last executing test programs: 13.192069573s ago: executing program 0 (id=2264): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303"], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4cc6, 0x2) 9.986879047s ago: executing program 0 (id=2282): socket$nl_route(0x10, 0x3, 0x0) get_mempolicy(0xffffffffffffffff, 0x0, 0x2000400000043ff, &(0x7f0000ff9000/0x2000)=nil, 0x2) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) 8.90118211s ago: executing program 0 (id=2287): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 8.674175035s ago: executing program 0 (id=2290): bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000002"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 8.202883259s ago: executing program 1 (id=2295): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xa9525000) unlink(&(0x7f0000000140)='./cgroup\x00') timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fchmod(r0, 0x49) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) 7.561061579s ago: executing program 0 (id=2300): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 4.67732383s ago: executing program 1 (id=2304): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0xffffffffffff8001, 0x3, 0x3e, 0xffffffeb, 0x7c, 0x40, 0x1, 0xe61d, 0x200c, 0x38, 0x1, 0xfffe, 0x2, 0x4}, [{0x3, 0xf97, 0xb, 0x10, 0x0, 0x3, 0xffffffffffffffff, 0xc3}]}, 0x78) close(r0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', &(0x7f00000002c0)={[0x0, &(0x7f0000000280)='\xf8+\'\x00']}, &(0x7f0000000440)={[&(0x7f0000000300)='.\x00', &(0x7f0000000340)='V]\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='.\\#\x00']}, 0x1000) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 4.44799228s ago: executing program 2 (id=2305): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000040)=0x1) write(r0, &(0x7f0000000180)="ad2a674f6fc25429df", 0x9) 4.162923912s ago: executing program 2 (id=2306): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x78}}, 0x0) 4.030419208s ago: executing program 2 (id=2307): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0100000000001400000060000000002806"], 0xfdef) 3.702805032s ago: executing program 2 (id=2309): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x4, 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$int_in(r0, 0x5452, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 3.638089712s ago: executing program 3 (id=2310): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004900010000000000000000000a000000000000000000000014000180"], 0x3c}}, 0x0) 3.434063537s ago: executing program 3 (id=2311): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) syz_emit_ethernet(0x48, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x2, 0x3, 0x3a, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote, {[@rr={0x7, 0x3, 0x6a}]}}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x4, 0x9, 0x0, 0x1ff, {[@timestamp={0x8, 0xa, 0x102, 0x20}]}}, {"f954"}}}}}}, 0x0) 3.082795671s ago: executing program 2 (id=2312): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x162682, 0x0) r1 = dup(r0) fallocate(r1, 0x3, 0x0, 0x180000000004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, 0x0, 0x0) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x100, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xffffffff, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2.414857033s ago: executing program 3 (id=2315): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x790, 0x8000000c002, 0x180, 0x400000004, 0xffffffffffffffff, 0xf1, 0x3, 0xffff, 0x45, 0x0, 0x6, 0xd67, 0x0, 0x100000, 0x4], 0x41000, 0x3d4250}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.402755485s ago: executing program 1 (id=2316): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$vicodec0(0xffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0cc5605, &(0x7f0000000300)={0xa, @pix={0x0, 0x101, 0x36314d59, 0x7, 0x3, 0x8000, 0xc, 0x6, 0x0, 0x4, 0x2, 0x2}}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x0, 0xfa11, 0xffffffff}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f00000000c0)}) r4 = syz_open_procfs(0x0, 0x0) lseek(r4, 0x2000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = epoll_create1(0x80000) r7 = fcntl$dupfd(r5, 0x406, r6) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000001c0)={0x10000014}) r8 = getpid() r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(r10, &(0x7f0000000000)={0x10}, 0x10) kcmp$KCMP_EPOLL_TFD(r8, r9, 0x7, r7, &(0x7f0000000100)={r6, r7}) 2.138878736s ago: executing program 4 (id=2318): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x7ff}, 0x8) 2.107029165s ago: executing program 4 (id=2319): connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 1.765828703s ago: executing program 4 (id=2320): write(0xffffffffffffffff, &(0x7f0000000340)="1c0000005e001f3814584707f9", 0xd) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[], 0x188}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd87e848c94a2be6e254d827012967db0758c0fa31fff90c60693957939c8ce4ed", 0xa3}, {&(0x7f0000000540)="b4e007f06d", 0x5}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0a1ca9cc4187957fdca8dfa1151a3", 0x34}, {0x0}, {0x0}, {&(0x7f0000000ac0)}], 0x6, 0x4d9e, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0xd4}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.274828324s ago: executing program 3 (id=2321): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 1.274575868s ago: executing program 2 (id=2322): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x800, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r4, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x4cbe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xb}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x4, 0x1c}]}, @nested={0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 1.034963644s ago: executing program 4 (id=2323): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$SO_COOKIE(r0, 0x1, 0x39, 0x0, &(0x7f0000001140)) 797.630249ms ago: executing program 1 (id=2324): r0 = syz_io_uring_setup(0x5fd2, &(0x7f0000000940)={0x0, 0xc5a, 0x1, 0x0, 0x35}, &(0x7f0000000080), &(0x7f0000000040)) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f0000000f40)={0x0, 0x0, 0x3}, 0x1) 742.877441ms ago: executing program 3 (id=2325): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x43, 0x7fff0000}]}) lstat(0x0, 0x0) 742.762771ms ago: executing program 4 (id=2326): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000004900010928bd700018dcdf250a"], 0x54}}, 0x0) 611.168236ms ago: executing program 3 (id=2327): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x5}, 0x8) 610.949911ms ago: executing program 4 (id=2328): r0 = openat$tun(0xffffff9c, 0x0, 0x200, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x50, 0xffffffffffffffff, 0x0) r1 = socket(0x2c, 0x3, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4ad9, &(0x7f0000000300)={0x0, 0x9731, 0x4000, 0x3, 0x145}, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_procfs(0x0, &(0x7f0000000180)='cgroup\x00') socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10e) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000240)=0xd) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000280)}], 0x1) 533.699815ms ago: executing program 1 (id=2329): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x7, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4040000) 274.902869ms ago: executing program 1 (id=2330): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x11, r2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) 0s ago: executing program 0 (id=2331): r0 = syz_io_uring_setup(0x6dce, &(0x7f00000000c0)={0x0, 0x7e11, 0x10c00, 0x5, 0x40000149}, &(0x7f0000000140), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, 0x0, 0x0) kernel console output (not intermixed with test programs): 94967295 subj=unconfined pid=12385 comm="syz.3.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb2a59c799 code=0x7ffc0000 [ 609.815973][ T30] audit: type=1326 audit(1772415776.393:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12385 comm="syz.3.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7ffb2a59c799 code=0x7ffc0000 [ 609.854841][ T30] audit: type=1326 audit(1772415776.393:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12385 comm="syz.3.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb2a59c799 code=0x7ffc0000 [ 609.948744][ T30] audit: type=1326 audit(1772415776.393:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12385 comm="syz.3.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb2a59c799 code=0x7ffc0000 [ 610.075458][ T30] audit: type=1326 audit(1772415776.393:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12385 comm="syz.3.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb2a59c799 code=0x7ffc0000 [ 610.581132][ T7802] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 610.646499][T12396] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1813'. [ 610.743029][ T7802] usb 2-1: too many endpoints for config 4 interface 0 altsetting 0: 79, using maximum allowed: 30 [ 610.754003][ T7802] usb 2-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x32, changing to 0x2 [ 610.765966][ T7802] usb 2-1: config 4 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 91 [ 610.775859][ T7802] usb 2-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 79 [ 610.789207][ T7802] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 610.798384][ T7802] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.810430][T12394] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 610.911108][ T7789] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 611.083514][ T7789] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 611.092107][ T7789] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 611.104347][ T7789] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 611.113612][ T7789] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 611.121764][ T7789] usb 3-1: Manufacturer: syz [ 611.129643][ T7789] usb 3-1: config 0 descriptor?? [ 611.231080][ T7789] rc_core: IR keymap rc-hauppauge not found [ 611.244441][ T7789] Registered IR keymap rc-empty [ 611.259338][ T7789] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 611.293037][ T7789] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input44 [ 611.375311][T12398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.418722][T12398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.481540][T12407] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 611.500751][ T7789] usb 3-1: USB disconnect, device number 69 [ 611.901421][ T7802] ath6kl: Failed to submit usb control message: -110 [ 611.918231][ T7802] ath6kl: unable to send the bmi data to the device: -110 [ 611.934007][ T7802] ath6kl: Unable to send get target info: -110 [ 611.943378][ T7802] ath6kl: Failed to init ath6kl core: -110 [ 611.950796][ T7802] ath6kl_usb 2-1:4.0: probe with driver ath6kl_usb failed with error -110 [ 612.305010][T12417] program syz.2.1817 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 612.780595][T12422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1819'. [ 612.808205][T12422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1819'. [ 613.449839][ T7789] usb 2-1: USB disconnect, device number 75 [ 614.128169][T12451] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1828'. [ 