last executing test programs: 4m9.624488202s ago: executing program 1 (id=1797): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xff, 0x807}) r1 = socket$netlink(0x10, 0x3, 0xe) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) close(r2) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000240)={0x80000000, 0x0, &(0x7f00000003c0)}) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f00000001c0)={'nat\x00', 0xad, "689d5ca688c8f4e4809ea9f8c3c3531c1b84dc554d5f43e68ac9eb44ae815b3853bfd8ad470725814fe18aa741f8c1f9627fc5f5ee0253a152fead1581ab3ad2d1cd7385f1796b2a3ae34a9eed191ac4d6a0ea089db9f97ca2f293ac2dcf1b71a0332ad83b48f37bc432da7e0eb6a24b800f95672a2a020d64fc5e91a6c1ec6b2bab9dc752b5a59bdbd71449e4f8400a887a6ad5f4aa10a8c62bdf2575c33c5ae2943d4266e1abccfbc86e5416"}, &(0x7f00000002c0)=0xd1) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 4m9.124732571s ago: executing program 1 (id=1800): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000002300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r0, 0x0, 0x90, 0x0) (fail_nth: 11) write$FUSE_ENTRY(r2, &(0x7f0000000000)={0x90, 0xfffffffffffffffe, 0x0, {0x7, 0x2, 0x5, 0x5, 0xfffffffa, 0x3, {0x5, 0x80f, 0x7fff, 0x7, 0xa, 0x1, 0x8, 0x800, 0x6, 0xa000, 0x80002, 0x0, 0x0, 0x6704, 0x30311810}}}, 0x90) 4m8.867198978s ago: executing program 1 (id=1803): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x2000000) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) waitid(0x0, r2, 0x0, 0x1, &(0x7f0000000080)) 4m8.676161765s ago: executing program 1 (id=1804): ioctl$XFS_IOC_FSGROWFSLOG(0xffffffffffffffff, 0x4008586f, &(0x7f0000000000)={0x7, 0x100}) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000100)={0xf, 0x400, {0x54, 0xa, 0x6, {0x11da, 0x7}, {0x180, 0x100}, @period={0x5d, 0x3, 0x1, 0x1f40, 0x3, {0xd6, 0x2, 0x2, 0x1000}, 0x6, &(0x7f0000000080)=[0x4, 0x7, 0x9, 0x6, 0x80, 0x0]}}, {0x57, 0x6, 0x0, {0x3, 0x7}, {0x8000, 0x598}, @period={0x5a, 0x2, 0x57a, 0x3, 0x0, {0x7, 0xfffa, 0x7fff, 0x1}, 0x1, &(0x7f00000000c0)=[0x0]}}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0xb) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)={0xc5, 0x0, r1}) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000200), 0x51, 0x1d1080) ioctl$FE_SET_FRONTEND_TUNE_MODE(r2, 0x6f51, &(0x7f0000000240)) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) ioctl$FE_GET_PROPERTY(r2, 0x80106f53, &(0x7f00000004c0)={0x2e, &(0x7f0000000280)=[{0x30, '\x00', @st={0x4, [{0x3, @svalue=0x215a}, {0x3, @uvalue=0x8000000000000000}, {0x2, @svalue=0x4}, {0x1, @svalue=0x67}]}, 0x5}, {0x3, '\x00', @data=0x3, 0x3}, {0x16, '\x00', @st={0x4, [{0x3, @uvalue=0x40}, {0x3, @svalue=0xe}, {0x3, @svalue=0xffffffffffffff81}, {0x0, @uvalue=0x2}]}, 0xe0a5}, {0x0, '\x00', @buffer={"4a813d7553d9de470753547fdca493c2afd0ce7602cd343db16335a35a60509c", 0x20}, 0x5}, {0x6, '\x00', @buffer={"88ec6f889dd39976478cd133c5a3627335bb662309571aba27ea9a270ccc3107", 0x20}, 0x5}, {0x2c, '\x00', @st={0x4, [{0x1, @svalue=0x5}, {0x0, @svalue=0x7fffffffffffffff}, {0x0, @svalue=0x2}, {0x2, @svalue=0x80000001}]}, 0x2}, {0x41, '\x00', @st={0x4, [{0x2, @uvalue=0x4}, {0x0, @uvalue=0x9}, {0x0, @uvalue=0x200}, {0x2, @svalue=0xa}]}, 0x2}]}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000500)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000540)=0x28) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000580)={r3, 0x5, 0x2}, &(0x7f00000005c0)=0x8) ioctl$UI_DEV_CREATE(r0, 0x5501) r4 = syz_open_dev$swradio(&(0x7f0000000600), 0x0, 0x2) ioctl$F2FS_IOC_SEC_TRIM_FILE(r4, 0x4018f514, &(0x7f0000000640)={0x7ff, 0x4, 0x2}) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000680)={0xd4, 0x80000, r2}) sendmmsg$alg(r5, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000006c0)="98a1e1617ff323cff54bcd8a968b0d6682c250890c5ac62283c44207d1058ab4055f28cf9ed9b7d8", 0x28}], 0x1, &(0x7f0000000740)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0xdf53f6433ded9246}, @op={0x18}, @iv={0xa0, 0x117, 0x2, 0x8c, "53581bff2abf1d2cb067b720b4c1e18766e5a941e7e181bd9f6656061d9d8d971d6ec1ee5e580bd4a232a4eba0a378b59fcb788140e9db09f2ff1ed64db05942b6a43a70cf7c68322875d537c0091579c99983dd85ba75fb7993eff06bded04488bf334f0b9c8b6ca55d880243e269f2b9be30b7d70a5c3fb0d52aaeded29dba87154144e7df1f479f171e1e"}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18}, @iv={0x78, 0x117, 0x2, 0x5d, "b8322949e37b0b7c66c241c49c3ba3b06aed51e1602a24a6dfb9c5c0bad98950ef677880955077a527e8586ad1cc1cd17a659907d5fa8f9ec0783cbac570171651b40e7ce22821e60dd1c681ad9f01cacc965b50e22e47c70ff89e15dc"}, @iv={0xc0, 0x117, 0x2, 0xa8, "32cc4986dbf56994ad7aa7037b79de8db765c04acd0dcf2f3b110c56f8ab8b4f6ce10f535531dfba7af7052b3889ccc0ff00ccd8d5e5f7b673c6fc8ccdcbf86cd480bfee3a799240cdc742248278e22f7852fa6b0a26b1516638134f123ca78f60894031deb40867f35f3c25bd1a5748c8e31cf66eafdb62b0daf8aa2f46f25083f208c99c3422aa7479765ccedf6218c31c037e74ddb88c25757e634c6e6d5a9b9292160327faa5"}], 0x268, 0x800}], 0x1, 0x20000001) write$uinput_user_dev(r5, &(0x7f0000000a00)={'syz1\x00', {0x2400, 0x3, 0x2, 0x3}, 0x1b, [0x2, 0x8001, 0x0, 0x3036, 0x4, 0x0, 0xf, 0xcd, 0x7, 0x0, 0x9, 0x5, 0x7, 0x1, 0x1, 0x57682b16, 0x2, 0xb57, 0x9, 0x7f, 0xfffffbc5, 0x2, 0x6, 0xffffff80, 0x2, 0x1a, 0x4, 0x0, 0xbe, 0x5, 0x7d6d, 0x4, 0x9, 0x8, 0xfff, 0x1, 0x5, 0x2, 0x2, 0xff, 0x0, 0x2, 0x6dc1, 0x3, 0x2, 0x0, 0x7, 0xa15b, 0x5, 0x8, 0x0, 0xfffffffa, 0x6, 0x2, 0x2, 0x3, 0x5, 0x7, 0x0, 0xc, 0x6, 0x1ff, 0xfff, 0x80], [0x1, 0x6, 0x7, 0x2, 0x5, 0x3, 0x8, 0x240, 0x10000, 0x2, 0x5d, 0x8, 0x2000000, 0x1cfd, 0x10000, 0xd31b, 0x9, 0x8, 0x1, 0x3ff, 0x560, 0x1, 0x55bc, 0x8, 0x8, 0x10000, 0x4, 0x4, 0x6, 0x0, 0x6, 0x9ba, 0x800, 0x4, 0x1, 0x8001, 0xd9, 0x0, 0x3ff, 0x7, 0x9a2, 0x28, 0x8, 0x7, 0x3ff, 0x7, 0x79, 0x8, 0x7, 0x5, 0x3, 0x4, 0x5, 0xd1ec, 0x9, 0x80000001, 0x4, 0x595cc9d8, 0x0, 0x5, 0x221403a8, 0x10000, 0x7, 0x3], [0xb3, 0x3, 0x2, 0x6, 0xa, 0x5, 0x101, 0x10, 0x9, 0x2a, 0x6, 0x4, 0x40, 0x9, 0x0, 0x3, 0x8001, 0xffffffff, 0x6, 0x9, 0xff, 0x3ff, 0x8001, 0x0, 0x2, 0x1, 0x7f, 0x0, 0x3, 0x4, 0x2, 0x1, 0x1000, 0x984, 0x2, 0xc, 0x5, 0x7fffffff, 0x7, 0x5, 0x4, 0x62, 0x7, 0x5, 0x8000, 0x9, 0xf, 0x8, 0x1, 0x8001, 0x7, 0x10001, 0x49, 0x10000, 0xfffff000, 0xb, 0xbc5, 0xbc, 0xf89e, 0x1, 0xfffffffc, 0x6, 0x2, 0x100], [0xffffff36, 0x5, 0x0, 0x2, 0x5, 0x2, 0x7f, 0x4, 0x4, 0x10001, 0x400, 0x4, 0x2, 0x374e, 0x6, 0x6, 0x6, 0x3, 0x3, 0xea, 0x40, 0x48, 0x400, 0x4, 0x8230, 0x3, 0x3, 0x1, 0xab7, 0x12, 0xe2, 0x2, 0x4, 0x9e, 0x0, 0x4, 0x2, 0x2, 0x0, 0x68, 0x5, 0x6, 0x7fff, 0x80000001, 0xffff7fff, 0x7fff, 0x4, 0x6, 0x9, 0xe, 0xf, 0xffe00000, 0x200, 0xd3, 0x0, 0x3, 0xfffffffd, 0x5, 0x7, 0xfffffffb, 0x7, 0x5, 0x1800, 0x7]}, 0x45c) read$FUSE(r5, &(0x7f0000000e80)={0x2020, 0x0, 0x0}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000002ec0)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff}}, './file0\x00'}) getgroups(0x3, &(0x7f0000002f00)=[0xee01, 0xffffffffffffffff, 0xffffffffffffffff]) write$FUSE_ENTRY(r5, &(0x7f0000002f40)={0x90, 0xfffffffffffffff5, r6, {0x4, 0x0, 0x4, 0x7, 0x5, 0x2, {0x3, 0x8, 0x101, 0x6, 0x2, 0x2, 0xfff, 0x1, 0x8, 0x6000, 0x0, r8, r9, 0x9, 0x6}}}, 0x90) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000003000)=0x1, 0x4) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000003040)) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000003080)={0x0, 0x1, 0xc}) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000003480)={r10, 0x1}) ioctl$SIOCGSKNS(r5, 0x894c, &(0x7f0000003880)={'veth0_to_bridge\x00', 0x200}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000048c0)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x5000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000038c0)="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", 0x1000, r4}, 0x68) ioctl$UI_END_FF_ERASE(r5, 0x400c55cb, &(0x7f0000004940)={0x4, 0xcd49, 0x7ff}) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000004980)={0x7, 0x8, {0x56, 0x397, 0x3, {0x6f81, 0x7}, {0x3ba4, 0x8}, @const={0xfa10, {0x7, 0x6, 0x8, 0x2}}}, {0x0, 0x5, 0x1, {0xb8, 0xf949}, {0x3, 0x1}, @const={0x4, {0xfff7, 0x6, 0x4, 0x6}}}}) 4m8.49739907s ago: executing program 1 (id=1805): syz_open_dev$vbi(0x0, 0x0, 0x2) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x8000000, 0x0, 0x30314752, 0x0, 0x0, 0x0, 0x0, 0x2}}) 4m8.159740029s ago: executing program 1 (id=1806): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80600, 0x0) r4 = accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) pidfd_getfd(r3, r4, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1], 0x15) 3m52.887474499s ago: executing program 32 (id=1806): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80600, 0x0) r4 = accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) pidfd_getfd(r3, r4, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1], 0x15) 3m34.370545846s ago: executing program 2 (id=1928): r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x78, 0xa0, 0x78, 0x36, 0x1c0, 0x4, 0x0, {}, {}, {0x0, 0x0, 0x1}, {}, 0x0, 0x40, 0xaa, 0x0, 0x1, 0x1, 0x1, 0x8000001, 0x0, 0xfffffffd, 0x0, 0x8, 0xa, 0x0, 0x2, 0xa}) 3m34.285761952s ago: executing program 2 (id=1930): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4c", 0xe}], 0x1}, 0x1000) sendmsg$key(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x10}}, 0x4001) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000bc0)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f0000000980)={0x0, &(0x7f00000007c0)=[{}, {}, {}], 0x0, 0x0, '\x00', 0x0, 0x3}) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4e23, 0x7, @empty, 0x3}, 0x80, 0x0}, 0xcc840) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000000906010000000000008367ec68c488dcbb5d73283d350600e09cbb9bbbba814af2029957891b48f83525c417dc7d62cb020000000000000041c893a68053adb66d43bd696da2d28c6dd37f5d301344175f26d728726ac274e488ba7df9282ca4cd621804a4d626e9e8426bdb00179168e500613edbcf0a79c9c068e75d7515f93a6bc3cef0cc4c452cea43e6140701328e0593e39ae2fce926065aa8430062b0cf631ad23bc5a5f1a0e0e82c9f519b72fcea7075d628463358eb02f803dfcb1982a954ff87f5209d70a52d29067b4cb38931e174d18b9f6ca84af884"], 0x9}, 0x1, 0x0, 0x0, 0x100000c6}, 0x4000004) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) r2 = socket$alg(0x26, 0x5, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x8040) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040), 0x0, 0x40800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0xc010}, 0x8040) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0xfffffeeb, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x8894}, 0x4018845) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r5) shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffd000/0x1000)=nil) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0) close(r6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SIOCSIFHWADDR(r6, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="01000000008d"}) 3m34.0892345s ago: executing program 2 (id=1933): openat$comedi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x3, 0x2], [0x0, 0x0, 0x3], [0x4000000, 0xc, 0x0, 0x4]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000040)={r4, 0x0, 0xffffffffffffffff}) r6 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mknod(&(0x7f0000000a40)='./file0\x00', 0x10, 0x101) mount$afs(&(0x7f00000000c0)=ANY=[@ANYBLOB='%@mTsyz0:'], &(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) r7 = open(&(0x7f00000001c0)='./file0\x00', 0x108843, 0x55) fcntl$setlease(r7, 0x400, 0x1) mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, 0x0, 0x3000004, 0x2010, r7, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001300)=ANY=[@ANYBLOB="12010000000000205804115000000000000109022400010000000009040000050300000009210000000122940309058103"], 0x0) r9 = syz_usb_connect(0x0, 0xda6, &(0x7f0000001340)={{0x12, 0x1, 0x200, 0xa5, 0xe2, 0x40, 0x20, 0x711, 0x550, 0x879d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd94, 0x3, 0x1, 0x1, 0xf0, 0x8, "", [{{0x9, 0x4, 0xf2, 0x1, 0x2, 0xd6, 0x95, 0x34, 0xe, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x2, 0x4, 0x4}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x55a, 0x3, 0x7, 0x5}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x576, 0xfffd, 0xc, "7e482f29c8ab8cbdba"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x9, 0x2, 0xc0, 0x3}]}], [{{0x9, 0x5, 0x7, 0x0, 0x200, 0xa7, 0x8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x7}]}}, {{0x9, 0x5, 0x4, 0x1b, 0x200, 0xa, 0x4, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x1}]}}]}}, {{0x9, 0x4, 0x53, 0x1, 0x7, 0xff, 0xff, 0x30, 0xa, [@generic={0x91, 0x11, "ee9ba5cee05929a6e0beece432e406e9ad25f7f00042f56c1871dbc415a8670aa4a01227be380827264a79f4a34c9a24abb07ca4361b440fa9c330076574b0b6cae31217bab082aa6b8a85bc27f5a69d9fddbf852950bc01d3b50354c53487ebc95bd60953fa6563cafeb85fe30730331aaee0874d1ceccf18416704d97fcff61fbd382cb0ef8af5fea5b9d8929195"}], [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x0, 0x3, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x3b, 0x3ff}]}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x5, 0x93, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xc0, 0x4}]}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0x4, 0x6, 0x7, [@generic={0x97, 0x30, "6cf29e6ae2e87c2707b6564b1408b9a56d42ba188159157299a2157ea8b60c24bd602d0eb46a7f4c11382bf419170963c14a09b1fea81d64a2cd982eb7a64b0b1ca98db5c4b5df1835f62c965db435229a72bc46c66829c8ab5c16cd15493042bc6b5c9404820474b5e31b3b3c2788d83df2c74723bbd1396ca124c57b11c8b0d2b4918b9b6cdcc64c74185c08bd9bbb835f453a87"}, @generic={0xa7, 0x4, "becb63f6b2fc0c4c81049410e5ebe8310fe8ed84ca1f6dc7e563ee1d6fc8007337dfbbaad137ee3de667007432a3d0392508143af51762bc96123e7412c71f90e2001ab78652c75732d671bdda3ab344707179612dbcb84c4b7190f12e9cffe21beaad04d55ab2d27b07ceea9c181ccdedd071aa5a77a9c8924938dda319f8c7db02d205e0610aa0e1ab48366638f36346246f5a59c31d698bd5eea4b3098df2a00a187a6b"}]}}, {{0x9, 0x5, 0x6, 0x2, 0x10, 0x9, 0xf6, 0xff, [@generic={0xd2, 0xb, "01b4843d188f3dd48f578f074480273b8ff9f2c4fe6c2fee4deda9912b35d38be9ef4c8f5000cdf0a6785130695af206160975ec120c1161ef0b4a0e965db35a7c037fe3f5181eaf6b27e516bb2c0852b0fdb504299813c16c53c13e2bff1213dda765c6a52d10714c3f17aa91102a3a326ee97d0a76613830add134ac84af9bfdc643a0f88c420e0ef34665b303feec779e7525a961b6df24ea19bd95a77d88f3005bcb17f800691fe21358e3cac0b73410f43ab2a19beb022136975c05aba8f0d7d9c4f608439817118269b51fd823"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0x4}]}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x6, 0xe, 0x0, [@generic={0xe0, 0xf, "96b277774ec1dee68e8419febafc4b298916332df324b3fb35bd654471c4cd3973baee0bdb08d0f138569ea73a489a7558821d03359b0cea99332e15e6487327fc429fd2a1472fabd3ac511077bf265fb793d0952c255adb1ac7bbea99bfa0be35cb38f12bb27150b4349be4fafc387eb4016de0d86edde226decbb2176ed677ae4acbf13aa632e59775e859dfb4064cb716bca35fc4f039c10b0092e6b8970fd16286a634914e3aaa4358e0a3f8969bf7bc00ce03f6b3aa3a56d1503f4aca34e9d7e02d60bbb6d5e01984f32e6e4420bbb7f66aa7f722fb1e6ad8da9c8c"}, @generic={0x88, 0x4, "ac2de4131673e38f0fb821435d4db2ec093e9c95514173005651e73755086c8fc051b0ab3e525194e3c6ef8fb9df66448290c10a977318930e54f9daced047b372ed7d48e0ace6204a5cf34deb4cb0465841cbfb0aa6bf19fb0d2c6e08d18c28cf535e88a70c1a93f9ac500e38e907a628143bd0e8246af9e932a9ce006bc1fb30b82890375e"}]}}, {{0x9, 0x5, 0x6, 0x2, 0x5e7, 0x7, 0x3, 0x2, [@generic={0xd8, 0x23, "7d735b60a722bbbeef0b480c8666b03f4853bb8e6b8284e0b50c73425c83a5fc136800ea510162616a85fda3d355eaa4c1f3e683b24e3177dd0a41e7fe58eff6e90631ef64d08cde9a7807347325b5172dcd653217a0c5b6639274ac88b02a0e744caef1cb7a26270d69201932d747f2dd5e0378887f935bb4157f972a75a24796e9acf5495945d8b8890ada02c8865f59e8ba85169372be8b46fa8521d541c2b7c9e7dbe6c5f8096b52cbd1c5209f9953b68a899aa2915fb43abf81cad5d669ea00217ec64ec9343530303e4769c40cd8652ea698ee"}]}}, {{0x9, 0x5, 0xe, 0x2, 0x440, 0x41, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x1}, @uac_iso={0x7}]}}]}}, {{0x9, 0x4, 0x9c, 0xff, 0x10, 0xff, 0x2, 0xe2, 0xf, [@uac_as={[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x40, 0x1, 0xa2, 0x4}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x6, 0x2, 0x76, 0xe, "6abb1a5a476667"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x10, 0x3, 0x6, 0x5, "53f8fa603702a8b3"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xbe, 0x3, 0x8, 0x6, 0x9}]}], [{{0x9, 0x5, 0xb, 0x1, 0x20, 0x19, 0xa, 0x3, [@generic={0xab, 0x22, "71c0f0aafdee748c6f2c092827fdcec7110e7f2e2f79b8c1f149dedcdca0e6b9278166be8878aae7ec3286e0525f79a8cd61c851b0560d85aca096ab8672e99e2525915e82a55085ceb8c703f2b926a52cdd7adc02e4050602e708f090d1008b38f11cfc7c76906569a47cd6ed036ed765b5f1694b093ba2c2066d1e01725d5106edea1122442561587f4cc3dd98f8986de0e9c2bff40279f952555d352842826f5faab5a64fbeb6cf"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x0, 0x2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x59, 0x3}]}}, {{0x9, 0x5, 0xd, 0x2, 0x200, 0xe9, 0x2, 0x0, [@generic={0xe7, 0x7, "168fc33fad083f719d228ff1534b5e136e0cb6e4ce50be11aac4106b5357e7b98392c3bacf3e35c45b6cd0bbf3254acf732f08c17349981b47548f9259d1bd0322de4acc402ffe3dfc7239c7b6f112bd64d250a38f30edf2daa56b7aa6af123315444e6bab14c9f500a7232632e13477e57b0c9d10bb053adc83b36ab5011e8feae02ec7ccc50b926a15da93e2679254b555814f5772f0d673c7da60db27a0b2bb1899c5782d748eb6659e011a26155490d3fc4862cd0a3ba3112033a98ff22e8c35f0230e672dbd18a0bfdd20f6b5042b3754ebde75dba181eca1fc971371b6ce395f7146"}]}}, {{0x9, 0x5, 0x8, 0x3, 0x3ff, 0x2, 0x9, 0x5, [@generic={0xe4, 0x30, "f8057c6a3db65d64670f892477b0b1f2b0b91f0ba055ea33e4a59a4b0167ba5119c192346025c136418e797cfa44dfd5abf821f5347064824351c83f0a989a5f9e5173d3a604c732948a44602e52caa8446e332972b4e08749d4fe59cbb72ebcbaecb4eaa9d529caf5078d2d4887b5afaf28288ae4bb5adf5ed2ae937e621b7ee2a9e57cbc66582b159781c4725337f430903a6cf2650de3d9830e4952492b177b9fa4553cde0ca6b9beffa1b608ff7419ee57bbfd979ca5b9f977781e50d1791208c6119df5992dd04f3b5e4210d98b0e1e8daaef433bda6683b6a0aebb0dd439ee"}, @generic={0x6, 0x30, "8bb5cf7b"}]}}, {{0x9, 0x5, 0xe, 0x12, 0x20, 0x7, 0x1, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xe, 0x7}, @generic={0x65, 0x0, "176740e08b85c8099a18ecd5b83fc818dec158caf2696ec467cad45f8774d1c74e9300b9cdaa8ac8d880ca570742918eac5db8c15d6b7d4c101b7fe31cb02e8acd0e679421dc177e63d2713c3f4e79697a0a5f63c1f4719033676a57f15d042272b52a"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x95, 0x6, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xfe, 0x400}]}}, {{0x9, 0x5, 0x0, 0xc, 0x8b0f0be9d77c3fb7, 0xc, 0xff, 0x0, [@generic={0x101, 0x21, "09101a4ad752412e987f0beeab0e777a672369ebd186fcc2aa921d0ca3a64cd5c78768a6af2c999d65d8849e793be40512272dc99fbb616fe230054f257b4949316d2e44e9468caf2c020df85248fa833d429605a0b9d6f8eb18fbf99523708ca402a09556136e9d2c7fed4b7c41a21b607521e9e000dc5f04abf32e4bba3564dce19a12ffb82d04c7d03bd635bca24b53f7093d75188c15b0cd1fd6a79fba77771cb54645e34316abfd044ec09214be1ad5a19a94c9a53e8c6c46b484f254a8fdf6f271d2c4202e1a0729783572326b2fad2844c8f945f7116c54ce5916ea50a16d57e2422fe16ae79a1a8fc3895b5b42d3d4db56a4d51e6571743e312657"}]}}, {{0x9, 0x5, 0x0, 0x4, 0x40, 0xd, 0x98, 0x2b, [@generic={0x78, 0x9, "7c95ef7ae1596ae5b62560d6a6f6509e6fd477cc5c3b3e28f7f2d94c16fa555e1369e312f89105f5f6a3fedd446560028b7ce71e65b9a2c2757adc08e073727035dce0069792de3d2ddf558bd3ac373e741bea760c4abaa6b3485d89174637de2c3e2bf45f284522c23cbaaf68420035a99c36810cf9"}]}}, {{0x9, 0x5, 0xd, 0x8, 0x3ff, 0x6, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x20, 0x7ff}]}}, {{0x9, 0x5, 0x8, 0x8, 0x20, 0x0, 0xf8, 0x4, [@generic={0x9b, 0x2f, "aa3e2cccb4a9f8911a9b9bdcab67944473f43b8a6fda9ae2f0cbad3721c20ae2d46113fca207f861f518110b9bede9f6f13f9fac102a0219fd79f8628e33596a00c05866622007c5a8b42f4951c78973756065a308be1d2e6fdc8495e93800b319281bb8a23123fbf20c11c71a3ddc9d45f4b2f96e33df6efe123b382a13f566be3183d8d0dbd9f46f1486859eacc6708b53b601984d0f6f30"}]}}, {{0x9, 0x5, 0xd, 0x2, 0x40, 0x35, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x7}]}}, {{0x9, 0x5, 0x0, 0x3, 0x20, 0x4, 0x3, 0x5, [@generic={0xf9, 0x22, "d89de4f77b88abaea48569bb247664a65548ea40ba11657515c13144d2f572f23564d7ce208d3154648b36e4c700ab9df5a20b690020698cf1b70b19290c419a1965b5c47227f6ec8f564dd382cf8d7b129c338d3c81bde9762c3edb17fc3c8186783ae7e655a18f7d9694b5caf02ac8c4e0b1fb46c7a2ccf124b28c2df0a1810576757573db26633256ca75f1217604235a4f577d21ee4f74cc0db4822148a552a550aa53ae7d9086128685a8151502312167c24a799a326ad1ee4e55541408ccf404fd1d22b761e16a4c3b74b32e8d1f1abcbaeee251b10e97995f5c9c12880c4de72c7378c42ba2ea648e06682e3d929477a894da7c"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x58f, 0xe7, 0xf, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xcd, 0x73c}]}}, {{0x9, 0x5, 0x80, 0x4, 0x10, 0x80, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x2}, @generic={0xe5, 0x2, "3412a014d5c391bc35d3f08bd0403acbc5aab5ac5e32678aacafc685c688d0f89ae2fa8f86800fc80f5a24966a21024b781d20d447b90b5448b9758c651be4424f6bfb5a80f4a4750603fb73ec29b0d33230a0feec5733b29ae684f90906f8853804be0115c4376094ff275eff34e2e60dfb1e2df7f319f54718cdc81c372d78eb7d7c626db111258a9b2d3d1b8f9eb63dacc3d8fc4b2445709e37fdb9e71ddb82e09319eb53217d2d0ee5425abe1426611ee20050082c61fb357359ec9226ccfa9a7c7c70ca6429738ae3caf634654230f8ffa5889107e1634ef2720d8203f573da8f"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x3bf, 0x3, 0x45, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x14, 0x80, 0x5}]}}, {{0x9, 0x5, 0x5, 0x2, 0x20, 0x4, 0xd4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xfd, 0xe}]}}]}}]}}]}}, &(0x7f0000002380)={0xa, &(0x7f0000002100)={0xa, 0x6, 0x41, 0x6, 0x0, 0x6, 0xff, 0xe3}, 0x4d, &(0x7f0000002140)={0x5, 0xf, 0x4d, 0x6, [@ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xb, 0x1, 0x6, 0x770f, 0xcf4, [0xc050]}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x6, 