last executing test programs: 7.40829561s ago: executing program 1 (id=2402): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02060009020000"], 0x10}}, 0x2000) ioctl$DRM_IOCTL_PANTHOR_BO_MMAP_OFFSET(r0, 0xc0106446, &(0x7f00000000c0)) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000200081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a0000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfc, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000340)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000400)={0x0, 0x7, 0x1, "95"}, 0x66) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000380)={0x0, 0x8}, 0x8) r5 = socket(0x11, 0x2, 0x0) setsockopt(r5, 0x107, 0x1, &(0x7f0000000080)="010000000000060000071a80000001cc", 0x10) r6 = socket$inet(0x2, 0x3, 0x4) r7 = socket(0x2b, 0x80801, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x80102, 0x0) write$vhost_msg_v2(r7, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={'vxcan1\x00', {0x2, 0x4e33, @multicast1}}) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r8, 0x11c, 0x1, 0x0, &(0x7f0000000140)) sendmmsg$inet(r6, &(0x7f0000000280)=[{{&(0x7f0000000240)={0x2, 0x4e01, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00D \r'], 0x38}}], 0x1, 0x46000) r9 = syz_usb_connect(0x3, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures}) syz_usb_control_io$sierra_net(r9, 0x0, &(0x7f0000000bc0)={0x1c, &(0x7f00000003c0)={0x0, 0x9, 0x7, "447e5923634c87"}, 0x0, 0x0}) syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x109a00) 4.761727274s ago: executing program 0 (id=2419): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}, 0x0, 0x0, 0x34, 0x0, "f1f7882eade7f9ed59dd754ed3fa9513bc8d9662eaae6a87ea17d19cced73fca9d00b370eaefb2ecab4c20fb0d62c726cc3cb83d211da63fb4007c81ad7a2edac7859b8988028702e2027b84c554f86f"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty, 0x4}}, 0x0, 0x0, 0x19, 0x0, "01deaba05ccc4fa00711be66bd584ecd500428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd92a1d01c79"}, 0xd8) 4.667620595s ago: executing program 0 (id=2420): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f00000007c0)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, &(0x7f0000000480)={0x14, &(0x7f0000000280)={0x40, 0xb, 0xeb, {0xeb, 0x24, "a535385b117e79470fff160a7ac5e06b6e9af97ed104a52b3644bd422bf55a856cac8e5f128d205d5bb21fe1aa08c8080bef81f9d6443cfc597dd46fba8cfd11b2807337591c1f6eda9965028140cea0f5047d686c0b78af52a9d62cef84297f55ddeb7694ea49a6050457300d99db7e92b95010a9901a054547082c910928f3fe2470dca2963fac66af9b999282cf2760e13ff8f50de428621431974fdb27aa898de95ed6151976453c3c8bc62715a079646c58f05a6bb61a26432e5863f0fb7c0a94233ecc098d8c9dc7bd646af70dcb8d86d04267536e1de35dc4d2312d1ad5e440fa0b588cea6a"}}, &(0x7f0000000380)={0x0, 0x3, 0xdb, @string={0xdb, 0x3, "9611dce36f4e3f7c82cc543efb6d8fee0ab59a31fe9639f8031df3f30acd6267e64ba99b2857ca54ff454f563a8bf4ea91f24fc801c1dbdf6d40ecfd19ada8dd709a0c2be4ae05550b28c6f25db05f0f5f5c9cfbcb4d23dd6f96ff35c30cb9f5c837b392622cb0a8defe25faf589d5cc6f86b964f533303706b02efcd86164add9f361ade618b10d228f74810a919b970352d126bb629c96eb70d2a22547e0b4b178110c8b897e1e13b80a7bb59186b7bc75ed348e6736e7cce4f4d1d7b128bf1930ca72d22f711e69a7919eaeac4a2f47042e144e9789875e"}}}, &(0x7f00000007c0)={0x34, &(0x7f0000000540)={0x0, 0xf, 0xb0, "9925a1e1cc8673d3ab1889046804074115adab6be777cfac8bd273e42564e3cccbbdf308cd28569235d24093dfc00cdd73dbbdcb619407453cb3b2b12b23189ac44df2e2ca9e9b8078c7c37678067764c65a6fef3806631f092c8760effa1616ea99347a3161fcd75031eaabfd3bff396cb2a26557604eab2c5d65316b04f5e811a04e604d46c82ad623f60b50c8a86449e10379b56e6decee73aa2af0edfd3b05704eb537dd21b2e3c738d5623df4eb"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000800)={0x20, 0x0, 0x8d, {0x8b, "d99245eea612dfd4dec564f98443e5a69d8ced52707e37d15457b17a6a9dfb72ae971e8ecafec635513e6f0eb6e9661abac56fabe9cebb4625add9bd7f24f827a48ca379b8f8b5110eaf5193d77901c127458b517d6519f6a2d3796a4460f914253d10c09d7ec7aad3355b01ce843bf9e64103304558ef7ea7d64ca5ff37b10d1e68464a5cc81db1e2de46"}}, &(0x7f0000000740)={0x20, 0x1, 0x1}, &(0x7f0000000780)={0x20, 0x0, 0x1, 0xf}}) 4.187636415s ago: executing program 1 (id=2421): r0 = syz_ublk_setup_io_uring(0x22, &(0x7f0000000240)={0x0, 0xd61b, 0x400, 0x1, 0x295}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0, &(0x7f00000004c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f00000000c0)="2083b59a98d7a45158e9926428e31e0970e2310b69e3dc8ad466aea2a186edc0e0893e614cfb74c22aec32ed57f1face78c2f85ee186b19e9b", 0x39}, {&(0x7f0000000100)="e565c4aa71ba62926c83e6746fbe6e3db61f4bd67627098aae43f55e81aee39cedc80af8a595ae7ad9a5e5366c50a472670583a9a93ad6613ffe5d3f3bd17ab5a2c843b1563ca0c1da93c51dc610363e31317e345d237656507444d1717fdfcca819ba1917261d09c33e61a57b4723b572222b772108760b7b2d6b3f6f1534a6cbaeda896569c130763d034ad656d3a5c997f8ac22f7f6c8532a7302816a4f46a6e219b762a49024ba986f5a7aa837", 0xaf}, {&(0x7f0000000ac0)="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", 0x1000}, {&(0x7f0000001ac0)="90affae6e46ed07153eaeed586436bc24408a6c148f5244c5b37ed6ebc45b838c17f4fa65df49721891b48b99da0f77f8bdd5be1095befc8d8bed55d5699f5e118", 0x41}, {&(0x7f0000001b40)="6ccd4ae74ff1cce1352982e0940b02baa496e7114c283b41d6b690dd860584c3b1c1dc2f300a98c67630fc85bdffd347fe2b3e1523bb1043c8685cf92bd53d538b97eb54e2a1cdd68cde9c14f2fac41eb86b94f32109213f6ef81056ac30425fd80d95314dd423611a669a0bf4ed5b9cb92e0ed401222d996a995788fcbc792735a850f43e6534b41fce227649b0e9a598cacbec1d7874de1ffa4d197a6ae410db3bd5ffa1d83c95bcdf7814b4a8bdd799b6ed2f37a949848cad0796bcbf0d51029a57028dadf43ab1495eb78a413422c1b7cbd6725f934d706153", 0xdb}, {&(0x7f0000001c40)="1910215f529f7177fbd8b9d134a41c4559bbf8f83b3f147bc6afd284b1b28a1cbfb391bdc2fbcadbab0ec026b5896739678fc47c2852ead7066a1cfa4681299f9deb7ef1", 0x44}], 0x6, &(0x7f0000001dc0)=[{0xd8, 0x108, 0x10001, "5c56d9d00ce2841eb8f60de90fab41250f5564e6aa4058cecc31e7312242619054c05b5f6c7a340dcf19785b0eecee6819303d2ed925936aaf182b0d21e8f7ac88afba6bf8da4d2ce75e42734c46486f43b67a6e8ed460aa52085723ff0b7efba515eb4a1c74f368782917d243a885b185e8c116430514ff8aa51d9bf0b3864ec9f4870f3d6aed3e4c8b6197cbeec3e701bba8352386dd380c859a7429448ff6ed1a94ef84376284ac3df0d8d61ba0a80709605cebb2037a266be20bff21c1a1a1f820"}, {0x108, 0x116, 0x9, "b53fe7684638621f4bfe94ed7b3dd9ad8cad87bc8b89cf61e5e1a23db10d8ad16c597629ac54b1aac0c3f04d22efdcde8a8722163ffd8b70a419cbdfdcc598bcc71991a5759ba1ab79afcf0507e8daca45d5c306a36066a04fd63fdf185a2273f9f8f26edac5df231e3c113cff241122851debedd7301176d751d280d2d43b51ea5153a5b485f8be83713881ca001049d925e58336b13e8c463ff59d741279636d048e5252462eaaf581889ac5fd3b335e0e20bd79d51db2fc3423d48cc74b345a4cddd7c6b1013672133e338af1964ceabde65e4b6b92dbbc51a8242afe0f53493fdc0f678478ff607238844d152c6e93fb19"}, {0x70, 0xff, 0x2, "142c908ccec8385db82eefada2151fde9406f6a4fe9e9ef3876d84e103ca6a5fdbd1261dee00a422cfa2e083453342af2809628b3e8d1a45f2ae6ca2b9fe2f619eb58bb10e38d4a05bbd3e0162dcc6aab871a77ceecf1a0cae02306ff6"}, {0x58, 0x10a, 0x9, "3043fd511f402c157d7c0a3631eae2c7cfdd28ae7c4bd5e4d12511f84c1bd10c1d65cccf52ef55da433145bcecadaeaa7f8492da43a1292e8eb30fbc8bff343ae71d5b7f"}, {0x110, 0xff, 0x8, "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"}, {0x68, 0x1, 0x7, "24f42481a8192eb4b66c32158dd4d2e5f03f51c6244492450eb4ff820c1f869419e7b6113bebd38680ad8a128af02c4cbc20c59d864818017add374e174640a6310417c4f5b16a1f619736382a5d956e7b62b05fd753"}, {0x68, 0x11, 0xb, "7f5e132d602cf4b35e6ec0a469ad1c1f7a9217c24ab3a0ea4bc5d90467450a3e3a4d14284e549223439eb112b44c7b8c3e865ef693201cf0014999d661c962c63d7e3ffd2aa5168a0de9232eb367123d9057df5c4f258502"}, {0x40, 0x10e, 0x3, "2ff0aa69f1131d7771e0282867042d062c6ad9b51dc25981cbed2aa16f9cfa968939b4a9b843d26bc7e8d7d2c5e479"}], 0x4c8}, 0x0, 0x8005}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) 4.183575581s ago: executing program 1 (id=2422): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002dbd7000fbdbdf2502000004090001"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x22800, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r4, 0x2287, &(0x7f0000000040)=0x100) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r3, 0x205, 0x0, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x7}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x34}}, 0x4000000) 4.075427727s ago: executing program 1 (id=2423): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f62308197", 0x6a}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f919aef5179fa49c486a1a51c45c98c88683b15abf1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}], 0x1, 0x20048040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.019544925s ago: executing program 3 (id=2429): timer_create(0x5, &(0x7f0000000000)={0x0, 0x27, 0x4, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}}, &(0x7f00000000c0)) timer_create(0x2, &(0x7f0000001180)={0x0, 0x38, 0x1, @thr={&(0x7f0000000100)="459a336f0403a97001970f5b9ece7836c0c5de3799e3cdb477acbf2afdf0038abc1c6367039f61af5da90879e8a0ee35d9d533050eedb9193d3786caf8ae643c25cd8323843be2caf89832fefdd369b8af429d857fe648699243447e59a232ea4fbeeb80ea7bff9509", &(0x7f0000000180)="35b77ec23b11b0eb5f371ff645f48652a8b33d8f75f8cf14c425c0c68d99f0d6fbcdb3cf71e7741b5f07949a3794a47da2f13456eeb177cba3055adad0c95e5bbb030f3817963dc9f370082f166ea403f0aa8cc88360b7022de01dc06b75152179b9d5cbaafd72a150e5e6d8fcf435158beb1ff2ae41b3e0ec54925ec20e14885da0833ba57f226b9f471de40d917580a8c785867553ccd48ea02f9fb77d0faa84973a1b64848158703cfab260a9061a10cf479791a4b1f753548fb423d3c9ccf4a828680290599792031609fef4be3f85f8a089648b254c9a21da97758b0849c6082ac4803f00eb9e216e899b4755b3f0dbc835c7ae429991b116207991460fc88a689cde3b377a4a40401c7eca57ed6a56b7bed52281b0c07a45d84a15a58dbc67e465db7ff4dff22430dd96865b679a3e153f5199a032cb6eba924008a98f1632c12b1db146904a65c19237db746207c8e76b9a36757732c22dfd8592453e434273faf544274d583ff3b0c1d2a6544c89d4831ffcfe894c7169ad6ba424d47db3fbbf149ff8636861faf29758e1e899dc1022e99a9b270610ac2f1cfebe485fc48c938913f0422714286de43417cbeb92963c3b4f7065b04c9285ef8c8735480404876efadb8cf62fa4468cc23d3997cf67d9f5df237141dd52f73808fd63e98fe697c8154e4990f763b56676be02aa72dd930a1a736ff0a1cbdf8a3257b152bf54fff68d8d7933757ecb972550710cb98ef359fa9f9e7ee9a2ef7a28d2d0d60a44ec98aa5687bead335e16829c6f866acb218aa80318632d06fbd52fb85a646ea8ceee933626b2b1b72424834c28e8b865ac7bdb9cc67ac665569c8bc2a919868b237d4b22d4af52b973f10be4eef181d1e8f3c558eb731806814ab2a9a122ff58466a93185d91e10ca1421021c7c6b109ea718c6b9b68c33bcabbf6b39deca81527b827648e970f3fc39dc102aff2eb8d10f440151e2244d594e2fa569184c15e4039aef0c04b96248f7925a2122067f7b2c821dbc7e0888e6655a14b9bda1b0b0c58184ac2b85fc15f88ae88a62a6e165ceb95eadce9bf961b327621439ae58d41188b73e3aceb542b89914d68809956e5a4a784e0cdc329a29f60f2451935219084b29231a294f3a0e3396758c97793a878bdf7f0a89945a9ea1ecb6377b02f4b608b94a139d2b6a2422be2a9352da46f7d312dc8d7c9d230b56b9315b2515543e8b256e607bae3e321f3792c00d1446045fefbe24ef42b03899799a155d6e6ad68e8a44b0fa3f69c07a61944e0373ea9e00bc6e4cc4b734ca9eca037fa88dc269bb71cb5012a5673a52f59bb66d314b05e2d9f9751c50cc555e30045f266e682551b8e6e5d15f59767884ea21b59447d3d37373d32b44390339ef920c51c260b52c1844429da7a26be378ae478eb3df5a7f33f51d3658edd5e47f7e76ab7029f6fdbd712f1122d7b504a410dd63021c89188f1232f3e7043b810c6956c8520c4e07f337a10720ab665dc9a8915800e176fa724d30ef48b2ca8e19c50e7af0e5cbec60787e80c4eac1fa82176d555433a66d3fa854305b241d49adc3468892c9afc0aab613d5695695506dc9fce4045ae3e8751d4d0a9a95d0bf4c44f3644bddc0b9c86ba8f8252418625061f0c21f771556b000878169fcbccc0007eb288062d3d16317996836f98d0f61488f05f345802387d967b6681f3fe67d97341f1f692fb80014ee90a38fed03ad1f2c7c34fda48ae06018664973f49102a70a2739faf115695c81f3e5586a05565bfd1ce079897bd5ded0865a4351c71d4768d8d13f51c0b82d76013282c9e60f6ead3f7c8f6e085f9fa57c6a70f75a6dcc5ce34715a7682493cb954ceea685b23e7fd6337e9e6bb4614039ed85f58b17775a4208d662fb96add32cf5414da3187c6befe0cfaf1a9a2f1477f27802241ecbb5b62965cc5d9b7a67097313bd322025dcebf6fd04280eb782467f834ca484bf5d5efd0c961d0b8f368c34a8d96734c8dc7caed359a028d2f53d42b3c6052887ecf3b6c58fcea0c3ada2eb8e2f7ae6935ab56f7835e6adf094268b42503630bc6da45a21c0b581f85505e4aa3e77894da4486523c91f6635042140ec1956adb27c8ae71b7c2ecf915a57c009ee662540aa8e01d7fbbd83a6114928aff72408d5f47aef5a34fb3735f185ed94a65762c3b4aa23e7123bba2d39c6cd87e0f9ea6e950ba7a1d116ef357104d5e0e98c449f71e13b2af92adc07bf1fde40288617be804246e8aaa6b0070ef7dc59697e396ef60e215345a6f0a3e43c1acb25bd218f27ec09e7cd5c9bc930474fa77cb634ec2ec7d2a28e4b6fde6e5e1dae94c99b76ee2ee844f4f75fbfcea2e1e5d1065d16076e307407185a3c6e8f4eff36e32c3343dd526acfca28a753ba1814be582c85ed31375d32cf76f503f8d708d7cd3e3d2bfd8f0f38e09cc1d5fd8d20a2bdf03d9071ff3e0a35c2def2ef9bc5697abc7ca1e02635ed817b0f2d3945695e79c8ae748c01fc723c3f4712c4448cc5ee6e10792ae0d5a96ec51d0e5842b5af586c97dbf7c06f7dbcd4aefc59952d7b23fe96e2d413439f2250a8cded56ba9b9e1906dad9f94c2cc18707abba78da71ec235eb6abec2c3052776dfb947838557ee214db70bbc0648085908d594b3e1086c59247d73d8323fdc466a516cee4b1252bcecea46b67e02cfc4145aab84701ea7291cf75dd7a1aa2df3b63ab4cb43456f81b5d21ad86b0b968afe9bc38e770e88da7681034a36f9dc62d6963c08ca24f6f9823249d018559e93d1f46322a38cd13d24c06a6f3bade39ee0e770c843af7e31b1922ea833747982f085580c9c5277d5d8c9d8e954b05c5095b3798753c9e4388e940c38fe61654604c7ffd1b7e76f1a5a23b5181cb12ffecfa0e426407bc71c8c5e8a326cc575f5943999a92fbe004da4c361981250fa529a4e103d395046192ef47f7ec63055764ca1ed9600149508591b1e5756afc52e15f7bc46730a73cddecc883e7e9b40888a724446f5c6e54e69fbacae0bb9bb677167aede195834a7a4c6bbe5fbeee2b0e3d729eafde9b93b0da66464c8edf526d561b8b91c34689e482fa90d694e6aa8e4b31fb654a4c15886da41a483d60b07797c6059255aa5773b599737a4a5041aa59842ef639d3de87842d0c6a5e212329746efdaed06da942aa1eb9254f2aaca84c2c25a15dd67ed13a0167ef8a870766d1fa3b61d0224d84bbcd0185bda54233889a36cf5868d187564bbb834a0ebdb81a5484ab739b0cdee6e99884414217f3d5c1171a2135f9adb644f7ec0769193556d0ba3d40ec1da55c3b7423c6e7dea80940a66d4e41811383057dd57dde14849e1f8827d9c9e7d50193be57a1aa3375a5a4089a459eb7b608cdae2d46aed116e0f9d9f3b7c8f630de502a48ad903ab2d0bb986915841a2d4e5fbf5d820f86f8fb842d3a4df7a26e9ad3a2730e15d6fe27dee60d7df69540906f26c1290c54a622b37a40e42c60e0f919647ec8b2f14dc0e2f426291b4c9f5af31ca7780ec6f6c11868e02b65a29d2bef94fc875a6268c42ca5ff99530f78b88798c3d82e56105388d05a0845f1cc02d7881898f336e1131ad1bc4a6dd9b594f060711373c2ab975916e91eb7f0f4bbf34d30ed334bdd0e4c8ebd68977d48e58ddd53628b20267ae2454212145112c0a0d82f23af98218ad7aa8f64be499a32dad0cf398bf139efa1b5d2fb91da7a64469563ebd23e61048b2af6aedb7f8a105325896aa1872d83f8080046c7578d9eabf47a84a60824a07b8cc5d3cca33266f7e14f4852b9ef93d48f3d6d87270975363c1262d9744107c4f43e739e7d342070491d7f60f73679ec3616a4bac472091457008531950bca7712c6af390300abc40a201a8f2a17b8bec489a9639588fb1942db95a31cf4695fc8477bbf267d03723c23dbd9c7c8745fce694613378263495e2dba82bc91524efe2aa61dde5f601d2fb589496adea718bd3766a1d18f4f187abad1652e1c2fc65f50bced4f8521c85dab62005cb03c0bfb6f2b11da1767aeb32c7e1f237c429093a32880f58b14388062b62b067a2bb6397aa1a232f56744508e647bcf89c426711e3bcd1930b61fd9df62a98a58c58926ae81abba5663a8e776cb82a56cfe9b12394640651dd28697fbe3addb6ef55ab8ddb1e161ff7ddb1ba83716fac3304a31dd8eee9aaa1ef31bb9f0876e02608ffccdf85b638ed7eec7eab7a2e69cda72767ba56c60dd4fb7419dbf664885f5946ada9fa569d160d60cb7b05531fac35127ea1dc390d3e8ba66c4db1c9c0878968a063f2e2db140a5f53a39b2d7ef975a5d4c6feb63d7f19a1a873a0f28df54cc8fd24706fec778d48bf8788a873bb1ab3ed652a3313c725bbfe2b9985bef2498a67ac65f8a6b64c6b4e4f5c47920ece20b94b23a8a829ef0629b4ac42f770522ea9bf91a4cf862ac512965ed1c19850d7283d87b57d7f5c7c57402272756e2eb0f8fc63cb1d5340350b702ae7688a544469f35fef4afe4410c49f1fba9105f43ed245d975335cebaa5bb9b7bdf56369fea1d9bfb8ba4ca5e9a55343840ea64e61d2d6f5958fef0a457078c3ee8629d9b769ba977e583e20d68329c4ed07a94e272cd430ce9ff893421c643c78af8f1726a3e9732e7d0c94225450a6a34c5cf528e956134cd061a24dcd9ae5f6da3cd6cc50d94bc524e2189c364ab30e941dbcd7101f7346d7cec48aa9fb8df0af34667933f1b5a17aa8b72f4967792a24ffa8624d849e83c2c45c5374595d68cc54efcd02229fcdc8ded90ea80bebd9ced80ab5b41b7f9ccfddbfd2e2d1df76581b5f34d80b9c769bd058261da62c0bbc3324244d925ba0aa6f0607296d92043572d324bcc7d15b1e39d81beb2c76f6ea294a0b371a110065c4ea77d7a592577eba0e2e705a54312776e4f1d5be6a1f5fb1c701a8bbfdef0e2f92aed0ec0f3b21500d60458fa889a1f1eca83b9a10687adfbc43a083763ce593cc97433b531abdf05a71bb91db81abc76113015742f268043aa401c20093265bbe4fa6c6c053d650001200d740beeebf935decd510c51ce23ca3acd59083b3a2cf9747b1781cdc3c45249167e6801bd242de65a060154f087a13232d4753b7870982ab4fbb99d6591126042abdacc24e6bc9a126221def55bd8f31f4057ae1d33d2db243396ad2447ede7bb3d1bc1be97e674582c46d6ba5e45c59497b88ed281918ada64fa0c7d6e6118978c56f67d02b0433c2f351f77efd3ad122c077126aa4276b48740804b94904575bc3b92a55ca132b84e889c7d0e9b8ed01ff23b8523cf78733902cb8af89f03f30717a6e6babeaeef25f85a95001055da95bc5dce226f819668279f3ce242537ff72c03b29a3903763f6e41fb12f2cb695070edd9671bdcdb9143856d102dc7ec07abadfcb4563a3e94bcef925b2d3e9f66dcfadf80403d5afc397eff59aa55e4353e8c2d37853c00c9f80c62a6372f8c2368579ae155f43a2190fa4672f1efd965bc5604caa5ed352f208f6cc82fa7c18768e0d659b3864861dfd5ac6220d697cba295dfa6f74786552ce878e1b8efeeef9a88be0732863d27373a1d21f174e0eeaf531a558637f27d0749f6f39349528fc8833c423a05e902abfa5e64bff5d70ef8856ec794d32572143e00f6efd1fd6f79397ea27ace50afa40a42605c2c389779bf411795a9db43f4c5fdcd3d7839bd01bea7472d45781f694f87d74bdcd2e0579feb5fe11258f5d6da23eda5c404800d88426a07a36c9ba749f2edf9f870bc62f85c2"}}, &(0x7f00000011c0)=0x0) timer_delete(r1) (async) timer_create(0x1, &(0x7f0000001200)={0x0, 0x20, 0x4, @tid=0xffffffffffffffff}, &(0x7f0000001240)=0x0) timer_delete(r2) r3 = syz_usb_connect(0x5, 0x9a4, &(0x7f0000001280)={{0x12, 0x1, 0x110, 0x7e, 0x8f, 0x9, 0x40, 0x8086, 0xb63, 0x8cf2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x992, 0x3, 0x7f, 0x50, 0xd0, 0x4, "", [{{0x9, 0x4, 0x7c, 0x8, 0x6, 0x36, 0x87, 0xf4, 0xc8, [@uac_as={[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x2, 0x7, 0xff, "d79e8e"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x7b, 0x1, 0x80, 0x80, "6d2faa"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x8, 0xc, 0x60, "ed5d4f480a38"}]}], [{{0x9, 0x5, 0xd, 0x10, 0x40, 0x0, 0x0, 0x6, [@generic={0xf, 0x2, "3accfe1e52824589e7cda1872f"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x3, 0x8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x5}]}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x7, 0x81, 0x25, [@generic={0xd9, 0x31, "5ab8094c65823f3a70619fef0bcac879408c835d52a49837d10c3b2f7a3cc81136e3c241458052c3c57048586e3faa702c69e8c3912d037be1d38d2aab3ae3d99f5bc2ee2799fb57a443b87350ac1355d5e0e22472d6f24ae37e09e1376fdef9ae8c48cbcc089291e33b4981a3edecd7aa991ff3ef3db540a31e193705a0d16df634440b1d71a94fd161f4765d7b83854cd13dfd0eb5d736c20a78d45ef515b6cf16fc045df00fc17bdc797194e96108ae97991555fc20d6f95ff7a84a4bab5619222390fb1c57c4ba59c36df64a90adac24e092666ab4"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x8, 0x80, 0x7d, 0x9, [@generic={0x44, 0xe, "5d7b3a68e4010614c6a83ea70825c25405a1e4a27cc67ad2f25fdc81a675042c59f94f4d1dfe93437e501082e669b5659c926f5f51ad010f65ea21e169f48d427eb3"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x3ff, 0x65, 0x2, 0x8, [@generic={0x49, 0x0, "e567961d5e9f4b0552d9f91d58765c832e83131146163451e4d046be15edb3c9067928669b351d47e467cf99b17f332123e4107830a60c9adad6590ba8dc8bd27c58e5dc1fdb49"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x2, 0x1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xff, 0x3}]}}]}}, {{0x9, 0x4, 0xe3, 0x6, 0x3, 0xe, 0x55, 0x7b, 0x3, [@uac_as={[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9, 0x0, 0x9, 0xf, 0x4}]}], [{{0x9, 0x5, 0x8, 0x10, 0x10, 0x2, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9}]}}, {{0x9, 0x5, 0x4, 0xc, 0x3ff, 0x40, 0x7, 0x8, [@generic={0x89, 0x22, "2f82b646424e60d587765b1578af46fab5fe29c1cd75990c6ee064cab22ef09c5ea8791b4ebf5cb09881277f33b773d14dd8dc131789bcbc5e9df7ae47f3f45c69b455dfc1103a2e82a71bb644e84db5914770012084c39187d9182f78c828c8ec81521ff0b0b73b301bb37d1d5fd6eebe564b28d59804ea6b3f98b11a64b7ccf007c64c5544ec"}]}}, {{0x9, 0x5, 0x0, 0x4, 0x10, 0x6, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x390}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0xe}]}}]}}, {{0x9, 0x4, 0x7c, 0x9c, 0xc, 0xe0, 0x1, 0x1, 0xc5, [@uac_control={{0xa, 0x24, 0x1, 0xa, 0x3c}, [@processing_unit={0xc, 0x24, 0x7, 0x5, 0x0, 0xff, "230465322e"}, @extension_unit={0x7, 0x24, 0x8, 0x3, 0x0, 0x8}, @processing_unit={0x7, 0x24, 0x7, 0x5, 0x5, 0x8}, @mixer_unit={0xa, 0x24, 0x4, 0x5, 0x40, "7142d4ada6"}, @extension_unit={0x7, 0x24, 0x8, 0x4, 0x0, 0x3f}, @mixer_unit={0x7, 0x24, 0x4, 0x5, 0x0, 'O\x00'}]}], [{{0x9, 0x5, 0x5, 0x2, 0x200, 0x7, 0x7, 0x4, [@generic={0xb9, 0x23, "5c9d02cfb55c60c8c2c6342d75fde32459aa1d9b0302a968ccf3962b35849eb4920566e4e7cf2cbd25c6488267d7b4447560b433f253d16cf1273b29a029110a920491cf2ef144e30268779e3c913339c67241bd1dc102e2bb9007f5f01a383231c4f1797966e245da633af0fcf8f702acfe809c2e92d25c4ca38cd56e1d8180433ef6220f3ffb518c81b9e2a7a5ce331dc2e04d8f19b24ca6b13b7b57cd1804d6a3e82fb845f2579afd91065a4e0818135fdbc32e3273"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0x189}]}}, {{0x9, 0x5, 0x82, 0x8, 0x10, 0x7, 0x6, 0x6, [@generic={0xa1, 0x4, "4ccd8367e697494f5785cb0d6a1e7427be8b14f958760aba288adfb138041aba57ca85a9c41e11dbe3e1c7cc0eb5b28a29766ea944ec9e8f704b5358076466106c6f236f84e90f8711175e805c33679c95ba9a30dc941ccd2e6b2c99f9851bb62d78d2c4effebe5ff05d8664593047120f27036b85a84c51e2fe34d27de185e52c9210b17d3f9067970b2fd49c9a71cc75d5d3b8e34da74fe63d80eea6213e"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x20, 0x0, 0x4, 0x94, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xf3, 0x200}]}}, {{0x9, 0x5, 0x5, 0x2, 0x3ff, 0x9, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xf, 0x2}]}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0xea, 0x6, 