614.263442][ T7789] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 614.495995][ T7789] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 614.505027][ T7789] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 614.518092][ T7789] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 614.533738][ T7789] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 614.553455][ T7789] usb 3-1: Manufacturer: syz [ 614.567787][ T7789] usb 3-1: config 0 descriptor?? [ 614.601783][ T7792] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 614.761157][ T7792] usb 5-1: Using ep0 maxpacket: 32 [ 614.770248][ T7792] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 614.821178][ T7792] usb 5-1: config 0 has no interface number 0 [ 615.016846][T12447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.044019][ T7792] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 615.057220][ T7792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.071400][ T7792] usb 5-1: Product: syz [ 615.075724][ T7792] usb 5-1: Manufacturer: syz [ 615.081690][ T7792] usb 5-1: SerialNumber: syz [ 615.093710][ T7792] usb 5-1: config 0 descriptor?? [ 615.110223][ T7789] rc_core: IR keymap rc-hauppauge not found [ 615.119137][ T7789] Registered IR keymap rc-empty [ 615.127410][ T7792] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 615.143818][ T7789] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 615.191604][ T7789] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input45 [ 615.311688][T12447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.332489][ T7792] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 615.373538][ T7792] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 615.431621][T12463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1831'. [ 615.499416][T12463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1831'. [ 615.602094][ T7802] usb 3-1: USB disconnect, device number 70 [ 615.764944][T12467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.795055][T12467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.896610][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 615.911183][ T7789] usb 5-1: USB disconnect, device number 63 [ 615.920446][ T7789] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 615.983960][ T7789] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 616.007831][T12472] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 616.020066][ T7789] quatech2 5-1:0.51: device disconnected [ 616.272992][ T7792] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 616.331507][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 616.331526][ T30] audit: type=1326 audit(1772415783.223:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12477 comm="syz.1.1835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b84d9c799 code=0x7ffc0000 [ 616.594514][ T7792] usb 4-1: too many endpoints for config 4 interface 0 altsetting 0: 79, using maximum allowed: 30 [ 616.630911][ T7792] usb 4-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x32, changing to 0x2 [ 616.791623][ T7792] usb 4-1: config 4 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 91 [ 616.866393][ T7792] usb 4-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 79 [ 616.880798][ T30] audit: type=1326 audit(1772415783.243:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12477 comm="syz.1.1835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b84d9c799 code=0x7ffc0000 [ 617.105934][ T7792] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 617.124266][ T7792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.141232][ T30] audit: type=1326 audit(1772415783.303:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12477 comm="syz.1.1835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7b84d9c799 code=0x7ffc0000 [ 617.209705][T12470] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 617.231211][ T30] audit: type=1326 audit(1772415783.303:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12477 comm="syz.1.1835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b84d9c799 code=0x7ffc0000 [ 617.262331][ T30] audit: type=1326 audit(1772415783.313:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12477 comm="syz.1.1835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f7b84d9c799 code=0x7ffc0000 [ 617.286224][ T30] audit: type=1326 audit(1772415783.313:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12477 comm="syz.1.1835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b84d9c799 code=0x7ffc0000 [ 617.315456][ T30] audit: type=1326 audit(1772415783.313:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12477 comm="syz.1.1835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b84d9c799 code=0x7ffc0000 [ 617.339241][ T30] audit: type=1326 audit(1772415783.313:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12477 comm="syz.1.1835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7b84d9c799 code=0x7ffc0000 [ 617.380207][ T30] audit: type=1326 audit(1772415783.313:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12477 comm="syz.1.1835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b84d9c799 code=0x7ffc0000 [ 617.481103][ T30] audit: type=1326 audit(1772415783.313:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12477 comm="syz.1.1835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7b84d9c799 code=0x7ffc0000 [ 618.305142][ T7792] ath6kl: Failed to submit usb control message: -110 [ 618.312135][ T7792] ath6kl: unable to send the bmi data to the device: -110 [ 618.326066][ T7792] ath6kl: Unable to send get target info: -110 [ 618.350652][ T7792] ath6kl: Failed to init ath6kl core: -110 [ 618.370688][ T7792] ath6kl_usb 4-1:4.0: probe with driver ath6kl_usb failed with error -110 [ 619.083276][ T7792] usb 4-1: USB disconnect, device number 46 [ 619.308910][T12520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1843'. [ 619.333955][T12520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1843'. [ 619.550572][T12527] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1846'. [ 620.404494][ T7792] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 620.691095][ T7792] usb 5-1: Using ep0 maxpacket: 8 [ 620.731732][ T7792] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 620.761066][ T7792] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x59, changing to 0x9 [ 620.821761][ T7792] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 620.877461][ T7792] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 620.923379][ T7792] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 620.932777][ T7792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.935448][T12541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1848'. [ 620.940912][ T7792] usb 5-1: Product: syz [ 620.995188][ T7792] usb 5-1: Manufacturer: syz [ 620.996021][ T9405] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 621.013860][ T9405] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 621.024599][ T7792] usb 5-1: SerialNumber: syz [ 621.042620][ T9405] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 621.053752][T12528] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 621.065572][ T7792] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 621.081856][ T7792] usbtest 5-1:1.0: Linux user mode ISO test driver [ 621.088428][ T7792] usbtest 5-1:1.0: high-speed {control bulk-in iso-out} tests (+alt) [ 621.278010][T12551] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.28.0.0 [ 621.285149][T12551] PKCS7: Only support pkcs7_signedData type [ 621.314443][ T7802] usb 5-1: USB disconnect, device number 64 [ 621.346579][T12553] FAULT_INJECTION: forcing a failure. [ 621.346579][T12553] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 621.359923][T12553] CPU: 0 UID: 0 PID: 12553 Comm: syz.1.1852 Tainted: G L syzkaller #0 PREEMPT(full) [ 621.359956][T12553] Tainted: [L]=SOFTLOCKUP [ 621.359963][T12553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 621.359977][T12553] Call Trace: [ 621.359986][T12553] [ 621.359996][T12553] dump_stack_lvl+0xe8/0x150 [ 621.360034][T12553] should_fail_ex+0x412/0x560 [ 621.360066][T12553] _copy_from_user+0x2d/0xb0 [ 621.360098][T12553] ___sys_recvmsg+0x175/0x590 [ 621.360132][T12553] ? __lock_acquire+0x6b5/0x2cf0 [ 621.360165][T12553] ? __pfx____sys_recvmsg+0x10/0x10 [ 621.360234][T12553] do_recvmmsg+0x334/0x800 [ 621.360264][T12553] ? __pfx_do_recvmmsg+0x10/0x10 [ 621.360296][T12553] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 621.360338][T12553] __x64_sys_recvmmsg+0x198/0x250 [ 621.360362][T12553] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 621.360395][T12553] do_syscall_64+0x14d/0xf80 [ 621.360414][T12553] ? trace_irq_disable+0x3b/0x150 [ 621.360443][T12553] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.360464][T12553] ? clear_bhb_loop+0x40/0x90 [ 621.360489][T12553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.360510][T12553] RIP: 0033:0x7f7b84d9c799 [ 621.360530][T12553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 621.360548][T12553] RSP: 002b:00007f7b85bb4028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 621.360570][T12553] RAX: ffffffffffffffda RBX: 00007f7b85016180 RCX: 00007f7b84d9c799 [ 621.360585][T12553] RDX: 0000000000000a0d RSI: 00002000000066c0 RDI: 0000000000000006 [ 621.360598][T12553] RBP: 00007f7b85bb4090 R08: 0000000000000000 R09: 0000000000000000 [ 621.360610][T12553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 621.360629][T12553] R13: 00007f7b85016218 R14: 00007f7b85016180 R15: 00007f7b8513fa48 [ 621.360662][T12553] [ 621.611089][ T7792] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 622.038084][ T7792] usb 4-1: Using ep0 maxpacket: 8 [ 622.051902][ T7792] usb 4-1: unable to get BOS descriptor or descriptor too short [ 622.062754][ T7792] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 622.093912][ T7792] usb 4-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 622.113834][ T7792] usb 4-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d [ 622.132856][ T7792] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 622.222117][ T7792] usb 4-1: Manufacturer: syz [ 622.244091][ T7792] usb 4-1: SerialNumber: syz [ 622.595209][T12547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 622.604249][T12547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.752913][ T7802] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 623.929418][ T7802] usb 5-1: Using ep0 maxpacket: 16 [ 623.947111][ T7802] usb 5-1: unable to get BOS descriptor or descriptor too short [ 623.959569][ T7802] usb 5-1: config 13 has an invalid interface number: 50 but max is 0 [ 623.969226][ T7802] usb 5-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 623.988764][ T7802] usb 5-1: config 13 has no interface number 0 [ 624.013967][ T7802] usb 5-1: config 13 interface 50 altsetting 167 endpoint 0x7 has invalid wMaxPacketSize 0 [ 624.033191][ T7802] usb 5-1: config 13 interface 50 altsetting 167 bulk endpoint 0x7 has invalid maxpacket 0 [ 624.056841][ T7792] usb 4-1: USB disconnect, device number 47 [ 624.093438][ T7802] usb 5-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 624.177717][ T7802] usb 5-1: config 13 interface 50 has no altsetting 0 [ 624.219523][ T7802] usb 5-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 