0x6, 0x6, 0xff00, 0x81, [0xff00, 0xff00f0, 0xffc0, 0xc000, 0xc000, 0xf0]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x90, 0xdf, 0x97, 0x5}]}, 0x3, [{0x15, &(0x7f00000021c0)=ANY=[@ANYBLOB="1503226eebe063f96fa6d293cb08e3000000000000"]}, {0x7f, &(0x7f0000002200)=ANY=[@ANYBLOB="7f03a819234dbf40cfac3ea6ae6a446098f8f2425c863e01b384b9faf6b78133bf526b23042a3c9330b66d2a22dea08a9c2f80cf3ec6ec4e1b5a9135a6a7110edc9604d7d2875d00dd5628813d343a978c4b93352a6678fb556e6e9f8187f55a559af4fb9c64a8d2900928a1f73c5bec0ae302902c55aaef5b01091a2bf99b"]}, {0xeb, &(0x7f0000002280)=@string={0xeb, 0x3, "a04f999d6cf35ea87f9a666a6f3820dfb026d92b52f2164e966790d8d2133c94ea81ccfdac30b8bd11058b8660909fd075b4d20d2fce2a5f490be858cd12305a22f33cd7f053c865d193af761a0c35259a21dfe7224a14dbe5e58c7ece0ec380148b0e7ded5ed402fcbaa51cf7e247e581aa28a6fec7ce6ed98d18501dc4142de32362d911dd9bb9b48d12b97c3ade4f6980d96b6cc06ca1ba0a694bf33363630441f44441af2a8012619fb09a6d6fcfc93856d84d5ca8ab389f1b3044edf3954997e4a82c24b18f84d23e594feb300f9cebb424a2b4d756cd40d745629135c41ee4a59aedec400902"}}]}) syz_usb_connect$uac2(0x4, 0xf9, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x582, 0x42, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe7, 0x3, 0x1, 0x2, 0x50, 0xff, {0x8, 0xb, 0x2, 0x1, 0x1, 0x2, 0x20, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xfff8, 0x1, 0x53}, [@input_terminal={0x10, 0x24, 0x2, 0x3, 0x404, 0x4, 0xba, 0x2, 0x9, 0x40, 0x7, 0xd8}, @sample_rate={0x9, 0x24, 0xd, 0x4, 0x3, 0x6, [0x3]}, @processing_unit={0x7, 0x24, 0x8, 0x3, 0x5, [0x1]}, @feature_unit={0xd, 0x24, 0x6, 0x5, 0x2, [0xa, 0x3, 0x4, 0x8]}, @extension_unit={0xa, 0x24, 0x9, 0x6, 0x9, 0x0, "23a64e"}, @effect_unit={0x13, 0x24, 0x7, 0x4, 0x1, 0x6, [0x1, 0x0, 0x1, 0x0, 0x3, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7, 0x3, 0x9, 0xc}, @as_header={0x10, 0x24, 0x1, 0x6, 0xfa, 0x1, 0x4, 0xa4, 0xffff8000, 0x6}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x5, 0x7, 0xff}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x9, 0x8, 0xf, {0x8, 0x25, 0x1, 0x2, 0x33, 0xe6, 0xe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x0, 0x9}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x5, 0x2, 0x2, 0x4, "", "9c443e"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x2, 0x6, 0x2, {0x8, 0x25, 0x1, 0x81, 0x3f, 0x2, 0x8}}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x110, 0xc0, 0x81, 0xb, 0x10, 0xa}, 0xf, &(0x7f0000000280)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x0, 0xfd, 0x34}]}, 0x1, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x2409}}]}) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRES8=r8, @ANYBLOB="a0932b7d9540e1d17059887af09f998f12dc54193534a700333ad0e0e7b09099aad85d492a5c9e9d98b472d0caecd1f2ad92d35b9b28ca349c8f5b38bddbe501975ee7a229bef67dc9b3a1280c1bebce0430f7a1eb141b382d64e4a38596c66afc4277bd20584d27ea85b418ffb4453f539344df5b67b6e59034bfa074c1d5ed9ba7df68fdfc429a485cc5a19b2bab30e95af797254a5e3d37ab7f023d53e7cc738b2b58beea15dd7d08f2e2e4a0fe76a5c434d55ca5618f3a4ae41c", @ANYRES64=r8], 0x0}, 0x0) syz_usb_connect$uac1(0x5, 0xbc, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000106b1d01014000010203010902aa00030156c0020904000000010100000a24010101bb02010211250601040507000a00080003000200050524050628bf965701ab81a617db84c1f9f31ff90f0f2406020504020002000a00e8ff040c240202030202508000090111240605020507002e134a004ef10200000924030102020505"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) syz_usb_control_io(r8, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r11, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r11, 0xc05064a7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700), 0x0, 0x9, 0x0, 0x0, r12}) sendmsg$IPCTNL_MSG_CT_DELETE(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x24, 0x2, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2002}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x40084}, 0x10) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) kexec_load(0x1003, 0x0, 0x0, 0x2) 3m32.264585309s ago: executing program 2 (id=1948): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000700)='./file0/../file0\x00', 0x0, 0x219d88b, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x1184, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0) (fail_nth: 1) 3m32.152638734s ago: executing program 2 (id=1951): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000002000a78000000060a0b040000000000000000020000004c000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800b0001007470726f7879000014000280080001400000000208000340000000100900010073797a30000000000900020073797a32"], 0xa0}}, 0x40880) 3m31.340338734s ago: executing program 2 (id=1962): r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) lstat(0x0, 0x0) stat(&(0x7f0000006800)='./file0\x00', 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f0000000580)={0x20, 0x3, 0x60, "d9a11f0b90409455f46902b015cf047f3e3eefd9582673f8ed8d76a5869a5eabce5f51b30e5c93c2f453cf112f8b6fd64e88da50425b8ffca5144bb32d80f6b992a43b5bc922b77242c4c4bd07cefe63eb4a9977b67a8dd5a554807fd00d9d73"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, &(0x7f0000000280)={0x14, &(0x7f0000000100)={0x20, 0xc, 0x2, {0x2, 0x7}}, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f00000009c0)={0x0, 0x15, 0x1c, "f8c7128277b9e3207de1e47e075cc71669d4122b83f33288159e9792"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000ac0)={0x20, 0x80, 0x1c, {0x8b9, 0x5, 0x5, 0x98, 0x6, 0x4, 0x955, 0x1, 0x1, 0x0, 0x800, 0x9}}, &(0x7f0000000b00)={0x20, 0x85, 0x4, 0x30000}, &(0x7f0000000b40)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000b80)={0x20, 0x87, 0x2, 0x4}, &(0x7f0000000bc0)={0x20, 0x89, 0x2}}) 3m31.038832851s ago: executing program 33 (id=1962): r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) lstat(0x0, 0x0) stat(&(0x7f0000006800)='./file0\x00', 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f0000000580)={0x20, 0x3, 0x60, "d9a11f0b90409455f46902b015cf047f3e3eefd9582673f8ed8d76a5869a5eabce5f51b30e5c93c2f453cf112f8b6fd64e88da50425b8ffca5144bb32d80f6b992a43b5bc922b77242c4c4bd07cefe63eb4a9977b67a8dd5a554807fd00d9d73"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, &(0x7f0000000280)={0x14, &(0x7f0000000100)={0x20, 0xc, 0x2, {0x2, 0x7}}, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f00000009c0)={0x0, 0x15, 0x1c, "f8c7128277b9e3207de1e47e075cc71669d4122b83f33288159e9792"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000ac0)={0x20, 0x80, 0x1c, {0x8b9, 0x5, 0x5, 0x98, 0x6, 0x4, 0x955, 0x1, 0x1, 0x0, 0x800, 0x9}}, &(0x7f0000000b00)={0x20, 0x85, 0x4, 0x30000}, &(0x7f0000000b40)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000b80)={0x20, 0x87, 0x2, 0x4}, &(0x7f0000000bc0)={0x20, 0x89, 0x2}}) 6.044814058s ago: executing program 3 (id=3682): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20048881}, 0x0) 6.028332607s ago: executing program 3 (id=3683): getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x3d, "9eefff2d3b3a4aee9c320de0afc48a7da44271ad2a08e0a96da32035ec4bb1bd121335961cd137f2c57b852147b85da0a5651d55f89ebd324c178e7eab"}, &(0x7f0000000140)=0x61) (async) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x3d, "9eefff2d3b3a4aee9c320de0afc48a7da44271ad2a08e0a96da32035ec4bb1bd121335961cd137f2c57b852147b85da0a5651d55f89ebd324c178e7eab"}, &(0x7f0000000140)=0x61) syz_usb_connect$uac1(0x5, 0x81, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x582, 0x10f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x3, 0x1, 0x5, 0x20, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x5, 0x7, 0x1}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xff, 0x1, 0x10, 0xa}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x33, 0x8, 0x4e, {0x7, 0x25, 0x1, 0xc, 0x59, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xe, 0x2, 0x4, {0x7, 0x25, 0x1, 0xc, 0x6, 0x7972}}}}}}}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) 5.399794776s ago: executing program 3 (id=3685): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0), 0x10) sendto$l2tp(r0, &(0x7f00000002c0)="e5786a0d000000000000003b", 0xc, 0x400c0c1, 0x0, 0x0) recvfrom$l2tp(r0, &(0x7f0000000040)=""/88, 0x58, 0x20, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 4.505480153s ago: executing program 3 (id=3696): r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000340)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x200000, 0x9, "00000000020000000900", "00004702", "03000800", "97ad3700", ["fdffffff84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff"]}) r1 = syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000100)={0x7, {0xf8000002, 0x9, 0x0, 0x200870}}) 4.395114577s ago: executing program 3 (id=3698): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) write$tun(r0, &(0x7f0000000480)={@void, @void, @eth={@multicast, @random, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x7, 0x30, 0x68, 0x4000, 0x7, 0x1, 0x0, @rand_addr=0x64010103, @multicast1}, @redirect={0x5, 0x3, 0x0, @broadcast, {0x5, 0x4, 0x0, 0x4, 0x6, 0x65, 0xe, 0x8, 0x2, 0xf, @loopback, @loopback}}}}}}}, 0x42) 4.06927332s ago: executing program 3 (id=3702): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448ca, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f00000003c0)={0x1, 0x30, [0xc16, 0xf, 0xffffffffffffffff, 0x100000001], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7472616e713d66642c7266646ec879", @ANYRES32=r1, @ANYBLOB="0000ee23b8e66afeaaf9241a7c1067076600000000005891578927585cabfeec2af905f11c7430bf93effabc5c2a4c7ad80206dd69e9f8263b1642c7ac388400553565d16cbe46ec10ed1423be91810db551c8ae35f0d82ac43c710e56a416db4b22e08e985bb3fa9b3e4737a132000000000000000000000000850b9a0dbfcb029a4c37a9651e17a1dc9ce8ee305163ac60", @ANYRESHEX=r0, @ANYBLOB=',\x00']) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff"], 0x15) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_disconnect(r5) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000100)={0x77, r3, 'id1\x00'}) ioctl$sock_bt_hci(r6, 0x400448df, &(0x7f0000000200)="9cf0db442ced46e78b934fd0de0dcfde77fe78e75f0932c6346fe9a7483b6fdca61899717df556e3b99c41ee3371928617a1f06f3a077ed72df368dfadeb50713ac6357a5021d80e4da4ac3117b4f25971725121eeab7b13868c268735f2b9b26dd777f460a490bc9f043e44cfda7d880f8196ca6121a9be542d7082c169c4d894e7622ca5653119c1dd9b8bf01852e32fb32846a685cdeb8ca182f325e351b3119fb5095c76dab8faac962fa36eababeae4b6f405dd1076ccd0b8") syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c4b20710200e0101"], 0x0) 3.309353228s ago: executing program 5 (id=3706): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018105704da0700000000000109022400010000ba0009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022220000009523b3"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000002300), 0x1000000, 0x14e040) 3.000800526s ago: executing program 0 (id=3711): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'comedi_parport\x00', [0xfffffff8, 0x80000000, 0x2, 0xc, 0x1, 0x5, 0x79, 0x80000003, 0x80007, 0x0, 0x2, 0x1, 0x7, 0x1, 0x3ffff, 0xfd, 0xfffffffb, 0xd, 0x5, 0x80000000, 0x8, 0x17402f, 0x0, 0x20001e58, 0xffffdffb, 0xf3a2, 0x3, 0x80000008, 0xa6ba, 0x24a05ffd, 0xffffffff]}) 2.970477957s ago: executing program 0 (id=3712): syz_usb_connect$cdc_ncm(0x7, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x3, 0x24, &(0x7f0000000940)={{0x12, 0x1, 0x200, 0x8d, 0xc5, 0xd9, 0x8, 0x3f0, 0x1efa, 0xd9f7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x9, 0x0, 0x7f, "", [{{0x9, 0x4, 0xd8, 0x7, 0x0, 0xff, 0x47, 0xd0, 0x7}}]}}]}}, &(0x7f0000000d40)={0xa, &(0x7f0000000bc0)={0xa, 0x6, 0x200, 0xc7, 0x8, 0x2, 0x40, 0x5}, 0x5, &(0x7f0000000c00)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x2001}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x280a}}, {0x65, &(0x7f0000000cc0)=@string={0x65, 0x3, "d40fdc77b0df04aea0b0b1183744301d8daff05266a4c77d33ff3c5f036434a6b4be46ae47a11d04ef77f0e6f02ba71c50b185d74af14e4c8b1a47ed2b0b1b8511700d27a1314355933f673f3d54cac157d4b894451a2b48518730d1dfbfb1822d33c7"}}]}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) memfd_secret(0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000002b40)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x28, 0xffffffff, 0xffffffff, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x20, 0xe5, "", [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x1, 0x1, 0x1, {0x9, 0x21, 0x7, 0x2, 0x1, {0x22, 0x2be}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x0, 0x1}}}}}]}}]}}, &(0x7f0000002cc0)={0xa, &(0x7f0000002b80)={0xa, 0x6, 0x310, 0x6, 0x5, 0x3, 0x80, 0xf}, 0x1d, &(0x7f0000002bc0)={0x5, 0xf, 0x1d, 0x1, [@ssp_cap={0x18, 0x10, 0xa, 0xad, 0x3, 0x5, 0xf00, 0x5, [0xc0c0, 0xff0000, 0x0]}]}, 0x3, [{0x4, &(0x7f0000002c00)=@lang_id={0x4, 0x3, 0x410}}, {0x4, &(0x7f0000002c40)=@lang_id={0x4, 0x3, 0x1401}}, {0x1b, &(0x7f0000002c80)=@string={0x1b, 0x3, "9472dd1c4281caed02f52cf41560e6fe35a7cd35a859db9689"}}]}) 1.695283891s ago: executing program 0 (id=3721): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x298}, 0x1, 0x0, 0x0, 0xc800}, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r7, 0xc1205531, &(0x7f0000000540)={0x1, 0x6, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) write$tun(r4, &(0x7f0000000480)={@void, @void, @eth={@multicast, @random, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x7, 0x30, 0x68, 0x4000, 0x7, 0x1, 0x0, @rand_addr=0x64010103, @multicast1}, @redirect={0x5, 0x3, 0x0, @broadcast, {0x5, 0x4, 0x0, 0x4, 0x6, 0x65, 0xe, 0x8, 0x2, 0xf, @loopback, @loopback}}}}}}}, 0x42) 1.628816423s ago: executing program 5 (id=3722): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x1000006, @loopback, 0x97}, 0x1c) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) ioctl$KVM_CAP_STEAL_TIME(r1, 0x4068aea3, &(0x7f00000003c0)) keyctl$clear(0x3, 0xfffffffffffffffd) request_key(&(0x7f0000000200)='syzkaller\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0xfffffffffffffffc) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000000)={0x7c, 0x3000}) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="427fc0b84d14c4a3e60a641a81b20fe115887fab983dd0421ad2a0f6a07d5c90ab020ce609b6d806c6cfebade8150d23b5a4c35553e5331961ff8441bbcebde45b0708e8d21d21c399966293b314a667d80e0e3daf1d56dcc0ca924591bd92c5d953404b190152bd2ff31f73fedb80e3106e248d5b69162235b222b7ffaee7ed8ff98641518499871f17d2eafb2a8792e65949d11028f84c89a1455a2bf8b0684e8dd0a44739d0e67f7659a24e132998748eab5502a217af550f79aaa334e78687e6ccc79a6ef00c183aa9072bb06e582694f05533e597e5253462dc5b20e55781e6736335fdc54434aa54", @ANYRESOCT=r6, @ANYBLOB="01082cbd7000fedbdf250c00000020000580080001"], 0x34}, 0x1, 0x0, 0x0, 0x24048000}, 0x8000) r7 = socket(0x10, 0x80000, 0xffffffff) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001200010a0000000000000000070000002bf940ad62877cc560e0521ae5333fc0155b53dd8b0a3e59c1dc44a3e0ccb5af089385ffca37437cb6e51926e64afb7d8451b78b21353bfaab26380c6e8df8f753cfab3a7fe6a56aed20b57229f66b1e84ff04732d34c2300fd5748ff44de9097867ffe6472a8a19f89056a0b98cc47a5b9e5a45e349e66582c3df8523d78287f5f410cae193a9fce957af972e04a32b494b9c6458253dc783a7175d6c2e"], 0x14}}, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x24, 0x3d, 0x1, 0x0, 0x25ffdbfb, {0xa, 0xd601, 0x9}, [@nested={0x8, 0x12, 0x0, 0x1, [@nested={0x4, 0xf8}]}, @typed={0x8, 0x17, 0x0, 0x0, @fd}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x84090) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, 0x0) unshare(0x20000400) r10 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) fsync(r10) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x101, 0x0) ioctl$BLKCRYPTOGENERATEKEY(r11, 0xc030128a, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) 1.068773693s ago: executing program 5 (id=3725): r0 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000300)={0x0, 0xe, 0x8, &(0x7f0000000100)={0x3, "fd7b44512b7e1b0420ec2a3ba53b31dd77e7ffffff0300151200"}}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x10001, 0x0) r2 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0) fsetxattr(r2, &(0x7f00000000c0)=@known='user.incfs.size\x00', 0x0, 0x0, 0x0) fremovexattr(r2, &(0x7f00000005c0)=@known='user.incfs.size\x00') ioctl$IOMMU_TEST_OP_ACCESS_RW(r1, 0x3ba0, &(0x7f0000000600)={0x48, 0x14, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x4}) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) r4 = open(&(0x7f0000000180)='.\x00', 0x8080, 0x13f) flock(r4, 0x1) ioctl$TCSBRKP(r4, 0x5425, 0x540d9a23) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x13, &(0x7f00000003c0)=0x1, 0x4) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x3a, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000000)={0x1, 0x2, 0x80000001}) 1.022160773s ago: executing program 0 (id=3726): r0 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) write$proc_mixer(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="504830905400000000434427203030303030303030303030303030edd45fed9d3030303030300a4449574954414c320a89970d00c1e68b760b9503b81ff27daffa84f542b707c1b1ecc2e5fb0ea536ed08b9100464494a10f91873c4814a04351be66605a8dfef6f65ae5a771e384220dd4c464f2f70a01d869bc11d393c961466a6dec5c2191e2732caf76b38fc88367e6c7898b5e0d58f659bd034143619a55980273c7bbe541868fd092c86f1e7bf9b0d7a46d48416f17adb5844ba032863839b48f72345cbc38b1e7a81125f3e06cf1c4e363969e081280b7fde4b42e65c7616890f1cfa9f"], 0x2b) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000300)={0x0, 0xe, 0x8, &(0x7f0000000100)={0x3, "fd7b44512b7e1b0420ec2a3ba53b31dd77e7ffffff0300151200"}}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000340)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) 1.019002127s ago: executing program 5 (id=3727): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081", 0x7}], 0x1}, 0x1000) sendmsg$key(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x10}}, 0x4001) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000bc0)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f0000000980)={0x0, 0x0}) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4e23, 0x7, @empty, 0x3}, 0x80, 0x0}, 0xcc840) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000000906010000000000008367ec68c488dcbb5d73283d350600e09cbb9bbbba814af2029957891b48f83525c417dc7d62cb020000000000000041c893a68053adb66d43bd696da2d28c6dd37f5d301344175f26d728726ac274e488ba7df9282ca4cd621804a4d626e9e8426bdb00179168e500613edbcf0a79c9c068e75d7515f93a6bc3cef0cc4c452cea43e6140701328e0593e39ae2fce926065aa8430062b0cf631ad23bc5a5f1a0e0e82c9f519b72fcea7075d628463358eb02f803dfcb1982a954ff87f5209d70a52d29067b4cb38931e174d18b9f6ca84af884"], 0x9}, 0x1, 0x0, 0x0, 0x100000c6}, 0x4000004) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) r2 = socket$alg(0x26, 0x5, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x8040) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040), 0x0, 0x40800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0xc010}, 0x8040) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0xfffffeeb, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x8894}, 0x4018845) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r5) sendmsg$IEEE802154_LLSEC_ADD_DEV(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="057e00000000ffdbfb252a00000008002f00000000000c00050002fea9aaaaaaaaaa0a00010098d29d5068659403"], 0x34}, 0x4, 0x700000000000000, 0x0, 0x80c0}, 0x4044) shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffd000/0x1000)=nil) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0) close(r7) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SIOCSIFHWADDR(r7, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="01000000008d"}) 911.846892ms ago: executing program 5 (id=3728): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x98}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x18, 0x3, "c6a41d10c6a41d1000000000fff5000000000000"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x4048010) 825.228786ms ago: executing program 0 (id=3729): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0xfe7f, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 736.100333ms ago: executing program 5 (id=3730): syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000006c0)={0x44, 0x0, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x9f}, &(0x7f0000000540)={0x0, 0x8, 0x1}, &(0x7f0000000580)={0x20, 0x81, 0x2, "940f"}, &(0x7f00000005c0)={0x20, 0x82, 0x3, "4ebd00"}, &(0x7f0000000600)={0x20, 0x83, 0x2, 'WN'}, &(0x7f0000000640)={0x20, 0x84, 0x1, "97"}, &(0x7f0000000680)={0x20, 0x85, 0x3, "30be3b"}}) 658.201369ms ago: executing program 4 (id=3731): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x44014) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, 0x0, 0x0) close(r2) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0xec, 0xa, 0x9, 0x0, 0x5, 0x6, 0x6, 0x6, 0x8, 0x86, 0xdd, 0x68, 0x0, 0x9, 0x80000000, 0x0, 0x9, 0x5, 0x8, '\x00', 0x6, 0x2}) r3 = eventfd(0xffffff7f) r4 = socket$igmp(0x2, 0x3, 0x2) bind$inet(r4, &(0x7f0000000140)={0x2, 0x4e23, @multicast2}, 0x10) write$eventfd(r3, &(0x7f00000001c0)=0x8, 0x8) 584.996234ms ago: executing program 0 (id=3732): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x25dfdbfd, {{@in=@multicast1, @in=@remote, 0x0, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x1, 0x0, 0x80}}, [@tmpl={0x184, 0x5, [{{@in=@multicast2, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x34ff, 0x0, 0x2}, {{@in=@local, 0x0, 0x3c}, 0xa, @in6=@dev, 0x2, 0x0, 0x0, 0x0, 0x800, 0x800}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, 0x0, @in=@multicast1, 0x3503, 0x3}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x0, 0x0, 0x1, 0x0, 0xabf, 0x1000000}, {{@in6=@loopback, 0x4d4, 0x33}, 0x0, @in=@multicast1, 0x3, 0x0, 0x1, 0x8, 0x0, 0x0, 