0x4c, [@generic={0xeb, 0x585601d96875677a, "c45e662618048ff09a97d63068ea81fa1aaa14c635c393aed85483fb512e3b851dcec30446a568dcfa353652f21b62f3a3c94a422b4e51f2a3a2b7ba30213a91e295e99575fc3bf65f972cf9df53c0914cf1ceb8b9b37847dd96b9d780637ca3a47bb907c01d3a66a12b41fb671ab7ba4cc4468b7870b9b41863fb3b4fa3eccda79043332a6a8f894afd6117cec188d89c87613404ec04536c4095d9f072dcbfb87b52cd9dc43db3d17bb9b2f325520f8e9f3238668cba07ea1a7137d4dd754963809212f8820f38bef077f9b4795cc9e14dff42ec7b6af055a5148f8e291bad58c78056b3334b966e"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0xd9, 0x0, 0xd0, [@generic={0x21, 0xe, "c074e3b5284c5019e29b12074587c15efd1e59265ca2b5ef5169a0507fb914"}, @generic={0xb9, 0x3, "865021f4c166eb73d9fd5df1d422dd86560d5efa8140d9e659a3bd78ca5c410af0a9e9c1a3688997ad2fdb61190c12baddaeee0228faefe866b32b8cd166407a6ecd3dc1fb9598f74cd719f3b1b8116a3fd0cf90740e1492eb8b0680a1ba8ec4c0d05d0d881a3a473124ed696068d769e6d9516d27e9a2ef1c4f1f135efc7260d7259ef08f86ab08a0b6de8670b95533dc4508a91242e6f3fe97a690c5704f081b1f5d58573db2b2a93a1a59f44493e92ae9ff03b40f01"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0xe4, 0x9, 0x1, [@generic={0x72, 0x21, "68aa7472d229ba26a7e0ae96c4a4a811570705421a6b43f7c9c08e02d0f7122d797bc5bc4dbf3c0897eb9a3665699c83738552eebc556e42ce5a8684d2643a2df0235fd157b89d37433dced2aab70ae491ceeb32a588801a298dea83b25844a196dda0c0933131ea5456367505357630"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x3, 0x6, 0x40, [@generic={0x50, 0xc, "852357fd57eddcdbcb9322f2a62313e11f477d9229ed8b664694970927d37b36d80103669a57a93d665465fd69fee172094b3f4144f8b62fb39b8edadaba2fffd9521981742719c68a4e319c4e5e"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x30, 0x6, 0x3, [@generic={0xd, 0x24, "7301a8f87fb7b3d789db25"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0xa, 0x5, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x2e, 0xffff}, @generic={0xd8, 0xc, "79b7f5467a921f9bbf0cde1f0514419b875fb14f4881d0b16afd39928f12fdd281690d6b0844725abe002686566e9698c5f6a08ad189f807f67efc8660116cdb09c99b7ca24932f93ff838a8e62f0d19a0bf767389fa6e840cb335cebecd3580ba24dd74cdf9c024da8d14f5a4a63fc5622fefa08a3d6e58ae22104bb2da1bd0b6530d491b3ea20f7c9449f3bfa9b0270a8f6160f8af3c9bfcb6354a2fbfa6d8a7c2961708101799da8057e827fd373b76497d4b7b3950255c509cf0cc317cabbb3b65abb26e2f6cea966ef3d5cc8e1af8f18dd3e6b2"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x400, 0x6, 0x31, 0xf8, [@generic={0xf2, 0x4, "c4bc67cc94eef3cc85b5bac16a0435805a658b0a1f3b30f2c71220397057386448eeb31f4094fe2be6c3f6df4e4f06696d0444d171e1f5ce44521542abddd966207c245d35c425f71adecddd18afa41f47986d275a53178b0ee36a4d6eaf28422daafa25e13f101be953f562effe1fd4115a527a026ff0f7515c326a48aacf797a277b3b9f5fca77ae2c14599362a4914c9bb4be9cb33e051a8acf1717a60714e66b2cf41ba2e2bf10975491ad51cfc53229dcaba0193e6d55b730e92b63d1931f87e4a0e036ba243ec3a63c0c73c1a4726b1946404909261a954746ee4e034111b81821184ee1c979787611075e70b7"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x0, 0x0, 0xeb, 0x0, [@generic={0x4b, 0x6, "93f0a8ba1411b73f62eb830bb810a197dc041cc3252dc53908b8f9f02abf5824290eb7b8fde0d9ad2021560213ffd6730848574e2b73a377b81defaf6207a7917eff2a999e663f0820"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0xfff}]}}]}}]}}]}}, &(0x7f0000002100)={0xa, &(0x7f0000001c40)={0xa, 0x6, 0x310, 0xc, 0x8, 0x40, 0x20, 0xdc}, 0xf, &(0x7f0000001c80)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x3, 0x40, 0x1}]}, 0x8, [{0x4, &(0x7f0000001cc0)=@lang_id={0x4, 0x3, 0xf8ff}}, {0xf7, &(0x7f0000001d00)=@string={0xf7, 0x3, "cc824b5bd629f0c60183c011220e38e5dd3489758057dd2914b1bb8658e84fc69e700e55f1f6155892a372b0c75db44a97ffc3a836b7df06334d73d6574107bb171daaf4da441ee749a561a22714cb054b4abb3a804fc701fd3c412a022014a5ab7faa142f799e03aa9e747e8e96875c55bd81d5e74fbd250c468a0b8f2097f379e54d44aa5dacd45f6b2779c5aabd5baad7029155e6468e26c30f5d13ee1e65241bfac98a1b227283c0a098313b76e9db3689675ad6c86e7e75a89c330ff5be90d24b5b3157652bee8d264ed578e22b7243331b5d7dda4690423d622ec9589e6f274012a5d6698eb3079af099510821021aa710de"}}, {0x3c, &(0x7f0000001e00)=@string={0x3c, 0x3, "71857fd56673bb98e9ea414621e6021e4ef521f8455cbc4528b4b6a380f96a4028fefbb081d9af930949e309e2fc6f75b0657a220b2655e0283f"}}, {0xc4, &(0x7f0000001e40)=@string={0xc4, 0x3, "2a3efecf66cb6940735a2f5454558887a5385c2a1e7771807411ce4e94203d16b207d08a01825ecff0430ff0f847f3116b736855876a4c2a3bc040c7f1037d7cdf1562b69696dc7751d5cd3492dd46c07481da8eb47970b75db646c25b261b5dd3e9865aea1f6ea56b251825d4ad9ba71d249e570006cd032f1c637ee54d96d333131a9ca4b5f561a4ae143e41614a0087c6a39fb753eb0dd5973df26cb2346a650162956fa523a456cfe9fc500a0de0e1ee21c13d8dc867bfde784757ff9700c5a2"}}, {0x32, &(0x7f0000001f40)=@string={0x32, 0x3, "8f652d8a3003269fe7e4d468f16401766810811013ccf2a108a170e49bb18c0d55734dda1ddb54b784f0bf834521032e"}}, {0x35, &(0x7f0000001f80)=@string={0x35, 0x3, "c89670a9784e6b9c3eef636bb8ff5c93a3983d4a9ddec5b698f2f6c96a18d6673986761c83957b48df52008a3c654cf65c2a24"}}, {0xdd, &(0x7f0000001fc0)=@string={0xdd, 0x3, "35c7e1ac10bb43ac24cd857050241c261d2fefad70ba12c8abce95b8e818d60f8287127ef44a270f5098756b49bd4cf3c2f4b1e5f6812bce7b603a9ca04503a7794a2882ffea73f0b5e153a624749da55965c859201a73aeafc778ae5eeb9a7dd288992b3b3d51b6622fea26911e700dcd51ae2fd7ebdf86bae5819cca5e09c9d029db5b19627e4e2dd17a5236509b06a4fd7fd42cab2d8cdbd842d2722109838542da4bd6ad78416314985dfc6855624a108d97116b27a0545b6ffe49063390fe0be98605ef81e5910e3839d292cb8001c1a750cd87f6464963db"}}, {0x4, &(0x7f00000020c0)=@lang_id={0x4, 0x3, 0x436}}]}) syz_usb_control_io$cdc_ncm(r3, &(0x7f00000022c0)={0x14, &(0x7f0000002180)={0x0, 0x6, 0xea, {0xea, 0x22, "18c85c3c26b0bf527bcc970385b3c93d004b45e7f8aa75ab12cda4b77a454033c3922de96bd7b66eb08e534d9392d682a912b9970ff3f1eaf40250e642140d52eedde734be813fa4edcbf3d162854fec13285676f53d9dc9f55adab6f70a77034cabe0cedab7ffa5d99a9935e0100eaeec32a64a5533ef77b87b2bdbcbafdf881e2f08b38e278496c2c76d5192f1e75b05289f8f4995cd7d41a8b82832f24f2a13fac9bfcea46653a628eede6dbfa4fcfd85a230db4aef59be8f6846551c9e22e6904038512755a255f9a8fdef1c06eac7e1831e40bfdd46c82132b46b35f2937a8ea9a94651cf8d"}}, &(0x7f0000002280)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002500)={0x44, &(0x7f0000002300)={0x40, 0xf, 0x7, "bf90bbdad446d8"}, &(0x7f0000002340)={0x0, 0xa, 0x1}, &(0x7f0000002380)={0x0, 0x8, 0x1, 0xd}, &(0x7f00000023c0)={0x20, 0x80, 0x1c, {0x2, 0xa, 0x8, 0x0, 0xa, 0x6, 0xd4c3, 0x5f8, 0x5, 0xa, 0x81, 0x8}}, &(0x7f0000002400)={0x20, 0x85, 0x4, 0x9}, &(0x7f0000002440)={0x20, 0x83, 0x2}, &(0x7f0000002480)={0x20, 0x87, 0x2, 0x1}, &(0x7f00000024c0)={0x20, 0x89, 0x2}}) (async, rerun: 32) r4 = socket$key(0xf, 0x3, 0x2) (rerun: 32) sendmsg$key(r4, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000002580)={0x2, 0x11, 0x1, 0x9, 0xa, 0x0, 0x70bd2d, 0x25dfdbfb, [@sadb_lifetime={0x4, 0x4, 0x4, 0x32000000, 0x0, 0x9}, @sadb_lifetime={0x4, 0x4, 0x2, 0x8000000000000001, 0x35e3}]}, 0x50}}, 0x20000080) (async, rerun: 64) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 64) connect$inet6(r5, &(0x7f0000002680)={0xa, 0x4e24, 0x0, @private0, 0x6}, 0x1c) (async) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f00000026c0)={0x3b, 0xe, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x1000}, @jumbo={0xc2, 0x4, 0x1ce6fb36}, @pad1, @pad1, @padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xb}, @generic={0xff, 0x22, "9ec6e1018ad15c1d1578bf32b2047ae14b54f17b8a256d0ea32b66ff4f9b88a4bb6a"}, @calipso={0x7, 0x20, {0x2, 0x6, 0x2, 0x1000, [0x0, 0x9, 0x0]}}]}, 0x78) clock_gettime(0x0, &(0x7f0000002740)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f0000002780)={{}, {r6, r7+60000000}}, &(0x7f00000027c0)) (async, rerun: 32) r8 = syz_usb_connect$cdc_ncm(0x3, 0x9e, &(0x7f0000002800)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x2, 0x1, 0x5, 0x0, 0xf, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x3, 0x3, 0x8}, {0x6, 0x24, 0x1a, 0xb406, 0x8}, [@dmm={0x7, 0x24, 0x14, 0x200, 0x8000}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x75}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x80}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x95}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0xf3}, @mdlm={0x15, 0x24, 0x12, 0xffde}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x17}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x5, 0x0, 0xf}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x2, 0x4, 0x2}}}}}}}]}}, &(0x7f0000002a40)={0xa, &(0x7f00000028c0)={0xa, 0x6, 0x250, 0x1, 0x9, 0x7, 0x20, 0x1}, 0x3f, &(0x7f0000002900)={0x5, 0xf, 0x3f, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x1a, 0x9, 0x0, 0x5}, @ssp_cap={0x20, 0x10, 0xa, 0x1, 0x5, 0x0, 0xf0f, 0xffff, [0xc0c0, 0xf, 0x18, 0xf, 0xf]}, @ssp_cap={0x10, 0x10, 0xa, 0x6a, 0x1, 0x4, 0xf00f, 0x4, [0xff0000]}, @ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f0000002940)=@lang_id={0x4, 0x3, 0x240a}}, {0x12, &(0x7f0000002980)=@string={0x12, 0x3, "1337bc483cefd4f8c0cb9c8bf484b8d3"}}, {0x4, &(0x7f00000029c0)=@lang_id={0x4, 0x3, 0x1007}}, {0x4, &(0x7f0000002a00)=@lang_id={0x4, 0x3, 0x406}}]}) (rerun: 32) syz_usb_disconnect(r8) (async) lstat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) statx(0xffffffffffffff9c, &(0x7f0000002bc0)='./file0\x00', 0x0, 0x2, &(0x7f0000002c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) fsetxattr$system_posix_acl(r5, &(0x7f0000002ac0)='system.posix_acl_access\x00', &(0x7f0000002d00)={{}, {0x1, 0x6}, [{0x2, 0x1, r9}], {0x4, 0x5}, [{0x8, 0x0, r10}]}, 0x34, 0x1) (async) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x300000b, 0x50, r4, 0x100000) (async) bind$inet6(r5, &(0x7f0000002d40)={0xa, 0x4e20, 0x8, @remote, 0x1}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000002d80)='syz_tun\x00', 0x10) getsockopt$inet6_opts(r5, 0x29, 0x36, &(0x7f0000002dc0)=""/35, &(0x7f0000002e00)=0x23) (async, rerun: 32) ioctl$BTRFS_IOC_SYNC(r4, 0x9408, 0x0) (async, rerun: 32) r11 = openat$cgroup_ro(r4, &(0x7f0000002e40)='net_prio.prioidx\x00', 0x0, 0x0) (async) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000002e80)) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000002fc0)={0x14, &(0x7f0000002ec0)={0x0, 0xfc62ed950eab7794, 0x91, {0x91, 0x10, "38bb2aed0c4f03f89277deb7a1852c157293f5c03d452645d13180b24bd7b5ebf5bcc43e37e89aa7e80ab6661f7fbb4b0e7a4063b32feba98662c37bb64b29a210f57a0361251d0fd11eef7e96717aa4625cdf48c12d08d54a6f81744715b22e4ae579ad59c7eab5756ddef154c42d64e7ac3b829aed08d21b1048f91bbb2fe65c7ad872ec64e76d73e139ebaa6212"}}, &(0x7f0000002f80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000003280)={0x44, &(0x7f0000003000)={0x40, 0xd, 0x81, "ad700201426a432f37e493d3479402a2dbbbf2e83ef1395a43a31d65691ac25c804a43c4e35caae3881dd640f16a2f5694f6c1b8460658d55f6e1f3d52f7cb7f43c125525c83d2944fd049ffeb2741116e70bbae072a4c982a8e6dcc664e9200d2a6d645d3dac0a414e6839aa504f4a9cddf0b30f55885ff2347b79042382e08c0"}, &(0x7f00000030c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000003100)={0x0, 0x8, 0x1, 0x63}, &(0x7f0000003140)={0x20, 0x80, 0x1c, {0xc, 0x41d, 0x3ff, 0x3, 0x2, 0x3, 0xfff, 0x7, 0x5, 0x48, 0x6, 0x6}}, &(0x7f0000003180)={0x20, 0x85, 0x4, 0x10000}, &(0x7f00000031c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000003200)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000003240)={0x20, 0x89, 0x2, 0x1}}) (async) setsockopt$inet_mreq(r11, 0x0, 0x20, &(0x7f0000003300)={@multicast1, @loopback}, 0x8) fstat(r5, &(0x7f0000003340)) 3.007426319s ago: executing program 1 (id=2430): r0 = syz_ublk_setup_io_uring(0x22, &(0x7f0000000240)={0x0, 0xd61b, 0x400, 0x1, 0x295}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0, &(0x7f00000004c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f00000000c0)="2083b59a98d7a45158e9926428e31e0970e2310b69e3dc8ad466aea2a186edc0e0893e614cfb74c22aec32ed57f1face78c2f85ee186b19e9b", 0x39}, {&(0x7f0000000100)="e565c4aa71ba62926c83e6746fbe6e3db61f4bd67627098aae43f55e81aee39cedc80af8a595ae7ad9a5e5366c50a472670583a9a93ad6613ffe5d3f3bd17ab5a2c843b1563ca0c1da93c51dc610363e31317e345d237656507444d1717fdfcca819ba1917261d09c33e61a57b4723b572222b772108760b7b2d6b3f6f1534a6cbaeda896569c130763d034ad656d3a5c997f8ac22f7f6c8532a7302816a4f46a6e219b762a49024ba986f5a7aa837", 0xaf}, {&(0x7f0000000ac0)="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", 0x1000}, {&(0x7f0000001ac0)="90affae6e46ed07153eaeed586436bc24408a6c148f5244c5b37ed6ebc45b838c17f4fa65df49721891b48b99da0f77f8bdd5be1095befc8d8bed55d5699f5e118", 0x41}, {&(0x7f0000001b40)="6ccd4ae74ff1cce1352982e0940b02baa496e7114c283b41d6b690dd860584c3b1c1dc2f300a98c67630fc85bdffd347fe2b3e1523bb1043c8685cf92bd53d538b97eb54e2a1cdd68cde9c14f2fac41eb86b94f32109213f6ef81056ac30425fd80d95314dd423611a669a0bf4ed5b9cb92e0ed401222d996a995788fcbc792735a850f43e6534b41fce227649b0e9a598cacbec1d7874de1ffa4d197a6ae410db3bd5ffa1d83c95bcdf7814b4a8bdd799b6ed2f37a949848cad0796bcbf0d51029a57028dadf43ab1495eb78a413422c1b7cbd6725f934d706153", 0xdb}], 0x5, &(0x7f0000001dc0)=[{0xd8, 0x108, 0x10001, "5c56d9d00ce2841eb8f60de90fab41250f5564e6aa4058cecc31e7312242619054c05b5f6c7a340dcf19785b0eecee6819303d2ed925936aaf182b0d21e8f7ac88afba6bf8da4d2ce75e42734c46486f43b67a6e8ed460aa52085723ff0b7efba515eb4a1c74f368782917d243a885b185e8c116430514ff8aa51d9bf0b3864ec9f4870f3d6aed3e4c8b6197cbeec3e701bba8352386dd380c859a7429448ff6ed1a94ef84376284ac3df0d8d61ba0a80709605cebb2037a266be20bff21c1a1a1f820"}, {0x108, 0x116, 0x9, "b53fe7684638621f4bfe94ed7b3dd9ad8cad87bc8b89cf61e5e1a23db10d8ad16c597629ac54b1aac0c3f04d22efdcde8a8722163ffd8b70a419cbdfdcc598bcc71991a5759ba1ab79afcf0507e8daca45d5c306a36066a04fd63fdf185a2273f9f8f26edac5df231e3c113cff241122851debedd7301176d751d280d2d43b51ea5153a5b485f8be83713881ca001049d925e58336b13e8c463ff59d741279636d048e5252462eaaf581889ac5fd3b335e0e20bd79d51db2fc3423d48cc74b345a4cddd7c6b1013672133e338af1964ceabde65e4b6b92dbbc51a8242afe0f53493fdc0f678478ff607238844d152c6e93fb19"}, {0x70, 0xff, 0x2, "142c908ccec8385db82eefada2151fde9406f6a4fe9e9ef3876d84e103ca6a5fdbd1261dee00a422cfa2e083453342af2809628b3e8d1a45f2ae6ca2b9fe2f619eb58bb10e38d4a05bbd3e0162dcc6aab871a77ceecf1a0cae02306ff6"}, {0x58, 0x10a, 0x9, "3043fd511f402c157d7c0a3631eae2c7cfdd28ae7c4bd5e4d12511f84c1bd10c1d65cccf52ef55da433145bcecadaeaa7f8492da43a1292e8eb30fbc8bff343ae71d5b7f"}, {0x110, 0xff, 0x8, "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"}, {0x68, 0x1, 0x7, "24f42481a8192eb4b66c32158dd4d2e5f03f51c6244492450eb4ff820c1f869419e7b6113bebd38680ad8a128af02c4cbc20c59d864818017add374e174640a6310417c4f5b16a1f619736382a5d956e7b62b05fd753"}, {0x68, 0x11, 0xb, "7f5e132d602cf4b35e6ec0a469ad1c1f7a9217c24ab3a0ea4bc5d90467450a3e3a4d14284e549223439eb112b44c7b8c3e865ef693201cf0014999d661c962c63d7e3ffd2aa5168a0de9232eb367123d9057df5c4f258502"}, {0x40, 0x10e, 0x3, "2ff0aa69f1131d7771e0282867042d062c6ad9b51dc25981cbed2aa16f9cfa968939b4a9b843d26bc7e8d7d2c5e479"}], 0x4c8}, 0x0, 0x8005}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) 2.97436176s ago: executing program 2 (id=2431): socketpair(0x1, 0x20000000000001, 0x3, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xc, &(0x7f0000000180)=0x19ca, 0x4) (async) sendto$packet(r2, &(0x7f0000000400)="3f031c00e206001e008951c26259bc1654db02e4619b35fcf03c298c2be0f34039e41954c177a610d32a1663814bfb69297a38232891736dac90982081c20e33ac9683595c02de9097f2a758", 0x4c, 0x400c5, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7000fdffffff4400000008000300", @ANYRES32=r6, @ANYBLOB="040008010aef9a1800e102030a0303000034144eccfa12419777e700"/38], 0x2c}, 0x1, 0x0, 0x0, 0x40050}, 0x0) (async) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x7, 0x1, 0x6, 0x8, 0xfa1, 0x8c5f, 0xffffffffffff4e6f, 0x4}) (async) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async) r8 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) (async) fchdir(0xffffffffffffffff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x3) r9 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040ac05650200000000000109022400010000e00b0904000f020300020009210800fc012228000905810320049680fe"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) (async) syz_usb_control_io(r9, &(0x7f0000000b00)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="40242800000028231ba57fb04d4f185cd695f268e872852798b2974b1fc634f26cda14d95e6688adb139e26a4779"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r11, 0x147, 0x0, 0x0, {{}, {}, {0x3}}}, 0x30}}, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000003c0)={0x4, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r7, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000200), 0x2, r13}) ioctl$DRM_IOCTL_MODE_ATOMIC(r7, 0xc03864bc, &(0x7f0000000300)={0x200, 0x1, &(0x7f0000000180)=[r12], &(0x7f0000000340)=[0x1ff, 0x401, 0x1, 0x3], &(0x7f0000000580)=[r14], &(0x7f0000000040)}) bind$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x18, r3, 0x1, 0x6, 0x6, @multicast}, 0x14) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) 2.895224413s ago: executing program 1 (id=2432): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f00000007c0)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000480)={0x14, &(0x7f0000000280)={0x40, 0xb, 0xeb, {0xeb, 0x24, "a535385b117e79470fff160a7ac5e06b6e9af97ed104a52b3644bd422bf55a856cac8e5f128d205d5bb21fe1aa08c8080bef81f9d6443cfc597dd46fba8cfd11b2807337591c1f6eda9965028140cea0f5047d686c0b78af52a9d62cef84297f55ddeb7694ea49a6050457300d99db7e92b95010a9901a054547082c910928f3fe2470dca2963fac66af9b999282cf2760e13ff8f50de428621431974fdb27aa898de95ed6151976453c3c8bc62715a079646c58f05a6bb61a26432e5863f0fb7c0a94233ecc098d8c9dc7bd646af70dcb8d86d04267536e1de35dc4d2312d1ad5e440fa0b588cea6a"}}, &(0x7f0000000380)={0x0, 0x3, 0xdb, @string={0xdb, 0x3, "9611dce36f4e3f7c82cc543efb6d8fee0ab59a31fe9639f8031df3f30acd6267e64ba99b2857ca54ff454f563a8bf4ea91f24fc801c1dbdf6d40ecfd19ada8dd709a0c2be4ae05550b28c6f25db05f0f5f5c9cfbcb4d23dd6f96ff35c30cb9f5c837b392622cb0a8defe25faf589d5cc6f86b964f533303706b02efcd86164add9f361ade618b10d228f74810a919b970352d126bb629c96eb70d2a22547e0b4b178110c8b897e1e13b80a7bb59186b7bc75ed348e6736e7cce4f4d1d7b128bf1930ca72d22f711e69a7919eaeac4a2f47042e144e9789875e"}}}, &(0x7f00000007c0)={0x34, &(0x7f0000000540)={0x0, 0xf, 0xb0, "9925a1e1cc8673d3ab1889046804074115adab6be777cfac8bd273e42564e3cccbbdf308cd28569235d24093dfc00cdd73dbbdcb619407453cb3b2b12b23189ac44df2e2ca9e9b8078c7c37678067764c65a6fef3806631f092c8760effa1616ea99347a3161fcd75031eaabfd3bff396cb2a26557604eab2c5d65316b04f5e811a04e604d46c82ad623f60b50c8a86449e10379b56e6decee73aa2af0edfd3b05704eb537dd21b2e3c738d5623df4eb"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000800)={0x20, 0x0, 0x8d, {0x8b, "d99245eea612dfd4dec564f98443e5a69d8ced52707e37d15457b17a6a9dfb72ae971e8ecafec635513e6f0eb6e9661abac56fabe9cebb4625add9bd7f24f827a48ca379b8f8b5110eaf5193d77901c127458b517d6519f6a2d3796a4460f914253d10c09d7ec7aad3355b01ce843bf9e64103304558ef7ea7d64ca5ff37b10d1e68464a5cc81db1e2de46"}}, &(0x7f0000000740)={0x20, 0x1, 0x1}, &(0x7f0000000780)={0x20, 0x0, 0x1, 0xf}}) 2.795642879s ago: executing program 2 (id=2433): r0 = socket$kcm(0xa, 0x3, 0x87) unshare(0x22020600) (async) bind$packet(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x5, @dev={0xfe, 0x80, '\x00', 0x5e}, 0x0, 0x1}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000140)="1b40679a", 0x4}, {0x0}], 0x2}, 0x20040812) 2.73785637s ago: executing program 2 (id=2434): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f00001b0000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffb000/0x2000)=nil) syz_usb_connect$hid(0x4, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000000000010ff11"], 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x393}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r9 = dup(r8) write$tun(r9, 0x0, 0x0) dup(r7) r10 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) r11 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) syz_ublk_setup_queues(r11, r6, &(0x7f0000000480)={0x0, 0x18e2, 0x10000, 0x0, 0x1d2}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe90e, 0x200, 0x5, 0x41}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x216, 0x0, 0x2, 0x19b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x1, 0x1, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x800, 0x0, 0x231}}], 0x4, &(0x7f0000003900)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r5, '\x00', {0x3, 0xb66, 0x0, 0x0}}, 0x0) syz_ublk_setup_queues(r1, r6, &(0x7f0000000200)={0x0, 0x1463, 0x10f00, 0x2, 0xb2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31c, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x2000, 0x1, 0x2000008, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x68ea, 0x10, 0x0, 0x90, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x16e7, 0x20, 0x2, 0x40021a, 0x0, r1}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r5, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) r12 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r12, 0x65, 0x5, &(0x7f0000000080)=0x1, 0x4) r13 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r13, &(0x7f0000001280)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) socket$key(0xf, 0x3, 0x2) clock_nanosleep(0x2, 0x0, &(0x7f00000002c0), &(0x7f00000003c0)) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) 1.703862928s ago: executing program 2 (id=2435): syz_open_procfs(0x0, &(0x7f0000000100)='timerslack_ns\x00') 1.650432923s ago: executing program 2 (id=2436): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-serpent-avx\x00'}, 0x58) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000003f0009000000000000080000030000000400000010000180"], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x4) 1.569351455s ago: executing program 0 (id=2437): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x2000, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000050d00)={0x1, &(0x7f000009f2c0)=[{0xe000003, 