624.241635][ T7802] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.258534][ T7802] usb 5-1: Product: syz [ 624.277952][ T7802] usb 5-1: Manufacturer: syz [ 624.300512][ T7802] usb 5-1: SerialNumber: syz [ 624.309544][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.321121][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.238052][ T7802] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 626.245228][ T7802] usb 5-1: MIDIStreaming interface descriptor not found [ 626.609772][ T7802] usb 5-1: USB disconnect, device number 65 [ 626.746578][ T6069] udevd[6069]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 627.116882][T12614] FAULT_INJECTION: forcing a failure. [ 627.116882][T12614] name failslab, interval 1, probability 0, space 0, times 0 [ 627.132265][T12614] CPU: 1 UID: 0 PID: 12614 Comm: syz.4.1869 Tainted: G L syzkaller #0 PREEMPT(full) [ 627.132300][T12614] Tainted: [L]=SOFTLOCKUP [ 627.132308][T12614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 627.132320][T12614] Call Trace: [ 627.132329][T12614] [ 627.132337][T12614] dump_stack_lvl+0xe8/0x150 [ 627.132372][T12614] should_fail_ex+0x412/0x560 [ 627.132402][T12614] should_failslab+0xa8/0x100 [ 627.132445][T12614] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 627.132466][T12614] ? __alloc_skb+0x186/0x7d0 [ 627.132492][T12614] ? __alloc_skb+0x1d0/0x7d0 [ 627.132514][T12614] ? __local_bh_enable_ip+0xd0/0x130 [ 627.132552][T12614] __alloc_skb+0x1d0/0x7d0 [ 627.132578][T12614] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 627.132606][T12614] ? do_syscall_64+0x14d/0xf80 [ 627.132629][T12614] alloc_skb_with_frags+0xca/0x890 [ 627.132672][T12614] sock_alloc_send_pskb+0x878/0x990 [ 627.132710][T12614] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 627.132729][T12614] ? kasan_quarantine_put+0xbb/0x1f0 [ 627.132749][T12614] ? lockdep_hardirqs_on+0x7a/0x110 [ 627.132782][T12614] ? kmem_cache_free+0x187/0x630 [ 627.132806][T12614] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 627.132828][T12614] unix_dgram_sendmsg+0x460/0x18e0 [ 627.132849][T12614] ? __lock_acquire+0x6b5/0x2cf0 [ 627.132869][T12614] ? __lock_acquire+0x6b5/0x2cf0 [ 627.132898][T12614] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 627.132915][T12614] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 627.132944][T12614] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 627.132964][T12614] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 627.132983][T12614] ____sys_sendmsg+0xa68/0xad0 [ 627.133003][T12614] ? __lock_acquire+0x6b5/0x2cf0 [ 627.133028][T12614] ? __pfx_____sys_sendmsg+0x10/0x10 [ 627.133057][T12614] ? import_iovec+0x73/0xa0 [ 627.133082][T12614] ___sys_sendmsg+0x2a5/0x360 [ 627.133107][T12614] ? __pfx____sys_sendmsg+0x10/0x10 [ 627.133163][T12614] __sys_sendmmsg+0x27c/0x4e0 [ 627.133188][T12614] ? __pfx___sys_sendmmsg+0x10/0x10 [ 627.133208][T12614] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 627.133241][T12614] ? ksys_write+0x242/0x270 [ 627.133258][T12614] ? __pfx_ksys_write+0x10/0x10 [ 627.133277][T12614] __x64_sys_sendmmsg+0xa0/0xc0 [ 627.133300][T12614] do_syscall_64+0x14d/0xf80 [ 627.133313][T12614] ? trace_irq_disable+0x3b/0x150 [ 627.133334][T12614] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.133349][T12614] ? clear_bhb_loop+0x40/0x90 [ 627.133366][T12614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.133380][T12614] RIP: 0033:0x7fc0c1b9c799 [ 627.133395][T12614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 627.133407][T12614] RSP: 002b:00007fc0c2a73028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 627.133423][T12614] RAX: ffffffffffffffda RBX: 00007fc0c1e15fa0 RCX: 00007fc0c1b9c799 [ 627.133433][T12614] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003 [ 627.133443][T12614] RBP: 00007fc0c2a73090 R08: 0000000000000000 R09: 0000000000000000 [ 627.133452][T12614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 627.133460][T12614] R13: 00007fc0c1e16038 R14: 00007fc0c1e15fa0 R15: 00007fc0c1f3fa48 [ 627.133482][T12614] [ 628.271226][ T7792] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 628.433312][ T7792] usb 5-1: unable to get BOS descriptor or descriptor too short [ 628.453789][ T7792] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 628.471330][ T7802] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 628.481627][ T7792] usb 5-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 628.509707][ T7792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.519850][ T7792] usb 5-1: Product: syz [ 628.530038][ T7792] usb 5-1: Manufacturer: syz [ 628.540224][ T7792] usb 5-1: SerialNumber: syz [ 628.637217][ T7802] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 628.650036][ T7802] usb 4-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 628.665339][ T7802] usb 4-1: config 2 interface 0 has no altsetting 0 [ 628.674894][ T7802] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 628.699966][ T7802] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.716226][ T7802] usb 4-1: Product: syz [ 628.720573][ T7802] usb 4-1: Manufacturer: syz [ 628.725978][ T7802] usb 4-1: SerialNumber: syz [ 628.772647][ T7788] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 628.790109][ T7788] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 628.914687][ T7792] usb 5-1: reset high-speed USB device number 66 using dummy_hcd [ 628.954923][T12625] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1874'. [ 629.106788][ T7802] usb 4-1: USB disconnect, device number 48 [ 629.676349][ T7792] usb 5-1: device descriptor read/64, error -71 [ 629.963122][ T7792] usb 5-1: reset high-speed USB device number 66 using dummy_hcd [ 630.124513][T12623] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1873'. [ 630.213701][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 630.213729][ T30] audit: type=1326 audit(1772415797.123:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12653 comm="syz.1.1882" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7b84d9c799 code=0x0 [ 630.295817][T12623] hsr_slave_1 (unregistering): left promiscuous mode [ 631.058244][T12668] netlink: 41 bytes leftover after parsing attributes in process `syz.1.1885'. [ 631.342785][ T7802] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 631.593515][ T7792] usb 5-1: unable to get BOS descriptor or descriptor too short [ 631.615607][ T7792] usb 5-1: device firmware changed [ 631.723619][ T7802] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 631.738422][ T7802] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 631.761185][ T7792] usb 5-1: USB disconnect, device number 66 [ 631.899494][ T7802] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 631.970705][ T7802] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.990303][ T7802] usb 2-1: config 0 descriptor?? [ 632.043346][T12680] FAULT_INJECTION: forcing a failure. [ 632.043346][T12680] name failslab, interval 1, probability 0, space 0, times 0 [ 632.056180][T12680] CPU: 1 UID: 0 PID: 12680 Comm: syz.0.1889 Tainted: G L syzkaller #0 PREEMPT(full) [ 632.056205][T12680] Tainted: [L]=SOFTLOCKUP [ 632.056211][T12680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 632.056221][T12680] Call Trace: [ 632.056228][T12680] [ 632.056236][T12680] dump_stack_lvl+0xe8/0x150 [ 632.056265][T12680] should_fail_ex+0x412/0x560 [ 632.056287][T12680] should_failslab+0xa8/0x100 [ 632.056308][T12680] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 632.056323][T12680] ? __alloc_skb+0x186/0x7d0 [ 632.056343][T12680] ? __alloc_skb+0x1d0/0x7d0 [ 632.056360][T12680] ? __local_bh_enable_ip+0xd0/0x130 [ 632.056383][T12680] __alloc_skb+0x1d0/0x7d0 [ 632.056406][T12680] netlink_sendmsg+0x5d4/0xb40 [ 632.056433][T12680] ? __pfx_netlink_sendmsg+0x10/0x10 [ 632.056454][T12680] ? aa_sock_msg_perm+0xf1/0x1b0 [ 632.056474][T12680] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 632.056492][T12680] ? __pfx_netlink_sendmsg+0x10/0x10 [ 632.056509][T12680] ____sys_sendmsg+0xa68/0xad0 [ 632.056538][T12680] ? __pfx_____sys_sendmsg+0x10/0x10 [ 632.056567][T12680] ? import_iovec+0x73/0xa0 [ 632.056600][T12680] ___sys_sendmsg+0x2a5/0x360 [ 632.056626][T12680] ? __pfx____sys_sendmsg+0x10/0x10 [ 632.056672][T12680] ? __fget_files+0x2a/0x420 [ 632.056692][T12680] ? __fget_files+0x3a0/0x420 [ 632.056719][T12680] __x64_sys_sendmsg+0x1bd/0x2a0 [ 632.056743][T12680] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 632.056771][T12680] ? __pfx_ksys_write+0x10/0x10 [ 632.056795][T12680] do_syscall_64+0x14d/0xf80 [ 632.056810][T12680] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.056824][T12680] ? clear_bhb_loop+0x40/0x90 [ 632.056842][T12680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.056856][T12680] RIP: 0033:0x7f5fe459c799 [ 632.056871][T12680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 632.056883][T12680] RSP: 002b:00007f5fe54b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 632.056899][T12680] RAX: ffffffffffffffda RBX: 00007f5fe4815fa0 RCX: 00007f5fe459c799 [ 632.056910][T12680] RDX: 0000000004000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 632.056920][T12680] RBP: 00007f5fe54b9090 R08: 0000000000000000 R09: 0000000000000000 [ 632.056928][T12680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.056936][T12680] R13: 00007f5fe4816038 R14: 00007f5fe4815fa0 R15: 00007f5fe493fa48 [ 632.056959][T12680] [ 632.467025][T12668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.502044][T12668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.532932][ T7792] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 632.555283][T12668] netlink: 'syz.1.1885': attribute type 19 has an invalid length. [ 632.669310][T12688] netlink: 'syz.2.1891': attribute type 1 has an invalid length. [ 632.731793][T12690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1891'. [ 632.747475][ T7792] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 632.757743][ T7792] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 632.771080][ T7792] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 632.780293][ T7792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.806815][ T7792] usb 5-1: config 0 descriptor?? [ 632.830120][ T7792] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 632.852632][T12688] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1891'. [ 632.886416][ T7792] dvb-usb: bulk message failed: -22 (3/0) [ 632.900287][ T7792] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 632.912788][ T7792] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 632.923149][ T7792] usb 5-1: media controller created [ 632.934387][ T7792] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 632.959356][ T7802] usb 2-1: USB disconnect, device number 76 [ 633.038658][T12676] dvb-usb: bulk message failed: -22 (4/0) [ 633.105444][ T7792] dvb-usb: bulk message failed: -22 (6/0) [ 633.142421][ T7792] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 633.164109][ T7792] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input47 [ 633.238919][ T7792] dvb-usb: schedule remote query interval to 150 msecs. [ 633.246290][ T7792] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 633.270286][ T7792] usb 5-1: USB disconnect, device number 67 [ 633.315861][ T7792] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 633.641087][ T30] audit: type=1800 audit(1772415800.533:797): pid=12697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1894" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 633.664274][T12698] netlink: 'syz.4.1895': attribute type 9 has an invalid length. [ 633.672526][T12698] netlink: 'syz.4.1895': attribute type 11 has an invalid length. [ 633.691737][T12698] netlink: 'syz.4.1895': attribute type 12 has an invalid length. [ 633.699718][T12698] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.1895'. [ 633.777362][T12698] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1895'. [ 634.171059][ T7792] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 634.323511][ T7792] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 634.347895][ T7792] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 634.409646][ T7792] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 634.423552][ T7792] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 634.433980][ T7792] usb 2-1: Manufacturer: syz [ 634.446304][ T7792] usb 2-1: config 0 descriptor?? [ 634.501898][ T7788] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 634.613941][ T7792] rc_core: IR keymap rc-hauppauge not found [ 634.620162][ T7792] Registered IR keymap rc-empty [ 634.627422][ T7792] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 634.641483][ T7788] usb 5-1: device descriptor read/64, error -71 [ 634.762335][ T7792] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input48 [ 634.837529][T12704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 634.846498][T12704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 634.898223][ T7792] usb 2-1: USB disconnect, device number 77 [ 635.007610][T12723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1901'. [ 635.031108][ T7788] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 635.145633][T12725] Invalid logical block size (-625016833) [ 635.172366][ T7788] usb 5-1: device descriptor read/64, error -71 [ 635.281872][ T7788] usb usb5-port1: attempt power cycle [ 635.691429][ T7788] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 635.722615][ T7788] usb 5-1: device descriptor read/8, error -71 [ 635.851930][ T7792] usb 2-1: new full-speed USB device number 78 using dummy_hcd [ 636.031081][ T7788] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 636.053104][ T7788] usb 5-1: device descriptor read/8, error -71 [ 636.060458][ T7792] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 636.070916][ T7792] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 636.091749][ T7792] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 636.111037][ T7792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.172453][ T7792] usb 2-1: config 0 descriptor?? [ 636.196407][ T7792] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 636.204099][ T7788] usb usb5-port1: unable to enumerate USB device [ 636.229189][ T7792] dvb-usb: bulk message failed: -22 (3/0) [ 636.265204][ T7792] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 636.282711][ T7792] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 636.298527][ T7792] usb 2-1: media controller created [ 636.306695][ T7792] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 636.504295][T12733] dvb-usb: bulk message failed: -22 (4/0) [ 636.582060][T12739] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1907'. [ 636.591394][ T7792] dvb-usb: bulk message failed: -22 (6/0) [ 636.597283][ T7792] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 636.708656][ T7792] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input49 [ 636.733395][ T7792] dvb-usb: schedule remote query interval to 150 msecs. [ 636.740454][ T7792] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 636.837533][ T7792] usb 2-1: USB disconnect, device number 78 [ 636.949659][ T7792] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 637.059437][T12744] syzkaller1: entered promiscuous mode [ 637.065177][T12744] syzkaller1: entered allmulticast mode [ 637.396179][T12753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1912'. [ 637.961878][ T7799] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 638.353615][ T7799] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 638.401688][ T7799] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 638.556640][ T7799] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 638.671937][ T7799] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 638.705572][ T7799] usb 4-1: Manufacturer: syz [ 638.734758][ T7799] usb 4-1: config 0 descriptor?? [ 639.022564][ T7799] rc_core: IR keymap rc-hauppauge not found [ 639.028620][ T7799] Registered IR keymap rc-empty [ 639.060462][ T7799] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 639.085428][T12760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.105267][T12760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.131413][ T7799] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input50 [ 639.272519][ T7788] usb 4-1: USB disconnect, device number 49 [ 639.405096][ T5836] udevd[5836]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 639.431164][ T7799] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 639.639170][ T7799] usb 2-1: Using ep0 maxpacket: 8 [ 639.675446][ T7799] usb 2-1: unable to get BOS descriptor or descriptor too short [ 639.684938][ T7799] usb 2-1: config 4 interface 0 has no altsetting 0 [ 639.713940][ T7799] usb 2-1: string descriptor 0 read error: -22 [ 639.720255][ T7799] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 639.733956][ T7799] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 639.762218][ T7799] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 639.790825][ T7799] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 639.876506][ T30] audit: type=1326 audit(1772415806.763:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12773 comm="syz.2.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be959c799 code=0x7ffc0000 [ 639.896505][ T7799] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 639.951210][ T7799] usb 2-1: media controller created [ 639.957634][ T30] audit: type=1326 audit(1772415806.763:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12773 comm="syz.2.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1be959c799 code=0x7ffc0000 [ 639.997901][ T30] audit: type=1326 audit(1772415806.763:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12773 comm="syz.2.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be959c799 code=0x7ffc0000 [ 640.031477][ T30] audit: type=1326 audit(1772415806.763:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12773 comm="syz.2.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f1be959c799 code=0x7ffc0000 [ 640.111989][ T7788] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 640.134134][ T7802] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 640.184388][ T7802] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 640.207087][ T7799] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 640.474194][ T30] audit: type=1326 audit(1772415806.763:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12773 comm="syz.2.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be959c799 code=0x7ffc0000 [ 640.565834][T12782] FAULT_INJECTION: forcing a failure. [ 640.565834][T12782] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 640.621411][T12782] CPU: 0 UID: 0 PID: 12782 Comm: syz.0.1920 Tainted: G L syzkaller #0 PREEMPT(full) [ 640.621446][T12782] Tainted: [L]=SOFTLOCKUP [ 640.621453][T12782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 640.621464][T12782] Call Trace: [ 640.621471][T12782] [ 640.621480][T12782] dump_stack_lvl+0xe8/0x150 [ 640.621516][T12782] should_fail_ex+0x412/0x560 [ 640.621546][T12782] _copy_from_user+0x2d/0xb0 [ 640.621576][T12782] __copy_msghdr+0x3c5/0x5b0 [ 640.621612][T12782] ___sys_sendmsg+0x213/0x360 [ 640.621648][T12782] ? __pfx____sys_sendmsg+0x10/0x10 [ 640.621725][T12782] ? __fget_files+0x2a/0x420 [ 640.621752][T12782] ? __fget_files+0x3a0/0x420 [ 640.621789][T12782] __x64_sys_sendmsg+0x1bd/0x2a0 [ 640.621832][T12782] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 640.621872][T12782] ? __pfx_ksys_write+0x10/0x10 [ 640.621906][T12782] do_syscall_64+0x14d/0xf80 [ 640.621931][T12782] ? trace_irq_disable+0x3b/0x150 [ 640.621961][T12782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.621983][T12782] ? clear_bhb_loop+0x40/0x90 [ 640.622008][T12782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.622028][T12782] RIP: 0033:0x7f5fe459c799 [ 640.622048][T12782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 640.622067][T12782] RSP: 002b:00007f5fe54b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 640.622089][T12782] RAX: ffffffffffffffda RBX: 00007f5fe4815fa0 RCX: 00007f5fe459c799 [ 640.622104][T12782] RDX: 0000000000000080 RSI: 00002000000008c0 RDI: 0000000000000004 [ 640.622117][T12782] RBP: 00007f5fe54b9090 R08: 0000000000000000 R09: 0000000000000000 [ 640.622129][T12782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 640.622141][T12782] R13: 00007f5fe4816038 R14: 00007f5fe4815fa0 R15: 00007f5fe493fa48 [ 640.622173][T12782] [ 640.827839][ T30] audit: type=1326 audit(1772415806.763:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12773 comm="syz.2.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f1be959c799 code=0x7ffc0000 [ 640.850391][ T30] audit: type=1326 audit(1772415806.763:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12773 comm="syz.2.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be959c799 code=0x7ffc0000 [ 640.872886][ T30] audit: type=1326 audit(1772415806.763:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12773 comm="syz.2.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f1be959c799 code=0x7ffc0000 [ 640.895413][ T30] audit: type=1326 audit(1772415806.763:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12773 comm="syz.2.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be959c799 code=0x7ffc0000 [ 640.918011][ T30] audit: type=1326 audit(1772415806.763:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12773 comm="syz.2.