ 668.982779][ T5964] the existing dependency chain (in reverse order) is: [ 668.982787][ T5964] [ 668.982787][ T5964] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 668.982810][ T5964] mutex_lock_nested+0x5a/0x1d0 [ 668.982827][ T5964] nbd_queue_rq+0xc6/0x1100 [ 668.982845][ T5964] blk_mq_dispatch_rq_list+0xa77/0x1910 [ 668.982871][ T5964] __blk_mq_sched_dispatch_requests+0xddb/0x1610 [ 668.982903][ T5964] blk_mq_sched_dispatch_requests+0xda/0x1a0 [ 668.982928][ T5964] blk_mq_run_hw_queue+0x368/0x520 [ 668.982950][ T5964] blk_mq_dispatch_list+0xd1f/0xe20 [ 668.982972][ T5964] blk_mq_flush_plug_list+0x48d/0x570 [ 668.982999][ T5964] __blk_flush_plug+0x3ed/0x4d0 [ 668.983022][ T5964] __submit_bio+0x28d/0x580 [ 668.983044][ T5964] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 668.983066][ T5964] block_read_full_folio+0x599/0x830 [ 668.983084][ T5964] filemap_read_folio+0x137/0x3b0 [ 668.983101][ T5964] do_read_cache_folio+0x2bf/0x560 [ 668.983118][ T5964] read_part_sector+0xb8/0x2b0 [ 668.983140][ T5964] adfspart_check_ICS+0xb1/0x960 [ 668.983163][ T5964] bdev_disk_changed+0x817/0x1770 [ 668.983185][ T5964] blkdev_get_whole+0x2e5/0x480 [ 668.983206][ T5964] bdev_open+0x31e/0xcc0 [ 668.983228][ T5964] blkdev_open+0x485/0x620 [ 668.983244][ T5964] do_dentry_open+0x83d/0x13e0 [ 668.983262][ T5964] vfs_open+0x3b/0x350 [ 668.983278][ T5964] path_openat+0x2e43/0x38a0 [ 668.983300][ T5964] do_file_open+0x23e/0x4a0 [ 668.983321][ T5964] do_sys_openat2+0x113/0x200 [ 668.983337][ T5964] __x64_sys_openat+0x138/0x170 [ 668.983352][ T5964] do_syscall_64+0x15f/0xf80 [ 668.983373][ T5964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.983391][ T5964] [ 668.983391][ T5964] -> #5 (set->srcu){.+.+}-{0:0}: [ 668.983415][ T5964] __synchronize_srcu+0xca/0x300 [ 668.983436][ T5964] elevator_switch+0x1e8/0x7a0 [ 668.983458][ T5964] elevator_change+0x2cc/0x450 [ 668.983480][ T5964] elevator_set_default+0x36c/0x430 [ 668.983503][ T5964] blk_register_queue+0x3e9/0x4e0 [ 668.983518][ T5964] __add_disk+0x677/0xd50 [ 668.983534][ T5964] add_disk_fwnode+0xfb/0x480 [ 668.983551][ T5964] nbd_dev_add+0x72c/0xb50 [ 668.983566][ T5964] nbd_init+0x168/0x1f0 [ 668.983587][ T5964] do_one_initcall+0x250/0x870 [ 668.983603][ T5964] do_initcall_level+0x104/0x190 [ 668.983624][ T5964] do_initcalls+0x59/0xa0 [ 668.983642][ T5964] kernel_init_freeable+0x2a6/0x3e0 [ 668.983661][ T5964] kernel_init+0x1d/0x1d0 [ 668.983675][ T5964] ret_from_fork+0x514/0xb70 [ 668.983690][ T5964] ret_from_fork_asm+0x1a/0x30 [ 668.983706][ T5964] [ 668.983706][ T5964] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 668.983727][ T5964] mutex_lock_nested+0x5a/0x1d0 [ 668.983741][ T5964] elevator_change+0x1b3/0x450 [ 668.983760][ T5964] elevator_set_none+0xb5/0x140 [ 668.983780][ T5964] blk_mq_update_nr_hw_queues+0x607/0x1a80 [ 668.983794][ T5964] nbd_start_device+0x17f/0xb20 [ 668.983808][ T5964] nbd_genl_connect+0x1651/0x1c80 [ 668.983821][ T5964] genl_family_rcv_msg_doit+0x22a/0x330 [ 668.983839][ T5964] genl_rcv_msg+0x61c/0x7a0 [ 668.983854][ T5964] netlink_rcv_skb+0x232/0x4b0 [ 668.983873][ T5964] genl_rcv+0x28/0x40 [ 668.983893][ T5964] netlink_unicast+0x780/0x920 [ 668.983910][ T5964] netlink_sendmsg+0x813/0xb40 [ 668.983930][ T5964] ____sys_sendmsg+0x94c/0x9c0 [ 668.983944][ T5964] ___sys_sendmsg+0x2a5/0x360 [ 668.983957][ T5964] __x64_sys_sendmsg+0x1c3/0x2a0 [ 668.983970][ T5964] do_syscall_64+0x15f/0xf80 [ 668.983988][ T5964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.984002][ T5964] [ 