0x400}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x1, 0x2, 0x0, 0x1}]}]}, 0x23c}}, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8004}, 0x20004014) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) 584.6869ms ago: executing program 4 (id=3733): r0 = socket(0x10, 0x3, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x82) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f000000c280)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x1ff, {0x3, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x1000, {0x0, 0x0, 0x20, 0xfffffffffffffffd, 0xf5, 0x0, 0x0, 0x0, 0x7, 0x2000, 0x2, r3, 0x0, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000380)={0x50, 0x0, r2, {0x7, 0x27, 0x1, 0x801001a, 0x66d, 0x0, 0x0, 0x400, 0x0, 0x0, 0x40, 0x9}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x6, 0x0, 0x0, 0x300000000, 0xf, 0x0, {0x0, 0xf, 0x0, 0xfffffffffffffffc, 0x40, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) rename(&(0x7f0000000280)='./file0/../file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00') r4 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r4, 0x1, 0x5, &(0x7f0000000440)=0x1, 0x4) sendmsg$inet(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x4c22, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="0800101d89b5eb00", 0x8}], 0x1}, 0x2400c880) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="840000001a0001000000000000000000800020"], 0x84}}, 0x20048010) 525.263112ms ago: executing program 4 (id=3734): r0 = socket$inet6(0x2d, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) 445.487944ms ago: executing program 4 (id=3735): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x298}, 0x1, 0x0, 0x0, 0xc800}, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) write$tun(r4, &(0x7f0000000480)={@void, @void, @eth={@multicast, @random, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x7, 0x30, 0x68, 0x4000, 0x7, 0x1, 0x0, @rand_addr=0x64010103, @multicast1}, @redirect={0x5, 0x3, 0x0, @broadcast, {0x5, 0x4, 0x0, 0x4, 0x6, 0x65, 0xe, 0x8, 0x2, 0xf, @loopback, @loopback}}}}}}}, 0x42) 112.856462ms ago: executing program 4 (id=3736): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081", 0x7}], 0x1}, 0x1000) sendmsg$key(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x10}}, 0x4001) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000bc0)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f0000000980)={0x0, 0x0}) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4e23, 0x7, @empty, 0x3}, 0x80, 0x0}, 0xcc840) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000000906010000000000008367ec68c488dcbb5d73283d350600e09cbb9bbbba814af2029957891b48f83525c417dc7d62cb020000000000000041c893a68053adb66d43bd696da2d28c6dd37f5d301344175f26d728726ac274e488ba7df9282ca4cd621804a4d626e9e8426bdb00179168e500613edbcf0a79c9c068e75d7515f93a6bc3cef0cc4c452cea43e6140701328e0593e39ae2fce926065aa8430062b0cf631ad23bc5a5f1a0e0e82c9f519b72fcea7075d628463358eb02f803dfcb1982a954ff87f5209d70a52d29067b4cb38931e174d18b9f6ca84af884"], 0x9}, 0x1, 0x0, 0x0, 0x100000c6}, 0x4000004) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) r2 = socket$alg(0x26, 0x5, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x8040) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040), 0x0, 0x40800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0xc010}, 0x8040) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0xfffffeeb, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x8894}, 0x4018845) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r5) sendmsg$IEEE802154_LLSEC_ADD_DEV(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="057e00000000ffdbfb252a00000008002f00000000000c00050002fea9aaaaaaaaaa0a00010098d29d5068659403"], 0x34}, 0x4, 0x700000000000000, 0x0, 0x80c0}, 0x4044) shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffd000/0x1000)=nil) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0) close(r7) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SIOCSIFHWADDR(r7, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="01000000008d"}) 0s ago: executing program 4 (id=3737): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0x2, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r2) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0xb, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, r3, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x24}, 0x2, 0x34005, 0x0, 0x24080040}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:lastlog_t:s0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008040}, 0x880) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x4048aec9, &(0x7f0000000380)={0x3, 0x0, @ioapic={0x2, 0x1, 0x101, 0x5, 0x0, [{0xd, 0x9, 0x6, '\x00', 0x2}, {0x3, 0x2, 0x26, '\x00', 0xfc}, {0x5, 0xef, 0x8d, '\x00', 0xee}, {0xfb, 0x7, 0xd}, {0x13, 0xfc, 0x2, '\x00', 0x5}, {0x40, 0x3, 0x2, '\x00', 0xd3}, {0x2f, 0x0, 0x8, '\x00', 0x5}, {0x9, 0xcc, 0x1, '\x00', 0xff}, {0x81, 0x23, 0x5, '\x00', 0x2}, {0xde, 0x24, 0x3}, {0x40, 0x84, 0x5, '\x00', 0x1}, {0xf5, 0x5, 0x4, '\x00', 0xb5}, {0x7, 0x3, 0x3, '\x00', 0x6}, {0x4, 0x0, 0x0, '\x00', 0x2}, {0x10, 0x35, 0x40, '\x00', 0xcf}, {0xa, 0x3f, 0x0, '\x00', 0x3}, {0x6e, 0x4, 0x1, '\x00', 0xe}, {0x7, 0x31, 0x8, '\x00', 0x9}, {0x13, 0x7}, {0x11, 0x6, 0x9, '\x00', 0x2}, {0x8, 0x6, 0x1, '\x00', 0x49}, {0xae, 0x69, 0x91, '\x00', 0xba}, {0x2, 0x8, 0x2, '\x00', 0xc3}, {0xbd, 0x9, 0x74, '\x00', 0x9}]}}) kernel console output (not intermixed with test programs): ffffffda RBX: 00007f97d9d8e6c0 RCX: 00007f97dbafd68e [ 577.190159][T14473] RDX: 000000000000000f RSI: 00007f97d9d8e0a0 RDI: 0000000000000004 [ 577.190174][T14473] RBP: 00007f97d9d8e090 R08: 0000000000000000 R09: 0000000000000000 [ 577.190189][T14473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 577.190203][T14473] R13: 00007f97dbdb6038 R14: 00007f97dbdb5fa0 R15: 00007ffdd5588338 [ 577.190239][T14473] [ 577.509786][ T5726] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 577.547333][ T5726] usb 4-1: Using ep0 maxpacket: 32 [ 577.549844][ T5726] usb 4-1: unable to get BOS descriptor or descriptor too short [ 577.550093][ T5726] usb 4-1: no configurations [ 577.550134][ T5726] usb 4-1: can't read configurations, error -22 [ 577.642580][T14481] FAULT_INJECTION: forcing a failure. [ 577.642580][T14481] name failslab, interval 1, probability 0, space 0, times 0 [ 577.642605][T14481] CPU: 1 UID: 0 PID: 14481 Comm: syz.5.3035 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 577.642624][T14481] Tainted: [L]=SOFTLOCKUP [ 577.642629][T14481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 577.642638][T14481] Call Trace: [ 577.642643][T14481] [ 577.642650][T14481] dump_stack_lvl+0xe8/0x150 [ 577.642670][T14481] should_fail_ex+0x46b/0x600 [ 577.642689][T14481] should_failslab+0xa8/0x100 [ 577.642705][T14481] kmem_cache_alloc_noprof+0x87/0x680 [ 577.642719][T14481] ? vm_area_alloc+0x24/0x140 [ 577.642738][T14481] vm_area_alloc+0x24/0x140 [ 577.642755][T14481] create_init_stack_vma+0x1bd/0x9b0 [ 577.642776][T14481] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 577.642791][T14481] ? lockdep_hardirqs_on+0x7a/0x110 [ 577.642831][T14481] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 577.642856][T14481] ? __pfx_create_init_stack_vma+0x10/0x10 [ 577.642874][T14481] ? rt_spin_lock+0x1e0/0x400 [ 577.642894][T14481] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 577.642914][T14481] ? rt_spin_unlock+0x14f/0x200 [ 577.642934][T14481] ? rt_spin_unlock+0x160/0x200 [ 577.642954][T14481] alloc_bprm+0x49b/0x5c0 [ 577.642971][T14481] do_execveat_common+0x175/0x690 [ 577.642988][T14481] ? do_getname+0x151/0x250 [ 577.643009][T14481] __x64_sys_execveat+0xc7/0xf0 [ 577.643024][T14481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.643039][T14481] do_syscall_64+0x15f/0x560 [ 577.643053][T14481] ? trace_irq_disable+0x3b/0x140 [ 577.643086][T14481] ? clear_bhb_loop+0x40/0x90 [ 577.643109][T14481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.643128][T14481] RIP: 0033:0x7f97dbb3ce59 [ 577.643146][T14481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 577.643165][T14481] RSP: 002b:00007f97d9d8e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 577.643184][T14481] RAX: ffffffffffffffda RBX: 00007f97dbdb5fa0 RCX: 00007f97dbb3ce59 [ 577.643195][T14481] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 577.643203][T14481] RBP: 00007f97d9d8e090 R08: 0000000000001000 R09: 0000000000000000 [ 577.643213][T14481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 577.643221][T14481] R13: 00007f97dbdb6038 R14: 00007f97dbdb5fa0 R15: 00007ffdd5588338 [ 577.643247][T14481] [ 577.691766][ T5726] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 577.711989][ T5726] usb 4-1: Using ep0 maxpacket: 32 [ 577.741974][ T5726] usb 4-1: unable to get BOS descriptor or descriptor too short [ 577.742184][ T5726] usb 4-1: no configurations [ 577.742225][ T5726] usb 4-1: can't read configurations, error -22 [ 577.748501][ T5726] usb usb4-port1: unable to enumerate USB device [ 578.098595][T14489] FAULT_INJECTION: forcing a failure. [ 578.098595][T14489] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 578.098625][T14489] CPU: 1 UID: 0 PID: 14489 Comm: syz.0.3039 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 578.098647][T14489] Tainted: [L]=SOFTLOCKUP [ 578.098653][T14489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 578.098664][T14489] Call Trace: [ 578.098693][T14489] [ 578.098702][T14489] dump_stack_lvl+0xe8/0x150 [ 578.098734][T14489] should_fail_ex+0x46b/0x600 [ 578.098783][T14489] _copy_from_user+0x2d/0xb0 [ 578.098835][T14489] copy_folio_from_user+0x1e3/0x320 [ 578.098867][T14489] mfill_atomic_copy+0xf5d/0x15a0 [ 578.098919][T14489] ? __pfx_mfill_atomic_copy+0x10/0x10 [ 578.098956][T14489] userfaultfd_ioctl+0x2aca/0x4dc0 [ 578.098982][T14489] ? __kasan_slab_free+0x5c/0x80 [ 578.098997][T14489] ? kfree+0x1c5/0x6c0 [ 578.099020][T14489] ? tomoyo_path_number_perm+0x501/0x630 [ 578.099049][T14489] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 578.099094][T14489] ? kasan_quarantine_put+0xbb/0x1f0 [ 578.099125][T14489] ? tomoyo_path_number_perm+0x219/0x630 [ 578.099144][T14489] ? tomoyo_path_number_perm+0x219/0x630 [ 578.099170][T14489] ? do_vfs_ioctl+0x117b/0x1540 [ 578.099191][T14489] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 578.099233][T14489] ? __fget_files+0x2a/0x420 [ 578.099259][T14489] ? __fget_files+0x2a/0x420 [ 578.099282][T14489] ? __fget_files+0x3a6/0x420 [ 578.099305][T14489] ? __fget_files+0x2a/0x420 [ 578.099330][T14489] ? bpf_lsm_file_ioctl+0x9/0x20 [ 578.099352][T14489] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 578.099378][T14489] __se_sys_ioctl+0xff/0x170 [ 578.099395][T14489] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.099413][T14489] do_syscall_64+0x15f/0x560 [ 578.099430][T14489] ? trace_irq_disable+0x3b/0x140 [ 578.099447][T14489] ? clear_bhb_loop+0x40/0x90 [ 578.099466][T14489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.099483][T14489] RIP: 0033:0x7f31e893ce59 [ 578.099498][T14489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 578.099512][T14489] RSP: 002b:00007f31e6b8e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 578.099529][T14489] RAX: ffffffffffffffda RBX: 00007f31e8bb5fa0 RCX: 00007f31e893ce59 [ 578.099541][T14489] RDX: 0000200000000000 RSI: 00000000c028aa03 RDI: 0000000000000003 [ 578.099577][T14489] RBP: 00007f31e6b8e090 R08: 0000000000000000 R09: 0000000000000000 [ 578.099591][T14489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 578.099605][T14489] R13: 00007f31e8bb6038 R14: 00007f31e8bb5fa0 R15: 00007ffc85aff098 [ 578.099638][T14489] [ 578.959744][ T5625] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 579.109757][ T5625] usb 1-1: Using ep0 maxpacket: 32 [ 579.113015][ T5625] usb 1-1: unable to get BOS descriptor or descriptor too short [ 579.114313][ T5625] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 579.117147][ T5625] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 579.117175][ T5625] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.117189][ T5625] usb 1-1: Product: syz [ 579.117200][ T5625] usb 1-1: Manufacturer: syz [ 579.117211][ T5625] usb 1-1: SerialNumber: syz [ 579.249803][ T5726] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 579.378168][ T5625] usb 1-1: Cannot retrieve CPort count: -71 [ 579.378213][ T5625] usb 1-1: Cannot retrieve CPort count: -71 [ 579.378245][ T5625] es2_ap_driver 1-1:7.0: probe with driver es2_ap_driver failed with error -71 [ 579.408194][ T5625] usb 1-1: USB disconnect, device number 59 [ 579.421464][ T5726] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 579.421503][ T5726] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 579.421521][ T5726] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.435106][T14523] netlink: 'syz.4.3054': attribute type 2 has an invalid length. [ 579.435162][T14523] netlink: 'syz.4.3054': attribute type 8 has an invalid length. [ 579.435199][T14523] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3054'. [ 579.503303][ T5726] usb 6-1: config 0 descriptor?? [ 579.524053][ T5726] pwc: Askey VC010 type 2 USB webcam detected. [ 579.710364][ T5726] pwc: recv_control_msg error -32 req 02 val 2b00 [ 579.713369][ T5726] pwc: recv_control_msg error -32 req 02 val 2700 [ 579.754570][ T5726] pwc: recv_control_msg error -71 req 04 val 1000 [ 579.754923][ T5726] pwc: recv_control_msg error -71 req 04 val 1300 [ 579.755320][ T5726] pwc: recv_control_msg error -71 req 04 val 1400 [ 579.757109][ T5726] pwc: recv_control_msg error -71 req 02 val 2000 [ 579.759922][ T5726] pwc: recv_control_msg error -71 req 02 val 2100 [ 579.760597][ T5726] pwc: recv_control_msg error -71 req 04 val 1500 [ 579.763198][ T5726] pwc: recv_control_msg error -71 req 02 val 2500 [ 579.764603][ T5726] pwc: recv_control_msg error -71 req 02 val 2400 [ 579.767166][ T5726] pwc: recv_control_msg error -71 req 02 val 2600 [ 579.768607][ T5726] pwc: recv_control_msg error -71 req 02 val 2900 [ 579.843191][ T5726] pwc: recv_control_msg error -71 req 02 val 2800 [ 579.843878][ T5726] pwc: recv_control_msg error -71 req 04 val 1100 [ 579.844960][ T5726] pwc: recv_control_msg error -71 req 04 val 1200 [ 579.906773][ T5726] pwc: Registered as video103. [ 579.914809][ T5726] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input36 [ 579.935706][ T5726] usb 6-1: USB disconnect, device number 32 [ 580.659815][ T5625] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 580.680930][T14567] overlay: ./cgroup is not a directory [ 580.812822][ T5625] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 580.812851][ T5625] usb 1-1: config 0 interface 0 has no altsetting 0 [ 580.815212][ T5625] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 580.815241][ T5625] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.815265][ T5625] usb 1-1: Product: syz [ 580.815280][ T5625] usb 1-1: Manufacturer: syz [ 580.815297][ T5625] usb 1-1: SerialNumber: syz [ 580.842196][T14575] tmpfs: Bad value for 'mpol' [ 580.842885][ T5625] usb 1-1: config 0 descriptor?? [ 580.906459][ T5625] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 580.929104][ T5625] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 580.934235][ T5625] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 580.934365][ T5625] usb 1-1: media controller created [ 580.970689][ T5625] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 581.092986][ T5625] DVB: Unable to find symbol tda10046_attach() [ 581.093012][ T5625] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 581.093026][ T5625] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 581.148276][T13997] Bluetooth: hci4: Malformed LE Event: 0x0b [ 581.331168][ T1007] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 581.479748][ T1007] usb 4-1: Using ep0 maxpacket: 32 [ 581.482734][ T1007] usb 4-1: unable to get BOS descriptor or descriptor too short [ 581.486467][ T1007] usb 4-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 0.40 [ 581.486496][ T1007] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.486518][ T1007] usb 4-1: Product: syz [ 581.486534][ T1007] usb 4-1: Manufacturer: syz [ 581.486549][ T1007] usb 4-1: SerialNumber: syz [ 581.549791][ T5713] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 581.703260][ T5713] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 581.703292][ T5713] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 581.703380][ T5713] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 581.703401][ T5713] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.754238][ T5713] usb 6-1: config 0 descriptor?? [ 581.769708][ T5625] dvb_usb_m920x 1-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 581.792319][ T5625] usb 1-1: USB disconnect, device number 60 [ 582.091949][T14599] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3083'. [ 582.165018][ T5713] usbhid 6-1:0.0: can't add hid device: -32 [ 582.165136][ T5713] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 582.276480][ T1007] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 582.277037][ T1007] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 582.304117][ T1007] usb 4-1: USB disconnect, device number 54 [ 582.529145][T14606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.534668][T14606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.669714][ T1007] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 582.671937][T14608] tmpfs: Bad value for 'mpol' [ 582.759815][ T5625] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 582.800622][ T1007] usb 4-1: device descriptor read/64, error -71 [ 582.889946][ T5625] usb 1-1: device descriptor read/64, error -71 [ 582.960559][T14615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3089'. [ 583.039965][ T1007] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 583.129830][ T5625] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 583.169876][ T1007] usb 4-1: device descriptor read/64, error -71 [ 583.270028][ T5625] usb 1-1: device descriptor read/64, error -71 [ 583.280132][ T1007] usb usb4-port1: attempt power cycle [ 583.381868][ T5625] usb usb1-port1: attempt power cycle [ 583.619957][ T1007] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 583.640570][ T1007] usb 4-1: device descriptor read/8, error -71 [ 583.739805][ T5625] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 583.770752][ T5625] usb 1-1: device descriptor read/8, error -71 [ 583.880019][ T1007] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 583.900971][ T1007] usb 4-1: device descriptor read/8, error -71 [ 584.012699][ T5625] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 584.012963][ T1007] usb usb4-port1: unable to enumerate USB device [ 584.035285][ T5625] usb 1-1: device descriptor read/8, error -71 [ 584.141872][ T5625] usb usb1-port1: unable to enumerate USB device [ 584.214173][T14627] 8021q: VLANs not supported on vcan0 [ 584.341721][ T5625] usb 6-1: USB disconnect, device number 33 [ 585.029723][ T5779] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 585.170726][ T5779] usb 6-1: device descriptor read/64, error -71 [ 585.440225][ T5779] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 585.569716][ T5779] usb 6-1: device descriptor read/64, error -71 [ 585.681380][ T5779] usb usb6-port1: attempt power cycle [ 585.752687][ T13] nci: nci_ntf_packet: unknown ntf opcode 0x600 [ 586.039748][ T5779] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 586.061144][ T5779] usb 6-1: device descriptor read/8, error -71 [ 586.302325][ T5779] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 586.320699][ T5779] usb 6-1: device descriptor read/8, error -71 [ 586.415620][T14654] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 586.432036][ T5779] usb usb6-port1: unable to enumerate USB device [ 586.849367][T14664] tmpfs: Bad value for 'mpol' [ 587.009044][T14666] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3106'. [ 587.309788][ T9] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 587.439703][ T9] usb 1-1: device descriptor read/64, error -71 [ 587.689690][ T9] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 587.819907][ T9] usb 1-1: device descriptor read/64, error -71 [ 587.933212][ T9] usb usb1-port1: attempt power cycle [ 588.269959][ T9] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 588.306183][ T9] usb 1-1: device descriptor read/8, error -71 [ 588.549704][ T9] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 588.553371][T14701] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3118'. [ 588.554431][ T111] kworker/u8:6 (111) used greatest stack depth: 16320 bytes left [ 588.556383][ T1371] kworker/u8:9 (1371) used greatest stack depth: 16160 bytes left [ 588.578980][ T9] usb 1-1: device descriptor read/8, error -71 [ 588.643069][ T38] audit: type=1326 audit(589.254:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14699 comm="syz.4.3118" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53ef3bce59 code=0x7ffc0000 [ 588.643403][ T38] audit: type=1326 audit(589.254:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14699 comm="syz.4.3118" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53ef3bce59 code=0x7ffc0000 [ 588.647416][ T38] audit: type=1326 audit(589.254:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14699 comm="syz.4.3118" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f53ef3bce59 code=0x7ffc0000 [ 588.647928][ T38] audit: type=1326 audit(589.254:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14699 comm="syz.4.3118" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53ef3bce59 