0x0, 0x0, 0x9, 0x3}]}) 1.532010865s ago: executing program 2 (id=2438): r0 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(r0, &(0x7f0000004a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x100ff}}], 0x18}}], 0x1, 0x8450) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x44, 0x2, 0x3, 0x5, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x8}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x5}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x8}, @NFQA_CFG_MASK={0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1c}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}]}, 0x44}}, 0x40001) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYRES16=r1], 0x3c}, 0x1, 0x0, 0x0, 0x44000080}, 0x80) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000190081054e81f782db4cb9040220080000000000000000070a000a000900142603600e1208001e0000050401a8000500027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500bfeb789d00000000000000d5e1cace81ed6c117ab5d6d69bda4039e81f86f60f0bffece0b42a9ecbee5de6ccd40dd6e4edef3985000092954b43370e970392", 0xd8}], 0x1}, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 1.528366634s ago: executing program 0 (id=2439): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc", 0x6e}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f919aef5179fa49c486a1a51c45c98c88683b15abf1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}], 0x1, 0x20048040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.2793469s ago: executing program 3 (id=2440): r0 = syz_ublk_setup_io_uring(0x22, &(0x7f0000000240)={0x0, 0xd61b, 0x400, 0x1, 0x295}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0, &(0x7f00000004c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f00000000c0)="2083b59a98d7a45158e9926428e31e0970e2310b69e3dc8ad466aea2a186edc0e0893e614cfb74c22aec32ed57f1face78c2f85ee186b19e9b", 0x39}, {&(0x7f0000000100)="e565c4aa71ba62926c83e6746fbe6e3db61f4bd67627098aae43f55e81aee39cedc80af8a595ae7ad9a5e5366c50a472670583a9a93ad6613ffe5d3f3bd17ab5a2c843b1563ca0c1da93c51dc610363e31317e345d237656507444d1717fdfcca819ba1917261d09c33e61a57b4723b572222b772108760b7b2d6b3f6f1534a6cbaeda896569c130763d034ad656d3a5c997f8ac22f7f6c8532a7302816a4f46a6e219b762a49024ba986f5a7aa837", 0xaf}, {&(0x7f0000000ac0)="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", 0x1000}, {&(0x7f0000001ac0)="90affae6e46ed07153eaeed586436bc24408a6c148f5244c5b37ed6ebc45b838c17f4fa65df49721891b48b99da0f77f8bdd5be1095befc8d8bed55d5699f5e118", 0x41}], 0x4, &(0x7f0000001dc0)=[{0xd8, 0x108, 0x10001, "5c56d9d00ce2841eb8f60de90fab41250f5564e6aa4058cecc31e7312242619054c05b5f6c7a340dcf19785b0eecee6819303d2ed925936aaf182b0d21e8f7ac88afba6bf8da4d2ce75e42734c46486f43b67a6e8ed460aa52085723ff0b7efba515eb4a1c74f368782917d243a885b185e8c116430514ff8aa51d9bf0b3864ec9f4870f3d6aed3e4c8b6197cbeec3e701bba8352386dd380c859a7429448ff6ed1a94ef84376284ac3df0d8d61ba0a80709605cebb2037a266be20bff21c1a1a1f820"}, {0x108, 0x116, 0x9, "b53fe7684638621f4bfe94ed7b3dd9ad8cad87bc8b89cf61e5e1a23db10d8ad16c597629ac54b1aac0c3f04d22efdcde8a8722163ffd8b70a419cbdfdcc598bcc71991a5759ba1ab79afcf0507e8daca45d5c306a36066a04fd63fdf185a2273f9f8f26edac5df231e3c113cff241122851debedd7301176d751d280d2d43b51ea5153a5b485f8be83713881ca001049d925e58336b13e8c463ff59d741279636d048e5252462eaaf581889ac5fd3b335e0e20bd79d51db2fc3423d48cc74b345a4cddd7c6b1013672133e338af1964ceabde65e4b6b92dbbc51a8242afe0f53493fdc0f678478ff607238844d152c6e93fb19"}, {0x70, 0xff, 0x2, "142c908ccec8385db82eefada2151fde9406f6a4fe9e9ef3876d84e103ca6a5fdbd1261dee00a422cfa2e083453342af2809628b3e8d1a45f2ae6ca2b9fe2f619eb58bb10e38d4a05bbd3e0162dcc6aab871a77ceecf1a0cae02306ff6"}, {0x58, 0x10a, 0x9, "3043fd511f402c157d7c0a3631eae2c7cfdd28ae7c4bd5e4d12511f84c1bd10c1d65cccf52ef55da433145bcecadaeaa7f8492da43a1292e8eb30fbc8bff343ae71d5b7f"}, {0x110, 0xff, 0x8, "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"}, {0x68, 0x1, 0x7, "24f42481a8192eb4b66c32158dd4d2e5f03f51c6244492450eb4ff820c1f869419e7b6113bebd38680ad8a128af02c4cbc20c59d864818017add374e174640a6310417c4f5b16a1f619736382a5d956e7b62b05fd753"}, {0x68, 0x11, 0xb, "7f5e132d602cf4b35e6ec0a469ad1c1f7a9217c24ab3a0ea4bc5d90467450a3e3a4d14284e549223439eb112b44c7b8c3e865ef693201cf0014999d661c962c63d7e3ffd2aa5168a0de9232eb367123d9057df5c4f258502"}, {0x40, 0x10e, 0x3, "2ff0aa69f1131d7771e0282867042d062c6ad9b51dc25981cbed2aa16f9cfa968939b4a9b843d26bc7e8d7d2c5e479"}], 0x4c8}, 0x0, 0x8005}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) 1.18744997s ago: executing program 3 (id=2441): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x29, 0x3e, 0x0, &(0x7f0000000100)) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x40000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000001c0)={0xb, 0xcc, 0xe5}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r3, 0xc01864b0, &(0x7f0000000180)={0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffe}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000040)={0x0}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$BLKGETSIZE64(r6, 0x80081272, &(0x7f0000000440)) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r3, 0xc01864cd, &(0x7f0000000140)={&(0x7f0000000080)=[0x0, r4, 0x0, r5], &(0x7f0000000100)=[0xed, 0xe, 0x7fffffffffffffff, 0x8, 0x6, 0x3], 0x4, 0x1}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000", @ANYRES16=r2, @ANYBLOB="05022dbd7000fedbdf250a0000002c00028008000800020000000800040009000000080005000400000008000500000001000800080007000000080006000600000068000380140002006e65747063693000000000001d050000060004000200000014000200767863616e3100000000000000000000080001"], 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x4000004) r7 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) r14 = dup(r13) syz_ublk_setup_queues(r14, r12, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4, 0x0, r14}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x800, 0x0, 0x146, 0x0, r14}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x8c, 0x1, 0x0, 0x0, r14}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x10, 0x1, 0x9d7c}}], 0x1, &(0x7f0000001000)={0x2e, 0x4c, 0x0, r14, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r11, '\x00', {0xfffd, 0x5, 0x0, 0x0}}, 0x0) ioctl$KVM_GET_MSRS_sys(r14, 0xc008ae88, &(0x7f0000002240)={0x7, 0x0, [{0xf9, 0x0, 0x2}, {0xb55, 0x0, 0x5}, {0xa70, 0x0, 0x5}, {0xbc9, 0x0, 0xd4}, {0x805, 0x0, 0x9}, {0x868, 0x0, 0x1}, {0xa8a, 0x0, 0x4b}]}) ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0) r15 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') read$FUSE(r15, &(0x7f0000000200)={0x2020}, 0x2020) r16 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r16, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r16, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r16, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r16, &(0x7f0000006740)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x11, 0x0}}], 0x2, 0x2404c845) ioctl$VT_RESIZE(r15, 0x5609, &(0x7f0000000200)={0x7, 0x5, 0x9}) 518.108771ms ago: executing program 3 (id=2442): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'dummy0\x00', &(0x7f0000000280)=@ethtool_channels={0x2c, 0x0, 0x0, 0x0, 0x3, 0x7fffffff, 0x1, 0x2, 0xfffffffe}}) (fail_nth: 5) 164.707718ms ago: executing program 3 (id=2443): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'dummy0\x00', &(0x7f0000000280)=@ethtool_channels={0x16, 0x0, 0x0, 0x0, 0x3, 0x7fffffff, 0x1, 0x2, 0xfffffffe}}) 162.287378ms ago: executing program 0 (id=2444): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000002df31ab314000000000000000100000a0000000000000000"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 60.146453ms ago: executing program 3 (id=2445): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f00000007c0)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, &(0x7f0000000480)={0x14, &(0x7f0000000280)={0x40, 0xb, 0xeb, {0xeb, 0x24, "a535385b117e79470fff160a7ac5e06b6e9af97ed104a52b3644bd422bf55a856cac8e5f128d205d5bb21fe1aa08c8080bef81f9d6443cfc597dd46fba8cfd11b2807337591c1f6eda9965028140cea0f5047d686c0b78af52a9d62cef84297f55ddeb7694ea49a6050457300d99db7e92b95010a9901a054547082c910928f3fe2470dca2963fac66af9b999282cf2760e13ff8f50de428621431974fdb27aa898de95ed6151976453c3c8bc62715a079646c58f05a6bb61a26432e5863f0fb7c0a94233ecc098d8c9dc7bd646af70dcb8d86d04267536e1de35dc4d2312d1ad5e440fa0b588cea6a"}}, &(0x7f0000000380)={0x0, 0x3, 0xdb, @string={0xdb, 0x3, "9611dce36f4e3f7c82cc543efb6d8fee0ab59a31fe9639f8031df3f30acd6267e64ba99b2857ca54ff454f563a8bf4ea91f24fc801c1dbdf6d40ecfd19ada8dd709a0c2be4ae05550b28c6f25db05f0f5f5c9cfbcb4d23dd6f96ff35c30cb9f5c837b392622cb0a8defe25faf589d5cc6f86b964f533303706b02efcd86164add9f361ade618b10d228f74810a919b970352d126bb629c96eb70d2a22547e0b4b178110c8b897e1e13b80a7bb59186b7bc75ed348e6736e7cce4f4d1d7b128bf1930ca72d22f711e69a7919eaeac4a2f47042e144e9789875e"}}}, &(0x7f00000007c0)={0x34, &(0x7f0000000540)={0x0, 0xf, 0xb0, "9925a1e1cc8673d3ab1889046804074115adab6be777cfac8bd273e42564e3cccbbdf308cd28569235d24093dfc00cdd73dbbdcb619407453cb3b2b12b23189ac44df2e2ca9e9b8078c7c37678067764c65a6fef3806631f092c8760effa1616ea99347a3161fcd75031eaabfd3bff396cb2a26557604eab2c5d65316b04f5e811a04e604d46c82ad623f60b50c8a86449e10379b56e6decee73aa2af0edfd3b05704eb537dd21b2e3c738d5623df4eb"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000800)={0x20, 0x0, 0x8d, {0x8b, "d99245eea612dfd4dec564f98443e5a69d8ced52707e37d15457b17a6a9dfb72ae971e8ecafec635513e6f0eb6e9661abac56fabe9cebb4625add9bd7f24f827a48ca379b8f8b5110eaf5193d77901c127458b517d6519f6a2d3796a4460f914253d10c09d7ec7aad3355b01ce843bf9e64103304558ef7ea7d64ca5ff37b10d1e68464a5cc81db1e2de46"}}, &(0x7f0000000740)={0x20, 0x1, 0x1}, &(0x7f0000000780)={0x20, 0x0, 0x1, 0xf}}) 0s ago: executing program 0 (id=2446): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000003f0009000000000000080000030000000400000010000180"], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x4) kernel console output (not intermixed with test programs): alue: 3 [ 429.852218][ T10] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 429.852261][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 429.852278][ T10] usb 3-1: Product: syz [ 429.852289][ T10] usb 3-1: Manufacturer: syz [ 429.852300][ T10] usb 3-1: SerialNumber: syz [ 429.886676][ T10] usb 3-1: config 0 descriptor?? [ 429.941912][ T10] radio-si470x 3-1:0.0: could not find interrupt in endpoint [ 429.941974][ T10] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 429.942342][ T10] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 429.957729][T11137] IPVS: using max 9 ests per chain, 21600 per kthread [ 429.989194][ T5712] usb 2-1: device descriptor read/64, error -71 [ 430.008586][ T5777] usb 1-1: Using ep0 maxpacket: 16 [ 430.011853][ T5777] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 430.011889][ T5777] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 430.014488][ T5777] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 430.014517][ T5777] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.014539][ T5777] usb 1-1: Product: syz [ 430.014556][ T5777] usb 1-1: Manufacturer: syz [ 430.014574][ T5777] usb 1-1: SerialNumber: syz [ 430.061975][ T5777] usb 1-1: config 0 descriptor?? [ 430.095710][ T5777] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 430.095738][ T5777] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 430.099435][ T5712] usb usb2-port1: attempt power cycle [ 430.282111][T11139] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 430.282144][T11139] overlayfs: missing 'lowerdir' [ 430.325360][ T38] audit: type=1800 audit(1781128033.146:10): pid=11139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2106" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 430.459210][ T5712] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 430.481541][ T5712] usb 2-1: device descriptor read/8, error -71 [ 430.533076][T11146] FAULT_INJECTION: forcing a failure. [ 430.533076][T11146] name failslab, interval 1, probability 0, space 0, times 0 [ 430.533117][T11146] CPU: 0 UID: 0 PID: 11146 Comm: syz.3.2109 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 430.533149][T11146] Tainted: [L]=SOFTLOCKUP [ 430.533157][T11146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 430.533172][T11146] Call Trace: [ 430.533181][T11146] [ 430.533191][T11146] dump_stack_lvl+0xe8/0x150 [ 430.533229][T11146] should_fail_ex+0x46b/0x600 [ 430.533267][T11146] should_failslab+0xa8/0x100 [ 430.533306][T11146] __kmalloc_noprof+0xdf/0x7b0 [ 430.533329][T11146] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 430.533397][T11146] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 430.533442][T11146] genl_family_rcv_msg_doit+0xd9/0x330 [ 430.533486][T11146] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 430.533530][T11146] ? apparmor_capable+0x126/0x170 [ 430.533561][T11146] ? bpf_lsm_capable+0x9/0x20 [ 430.533591][T11146] ? security_capable+0x7e/0x2c0 [ 430.533641][T11146] genl_rcv_msg+0x61c/0x7a0 [ 430.533683][T11146] ? __pfx_genl_rcv_msg+0x10/0x10 [ 430.533716][T11146] ? __pfx_ieee802154_add_iface+0x10/0x10 [ 430.533768][T11146] netlink_rcv_skb+0x232/0x4b0 [ 430.533798][T11146] ? __pfx_genl_rcv_msg+0x10/0x10 [ 430.533834][T11146] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 430.533876][T11146] ? netlink_deliver_tap+0x2e/0x1b0 [ 430.533905][T11146] ? netlink_deliver_tap+0x2e/0x1b0 [ 430.533939][T11146] genl_rcv+0x28/0x40 [ 430.533970][T11146] netlink_unicast+0x780/0x920 [ 430.534007][T11146] netlink_sendmsg+0x813/0xb40 [ 430.534046][T11146] ? __pfx_netlink_sendmsg+0x10/0x10 [ 430.534077][T11146] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 430.534110][T11146] ? aa_sock_msg_perm+0x122/0x200 [ 430.534135][T11146] ? __pfx_netlink_sendmsg+0x10/0x10 [ 430.534162][T11146] sock_sendmsg_nosec+0x13a/0x180 [ 430.534200][T11146] ____sys_sendmsg+0x55c/0x870 [ 430.534234][T11146] ? __pfx_____sys_sendmsg+0x10/0x10 [ 430.534273][T11146] ? import_iovec+0x73/0xa0 [ 430.534301][T11146] ___sys_sendmsg+0x2a5/0x360 [ 430.534328][T11146] ? __lock_acquire+0x6b5/0x2d10 [ 430.534363][T11146] ? __pfx____sys_sendmsg+0x10/0x10 [ 430.534431][T11146] ? __fget_files+0x2a/0x420 [ 430.534454][T11146] ? __fget_files+0x3a6/0x420 [ 430.534490][T11146] __x64_sys_sendmsg+0x1b7/0x290 [ 430.534530][T11146] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 430.534579][T11146] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.534604][T11146] do_syscall_64+0x174/0x580 [ 430.534639][T11146] ? trace_irq_disable+0x3b/0x140 [ 430.534667][T11146] ? clear_bhb_loop+0x40/0x90 [ 430.534696][T11146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.534719][T11146] RIP: 0033:0x7f3b57b4ce59 [ 430.534741][T11146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 430.534761][T11146] RSP: 002b:00007f3b55d9e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 430.534787][T11146] RAX: ffffffffffffffda RBX: 00007f3b57dc5fa0 RCX: 00007f3b57b4ce59 [ 430.534804][T11146] RDX: 0000000000004080 RSI: 0000200000000200 RDI: 0000000000000004 [ 430.534820][T11146] RBP: 00007f3b55d9e090 R08: 0000000000000000 R09: 0000000000000000 [ 430.534835][T11146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.534849][T11146] R13: 00007f3b57dc6038 R14: 00007f3b57dc5fa0 R15: 00007ffe6f27a2b8 [ 430.534886][T11146] [ 430.766226][ T5777] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 430.799881][ T5777] em28xx 1-1:0.0: Config register raw data: 0x00 [ 430.937607][ T5712] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 430.960630][ T5712] usb 2-1: device descriptor read/8, error -71 [ 431.039862][T11150] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2111'. [ 431.067911][ T5712] usb usb2-port1: unable to enumerate USB device [ 432.429058][ T5712] usb 3-1: USB disconnect, device number 103 [ 432.530995][ T5705] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 432.578735][T11162] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 432.578821][ T10] IPVS: starting estimator thread 0... [ 432.638866][ T32] usb 1-1: USB disconnect, device number 83 [ 432.669875][T11163] IPVS: using max 8 ests per chain, 19200 per kthread [ 432.673994][ T32] em28xx 1-1:0.0: Disconnecting em28xx [ 432.692168][ T32] em28xx 1-1:0.0: Freeing device [ 432.727778][ T5705] usb 2-1: Using ep0 maxpacket: 32 [ 432.743972][ T5705] usb 2-1: config 0 has an invalid descriptor of length 101, skipping remainder of the config [ 432.759246][ T5705] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 432.759282][ T5705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.759307][ T5705] usb 2-1: Product: syz [ 432.759324][ T5705] usb 2-1: Manufacturer: syz [ 432.759340][ T5705] usb 2-1: SerialNumber: syz [ 432.785797][ T5705] usb 2-1: config 0 descriptor?? [ 432.817145][ T5705] cdc_ether 2-1:0.0: skipping garbage [ 432.817169][ T5705] usb 2-1: No union descriptors [ 432.830914][ T5705] usb 2-1: unsupported MDLM descriptors [ 432.997959][ T5777] usb 2-1: USB disconnect, device number 71 [ 433.088968][ T5712] usb 4-1: new full-speed USB device number 83 using dummy_hcd [ 433.149306][ T10] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 433.249844][ T5712] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 433.249902][ T5712] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 433.249933][ T5712] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 433.249960][ T5712] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 433.249977][ T5712] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 433.252414][ T5712] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 433.252444][ T5712] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 433.252468][ T5712] usb 4-1: Product: syz [ 433.252480][ T5712] usb 4-1: Manufacturer: syz [ 433.252491][ T5712] usb 4-1: SerialNumber: syz [ 433.266106][ T5712] usb 4-1: config 0 descriptor?? [ 433.297623][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 433.363671][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 433.365084][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 127, changing to 10 [ 433.377589][ T5776] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 433.390998][ T10] usb 1-1: New USB device found, idVendor=1235, idProduct=0002, bcdDevice= 0.40 [ 433.392832][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.393759][ T10] usb 1-1: Product: ࣦ쒵噺扁Ꮒ驄灨ꁐ৑춅㞌諊﴾ퟦ赅ᛀ⾜୫冄墳揆ᷫ蔮헑퓠䇎ԝꅘﾪ [ 433.394665][ T10] usb 1-1: Manufacturer: ࠉ [ 433.395567][ T10] usb 1-1: SerialNumber:  [ 433.522382][ T5712] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 433.523015][ T5712] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 433.587119][ T5712] usb 4-1: USB disconnect, device number 83 [ 433.589525][ T5776] usb 3-1: Using ep0 maxpacket: 16 [ 433.601431][ T5776] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 433.601466][ T5776] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 433.604516][ T5776] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 433.604538][ T5776] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.604595][ T5776] usb 3-1: Product: syz [ 433.604608][ T5776] usb 3-1: Manufacturer: syz [ 433.604619][ T5776] usb 3-1: SerialNumber: syz [ 433.722326][ T5776] usb 3-1: config 0 descriptor?? [ 433.782298][ T5776] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 433.782377][ T5776] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 433.887332][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 433.889963][ T10] usb 1-1: MIDIStreaming interface descriptor not found [ 434.087622][ T32] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 434.242037][T11188] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 434.249295][ T32] usb 2-1: Using ep0 maxpacket: 16 [ 434.265769][ T32] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 434.265801][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 434.296012][ T32] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 434.296047][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.296072][ T32] usb 2-1: Product: syz [ 434.296089][ T32] usb 2-1: Manufacturer: syz [ 434.296107][ T32] usb 2-1: SerialNumber: syz [ 434.333222][ T5776] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 434.349441][ T32] usb 2-1: config 0 descriptor?? [ 434.371739][ T32] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 434.371778][ T32] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 434.403423][ T10] usb 1-1: USB disconnect, device number 84 [ 434.574374][ T5776] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 434.574795][ T5776] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 434.574813][ T5776] em28xx 3-1:0.0: No AC97 audio processor [ 434.669161][ T5776] usb 3-1: USB disconnect, device number 104 [ 434.674956][ T5776] em28xx 3-1:0.0: Disconnecting em28xx [ 434.733753][ T5776] em28xx 3-1:0.0: Freeing device [ 434.757994][ T5733] usb 4-1: new full-speed USB device number 84 using dummy_hcd [ 434.914774][ T5733] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 434.914828][ T5733] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 434.914920][ T5733] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 434.914950][ T5733] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 434.914973][ T5733] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 434.970737][ T5733] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 434.986553][ T5733] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 434.986583][ T5733] usb 4-1: Product: syz [ 434.986601][ T5733] usb 4-1: Manufacturer: syz [ 434.986619][ T5733] usb 4-1: SerialNumber: syz [ 435.017029][ T32] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 