668.984002][ T5964] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 668.984025][ T5964] blk_alloc_queue+0x54e/0x690 [ 668.984043][ T5964] __blk_mq_alloc_disk+0x197/0x390 [ 668.984056][ T5964] nbd_dev_add+0x499/0xb50 [ 668.984069][ T5964] nbd_init+0x168/0x1f0 [ 668.984087][ T5964] do_one_initcall+0x250/0x870 [ 668.984102][ T5964] do_initcall_level+0x104/0x190 [ 668.984121][ T5964] do_initcalls+0x59/0xa0 [ 668.984138][ T5964] kernel_init_freeable+0x2a6/0x3e0 [ 668.984157][ T5964] kernel_init+0x1d/0x1d0 [ 668.984170][ T5964] ret_from_fork+0x514/0xb70 [ 668.984183][ T5964] ret_from_fork_asm+0x1a/0x30 [ 668.984198][ T5964] [ 668.984198][ T5964] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 668.984218][ T5964] fs_reclaim_acquire+0x71/0x100 [ 668.984238][ T5964] kmem_cache_alloc_node_noprof+0x4b/0x6e0 [ 668.984257][ T5964] __alloc_skb+0x1d0/0x7d0 [ 668.984277][ T5964] tcp_stream_alloc_skb+0x3f/0x5c0 [ 668.984292][ T5964] tcp_sendmsg_locked+0x134b/0x5370 [ 668.984307][ T5964] tcp_sendmsg+0x2f/0x50 [ 668.984322][ T5964] sock_write_iter+0x40c/0x4f0 [ 668.984338][ T5964] vfs_write+0x629/0xba0 [ 668.984356][ T5964] ksys_write+0x156/0x270 [ 668.984374][ T5964] do_syscall_64+0x15f/0xf80 [ 668.984391][ T5964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.984405][ T5964] [ 668.984405][ T5964] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 668.984425][ T5964] lock_sock_nested+0x41/0x130 [ 668.984442][ T5964] inet_shutdown+0x6a/0x390 [ 668.984455][ T5964] nbd_mark_nsock_dead+0x2e9/0x560 [ 668.984470][ T5964] sock_shutdown+0x15e/0x260 [ 668.984483][ T5964] nbd_clear_sock+0x24/0x170 [ 668.984498][ T5964] nbd_config_put+0x2e3/0x580 [ 668.984511][ T5964] nbd_release+0x101/0x140 [ 668.984525][ T5964] bdev_release+0x541/0x660 [ 668.984546][ T5964] blkdev_release+0x15/0x20 [ 668.984558][ T5964] __fput+0x461/0xa70 [ 668.984573][ T5964] task_work_run+0x1d9/0x270 [ 668.984591][ T5964] exit_to_user_mode_loop+0xed/0x480 [ 668.984608][ T5964] do_syscall_64+0x33e/0xf80 [ 668.984626][ T5964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.984641][ T5964] [ 668.984641][ T5964] -> #0 (&nsock->tx_lock){+.+.}-{4:4}: [ 668.984660][ T5964] __lock_acquire+0x15a5/0x2cf0 [ 668.984677][ T5964] lock_acquire+0x106/0x350 [ 668.984693][ T5964] mutex_lock_nested+0x5a/0x1d0 [ 668.984707][ T5964] nbd_queue_rq+0x37b/0x1100 [ 668.984720][ T5964] blk_mq_dispatch_rq_list+0xa77/0x1910 [ 668.984741][ T5964] __blk_mq_sched_dispatch_requests+0xddb/0x1610 [ 668.984765][ T5964] blk_mq_sched_dispatch_requests+0xda/0x1a0 [ 668.984786][ T5964] blk_mq_run_hw_queue+0x368/0x520 [ 668.984804][ T5964] blk_mq_dispatch_list+0xd1f/0xe20 [ 668.984824][ T5964] blk_mq_flush_plug_list+0x48d/0x570 [ 668.984844][ T5964] __blk_flush_plug+0x3ed/0x4d0 [ 668.984864][ T5964] __submit_bio+0x28d/0x580 [ 668.984889][ T5964] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 668.984909][ T5964] block_read_full_folio+0x599/0x830 [ 668.984922][ T5964] filemap_read_folio+0x137/0x3b0 [ 668.984936][ T5964] do_read_cache_folio+0x2bf/0x560 [ 668.984950][ T5964] read_part_sector+0xb8/0x2b0 [ 668.984969][ T5964] adfspart_check_ICS+0xb1/0x960 [ 668.984989][ T5964] bdev_disk_changed+0x817/0x1770 [ 668.985008][ T5964] blkdev_get_whole+0x2e5/0x480 [ 668.985028][ T5964] bdev_open+0x31e/0xcc0 [ 668.985047][ T5964] blkdev_open+0x485/0x620 [ 668.985059][ T5964] do_dentry_open+0x83d/0x13e0 [ 668.985073][ T5964] vfs_open+0x3b/0x350 [ 668.985086][ T5964] path_openat+0x2e43/0x38a0 [ 668.985105][ T5964] do_file_open+0x23e/0x4a0 [ 668.985123][ T5964] do_sys_openat2+0x113/0x200 [ 668.985138][ T5964] __x64_sys_openat+0x138/0x170 [ 668.985152][ T5964] do_syscall_64+0x15f/0xf80 [ 668.985170][ T5964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.985184][ T5964] [ 668.985184][ T5964] other info that might help us debug this: [ 668.985184][ T5964] [ 668.985190][ T5964] Chain exists of: [ 668.985190][ T5964] &nsock->tx_lock --> set->srcu --> &cmd->lock [ 668.985190][ T5964] [ 668.985213][ T5964] Possible unsafe locking scenario: [ 668.985213][ T5964] [ 668.985218][ T5964] CPU0 CPU1 [ 668.985223][ T5964] ---- ---- [ 668.985228][ T5964] lock(&cmd->lock); [ 668.985238][ T5964] lock(set->srcu); [ 668.985249][ T5964] lock(&cmd->lock); [ 668.985260][ T5964] lock(&nsock->tx_lock); [ 668.985269][ T5964] [ 668.985269][ T5964] *** DEADLOCK *** [ 668.985269][ T5964] [ 668.985274][ T5964] 3 locks held by udevd/5964: [ 668.985283][ T5964] #0: ffff888026dd34c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 668.985323][ T5964] #1: ffff8880266df498 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x33e/0x520 [ 668.985362][ T5964] #2: ffff88804f2551f0 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100 [ 668.985396][ T5964] [ 668.985396][ T5964] stack backtrace: [ 668.985408][ T5964] CPU: 1 UID: 0 PID: 5964 Comm: udevd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 668.985429][ T5964] Tainted: [L]=SOFTLOCKUP [ 668.985435][ T5964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 668.985445][ T5964] Call Trace: [ 668.985451][ T5964] [ 668.985458][ T5964] dump_stack_lvl+0xe8/0x150 [ 668.985475][ T5964] print_circular_bug+0x2e1/0x300 [ 668.985499][ T5964] check_noncircular+0x12e/0x150 [ 668.985522][ T5964] __lock_acquire+0x15a5/0x2cf0 [ 668.985544][ T5964] ? __pfx___schedule+0x10/0x10 [ 668.985563][ T5964] ? irqentry_exit+0x1a6/0x680 [ 668.985582][ T5964] ? trace_irq_disable+0x3b/0x140 [ 668.985599][ T5964] ? nbd_queue_rq+0x37b/0x1100 [ 668.985614][ T5964] lock_acquire+0x106/0x350 [ 668.985632][ T5964] ? nbd_queue_rq+0x37b/0x1100 [ 668.985650][ T5964] ? nbd_queue_rq+0x37b/0x1100 [ 668.985667][ T5964] ? nbd_queue_rq+0x37b/0x1100 [ 668.985681][ T5964] mutex_lock_nested+0x5a/0x1d0 [ 668.985695][ T5964] ? nbd_queue_rq+0x37b/0x1100 [ 668.985712][ T5964] nbd_queue_rq+0x37b/0x1100 [ 668.985731][ T5964] ? __pfx_nbd_queue_rq+0x10/0x10 [ 668.985748][ T5964] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 668.985771][ T5964] blk_mq_dispatch_rq_list+0xa77/0x1910 [ 668.985797][ T5964] ? sbitmap_get+0x229/0x390 [ 668.985817][ T5964] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 668.985839][ T5964] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 668.985862][ T5964] __blk_mq_sched_dispatch_requests+0xddb/0x1610 [ 668.985896][ T5964] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 668.985919][ T5964] ? blk_mq_hw_queue_need_run+0x13c/0x690 [ 668.985942][ T5964] ? blk_mq_run_hw_queue+0x33e/0x520 [ 668.985962][ T5964] ? blk_mq_run_hw_queue+0x33e/0x520 [ 668.985984][ T5964] blk_mq_sched_dispatch_requests+0xda/0x1a0 [ 668.986007][ T5964] ? blk_mq_run_hw_queue+0x33e/0x520 [ 668.986027][ T5964] blk_mq_run_hw_queue+0x368/0x520 [ 668.986048][ T5964] blk_mq_dispatch_list+0xd1f/0xe20 [ 668.986070][ T5964] ? bdev_count_inflight+0x1cf/0x210 [ 668.986086][ T5964] ? blk_mq_dispatch_list+0x1b0/0xe20 [ 668.986109][ T5964] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 668.986132][ T5964] ? rcu_is_watching+0x15/0xb0 [ 668.986155][ T5964] blk_mq_flush_plug_list+0x48d/0x570 [ 668.986177][ T5964] ? blk_add_rq_to_plug+0x300/0x450 [ 668.986198][ T5964] ? blk_mq_submit_bio+0x1b66/0x29d0 [ 668.986219][ T5964] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 668.986245][ T5964] __blk_flush_plug+0x3ed/0x4d0 [ 668.986268][ T5964] ? __pfx___blk_flush_plug+0x10/0x10 [ 668.986289][ T5964] ? blkg_get+0x20/0x1d0 [ 668.986313][ T5964] __submit_bio+0x28d/0x580 [ 668.986336][ T5964] ? __pfx___submit_bio+0x10/0x10 [ 668.986360][ T5964] ? bio_associate_blkg+0x6d/0x230 [ 668.986385][ T5964] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 668.986408][ T5964] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 668.986436][ T5964] block_read_full_folio+0x599/0x830 [ 668.986453][ T5964] ? __pfx_blkdev_get_block+0x10/0x10 [ 668.986468][ T5964] filemap_read_folio+0x137/0x3b0 [ 668.986484][ T5964] ? __pfx_blkdev_read_folio+0x10/0x10 [ 668.986498][ T5964] ? __pfx_filemap_read_folio+0x10/0x10 [ 668.986513][ T5964] ? filemap_add_folio+0x3d9/0x610 [ 668.986536][ T5964] do_read_cache_folio+0x2bf/0x560 [ 668.986551][ T5964] ? __pfx_blkdev_read_folio+0x10/0x10 [ 668.986567][ T5964] read_part_sector+0xb8/0x2b0 [ 668.986589][ T5964] adfspart_check_ICS+0xb1/0x960 [ 668.986611][ T5964] ? seq_buf_printf+0x212/0x2d0 [ 668.986630][ T5964] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 668.986653][ T5964] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 668.986679][ T5964] bdev_disk_changed+0x817/0x1770 [ 668.986707][ T5964] ? __pfx_bdev_disk_changed+0x10/0x10 [ 668.986729][ T5964] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 668.986750][ T5964] blkdev_get_whole+0x2e5/0x480 [ 668.986773][ T5964] bdev_open+0x31e/0xcc0 [ 668.986797][ T5964] blkdev_open+0x485/0x620 [ 668.986813][ T5964] ? __pfx_blkdev_open+0x10/0x10 [ 668.986826][ T5964] do_dentry_open+0x83d/0x13e0 [ 668.986846][ T5964] vfs_open+0x3b/0x350 [ 668.986860][ T5964] ? path_openat+0x2e2b/0x38a0 [ 668.986881][ T5964] path_openat+0x2e43/0x38a0 [ 668.986915][ T5964] ? __pfx_path_openat+0x10/0x10 [ 668.986936][ T5964] ? kasan_save_track+0x4f/0x80 [ 668.986955][ T5964] ? kasan_save_track+0x3e/0x80 [ 668.986972][ T5964] ? __kasan_slab_alloc+0x6c/0x80 [ 668.986990][ T5964] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 668.987012][ T5964] ? do_raw_spin_lock+0x12b/0x2f0 [ 668.987032][ T5964] do_file_open+0x23e/0x4a0 [ 668.987051][ T5964] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 668.987072][ T5964] ? __pfx_do_file_open+0x10/0x10 [ 668.987091][ T5964] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 668.987115][ T5964] ? alloc_fd+0x64e/0x6c0 [ 668.987135][ T5964] do_sys_openat2+0x113/0x200 [ 668.987151][ T5964] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 668.987167][ T5964] ? __pfx_do_sys_openat2+0x10/0x10 [ 668.987185][ T5964] ? rcu_is_watching+0x15/0xb0 [ 668.987207][ T5964] __x64_sys_openat+0x138/0x170 [ 668.987225][ T5964] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.987240][ T5964] do_syscall_64+0x15f/0xf80 [ 668.987260][ T5964] ? clear_bhb_loop+0x40/0x90 [ 668.987276][ T5964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.987292][ T5964] RIP: 0033:0x7fbf11c43407 [ 668.987306][ T5964] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 668.987320][ T5964] RSP: 002b:00007ffdea447410 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 668.987336][ T5964] RAX: ffffffffffffffda RBX: 00007fbf11b55880 RCX: 00007fbf11c43407 [ 668.987348][ T5964] RDX: 00000000000a0800 RSI: 000055923fbeb570 RDI: ffffffffffffff9c [ 668.987359][ T5964] RBP: 000055923fbea910 