code=0x7ffc0000 [ 588.656709][ T38] audit: type=1326 audit(589.264:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14699 comm="syz.4.3118" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f53ef37d68e code=0x7ffc0000 [ 588.662564][ T38] audit: type=1326 audit(589.264:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14699 comm="syz.4.3118" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53ef3bce59 code=0x7ffc0000 [ 588.671876][ T38] audit: type=1326 audit(589.274:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14699 comm="syz.4.3118" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53ef3bce59 code=0x7ffc0000 [ 588.679983][ T9] usb usb1-port1: unable to enumerate USB device [ 588.968863][ T38] audit: type=1326 audit(589.574:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14699 comm="syz.4.3118" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f53ef3bce59 code=0x7ffc0000 [ 588.969170][ T38] audit: type=1326 audit(589.574:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14699 comm="syz.4.3118" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53ef3bce59 code=0x7ffc0000 [ 588.969454][ T38] audit: type=1326 audit(589.574:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14699 comm="syz.4.3118" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53ef3bce59 code=0x7ffc0000 [ 589.449729][ T5726] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 589.613371][ T5726] usb 6-1: unable to get BOS descriptor or descriptor too short [ 589.614607][ T5726] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 589.618063][ T5726] usb 6-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 589.618111][ T5726] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.618134][ T5726] usb 6-1: Product: syz [ 589.618149][ T5726] usb 6-1: Manufacturer: syz [ 589.618166][ T5726] usb 6-1: SerialNumber: syz [ 589.658113][T14716] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 589.963653][ T5726] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 590.428477][ T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 590.476716][ T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 590.507333][ T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 590.512208][ T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 590.542947][ T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 590.911298][ T5726] usb 6-1: USB disconnect, device number 38 [ 592.419750][ T5779] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 592.442732][T14778] netlink: 'syz.3.3142': attribute type 10 has an invalid length. [ 592.468776][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.557298][T14728] lo speed is unknown, defaulting to 1000 [ 592.573285][T14778] bridge0: port 3(team0) entered disabled state [ 592.575576][T14778] team0: left allmulticast mode [ 592.575624][T14778] team_slave_0: left allmulticast mode [ 592.575654][T14778] team_slave_1: left allmulticast mode [ 592.576045][T14778] team0: left promiscuous mode [ 592.576086][T14778] team_slave_0: left promiscuous mode [ 592.576704][T14778] team_slave_1: left promiscuous mode [ 592.578246][T14778] bridge0: port 3(team0) entered disabled state [ 592.590197][ T5779] usb 1-1: Using ep0 maxpacket: 16 [ 592.623693][T13997] Bluetooth: hci5: command tx timeout [ 592.628544][ T5779] usb 1-1: unable to get BOS descriptor or descriptor too short [ 592.639522][ T5779] usb 1-1: config 1 has an invalid interface number: 147 but max is 0 [ 592.639610][ T5779] usb 1-1: config 1 has no interface number 0 [ 592.639678][ T5779] usb 1-1: config 1 interface 147 has no altsetting 0 [ 592.642575][ T5779] usb 1-1: New USB device found, idVendor=0ca6, idProduct=a050, bcdDevice= 2.95 [ 592.642611][ T5779] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.642629][ T5779] usb 1-1: Product: syz [ 592.642660][ T5779] usb 1-1: Manufacturer: syz [ 592.642675][ T5779] usb 1-1: SerialNumber: syz [ 592.805840][T14778] 8021q: adding VLAN 0 to HW filter on device team0 [ 592.827236][T14778] bond0: (slave team0): Enslaving as an active interface with an up link [ 593.063003][ T5779] usb 1-1: USB disconnect, device number 69 [ 593.169343][T14787] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3145'. [ 593.367538][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.968680][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.324565][ T5713] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 594.372611][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.450948][ T5713] usb 1-1: device descriptor read/64, error -71 [ 594.689778][ T5713] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 594.702442][T13997] Bluetooth: hci5: command tx timeout [ 594.703504][T14728] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.703854][T14728] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.704400][T14728] bridge_slave_0: entered allmulticast mode [ 594.727701][T14728] bridge_slave_0: entered promiscuous mode [ 594.747937][T14728] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.748355][T14728] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.748628][T14728] bridge_slave_1: entered allmulticast mode [ 594.763707][T14728] bridge_slave_1: entered promiscuous mode [ 594.819647][ T5713] usb 1-1: device descriptor read/64, error -71 [ 594.930164][ T5713] usb usb1-port1: attempt power cycle [ 594.981117][T14728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 595.112824][T14728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 595.220684][T14829] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3157'. [ 595.343455][T14728] team0: Port device team_slave_0 added [ 595.356521][ T5713] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 595.380218][ T5713] usb 1-1: device descriptor read/8, error -71 [ 595.426166][T14835] fuse: Bad value for 'fd' [ 595.428358][T14728] team0: Port device team_slave_1 added [ 595.621938][ T5713] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 595.640304][ T5713] usb 1-1: device descriptor read/8, error -71 [ 595.648478][T14728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 595.648488][T14728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 595.648506][T14728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 595.668511][T14728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 595.668549][T14728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 595.668637][T14728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 595.750184][ T5713] usb usb1-port1: unable to enumerate USB device [ 595.871035][ T12] bridge_slave_1: left allmulticast mode [ 595.899127][ T12] bridge_slave_1: left promiscuous mode [ 595.910678][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.130936][ T12] bridge_slave_0: left allmulticast mode [ 596.130961][ T12] bridge_slave_0: left promiscuous mode [ 596.131155][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.790262][T13997] Bluetooth: hci5: command tx timeout [ 596.922010][T14852] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3166'. [ 597.090844][T14858] netlink: 'syz.0.3168': attribute type 49 has an invalid length. [ 597.152181][T14863] trusted_key: encrypted_key: master key parameter is missing [ 597.230548][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 597.310678][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 597.337966][ T12] bond0 (unregistering): Released all slaves [ 597.617551][T14858] bond0: (slave bond_slave_0): Releasing backup interface [ 597.810404][T14858] bond_slave_0: entered promiscuous mode [ 597.810439][T14858] bond_slave_0: entered allmulticast mode [ 598.228938][T14728] hsr_slave_0: entered promiscuous mode [ 598.244233][T14728] hsr_slave_1: entered promiscuous mode [ 598.247811][T14728] debugfs: 'hsr0' already exists in 'hsr' [ 598.247834][T14728] Cannot create hsr debugfs directory [ 598.744518][T14884] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3174'. [ 598.860152][T13997] Bluetooth: hci5: command tx timeout [ 599.416356][ T5275] 8021q: adding VLAN 0 to HW filter on device eth1 [ 599.589827][ T5713] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 599.740040][ T5713] usb 1-1: Using ep0 maxpacket: 16 [ 599.748480][ T5713] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 599.748507][ T5713] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 599.748526][ T5713] usb 1-1: config 1 has no interface number 0 [ 599.748634][ T5713] usb 1-1: config 1 interface 105 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 599.748657][ T5713] usb 1-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 599.748702][ T5713] usb 1-1: config 1 interface 105 has no altsetting 0 [ 599.829134][ T5713] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 599.829161][ T5713] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 599.829178][ T5713] usb 1-1: Product: syz [ 599.829192][ T5713] usb 1-1: Manufacturer: syz [ 599.829205][ T5713] usb 1-1: SerialNumber: syz [ 600.116788][T14917] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3182'. [ 600.117922][ T5713] aqc111 1-1:1.105: probe with driver aqc111 failed with error -22 [ 600.726912][ T5275] 8021q: adding VLAN 0 to HW filter on device eth2 [ 601.125333][T14942] fuse: fd is not a fuse device [ 601.189719][ T12] hsr_slave_0: left promiscuous mode [ 601.229738][ T12] hsr_slave_1: left promiscuous mode [ 601.230747][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 601.230839][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 601.271745][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 601.271765][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 601.295073][T14945] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3190'. [ 601.493365][ T12] veth1_macvtap: left promiscuous mode [ 601.493659][ T12] veth0_macvtap: left promiscuous mode [ 601.493820][ T12] veth1_vlan: left promiscuous mode [ 601.494577][ T12] veth0_vlan: left promiscuous mode [ 602.133508][T14952] 9p: Bad value for 'rfdno' [ 602.371154][ T5720] usb 1-1: USB disconnect, device number 74 [ 602.631771][ T12] team0 (unregistering): Port device team_slave_1 removed [ 602.713192][ T12] team0 (unregistering): Port device team_slave_0 removed [ 602.809703][ T5720] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 602.940086][ T5720] usb 1-1: device descriptor read/64, error -71 [ 603.014599][T14963] : renamed from lo (while UP) [ 603.181589][ T5720] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 603.309815][ T5720] usb 1-1: device descriptor read/64, error -71 [ 603.421934][ T5720] usb usb1-port1: attempt power cycle [ 603.724411][T14982] 9p: Bad value for 'rfdno' [ 603.770658][ T5720] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 603.800282][ T5720] usb 1-1: device descriptor read/8, error -71 [ 604.039811][ T5720] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 604.060489][ T5720] usb 1-1: device descriptor read/8, error -71 [ 604.209194][ T5720] usb usb1-port1: unable to enumerate USB device [ 605.085628][T14728] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 605.162052][T14728] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 605.181206][T14728] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 605.222998][T14728] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 605.229060][T14728] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 605.302220][T14728] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 605.319988][T14728] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 605.407554][T14728] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 605.888248][T14728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 605.920867][ T5625] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 605.921355][T14728] 8021q: adding VLAN 0 to HW filter on device team0 [ 605.971550][ T8561] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.977223][ T8561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 606.014774][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.016523][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 606.069775][ T5625] usb 1-1: Using ep0 maxpacket: 8 [ 606.082047][ T5625] usb 1-1: config 1 has an invalid interface number: 216 but max is 1 [ 606.082118][ T5625] usb 1-1: config 1 has an invalid interface number: 186 but max is 1 [ 606.082169][ T5625] usb 1-1: config 1 has an invalid interface number: 15 but max is 1 [ 606.082221][ T5625] usb 1-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 606.082280][ T5625] usb 1-1: config 1 has no interface number 0 [ 606.082323][ T5625] usb 1-1: config 1 has no interface number 1 [ 606.082384][ T5625] usb 1-1: config 1 has no interface number 2 [ 606.082544][ T5625] usb 1-1: config 1 interface 216 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 606.082633][ T5625] usb 1-1: config 1 interface 216 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 606.082837][ T5625] usb 1-1: config 1 interface 186 altsetting 64 has a duplicate endpoint with address 0x2, skipping [ 606.082898][ T5625] usb 1-1: config 1 interface 186 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 606.082977][ T5625] usb 1-1: config 1 interface 186 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 606.083041][ T5625] usb 1-1: config 1 interface 186 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 606.083116][ T5625] usb 1-1: config 1 interface 186 altsetting 64 bulk endpoint 0xD has invalid maxpacket 8 [ 606.083187][ T5625] usb 1-1: config 1 interface 186 altsetting 64 has 7 endpoint descriptors, different from the interface descriptor's value: 9 [ 606.083297][ T5625] usb 1-1: too many endpoints for config 1 interface 15 altsetting 29: 253, using maximum allowed: 30 [ 606.083400][ T5625] usb 1-1: config 1 interface 15 altsetting 29 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 606.083482][ T5625] usb 1-1: config 1 interface 15 altsetting 29 has 2 endpoint descriptors, different from the interface descriptor's value: 253 [ 606.088257][ T5625] usb 1-1: config 1 interface 216 has no altsetting 0 [ 606.088557][ T5625] usb 1-1: config 1 interface 186 has no altsetting 0 [ 606.088614][ T5625] usb 1-1: config 1 interface 15 has no altsetting 0 [ 606.114537][ T5625] usb 1-1: New USB device found, idVendor=03f0, idProduct=1efa, bcdDevice=d9.f7 [ 606.114622][ T5625] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.114674][ T5625] usb 1-1: Product: ࿔矜긄날ᢱ䐷ᴰ꾍勰ꑦ緇Ｓ弼搃꘴뺴깆ꅇН矯⯰Ყ념힅䱎᪋ଫ蔛瀑✍ㆡ啃㾓㽧吽쇊푗钸ᩅ䠫蝑터뿟花㌭ [ 606.114732][ T5625] usb 1-1: Manufacturer: ⠊ [ 606.114769][ T5625] usb 1-1: SerialNumber: syz [ 606.813338][T15028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.814779][T15028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.818525][T15028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.834496][T15028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.896137][ T5625] rndis_host 1-1:1.186: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 606.966597][ T5625] usb 1-1: USB disconnect, device number 79 [ 607.211124][T15060] netlink: 'syz.4.3217': attribute type 21 has an invalid length. [ 607.211204][T15060] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3217'. [ 607.318600][T15065] netlink: 14752 bytes leftover after parsing attributes in process `syz.4.3218'. [ 607.329910][T15065] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3218'. [ 607.330000][T15065] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 608.065241][T14728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 608.984898][T14728] veth0_vlan: entered promiscuous mode [ 609.014604][T14728] veth1_vlan: entered promiscuous mode [ 609.143848][T15125] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3228'. [ 609.305215][T15132] pim6reg: entered allmulticast mode [ 609.395439][T15132] pim6reg: left allmulticast mode [ 609.506064][T14728] veth0_macvtap: entered promiscuous mode [ 609.519439][T15142] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3232'. [ 609.567091][T14728] veth1_macvtap: entered promiscuous mode [ 609.771175][T14728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 609.928399][T14728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 610.039044][ T44] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.039110][ T44] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.039145][ T44] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.039178][ T44] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.473955][ T5713] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 610.652958][ T5713] usb 1-1: Using ep0 maxpacket: 32 [ 610.666515][ T5713] usb 1-1: config 13 has an invalid interface number: 53 but max is 1 [ 610.666542][ T5713] usb 1-1: config 13 has an invalid interface number: 53 but max is 1 [ 610.666562][ T5713] usb 1-1: config 13 has 1 interface, different from the descriptor's value: 2 [ 610.666583][ T5713] usb 1-1: config 13 has no interface number 0 [ 610.666623][ T5713] usb 1-1: config 13 interface 53 altsetting 8 bulk endpoint 0x7 has invalid maxpacket 8 [ 610.666649][ T5713] usb 1-1: config 13 interface 53 has no altsetting 0 [ 610.666668][ T5713] usb 1-1: config 13 interface 53 has no altsetting 1 [ 610.731093][ T5713] usb 1-1: New USB device found, idVendor=054c, idProduct=0058, bcdDevice=4b.48 [ 610.731123][ T5713] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.731144][ T5713] usb 1-1: Product: syz [ 610.731160][ T5713] usb 1-1: Manufacturer: ဉ [ 610.731175][ T5713] usb 1-1: SerialNumber: syz [ 610.823802][T15166] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 611.761931][ T5713] usb-storage 1-1:13.53: USB Mass Storage device detected [ 611.981451][T15195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3247'. [ 611.981483][T15195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3247'. [ 612.272759][ T5713] usb-storage 1-1:13.53: Quirks match for vid 054c pid 0058: 8 [ 612.326743][ T183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.326765][ T183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.454692][ T5713] usb 1-1: USB disconnect, device number 80 [ 612.661697][ T183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.661719][ T183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.695280][T13997] Bluetooth: hci1: unexpected event for opcode 0x007f [ 612.820554][ T5713] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 612.949815][ T5713] usb 1-1: device descriptor read/64, error -71 [ 613.189901][ T5713] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 613.289859][ T9] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 613.319760][ T5713] usb 1-1: device descriptor read/64, error -71 [ 613.419836][ T9] usb 6-1: device descriptor read/64, error -71 [ 613.433846][ T5713] usb usb1-port1: attempt power cycle [ 613.664965][ T9] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 613.697349][T15221] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3257'. [ 613.697532][T15221] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 613.698387][T15221] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3257'. [ 613.698430][T15221] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 613.794028][T15223] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3258'. [ 613.802321][ T9] usb 6-1: device descriptor read/64, error -71 [ 613.802602][ T5713] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 613.821941][ T5713] usb 1-1: device descriptor read/8, error -71 [ 613.910182][ T9] usb usb6-port1: attempt power cycle [ 614.061085][ T5713] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 614.083846][ T5713] usb 1-1: device descriptor read/8, error -71 [ 614.203628][ T5713] usb usb1-port1: unable to enumerate USB device [ 614.261192][ T9] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 614.281814][ T9] usb 6-1: device descriptor read/8, error -71 [ 614.508017][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 614.551507][ T9] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 614.572461][ T9] usb 6-1: device descriptor read/8, error -71 [ 614.576943][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 614.606824][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 614.625029][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 614.627030][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 614.682667][ T9] usb usb6-port1: unable to enumerate USB device [ 615.539183][T15229] lo speed is unknown, defaulting to 1000 [ 615.947726][T15260] FAULT_INJECTION: forcing a failure. [ 615.947726][T15260] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 615.947762][T15260] CPU: 0 UID: 0 PID: 15260 Comm: syz.0.3266 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 615.947790][T15260] Tainted: [L]=SOFTLOCKUP [ 615.947798][T15260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 615.947812][T15260] Call Trace: [ 615.947822][T15260] [ 615.947832][T15260] dump_stack_lvl+0xe8/0x150 [ 615.947861][T15260] should_fail_ex+0x46b/0x600 [ 615.947890][T15260] _copy_to_user+0x31/0xb0 [ 615.947919][T15260] simple_read_from_buffer+0xe1/0x170 [ 615.947955][T15260] proc_fail_nth_read+0x1be/0x230 [ 615.947992][T15260] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 615.948026][T15260] ? rw_verify_area+0x2ac/0x4e0 [ 615.948047][T15260] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 615.948080][T15260] vfs_read+0x212/0xa80 [ 615.948109][T15260] ? __pfx_vfs_read+0x10/0x10 [ 615.948133][T15260] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 615.948156][T15260] ? lockdep_hardirqs_on+0x7a/0x110 [ 615.948178][T15260] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 615.948200][T15260] ? mutex_lock_nested+0x152/0x1d0 [ 615.948226][T15260] ? fdget_pos+0x252/0x320 [ 615.948264][T15260] ksys_read+0x156/0x270 [ 615.948287][T15260] ? __pfx_ksys_read+0x10/0x10 [ 615.948307][T15260] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 615.948346][T15260] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.948368][T15260] do_syscall_64+0x15f/0x560 [ 615.948388][T15260] ? trace_irq_disable+0x3b/0x140 [ 615.948409][T15260] ? clear_bhb_loop+0x40/0x90 [ 615.948434][T15260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.948455][T15260] RIP: 0033:0x7f31e88fd68e [ 615.948473][T15260] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 615.948495][T15260] RSP: 002b:00007f31e6b8dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 615.948516][T15260] RAX: ffffffffffffffda RBX: 00007f31e6b8e6c0 RCX: 00007f31e88fd68e [ 615.948531][T15260] RDX: 000000000000000f RSI: 00007f31e6b8e0a0 RDI: 0000000000000006 [ 615.948543][T15260] RBP: 00007f31e6b8e090 R08: 0000000000000000 R09: 0000000000000000 [ 615.948557][T15260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 615.948576][T15260] R13: 00007f31e8bb6038 R14: 00007f31e8bb5fa0 R15: 00007ffc85aff098 [ 615.948608][T15260] [ 616.412830][T15229] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.413146][T15229] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.413333][T15229] bridge_slave_0: entered allmulticast mode [ 616.415867][T15229] bridge_slave_0: entered promiscuous mode [ 616.422178][T15229] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.422965][T15229] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.423558][T15229] bridge_slave_1: entered allmulticast mode [ 616.437797][T15229] bridge_slave_1: entered promiscuous mode [ 616.509132][T15229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 616.533203][T15229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 616.591530][T15229] team0: Port device team_slave_0 added [ 616.599011][T15229] team0: Port device team_slave_1 added [ 616.732082][T15229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 616.732100][T15229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 616.732129][T15229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 616.736934][T15229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 616.736950][T15229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 616.736980][T15229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 616.859786][T13997] Bluetooth: hci0: command tx timeout [ 616.890199][ T9] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 616.899479][T15229] hsr_slave_0: entered promiscuous mode [ 616.905330][T15229] hsr_slave_1: entered promiscuous mode [ 616.909244][T15229] debugfs: 'hsr0' already exists in 'hsr' [ 616.909267][T15229] Cannot create hsr debugfs directory [ 617.000084][ T5625] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 617.039766][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 617.041869][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 199, changing to 11 [ 617.041914][ T9] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 617.041939][ T9] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 617.076333][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 617.076418][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.076523][ T9] usb 6-1: Product: syz [ 617.076566][ T9] usb 6-1: Manufacturer: 㰁 [ 617.076611][ T9] usb 6-1: SerialNumber: syz [ 617.189668][ T5625] usb 1-1: Using ep0 maxpacket: 16 [ 617.194856][ T5625] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 617.194880][ T5625] usb 1-1: config 1 has no interface number 0 [ 617.194920][ T5625] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 617.194943][ T5625] usb 1-1: config 1 interface 105 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 617.194963][ T5625] usb 1-1: config 1 interface 105 has no altsetting 0 [ 617.248768][ T5625] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 617.248800][ T5625] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 617.248820][ T5625] usb 1-1: Product: syz [ 617.248836][ T5625] usb 1-1: Manufacturer: syz [ 617.248851][ T5625] usb 1-1: SerialNumber: syz [ 617.293084][T15273] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 617.324910][T15266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.328969][T15266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 617.398912][ T9] cdc_ncm 6-1:1.0: bind() failure [ 617.416210][ T9] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 617.416265][ T9] cdc_ncm 6-1:1.1: bind() failure [ 617.434335][ T9] usb 6-1: USB disconnect, device number 43 [ 617.500212][ T5625] aqc111 1-1:1.105: probe with driver aqc111 failed with error -22 [ 617.991751][T15229] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.159293][T15282] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3272'. [ 618.488251][T15229] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.943307][T13997] Bluetooth: hci0: command tx timeout [ 619.062597][T15229] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.596171][T15229] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.828083][ T5779] usb 1-1: USB disconnect, device number 85 [ 620.392897][T15323] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3280'. [ 620.781255][ T5779] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 620.944158][ T5779] usb 1-1: Using ep0 maxpacket: 8 [ 620.963123][ T5779] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 620.963147][ T5779] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 620.965659][ T5779] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 620.965688][ T5779] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.965709][ T5779] usb 1-1: Product: syz [ 620.965725][ T5779] usb 1-1: Manufacturer: syz [ 620.965741][ T5779] usb 1-1: SerialNumber: syz [ 621.020678][T13997] Bluetooth: hci0: command tx timeout [ 621.046683][ T5779] usb 1-1: skipping empty audio interface (v1) [ 621.159264][ T5779] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 621.236709][ T5628] udevd[5628]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 621.282794][ T5779] usb 1-1: USB disconnect, device number 86 [ 621.356591][T15229] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 621.404147][T15229] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 621.405865][T15229] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 621.437441][T15229] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 621.438452][T15229] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 621.466950][T15229] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 621.467940][T15229] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 621.508887][T15229] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 621.638580][T15229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 621.672357][T15229] 8021q: adding VLAN 0 to HW filter on device team0 [ 621.694335][ T1292] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.694463][ T1292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 621.729001][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.729245][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 621.962286][T15351] netlink: 666 bytes leftover after parsing attributes in process `syz.0.3286'. [ 621.962608][T15351] netlink: 666 bytes leftover after parsing attributes in process `syz.0.3286'. [ 621.964625][T15351] netlink: 666 bytes leftover after parsing attributes in process `syz.0.3286'. [ 621.964919][T15351] netlink: 666 bytes leftover after parsing attributes in process `syz.0.3286'. [ 621.966472][T15351] netlink: 666 bytes leftover after parsing attributes in process `syz.0.3286'. [ 621.966793][T15351] netlink: 666 bytes leftover after parsing attributes in process `syz.0.3286'. [ 621.968400][T15351] netlink: 666 bytes leftover after parsing attributes in process `syz.0.3286'. [ 621.968740][T15351] netlink: 666 bytes leftover after parsing attributes in process `syz.0.3286'. [ 622.002057][T15351] netlink: 666 bytes leftover after parsing attributes in process `syz.0.3286'. [ 622.799440][T15229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 623.108536][T13997] Bluetooth: hci0: command tx timeout [ 623.165386][T15229] veth0_vlan: entered promiscuous mode [ 623.206635][T15229] veth1_vlan: entered promiscuous mode [ 623.372267][T15229] veth0_macvtap: entered promiscuous mode [ 623.433572][T15229] veth1_macvtap: entered promiscuous mode [ 623.640976][T15229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 623.682657][T15229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 623.747779][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.777860][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.795496][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.931204][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.959684][ T9] usb 1-1: new full-speed USB device number 87 using dummy_hcd [ 624.215286][ T9] usb 1-1: config 0 has an invalid descriptor of length 120, skipping remainder of the config [ 624.215316][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 624.218977][ T9] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 624.219006][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.219027][ T9] usb 1-1: Product: syz [ 624.219042][ T9] usb 1-1: Manufacturer: syz [ 624.219058][ T9] usb 1-1: SerialNumber: syz [ 624.307570][ T9] usb 1-1: config 0 descriptor?? [ 624.389905][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.389990][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.737145][ T9] usb 1-1: USB disconnect, device number 87 [ 625.523919][T13997] Bluetooth: hci4: unexpected event for opcode 0x007f [ 625.802138][ T5720] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 625.837528][T15423] __nla_validate_parse: 26 callbacks suppressed [ 625.837545][T15423] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3305'. [ 625.918753][T15426] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3305'. [ 626.081054][ T5720] usb 6-1: Using ep0 maxpacket: 32 [ 626.085399][ T5720] usb 6-1: unable to get BOS descriptor or descriptor too short [ 626.105206][ T5720] usb 6-1: config 212 has an invalid descriptor of length 191, skipping remainder of the config [ 626.105249][ T5720] usb 6-1: config 212 has 0 interfaces, different from the descriptor's value: 2 [ 626.136357][ T5720] usb 6-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice=a9.75 [ 626.136389][ T5720] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.136410][ T5720] usb 6-1: Product: syz [ 626.136424][ T5720] usb 6-1: Manufacturer: syz [ 626.136439][ T5720] usb 6-1: SerialNumber: syz [ 626.243502][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.243524][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.356164][ T1401] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.356185][ T1401] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.607853][ T5779] usb 6-1: USB disconnect, device number 44 [ 627.430203][ T5720] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 627.602421][ T5720] usb 6-1: config 0 has an invalid descriptor of length 120, skipping remainder of the config [ 627.602450][ T5720] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 627.607318][ T5720] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 627.607344][ T5720] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.607364][ T5720] usb 6-1: Product: syz [ 627.607378][ T5720] usb 6-1: Manufacturer: syz [ 627.607393][ T5720] usb 6-1: SerialNumber: syz [ 627.678403][ T5720] usb 6-1: config 0 descriptor?? [ 627.786724][T15459] sctp: [Deprecated]: syz.0.3314 (pid 15459) Use of int in maxseg socket option. [ 627.786724][T15459] Use struct sctp_assoc_value instead [ 627.903997][ T5720] usb 6-1: USB disconnect, device number 45 [ 627.965412][T15461] libceph: secret too big 289 [ 627.980303][T15461] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 628.374249][T15478] overlayfs: missing 'lowerdir' [ 628.630245][T15487] futex_wake_op: syz.5.3323 tries to shift op by 144; fix this program [ 629.314903][T15478] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 629.315853][T15478] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 629.397577][T15478] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 629.397683][T15478] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 629.478961][T15478] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 629.479082][T15478] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 629.540882][T15478] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 629.601045][T15478] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 629.601116][T15478] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 629.673745][T15478] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 630.019749][ T5720] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 630.019914][ T1007] usb 6-1: new full-speed USB device number 46 using dummy_hcd [ 630.131735][ T5779] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 630.184951][ T5720] usb 1-1: Using ep0 maxpacket: 8 [ 630.186602][ T1007] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 630.186656][ T1007] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 630.187494][ T5720] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 630.187657][ T5720] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 630.187685][ T5720] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 630.187711][ T5720] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 630.187736][ T5720] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 630.187894][ T5720] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 630.187933][ T5720] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.191164][ T1007] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 630.191192][ T1007] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.191214][ T1007] usb 6-1: Product: syz [ 630.191229][ T1007] usb 6-1: Manufacturer: syz [ 630.191245][ T1007] usb 6-1: SerialNumber: syz [ 630.328428][ T5779] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 630.328455][ T5779] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.328473][ T5779] usb 4-1: Product: syz [ 630.328486][ T5779] usb 4-1: Manufacturer: syz [ 630.328499][ T5779] usb 4-1: SerialNumber: syz [ 630.424365][ T5779] usb 4-1: config 0 descriptor?? [ 630.428905][ T1007] usb 6-1: config 0 descriptor?? [ 630.460919][ T60] Bluetooth: hci4: command 0x0406 tx timeout [ 630.600822][T15524] 9p: Bad value for 'rfdno' [ 630.605782][ T5720] usb 1-1: GET_CAPABILITIES returned 0 [ 630.605831][ T5720] usbtmc 1-1:16.0: can't read capabilities [ 630.635851][ T5779] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 630.666608][ T5700] usb 6-1: USB disconnect, device number 46 [ 630.871937][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 630.893487][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 630.893542][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 630.897677][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 630.897735][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 630.897788][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 630.897841][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 630.899922][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 630.899994][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 630.900056][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 630.900120][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 631.000686][ T5713] usb 1-1: USB disconnect, device number 88 [ 631.293293][T15533] netlink: 'syz.5.3342': attribute type 6 has an invalid length. [ 631.425891][ T60] Bluetooth: hci1: command 0x0406 tx timeout [ 631.509149][ T60] Bluetooth: hci5: command 0x0c1a tx timeout [ 631.642308][ T5713] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 631.659692][ T60] Bluetooth: hci0: command 0x0c1a tx timeout [ 631.789799][ T5713] usb 6-1: Using ep0 maxpacket: 8 [ 631.792074][ T5713] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.792106][ T5713] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 631.792148][ T5713] usb 6-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 631.792178][ T5713] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.798179][ T5713] usb 6-1: config 0 descriptor?? [ 632.218115][ T5713] logitech 0003:046D:C50C.0027: ignoring exceeding usage max [ 632.222760][ T5713] hid_parser_main: 230 callbacks suppressed [ 632.222835][ T5713] logitech 0003:046D:C50C.0027: unknown main item tag 0x0 [ 632.222862][ T5713] logitech 0003:046D:C50C.0027: unknown main item tag 0x0 [ 632.222920][ T5713] logitech 0003:046D:C50C.0027: unknown main item tag 0x0 [ 632.222994][ T5713] logitech 0003:046D:C50C.0027: unknown main item tag 0x0 [ 632.223019][ T5713] logitech 0003:046D:C50C.0027: unknown main item tag 0x0 [ 632.223050][ T5713] logitech 0003:046D:C50C.0027: unknown main item tag 0x0 [ 632.223115][ T5713] logitech 0003:046D:C50C.0027: unknown main item tag 0x0 [ 632.223165][ T5713] logitech 0003:046D:C50C.0027: unknown main item tag 0x0 [ 632.223297][ T5713] logitech 0003:046D:C50C.0027: item fetching failed at offset 42/43 [ 632.224785][ T5713] logitech 0003:046D:C50C.0027: parse failed [ 632.224952][ T5713] logitech 0003:046D:C50C.0027: probe with driver logitech failed with error -22 [ 632.447286][ T5346] usb 6-1: USB disconnect, device number 47 [ 632.540449][ T60] Bluetooth: hci4: command 0x0406 tx timeout [ 632.970225][ T5346] usb 1-1: new full-speed USB device number 89 using dummy_hcd [ 633.129639][ T5779] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 633.129778][ T5346] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 633.129823][ T5346] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 633.133095][ T5346] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 633.133133][ T5346] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.133155][ T5346] usb 1-1: Product: syz [ 633.133168][ T5346] usb 1-1: Manufacturer: syz [ 633.133181][ T5346] usb 1-1: SerialNumber: syz [ 633.188458][ T5346] usb 1-1: config 0 descriptor?? [ 633.319074][ T60] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 633.436895][ T5625] usb 1-1: USB disconnect, device number 89 [ 633.503084][ T60] Bluetooth: hci1: command 0x0406 tx timeout [ 633.570548][ T5779] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 633.585376][ T60] Bluetooth: hci5: command 0x0c1a tx timeout [ 633.721146][ T5779] usb 6-1: config 127 has an invalid interface number: 192 but max is 0 [ 633.721165][ T5779] usb 6-1: config 127 has no interface number 0 [ 633.723120][ T5779] usb 6-1: New USB device found, idVendor=093a, idProduct=2600, bcdDevice=1a.06 [ 633.723140][ T5779] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.723154][ T5779] usb 6-1: Product: syz [ 633.723165][ T5779] usb 6-1: Manufacturer: syz [ 633.723176][ T5779] usb 6-1: SerialNumber: syz [ 633.739919][ T60] Bluetooth: hci0: command 0x0c1a tx timeout [ 634.140848][ T5779] gspca_main: pac7311-2.14.0 probing 093a:2600 [ 634.143874][ T5779] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71 [ 634.143961][ T5779] pac7311 6-1:127.192: probe with driver pac7311 failed with error -71 [ 634.174325][ T5779] usb 6-1: USB disconnect, device number 48 [ 634.389702][ T5713] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 634.541864][ T5713] usb 1-1: Using ep0 maxpacket: 8 [ 634.559960][ T5713] usb 1-1: config 1 has an invalid interface number: 216 but max is 1 [ 634.559980][ T5713] usb 1-1: config 1 has an invalid interface number: 186 but max is 1 [ 634.559995][ T5713] usb 1-1: config 1 has an invalid interface number: 15 but max is 1 [ 634.560009][ T5713] usb 1-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 634.560025][ T5713] usb 1-1: config 1 has no interface number 0 [ 634.560037][ T5713] usb 1-1: config 1 has no interface number 1 [ 634.560049][ T5713] usb 1-1: config 1 has no interface number 2 [ 634.560130][ T5713] usb 1-1: config 1 interface 216 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 634.560154][ T5713] usb 1-1: config 1 interface 216 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 634.560194][ T5713] usb 1-1: config 1 interface 186 altsetting 64 has a duplicate endpoint with address 0x2, skipping [ 634.560220][ T5713] usb 1-1: config 1 interface 186 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 634.560244][ T5713] usb 1-1: config 1 interface 186 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 634.560260][ T5713] usb 1-1: config 1 interface 186 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 634.560276][ T5713] usb 1-1: config 1 interface 186 altsetting 64 bulk endpoint 0xD has invalid maxpacket 8 [ 634.560294][ T5713] usb 1-1: config 1 interface 186 altsetting 64 has 7 endpoint descriptors, different from the interface descriptor's value: 9 [ 634.560313][ T5713] usb 1-1: too many endpoints for config 1 interface 15 altsetting 29: 253, using maximum allowed: 30 [ 634.560342][ T5713] usb 1-1: config 1 interface 15 altsetting 29 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 634.560363][ T5713] usb 1-1: config 1 interface 15 altsetting 29 has 2 endpoint descriptors, different from the interface descriptor's value: 253 [ 634.560383][ T5713] usb 1-1: config 1 interface 216 has no altsetting 0 [ 634.560396][ T5713] usb 1-1: config 1 interface 186 has no altsetting 0 [ 634.560410][ T5713] usb 1-1: config 1 interface 15 has no altsetting 0 [ 634.694342][ T5713] usb 1-1: New USB device found, idVendor=03f0, idProduct=1efa, bcdDevice=d9.f7 [ 634.694433][ T5713] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.694455][ T5713] usb 1-1: Product: ࿔矜긄날ᢱ䐷ᴰ꾍勰ꑦ緇Ｓ弼搃꘴뺴깆ꅇН矯⯰Ყ념힅䱎᪋ଫ蔛瀑✍ㆡ啃㾓㽧吽쇊푗钸ᩅ䠫蝑터뿟花㌭ [ 634.694532][ T5713] usb 1-1: Manufacturer: ⠊ [ 634.694576][ T5713] usb 1-1: SerialNumber: syz [ 634.922837][T15602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 634.942866][T15602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 635.066751][ T5713] rndis_host 1-1:1.186: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 635.101084][ T5713] usb 1-1: USB disconnect, device number 90 [ 635.255811][T15611] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 635.389907][T15617] netlink: 'syz.3.3370': attribute type 2 has an invalid length. [ 635.522396][T15622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 635.524765][T15622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 635.659819][ T60] Bluetooth: hci5: command 0x0c1a tx timeout [ 635.819692][ T60] Bluetooth: hci0: command 0x0c1a tx timeout [ 635.959749][ T5713] usb 1-1: new full-speed USB device number 91 using dummy_hcd [ 635.989716][ T5346] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 636.112078][ T5713] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 636.112129][ T5713] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 636.112155][ T5713] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 636.112192][ T5713] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 636.112213][ T5713] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.117213][ T5713] usb 1-1: config 0 descriptor?? [ 636.118407][T15630] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 636.142913][ T5346] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 636.142971][ T5346] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 636.143006][ T5346] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 636.143147][ T5346] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 636.183555][ T5346] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 636.183745][ T5346] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 636.183792][ T5346] usb 6-1: Product: syz [ 636.183936][ T5346] usb 6-1: Manufacturer: syz [ 636.283389][ T5346] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 636.442425][T15640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 636.443741][T15640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 636.476435][ T5779] usb 6-1: USB disconnect, device number 49 [ 636.539200][ T5713] hid-multitouch 0003:1FD2:6007.0028: ignoring exceeding usage max [ 636.551513][ T5713] hid-multitouch 0003:1FD2:6007.0028: unknown main item tag 0x0 [ 636.551614][ T5713] hid-multitouch 0003:1FD2:6007.0028: unknown main item tag 0x0 [ 636.599542][ T5713] hid-multitouch 0003:1FD2:6007.0028: hidraw0: USB HID v0.05 Device [HID 1fd2:6007] on usb-dummy_hcd.0-1/input0 [ 636.758439][ T5713] usb 1-1: USB disconnect, device number 91 [ 636.954270][T15650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 636.959181][T15650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 637.394700][T15664] netlink: 'syz.5.3389': attribute type 12 has an invalid length. [ 637.609701][ T5779] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 637.759766][ T5779] usb 1-1: Using ep0 maxpacket: 16 [ 637.764600][ T5779] usb 1-1: config 0 has an invalid interface number: 104 but max is 1 [ 637.764635][ T5779] usb 1-1: config 0 has an invalid interface number: 104 but max is 1 [ 637.764657][ T5779] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 637.764677][ T5779] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 637.764717][ T5779] usb 1-1: config 0 has no interface number 0 [ 637.764751][ T5779] usb 1-1: config 0 interface 104 has no altsetting 1 [ 637.768802][ T5779] usb 1-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 637.768829][ T5779] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.768849][ T5779] usb 1-1: Product: syz [ 637.768874][ T5779] usb 1-1: Manufacturer: syz [ 637.768888][ T5779] usb 1-1: SerialNumber: syz [ 637.902852][ T5779] usb 1-1: config 0 descriptor?? [ 637.915758][ T5779] asix 1-1:0.104: probe with driver asix failed with error -22 [ 638.005863][T15673] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 638.005891][T15673] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 638.028642][T15673] vhci_hcd vhci_hcd.0: Device attached [ 638.029432][T15674] vhci_hcd: connection closed [ 638.044549][ T8561] vhci_hcd vhci_hcd.5: stop threads [ 638.044566][ T8561] vhci_hcd vhci_hcd.5: release socket [ 638.044593][ T8561] vhci_hcd vhci_hcd.5: disconnect device [ 638.536944][ T5625] usb 1-1: USB disconnect, device number 92 [ 638.647866][T15692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.648584][T15692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 638.689340][T15694] comedi comedi0: s526: I/O base address not correctly aligned [ 638.873968][T15698] lo speed is unknown, defaulting to 1000 [ 639.143191][T15704] FAULT_INJECTION: forcing a failure. [ 639.143191][T15704] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 639.143216][T15704] CPU: 0 UID: 0 PID: 15704 Comm: syz.5.3404 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 639.143235][T15704] Tainted: [L]=SOFTLOCKUP [ 639.143240][T15704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 639.143249][T15704] Call Trace: [ 639.143255][T15704] [ 639.143262][T15704] dump_stack_lvl+0xe8/0x150 [ 639.143282][T15704] should_fail_ex+0x46b/0x600 [ 639.143300][T15704] _copy_from_user+0x2d/0xb0 [ 639.143322][T15704] ___sys_sendmsg+0x1c6/0x360 [ 639.143337][T15704] ? __lock_acquire+0x6b5/0x2d10 [ 639.143356][T15704] ? __pfx____sys_sendmsg+0x10/0x10 [ 639.143410][T15704] ? __fget_files+0x2a/0x420 [ 639.143431][T15704] ? __fget_files+0x3a6/0x420 [ 639.143459][T15704] __x64_sys_sendmsg+0x1c3/0x2a0 [ 639.143477][T15704] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 639.143499][T15704] ? __pfx_ksys_write+0x10/0x10 [ 639.143520][T15704] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.143537][T15704] do_syscall_64+0x15f/0x560 [ 639.143552][T15704] ? trace_irq_disable+0x3b/0x140 [ 639.143578][T15704] ? clear_bhb_loop+0x40/0x90 [ 639.143595][T15704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.143609][T15704] RIP: 0033:0x7f0c1936ce59 [ 639.143622][T15704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 639.143634][T15704] RSP: 002b:00007f0c175c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 639.143648][T15704] RAX: ffffffffffffffda RBX: 00007f0c195e5fa0 RCX: 00007f0c1936ce59 [ 639.143659][T15704] RDX: 0000000000000010 RSI: 0000200000000580 RDI: 0000000000000003 [ 639.143668][T15704] RBP: 00007f0c175c6090 R08: 0000000000000000 R09: 0000000000000000 [ 639.143676][T15704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 639.143684][T15704] R13: 00007f0c195e6038 R14: 00007f0c195e5fa0 R15: 00007fffd491fe68 [ 639.143705][T15704] [ 639.679381][T15711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.680616][T15711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.995762][T15728] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 640.054308][T15729] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3413'. [ 640.391125][ T5726] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 640.555512][ T5726] usb 6-1: config 0 has an invalid descriptor of length 120, skipping remainder of the config [ 640.555561][ T5726] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 640.558127][ T5726] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 640.558152][ T5726] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.558172][ T5726] usb 6-1: Product: syz [ 640.558186][ T5726] usb 6-1: Manufacturer: syz [ 640.558200][ T5726] usb 6-1: SerialNumber: syz [ 640.620241][ T5726] usb 6-1: config 0 descriptor?? [ 640.792821][T15743] netlink: 'syz.4.3418': attribute type 10 has an invalid length. [ 640.792836][T15743] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3418'. [ 640.861010][ T5720] usb 6-1: USB disconnect, device number 50 [ 641.268425][T15752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 641.269031][T15752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 641.931142][T15763] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3423'. [ 642.272757][T15775] FAULT_INJECTION: forcing a failure. [ 642.272757][T15775] name failslab, interval 1, probability 0, space 0, times 0 [ 642.272785][T15775] CPU: 0 UID: 0 PID: 15775 Comm: syz.3.3428 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 642.272807][T15775] Tainted: [L]=SOFTLOCKUP [ 642.272814][T15775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 642.272824][T15775] Call Trace: [ 642.272831][T15775] [ 642.272838][T15775] dump_stack_lvl+0xe8/0x150 [ 642.272862][T15775] should_fail_ex+0x46b/0x600 [ 642.272884][T15775] should_failslab+0xa8/0x100 [ 642.272903][T15775] __kmalloc_noprof+0xdf/0x7b0 [ 642.272920][T15775] ? tomoyo_init_log+0x1aaf/0x1fb0 [ 642.272947][T15775] tomoyo_init_log+0x1aaf/0x1fb0 [ 642.272984][T15775] ? __pfx_tomoyo_init_log+0x10/0x10 [ 642.273006][T15775] ? tomoyo_profile+0x11/0x50 [ 642.273044][T15775] ? tomoyo_domain_quota_is_ok+0x42b/0x570 [ 642.273078][T15775] tomoyo_supervisor+0x353/0x1570 [ 642.273111][T15775] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 642.273142][T15775] ? snprintf+0xe8/0x140 [ 642.273170][T15775] ? __pfx_snprintf+0x10/0x10 [ 642.273195][T15775] ? tomoyo_check_acl+0x386/0x400 [ 642.273243][T15775] tomoyo_path_number_perm+0x4aa/0x630 [ 642.273272][T15775] ? tomoyo_path_number_perm+0x219/0x630 [ 642.273299][T15775] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 642.273367][T15775] ? __fget_files+0x2a/0x420 [ 642.273395][T15775] ? __fget_files+0x2a/0x420 [ 642.273417][T15775] ? __fget_files+0x3a6/0x420 [ 642.273440][T15775] ? __fget_files+0x2a/0x420 [ 642.273466][T15775] security_file_ioctl+0xc3/0x2a0 [ 642.273492][T15775] __se_sys_ioctl+0x47/0x170 [ 642.273510][T15775] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.273529][T15775] do_syscall_64+0x15f/0x560 [ 642.273545][T15775] ? trace_irq_disable+0x3b/0x140 [ 642.273562][T15775] ? clear_bhb_loop+0x40/0x90 [ 642.273582][T15775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.273599][T15775] RIP: 0033:0x7f0d1647ce59 [ 642.273614][T15775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 642.273628][T15775] RSP: 002b:00007f0d146ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 642.273645][T15775] RAX: ffffffffffffffda RBX: 00007f0d166f5fa0 RCX: 00007f0d1647ce59 [ 642.273657][T15775] RDX: 00002000000000c0 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 642.273668][T15775] RBP: 00007f0d146ce090 R08: 0000000000000000 R09: 0000000000000000 [ 642.273678][T15775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 642.273688][T15775] R13: 00007f0d166f6038 R14: 00007f0d166f5fa0 R15: 00007ffe01919e88 [ 642.273712][T15775] [ 642.350149][ T1007] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 642.523405][T15777] overlayfs: cannot append lower layer [ 642.534086][ T1007] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 642.534163][ T1007] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.534206][ T1007] usb 6-1: Product: syz [ 642.534244][ T1007] usb 6-1: Manufacturer: syz [ 642.534284][ T1007] usb 6-1: SerialNumber: syz [ 642.587841][ T1007] usb 6-1: config 0 descriptor?? [ 642.615052][ T1007] hub 6-1:0.0: bad descriptor, ignoring hub [ 642.615086][ T1007] hub 6-1:0.0: probe with driver hub failed with error -5 [ 642.616488][T15778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 642.617215][T15778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 642.651897][T15779] overlayfs: cannot append lower layer [ 642.667067][T15777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 642.668745][T15777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 642.795499][ T1007] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 642.856088][ T1007] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 642.856130][ T1007] dib0700: firmware download failed at 7 with -22 [ 643.110265][ T5720] usb 6-1: USB disconnect, device number 51 [ 643.236430][T15792] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3434'. [ 643.434637][T13997] Bluetooth: hci0: unexpected event for opcode 0x007f [ 644.685162][T15814] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3441'. [ 644.762409][T15822] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3444'. [ 645.391316][ T5726] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 645.549659][ T5726] usb 1-1: Using ep0 maxpacket: 32 [ 645.554303][ T5726] usb 1-1: unable to get BOS descriptor or descriptor too short [ 645.556549][ T5726] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 645.556578][ T5726] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 645.556631][ T5726] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 645.605493][ T5726] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 645.605525][ T5726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.605546][ T5726] usb 1-1: Product: syz [ 645.605562][ T5726] usb 1-1: Manufacturer: syz [ 645.605577][ T5726] usb 1-1: SerialNumber: syz [ 645.764412][T15836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3448'. [ 645.793606][T15836] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3448'. [ 645.966629][ T5726] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 645.966679][ T5726] cdc_ncm 1-1:1.0: bind() failure [ 645.998010][ T5726] usb 1-1: USB disconnect, device number 93 [ 646.290384][T15839] netlink: 'syz.3.3449': attribute type 1 has an invalid length. [ 646.292237][T15839] binder: 15838:15839 ioctl c0186e86 200000000240 returned -22 [ 647.414083][T15854] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3453'. [ 647.745888][T15864] binder: 15863:15864 ioctl 400c620e 200000000500 returned -22 [ 647.764051][T15864] loop9: detected capacity change from 0 to 524287936 [ 647.781460][T15860] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3455'. [ 648.585681][T13997] Bluetooth: hci4: unexpected event for opcode 0x203c [ 648.910580][T15884] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3463'. [ 649.499755][ T1007] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 649.649791][ T1007] usb 1-1: Using ep0 maxpacket: 8 [ 649.652637][ T1007] usb 1-1: config 1 has an invalid interface number: 216 but max is 1 [ 649.652665][ T1007] usb 1-1: config 1 has an invalid interface number: 186 but max is 1 [ 649.652687][ T1007] usb 1-1: config 1 has an invalid interface number: 15 but max is 1 [ 649.652707][ T1007] usb 1-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 649.652728][ T1007] usb 1-1: config 1 has no interface number 0 [ 649.652746][ T1007] usb 1-1: config 1 has no interface number 1 [ 649.652763][ T1007] usb 1-1: config 1 has no interface number 2 [ 649.652835][ T1007] usb 1-1: config 1 interface 216 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 649.652861][ T1007] usb 1-1: config 1 interface 216 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 649.652899][ T1007] usb 1-1: config 1 interface 186 altsetting 64 has a duplicate endpoint with address 0x2, skipping [ 649.652924][ T1007] usb 1-1: config 1 interface 186 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 649.652947][ T1007] usb 1-1: config 1 interface 186 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 649.652970][ T1007] usb 1-1: config 1 interface 186 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 649.652993][ T1007] usb 1-1: config 1 interface 186 altsetting 64 bulk endpoint 0xD has invalid maxpacket 8 [ 649.653026][ T1007] usb 1-1: config 1 interface 186 altsetting 64 has 7 endpoint descriptors, different from the interface descriptor's value: 9 [ 649.653059][ T1007] usb 1-1: too many endpoints for config 1 interface 15 altsetting 29: 253, using maximum allowed: 30 [ 649.653100][ T1007] usb 1-1: config 1 interface 15 altsetting 29 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 649.653131][ T1007] usb 1-1: config 1 interface 15 altsetting 29 has 2 endpoint descriptors, different from the interface descriptor's value: 253 [ 649.653159][ T1007] usb 1-1: config 1 interface 216 has no altsetting 0 [ 649.653179][ T1007] usb 1-1: config 1 interface 186 has no altsetting 0 [ 649.653199][ T1007] usb 1-1: config 1 interface 15 has no altsetting 0 [ 649.655912][ T1007] usb 1-1: New USB device found, idVendor=03f0, idProduct=1efa, bcdDevice=d9.f7 [ 649.655933][ T1007] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.655948][ T1007] usb 1-1: Product: ࿔矜긄날ᢱ䐷ᴰ꾍勰ꑦ緇Ｓ弼搃꘴뺴깆ꅇН矯⯰Ყ념힅䱎᪋ଫ蔛瀑✍ㆡ啃㾓㽧吽쇊푗钸ᩅ䠫蝑터뿟花㌭ [ 649.655966][ T1007] usb 1-1: Manufacturer: ⠊ [ 649.655977][ T1007] usb 1-1: SerialNumber: syz [ 649.996807][ T1007] rndis_host 1-1:1.186: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 650.027555][ T1007] usb 1-1: USB disconnect, device number 94 [ 650.369082][T15911] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3473'. [ 650.390810][T15912] 9p: Bad value for 'wfdno' [ 650.398100][T15912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.398731][T15912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.773278][T15918] kvm: pic: level sensitive irq not supported [ 650.773336][T15918] kvm: pic: non byte read [ 650.773526][T15918] kvm: pic: non byte read [ 650.773583][T15918] kvm: pic: non byte read [ 650.773636][T15918] kvm: pic: non byte read [ 650.773696][T15918] kvm: pic: non byte read [ 650.773749][T15918] kvm: pic: non byte read [ 650.773802][T15918] kvm: pic: non byte read [ 650.773855][T15918] kvm: pic: non byte read [ 650.773908][T15918] kvm: pic: non byte read [ 650.773974][T15918] kvm: pic: non byte read [ 651.083081][T15930] 9p: Bad value for 'rfdno' [ 651.489747][ T1007] usb 6-1: new full-speed USB device number 52 using dummy_hcd [ 651.641499][ T1007] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 651.641529][ T1007] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 651.641568][ T1007] usb 6-1: New USB device found, idVendor=056a, idProduct=5012, bcdDevice= 0.00 [ 651.641583][ T1007] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.645302][ T1007] usb 6-1: config 0 descriptor?? [ 652.072614][ T1007] hid_parser_main: 8 callbacks suppressed [ 652.072638][ T1007] wacom 0003:056A:5012.0029: unknown main item tag 0x0 [ 652.072668][ T1007] wacom 0003:056A:5012.0029: unknown main item tag 0x0 [ 652.072696][ T1007] wacom 0003:056A:5012.0029: unknown main item tag 0x0 [ 652.072722][ T1007] wacom 0003:056A:5012.0029: unknown main item tag 0x0 [ 652.072747][ T1007] wacom 0003:056A:5012.0029: unknown main item tag 0x0 [ 652.072774][ T1007] wacom 0003:056A:5012.0029: unknown main item tag 0x0 [ 652.072803][ T1007] wacom 0003:056A:5012.0029: unknown main item tag 0x0 [ 652.072831][ T1007] wacom 0003:056A:5012.0029: unknown main item tag 0x0 [ 652.072857][ T1007] wacom 0003:056A:5012.0029: unknown main item tag 0x0 [ 652.072883][ T1007] wacom 0003:056A:5012.0029: unknown main item tag 0x0 [ 652.077836][ T1007] wacom 0003:056A:5012.0029: unexpected long global item [ 652.078452][ T1007] wacom 0003:056A:5012.0029: parse failed [ 652.078545][ T1007] wacom 0003:056A:5012.0029: probe with driver wacom failed with error -22 [ 652.210671][T15951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.211507][T15951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.261531][ T1007] usb 6-1: USB disconnect, device number 52 [ 652.398542][T15953] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3484'. [ 652.759199][T15963] binder: 15962:15963 ioctl 4018620d 0 returned -22 [ 652.763964][T15963] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3488'. [ 652.783287][ T5726] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 652.929693][ T5726] usb 1-1: Using ep0 maxpacket: 16 [ 652.933000][ T5726] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 20, changing to 7 [ 652.935432][ T5726] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 652.935457][ T5726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.935475][ T5726] usb 1-1: Product: syz [ 652.935491][ T5726] usb 1-1: Manufacturer: syz [ 652.935508][ T5726] usb 1-1: SerialNumber: syz [ 653.355556][ T5726] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 653.357490][ T5726] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 653.543413][ T5726] usb 1-1: USB disconnect, device number 95 [ 653.656971][ T5822] udevd[5822]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 653.938027][T15987] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3494'. [ 654.263698][T16001] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.3498'. [ 654.888532][T16015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3504'. [ 654.913432][T16015] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3504'. [ 654.918748][T16015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.923879][T16015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.162166][T16019] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3505'. [ 655.614933][T16031] veth0_macvtap: mtu less than device minimum [ 656.546406][T16061] FAULT_INJECTION: forcing a failure. [ 656.546406][T16061] name failslab, interval 1, probability 0, space 0, times 0 [ 656.546445][T16061] CPU: 1 UID: 0 PID: 16061 Comm: syz.0.3519 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 656.546475][T16061] Tainted: [L]=SOFTLOCKUP [ 656.546484][T16061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 656.546497][T16061] Call Trace: [ 656.546506][T16061] [ 656.546517][T16061] dump_stack_lvl+0xe8/0x150 [ 656.546548][T16061] should_fail_ex+0x46b/0x600 [ 656.546579][T16061] should_failslab+0xa8/0x100 [ 