435.024028][ T32] em28xx 2-1:0.0: Config register raw data: 0x00 [ 435.044537][ T5733] usb 4-1: config 0 descriptor?? [ 435.266575][ T5733] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 435.266606][ T5733] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 435.307542][ T10] usb 1-1: new full-speed USB device number 85 using dummy_hcd [ 435.460067][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 435.460128][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 435.460160][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 435.460188][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 435.460220][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 435.463685][ T10] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 435.463717][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 435.463742][ T10] usb 1-1: Product: syz [ 435.463759][ T10] usb 1-1: Manufacturer: syz [ 435.463777][ T10] usb 1-1: SerialNumber: syz [ 435.467111][ T5733] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 435.467147][ T5733] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 435.467170][ T5733] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 435.489061][ T10] usb 1-1: config 0 descriptor?? [ 435.668430][ T5733] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 435.806340][ T10] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 435.806680][ T10] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5 [ 436.047099][ T32] usb 1-1: USB disconnect, device number 85 [ 436.467211][T11204] FAULT_INJECTION: forcing a failure. [ 436.467211][T11204] name failslab, interval 1, probability 0, space 0, times 0 [ 436.467242][T11204] CPU: 1 UID: 0 PID: 11204 Comm: syz.2.2132 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 436.467265][T11204] Tainted: [L]=SOFTLOCKUP [ 436.467272][T11204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 436.467285][T11204] Call Trace: [ 436.467292][T11204] [ 436.467299][T11204] dump_stack_lvl+0xe8/0x150 [ 436.467324][T11204] should_fail_ex+0x46b/0x600 [ 436.467352][T11204] should_failslab+0xa8/0x100 [ 436.467399][T11204] __kmalloc_noprof+0xdf/0x7b0 [ 436.467421][T11204] ? kfree+0x4d/0x6c0 [ 436.467455][T11204] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 436.467486][T11204] tomoyo_realpath_from_path+0xe3/0x5d0 [ 436.467514][T11204] ? tomoyo_domain+0xd7/0x130 [ 436.467546][T11204] ? tomoyo_path_number_perm+0x219/0x630 [ 436.467581][T11204] tomoyo_path_number_perm+0x246/0x630 [ 436.467624][T11204] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 436.467648][T11204] ? __lock_acquire+0x6b5/0x2d10 [ 436.467672][T11204] ? do_raw_spin_lock+0x12b/0x2f0 [ 436.467713][T11204] ? __fget_files+0x2a/0x420 [ 436.467732][T11204] ? __fget_files+0x2a/0x420 [ 436.467748][T11204] ? __fget_files+0x3a6/0x420 [ 436.467763][T11204] ? __fget_files+0x2a/0x420 [ 436.467783][T11204] security_file_ioctl+0xc3/0x2a0 [ 436.467808][T11204] __se_sys_ioctl+0x47/0x170 [ 436.467850][T11204] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.467887][T11204] do_syscall_64+0x174/0x580 [ 436.467907][T11204] ? trace_irq_disable+0x3b/0x140 [ 436.467928][T11204] ? clear_bhb_loop+0x40/0x90 [ 436.467948][T11204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.467965][T11204] RIP: 0033:0x7f0b43fcce59 [ 436.467981][T11204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.467996][T11204] RSP: 002b:00007f0b42226028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 436.468014][T11204] RAX: ffffffffffffffda RBX: 00007f0b44245fa0 RCX: 00007f0b43fcce59 [ 436.468027][T11204] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000003 [ 436.468038][T11204] RBP: 00007f0b42226090 R08: 0000000000000000 R09: 0000000000000000 [ 436.468049][T11204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.468059][T11204] R13: 00007f0b44246038 R14: 00007f0b44245fa0 R15: 00007ffda231be48 [ 436.468090][T11204] [ 436.469189][T11204] ERROR: Out of memory at tomoyo_realpath_from_path. [ 436.539574][ T5733] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 436.540429][ T5733] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 436.694373][ T5733] usb 4-1: USB disconnect, device number 84 [ 436.853975][T11208] netlink: 'syz.2.2134': attribute type 10 has an invalid length. [ 436.854006][T11208] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2134'. [ 436.854530][T11208] veth1_macvtap: entered allmulticast mode [ 436.857268][T11208] bridge0: port 3(veth1_macvtap) entered blocking state [ 436.866042][T11208] bridge0: port 3(veth1_macvtap) entered disabled state [ 436.914170][ T5734] usb 2-1: USB disconnect, device number 72 [ 436.932482][ T5734] em28xx 2-1:0.0: Disconnecting em28xx [ 436.979221][ T5734] em28xx 2-1:0.0: Freeing device [ 436.980251][T11208] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 437.269288][ T10] usb 1-1: new full-speed USB device number 86 using dummy_hcd [ 437.420609][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 437.420665][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 437.420686][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 437.420707][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 437.420723][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 437.423204][ T10] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 437.423236][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 437.423252][ T10] usb 1-1: Product: syz [ 437.423264][ T10] usb 1-1: Manufacturer: syz [ 437.423275][ T10] usb 1-1: SerialNumber: syz [ 437.469257][ T10] usb 1-1: config 0 descriptor?? [ 437.511157][ T32] usb 4-1: new full-speed USB device number 85 using dummy_hcd [ 437.513907][ T5734] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 437.675949][ T10] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 437.676170][ T10] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5 [ 437.677704][ T5734] usb 2-1: Using ep0 maxpacket: 16 [ 437.711965][ T5734] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 437.712001][ T5734] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 437.715592][ T5734] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 437.715626][ T5734] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.715642][ T5734] usb 2-1: Product: syz [ 437.715653][ T5734] usb 2-1: Manufacturer: syz [ 437.715664][ T5734] usb 2-1: SerialNumber: syz [ 437.770202][ T32] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 437.770364][ T32] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 437.770434][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 437.770512][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 437.770587][ T32] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 437.812307][ T5734] usb 2-1: config 0 descriptor?? [ 437.844959][ T32] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 437.844984][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 437.845000][ T32] usb 4-1: Product: syz [ 437.845011][ T32] usb 4-1: Manufacturer: syz [ 437.845022][ T32] usb 4-1: SerialNumber: syz [ 437.890737][ T10] usb 1-1: USB disconnect, device number 86 [ 437.907201][ T5734] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 437.907239][ T5734] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 437.907562][ T32] usb 4-1: config 0 descriptor?? [ 438.135561][ T32] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 438.135937][ T32] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 438.317663][ T5777] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 438.341797][ T10] usb 4-1: USB disconnect, device number 85 [ 438.440482][ T5734] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 438.467564][ T5777] usb 3-1: Using ep0 maxpacket: 16 [ 438.470796][ T5777] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 438.470831][ T5777] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 438.474069][ T5777] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 438.474099][ T5777] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.474123][ T5777] usb 3-1: Product: syz [ 438.474140][ T5777] usb 3-1: Manufacturer: syz [ 438.474157][ T5777] usb 3-1: SerialNumber: syz [ 438.488631][ T5777] usb 3-1: config 0 descriptor?? [ 438.534151][ T5777] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 438.534257][ T5777] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 438.659312][ T5734] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 438.659745][ T5734] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 438.659766][ T5734] em28xx 2-1:0.0: No AC97 audio processor [ 438.703472][ T5734] usb 2-1: USB disconnect, device number 73 [ 438.731506][ T5734] em28xx 2-1:0.0: Disconnecting em28xx [ 438.734305][ T5734] em28xx 2-1:0.0: Freeing device [ 438.873481][T11233] wlan1 speed is unknown, defaulting to 1000 [ 439.128614][ T5777] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 439.129641][ T5777] em28xx 3-1:0.0: Config register raw data: 0x00 [ 439.462486][T11231] wlan1 speed is unknown, defaulting to 1000 [ 439.567748][ T32] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 439.743182][ T32] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 439.743236][ T32] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 439.743265][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 439.743295][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 439.743319][ T32] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 439.749324][ T32] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 439.749355][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 439.749375][ T32] usb 2-1: Product: syz [ 439.749390][ T32] usb 2-1: Manufacturer: syz [ 439.749404][ T32] usb 2-1: SerialNumber: syz [ 439.849712][ T32] usb 2-1: config 0 descriptor?? [ 440.097266][ T32] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 440.097296][ T32] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 440.135396][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.137094][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.297859][ T32] radio-si470x 2-1:0.0: software version 0, hardware version 0 [ 440.297888][ T32] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 440.297912][ T32] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 440.501143][ T32] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 440.834190][T11255] binder: 11254:11255 ioctl c0306201 200000000080 returned -14 [ 440.835900][T11255] FAULT_INJECTION: forcing a failure. [ 440.835900][T11255] name failslab, interval 1, probability 0, space 0, times 0 [ 440.835928][T11255] CPU: 1 UID: 0 PID: 11255 Comm: syz.0.2152 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 440.835951][T11255] Tainted: [L]=SOFTLOCKUP [ 440.835961][T11255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 440.835972][T11255] Call Trace: [ 440.835978][T11255] [ 440.835985][T11255] dump_stack_lvl+0xe8/0x150 [ 440.836012][T11255] should_fail_ex+0x46b/0x600 [ 440.836039][T11255] should_failslab+0xa8/0x100 [ 440.836060][T11255] __kmalloc_cache_noprof+0x84/0x690 [ 440.836078][T11255] ? binder_ioctl_write_read+0x1266/0xa470 [ 440.836099][T11255] binder_ioctl_write_read+0x1266/0xa470 [ 440.836117][T11255] ? is_bpf_text_address+0x26/0x2b0 [ 440.836193][T11255] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 440.836223][T11255] ? stack_depot_save_flags+0x33/0x810 [ 440.836266][T11255] ? do_raw_spin_lock+0x12b/0x2f0 [ 440.836303][T11255] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 440.836323][T11255] ? lockdep_hardirqs_on+0x7a/0x110 [ 440.836342][T11255] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 440.836362][T11255] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 440.836387][T11255] ? reacquire_held_locks+0x104/0x190 [ 440.836411][T11255] ? rt_spin_lock+0x1e0/0x400 [ 440.836449][T11255] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 440.836476][T11255] ? rt_spin_unlock+0x14f/0x200 [ 440.836527][T11255] ? binder_get_thread+0x177/0x6d0 [ 440.836546][T11255] binder_ioctl+0x426/0x1b10 [ 440.836562][T11255] ? tomoyo_path_number_perm+0x219/0x630 [ 440.836587][T11255] ? tomoyo_path_number_perm+0x219/0x630 [ 440.836613][T11255] ? do_vfs_ioctl+0x117b/0x1540 [ 440.836634][T11255] ? __pfx_binder_ioctl+0x10/0x10 [ 440.836650][T11255] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 440.836695][T11255] ? __fget_files+0x2a/0x420 [ 440.836713][T11255] ? __fget_files+0x2a/0x420 [ 440.836728][T11255] ? __fget_files+0x3a6/0x420 [ 440.836742][T11255] ? __fget_files+0x2a/0x420 [ 440.836760][T11255] ? bpf_lsm_file_ioctl+0x9/0x20 [ 440.836779][T11255] ? __pfx_binder_ioctl+0x10/0x10 [ 440.836795][T11255] __se_sys_ioctl+0xff/0x170 [ 440.836815][T11255] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.836833][T11255] do_syscall_64+0x174/0x580 [ 440.836852][T11255] ? trace_irq_disable+0x3b/0x140 [ 440.836871][T11255] ? clear_bhb_loop+0x40/0x90 [ 440.836890][T11255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.836906][T11255] RIP: 0033:0x7fc84820ce59 [ 440.836920][T11255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.836934][T11255] RSP: 002b:00007fc846466028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 440.836951][T11255] RAX: ffffffffffffffda RBX: 00007fc848485fa0 RCX: 00007fc84820ce59 [ 440.836963][T11255] RDX: 0000200000000780 RSI: 00000000c0306201 RDI: 0000000000000004 [ 440.836974][T11255] RBP: 00007fc846466090 R08: 0000000000000000 R09: 0000000000000000 [ 440.836984][T11255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.836994][T11255] R13: 00007fc848486038 R14: 00007fc848485fa0 R15: 00007ffda54fa3a8 [ 440.837020][T11255] [ 441.033485][T11257] binder: 11256:11257 ioctl c0306201 200000000080 returned -14 [ 441.191919][ T5776] usb 3-1: USB disconnect, device number 105 [ 441.226466][ T5776] em28xx 3-1:0.0: Disconnecting em28xx [ 441.308013][ T5776] em28xx 3-1:0.0: Freeing device [ 441.311369][ T32] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 441.311813][ T32] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 441.405339][ T32] usb 2-1: USB disconnect, device number 74 [ 441.687569][ T5776] usb 3-1: new full-speed USB device number 106 using dummy_hcd [ 441.757668][ T5733] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 441.851936][ T5776] usb 3-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 441.851979][ T5776] usb 3-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 441.856978][ T5776] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 441.857014][ T5776] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 441.857039][ T5776] usb 3-1: Manufacturer: syz [ 441.919250][ T5733] usb 4-1: Using ep0 maxpacket: 16 [ 441.922696][ T5733] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 441.922732][ T5733] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 441.948524][ T5733] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 441.948559][ T5733] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.948584][ T5733] usb 4-1: Product: syz [ 441.948601][ T5733] usb 4-1: Manufacturer: syz [ 441.948618][ T5733] usb 4-1: SerialNumber: syz [ 441.965277][ T5776] aiptek 3-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 442.009428][ T5733] usb 4-1: config 0 descriptor?? [ 442.026131][ T5733] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 442.026170][ T5733] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 442.133591][T11259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.135371][T11259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.177606][T11266] FAULT_INJECTION: forcing a failure. [ 442.177606][T11266] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 442.177647][T11266] CPU: 1 UID: 0 PID: 11266 Comm: syz.1.2157 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 442.177682][T11266] Tainted: [L]=SOFTLOCKUP [ 442.177690][T11266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 442.177704][T11266] Call Trace: [ 442.177713][T11266] [ 442.177724][T11266] dump_stack_lvl+0xe8/0x150 [ 442.177756][T11266] should_fail_ex+0x46b/0x600 [ 442.177792][T11266] _copy_from_user+0x2d/0xb0 [ 442.177817][T11266] do_set_thread_area+0xa9/0x6c0 [ 442.177848][T11266] ? __pfx_do_set_thread_area+0x10/0x10 [ 442.177881][T11266] ? rt_read_unlock+0x16d/0x220 [ 442.177910][T11266] arch_ptrace+0x26e/0x410 [ 442.177938][T11266] __se_sys_ptrace+0x150/0x3a0 [ 442.177966][T11266] ? __pfx___se_sys_ptrace+0x10/0x10 [ 442.177997][T11266] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.178022][T11266] do_syscall_64+0x174/0x580 [ 442.178047][T11266] ? trace_irq_disable+0x3b/0x140 [ 442.178075][T11266] ? clear_bhb_loop+0x40/0x90 [ 442.178102][T11266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.178124][T11266] RIP: 0033:0x7f1d5065ce59 [ 442.178145][T11266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.178165][T11266] RSP: 002b:00007f1d4e8b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 442.178189][T11266] RAX: ffffffffffffffda RBX: 00007f1d508d5fa0 RCX: 00007f1d5065ce59 [ 442.178206][T11266] RDX: 000000000000000c RSI: 00000000000001f0 RDI: 000000000000001a [ 442.178219][T11266] RBP: 00007f1d4e8b6090 R08: 0000000000000000 R09: 0000000000000000 [ 442.178233][T11266] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.178248][T11266] R13: 00007f1d508d6038 R14: 00007f1d508d5fa0 R15: 00007ffc87926d68 [ 442.178281][T11266] [ 442.277774][T11271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.293337][T11271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.330677][T11271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.336647][T11271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.365001][T11272] PKCS8: Unsupported PKCS#8 version [ 442.560007][T11277] FAULT_INJECTION: forcing a failure. [ 442.560007][T11277] name failslab, interval 1, probability 0, space 0, times 0 [ 442.560051][T11277] CPU: 0 UID: 0 PID: 11277 Comm: syz.1.2160 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 442.560074][T11277] Tainted: [L]=SOFTLOCKUP [ 442.560080][T11277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 442.560090][T11277] Call Trace: [ 442.560115][T11277] [ 442.560125][T11277] dump_stack_lvl+0xe8/0x150 [ 442.560161][T11277] should_fail_ex+0x46b/0x600 [ 442.560197][T11277] should_failslab+0xa8/0x100 [ 442.560228][T11277] __kmalloc_cache_noprof+0x84/0x690 [ 442.560247][T11277] ? iopt_alloc_pages+0x85/0x4a0 [ 442.560265][T11277] ? rt_spin_unlock+0x160/0x200 [ 442.560319][T11277] iopt_alloc_pages+0x85/0x4a0 [ 442.560350][T11277] iopt_alloc_user_pages+0x42/0xe0 [ 442.560377][T11277] iopt_map_user_pages+0x4e/0xd0 [ 442.560415][T11277] iommufd_ioas_map+0x397/0x4d0 [ 442.560438][T11277] ? __pfx_iommufd_ioas_map+0x10/0x10 [ 442.560485][T11277] iommufd_fops_ioctl+0x4b8/0x5d0 [ 442.560515][T11277] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 442.560545][T11277] ? __fget_files+0x2a/0x420 [ 442.560575][T11277] ? __fget_files+0x2a/0x420 [ 442.560600][T11277] ? bpf_lsm_file_ioctl+0x9/0x20 [ 442.560625][T11277] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 442.560650][T11277] __se_sys_ioctl+0xff/0x170 [ 442.560679][T11277] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.560720][T11277] do_syscall_64+0x174/0x580 [ 442.560747][T11277] ? trace_irq_disable+0x3b/0x140 [ 442.560775][T11277] ? clear_bhb_loop+0x40/0x90 [ 442.560804][T11277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.560828][T11277] RIP: 0033:0x7f1d5065ce59 [ 442.560850][T11277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.560871][T11277] RSP: 002b:00007f1d4e8b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 442.560904][T11277] RAX: ffffffffffffffda RBX: 00007f1d508d5fa0 RCX: 00007f1d5065ce59 [ 442.560922][T11277] RDX: 00002000000002c0 RSI: 0000000000003b85 RDI: 0000000000000003 [ 442.560938][T11277] RBP: 00007f1d4e8b6090 R08: 0000000000000000 R09: 0000000000000000 [ 442.560953][T11277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.560968][T11277] R13: 00007f1d508d6038 R14: 00007f1d508d5fa0 R15: 00007ffc87926d68 [ 442.561003][T11277] [ 442.635593][ T5733] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 442.837986][ T5733] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 442.838427][ T5733] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 442.838448][ T5733] em28xx 4-1:0.0: No AC97 audio processor [ 442.869376][ T5733] usb 4-1: USB disconnect, device number 86 [ 442.887030][ T5733] em28xx 4-1:0.0: Disconnecting em28xx [ 442.900369][ T32] usb 3-1: USB disconnect, device number 106 [ 442.921156][ T5733] em28xx 4-1:0.0: Freeing device [ 442.985787][T11282] binder: 11278:11282 ioctl c0306201 200000000080 returned -14 [ 443.347610][ T5776] usb 1-1: new full-speed USB device number 87 using dummy_hcd [ 443.501920][ T5776] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 443.501980][ T5776] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 443.502010][ T5776] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 443.502040][ T5776] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 443.502066][ T5776] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 443.575167][ T5776] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 443.575204][ T5776] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 443.575223][ T5776] usb 1-1: Product: syz [ 443.575234][ T5776] usb 1-1: Manufacturer: syz [ 443.575246][ T5776] usb 1-1: SerialNumber: syz [ 443.608753][ T5776] usb 1-1: config 0 descriptor?? [ 443.822987][ T5776] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 443.823230][ T5776] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5 [ 443.889950][ T5777] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 444.027599][ T5705] usb 1-1: USB disconnect, device number 87 [ 444.035922][T11300] FAULT_INJECTION: forcing a failure. [ 444.035922][T11300] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 444.035963][T11300] CPU: 0 UID: 0 PID: 11300 Comm: syz.3.2171 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 444.035996][T11300] Tainted: [L]=SOFTLOCKUP [ 444.036005][T11300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 444.036020][T11300] Call Trace: [ 444.036030][T11300] [ 444.036041][T11300] dump_stack_lvl+0xe8/0x150 [ 444.036075][T11300] should_fail_ex+0x46b/0x600 [ 444.036114][T11300] _copy_from_user+0x2d/0xb0 [ 444.036141][T11300] __sys_sendto+0x292/0x5a0 [ 444.036182][T11300] ? __pfx___sys_sendto+0x10/0x10 [ 444.036236][T11300] ? __pfx_ksys_write+0x10/0x10 [ 444.036271][T11300] __x64_sys_sendto+0xde/0x100 [ 444.036300][T11300] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.036327][T11300] do_syscall_64+0x174/0x580 [ 444.036355][T11300] ? trace_irq_disable+0x3b/0x140 [ 444.036396][T11300] ? clear_bhb_loop+0x40/0x90 [ 444.036423][T11300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.036447][T11300] RIP: 0033:0x7f3b57b4ce59 [ 444.036467][T11300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 444.036488][T11300] RSP: 002b:00007f3b55d9e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 444.036512][T11300] RAX: ffffffffffffffda RBX: 00007f3b57dc5fa0 RCX: 00007f3b57b4ce59 [ 444.036529][T11300] RDX: 0000000000000002 RSI: 0000200000000000 RDI: 0000000000000003 [ 444.036543][T11300] RBP: 00007f3b55d9e090 R08: 0000200000000100 R09: 0000000000000010 [ 444.036558][T11300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 444.036572][T11300] R13: 00007f3b57dc6038 R14: 00007f3b57dc5fa0 R15: 00007ffe6f27a2b8 [ 444.036603][T11300] [ 444.047145][ T5733] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 444.056999][ T5777] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.057054][ T5777] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 444.057079][ T5777] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 444.084442][ T5777] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 444.084477][ T5777] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 444.084500][ T5777] usb 2-1: Product: syz [ 444.084517][ T5777] usb 2-1: Manufacturer: syz [ 444.084534][ T5777] usb 2-1: SerialNumber: syz [ 444.337829][ T5777] usb 2-1: config 0 descriptor?? [ 444.358500][ T5777] radio-si470x 2-1:0.0: could not find interrupt in endpoint [ 444.358562][ T5777] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 444.358926][ T5777] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 444.388780][ T5733] usb 3-1: Using ep0 maxpacket: 32 [ 444.392757][ T5733] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 444.415329][ T5733] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 444.415362][ T5733] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 444.415387][ T5733] usb 3-1: Product: syz [ 444.415403][ T5733] usb 3-1: Manufacturer: syz [ 444.415421][ T5733] usb 3-1: SerialNumber: syz [ 444.463995][ T5733] asix 3-1:2.0: probe with driver asix failed with error -22 [ 444.598096][T11306] FAULT_INJECTION: forcing a failure. [ 444.598096][T11306] name failslab, interval 1, probability 0, space 0, times 0 [ 444.598125][T11306] CPU: 0 UID: 0 PID: 11306 Comm: syz.0.2174 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 444.598159][T11306] Tainted: [L]=SOFTLOCKUP [ 444.598165][T11306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 444.598175][T11306] Call Trace: [ 444.598181][T11306] [ 444.598188][T11306] dump_stack_lvl+0xe8/0x150 [ 444.598211][T11306] should_fail_ex+0x46b/0x600 [ 444.598238][T11306] should_failslab+0xa8/0x100 [ 444.598259][T11306] kmem_cache_alloc_noprof+0x87/0x680 [ 444.598286][T11306] ? skb_clone+0x212/0x3a0 [ 444.598310][T11306] skb_clone+0x212/0x3a0 [ 444.598332][T11306] __netlink_deliver_tap+0x424/0x8b0 [ 444.598361][T11306] ? netlink_deliver_tap+0x2e/0x1b0 [ 444.598382][T11306] netlink_deliver_tap+0x19c/0x1b0 [ 444.598403][T11306] netlink_unicast+0x754/0x920 [ 444.598428][T11306] netlink_sendmsg+0x813/0xb40 [ 444.598454][T11306] ? __pfx_netlink_sendmsg+0x10/0x10 [ 444.598476][T11306] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 444.598499][T11306] ? aa_sock_msg_perm+0x122/0x200 [ 444.598528][T11306] ? __pfx_netlink_sendmsg+0x10/0x10 [ 444.598547][T11306] sock_sendmsg_nosec+0x13a/0x180 [ 444.598572][T11306] ____sys_sendmsg+0x55c/0x870 [ 444.598595][T11306] ? __pfx_____sys_sendmsg+0x10/0x10 [ 444.598620][T11306] ? import_iovec+0x73/0xa0 [ 444.598641][T11306] ___sys_sendmsg+0x2a5/0x360 [ 444.598662][T11306] ? __lock_acquire+0x6b5/0x2d10 [ 444.598686][T11306] ? __pfx____sys_sendmsg+0x10/0x10 [ 444.598730][T11306] ? __fget_files+0x2a/0x420 [ 444.598745][T11306] ? __fget_files+0x3a6/0x420 [ 444.598768][T11306] __x64_sys_sendmsg+0x1b7/0x290 [ 444.598790][T11306] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 444.598822][T11306] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.598839][T11306] do_syscall_64+0x174/0x580 [ 444.598859][T11306] ? trace_irq_disable+0x3b/0x140 [ 444.598898][T11306] ? clear_bhb_loop+0x40/0x90 [ 444.598959][T11306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.598983][T11306] RIP: 0033:0x7fc84820ce59 [ 444.599006][T11306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 444.599027][T11306] RSP: 002b:00007fc846466028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 444.599051][T11306] RAX: ffffffffffffffda RBX: 00007fc848485fa0 RCX: 00007fc84820ce59 [ 444.599069][T11306] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 444.599087][T11306] RBP: 00007fc846466090 R08: 0000000000000000 R09: 0000000000000000 [ 444.599098][T11306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 444.599108][T11306] R13: 00007fc848486038 R14: 00007fc848485fa0 R15: 00007ffda54fa3a8 [ 444.599138][T11306] [ 444.726072][ T5776] usb 3-1: USB disconnect, device number 107 [ 445.303881][T11319] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2179'. [ 445.328459][ T5776] usb 1-1: new full-speed USB device number 88 using dummy_hcd [ 445.377619][ T5733] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 445.481884][ T5776] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.481941][ T5776] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 445.481962][ T5776] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 445.481982][ T5776] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 445.482001][ T5776] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 445.484725][ T5776] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 445.484768][ T5776] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 445.484792][ T5776] usb 1-1: Product: syz [ 445.484809][ T5776] usb 1-1: Manufacturer: syz [ 445.484825][ T5776] usb 1-1: SerialNumber: syz [ 445.527652][ T5733] usb 4-1: Using ep0 maxpacket: 16 [ 445.539538][ T32] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 445.595159][ T5776] usb 1-1: config 0 descriptor?? [ 445.598384][ T5733] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 445.598488][ T5733] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 445.628545][ T5733] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 445.628579][ T5733] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.628600][ T5733] usb 4-1: Product: syz [ 445.628622][ T5733] usb 4-1: Manufacturer: syz [ 445.628634][ T5733] usb 4-1: SerialNumber: syz [ 445.644539][ T5733] usb 4-1: config 0 descriptor?? [ 445.681411][ T5733] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 445.681460][ T5733] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 445.727603][ T32] usb 3-1: Using ep0 maxpacket: 16 [ 445.731009][ T32] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 445.731166][ T32] usb 3-1: config 0 has no interface number 0 [ 445.731217][ T32] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 445.731246][ T32] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 445.736364][ T32] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 445.736398][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.736421][ T32] usb 3-1: Product: syz [ 445.736504][ T32] usb 3-1: Manufacturer: syz [ 445.736541][ T32] usb 3-1: SerialNumber: syz [ 445.810769][ T32] usb 3-1: config 0 descriptor?? [ 445.815071][T11319] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 445.816302][T11319] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 445.867527][ T5776] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 445.867764][ T5776] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5 [ 446.051965][T11319] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 446.052209][T11319] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 446.091588][ T5734] usb 1-1: USB disconnect, device number 88 [ 446.254349][ T32] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 446.254837][ T32] asix 3-1:0.34: probe with driver asix failed with error -71 [ 446.279708][ T5733] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 446.280599][ T5733] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 446.299927][ T32] usb 3-1: USB disconnect, device number 108 [ 446.695708][ T10] usb 2-1: USB disconnect, device number 75 [ 446.888050][ T5733] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 447.097433][ T5733] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 447.097837][ T5733] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 447.101505][ T5733] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 447.101993][ T5733] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 447.102433][ T5733] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 447.155735][ T5733] usb 4-1: USB disconnect, device number 87 [ 447.245496][T11339] binder: 11337:11339 ioctl c038563c 200000000140 returned -22 [ 447.250175][T11339] PKCS8: Unsupported PKCS#8 version [ 447.487676][ T32] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 447.657758][ T32] usb 3-1: Using ep0 maxpacket: 16 [ 447.671662][ T32] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 447.671698][ T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 447.702431][ T32] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 447.702454][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.702470][ T32] usb 3-1: Product: syz [ 447.702482][ T32] usb 3-1: Manufacturer: syz [ 447.702493][ T32] usb 3-1: SerialNumber: syz [ 447.716890][ T32] usb 3-1: config 0 descriptor?? [ 447.760963][ T32] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 447.760990][ T32] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 447.907594][ T10] usb 1-1: new full-speed USB device number 89 using dummy_hcd [ 448.059930][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 448.060003][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 448.060035][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 448.060065][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 448.060109][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 448.063505][ T10] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 448.063538][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 448.063563][ T10] usb 1-1: Product: syz [ 448.063581][ T10] usb 1-1: Manufacturer: syz [ 448.063597][ T10] usb 1-1: SerialNumber: syz [ 448.092147][ T5733] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 448.164741][ T10] usb 1-1: config 0 descriptor?? [ 448.257654][ T5733] usb 4-1: Using ep0 maxpacket: 8 [ 448.262061][ T5733] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 448.262092][ T5733] usb 4-1: config 0 has no interfaces? [ 448.266124][ T5733] usb 4-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 448.266222][ T5733] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.266242][ T5733] usb 4-1: Product: syz [ 448.266254][ T5733] usb 4-1: Manufacturer: syz [ 448.266285][ T5733] usb 4-1: SerialNumber: syz [ 448.365490][ T32] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 448.371371][ T32] em28xx 3-1:0.0: Config register raw data: 0x00 [ 448.452437][ T10] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 448.452753][ T10] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5 [ 448.457109][ T5733] usb 4-1: config 0 descriptor?? [ 448.693116][T11350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2190'. [ 448.721155][ T10] usb 1-1: USB disconnect, device number 89 [ 448.727506][ T5705] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 448.823075][ T32] usb 4-1: USB disconnect, device number 88 [ 448.887802][ T5705] usb 2-1: Using ep0 maxpacket: 8 [ 448.889910][ T5705] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 448.889940][ T5705] usb 2-1: config 0 has no interface number 0 [ 448.893156][ T5705] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 448.893178][ T5705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.893194][ T5705] usb 2-1: Product: syz [ 448.893212][ T5705] usb 2-1: Manufacturer: syz [ 448.893224][ T5705] usb 2-1: SerialNumber: syz [ 448.908117][ T5705] usb 2-1: config 0 descriptor?? [ 449.147028][ T5615] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 449.147091][ T5615] CPU: 0 UID: 0 PID: 5615 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 449.147132][ T5615] Tainted: [L]=SOFTLOCKUP [ 449.147167][ T5615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 449.147185][ T5615] Workqueue: hci4 hci_rx_work [ 449.147234][ T5615] Call Trace: [ 449.147242][ T5615] [ 449.147267][ T5615] dump_stack_lvl+0xe8/0x150 [ 449.147305][ T5615] sysfs_create_dir_ns+0x271/0x2a0 [ 449.147347][ T5615] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 449.147396][ T5615] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 449.147443][ T5615] ? rt_spin_unlock+0x160/0x200 [ 449.147487][ T5615] kobject_add_internal+0x631/0xd10 [ 449.147535][ T5615] kobject_add+0x163/0x240 [ 449.147581][ T5615] ? __pfx_kobject_add+0x10/0x10 [ 449.147638][ T5615] ? get_device_parent+0x370/0x3a0 [ 449.147676][ T5615] device_add+0x408/0xb90 [ 449.147710][ T5615] hci_conn_add_sysfs+0xd5/0x210 [ 449.147757][ T5615] le_conn_complete_evt+0x10e6/0x16b0 [ 449.147807][ T5615] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 449.147845][ T5615] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 449.147876][ T5615] ? lockdep_hardirqs_on+0x7a/0x110 [ 449.147908][ T5615] ? skb_pull_data+0xfb/0x200 [ 449.147947][ T5615] hci_le_conn_complete_evt+0x187/0x470 [ 449.147996][ T5615] hci_event_packet+0x659/0xef0 [ 449.148033][ T5615] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 449.148071][ T5615] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 449.148106][ T5615] ? __pfx_hci_event_packet+0x10/0x10 [ 449.148125][ T5615] ? rt_spin_unlock+0x14f/0x200 [ 449.148191][ T5615] ? hci_send_to_monitor+0xe2/0x590 [ 449.148233][ T5615] hci_rx_work+0x3ee/0x1040 [ 449.148272][ T5615] ? process_one_work+0x8be/0x1630 [ 449.148308][ T5615] process_one_work+0x98b/0x1630 [ 449.148381][ T5615] ? __pfx_process_one_work+0x10/0x10 [ 449.148418][ T5615] ? do_raw_spin_lock+0x12b/0x2f0 [ 449.148469][ T5615] worker_thread+0xb49/0x1140 [ 449.148540][ T5615] kthread+0x388/0x470 [ 449.148574][ T5615] ? __pfx_worker_thread+0x10/0x10 [ 449.148610][ T5615] ? __pfx_kthread+0x10/0x10 [ 449.148641][ T5615] ret_from_fork+0x514/0xb70 [ 449.148672][ T5615] ? __pfx_ret_from_fork+0x10/0x10 [ 449.148717][ T5615] ? __switch_to+0xc79/0x1410 [ 449.148747][ T5615] ? __pfx_kthread+0x10/0x10 [ 449.148779][ T5615] ret_from_fork_asm+0x1a/0x30 [ 449.148835][ T5615] [ 449.149120][ T5615] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 449.149197][ T5615] Bluetooth: hci4: failed to register connection device [ 449.432019][ T5705] uvcvideo 2-1:0.31: Found Unit with invalid ID 0 [ 449.432193][ T5705] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 449.432332][ T5705] uvcvideo 2-1:0.31: No valid video chain found. [ 449.468249][ T5705] usb 2-1: USB disconnect, device number 76 [ 449.650501][T11370] comedi comedi0: Cannot bond this driver to itself! [ 449.741899][T11370] exFAT-fs (nbd3): unable to read boot sector [ 449.741921][T11370] exFAT-fs (nbd3): failed to read boot sector [ 449.741932][T11370] exFAT-fs (nbd3): failed to recognize exfat type [ 450.057570][ T32] usb 1-1: new full-speed USB device number 90 using dummy_hcd [ 450.077601][ T5705] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 450.222007][ T32] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 450.222066][ T32] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 450.222097][ T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 450.222118][ T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 450.222135][ T32] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 450.224725][ T32] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 450.224756][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 450.224778][ T32] usb 1-1: Product: syz [ 450.224802][ T32] usb 1-1: Manufacturer: syz [ 450.224813][ T32] usb 1-1: SerialNumber: syz [ 450.237510][ T5705] usb 4-1: Using ep0 maxpacket: 16 [ 450.324628][ T5705] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 450.324655][ T5705] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 450.327750][ T5705] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 450.327847][ T5705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.327913][ T5705] usb 4-1: Product: syz [ 450.327957][ T5705] usb 4-1: Manufacturer: syz [ 450.328000][ T5705] usb 4-1: SerialNumber: syz [ 450.385258][ T32] usb 1-1: config 0 descriptor?? [ 450.395517][ T5705] usb 4-1: config 0 descriptor?? [ 450.429939][ T5733] usb 3-1: USB disconnect, device number 109 [ 450.430256][ T5705] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 450.430279][ T5705] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 450.460969][ T5733] em28xx 3-1:0.0: Disconnecting em28xx [ 450.505294][ T5733] em28xx 3-1:0.0: Freeing device [ 450.537692][ T5734] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 450.603085][ T32] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 450.603106][ T32] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 450.713897][ T5734] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 450.714361][ T5734] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 450.714392][ T5734] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 450.714421][ T5734] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 450.714717][ T5734] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 450.800719][ T5734] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 450.800888][ T5734] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 450.800953][ T5734] usb 2-1: Product: syz [ 450.800965][ T5734] usb 2-1: Manufacturer: syz [ 450.800977][ T5734] usb 2-1: SerialNumber: syz [ 450.804697][ T32] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 450.804715][ T32] radio-si470x 1-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 450.805004][ T32] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5 [ 450.874122][ T5734] usb 2-1: config 0 descriptor?? [ 451.067982][ T5705] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 451.070618][ T5705] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 451.078544][ T5733] usb 1-1: USB disconnect, device number 90 [ 451.113775][ T5734] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 451.113804][ T5734] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 451.304050][ T5734] radio-si470x 2-1:0.0: software version 144, hardware version 78 [ 451.304072][ T5734] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 451.506547][ T5734] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 451.506607][ T5734] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 451.507121][ T5734] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 451.510445][ T5734] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 451.618069][ T5734] usb 2-1: USB disconnect, device number 77 [ 451.697601][ T5705] em28xx 4-1:0.0: AC97 command still being executed: not handled properly! [ 451.697629][ T5705] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 451.880956][ T5705] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 451.881421][ T5705] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 451.881856][ T5705] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 451.883486][ T5705] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 451.884675][ T5705] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 451.935262][ T5705] usb 4-1: USB disconnect, device number 89 [ 451.997901][T11415] blktrace: Concurrent blktraces are not allowed on loop4 [ 452.167920][ T5734] usb 1-1: new full-speed USB device number 91 using dummy_hcd [ 452.289963][ T5777] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 452.319422][ T5734] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 452.319479][ T5734] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 452.319499][ T5734] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 452.319516][ T5734] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 452.321971][ T5734] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 452.322002][ T5734] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 452.322027][ T5734] usb 1-1: Product: syz [ 452.322042][ T5734] usb 1-1: Manufacturer: syz [ 452.322062][ T5734] usb 1-1: SerialNumber: syz [ 452.326414][ T5734] usb 1-1: config 0 descriptor?? [ 452.412670][ T5734] radio-si470x 1-1:0.0: could not find interrupt in endpoint [ 452.412764][ T5734] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5 [ 452.413374][ T5734] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 452.427743][ T10] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 452.437678][ T5777] usb 3-1: Using ep0 