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f1be959c799 code=0x7ffc0000 [ 641.097948][ T7799] zl10353_read_register: readreg error (reg=127, ret==0) [ 641.131059][ T7788] usb 3-1: Using ep0 maxpacket: 32 [ 641.243986][ T7799] usb 2-1: USB disconnect, device number 79 [ 641.306948][ T7788] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 641.352531][ T29] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 641.409235][ T7788] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 641.455810][ T7788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.519612][ T7788] usb 3-1: config 0 descriptor?? [ 641.525394][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 641.536113][ T29] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 641.551414][ T29] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 641.573887][ T7788] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 641.585572][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.627325][ T29] usb 5-1: config 0 descriptor?? [ 641.650190][ T29] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 641.657598][ T29] dvb-usb: bulk message failed: -22 (3/0) [ 641.690516][ T29] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 641.721223][ T29] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 641.740916][ T29] usb 5-1: media controller created [ 641.748322][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 641.801435][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 641.816362][ T29] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 641.849409][T12788] dvb-usb: bulk message failed: -22 (4/0) [ 641.856153][ T29] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input51 [ 641.898012][ T29] dvb-usb: schedule remote query interval to 150 msecs. [ 641.911725][ T29] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 641.947724][ T29] usb 5-1: USB disconnect, device number 72 [ 641.971978][ T29] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 642.008567][T12798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1925'. [ 642.130026][T12800] libceph: resolve 'c' (ret=-3): failed [ 643.891183][ T7788] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 644.042875][ T7788] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 644.051431][ T7788] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 644.082351][ T7788] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 644.092069][ T7788] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 644.120556][ T7788] usb 4-1: Manufacturer: syz [ 644.193262][ T7788] usb 4-1: config 0 descriptor?? [ 644.331268][ T7788] rc_core: IR keymap rc-hauppauge not found [ 644.338590][ T7788] Registered IR keymap rc-empty [ 644.351996][ T7788] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 644.401527][ T7788] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input52 [ 644.422043][T12815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 644.433835][T12815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 644.468437][ T7792] usb 3-1: USB disconnect, device number 71 [ 645.092498][ T29] usb 4-1: USB disconnect, device number 50 [ 645.462505][T12836] vlan3: entered promiscuous mode [ 645.841195][T12839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 646.093949][T12846] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 646.093949][T12846] The task syz.4.1938 (12846) triggered the difference, watch for misbehavior. [ 646.543741][ T7792] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 646.743382][ T7792] usb 4-1: Using ep0 maxpacket: 16 [ 646.771812][ T7792] usb 4-1: config 127 has an invalid interface number: 124 but max is 0 [ 646.820752][ T7792] usb 4-1: config 127 has no interface number 0 [ 646.831516][ T7792] usb 4-1: config 127 interface 124 has no altsetting 0 [ 646.976046][ T7792] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 646.985553][ T7792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.021548][ T7792] usb 4-1: Product: syz [ 647.032644][ T7792] usb 4-1: Manufacturer: syz [ 647.041905][ T7792] usb 4-1: SerialNumber: syz [ 647.048433][T12857] syzkaller0: entered promiscuous mode [ 647.058202][T12857] syzkaller0: entered allmulticast mode [ 647.659997][ T7792] usb 4-1: reset high-speed USB device number 51 using dummy_hcd [ 648.322696][ T29] usb 4-1: USB disconnect, device number 51 [ 648.523948][T12869] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 649.067494][ T7792] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 649.335317][ T7792] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 649.347725][ T7792] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 649.438580][ T7792] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 649.456240][ T7792] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 649.465096][ T7792] usb 5-1: Manufacturer: syz [ 649.489319][ T7792] usb 5-1: config 0 descriptor?? [ 649.583950][ T7792] rc_core: IR keymap rc-hauppauge not found [ 649.614386][ T7792] Registered IR keymap rc-empty [ 649.634515][ T7792] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 649.665435][ T7792] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input53 [ 649.698907][T12877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.707978][T12877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.753234][ T7792] usb 5-1: USB disconnect, device number 73 [ 652.070752][T12915] netlink: 'syz.0.1954': attribute type 1 has an invalid length. [ 652.132401][T12920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1954'. [ 652.379507][T12932] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 652.388550][T12931] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1954'. [ 652.485988][ T29] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 652.785719][ T29] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 652.794590][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 652.812625][ T29] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 653.010620][ T29] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 653.029887][ T29] usb 5-1: Manufacturer: syz [ 653.069473][ T29] usb 5-1: config 0 descriptor?? [ 653.203813][ T29] rc_core: IR keymap rc-hauppauge not found [ 653.212076][ T29] Registered IR keymap rc-empty [ 653.361781][ T29] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 653.373941][T12924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 653.399648][T12924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 653.526264][ T29] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input54 [ 653.633116][ T7792] usb 5-1: USB disconnect, device number 74 [ 654.731084][ T7792] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 654.885377][ T7792] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 654.895804][ T7792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.931868][ T7792] usb 5-1: Product: syz [ 654.940572][ T7792] usb 5-1: Manufacturer: syz [ 655.070778][ T7792] usb 5-1: SerialNumber: syz [ 655.328254][T12967] netlink: 'syz.0.1974': attribute type 10 has an invalid length. [ 655.516110][T12969] syzkaller0: entered promiscuous mode [ 655.521891][T12969] syzkaller0: entered allmulticast mode [ 657.438961][ T7792] cdc_ncm 5-1:1.0: bind() failure [ 657.486872][ T7792] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 657.515005][ T7792] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 657.542676][ T7792] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 657.607472][ T7792] usb 5-1: USB disconnect, device number 75 [ 657.875283][T12991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1981'. [ 657.961118][ T7792] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 658.123255][ T7792] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 658.139509][ T7792] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 658.151311][ T7792] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 658.160909][ T7792] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 658.169753][ T7792] usb 5-1: Manufacturer: syz [ 658.177648][ T7792] usb 5-1: config 0 descriptor?? [ 658.271112][ T7792] rc_core: IR keymap rc-hauppauge not found [ 658.277091][ T7792] Registered IR keymap rc-empty [ 658.286878][ T7792] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 658.299850][ T7792] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input55 [ 658.440059][T12988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 658.511542][T12988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 658.666985][ T7792] usb 5-1: USB disconnect, device number 76 [ 659.063481][ T9405] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 659.084813][ T9405] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 659.124508][ T9405] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 659.158768][ T9405] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 659.328412][T13005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1986'. [ 660.105816][T13022] netlink: 'syz.1.1989': attribute type 10 has an invalid length. [ 660.123252][T13022] netlink: 428 bytes leftover after parsing attributes in process `syz.1.1989'. [ 660.150056][T13022] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1989'. [ 660.441313][T13032] bridge0: port 1(macvlan2) entered blocking state [ 660.448116][T13032] bridge0: port 1(macvlan2) entered disabled state [ 660.465455][T13032] macvlan2: entered allmulticast mode [ 660.474455][T13032] bridge0: entered allmulticast mode [ 660.505088][T13032] macvlan2: left allmulticast mode [ 660.510482][T13032] bridge0: left allmulticast mode [ 660.878857][T13043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1995'. [ 661.112483][ T83] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 661.121416][ T83] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 661.130157][ T83] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 661.168837][ T83] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 661.641102][ T7792] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 661.681084][ T7799] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 661.802958][ T7792] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 661.821234][ T7792] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 661.821242][ T7799] usb 5-1: device descriptor read/64, error -71 [ 661.821267][ T7792] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 661.934320][ T7792] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 661.959388][ T7792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.990855][ T7792] usb 4-1: config 0 descriptor?? [ 662.071118][ T7799] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 662.201211][ T7799] usb 5-1: device descriptor read/64, error -71 [ 662.236006][ T7792] plantronics 0003:047F:FFFF.0019: unbalanced collection at end of report description [ 662.264790][ T7792] plantronics 0003:047F:FFFF.0019: parse failed [ 662.283218][ T7792] plantronics 0003:047F:FFFF.0019: probe with driver plantronics failed with error -22 [ 662.286506][T13058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2002'. [ 662.312519][ T7799] usb usb5-port1: attempt power cycle [ 662.434459][ T7792] usb 4-1: USB disconnect, device number 52 [ 662.538819][T13066] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2003'. [ 662.681074][ T7799] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 662.701805][ T7799] usb 5-1: device descriptor read/8, error -71 [ 662.951098][ T7799] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 662.984393][ T7799] usb 5-1: device descriptor read/8, error -71 [ 663.102610][ T7799] usb usb5-port1: unable to enumerate USB device [ 663.255043][T13073] tipc: Enabling of bearer rejected, already enabled [ 663.402351][T13075] netlink: 'syz.0.2006': attribute type 24 has an invalid length. [ 663.849891][T13093] batman_adv: batadv0: Adding interface: macvlan2 [ 663.869654][T13093] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 663.979369][T13095] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2010'. [ 664.010206][T13093] batman_adv: batadv0: Not using interface macvlan2 (retrying later): interface not active [ 664.108689][T13095] 8021q: adding VLAN 0 to HW filter on device bond2 [ 665.171117][ T7799] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 665.341224][ T7799] usb 4-1: Using ep0 maxpacket: 32 [ 665.349897][ T7799] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 665.358392][ T7799] usb 4-1: config 0 has no interface number 0 [ 665.377917][ T7799] usb 