656.546606][T16061] __kmalloc_noprof+0xdf/0x7b0 [ 656.546630][T16061] ? tomoyo_encode+0x28b/0x550 [ 656.546666][T16061] tomoyo_encode+0x28b/0x550 [ 656.546705][T16061] tomoyo_realpath_from_path+0x58d/0x5d0 [ 656.546744][T16061] ? tomoyo_domain+0xd7/0x130 [ 656.546780][T16061] ? tomoyo_path_number_perm+0x219/0x630 [ 656.546807][T16061] tomoyo_path_number_perm+0x246/0x630 [ 656.546837][T16061] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 656.546863][T16061] ? __lock_acquire+0x6b5/0x2d10 [ 656.546892][T16061] ? do_raw_spin_lock+0x12b/0x2f0 [ 656.546948][T16061] ? __fget_files+0x2a/0x420 [ 656.546991][T16061] ? __fget_files+0x2a/0x420 [ 656.547021][T16061] ? __fget_files+0x3a6/0x420 [ 656.547054][T16061] ? __fget_files+0x2a/0x420 [ 656.547092][T16061] security_file_ioctl+0xc3/0x2a0 [ 656.547119][T16061] __se_sys_ioctl+0x47/0x170 [ 656.547144][T16061] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.547169][T16061] do_syscall_64+0x15f/0x560 [ 656.547192][T16061] ? trace_irq_disable+0x3b/0x140 [ 656.547215][T16061] ? clear_bhb_loop+0x40/0x90 [ 656.547243][T16061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.547266][T16061] RIP: 0033:0x7f31e893ce59 [ 656.547286][T16061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 656.547306][T16061] RSP: 002b:00007f31e6b6d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 656.547342][T16061] RAX: ffffffffffffffda RBX: 00007f31e8bb6090 RCX: 00007f31e893ce59 [ 656.547359][T16061] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 656.547372][T16061] RBP: 00007f31e6b6d090 R08: 0000000000000000 R09: 0000000000000000 [ 656.547385][T16061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 656.547399][T16061] R13: 00007f31e8bb6128 R14: 00007f31e8bb6090 R15: 00007ffc85aff098 [ 656.547443][T16061] [ 656.547590][T16061] ERROR: Out of memory at tomoyo_realpath_from_path. [ 656.913775][T16070] overlayfs: overlapping lowerdir path [ 657.249669][ T5346] usb 6-1: new full-speed USB device number 53 using dummy_hcd [ 657.405200][ T5346] usb 6-1: config 0 has an invalid interface number: 133 but max is 0 [ 657.405227][ T5346] usb 6-1: config 0 has no interface number 0 [ 657.407784][ T5346] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 657.407814][ T5346] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.407836][ T5346] usb 6-1: Product: syz [ 657.407853][ T5346] usb 6-1: Manufacturer: syz [ 657.407868][ T5346] usb 6-1: SerialNumber: syz [ 657.428164][ T5346] usb 6-1: config 0 descriptor?? [ 657.579691][T13997] Bluetooth: hci4: command 0x0406 tx timeout [ 657.729829][T16072] CUSE: info not properly terminated [ 658.415098][T16101] overlayfs: overlapping lowerdir path [ 659.544799][T16126] overlayfs: overlapping lowerdir path [ 659.889681][ T1007] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 660.040152][ T5346] keyspan 6-1:0.133: Keyspan 1 port adapter converter detected [ 660.066312][ T1007] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 660.066343][ T1007] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.066366][ T1007] usb 1-1: Product: syz [ 660.066381][ T1007] usb 1-1: Manufacturer: syz [ 660.066398][ T1007] usb 1-1: SerialNumber: syz [ 660.069155][ T5346] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 81 [ 660.069220][ T5346] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 1 [ 660.069268][ T5346] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 2 [ 660.099268][ T5346] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 660.154984][ T1007] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 660.165170][ T5346] usb 6-1: USB disconnect, device number 53 [ 660.260329][ T5346] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 660.273959][ T5346] keyspan 6-1:0.133: device disconnected [ 660.358211][ T5720] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 660.680255][ T5346] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 660.829716][ T5346] usb 6-1: Using ep0 maxpacket: 8 [ 660.831927][ T5346] usb 6-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 660.833635][ T5346] usb 6-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 660.834782][ T5346] usb 6-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 660.834820][ T5346] usb 6-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 660.834836][ T5346] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.920994][ T5346] hub 6-1:32.0: Invalid hub with more than one config or interface [ 660.921035][ T5346] hub 6-1:32.0: probe with driver hub failed with error -22 [ 661.044844][T16155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.048436][T16155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.324947][ T5346] usb 6-1: USB disconnect, device number 54 [ 661.500860][ T5720] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 661.580133][ T5720] ath9k_htc: Failed to initialize the device [ 661.636076][T16164] lo speed is unknown, defaulting to 1000 [ 661.845852][ T5720] usb 1-1: ath9k_htc: USB layer deinitialized [ 662.504151][T16179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 662.504890][T16179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 662.878712][T16187] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3563'. [ 662.941593][ T1007] usb 1-1: USB disconnect, device number 96 [ 662.977936][T16189] tipc: Trying to set illegal importance in message [ 663.197584][T16199] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3567'. [ 663.915430][T16213] FAULT_INJECTION: forcing a failure. [ 663.915430][T16213] name failslab, interval 1, probability 0, space 0, times 0 [ 663.915610][T16213] CPU: 0 UID: 0 PID: 16213 Comm: syz.0.3572 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 663.915637][T16213] Tainted: [L]=SOFTLOCKUP [ 663.915644][T16213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 663.915656][T16213] Call Trace: [ 663.915664][T16213] [ 663.915672][T16213] dump_stack_lvl+0xe8/0x150 [ 663.915700][T16213] should_fail_ex+0x46b/0x600 [ 663.915742][T16213] should_failslab+0xa8/0x100 [ 663.915768][T16213] __kmalloc_noprof+0xdf/0x7b0 [ 663.915793][T16213] ? __pfx_aa_sk_perm+0x10/0x10 [ 663.915818][T16213] ? hash_accept+0xab/0x280 [ 663.915858][T16213] hash_accept+0xab/0x280 [ 663.915897][T16213] do_accept+0x6ca/0x930 [ 663.915940][T16213] ? __pfx_do_accept+0x10/0x10 [ 663.915995][T16213] __sys_accept4+0x139/0x230 [ 663.916032][T16213] ? __pfx___sys_accept4+0x10/0x10 [ 663.916066][T16213] ? __pfx_ksys_write+0x10/0x10 [ 663.916096][T16213] __x64_sys_accept4+0x9a/0xb0 [ 663.916129][T16213] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.916152][T16213] do_syscall_64+0x15f/0x560 [ 663.916174][T16213] ? trace_irq_disable+0x3b/0x140 [ 663.916197][T16213] ? clear_bhb_loop+0x40/0x90 [ 663.916224][T16213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.916246][T16213] RIP: 0033:0x7f31e893ce59 [ 663.916266][T16213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 663.916285][T16213] RSP: 002b:00007f31e6b6d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 663.916308][T16213] RAX: ffffffffffffffda RBX: 00007f31e8bb6090 RCX: 00007f31e893ce59 [ 663.916326][T16213] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 663.916339][T16213] RBP: 00007f31e6b6d090 R08: 0000000000000000 R09: 0000000000000000 [ 663.916354][T16213] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 663.916367][T16213] R13: 00007f31e8bb6128 R14: 00007f31e8bb6090 R15: 00007ffc85aff098 [ 663.916401][T16213] [ 663.932093][T16214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.955659][T16214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.043149][ T1007] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 664.220175][ T1007] usb 6-1: Using ep0 maxpacket: 8 [ 664.222557][ T1007] usb 6-1: config 1 has an invalid interface number: 216 but max is 1 [ 664.222581][ T1007] usb 6-1: config 1 has an invalid interface number: 186 but max is 1 [ 664.222601][ T1007] usb 6-1: config 1 has an invalid interface number: 15 but max is 1 [ 664.222614][ T1007] usb 6-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 664.222627][ T1007] usb 6-1: config 1 has no interface number 0 [ 664.222638][ T1007] usb 6-1: config 1 has no interface number 1 [ 664.222648][ T1007] usb 6-1: config 1 has no interface number 2 [ 664.222701][ T1007] usb 6-1: config 1 interface 216 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 664.222715][ T1007] usb 6-1: config 1 interface 216 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 664.222737][ T1007] usb 6-1: config 1 interface 186 altsetting 64 has a duplicate endpoint with address 0x2, skipping [ 664.222752][ T1007] usb 6-1: config 1 interface 186 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 664.222782][ T1007] usb 6-1: config 1 interface 186 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 664.222797][ T1007] usb 6-1: config 1 interface 186 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 664.222812][ T1007] usb 6-1: config 1 interface 186 altsetting 64 bulk endpoint 0xD has invalid maxpacket 8 [ 664.222828][ T1007] usb 6-1: config 1 interface 186 altsetting 64 has 7 endpoint descriptors, different from the interface descriptor's value: 9 [ 664.222846][ T1007] usb 6-1: too many endpoints for config 1 interface 15 altsetting 29: 253, using maximum allowed: 30 [ 664.222870][ T1007] usb 6-1: config 1 interface 15 altsetting 29 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 664.222888][ T1007] usb 6-1: config 1 interface 15 altsetting 29 has 2 endpoint descriptors, different from the interface descriptor's value: 253 [ 664.222907][ T1007] usb 6-1: config 1 interface 216 has no altsetting 0 [ 664.222919][ T1007] usb 6-1: config 1 interface 186 has no altsetting 0 [ 664.222931][ T1007] usb 6-1: config 1 interface 15 has no altsetting 0 [ 664.226866][ T1007] usb 6-1: New USB device found, idVendor=03f0, idProduct=1efa, bcdDevice=d9.f7 [ 664.226898][ T1007] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.226925][ T1007] usb 6-1: Product: ࿔矜긄날ᢱ䐷ᴰ꾍勰ꑦ緇Ｓ弼搃꘴뺴깆ꅇН矯⯰Ყ념힅䱎᪋ଫ蔛瀑✍ㆡ啃㾓㽧吽쇊푗钸ᩅ䠫蝑터뿟花㌭ [ 664.226943][ T1007] usb 6-1: Manufacturer: ⠊ [ 664.226954][ T1007] usb 6-1: SerialNumber: syz [ 664.859308][ T1007] rndis_host 6-1:1.186: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 664.866852][T16229] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3578'. [ 664.869665][ T5726] usb 1-1: new full-speed USB device number 97 using dummy_hcd [ 664.924007][ T1007] usb 6-1: USB disconnect, device number 55 [ 665.032065][ T5726] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 665.032102][ T5726] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 665.032143][ T5726] usb 1-1: New USB device found, idVendor=056a, idProduct=5012, bcdDevice= 0.00 [ 665.032168][ T5726] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.081998][ T5726] usb 1-1: config 0 descriptor?? [ 665.300815][T16240] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3583'. [ 665.499420][ T5726] hid (null): invalid report_size 1200686787 [ 665.499444][ T5726] hid (null): unknown global tag 0xe [ 665.501876][ T5726] hid (null): unknown global tag 0xc [ 665.545379][ T5726] hid_parser_main: 241 callbacks suppressed [ 665.545403][ T5726] wacom 0003:056A:5012.002A: unknown main item tag 0x0 [ 665.545439][ T5726] wacom 0003:056A:5012.002A: unknown main item tag 0x0 [ 665.545467][ T5726] wacom 0003:056A:5012.002A: unknown main item tag 0x0 [ 665.545494][ T5726] wacom 0003:056A:5012.002A: unknown main item tag 0x0 [ 665.545522][ T5726] wacom 0003:056A:5012.002A: unknown main item tag 0x0 [ 665.545549][ T5726] wacom 0003:056A:5012.002A: unknown main item tag 0x0 [ 665.545577][ T5726] wacom 0003:056A:5012.002A: unknown main item tag 0x0 [ 665.545605][ T5726] wacom 0003:056A:5012.002A: unknown main item tag 0x0 [ 665.545632][ T5726] wacom 0003:056A:5012.002A: unknown main item tag 0x0 [ 665.545659][ T5726] wacom 0003:056A:5012.002A: unknown main item tag 0x0 [ 665.548903][ T5726] wacom 0003:056A:5012.002A: invalid report_size 1200686787 [ 665.548923][ T5726] wacom 0003:056A:5012.002A: item 0 4 1 7 parsing failed [ 665.557594][ T5726] wacom 0003:056A:5012.002A: parse failed [ 665.557700][ T5726] wacom 0003:056A:5012.002A: probe with driver wacom failed with error -22 [ 665.700684][ T1007] usb 1-1: USB disconnect, device number 97 [ 665.881791][T16253] FAULT_INJECTION: forcing a failure. [ 665.881791][T16253] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 665.881821][T16253] CPU: 1 UID: 0 PID: 16253 Comm: syz.3.3588 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 665.881843][T16253] Tainted: [L]=SOFTLOCKUP [ 665.881849][T16253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 665.881860][T16253] Call Trace: [ 665.881866][T16253] [ 665.881873][T16253] dump_stack_lvl+0xe8/0x150 [ 665.881897][T16253] should_fail_ex+0x46b/0x600 [ 665.881919][T16253] prepare_alloc_pages+0x22a/0x6b0 [ 665.881943][T16253] __alloc_frozen_pages_noprof+0x12f/0x380 [ 665.881966][T16253] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 665.881998][T16253] __alloc_pages_noprof+0x10/0x100 [ 665.882017][T16253] alloc_pages_bulk_noprof+0x67e/0x890 [ 665.882042][T16253] ? trace_kmalloc+0x2a/0xf0 [ 665.882061][T16253] ? __kmalloc_noprof+0x408/0x7b0 [ 665.882077][T16253] ? copy_splice_read+0x16f/0xab0 [ 665.882107][T16253] copy_splice_read+0x19f/0xab0 [ 665.882303][T16253] ? __pfx_copy_splice_read+0x10/0x10 [ 665.882374][T16253] ? rcu_is_watching+0x15/0xb0 [ 665.882407][T16253] ? look_up_lock_class+0x57/0x110 [ 665.882433][T16253] ? register_lock_class+0x31/0x2e0 [ 665.882460][T16253] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 665.882490][T16253] ? alloc_pipe_info+0x373/0x4d0 [ 665.882520][T16253] ? __pfx_shmem_file_splice_read+0x10/0x10 [ 665.882542][T16253] splice_direct_to_actor+0x4ab/0xc80 [ 665.882576][T16253] ? __pfx_direct_splice_actor+0x10/0x10 [ 665.882607][T16253] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 665.882645][T16253] do_splice_direct+0x19b/0x2a0 [ 665.882672][T16253] ? __pfx_do_splice_direct+0x10/0x10 [ 665.882703][T16253] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 665.882724][T16253] ? rw_verify_area+0x25b/0x4e0 [ 665.882765][T16253] do_sendfile+0x547/0x7e0 [ 665.882796][T16253] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 665.882827][T16253] ? __pfx_do_sendfile+0x10/0x10 [ 665.882874][T16253] __se_sys_sendfile64+0x144/0x1a0 [ 665.882899][T16253] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 665.882925][T16253] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.882943][T16253] do_syscall_64+0x15f/0x560 [ 665.882960][T16253] ? trace_irq_disable+0x3b/0x140 [ 665.882977][T16253] ? clear_bhb_loop+0x40/0x90 [ 665.882996][T16253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.883013][T16253] RIP: 0033:0x7f0d1647ce59 [ 665.883028][T16253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 665.883042][T16253] RSP: 002b:00007f0d146ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 665.883059][T16253] RAX: ffffffffffffffda RBX: 00007f0d166f5fa0 RCX: 00007f0d1647ce59 [ 665.883072][T16253] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 [ 665.883081][T16253] RBP: 00007f0d146ce090 R08: 0000000000000000 R09: 0000000000000000 [ 665.883091][T16253] R10: 00004000000053d2 R11: 0000000000000246 R12: 0000000000000001 [ 665.883102][T16253] R13: 00007f0d166f6038 R14: 00007f0d166f5fa0 R15: 00007ffe01919e88 [ 665.883133][T16253] [ 666.515016][T16264] syzkaller1: entered promiscuous mode [ 666.515042][T16264] syzkaller1: entered allmulticast mode [ 666.588428][T16270] FAULT_INJECTION: forcing a failure. [ 666.588428][T16270] name failslab, interval 1, probability 0, space 0, times 0 [ 666.588455][T16270] CPU: 0 UID: 0 PID: 16270 Comm: syz.5.3595 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 666.588476][T16270] Tainted: [L]=SOFTLOCKUP [ 666.588481][T16270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 666.588491][T16270] Call Trace: [ 666.588496][T16270] [ 666.588503][T16270] dump_stack_lvl+0xe8/0x150 [ 666.588524][T16270] should_fail_ex+0x46b/0x600 [ 666.588547][T16270] should_failslab+0xa8/0x100 [ 666.588565][T16270] kmem_cache_alloc_noprof+0x87/0x680 [ 666.588580][T16270] ? __inet_hash_connect+0x1657/0x2630 [ 666.588622][T16270] __inet_hash_connect+0x1657/0x2630 [ 666.588650][T16270] ? __inet_hash_connect+0x60d/0x2630 [ 666.588676][T16270] ? __pfx___inet_hash_connect+0x10/0x10 [ 666.588694][T16270] ? lockdep_hardirqs_on+0x7a/0x110 [ 666.588714][T16270] ? inet_hash_connect+0xf1/0x380 [ 666.588737][T16270] tcp_v4_connect+0xd5f/0x19b0 [ 666.588769][T16270] ? __pfx_tcp_v4_connect+0x10/0x10 [ 666.588792][T16270] __inet_stream_connect+0x25a/0xdd0 [ 666.588824][T16270] ? __pfx___inet_stream_connect+0x10/0x10 [ 666.588846][T16270] ? __local_bh_enable+0x1e1/0x2f0 [ 666.588873][T16270] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 666.588895][T16270] ? lockdep_hardirqs_on+0x7a/0x110 [ 666.588914][T16270] inet_stream_connect+0x66/0xa0 [ 666.588939][T16270] __sys_connect+0x315/0x450 [ 666.588965][T16270] ? __pfx___sys_connect+0x10/0x10 [ 666.588998][T16270] ? __pfx_ksys_write+0x10/0x10 [ 666.589018][T16270] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.589034][T16270] __x64_sys_connect+0x7a/0x90 [ 666.589051][T16270] do_syscall_64+0x15f/0x560 [ 666.589068][T16270] ? trace_irq_disable+0x3b/0x140 [ 666.589085][T16270] ? clear_bhb_loop+0x40/0x90 [ 666.589105][T16270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.589121][T16270] RIP: 0033:0x7f0c1936ce59 [ 666.589135][T16270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 666.589149][T16270] RSP: 002b:00007f0c175c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 666.589165][T16270] RAX: ffffffffffffffda RBX: 00007f0c195e5fa0 RCX: 00007f0c1936ce59 [ 666.589177][T16270] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000003 [ 666.589187][T16270] RBP: 00007f0c175c6090 R08: 0000000000000000 R09: 0000000000000000 [ 666.589197][T16270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 666.589206][T16270] R13: 00007f0c195e6038 R14: 00007f0c195e5fa0 R15: 00007fffd491fe68 [ 666.589231][T16270] [ 666.889169][T16274] comedi comedi0: s526: I/O base address or length out of range [ 667.059452][T16281] overlayfs: failed to clone lowerpath [ 667.352600][ T38] kauditd_printk_skb: 21 callbacks suppressed [ 667.352618][ T38] audit: type=1326 audit(667.954:182): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=16291 comm="syz.3.3606" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0d1647ce59 code=0x0 [ 667.390344][T16294] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3605'. [ 668.101634][T16315] netlink: 'syz.4.3614': attribute type 12 has an invalid length. [ 670.416503][T16333] netlink: 'syz.0.3621': attribute type 10 has an invalid length. [ 670.419682][T16333] macvlan1: entered promiscuous mode [ 670.421522][T16333] macvlan1: entered allmulticast mode [ 670.421537][T16333] veth1_vlan: entered allmulticast mode [ 670.421712][T16333] team0: Device macvlan1 is up. Set it down before adding it as a team port [ 671.239496][T16359] FAULT_INJECTION: forcing a failure. [ 671.239496][T16359] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 671.239710][T16359] CPU: 1 UID: 0 PID: 16359 Comm: syz.3.3624 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 671.239743][T16359] Tainted: [L]=SOFTLOCKUP [ 671.239753][T16359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 671.239765][T16359] Call Trace: [ 671.239774][T16359] [ 671.239785][T16359] dump_stack_lvl+0xe8/0x150 [ 671.239817][T16359] should_fail_ex+0x46b/0x600 [ 671.239848][T16359] _copy_to_user+0x31/0xb0 [ 671.239877][T16359] simple_read_from_buffer+0xe1/0x170 [ 671.239917][T16359] proc_fail_nth_read+0x1be/0x230 [ 671.239949][T16359] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 671.239980][T16359] ? rw_verify_area+0x2ac/0x4e0 [ 671.239998][T16359] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 671.240028][T16359] vfs_read+0x212/0xa80 [ 671.240052][T16359] ? __pfx_vfs_read+0x10/0x10 [ 671.240073][T16359] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 671.240093][T16359] ? lockdep_hardirqs_on+0x7a/0x110 [ 671.240112][T16359] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 671.240131][T16359] ? mutex_lock_nested+0x152/0x1d0 [ 671.240167][T16359] ? fdget_pos+0x252/0x320 [ 671.240210][T16359] ksys_read+0x156/0x270 [ 671.240228][T16359] ? __pfx_ksys_read+0x10/0x10 [ 671.240251][T16359] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.240269][T16359] do_syscall_64+0x15f/0x560 [ 671.240286][T16359] ? trace_irq_disable+0x3b/0x140 [ 671.240306][T16359] ? clear_bhb_loop+0x40/0x90 [ 671.240326][T16359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.240343][T16359] RIP: 0033:0x7f0d1643d68e [ 671.240358][T16359] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 671.240376][T16359] RSP: 002b:00007f0d146cdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 671.240395][T16359] RAX: ffffffffffffffda RBX: 00007f0d146ce6c0 RCX: 00007f0d1643d68e [ 671.240408][T16359] RDX: 000000000000000f RSI: 00007f0d146ce0a0 RDI: 0000000000000005 [ 671.240418][T16359] RBP: 00007f0d146ce090 R08: 0000000000000000 R09: 0000000000000000 [ 671.240447][T16359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 671.240457][T16359] R13: 00007f0d166f6038 R14: 00007f0d166f5fa0 R15: 00007ffe01919e88 [ 671.240484][T16359] [ 672.000577][ T5720] usb 6-1: new full-speed USB device number 56 using dummy_hcd [ 672.182706][ T5720] usb 6-1: config 150 has an invalid interface number: 204 but max is 2 [ 672.182736][ T5720] usb 6-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 