R08: 0000000000000000 R09: 0000000000000000 [ 668.987369][ T5964] R10: 0000000000000000 R11: 0000000000000202 R12: 000055923fc0d4d0 [ 668.987379][ T5964] R13: 000055923fbf8190 R14: 0000000000000000 R15: 000055923fc0d4d0 [ 668.987396][ T5964] [ 668.987590][ T1916] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 668.987617][ T1916] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 668.987650][ T1916] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 668.987672][ T1916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.096453][ T1916] usb 1-1: config 0 descriptor?? [ 669.422435][ T5964] block nbd0: Dead connection, failed to find a fallback [ 669.422461][ T5964] block nbd0: shutting down sockets [ 669.422471][ T5964] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 669.422488][ T5964] Buffer I/O error on dev nbd0, logical block 0, async page read [ 669.449358][ T5964] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 669.449384][ T5964] Buffer I/O error on dev nbd0, logical block 1, async page read [ 669.462422][ T5964] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 669.462452][ T5964] Buffer I/O error on dev nbd0, logical block 2, async page read [ 669.488182][ T5964] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 669.488216][ T5964] Buffer I/O error on dev nbd0, logical block 3, async page read [ 669.502915][ T5964] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 669.502945][ T5964] Buffer I/O error on dev nbd0, logical block 0, async page read [ 669.503022][ T5964] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 669.503042][ T5964] Buffer I/O error on dev nbd0, logical block 1, async page read [ 669.503129][ T5964] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 669.503144][ T5964] Buffer I/O error on dev nbd0, logical block 2, async page read [ 669.503204][ T5964] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 669.503225][ T5964] Buffer I/O error on dev nbd0, logical block 3, async page read [ 669.503312][ T5964] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 669.503325][ T5964] Buffer I/O error on dev nbd0, logical block 0, async page read [ 669.503389][ T5964] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 669.503410][ T5964] Buffer I/O error on dev nbd0, logical block 1, async page read [ 669.656682][ T1916] ft260 0003:0403:6030.001B: unknown main item tag 0x0 [ 669.656717][ T1916] ft260 0003:0403:6030.001B: unknown main item tag 0x0 [ 669.703990][T17319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3135'. [ 669.734971][ T5964] ldm_validate_partition_table(): Disk read failed. [ 669.825189][ T1916] ft260 0003:0403:6030.001B: chip code: 0000 0000 [ 669.869638][ T5964] Dev nbd0: unable to read RDB block 0 [ 669.921682][ T5964] nbd0: unable to read partition table [ 669.929228][ T5964] ldm_validate_partition_table(): Disk read failed. [ 669.931667][ T5964] Dev nbd0: unable to read RDB block 0 [ 669.933437][ T5964] nbd0: unable to read partition table [ 669.956748][ T1916] ft260 0003:0403:6030.001B: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 669.970472][ T821] usb 3-1: USB disconnect, device number 102 [ 670.163587][ T1916] ft260 0003:0403:6030.001B: failed to retrieve status: -32, no wakeup [ 670.168919][ T1916] ft260 0003:0403:6030.001B: failed to retrieve status: -32 [ 670.709067][ T1916] usb 1-1: USB disconnect, device number 20 [ 670.780099][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 673.030972][ T151] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)