4-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 665.428078][ T7799] usb 4-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 665.470126][ T7799] usb 4-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 115, changing to 7 [ 665.499896][ T7799] usb 4-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 25972, setting to 1024 [ 665.520299][ T7799] usb 4-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 665.874051][T13118] netlink: 'syz.2.2017': attribute type 39 has an invalid length. [ 665.996310][ T7799] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 666.093382][T13122] bridge0: port 1(macvlan2) entered blocking state [ 666.106339][ T7799] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.111857][T13122] bridge0: port 1(macvlan2) entered disabled state [ 666.122441][T13122] macvlan2: entered allmulticast mode [ 666.145914][T13122] bridge0: entered allmulticast mode [ 666.155748][ T7799] usb 4-1: Product: syz [ 666.168108][T13122] macvlan2: left allmulticast mode [ 666.181321][ T7799] usb 4-1: Manufacturer: syz [ 666.181451][T13122] bridge0: left allmulticast mode [ 666.185988][ T7799] usb 4-1: SerialNumber: syz [ 666.302986][ T7799] usb 4-1: config 0 descriptor?? [ 666.396380][ T7799] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.119/input/input56 [ 667.604105][T13134] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2023'. [ 667.712575][T13134] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2023'. [ 668.122151][ T7799] usb 4-1: USB disconnect, device number 53 [ 668.963819][T13161] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.28.0.0 [ 668.970857][T13161] PKCS7: Only support pkcs7_signedData type [ 669.976563][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 669.976580][ T30] audit: type=1326 audit(1772415836.883:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13167 comm="syz.4.2030" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc0c1b9c799 code=0x0 [ 671.893953][T13180] syzkaller0: entered promiscuous mode [ 672.039421][T13180] syzkaller0: entered allmulticast mode [ 672.193552][T13190] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2038'. [ 672.384447][T13190] batadv_slave_0: entered promiscuous mode [ 672.448660][T13199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2041'. [ 673.406913][ T7792] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 673.721086][ T7792] usb 2-1: Using ep0 maxpacket: 32 [ 673.728958][ T7792] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 673.746503][T13226] loop2: detected capacity change from 0 to 7 [ 673.749968][ T7792] usb 2-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 673.767973][T13226] Dev loop2: unable to read RDB block 7 [ 673.800348][T13226] loop2: unable to read partition table [ 673.812345][T13226] loop2: partition table beyond EOD, truncated [ 673.840380][T13226] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 673.885831][ T5191] Dev loop2: unable to read RDB block 7 [ 673.891658][ T5191] loop2: unable to read partition table [ 673.911161][ T5191] loop2: partition table beyond EOD, truncated [ 674.038313][ T7792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.076239][ T7792] usb 2-1: config 0 descriptor?? [ 674.108266][ T7792] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 675.261152][ T7792] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 675.651546][ T7792] usb 3-1: Using ep0 maxpacket: 16 [ 675.661790][ T7792] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 675.680894][ T7792] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 675.701574][ T7792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.709676][ T7792] usb 3-1: Product: syz [ 675.714700][ T7792] usb 3-1: Manufacturer: syz [ 675.719360][ T7792] usb 3-1: SerialNumber: syz [ 675.756026][T13242] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.28.0.0 [ 675.763170][T13242] PKCS7: Only support pkcs7_signedData type [ 675.772634][ T7792] usb 3-1: config 0 descriptor?? [ 675.786925][ T7792] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 675.797101][ T7792] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 676.033848][T13252] netlink: 'syz.4.2053': attribute type 1 has an invalid length. [ 676.163759][ T7799] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 676.200299][ T7792] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 676.246054][T13252] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2053'. [ 676.289323][T13252] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2053'. [ 676.321076][ T7799] usb 4-1: Using ep0 maxpacket: 16 [ 676.328663][ T7799] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 676.346138][ T7799] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 676.370111][ T7799] usb 4-1: config 0 interface 0 has no altsetting 0 [ 676.489739][ T7799] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 676.509331][ T7799] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.532428][ T7799] usb 4-1: config 0 descriptor?? [ 676.638893][ T7792] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 676.655190][ T7792] em28xx 3-1:0.0: board has no eeprom [ 676.892592][ T7788] usb 2-1: USB disconnect, device number 80 [ 676.971097][ T7792] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 676.973580][ T7799] nzxt-smart2 0003:1E71:2009.001A: unknown main item tag 0x0 [ 676.979124][ T7792] em28xx 3-1:0.0: dvb set to bulk mode. [ 677.007678][ T7789] em28xx 3-1:0.0: Binding DVB extension [ 677.068747][ T7799] nzxt-smart2 0003:1E71:2009.001A: unknown main item tag 0x0 [ 677.098146][ T7802] usb 3-1: USB disconnect, device number 72 [ 677.126946][ T7802] em28xx 3-1:0.0: Disconnecting em28xx [ 677.138186][ T7799] nzxt-smart2 0003:1E71:2009.001A: unknown main item tag 0x0 [ 677.180550][ T7799] nzxt-smart2 0003:1E71:2009.001A: unknown main item tag 0x0 [ 677.217658][ T7799] nzxt-smart2 0003:1E71:2009.001A: unknown main item tag 0x0 [ 677.265478][ T7799] nzxt-smart2 0003:1E71:2009.001A: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 677.307817][ T7789] em28xx 3-1:0.0: Registering input extension [ 677.447147][ T7799] usb 4-1: USB disconnect, device number 54 [ 677.453488][ T7802] em28xx 3-1:0.0: Closing input extension [ 677.552484][ T7802] em28xx 3-1:0.0: Freeing device [ 677.631123][T13269] fido_id[13269]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 677.897824][T13277] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2059'. [ 678.131088][ T7788] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 678.393508][ T7788] usb 3-1: unable to get BOS descriptor or descriptor too short [ 678.409395][ T7788] usb 3-1: not running at top speed; connect to a high speed hub [ 678.438669][ T7788] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 4 [ 678.468654][ T7788] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 22, changing to 4 [ 678.499268][ T7788] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 39669, setting to 1023 [ 678.543855][ T7788] usb 3-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 678.555046][ T7788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.571137][ T7788] usb 3-1: Product: syz [ 678.587707][ T7788] usb 3-1: Manufacturer: syz [ 678.606154][ T7788] usb 3-1: SerialNumber: syz [ 678.862538][ T7788] usb 3-1: 1:1 : incorrect wMaxPacketSize for BADD profile [ 678.870349][ T7788] usb 3-1: incorrect wMaxPacketSize 0x3ff for BADD profile [ 679.252925][ T7788] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 679.315882][ T7788] usb 3-1: USB disconnect, device number 73 [ 679.351988][ T5836] udevd[5836]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 679.600646][T13291] FAULT_INJECTION: forcing a failure. [ 679.600646][T13291] name failslab, interval 1, probability 0, space 0, times 0 [ 679.641140][T13291] CPU: 1 UID: 0 PID: 13291 Comm: syz.4.2063 Tainted: G L syzkaller #0 PREEMPT(full) [ 679.641176][T13291] Tainted: [L]=SOFTLOCKUP [ 679.641184][T13291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 679.641196][T13291] Call Trace: [ 679.641207][T13291] [ 679.641217][T13291] dump_stack_lvl+0xe8/0x150 [ 679.641253][T13291] should_fail_ex+0x412/0x560 [ 679.641285][T13291] should_failslab+0xa8/0x100 [ 679.641311][T13291] ? security_inode_alloc+0x39/0x310 [ 679.641339][T13291] kmem_cache_alloc_noprof+0x87/0x650 [ 679.641370][T13291] security_inode_alloc+0x39/0x310 [ 679.641403][T13291] inode_init_always_gfp+0x9ed/0xdc0 [ 679.641439][T13291] ? __pfx_sock_alloc_inode+0x10/0x10 [ 679.641461][T13291] alloc_inode+0x82/0x1b0 [ 679.641489][T13291] __sock_create+0x12d/0x9d0 [ 679.641513][T13291] ? __lock_acquire+0x6b5/0x2cf0 [ 679.641548][T13291] mptcp_subflow_create_socket+0xfb/0x800 [ 679.641642][T13291] ? tcp_assign_congestion_control+0x5a8/0x8f0 [ 679.641703][T13291] ? percpu_counter_add_batch+0xea/0x1d0 [ 679.641727][T13291] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 679.641756][T13291] ? do_raw_spin_lock+0x12b/0x2f0 [ 679.641780][T13291] __mptcp_nmpc_sk+0x155/0x790 [ 679.641807][T13291] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 679.641828][T13291] ? mptcp_pm_nl_add_addr_doit+0xaa0/0x1500 [ 679.641862][T13291] ? __local_bh_enable_ip+0xd0/0x130 [ 679.641902][T13291] mptcp_pm_nl_add_addr_doit+0xaf6/0x1500 [ 679.641934][T13291] ? __nla_validate_parse+0x2480/0x2dc0 [ 679.641973][T13291] ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10 [ 679.642011][T13291] ? __pfx___nla_validate_parse+0x10/0x10 [ 679.642077][T13291] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 679.642119][T13291] genl_family_rcv_msg_doit+0x22a/0x330 [ 679.642150][T13291] ? __asan_memcpy+0x40/0x70 [ 679.642172][T13291] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 679.642217][T13291] ? bpf_lsm_capable+0x9/0x20 [ 679.642243][T13291] ? security_capable+0x7e/0x2c0 [ 679.642274][T13291] genl_rcv_msg+0x61c/0x7a0 [ 679.642310][T13291] ? __pfx_genl_rcv_msg+0x10/0x10 [ 679.642340][T13291] ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10 [ 679.642370][T13291] ? __lock_acquire+0x6b5/0x2cf0 [ 679.642408][T13291] netlink_rcv_skb+0x232/0x4b0 [ 679.642434][T13291] ? __pfx_genl_rcv_msg+0x10/0x10 [ 679.642466][T13291] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 679.642511][T13291] ? down_read+0x272/0x2e0 [ 679.642530][T13291] ? genl_rcv+0xd/0x40 [ 679.642562][T13291] genl_rcv+0x28/0x40 [ 679.642590][T13291] netlink_unicast+0x80f/0x9b0 [ 679.642622][T13291] ? __pfx_netlink_unicast+0x10/0x10 [ 679.642646][T13291] ? netlink_sendmsg+0x650/0xb40 [ 679.642670][T13291] ? skb_put+0x11b/0x210 [ 679.642702][T13291] netlink_sendmsg+0x813/0xb40 [ 679.642738][T13291] ? __pfx_netlink_sendmsg+0x10/0x10 [ 679.642768][T13291] ? aa_sock_msg_perm+0xf1/0x1b0 [ 679.642795][T13291] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 679.642819][T13291] ? __pfx_netlink_sendmsg+0x10/0x10 [ 679.642843][T13291] ____sys_sendmsg+0xa68/0xad0 [ 679.642890][T13291] ? __pfx_____sys_sendmsg+0x10/0x10 [ 679.642931][T13291] ? import_iovec+0x73/0xa0 [ 679.642964][T13291] ___sys_sendmsg+0x2a5/0x360 [ 679.643000][T13291] ? __pfx____sys_sendmsg+0x10/0x10 [ 679.643070][T13291] ? __fget_files+0x2a/0x420 [ 679.643097][T13291] ? __fget_files+0x3a0/0x420 [ 679.643137][T13291] __x64_sys_sendmsg+0x1bd/0x2a0 [ 679.643171][T13291] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 679.643212][T13291] ? __pfx_ksys_write+0x10/0x10 [ 679.643246][T13291] do_syscall_64+0x14d/0xf80 [ 679.643265][T13291] ? trace_irq_disable+0x3b/0x150 [ 679.643293][T13291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.643314][T13291] ? clear_bhb_loop+0x40/0x90 [ 679.643339][T13291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.643360][T13291] RIP: 0033:0x7fc0c1b9c799 [ 679.643380][T13291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 679.643398][T13291] RSP: 002b:00007fc0c2a52028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 679.643420][T13291] RAX: ffffffffffffffda RBX: 00007fc0c1e16090 RCX: 00007fc0c1b9c799 [ 679.643435][T13291] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000006 [ 679.643448][T13291] RBP: 00007fc0c2a52090 R08: 0000000000000000 R09: 0000000000000000 [ 679.643460][T13291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 679.643472][T13291] R13: 00007fc0c1e16128 R14: 00007fc0c1e16090 R15: 00007fc0c1f3fa48 [ 679.643506][T13291] [ 680.096694][T13291] socket: no more sockets [ 680.195019][T13292] fuse: Unknown parameter 'Froup_id' [ 680.204556][T13292] fuse: Bad value for 'user_id' [ 680.209586][T13292] fuse: Bad value for 'user_id' [ 680.221236][T13292] netlink: 'syz.3.2060': attribute type 3 has an invalid length. [ 680.760486][ T83] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 680.770470][ T83] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 680.830120][ T83] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 680.875316][ T83] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 681.271354][ T7788] usb 5-1: new full-speed USB device number 81 using dummy_hcd [ 681.344149][T13313] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2069'. [ 681.537611][T13303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.546650][T13303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.560491][ T7788] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 681.568267][ T7788] usb 5-1: can't read configurations, error -71 [ 682.249484][ T30] audit: type=1326 audit(1772415849.123:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13318 comm="syz.2.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be959c799 code=0x7ffc0000 [ 682.307481][ T30] audit: type=1326 audit(1772415849.123:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13318 comm="syz.2.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be959c799 code=0x7ffc0000 [ 682.357140][ T30] audit: type=1326 audit(1772415849.123:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13318 comm="syz.2.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1be959c799 code=0x7ffc0000 [ 682.439383][ T30] audit: type=1326 audit(1772415849.123:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13318 comm="syz.2.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be959c799 code=0x7ffc0000 [ 682.481045][ T7792] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 682.556203][ T30] audit: type=1326 audit(1772415849.123:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13318 comm="syz.2.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f1be959c799 code=0x7ffc0000 [ 682.651223][ T7792] usb 3-1: Using ep0 maxpacket: 32 [ 682.668734][ T7792] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 682.679882][ T7792] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 682.689851][ T7792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.700318][ T30] audit: type=1326 audit(1772415849.123:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13318 comm="syz.2.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be959c799 code=0x7ffc0000 [ 682.724292][ T7792] usb 3-1: config 0 descriptor?? [ 682.737062][ T7792] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 682.761856][ T30] audit: type=1326 audit(1772415849.123:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13318 comm="syz.2.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f1be959c799 code=0x7ffc0000 [ 682.787119][ T30] audit: type=1326 audit(1772415849.123:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13318 comm="syz.2.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be959c799 code=0x7ffc0000 [ 682.814101][ T30] audit: type=1326 audit(1772415849.123:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13318 comm="syz.2.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f1be959c799 code=0x7ffc0000 [ 682.840220][ T30] audit: type=1326 audit(1772415849.123:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13318 comm="syz.2.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be959c799 code=0x7ffc0000 [ 682.881036][ T7802] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 683.072769][ T7802] usb 5-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 683.104406][ T7802] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 683.127610][ T7802] usb 5-1: config 220 has no interface number 0 [ 683.152256][T13343] netlink: 'syz.3.2079': attribute type 39 has an invalid length. [ 683.177437][ T7802] usb 5-1: too many endpoints for config 220 interface 144 altsetting 253: 172, using maximum allowed: 30 [ 683.208172][T13345] binder: 13344:13345 ioctl c0306201 200000000640 returned -22 [ 683.250808][ T7802] usb 5-1: config 220 interface 144 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 172 [ 683.304990][ T7802] usb 5-1: config 220 interface 144 has no altsetting 0 [ 683.317636][T13350] libceph: resolve 'c' (ret=-3): failed [ 683.386244][ T7802] usb 5-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 683.645677][ T7802] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.873384][ T29] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 684.103500][ T29] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 684.135216][ T29] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 684.154134][ T29] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 684.168443][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.198583][T13354] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 684.212378][ T29] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 684.432125][T13354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 684.443763][T13354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 685.423935][ T7792] usb 3-1: USB disconnect, device number 74 [ 685.752180][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.758596][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.799304][ T7802] usb 5-1: string descriptor 0 read error: -71 [ 685.832195][ T7802] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 686.002048][ T7802] gspca_sn9c2028: read1 error -71 [ 686.010068][ T7802] gspca_sn9c2028: read1 error -71 [ 686.016294][ T7802] gspca_sn9c2028: read1 error -71 [ 686.044165][T13383] bridge2: entered promiscuous mode [ 686.071338][ T7802] sn9c2028 5-1:220.144: probe with driver sn9c2028 failed with error -71 [ 686.108714][ T7802] usb 5-1: USB disconnect, device number 83 [ 686.262835][T13390] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2091'. [ 686.601777][T13393] netlink: 'syz.3.2092': attribute type 39 has an invalid length. [ 686.912938][ T7788] usb 2-1: USB disconnect, device number 81 [ 687.472374][T13405] syzkaller1: entered promiscuous mode [ 687.477928][T13405] syzkaller1: entered allmulticast mode [ 687.942153][T13410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 688.000633][T13418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 688.128782][T13410] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2097'. [ 688.505734][T13431] netlink: 'syz.4.2105': attribute type 39 has an invalid length. [ 688.647125][T13435] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2106'. [ 688.744840][T13437] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2106'. [ 690.171067][ T29] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 690.335168][ T29] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 690.342996][ T29] usb 3-1: can't read configurations, error -61 [ 690.388525][T13458] syzkaller1: entered promiscuous mode [ 690.399056][T13458] syzkaller1: entered allmulticast mode [ 690.471198][ T29] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 690.635894][ T29] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 690.664544][ T29] usb 3-1: can't read configurations, error -61 [ 690.679058][ T29] usb usb3-port1: attempt power cycle [ 690.729590][T13469] netlink: 'syz.4.2115': attribute type 1 has an invalid length. [ 690.741740][T13467] netlink: 'syz.1.2116': attribute type 39 has an invalid length. [ 690.806649][T13475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2115'. [ 690.912078][T13476] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2115'. [ 691.043775][ T29] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 691.086804][ T29] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 691.096513][ T29] usb 3-1: can't read configurations, error -61 [ 691.270096][T13486] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 691.280380][ T29] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 691.308903][ T29] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 691.348438][ T29] usb 3-1: can't read configurations, error -61 [ 691.390735][ T29] usb usb3-port1: unable to enumerate USB device [ 691.708821][T13497] IPv6: Can't replace route, no match found [ 692.318105][T13505] tipc: Started in network mode [ 692.330700][T13505] tipc: Node identity ba62a56b3a26, cluster identity 4711 [ 692.349277][T13505] tipc: Enabled bearer , priority 0 [ 692.364196][T13505] syzkaller0: entered promiscuous mode [ 692.372917][T13505] syzkaller0: entered allmulticast mode [ 692.422318][T13505] tipc: Resetting bearer [ 692.460384][T13504] tipc: Resetting bearer [ 692.611959][T13504] tipc: Disabling bearer [ 693.874982][T13519] netlink: 'syz.2.2128': attribute type 39 has an invalid length. [ 694.225378][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 694.225399][ T30] audit: type=1326 audit(1772415861.133:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13522 comm="syz.1.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b84d9c799 code=0x7ffc0000 [ 694.308041][ T30] audit: type=1326 audit(1772415861.163:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13522 comm="syz.1.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b84d9c799 code=0x7ffc0000 [ 694.349477][T13521] syzkaller1: entered promiscuous mode [ 694.357496][T13521] syzkaller1: entered allmulticast mode [ 694.438756][T13528] tipc: Resetting bearer [ 694.447015][ T30] audit: type=1326 audit(1772415861.163:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13522 comm="syz.1.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b84d9c799 code=0x7ffc0000 [ 694.495242][ T30] audit: type=1326 audit(1772415861.163:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13522 comm="syz.1.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f7b84d9c799 code=0x7ffc0000 [ 694.617301][ T30] audit: type=1326 audit(1772415861.163:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13522 comm="syz.1.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b84d9c799 code=0x7ffc0000 [ 694.676760][ T30] audit: type=1326 audit(1772415861.243:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13522 comm="syz.1.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b84d9c799 code=0x7ffc0000 [ 694.700232][ T30] audit: type=1326 audit(1772415861.243:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13522 comm="syz.1.