maxpacket: 16 [ 452.461736][ T5777] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 452.461773][ T5777] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 452.464192][ T5777] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 452.464223][ T5777] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.464245][ T5777] usb 3-1: Product: syz [ 452.464265][ T5777] usb 3-1: Manufacturer: syz [ 452.464277][ T5777] usb 3-1: SerialNumber: syz [ 452.528428][ T5777] usb 3-1: config 0 descriptor?? [ 452.551973][ T5777] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 452.552011][ T5777] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 452.579497][ T10] usb 2-1: device descriptor read/64, error -71 [ 452.788009][ T5777] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 452.788366][ T5777] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 452.788676][ T5777] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 452.788688][ T5777] em28xx 3-1:0.0: No AC97 audio processor [ 452.817518][ T10] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 452.836256][ T5777] usb 3-1: USB disconnect, device number 110 [ 452.845706][ T5777] em28xx 3-1:0.0: Disconnecting em28xx [ 452.901005][ T5777] em28xx 3-1:0.0: Freeing device [ 452.947905][ T10] usb 2-1: device descriptor read/64, error -71 [ 453.058120][ T10] usb usb2-port1: attempt power cycle [ 453.346574][ T5777] libceph: connect (1)[c::]:6789 error -101 [ 453.347333][ T5777] libceph: mon0 (1)[c::]:6789 connect error [ 453.391619][ T5777] libceph: connect (1)[c::]:6789 error -101 [ 453.391797][ T5777] libceph: mon0 (1)[c::]:6789 connect error [ 453.407816][ T10] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 453.429353][ T10] usb 2-1: device descriptor read/8, error -71 [ 453.661026][ T5777] libceph: connect (1)[c::]:6789 error -101 [ 453.661221][ T5777] libceph: mon0 (1)[c::]:6789 connect error [ 453.668181][ T10] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 453.688246][ T10] usb 2-1: device descriptor read/8, error -71 [ 453.798831][ T10] usb usb2-port1: unable to enumerate USB device [ 454.022393][T11442] blktrace: Concurrent blktraces are not allowed on loop6 [ 454.112096][T11435] ceph: No mds server is up or the cluster is laggy [ 454.171049][ T10] libceph: connect (1)[c::]:6789 error -101 [ 454.171234][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 454.675609][ T5705] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 454.699533][T11457] openvswitch: netlink: Actions may not be safe on all matching packets [ 454.847850][ T5705] usb 3-1: device descriptor read/64, error -71 [ 454.896284][ T5734] usb 1-1: USB disconnect, device number 91 [ 455.105972][ T5705] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 455.237674][ T5705] usb 3-1: device descriptor read/64, error -71 [ 455.350852][ T5705] usb usb3-port1: attempt power cycle [ 455.720526][ T5705] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 455.742359][ T5705] usb 3-1: device descriptor read/8, error -71 [ 455.990577][ T5705] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 456.016590][ T5705] usb 3-1: device descriptor read/8, error -71 [ 456.118076][ T5705] usb usb3-port1: unable to enumerate USB device [ 456.881377][T11499] FAULT_INJECTION: forcing a failure. [ 456.881377][T11499] name failslab, interval 1, probability 0, space 0, times 0 [ 456.881419][T11499] CPU: 0 UID: 0 PID: 11499 Comm: syz.1.2236 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 456.881452][T11499] Tainted: [L]=SOFTLOCKUP [ 456.881465][T11499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 456.881480][T11499] Call Trace: [ 456.881490][T11499] [ 456.881501][T11499] dump_stack_lvl+0xe8/0x150 [ 456.881532][T11499] should_fail_ex+0x46b/0x600 [ 456.881568][T11499] should_failslab+0xa8/0x100 [ 456.881596][T11499] __kmalloc_noprof+0xdf/0x7b0 [ 456.881618][T11499] ? kfree+0x4d/0x6c0 [ 456.881651][T11499] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 456.881683][T11499] tomoyo_realpath_from_path+0xe3/0x5d0 [ 456.881710][T11499] ? tomoyo_domain+0xd7/0x130 [ 456.881744][T11499] ? tomoyo_path_number_perm+0x219/0x630 [ 456.881779][T11499] tomoyo_path_number_perm+0x246/0x630 [ 456.881818][T11499] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 456.881851][T11499] ? __lock_acquire+0x6b5/0x2d10 [ 456.881882][T11499] ? do_raw_spin_lock+0x12b/0x2f0 [ 456.881942][T11499] ? __fget_files+0x2a/0x420 [ 456.881968][T11499] ? __fget_files+0x2a/0x420 [ 456.881990][T11499] ? __fget_files+0x3a6/0x420 [ 456.882013][T11499] ? __fget_files+0x2a/0x420 [ 456.882041][T11499] security_file_ioctl+0xc3/0x2a0 [ 456.882075][T11499] __se_sys_ioctl+0x47/0x170 [ 456.882105][T11499] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.882131][T11499] do_syscall_64+0x174/0x580 [ 456.882159][T11499] ? trace_irq_disable+0x3b/0x140 [ 456.882189][T11499] ? clear_bhb_loop+0x40/0x90 [ 456.882218][T11499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.882242][T11499] RIP: 0033:0x7f1d5065ce59 [ 456.882273][T11499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.882310][T11499] RSP: 002b:00007f1d4e8b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 456.882335][T11499] RAX: ffffffffffffffda RBX: 00007f1d508d5fa0 RCX: 00007f1d5065ce59 [ 456.882352][T11499] RDX: 0000200000000000 RSI: 00000000c008ae67 RDI: 0000000000000004 [ 456.882367][T11499] RBP: 00007f1d4e8b6090 R08: 0000000000000000 R09: 0000000000000000 [ 456.882382][T11499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.882396][T11499] R13: 00007f1d508d6038 R14: 00007f1d508d5fa0 R15: 00007ffc87926d68 [ 456.882431][T11499] [ 456.883988][T11499] ERROR: Out of memory at tomoyo_realpath_from_path. [ 457.107498][ T5734] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 458.129824][T11527] netlink: 'syz.2.2250': attribute type 32 has an invalid length. [ 458.247574][ T32] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 458.377566][ T32] usb 4-1: device descriptor read/64, error -71 [ 458.407607][ T5734] usb 1-1: new low-speed USB device number 93 using dummy_hcd [ 458.571673][ T5734] usb 1-1: config 13 has an invalid interface number: 36 but max is 0 [ 458.571696][ T5734] usb 1-1: config 13 has no interface number 0 [ 458.571758][ T5734] usb 1-1: config 13 interface 36 altsetting 192 endpoint 0x9 is Bulk; changing to Interrupt [ 458.571787][ T5734] usb 1-1: config 13 interface 36 altsetting 192 endpoint 0x6 has an invalid bInterval 197, changing to 4 [ 458.571820][ T5734] usb 1-1: config 13 interface 36 altsetting 192 endpoint 0x6 has invalid maxpacket 64, setting to 0 [ 458.571852][ T5734] usb 1-1: config 13 interface 36 has no altsetting 0 [ 458.576958][ T5734] usb 1-1: string descriptor 0 read error: -22 [ 458.577086][ T5734] usb 1-1: New USB device found, idVendor=19d2, idProduct=ff70, bcdDevice=29.44 [ 458.577106][ T5734] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.627646][ T32] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 458.628085][T11519] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 458.699199][ T5734] option 1-1:13.36: GSM modem (1-port) converter detected [ 458.757537][ T32] usb 4-1: device descriptor read/64, error -71 [ 458.864008][T11519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.864838][T11519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.871524][ T32] usb usb4-port1: attempt power cycle [ 458.888059][ T5699] usb 1-1: USB disconnect, device number 93 [ 458.914347][ T5699] option 1-1:13.36: device disconnected [ 458.969838][T11540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.970246][T11540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.227602][ T32] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 459.250437][ T32] usb 4-1: device descriptor read/8, error -71 [ 459.537738][ T32] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 459.562927][ T32] usb 4-1: device descriptor read/8, error -71 [ 459.681303][ T32] usb usb4-port1: unable to enumerate USB device [ 459.758654][ T10] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 459.907721][ T10] usb 1-1: device descriptor read/64, error -71 [ 460.087938][ T5777] usb 3-1: new full-speed USB device number 115 using dummy_hcd [ 460.167593][ T10] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 460.260110][ T5777] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 460.260167][ T5777] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 460.260186][ T5777] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 460.260205][ T5777] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 460.260220][ T5777] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 460.262561][ T5777] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 460.262592][ T5777] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 460.262618][ T5777] usb 3-1: Product: syz [ 460.262629][ T5777] usb 3-1: Manufacturer: syz [ 460.262640][ T5777] usb 3-1: SerialNumber: syz [ 460.270615][ T5777] usb 3-1: config 0 descriptor?? [ 460.297651][ T10] usb 1-1: device descriptor read/64, error -71 [ 460.407981][ T10] usb usb1-port1: attempt power cycle [ 460.503256][ T5777] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 460.503278][ T5777] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 460.703968][ T5777] radio-si470x 3-1:0.0: software version 144, hardware version 78 [ 460.704053][ T5777] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 460.747559][ T10] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 460.768841][ T10] usb 1-1: device descriptor read/8, error -71 [ 460.909452][ T5777] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 460.909497][ T5777] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 460.910203][ T5777] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 460.910927][ T5777] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22 [ 460.950681][ T5777] usb 3-1: USB disconnect, device number 115 [ 461.008556][ T10] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 461.030204][ T10] usb 1-1: device descriptor read/8, error -71 [ 461.140095][ T10] usb usb1-port1: unable to enumerate USB device [ 461.282711][T11576] FAULT_INJECTION: forcing a failure. [ 461.282711][T11576] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 461.282741][T11576] CPU: 0 UID: 0 PID: 11576 Comm: syz.1.2270 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 461.282764][T11576] Tainted: [L]=SOFTLOCKUP [ 461.282770][T11576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 461.282780][T11576] Call Trace: [ 461.282786][T11576] [ 461.282794][T11576] dump_stack_lvl+0xe8/0x150 [ 461.282817][T11576] should_fail_ex+0x46b/0x600 [ 461.282843][T11576] _copy_to_user+0x31/0xb0 [ 461.282862][T11576] simple_read_from_buffer+0xe1/0x170 [ 461.282888][T11576] proc_fail_nth_read+0x1be/0x230 [ 461.282908][T11576] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 461.282926][T11576] ? rw_verify_area+0x2ac/0x4e0 [ 461.282944][T11576] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 461.282962][T11576] vfs_read+0x212/0xa80 [ 461.282986][T11576] ? __pfx_vfs_read+0x10/0x10 [ 461.283006][T11576] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 461.283036][T11576] ? lockdep_hardirqs_on+0x7a/0x110 [ 461.283055][T11576] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 461.283092][T11576] ? mutex_lock_nested+0x152/0x1d0 [ 461.283116][T11576] ? fdget_pos+0x252/0x320 [ 461.283140][T11576] ksys_read+0x156/0x270 [ 461.283161][T11576] ? __pfx_ksys_read+0x10/0x10 [ 461.283187][T11576] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.283205][T11576] do_syscall_64+0x174/0x580 [ 461.283224][T11576] ? trace_irq_disable+0x3b/0x140 [ 461.283245][T11576] ? clear_bhb_loop+0x40/0x90 [ 461.283265][T11576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.283282][T11576] RIP: 0033:0x7f1d5061d68e [ 461.283297][T11576] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 461.283311][T11576] RSP: 002b:00007f1d4e8b5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 461.283329][T11576] RAX: ffffffffffffffda RBX: 00007f1d4e8b66c0 RCX: 00007f1d5061d68e [ 461.283341][T11576] RDX: 000000000000000f RSI: 00007f1d4e8b60a0 RDI: 0000000000000005 [ 461.283352][T11576] RBP: 00007f1d4e8b6090 R08: 0000000000000000 R09: 0000000000000000 [ 461.283362][T11576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.283372][T11576] R13: 00007f1d508d6038 R14: 00007f1d508d5fa0 R15: 00007ffc87926d68 [ 461.283399][T11576] [ 462.018854][ T10] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 462.107524][ T32] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 462.147539][ T10] usb 4-1: device descriptor read/64, error -71 [ 462.177530][ T5777] usb 2-1: new full-speed USB device number 82 using dummy_hcd [ 462.257559][ T32] usb 3-1: Using ep0 maxpacket: 16 [ 462.261019][ T32] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 462.261048][ T32] usb 3-1: config 0 has no interface number 0 [ 462.261093][ T32] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.261114][ T32] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.261142][ T32] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 462.261161][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.265514][ T32] usb 3-1: config 0 descriptor?? [ 462.335006][ T5777] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 462.335062][ T5777] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 462.335091][ T5777] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 462.335120][ T5777] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 462.335145][ T5777] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 462.388422][ T10] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 462.391910][ T5777] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 462.393074][ T5777] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 462.394135][ T5777] usb 2-1: Product: syz [ 462.395101][ T5777] usb 2-1: Manufacturer: syz [ 462.395148][ T5777] usb 2-1: SerialNumber: syz [ 462.441138][ T5777] usb 2-1: config 0 descriptor?? [ 462.527720][ T10] usb 4-1: device descriptor read/64, error -71 [ 462.638033][ T10] usb usb4-port1: attempt power cycle [ 462.674020][ T5777] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 462.674059][ T5777] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 462.697587][T11597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.699177][T11597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.722101][T11597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.738029][T11597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.765695][ T32] hid (null): report_id 2059 is invalid [ 462.777310][ T32] hid (null): report_id 3930712479 is invalid [ 462.867940][ T5777] radio-si470x 2-1:0.0: software version 144, hardware version 78 [ 462.867963][ T5777] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 462.975916][ T5699] usb 3-1: USB disconnect, device number 116 [ 463.027613][ T10] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 463.050558][ T10] usb 4-1: device descriptor read/8, error -71 [ 463.069312][ T5777] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 463.069356][ T5777] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 463.069748][ T5777] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 463.070074][ T5777] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 463.098345][ T5777] usb 2-1: USB disconnect, device number 82 [ 463.130190][ T5776] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 463.277593][ T5776] usb 1-1: Using ep0 maxpacket: 16 [ 463.279517][ T5776] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 463.279552][ T5776] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 463.282021][ T5776] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 463.282055][ T5776] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.282072][ T5776] usb 1-1: Product: syz [ 463.282082][ T5776] usb 1-1: Manufacturer: syz [ 463.282099][ T5776] usb 1-1: SerialNumber: syz [ 463.288901][ T5776] usb 1-1: config 0 descriptor?? [ 463.290587][ T10] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 463.323663][ T10] usb 4-1: device descriptor read/8, error -71 [ 463.370758][ T5776] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 463.370785][ T5776] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 463.428129][ T10] usb usb4-port1: unable to enumerate USB device [ 463.934871][ T5776] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 463.935576][ T5776] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 464.247561][ T5699] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 464.378841][ T5699] usb 2-1: device descriptor read/64, error -71 [ 464.540738][T11636] FAULT_INJECTION: forcing a failure. [ 464.540738][T11636] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 464.540778][T11636] CPU: 0 UID: 0 PID: 11636 Comm: syz.2.2295 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 464.540801][T11636] Tainted: [L]=SOFTLOCKUP [ 464.540808][T11636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 464.540820][T11636] Call Trace: [ 464.540826][T11636] [ 464.540833][T11636] dump_stack_lvl+0xe8/0x150 [ 464.540857][T11636] should_fail_ex+0x46b/0x600 [ 464.540883][T11636] _copy_to_user+0x31/0xb0 [ 464.540902][T11636] simple_read_from_buffer+0xe1/0x170 [ 464.540923][T11636] proc_fail_nth_read+0x1be/0x230 [ 464.540944][T11636] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 464.540963][T11636] ? rw_verify_area+0x2ac/0x4e0 [ 464.540981][T11636] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 464.540998][T11636] vfs_read+0x212/0xa80 [ 464.541023][T11636] ? __pfx_vfs_read+0x10/0x10 [ 464.541043][T11636] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 464.541063][T11636] ? lockdep_hardirqs_on+0x7a/0x110 [ 464.541082][T11636] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 464.541100][T11636] ? mutex_lock_nested+0x152/0x1d0 [ 464.541134][T11636] ? fdget_pos+0x252/0x320 [ 464.541156][T11636] ksys_read+0x156/0x270 [ 464.541175][T11636] ? __pfx_ksys_read+0x10/0x10 [ 464.541217][T11636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.541234][T11636] do_syscall_64+0x174/0x580 [ 464.541253][T11636] ? trace_irq_disable+0x3b/0x140 [ 464.541273][T11636] ? clear_bhb_loop+0x40/0x90 [ 464.541292][T11636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.541309][T11636] RIP: 0033:0x7f0b43f8d68e [ 464.541345][T11636] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 464.541364][T11636] RSP: 002b:00007f0b42225fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 464.541388][T11636] RAX: ffffffffffffffda RBX: 00007f0b422266c0 RCX: 00007f0b43f8d68e [ 464.541405][T11636] RDX: 000000000000000f RSI: 00007f0b422260a0 RDI: 0000000000000003 [ 464.541420][T11636] RBP: 00007f0b42226090 R08: 0000000000000000 R09: 0000000000000000 [ 464.541443][T11636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.541461][T11636] R13: 00007f0b44246038 R14: 00007f0b44245fa0 R15: 00007ffda231be48 [ 464.541485][T11636] [ 464.741742][ T5699] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 464.889345][ T5699] usb 2-1: device descriptor read/64, error -71 [ 464.980210][ T5776] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 464.980633][ T5776] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 464.981082][ T5776] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 464.981572][ T5776] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 464.982010][ T5776] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 464.982455][ T5776] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 465.017620][ T5699] usb usb2-port1: attempt power cycle [ 465.034520][ T5776] usb 1-1: USB disconnect, device number 98 [ 465.197563][ T10] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 465.353706][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 465.356191][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 465.356245][ T10] usb 4-1: config 1 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 465.356274][ T10] usb 4-1: config 1 interface 0 has no altsetting 0 [ 465.407627][ T5699] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 465.408785][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=ffa1, bcdDevice=ff.ff [ 465.408807][ T10] usb 4-1: New USB device strings: Mfr=255, Product=2, SerialNumber=3 [ 465.408822][ T10] usb 4-1: Product: syz [ 465.408833][ T10] usb 4-1: Manufacturer: syz [ 465.408844][ T10] usb 4-1: SerialNumber: syz [ 465.465724][ T5699] usb 2-1: device descriptor read/8, error -71 [ 465.671118][T11654] blktrace: Concurrent blktraces are not allowed on loop4 [ 465.707553][ T5699] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 465.730099][ T10] cdc_ether 4-1:1.0: skipping garbage [ 465.730447][ T10] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 465.750638][ T5699] usb 2-1: device descriptor read/8, error -71 [ 465.798129][ T10] usb 4-1: USB disconnect, device number 98 [ 465.867833][ T5699] usb usb2-port1: unable to enumerate USB device [ 466.557527][ T10] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 466.687727][ T10] usb 1-1: device descriptor read/64, error -71 [ 466.934265][ T10] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 467.059124][ T10] usb 1-1: device descriptor read/64, error -71 [ 467.135607][T11670] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2308'. [ 467.159575][T11670] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2308'. [ 467.168597][ T10] usb usb1-port1: attempt power cycle [ 467.421597][T11677] blktrace: Concurrent blktraces are not allowed on loop6 [ 467.508179][ T10] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 467.530075][ T10] usb 1-1: device descriptor read/8, error -71 [ 467.767724][ T10] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 467.791632][ T10] usb 1-1: device descriptor read/8, error -71 [ 467.880374][ T5734] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 467.898616][ T10] usb usb1-port1: unable to enumerate USB device [ 468.037593][ T5734] usb 4-1: Using ep0 maxpacket: 16 [ 468.041078][ T5734] usb 4-1: config 0 has no interfaces? [ 468.054601][ T5734] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 468.054636][ T5734] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.054660][ T5734] usb 4-1: Product: syz [ 468.054678][ T5734] usb 4-1: Manufacturer: syz [ 468.054696][ T5734] usb 4-1: SerialNumber: syz [ 468.083005][ T5734] usb 4-1: config 0 descriptor?? [ 468.305748][T11694] FAULT_INJECTION: forcing a failure. [ 468.305748][T11694] name failslab, interval 1, probability 0, space 0, times 0 [ 468.305790][T11694] CPU: 1 UID: 0 PID: 11694 Comm: syz.2.2318 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 468.305822][T11694] Tainted: [L]=SOFTLOCKUP [ 468.305831][T11694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 468.305845][T11694] Call Trace: [ 468.305855][T11694] [ 468.305866][T11694] dump_stack_lvl+0xe8/0x150 [ 468.305897][T11694] should_fail_ex+0x46b/0x600 [ 468.305934][T11694] should_failslab+0xa8/0x100 [ 468.305964][T11694] kmem_cache_alloc_noprof+0x87/0x680 [ 468.306006][T11694] ? skb_clone+0x212/0x3a0 [ 468.306040][T11694] skb_clone+0x212/0x3a0 [ 468.306073][T11694] __netlink_deliver_tap+0x424/0x8b0 [ 468.306115][T11694] ? netlink_deliver_tap+0x2e/0x1b0 [ 468.306145][T11694] netlink_deliver_tap+0x19c/0x1b0 [ 468.306175][T11694] netlink_unicast+0x754/0x920 [ 468.306211][T11694] netlink_sendmsg+0x813/0xb40 [ 468.306251][T11694] ? __pfx_netlink_sendmsg+0x10/0x10 [ 468.306284][T11694] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 468.306316][T11694] ? aa_sock_msg_perm+0x122/0x200 [ 468.306342][T11694] ? __pfx_netlink_sendmsg+0x10/0x10 [ 468.306370][T11694] sock_sendmsg_nosec+0x13a/0x180 [ 468.306407][T11694] ____sys_sendmsg+0x55c/0x870 [ 468.306441][T11694] ? __pfx_____sys_sendmsg+0x10/0x10 [ 468.306480][T11694] ? import_iovec+0x73/0xa0 [ 468.306508][T11694] ___sys_sendmsg+0x2a5/0x360 [ 468.306536][T11694] ? __lock_acquire+0x6b5/0x2d10 [ 468.306571][T11694] ? __pfx____sys_sendmsg+0x10/0x10 [ 468.306638][T11694] ? __fget_files+0x2a/0x420 [ 468.306661][T11694] ? __fget_files+0x3a6/0x420 [ 468.306702][T11694] __x64_sys_sendmsg+0x1b7/0x290 [ 468.306741][T11694] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 468.306790][T11694] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.306816][T11694] do_syscall_64+0x174/0x580 [ 468.306844][T11694] ? trace_irq_disable+0x3b/0x140 [ 468.306874][T11694] ? clear_bhb_loop+0x40/0x90 [ 468.306903][T11694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.306928][T11694] RIP: 0033:0x7f0b43fcce59 [ 468.306950][T11694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.306971][T11694] RSP: 002b:00007f0b42205028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 468.306995][T11694] RAX: ffffffffffffffda RBX: 00007f0b44246090 RCX: 00007f0b43fcce59 [ 468.307014][T11694] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 468.307028][T11694] RBP: 00007f0b42205090 R08: 0000000000000000 R09: 0000000000000000 [ 468.307044][T11694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 468.307058][T11694] R13: 00007f0b44246128 R14: 00007f0b44246090 R15: 00007ffda231be48 [ 468.307095][T11694] [ 469.417490][ T32] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 469.547611][ T32] usb 3-1: device descriptor read/64, error -71 [ 469.737521][ T10] usb 1-1: new full-speed USB device number 103 using dummy_hcd [ 469.787554][ T32] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 469.867605][ T10] usb 1-1: device descriptor read/64, error -71 [ 469.927518][ T32] usb 3-1: device descriptor read/64, error -71 [ 470.048191][ T32] usb usb3-port1: attempt power cycle [ 470.107625][ T10] usb 1-1: new full-speed USB device number 104 using dummy_hcd [ 470.237498][ T10] usb 1-1: device descriptor read/64, error -71 [ 470.347826][ T10] usb usb1-port1: attempt power cycle [ 470.407539][ T32] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 470.440288][ T32] usb 3-1: device descriptor read/8, error -71 [ 470.673804][ T5734] usb 4-1: USB disconnect, device number 99 [ 470.687633][ T10] usb 1-1: new full-speed USB device number 105 using dummy_hcd [ 470.690752][ T32] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 470.708602][ T10] usb 1-1: device descriptor read/8, error -71 [ 470.723804][ T32] usb 3-1: device descriptor read/8, error -71 [ 470.827809][ T32] usb usb3-port1: unable to enumerate USB device [ 470.948090][ T10] usb 1-1: new full-speed USB device number 106 using dummy_hcd [ 470.970780][ T10] usb 1-1: device descriptor read/8, error -71 [ 471.079405][ T10] usb usb1-port1: unable to enumerate USB device [ 471.097541][ T5734] usb 4-1: new full-speed USB device number 100 using dummy_hcd [ 471.250879][ T5734] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 471.250937][ T5734] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 471.250967][ T5734] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 471.250996][ T5734] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 471.251020][ T5734] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 471.254735][ T5734] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 471.254767][ T5734] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 471.254791][ T5734] usb 4-1: Product: syz [ 471.254807][ T5734] usb 4-1: Manufacturer: syz [ 471.254825][ T5734] usb 4-1: SerialNumber: syz [ 471.285267][ T5734] usb 4-1: config 0 descriptor?? [ 471.515278][ T5734] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 471.515308][ T5734] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 471.719433][ T5734] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 471.719460][ T5734] radio-si470x 4-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 471.719759][ T5734] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 471.763931][ T5734] usb 4-1: USB disconnect, device number 100 [ 472.070168][T11718] FAULT_INJECTION: forcing a failure. [ 472.070168][T11718] name failslab, interval 1, probability 0, space 0, times 0 [ 472.070198][T11718] CPU: 1 UID: 0 PID: 11718 Comm: syz.1.2327 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 472.070221][T11718] Tainted: [L]=SOFTLOCKUP [ 472.070227][T11718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 472.070237][T11718] Call Trace: [ 472.070244][T11718] [ 472.070251][T11718] dump_stack_lvl+0xe8/0x150 [ 472.070274][T11718] should_fail_ex+0x46b/0x600 [ 472.070300][T11718] should_failslab+0xa8/0x100 [ 472.070320][T11718] __kmalloc_noprof+0xdf/0x7b0 [ 472.070337][T11718] ? tomoyo_encode+0x28b/0x550 [ 472.070358][T11718] tomoyo_encode+0x28b/0x550 [ 472.070379][T11718] tomoyo_realpath_from_path+0x58d/0x5d0 [ 472.070398][T11718] ? tomoyo_domain+0xd7/0x130 [ 472.070420][T11718] ? tomoyo_path_number_perm+0x219/0x630 [ 472.070445][T11718] tomoyo_path_number_perm+0x246/0x630 [ 472.070470][T11718] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 472.070493][T11718] ? __lock_acquire+0x6b5/0x2d10 [ 472.070516][T11718] ? do_raw_spin_lock+0x12b/0x2f0 [ 472.070556][T11718] ? __fget_files+0x2a/0x420 [ 472.070574][T11718] ? __fget_files+0x2a/0x420 [ 472.070589][T11718] ? __fget_files+0x3a6/0x420 [ 472.070604][T11718] ? __fget_files+0x2a/0x420 [ 472.070622][T11718] security_file_ioctl+0xc3/0x2a0 [ 472.070646][T11718] __se_sys_ioctl+0x47/0x170 [ 472.070667][T11718] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.070685][T11718] do_syscall_64+0x174/0x580 [ 472.070708][T11718] ? trace_irq_disable+0x3b/0x140 [ 472.070728][T11718] ? clear_bhb_loop+0x40/0x90 [ 472.070754][T11718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.070770][T11718] RIP: 0033:0x7f1d5065ce59 [ 472.070785][T11718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 472.070799][T11718] RSP: 002b:00007f1d4e8b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 472.070816][T11718] RAX: ffffffffffffffda RBX: 00007f1d508d5fa0 RCX: 00007f1d5065ce59 [ 472.070829][T11718] RDX: 0000200000000180 RSI: 00000000c0686611 RDI: 0000000000000003 [ 472.070840][T11718] RBP: 00007f1d4e8b6090 R08: 0000000000000000 R09: 0000000000000000 [ 472.070850][T11718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 472.070859][T11718] R13: 00007f1d508d6038 R14: 00007f1d508d5fa0 R15: 00007ffc87926d68 [ 472.070883][T11718] [ 472.070987][T11718] ERROR: Out of memory at tomoyo_realpath_from_path. [ 472.897654][ T10] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 473.047561][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 473.049775][ T10] usb 1-1: config 0 has no interfaces? [ 473.052731][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 473.052765][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.052791][ T10] usb 1-1: Product: syz [ 473.052809][ T10] usb 1-1: Manufacturer: syz [ 473.052827][ T10] usb 1-1: SerialNumber: syz [ 473.057838][ T5777] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 473.068151][ T10] usb 1-1: config 0 descriptor?? [ 473.187579][ T5777] usb 3-1: device descriptor read/64, error -71 [ 473.427505][ T5777] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 473.557626][ T5777] usb 3-1: device descriptor read/64, error -71 [ 473.668222][ T5777] usb usb3-port1: attempt power cycle [ 473.699780][ T10] usb 4-1: new full-speed USB device number 101 using dummy_hcd [ 473.849560][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 473.849621][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 473.849641][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 473.849661][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 473.849678][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 473.852187][ T10] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 473.852223][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 473.852239][ T10] usb 4-1: Product: syz [ 473.852250][ T10] usb 4-1: Manufacturer: syz [ 473.852261][ T10] usb 4-1: SerialNumber: syz [ 473.864305][ T10] usb 4-1: config 0 descriptor?? [ 474.007544][ T5705] usb 2-1: new full-speed USB device number 87 using dummy_hcd [ 474.007596][ T5777] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 474.028142][ T5777] usb 3-1: device descriptor read/8, error -71 [ 474.147520][ T5705] usb 2-1: device descriptor read/64, error -71 [ 474.156427][ T10] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 474.156448][ T10] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 474.267516][ T5777] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 474.288222][ T5777] usb 3-1: device descriptor read/8, error -71 [ 474.357271][ T10] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 474.357297][ T10] radio-si470x 4-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 474.359137][ T10] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 474.388137][ T5705] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 474.399436][ T5777] usb usb3-port1: unable to enumerate USB device [ 474.416420][ T10] usb 4-1: USB disconnect, device number 101 [ 474.517550][ T5705] usb 2-1: device descriptor read/64, error -71 [ 474.627881][ T5705] usb usb2-port1: attempt power cycle [ 474.967579][ T5705] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 474.988197][ T5705] usb 2-1: device descriptor read/8, error -71 [ 475.227806][ T5705] usb 2-1: new full-speed USB device number 90 using dummy_hcd [ 475.249268][ T5705] usb 2-1: device descriptor read/8, error -71 [ 475.370675][ T5705] usb usb2-port1: unable to enumerate USB device [ 475.676801][ T5705] usb 1-1: USB disconnect, device number 107 [ 475.721323][T11761] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2341'. [ 475.753495][T11761] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 475.753519][T11761] netdevsim netdevsim0: Falling back to sysfs fallback for:  [ 476.110841][T11775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.112602][T11775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.347546][ T5776] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 476.497519][ T5776] usb 4-1: Using ep0 maxpacket: 32 [ 476.499859][ T5776] usb 4-1: config 4 has an invalid interface number: 228 but max is 0 [ 476.499891][ T5776] usb 4-1: config 4 has no interface number 0 [ 476.499940][ T5776] usb 4-1: config 4 interface 228 altsetting 68 endpoint 0x7 has invalid wMaxPacketSize 0 [ 476.499969][ T5776] usb 4-1: config 4 interface 228 has no altsetting 0 [ 476.505142][ T5776] usb 4-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8 [ 476.505172][ T5776] usb 4-1: New USB device strings: Mfr=1, Product=25, SerialNumber=3 [ 476.505201][ T5776] usb 4-1: Product: syz [ 476.505215][ T5776] usb 4-1: Manufacturer: syz [ 476.505227][ T5776] usb 4-1: SerialNumber: syz [ 477.137566][ T5705] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 477.260995][ T5776] usb 4-1: USB disconnect, device number 102 [ 477.287551][ T5705] usb 2-1: Using ep0 maxpacket: 16 [ 477.300864][ T5705] usb 2-1: config 0 has no interfaces? [ 477.309598][ T5705] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 477.309641][ T5705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.309665][ T5705] usb 2-1: Product: syz [ 477.309683][ T5705] usb 2-1: Manufacturer: syz [ 477.309699][ T5705] usb 2-1: SerialNumber: syz [ 477.358175][ T5788] udevd[5788]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:4.228/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 477.375901][ T5705] usb 2-1: config 0 descriptor?? [ 477.397499][ T10] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 477.818238][ T5705] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 477.947649][ T5705] usb 4-1: device descriptor read/64, error -71 [ 478.027499][ T5776] usb 3-1: new full-speed USB device number 125 using dummy_hcd [ 478.157621][ T5776] usb 3-1: device descriptor read/64, error -71 [ 478.187533][ T5705] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 478.317591][ T5705] usb 4-1: device descriptor read/64, error -71 [ 478.397938][ T5776] usb 3-1: new full-speed USB device number 126 using dummy_hcd [ 478.428950][ T5705] usb usb4-port1: attempt power cycle [ 478.528735][ T5776] usb 3-1: device descriptor read/64, error -71 [ 478.639152][ T5776] usb usb3-port1: attempt power cycle [ 478.767761][ T5705] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 478.788292][ T5705] usb 4-1: device descriptor read/8, error -71 [ 478.977605][ T5776] usb 3-1: new full-speed USB device number 127 using dummy_hcd [ 478.998494][ T5776] usb 3-1: device descriptor read/8, error -71 [ 479.027518][ T5705] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 479.048276][ T5705] usb 4-1: device descriptor read/8, error -71 [ 479.157882][ T5705] usb usb4-port1: unable to enumerate USB device [ 479.257635][ T5776] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 479.278136][ T5776] usb 3-1: device descriptor read/8, error -71 [ 479.387942][ T5776] usb usb3-port1: unable to enumerate USB device [ 479.506979][T11812] trusted_key: encrypted_key: master key parameter 'zn' is invalid [ 479.923176][ T5777] usb 2-1: USB disconnect, device number 91 [ 480.136433][ C1] vcan0: j1939_tp_rxtimer: 0xffff888038cddc00: rx timeout, send abort [ 480.601402][T11826] tmpfs: Bad value for 'nr_blocks' [ 480.636430][ C1] vcan0: j1939_tp_rxtimer: 0xffff888038cdf000: rx timeout, send abort [ 480.637864][ C1] vcan0: j1939_tp_rxtimer: 0xffff888038cddc00: abort rx timeout. Force session deactivation [ 481.136508][ C1] vcan0: j1939_tp_rxtimer: 0xffff888038cdf000: abort rx timeout. Force session deactivation [ 481.142312][ C1] vcan0: j1939_tp_rxtimer: 0xffff888038cde800: rx timeout, send abort [ 481.146355][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888038cde800: 0x3f002: (3) A timeout occurred and this is the connection abort to close the session. [ 481.260238][ T5705] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 481.407636][ T5705] usb 2-1: Using ep0 maxpacket: 16 [ 481.414512][ T5705] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.426713][ T5705] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 481.426746][ T5705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.426770][ T5705] usb 2-1: Product: syz [ 481.426787][ T5705] usb 2-1: Manufacturer: syz [ 481.426804][ T5705] usb 2-1: SerialNumber: syz [ 481.465970][ T5705] usb 2-1: config 0 descriptor?? [ 481.587563][ T5734] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 481.633867][T11852] FAULT_INJECTION: forcing a failure. [ 481.633867][T11852] name failslab, interval 1, probability 0, space 0, times 0 [ 481.633908][T11852] CPU: 1 UID: 0 PID: 11852 Comm: syz.3.2376 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 481.633954][T11852] Tainted: [L]=SOFTLOCKUP [ 481.633963][T11852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 481.633978][T11852] Call Trace: [ 481.633987][T11852] [ 481.633997][T11852] dump_stack_lvl+0xe8/0x150 [ 481.634031][T11852] should_fail_ex+0x46b/0x600 [ 481.634079][T11852] should_failslab+0xa8/0x100 [ 481.634107][T11852] __kmalloc_noprof+0xdf/0x7b0 [ 481.634130][T11852] ? kfree+0x4d/0x6c0 [ 481.634161][T11852] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 481.634194][T11852] tomoyo_realpath_from_path+0xe3/0x5d0 [ 481.634222][T11852] ? tomoyo_domain+0xd7/0x130 [ 481.634253][T11852] ? tomoyo_path_number_perm+0x219/0x630 [ 481.634288][T11852] tomoyo_path_number_perm+0x246/0x630 [ 481.634324][T11852] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 481.634357][T11852] ? __lock_acquire+0x6b5/0x2d10 [ 481.634388][T11852] ? do_raw_spin_lock+0x12b/0x2f0 [ 481.634442][T11852] ? __fget_files+0x2a/0x420 [ 481.634468][T11852] ? __fget_files+0x2a/0x420 [ 481.634490][T11852] ? __fget_files+0x3a6/0x420 [ 481.634511][T11852] ? __fget_files+0x2a/0x420 [ 481.634538][T11852] security_file_ioctl+0xc3/0x2a0 [ 481.634576][T11852] __se_sys_ioctl+0x47/0x170 [ 481.634606][T11852] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.634630][T11852] do_syscall_64+0x174/0x580 [ 481.634656][T11852] ? trace_irq_disable+0x3b/0x140 [ 481.634685][T11852] ? clear_bhb_loop+0x40/0x90 [ 481.634712][T11852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.634735][T11852] RIP: 0033:0x7f3b57b4ce59 [ 481.634756][T11852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.634777][T11852] RSP: 002b:00007f3b55d9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 481.634800][T11852] RAX: ffffffffffffffda RBX: 00007f3b57dc5fa0 RCX: 00007f3b57b4ce59 [ 481.634817][T11852] RDX: 0000000000000000 RSI: 000000004001af84 RDI: 0000000000000003 [ 481.634832][T11852] RBP: 00007f3b55d9e090 R08: 0000000000000000 R09: 0000000000000000 [ 481.634845][T11852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.634859][T11852] R13: 00007f3b57dc6038 R14: 00007f3b57dc5fa0 R15: 00007ffe6f27a2b8 [ 481.634893][T11852] [ 481.634932][T11852] ERROR: Out of memory at tomoyo_realpath_from_path. [ 481.717488][ T5734] usb 1-1: device descriptor read/64, error -71 [ 481.967835][ T5734] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 482.035530][T11859] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2379'. [ 482.108572][T11859] netlink: 'syz.2.2379': attribute type 2 has an invalid length. [ 482.108611][T11859] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2379'. [ 482.112163][ T5734] usb 1-1: device descriptor read/64, error -71 [ 482.140552][T11865] cgroup: noprefix used incorrectly [ 482.217853][ T5734] usb usb1-port1: attempt power cycle [ 482.277535][ T38] audit: type=1326 audit(1781128085.096:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11869 comm="syz.3.2383" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3b57b4ce59 code=0x0 [ 482.336869][T11871] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2383'. [ 482.336887][T11871] tipc: Invalid UDP bearer configuration [ 482.336916][T11871] tipc: Enabling of bearer rejected, failed to enable media [ 482.569180][ T5734] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 482.590083][ T5734] usb 1-1: device descriptor read/8, error -71 [ 482.827491][ T5734] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 482.848314][ T5734] usb 1-1: device descriptor read/8, error -71 [ 482.958004][ T5734] usb usb1-port1: unable to enumerate USB device [ 483.439866][T11896] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2392'. [ 484.072597][ T32] usb 2-1: USB disconnect, device number 92 [ 484.146570][T11923] netlink: 'syz.1.2402': attribute type 10 has an invalid length. [ 484.146587][T11923] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2402'. [ 484.466517][T11935] FAULT_INJECTION: forcing a failure. [ 484.466517][T11935] name failslab, interval 1, probability 0, space 0, times 0 [ 484.470127][T11935] CPU: 1 UID: 0 PID: 11935 Comm: syz.2.2408 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 484.470165][T11935] Tainted: [L]=SOFTLOCKUP [ 484.470173][T11935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 484.470185][T11935] Call Trace: [ 484.470192][T11935] [ 484.470201][T11935] dump_stack_lvl+0xe8/0x150 [ 484.470228][T11935] should_fail_ex+0x46b/0x600 [ 484.470258][T11935] should_failslab+0xa8/0x100 [ 484.470291][T11935] __kmalloc_cache_noprof+0x84/0x690 [ 484.470315][T11935] ? nsim_fib_event_nb+0x18b/0x1240 [ 484.470342][T11935] ? pcpu_memcg_post_alloc_hook+0x8c/0x630 [ 484.470367][T11935] nsim_fib_event_nb+0x18b/0x1240 [ 484.470397][T11935] ? atomic_notifier_call_chain+0x26/0x180 [ 484.470425][T11935] notifier_call_chain+0x1ad/0x3d0 [ 