672.182759][ T5720] usb 6-1: config 150 has no interface number 0 [ 672.182813][ T5720] usb 6-1: config 150 interface 204 has no altsetting 0 [ 672.215991][ T5720] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 672.216084][ T5720] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.216142][ T5720] usb 6-1: Product: syz [ 672.216188][ T5720] usb 6-1: Manufacturer: syz [ 672.216233][ T5720] usb 6-1: SerialNumber: syz [ 672.321754][T16383] openvswitch: netlink: Flow key attribute not present in set flow. [ 672.326562][T16384] openvswitch: netlink: Flow key attribute not present in set flow. [ 672.501638][T16391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.502486][T16391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.657232][ T5720] xr_serial 6-1:150.204: skipping garbage [ 672.657286][ T5720] xr_serial 6-1:150.204: xr_serial converter detected [ 672.665892][ T5720] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 672.666318][ T5720] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 672.701637][ T5720] usb 6-1: USB disconnect, device number 56 [ 672.707111][ T5720] xr_serial 6-1:150.204: device disconnected [ 673.214057][T16396] syzkaller1: entered promiscuous mode [ 673.214073][T16396] syzkaller1: entered allmulticast mode [ 673.370204][ T5625] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 673.519975][ T5625] usb 1-1: Using ep0 maxpacket: 8 [ 673.527446][ T5625] usb 1-1: config 1 has an invalid interface number: 216 but max is 0 [ 673.527480][ T5625] usb 1-1: config 1 has no interface number 0 [ 673.527527][ T5625] usb 1-1: config 1 interface 216 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 673.527553][ T5625] usb 1-1: config 1 interface 216 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 673.527568][ T5625] usb 1-1: config 1 interface 216 has no altsetting 0 [ 673.545972][ T5625] usb 1-1: New USB device found, idVendor=03f0, idProduct=1efa, bcdDevice=d9.f7 [ 673.546001][ T5625] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.546023][ T5625] usb 1-1: Product: ࿔矜긄날ᢱ䐷ᴰ꾍勰ꑦ緇Ｓ弼搃꘴뺴깆ꅇН矯⯰Ყ념힅䱎᪋ଫ蔛瀑✍ㆡ啃㾓㽧吽쇊푗钸ᩅ䠫蝑터뿟花㌭ [ 673.546047][ T5625] usb 1-1: Manufacturer: ⠊ [ 673.546063][ T5625] usb 1-1: SerialNumber: syz [ 673.679914][ T5726] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 673.839773][ T5726] usb 6-1: Using ep0 maxpacket: 32 [ 673.851771][ T5726] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 673.851827][ T5726] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 673.851873][ T5726] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 673.851898][ T5726] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.911678][ T5726] usb 6-1: config 0 descriptor?? [ 673.931145][ T5625] usb 1-1: USB disconnect, device number 98 [ 673.931226][ T5726] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 675.243153][T16436] syzkaller1: entered promiscuous mode [ 675.243172][T16436] syzkaller1: entered allmulticast mode [ 675.525375][T16444] support for the xor transformation has been removed. [ 675.983559][T16444] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 676.752275][ T5726] usb 6-1: USB disconnect, device number 57 [ 677.092529][ T5346] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 677.237859][T16493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.238438][T16493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 677.240761][ T5346] usb 1-1: Using ep0 maxpacket: 16 [ 677.253768][ T5346] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 677.253845][ T5346] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 677.253874][ T5346] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 677.253898][ T5346] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 677.253954][ T5346] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 677.261744][ T5346] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 677.261771][ T5346] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 677.261793][ T5346] usb 1-1: Manufacturer: syz [ 677.332255][ T5346] usb 1-1: config 0 descriptor?? [ 677.436845][T16498] FAULT_INJECTION: forcing a failure. [ 677.436845][T16498] name failslab, interval 1, probability 0, space 0, times 0 [ 677.436896][T16498] CPU: 1 UID: 0 PID: 16498 Comm: syz.5.3684 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 677.436927][T16498] Tainted: [L]=SOFTLOCKUP [ 677.436936][T16498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 677.436949][T16498] Call Trace: [ 677.436959][T16498] [ 677.436969][T16498] dump_stack_lvl+0xe8/0x150 [ 677.437001][T16498] should_fail_ex+0x46b/0x600 [ 677.437030][T16498] should_failslab+0xa8/0x100 [ 677.437057][T16498] kmem_cache_alloc_noprof+0x87/0x680 [ 677.437080][T16498] ? alloc_empty_file+0x5b/0x1d0 [ 677.437125][T16498] alloc_empty_file+0x5b/0x1d0 [ 677.437158][T16498] path_openat+0x11b/0x3960 [ 677.437190][T16498] ? try_to_take_rt_mutex+0x840/0xb00 [ 677.437224][T16498] ? arch_stack_walk+0xfb/0x150 [ 677.437267][T16498] ? __lock_acquire+0x6b5/0x2d10 [ 677.437297][T16498] ? __pfx_path_openat+0x10/0x10 [ 677.437324][T16498] ? kasan_save_track+0x4f/0x80 [ 677.437356][T16498] ? kasan_save_track+0x3e/0x80 [ 677.437387][T16498] ? __kasan_slab_alloc+0x6c/0x80 [ 677.437418][T16498] ? do_raw_spin_lock+0x12b/0x2f0 [ 677.437448][T16498] do_file_open+0x23e/0x4a0 [ 677.437470][T16498] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 677.437496][T16498] ? __pfx_do_file_open+0x10/0x10 [ 677.437516][T16498] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 677.437570][T16498] ? alloc_fd+0x679/0x6f0 [ 677.437611][T16498] do_sys_openat2+0x115/0x200 [ 677.437644][T16498] ? __pfx_do_sys_openat2+0x10/0x10 [ 677.437676][T16498] ? ksys_write+0x248/0x270 [ 677.437703][T16498] ? __pfx_ksys_write+0x10/0x10 [ 677.437730][T16498] __x64_sys_openat+0x138/0x170 [ 677.437766][T16498] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.437788][T16498] do_syscall_64+0x15f/0x560 [ 677.437811][T16498] ? trace_irq_disable+0x3b/0x140 [ 677.437834][T16498] ? clear_bhb_loop+0x40/0x90 [ 677.437860][T16498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.437883][T16498] RIP: 0033:0x7f0c1932d68e [ 677.437903][T16498] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 677.437924][T16498] RSP: 002b:00007f0c175c5ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 677.437948][T16498] RAX: ffffffffffffffda RBX: 00007f0c175c66c0 RCX: 00007f0c1932d68e [ 677.437965][T16498] RDX: 0000000000000002 RSI: 00007f0c175c5f90 RDI: ffffffffffffff9c [ 677.437980][T16498] RBP: 00007f0c175c6090 R08: 0000000000000000 R09: 0000000000000000 [ 677.437996][T16498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 677.438009][T16498] R13: 00007f0c195e6038 R14: 00007f0c195e5fa0 R15: 00007fffd491fe68 [ 677.438044][T16498] [ 677.799698][ T5346] rc_core: IR keymap rc-hauppauge not found [ 677.799718][ T5346] Registered IR keymap rc-empty [ 677.799893][ T5346] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 677.819960][ T5346] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 677.862589][ T5346] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 677.894974][ T5346] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input37 [ 677.911215][ T5346] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 677.935302][ T5346] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 677.952811][ T5346] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 677.969822][ T5346] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 677.989738][ T5346] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 678.011778][ T5346] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 678.029702][ T5346] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 678.049737][ T5346] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 678.075228][ T5346] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 678.089735][ T5346] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 678.122744][ T5346] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 678.127052][ T5346] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 678.214337][ T5625] usb 1-1: USB disconnect, device number 99 [ 678.934304][T16540] dvmrp2: entered allmulticast mode [ 679.337658][T16551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.342349][T16551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.567194][T16551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.569829][T16551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.141192][T16563] sctp: [Deprecated]: syz.0.3709 (pid 16563) Use of struct sctp_assoc_value in delayed_ack socket option. [ 680.141192][T16563] Use struct sctp_sack_info instead [ 680.190553][ T5713] usb 6-1: new full-speed USB device number 58 using dummy_hcd [ 680.341616][ T5713] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 680.341650][ T5713] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 680.341666][ T5713] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 680.341712][ T5713] usb 6-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 680.341729][ T5713] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.348464][ T5713] usb 6-1: config 0 descriptor?? [ 680.549844][ T5779] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 680.712030][ T5779] usb 1-1: Using ep0 maxpacket: 8 [ 680.715760][ T5779] usb 1-1: config 1 has an invalid interface number: 216 but max is 0 [ 680.715786][ T5779] usb 1-1: config 1 has no interface number 0 [ 680.716419][ T5779] usb 1-1: config 1 interface 216 has no altsetting 0 [ 680.750004][ T5779] usb 1-1: New USB device found, idVendor=03f0, idProduct=1efa, bcdDevice=d9.f7 [ 680.750036][ T5779] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.750058][ T5779] usb 1-1: Product: ࿔矜긄날ᢱ䐷ᴰ꾍勰ꑦ緇Ｓ弼搃꘴뺴깆ꅇН矯⯰Ყ념힅䱎᪋ଫ蔛瀑✍ㆡ啃㾓㽧吽쇊푗钸ᩅ䠫蝑터뿟花㌭ [ 680.750083][ T5779] usb 1-1: Manufacturer: ⠊ [ 680.750100][ T5779] usb 1-1: SerialNumber: syz [ 680.837458][ T5713] hid_parser_main: 240 callbacks suppressed [ 680.837482][ T5713] hid-multitouch 0003:0457:07DA.002B: unknown main item tag 0x0 [ 680.838108][ T5713] hid-multitouch 0003:0457:07DA.002B: unknown main item tag 0x0 [ 680.838141][ T5713] hid-multitouch 0003:0457:07DA.002B: unknown main item tag 0x0 [ 680.838170][ T5713] hid-multitouch 0003:0457:07DA.002B: unknown main item tag 0x0 [ 680.838197][ T5713] hid-multitouch 0003:0457:07DA.002B: unknown main item tag 0x0 [ 680.838224][ T5713] hid-multitouch 0003:0457:07DA.002B: unknown main item tag 0x0 [ 680.838252][ T5713] hid-multitouch 0003:0457:07DA.002B: unknown main item tag 0x0 [ 680.838280][ T5713] hid-multitouch 0003:0457:07DA.002B: unknown main item tag 0x0 [ 680.838307][ T5713] hid-multitouch 0003:0457:07DA.002B: unknown main item tag 0x0 [ 680.838335][ T5713] hid-multitouch 0003:0457:07DA.002B: unknown main item tag 0x0 [ 680.902332][ T5713] hid-multitouch 0003:0457:07DA.002B: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.5-1/input0 [ 681.008837][ T5779] usb 1-1: USB disconnect, device number 100 [ 681.033654][ T5726] usb 6-1: USB disconnect, device number 58 [ 681.122479][T16583] fido_id[16583]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 681.769912][T16599] syzkaller1: entered promiscuous mode [ 681.769941][T16599] syzkaller1: entered allmulticast mode [ 682.674809][T16628] fuse: fd is not a fuse device [ 682.759682][ T5713] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 682.916786][ T5713] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 682.916818][ T5713] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.916839][ T5713] usb 6-1: Product: syz [ 682.916856][ T5713] usb 6-1: Manufacturer: syz [ 682.916900][ T5713] usb 6-1: SerialNumber: syz [ 682.937472][ T5713] usb 6-1: config 0 descriptor?? [ 682.948557][ T5713] hub 6-1:0.0: bad descriptor, ignoring hub [ 682.948593][ T5713] hub 6-1:0.0: probe with driver hub failed with error -5 [ 683.153320][ T5713] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 683.195881][ T5713] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 683.197847][ T5713] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 683.197884][ T5713] usb 6-1: media controller created [ 683.322751][ T5713] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 683.370718][ T5779] ================================================================== [ 683.370734][ T5779] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x40/0x60 [ 683.370762][ T5779] Read of size 1 at addr ffff888034fbbb30 by task kworker/1:6/5779 [ 683.370779][ T5779] [ 683.370795][ T5779] CPU: 1 UID: 0 PID: 5779 Comm: kworker/1:6 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 683.370823][ T5779] Tainted: [L]=SOFTLOCKUP [ 683.370832][ T5779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 683.370846][ T5779] Workqueue: events l2cap_chan_timeout [ 683.370878][ T5779] Call Trace: [ 683.370887][ T5779] [ 683.370897][ T5779] dump_stack_lvl+0xe8/0x150 [ 683.370923][ T5779] print_address_description+0x55/0x1e0 [ 683.370951][ T5779] ? _raw_spin_lock_irqsave+0x40/0x60 [ 683.370970][ T5779] print_report+0x58/0x70 [ 683.370996][ T5779] kasan_report+0x117/0x150 [ 683.371020][ T5779] ? _raw_spin_lock_irqsave+0x40/0x60 [ 683.371043][ T5779] ? rt_mutex_slowunlock+0xb8/0x300 [ 683.371070][ T5779] __kasan_check_byte+0x2a/0x40 [ 683.371091][ T5779] lock_acquire+0x84/0x350 [ 683.371116][ T5779] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 683.371137][ T5779] ? rcu_is_watching+0x15/0xb0 [ 683.371165][ T5779] _raw_spin_lock_irqsave+0x40/0x60 [ 683.371184][ T5779] ? rt_mutex_slowunlock+0xb8/0x300 [ 683.371211][ T5779] rt_mutex_slowunlock+0xb8/0x300 [ 683.371239][ T5779] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 683.371282][ T5779] ? process_one_work+0x8be/0x1630 [ 683.371307][ T5779] process_one_work+0x98b/0x1630 [ 683.371342][ T5779] ? __pfx_process_one_work+0x10/0x10 [ 683.371369][ T5779] ? do_raw_spin_lock+0x12b/0x2f0 [ 683.371394][ T5779] worker_thread+0xb49/0x1140 [ 683.371427][ T5779] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 683.371453][ T5779] kthread+0x389/0x470 [ 683.371472][ T5779] ? __pfx_worker_thread+0x10/0x10 [ 683.371498][ T5779] ? __pfx_kthread+0x10/0x10 [ 683.371517][ T5779] ret_from_fork+0x514/0xb70 [ 683.371540][ T5779] ? __pfx_ret_from_fork+0x10/0x10 [ 683.371570][ T5779] ? __switch_to+0xc79/0x1410 [ 683.371589][ T5779] ? __pfx_kthread+0x10/0x10 [ 683.371609][ T5779] ret_from_fork_asm+0x1a/0x30 [ 683.371640][ T5779] [ 683.371647][ T5779] [ 683.371652][ T5779] Allocated by task 15781: [ 683.371662][ T5779] kasan_save_track+0x3e/0x80 [ 683.371687][ T5779] __kasan_kmalloc+0x93/0xb0 [ 683.371703][ T5779] __kmalloc_cache_noprof+0x3a6/0x690 [ 683.371721][ T5779] l2cap_conn_add+0xaa/0x970 [ 683.371738][ T5779] l2cap_chan_connect+0x6a8/0xed0 [ 683.371755][ T5779] l2cap_sock_connect+0x5ea/0x7f0 [ 683.371778][ T5779] __sys_connect+0x315/0x450 [ 683.371805][ T5779] __x64_sys_connect+0x7a/0x90 [ 683.371819][ T5779] do_syscall_64+0x15f/0x560 [ 683.371837][ T5779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.371855][ T5779] [ 683.371860][ T5779] Freed by task 16549: [ 683.371869][ T5779] kasan_save_track+0x3e/0x80 [ 683.371894][ T5779] kasan_save_free_info+0x46/0x50 [ 683.371917][ T5779] __kasan_slab_free+0x5c/0x80 [ 683.371933][ T5779] kfree+0x1c5/0x6c0 [ 683.371958][ T5779] hci_conn_hash_flush+0x10d/0x260 [ 683.371982][ T5779] hci_dev_close_sync+0x821/0x10e0 [ 683.372002][ T5779] hci_dev_close+0x108/0x260 [ 683.372020][ T5779] sock_do_ioctl+0x101/0x320 [ 683.372042][ T5779] sock_ioctl+0x5c9/0x7f0 [ 683.372063][ T5779] __se_sys_ioctl+0xff/0x170 [ 683.372081][ T5779] do_syscall_64+0x15f/0x560 [ 683.372099][ T5779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.372116][ T5779] [ 683.372121][ T5779] The buggy address belongs to the object at ffff888034fbb800 [ 683.372121][ T5779] which belongs to the cache kmalloc-1k of size 1024 [ 683.372137][ T5779] The buggy address is located 816 bytes inside of [ 683.372137][ T5779] freed 1024-byte region [ffff888034fbb800, ffff888034fbbc00) [ 683.372156][ T5779] [ 683.372161][ T5779] The buggy address belongs to the physical page: [ 683.372177][ T5779] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34fb8 [ 683.372194][ T5779] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 683.372209][ T5779] flags: 0x80000000000040(head|node=0|zone=1) [ 683.372224][ T5779] page_type: f5(slab) [ 683.372241][ T5779] raw: 0080000000000040 ffff88813fea6dc0 dead000000000100 dead000000000122 [ 683.372257][ T5779] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 683.372275][ T5779] head: 0080000000000040 ffff88813fea6dc0 dead000000000100 dead000000000122 [ 683.372291][ T5779] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 683.372307][ T5779] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 683.372323][ T5779] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 683.372333][ T5779] page dumped because: kasan: bad access detected [ 683.372366][ T5779] page_owner tracks the page as allocated [ 683.372374][ T5779] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5569, tgid 5569 (dhcpcd-run-hook), ts 72853083420, free_ts 72763635259 [ 683.372418][ T5779] post_alloc_hook+0x1f9/0x250 [ 683.372444][ T5779] get_page_from_freelist+0x265c/0x26e0 [ 683.372483][ T5779] __alloc_frozen_pages_noprof+0x18d/0x380 [ 683.372506][ T5779] allocate_slab+0x74/0x5e0 [ 683.372530][ T5779] refill_objects+0x33c/0x3d0 [ 683.372549][ T5779] __pcs_replace_empty_main+0x373/0x720 [ 683.372601][ T5779] __kmalloc_noprof+0x530/0x7b0 [ 683.372615][ T5779] load_elf_binary+0x318/0x29b0 [ 683.372634][ T5779] bprm_execve+0x94a/0x1510 [ 683.372647][ T5779] do_execveat_common+0x50d/0x690 [ 683.372662][ T5779] __x64_sys_execve+0x97/0xc0 [ 683.372675][ T5779] do_syscall_64+0x15f/0x560 [ 683.372690][ T5779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.372705][ T5779] page last free pid 5564 tgid 5564 stack trace: [ 683.372715][ T5779] __free_frozen_pages+0x10af/0x1190 [ 683.372730][ T5779] __slab_free+0x252/0x2a0 [ 683.372744][ T5779] qlist_free_all+0x99/0x100 [ 683.372767][ T5779] kasan_quarantine_reduce+0x148/0x160 [ 683.372790][ T5779] __kasan_slab_alloc+0x22/0x80 [ 683.372805][ T5779] kmem_cache_alloc_noprof+0x33b/0x680 [ 683.372820][ T5779] vm_area_alloc+0x24/0x140 [ 683.372838][ T5779] mmap_region+0x1203/0x2280 [ 683.372860][ T5779] do_mmap+0xc2f/0x10c0 [ 683.372884][ T5779] vm_mmap_pgoff+0x2cc/0x4f0 [ 683.372909][ T5779] ksys_mmap_pgoff+0x4e8/0x720 [ 683.372934][ T5779] do_syscall_64+0x15f/0x560 [ 683.372953][ T5779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.372968][ T5779] [ 683.372973][ T5779] Memory state around the buggy address: [ 683.372981][ T5779] ffff888034fbba00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 683.372993][ T5779] ffff888034fbba80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 683.373004][ T5779] >ffff888034fbbb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 683.373012][ T5779] ^ [ 683.373021][ T5779] ffff888034fbbb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 683.373032][ T5779] ffff888034fbbc00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 683.373040][ T5779] ================================================================== [ 683.373064][ T5779] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 683.373079][ T5779] CPU: 1 UID: 0 PID: 5779 Comm: kworker/1:6 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 683.373101][ T5779] Tainted: [L]=SOFTLOCKUP [ 683.373107][ T5779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 683.373118][ T5779] Workqueue: events l2cap_chan_timeout [ 683.373144][ T5779] Call Trace: [ 683.373151][ T5779] [ 683.373158][ T5779] vpanic+0x56c/0xa60 [ 683.373184][ T5779] ? __pfx_vpanic+0x10/0x10 [ 683.373210][ T5779] panic+0xc5/0xd0 [ 683.373232][ T5779] ? __pfx_panic+0x10/0x10 [ 683.373256][ T5779] ? _raw_spin_lock_irqsave+0x40/0x60 [ 683.373273][ T5779] ? rcu_is_watching+0x15/0xb0 [ 683.373295][ T5779] ? _raw_spin_lock_irqsave+0x40/0x60 [ 683.373311][ T5779] ? _raw_spin_lock_irqsave+0x40/0x60 [ 683.373327][ T5779] check_panic_on_warn+0x89/0xb0 [ 683.373346][ T5779] ? _raw_spin_lock_irqsave+0x40/0x60 [ 683.373361][ T5779] end_report+0x73/0x170 [ 683.373378][ T5779] ? _raw_spin_lock_irqsave+0x40/0x60 [ 683.373393][ T5779] kasan_report+0x128/0x150 [ 683.373410][ T5779] ? _raw_spin_lock_irqsave+0x40/0x60 [ 683.373428][ T5779] ? rt_mutex_slowunlock+0xb8/0x300 [ 683.373449][ T5779] __kasan_check_byte+0x2a/0x40 [ 683.373466][ T5779] lock_acquire+0x84/0x350 [ 683.373485][ T5779] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 683.373502][ T5779] ? rcu_is_watching+0x15/0xb0 [ 683.373525][ T5779] _raw_spin_lock_irqsave+0x40/0x60 [ 683.373540][ T5779] ? rt_mutex_slowunlock+0xb8/0x300 [ 683.373572][ T5779] rt_mutex_slowunlock+0xb8/0x300 [ 683.373595][ T5779] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 683.373622][ T5779] ? process_one_work+0x8be/0x1630 [ 683.373643][ T5779] process_one_work+0x98b/0x1630 [ 683.373674][ T5779] ? __pfx_process_one_work+0x10/0x10 [ 683.373701][ T5779] ? do_raw_spin_lock+0x12b/0x2f0 [ 683.373726][ T5779] worker_thread+0xb49/0x1140 [ 683.373760][ T5779] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 683.373787][ T5779] kthread+0x389/0x470 [ 683.373808][ T5779] ? __pfx_worker_thread+0x10/0x10 [ 683.373835][ T5779] ? __pfx_kthread+0x10/0x10 [ 683.373852][ T5779] ret_from_fork+0x514/0xb70 [ 683.373872][ T5779] ? __pfx_ret_from_fork+0x10/0x10 [ 683.373891][ T5779] ? __switch_to+0xc79/0x1410 [ 683.373906][ T5779] ? __pfx_kthread+0x10/0x10 [ 683.373923][ T5779] ret_from_fork_asm+0x1a/0x30 [ 683.373953][ T5779] [ 683.375558][ T5779] Kernel Offset: disabled