484.470448][T11935] ? atomic_notifier_call_chain+0x26/0x180 [ 484.470471][T11935] atomic_notifier_call_chain+0xda/0x180 [ 484.470493][T11935] call_fib_notifiers+0x31/0x60 [ 484.470516][T11935] fib6_add_rt2node+0x15ff/0x3940 [ 484.470549][T11935] ? __lock_acquire+0x6b5/0x2d10 [ 484.470579][T11935] ? __pfx_fib6_add_rt2node+0x10/0x10 [ 484.470602][T11935] ? fib6_add_1+0x1167/0x1460 [ 484.470634][T11935] fib6_add+0x8e7/0x18c0 [ 484.470657][T11935] ? rcu_is_watching+0x15/0xb0 [ 484.470685][T11935] ? rt_spin_lock+0x20e/0x400 [ 484.470712][T11935] ? __pfx_fib6_add+0x10/0x10 [ 484.470733][T11935] ? rcu_is_watching+0x15/0xb0 [ 484.470762][T11935] ? __local_bh_disable_ip+0x3c/0x420 [ 484.470793][T11935] ? ip6_route_add+0xc8/0x1d0 [ 484.470814][T11935] ? ip6_route_add+0xc8/0x1d0 [ 484.470831][T11935] ip6_route_add+0xf5/0x1d0 [ 484.470853][T11935] ipv6_route_ioctl+0x3ac/0x4f0 [ 484.470879][T11935] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 484.470931][T11935] inet6_ioctl+0x246/0x2e0 [ 484.470958][T11935] ? __pfx_inet6_ioctl+0x10/0x10 [ 484.470982][T11935] ? tomoyo_path_number_perm+0x219/0x630 [ 484.471017][T11935] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 484.471047][T11935] sock_do_ioctl+0x101/0x320 [ 484.471076][T11935] ? __pfx_sock_do_ioctl+0x10/0x10 [ 484.471115][T11935] sock_ioctl+0x5c9/0x7f0 [ 484.471142][T11935] ? __pfx_sock_ioctl+0x10/0x10 [ 484.471167][T11935] ? __fget_files+0x2a/0x420 [ 484.471184][T11935] ? __fget_files+0x3a6/0x420 [ 484.471201][T11935] ? __fget_files+0x2a/0x420 [ 484.471223][T11935] ? bpf_lsm_file_ioctl+0x9/0x20 [ 484.471244][T11935] ? __pfx_sock_ioctl+0x10/0x10 [ 484.471274][T11935] __se_sys_ioctl+0xff/0x170 [ 484.471315][T11935] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.471335][T11935] do_syscall_64+0x174/0x580 [ 484.471357][T11935] ? trace_irq_disable+0x3b/0x140 [ 484.471381][T11935] ? clear_bhb_loop+0x40/0x90 [ 484.471404][T11935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.471423][T11935] RIP: 0033:0x7f0b43fcce59 [ 484.471441][T11935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 484.471459][T11935] RSP: 002b:00007f0b42226028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 484.471479][T11935] RAX: ffffffffffffffda RBX: 00007f0b44245fa0 RCX: 00007f0b43fcce59 [ 484.471493][T11935] RDX: 0000200000000540 RSI: 000000000000890b RDI: 0000000000000003 [ 484.471506][T11935] RBP: 00007f0b42226090 R08: 0000000000000000 R09: 0000000000000000 [ 484.471519][T11935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.471530][T11935] R13: 00007f0b44246038 R14: 00007f0b44245fa0 R15: 00007ffda231be48 [ 484.471560][T11935] [ 484.547985][ T32] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 484.760401][ T32] usb 2-1: device descriptor read/64, error -71 [ 484.928597][ T5777] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 485.007712][ T32] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 485.080918][ T5777] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 485.080979][ T5777] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 485.084816][ T5777] usb 1-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 485.084850][ T5777] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.084875][ T5777] usb 1-1: Product: syz [ 485.084892][ T5777] usb 1-1: Manufacturer: syz [ 485.084909][ T5777] usb 1-1: SerialNumber: syz [ 485.157509][ T32] usb 2-1: device descriptor read/64, error -71 [ 485.217872][ T5705] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 485.268302][ T32] usb usb2-port1: attempt power cycle [ 485.377728][ T5705] usb 4-1: Using ep0 maxpacket: 16 [ 485.380277][ T5705] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.383593][ T5705] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 485.383624][ T5705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.383648][ T5705] usb 4-1: Product: syz [ 485.383665][ T5705] usb 4-1: Manufacturer: syz [ 485.383683][ T5705] usb 4-1: SerialNumber: syz [ 485.398824][ T5705] usb 4-1: config 0 descriptor?? [ 485.492407][ T5734] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 485.636596][ T5777] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 485.637478][ T5734] usb 3-1: device descriptor read/64, error -71 [ 485.638748][ T32] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 485.667624][ T32] usb 2-1: device descriptor read/8, error -71 [ 485.678795][ T5777] usb 1-1: USB disconnect, device number 113 [ 485.889645][ T5734] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 485.929141][ T32] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 485.948115][ T32] usb 2-1: device descriptor read/8, error -71 [ 486.017595][ T5734] usb 3-1: device descriptor read/64, error -71 [ 486.057882][ T32] usb usb2-port1: unable to enumerate USB device [ 486.131144][ T5734] usb usb3-port1: attempt power cycle [ 486.467650][ T5734] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 486.488056][ T5734] usb 3-1: device descriptor read/8, error -71 [ 486.737523][ T5734] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 486.769983][ T5734] usb 3-1: device descriptor read/8, error -71 [ 486.878350][ T5734] usb usb3-port1: unable to enumerate USB device [ 487.077536][ T10] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 487.208653][ T10] usb 1-1: device descriptor read/64, error -71 [ 487.332489][T11975] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2422'. [ 487.447604][ T10] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 487.577701][ T10] usb 1-1: device descriptor read/64, error -71 [ 487.689628][ T10] usb usb1-port1: attempt power cycle [ 488.029780][ T5776] usb 4-1: USB disconnect, device number 108 [ 488.048286][ T10] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 488.068486][ T10] usb 1-1: device descriptor read/8, error -71 [ 488.314300][ T10] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 488.328931][ T10] usb 1-1: device descriptor read/8, error -71 [ 488.438771][ T10] usb usb1-port1: unable to enumerate USB device [ 488.767722][ T10] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 488.867569][ T5734] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 488.920433][ T10] usb 4-1: config 127 has an invalid interface number: 124 but max is 2 [ 488.920475][ T10] usb 4-1: config 127 contains an unexpected descriptor of type 0x2, skipping [ 488.920497][ T10] usb 4-1: config 127 has an invalid interface number: 227 but max is 2 [ 488.920535][ T10] usb 4-1: config 127 has an invalid interface number: 124 but max is 2 [ 488.920551][ T10] usb 4-1: config 127 has an invalid interface number: 76 but max is 2 [ 488.920579][ T10] usb 4-1: config 127 has an invalid interface number: 196 but max is 2 [ 488.920601][ T10] usb 4-1: config 127 has 4 interfaces, different from the descriptor's value: 3 [ 488.920620][ T10] usb 4-1: config 127 has no interface number 0 [ 488.920633][ T10] usb 4-1: config 127 has no interface number 1 [ 488.920646][ T10] usb 4-1: config 127 has no interface number 2 [ 488.920663][ T10] usb 4-1: config 127 has no interface number 3 [ 488.920723][ T10] usb 4-1: config 127 interface 124 altsetting 8 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 488.920745][ T10] usb 4-1: config 127 interface 124 altsetting 8 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 488.920771][ T10] usb 4-1: config 127 interface 124 altsetting 8 has a duplicate endpoint with address 0xD, skipping [ 488.920789][ T10] usb 4-1: config 127 interface 124 altsetting 8 bulk endpoint 0xB has invalid maxpacket 1023 [ 488.920808][ T10] usb 4-1: config 127 interface 124 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 488.920835][ T10] usb 4-1: config 127 interface 227 altsetting 6 has a duplicate endpoint with address 0x4, skipping [ 488.920853][ T10] usb 4-1: config 127 interface 227 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 488.920895][ T10] usb 4-1: config 127 interface 124 altsetting 156 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 488.920917][ T10] usb 4-1: too many endpoints for config 127 interface 76 altsetting 205: 131, using maximum allowed: 30 [ 488.920945][ T10] usb 4-1: config 127 interface 76 altsetting 205 has a duplicate endpoint with address 0x4, skipping [ 488.920963][ T10] usb 4-1: config 127 interface 76 altsetting 205 has a duplicate endpoint with address 0x5, skipping [ 488.920981][ T10] usb 4-1: config 127 interface 76 altsetting 205 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 488.921002][ T10] usb 4-1: config 127 interface 76 altsetting 205 has an invalid descriptor for endpoint zero, skipping [ 488.921020][ T10] usb 4-1: config 127 interface 76 altsetting 205 has a duplicate endpoint with address 0x8, skipping [ 488.921038][ T10] usb 4-1: config 127 interface 76 altsetting 205 has a duplicate endpoint with address 0x4, skipping [ 488.921056][ T10] usb 4-1: config 127 interface 76 altsetting 205 has a duplicate endpoint with address 0xE, skipping [ 488.921075][ T10] usb 4-1: config 127 interface 76 altsetting 205 has 9 endpoint descriptors, different from the interface descriptor's value: 131 [ 488.921096][ T10] usb 4-1: too many endpoints for config 127 interface 196 altsetting 188: 103, using maximum allowed: 30 [ 488.921137][ T10] usb 4-1: config 127 interface 196 altsetting 188 has a duplicate endpoint with address 0xD, skipping [ 488.921155][ T10] usb 4-1: config 127 interface 196 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 103 [ 488.921176][ T10] usb 4-1: config 127 interface 124 has no altsetting 0 [ 488.921190][ T10] usb 4-1: config 127 interface 124 has no altsetting 1 [ 488.921204][ T10] usb 4-1: config 127 interface 227 has no altsetting 0 [ 488.921218][ T10] usb 4-1: config 127 interface 76 has no altsetting 0 [ 488.921232][ T10] usb 4-1: config 127 interface 196 has no altsetting 0 [ 489.021853][ T10] usb 4-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=8c.f2 [ 489.021946][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.021994][ T10] usb 4-1: Product: 蕱핿獦颻䙁Ḃ居䖼됨ꎶ呂䁪︨냻鎯䤉ৣﳢ畯新≺☋㼨 [ 489.022048][ T10] usb 4-1: Manufacturer: 苌孋⧖웰茁ᇀย㓝疉垀⧝넔蚻왏炞唎堕ꎒ끲巇䪴ﾗꣃ뜶۟䴳홳䅗묇ᴗ䓚ꕉꉡᐧ׋䩋㪻侀LJ㳽⩁ ꔔ羫ᒪ礯Ξ麪繴階岇뵕햁俧▽䘌ஊ₏䑍嶪풬歟礧꫅宽힪鄂蹆쌦崏攞ᬤ짺ᮊ爢삃颠㬱㛛枉홚滈畾鲨༳뻵튐孋圱⭥跮並磕⯢䍲ᬳ絝䛚䊐戽줮鹘❯ቀ횥蹩޳写℈ᨂႧ [ 489.022154][ T10] usb 4-1: SerialNumber: 㸪쿾쭦䁩婳启啔螈㢥⩜眞聱ᅴ从ₔᘽ޲諐舁콞䏰䟸ᇳ獫啨檇⩌쀻은ϱ籽ᗟ뙢隖矜핑㓍쁆腴軚禴띰뙝쉆♛崛媆Ὺꕮ╫┘귔ꞛ␝垞؀ύᰯ繣䷥펖ጳ鰚떤懵꺤㸔慁J욇龣厷෫韕뉬樴ť镢ꕯꐣ콖ﳩ੐섡贽柈䝸ｗ—ꋅ [ 489.117455][ T5734] usb 2-1: Using ep0 maxpacket: 16 [ 489.117534][T11995] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 489.186096][ T5734] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 489.402100][ T5734] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 489.402135][ T5734] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.402158][ T5734] usb 2-1: Product: syz [ 489.402176][ T5734] usb 2-1: Manufacturer: syz [ 489.402193][ T5734] usb 2-1: SerialNumber: syz [ 489.443374][ T5734] usb 2-1: config 0 descriptor?? [ 489.777533][ T5777] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 490.003411][T12019] netlink: 'syz.2.2438': attribute type 5 has an invalid length. [ 490.163581][ T10] ljca 4-1:127.124: bulk endpoints not found [ 490.210961][ T10] ljca 4-1:127.227: bulk endpoints not found [ 490.238109][ T10] ljca 4-1:127.76: bulk endpoints not found [ 490.256419][ T10] ljca 4-1:127.196: bulk endpoints not found [ 490.368551][ T10] usb 4-1: USB disconnect, device number 109 [ 490.454360][T12029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2441'. [ 490.454386][T12029] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2441'. [ 491.022978][T12039] FAULT_INJECTION: forcing a failure. [ 491.022978][T12039] name failslab, interval 1, probability 0, space 0, times 0 [ 491.023023][T12039] CPU: 1 UID: 0 PID: 12039 Comm: syz.3.2442 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 491.023055][T12039] Tainted: [L]=SOFTLOCKUP [ 491.023064][T12039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 491.023090][T12039] Call Trace: [ 491.023100][T12039] [ 491.023109][T12039] dump_stack_lvl+0xe8/0x150 [ 491.023141][T12039] should_fail_ex+0x46b/0x600 [ 491.023181][T12039] should_failslab+0xa8/0x100 [ 491.023209][T12039] __kmalloc_cache_noprof+0x84/0x690 [ 491.023233][T12039] ? dev_ethtool+0x13f/0x29c0 [ 491.023270][T12039] dev_ethtool+0x13f/0x29c0 [ 491.023300][T12039] ? __lock_acquire+0x6b5/0x2d10 [ 491.023343][T12039] ? __pfx_dev_ethtool+0x10/0x10 [ 491.023376][T12039] ? kasan_quarantine_put+0xbb/0x1f0 [ 491.023414][T12039] ? dev_load+0x21/0x1f0 [ 491.023445][T12039] ? dev_load+0x21/0x1f0 [ 491.023470][T12039] ? dev_load+0x21/0x1f0 [ 491.023493][T12039] dev_ioctl+0x392/0x1150 [ 491.023520][T12039] sock_do_ioctl+0x23e/0x320 [ 491.023552][T12039] ? __pfx_sock_do_ioctl+0x10/0x10 [ 491.023599][T12039] sock_ioctl+0x5c9/0x7f0 [ 491.023631][T12039] ? __pfx_sock_ioctl+0x10/0x10 [ 491.023661][T12039] ? __fget_files+0x2a/0x420 [ 491.023682][T12039] ? __fget_files+0x3a6/0x420 [ 491.023702][T12039] ? __fget_files+0x2a/0x420 [ 491.023727][T12039] ? bpf_lsm_file_ioctl+0x9/0x20 [ 491.023753][T12039] ? __pfx_sock_ioctl+0x10/0x10 [ 491.023784][T12039] __se_sys_ioctl+0xff/0x170 [ 491.023832][T12039] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.023857][T12039] do_syscall_64+0x174/0x580 [ 491.023884][T12039] ? trace_irq_disable+0x3b/0x140 [ 491.023914][T12039] ? clear_bhb_loop+0x40/0x90 [ 491.023942][T12039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.023964][T12039] RIP: 0033:0x7f3b57b4ce59 [ 491.023987][T12039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 491.024007][T12039] RSP: 002b:00007f3b55d9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 491.024032][T12039] RAX: ffffffffffffffda RBX: 00007f3b57dc5fa0 RCX: 00007f3b57b4ce59 [ 491.024050][T12039] RDX: 0000200000000140 RSI: 0000000000008946 RDI: 0000000000000003 [ 491.024076][T12039] RBP: 00007f3b55d9e090 R08: 0000000000000000 R09: 0000000000000000 [ 491.024092][T12039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.024105][T12039] R13: 00007f3b57dc6038 R14: 00007f3b57dc5fa0 R15: 00007ffe6f27a2b8 [ 491.024140][T12039] [ 491.536931][T12019] ------------[ cut here ]------------ [ 491.536949][T12019] kcov->t != t [ 491.536965][T12019] WARNING: kernel/kcov.c:475 at kcov_task_exit+0x181/0x240, CPU#0: syz.2.2438/12019 [ 491.537017][T12019] Modules linked in: [ 491.537041][T12019] CPU: 0 UID: 0 PID: 12019 Comm: syz.2.2438 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 491.537076][T12019] Tainted: [L]=SOFTLOCKUP [ 491.537085][T12019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 491.537102][T12019] RIP: 0010:kcov_task_exit+0x181/0x240 [ 491.537132][T12019] Code: 90 00 00 00 e8 b0 3a 5a 00 4c 89 f7 5b 41 5e 41 5f e9 63 01 60 00 7c 40 5b 41 5e 41 5f c3 cc cc cc cc cc 90 0f 0b 90 eb 10 90 <0f> 0b 90 eb 0a 90 0f 0b 90 eb 04 90 0f 0b 90 4c 89 ff 5b 41 5e 41 [ 491.537155][T12019] RSP: 0018:ffffc9000ee8fae0 EFLAGS: 00010206 [ 491.537176][T12019] RAX: 96da2d1decef5900 RBX: ffff88802d085d00 RCX: 0000000000000000 [ 491.537195][T12019] RDX: 00000000d492317c RSI: ffffffff8bcc4a60 RDI: 00000000ffffffff [ 491.537213][T12019] RBP: ffffc9000ee8fc30 R08: ffffffff8b3ffb20 R09: ffffffff8e3cb2a0 [ 491.537232][T12019] R10: dffffc0000000000 R11: fffffbfff1f9e55f R12: dffffc0000000000 [ 491.537252][T12019] R13: 0000000000000000 R14: ffff88802c87ab00 R15: ffff88802c87ab08 [ 491.537270][T12019] FS: 00007f0b422266c0(0000) GS:ffff888125a6e000(0000) knlGS:0000000000000000 [ 491.537292][T12019] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 491.537310][T12019] CR2: 0000001b33522ff8 CR3: 000000008679c000 CR4: 00000000003526f0 [ 491.537409][T12019] Call Trace: [ 491.537421][T12019] [ 491.537434][T12019] do_exit+0x150/0x22c0 [ 491.537470][T12019] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 491.537501][T12019] ? lockdep_hardirqs_on+0x7a/0x110 [ 491.537533][T12019] ? __pfx_do_exit+0x10/0x10 [ 491.537560][T12019] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 491.537598][T12019] ? reacquire_held_locks+0x104/0x190 [ 491.537635][T12019] ? rt_spin_lock+0x1e0/0x400 [ 491.537675][T12019] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 491.537722][T12019] do_group_exit+0x21b/0x2d0 [ 491.537760][T12019] ? rt_spin_unlock+0x160/0x200 [ 491.537802][T12019] get_signal+0x1284/0x1330 [ 491.537861][T12019] arch_do_signal_or_restart+0xbc/0x840 [ 491.537893][T12019] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 491.537942][T12019] exit_to_user_mode_loop+0x104/0x710 [ 491.537973][T12019] ? rcu_is_watching+0x15/0xb0 [ 491.538011][T12019] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.538039][T12019] do_syscall_64+0x353/0x580 [ 491.538068][T12019] ? trace_irq_disable+0x3b/0x140 [ 491.538100][T12019] ? clear_bhb_loop+0x40/0x90 [ 491.538130][T12019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.538156][T12019] RIP: 0033:0x7f0b43fcce59 [ 491.538179][T12019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 491.538202][T12019] RSP: 002b:00007f0b42226028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 491.538227][T12019] RAX: 00000000000000ec RBX: 00007f0b44245fa0 RCX: 00007f0b43fcce59 [ 491.538246][T12019] RDX: 0000000000068000 RSI: 0000200000000f40 RDI: 0000000000000003 [ 491.538264][T12019] RBP: 00007f0b44062d6f R08: 0000000000000000 R09: 0000000000000000 [ 491.538280][T12019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 491.538294][T12019] R13: 00007f0b44246038 R14: 00007f0b44245fa0 R15: 00007ffda231be48 [ 491.538332][T12019] [ 491.538351][T12019] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 491.538373][T12019] CPU: 0 UID: 0 PID: 12019 Comm: syz.2.2438 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 491.538407][T12019] Tainted: [L]=SOFTLOCKUP [ 491.538417][T12019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 491.538431][T12019] Call Trace: [ 491.538442][T12019] [ 491.538452][T12019] vpanic+0x56c/0xa60 [ 491.538489][T12019] ? __pfx__printk+0x10/0x10 [ 491.538515][T12019] ? __pfx_vpanic+0x10/0x10 [ 491.538550][T12019] ? is_bpf_text_address+0x292/0x2b0 [ 491.538586][T12019] ? is_bpf_text_address+0x26/0x2b0 [ 491.538631][T12019] panic+0xc5/0xd0 [ 491.538666][T12019] ? __pfx_panic+0x10/0x10 [ 491.538719][T12019] __warn+0x315/0x4c0 [ 491.538784][T12019] ? kcov_task_exit+0x181/0x240 [ 491.538814][T12019] ? kcov_task_exit+0x181/0x240 [ 491.538842][T12019] __report_bug+0x339/0x540 [ 491.538878][T12019] ? kcov_task_exit+0x181/0x240 [ 491.538907][T12019] ? __pfx___report_bug+0x10/0x10 [ 491.538935][T12019] ? try_to_take_rt_mutex+0x840/0xb00 [ 491.538963][T12019] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 491.538992][T12019] ? rt_spin_lock+0x1e0/0x400 [ 491.539031][T12019] ? rt_spin_lock+0x1e0/0x400 [ 491.539075][T12019] ? kcov_task_exit+0x181/0x240 [ 491.539103][T12019] report_bug+0x16a/0x220 [ 491.539134][T12019] ? kcov_task_exit+0x181/0x240 [ 491.539160][T12019] ? kcov_task_exit+0x183/0x240 [ 491.539188][T12019] handle_bug+0x9c/0x200 [ 491.539222][T12019] exc_invalid_op+0x1a/0x50 [ 491.539257][T12019] asm_exc_invalid_op+0x1a/0x20 [ 491.539281][T12019] RIP: 0010:kcov_task_exit+0x181/0x240 [ 491.539309][T12019] Code: 90 00 00 00 e8 b0 3a 5a 00 4c 89 f7 5b 41 5e 41 5f e9 63 01 60 00 7c 40 5b 41 5e 41 5f c3 cc cc cc cc cc 90 0f 0b 90 eb 10 90 <0f> 0b 90 eb 0a 90 0f 0b 90 eb 04 90 0f 0b 90 4c 89 ff 5b 41 5e 41 [ 491.539330][T12019] RSP: 0018:ffffc9000ee8fae0 EFLAGS: 00010206 [ 491.539352][T12019] RAX: 96da2d1decef5900 RBX: ffff88802d085d00 RCX: 0000000000000000 [ 491.539370][T12019] RDX: 00000000d492317c RSI: ffffffff8bcc4a60 RDI: 00000000ffffffff [ 491.539388][T12019] RBP: ffffc9000ee8fc30 R08: ffffffff8b3ffb20 R09: ffffffff8e3cb2a0 [ 491.539406][T12019] R10: dffffc0000000000 R11: fffffbfff1f9e55f R12: dffffc0000000000 [ 491.539426][T12019] R13: 0000000000000000 R14: ffff88802c87ab00 R15: ffff88802c87ab08 [ 491.539451][T12019] ? rt_spin_lock+0x1e0/0x400 [ 491.539498][T12019] do_exit+0x150/0x22c0 [ 491.539530][T12019] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 491.539559][T12019] ? lockdep_hardirqs_on+0x7a/0x110 [ 491.539589][T12019] ? __pfx_do_exit+0x10/0x10 [ 491.539615][T12019] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 491.539653][T12019] ? reacquire_held_locks+0x104/0x190 [ 491.539690][T12019] ? rt_spin_lock+0x1e0/0x400 [ 491.539734][T12019] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 491.539801][T12019] do_group_exit+0x21b/0x2d0 [ 491.539831][T12019] ? rt_spin_unlock+0x160/0x200 [ 491.539870][T12019] get_signal+0x1284/0x1330 [ 491.539929][T12019] arch_do_signal_or_restart+0xbc/0x840 [ 491.539959][T12019] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 491.540007][T12019] exit_to_user_mode_loop+0x104/0x710 [ 491.540038][T12019] ? rcu_is_watching+0x15/0xb0 [ 491.540076][T12019] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.540103][T12019] do_syscall_64+0x353/0x580 [ 491.540131][T12019] ? trace_irq_disable+0x3b/0x140 [ 491.540161][T12019] ? clear_bhb_loop+0x40/0x90 [ 491.540191][T12019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.540216][T12019] RIP: 0033:0x7f0b43fcce59 [ 491.540237][T12019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 491.540258][T12019] RSP: 002b:00007f0b42226028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 491.540282][T12019] RAX: 00000000000000ec RBX: 00007f0b44245fa0 RCX: 00007f0b43fcce59 [ 491.540300][T12019] RDX: 0000000000068000 RSI: 0000200000000f40 RDI: 0000000000000003 [ 491.540316][T12019] RBP: 00007f0b44062d6f R08: 0000000000000000 R09: 0000000000000000 [ 491.540331][T12019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 491.540346][T12019] R13: 00007f0b44246038 R14: 00007f0b44245fa0 R15: 00007ffda231be48 [ 491.540383][T12019] [ 491.541001][T12019] Kernel Offset: disabled