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7b84d9c502 code=0x7ffc0000 [ 694.736102][ T30] audit: type=1326 audit(1772415861.243:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13522 comm="syz.1.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f7b84d9c597 code=0x7ffc0000 [ 694.759211][ T30] audit: type=1326 audit(1772415861.253:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13522 comm="syz.1.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f7b84d59491 code=0x7ffc0000 [ 694.814137][T13535] input: syz0 as /devices/virtual/input/input58 [ 694.866331][ T30] audit: type=1326 audit(1772415861.253:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13522 comm="syz.1.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f7b84d9d589 code=0x7ffc0000 [ 695.081094][ T7788] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 695.250998][ T7788] usb 5-1: Using ep0 maxpacket: 16 [ 695.266447][ T7788] usb 5-1: New USB device found, idVendor=0e41, idProduct=4248, bcdDevice= 0.40 [ 695.277026][ T7788] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.321541][ T7788] usb 5-1: Product: syz [ 695.343880][ T7788] usb 5-1: Manufacturer: syz [ 695.373677][ T7788] usb 5-1: SerialNumber: syz [ 695.620318][ T7788] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 695.637315][ T7788] usb 5-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 695.658279][ T7788] usb 5-1: 2:1 : sample bitwidth 14 in over sample bytes 1 [ 695.676710][ T7788] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 695.727394][ T7788] usb 5-1: USB disconnect, device number 84 [ 695.799321][ T5836] udevd[5836]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 695.986522][T13553] netlink: 'syz.0.2139': attribute type 39 has an invalid length. [ 696.216808][T13564] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2143'. [ 696.233297][T13564] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2143'. [ 697.274403][T13571] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 697.304414][T13571] bond6: (slave lo): Enslaving as an active interface with an up link [ 697.348430][T13571] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 697.581071][T13577] syzkaller0: entered promiscuous mode [ 697.586583][T13577] syzkaller0: entered allmulticast mode [ 698.041029][ T7802] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 698.191066][ T7802] usb 4-1: Using ep0 maxpacket: 32 [ 698.201563][ T7802] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 698.223441][ T7802] usb 4-1: config 0 has no interface number 0 [ 698.229603][ T7802] usb 4-1: config 0 interface 184 has no altsetting 0 [ 698.250785][ T7802] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 698.272984][ T7802] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.306213][ T7802] usb 4-1: Product: syz [ 698.310448][ T7802] usb 4-1: Manufacturer: syz [ 698.323222][ T7802] usb 4-1: SerialNumber: syz [ 698.374608][ T7802] usb 4-1: config 0 descriptor?? [ 698.421089][ T29] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 698.571062][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 698.586671][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 698.713611][ T29] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 698.777179][ T29] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 698.868081][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.955718][ T29] usb 5-1: Product: syz [ 698.964585][ T29] usb 5-1: Manufacturer: syz [ 698.969355][ T29] usb 5-1: SerialNumber: syz [ 698.983071][ T29] usb 5-1: config 0 descriptor?? [ 699.035887][T13582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.051059][ T7792] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 699.059278][T13582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.216959][ T7792] usb 3-1: too many endpoints for config 4 interface 0 altsetting 0: 79, using maximum allowed: 30 [ 699.229457][ T7792] usb 3-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x32, changing to 0x2 [ 699.265954][ T7792] usb 3-1: config 4 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 91 [ 699.358930][ T7792] usb 3-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 79 [ 699.389569][ T7792] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 699.411062][ T7792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.468626][T13590] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 699.592103][ T7802] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 699.603055][ T7802] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 699.624244][ T7802] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 699.651102][ T7802] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 699.660826][ T7802] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 699.682134][ T7802] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 699.762352][ T7802] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 700.552253][ T7792] ath6kl: Failed to submit usb control message: -110 [ 700.566580][ T7802] usb 4-1: USB disconnect, device number 55 [ 700.578378][ T7792] ath6kl: unable to send the bmi data to the device: -110 [ 700.600904][ T7792] ath6kl: Unable to send get target info: -110 [ 700.627571][T13602] netlink: 'syz.0.2152': attribute type 39 has an invalid length. [ 700.637642][ T7792] ath6kl: Failed to init ath6kl core: -110 [ 700.653626][ T7792] ath6kl_usb 3-1:4.0: probe with driver ath6kl_usb failed with error -110 [ 700.770045][T13604] netlink: 'syz.3.2154': attribute type 10 has an invalid length. [ 700.925731][T13608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2155'. [ 700.980714][ T7792] usb 3-1: USB disconnect, device number 79 [ 701.065497][T13608] 8021q: adding VLAN 0 to HW filter on device bond5 [ 701.100541][ T7802] usb 5-1: USB disconnect, device number 85 [ 701.424126][T13626] syzkaller1: entered promiscuous mode [ 701.429667][T13626] syzkaller1: entered allmulticast mode [ 701.668364][T13633] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2163'. [ 701.750347][T13635] netlink: 'syz.0.2165': attribute type 39 has an invalid length. [ 701.841182][ T7792] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 702.046190][ T7792] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 702.061032][ T7792] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 702.131276][ T7792] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 702.144513][ T7792] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 702.209742][ T7792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.229729][ T7792] usb 2-1: config 0 descriptor?? [ 702.885549][ T7792] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 702.985739][T13652] bond0: (slave veth0_to_hsr): Enslaving as an active interface with an up link [ 703.461493][T13632] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2164'. [ 703.470514][T13632] A link change request failed with some changes committed already. Interface vxcan1 may have been left with an inconsistent configuration, please check. [ 703.539208][ T29] usb 2-1: USB disconnect, device number 82 [ 703.660723][T13653] fido_id[13653]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 704.151155][T13659] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.41.0.0 [ 704.158110][T13659] PKCS7: Only support pkcs7_signedData type [ 704.979439][ T29] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 705.015605][T13680] netlink: 'syz.0.2176': attribute type 39 has an invalid length. [ 705.165549][ T29] usb 4-1: too many endpoints for config 4 interface 0 altsetting 0: 79, using maximum allowed: 30 [ 705.181136][ T29] usb 4-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x32, changing to 0x2 [ 705.337521][ T29] usb 4-1: config 4 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 91 [ 705.410701][ T29] usb 4-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 79 [ 705.454535][ T29] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 705.496655][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.655769][T13673] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 706.188336][T13698] sctp: [Deprecated]: syz.4.2180 (pid 13698) Use of int in maxseg socket option. [ 706.188336][T13698] Use struct sctp_assoc_value instead [ 706.487915][T13704] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2182'. [ 706.781388][ T29] ath6kl: Failed to submit usb control message: -110 [ 706.804886][ T29] ath6kl: unable to send the bmi data to the device: -110 [ 706.824128][ T29] ath6kl: Unable to send get target info: -110 [ 706.846259][ T29] ath6kl: Failed to init ath6kl core: -110 [ 706.879698][ T29] ath6kl_usb 4-1:4.0: probe with driver ath6kl_usb failed with error -110 [ 706.941206][ T7792] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 707.132993][ T7792] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 707.152380][ T7792] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 707.176393][ T7792] usb 5-1: config 1 has no interface number 1 [ 707.206730][ T7792] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 707.236667][ T7792] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 707.277590][ T7792] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 707.313566][ T7792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.335772][ T7792] usb 5-1: Product: syz [ 707.349830][ T7792] usb 5-1: Manufacturer: syz [ 707.367347][ T7792] usb 5-1: SerialNumber: syz [ 707.604901][ T7792] usb 5-1: 2:1 : invalid UAC_AS_GENERAL desc [ 707.721429][ T7788] usb 2-1: new full-speed USB device number 83 using dummy_hcd [ 707.736343][ T7792] usb 5-1: USB disconnect, device number 86 [ 707.784257][ T5836] udevd[5836]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 707.838167][T13715] netlink: 'syz.2.2187': attribute type 39 has an invalid length. [ 707.904387][ T7788] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 707.921583][ T7787] usb 4-1: USB disconnect, device number 56 [ 707.946474][ T7788] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 707.962911][ T7788] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 707.973286][ T7788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.001682][ T7788] usb 2-1: config 0 descriptor?? [ 708.020696][ T7788] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 708.049125][ T7788] dvb-usb: bulk message failed: -22 (3/0) [ 708.075416][ T7788] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 708.107233][ T7788] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 708.129441][ T7788] usb 2-1: media controller created [ 708.153139][ T7788] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 708.199736][T13721] FAULT_INJECTION: forcing a failure. [ 708.199736][T13721] name failslab, interval 1, probability 0, space 0, times 0 [ 708.205066][ T7788] dvb-usb: bulk message failed: -22 (6/0) [ 708.242899][T13721] CPU: 1 UID: 0 PID: 13721 Comm: syz.2.2190 Tainted: G L syzkaller #0 PREEMPT(full) [ 708.242934][T13721] Tainted: [L]=SOFTLOCKUP [ 708.242942][T13721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 708.242954][T13721] Call Trace: [ 708.242962][T13721] [ 708.242970][T13721] dump_stack_lvl+0xe8/0x150 [ 708.243008][T13721] should_fail_ex+0x412/0x560 [ 708.243042][T13721] should_failslab+0xa8/0x100 [ 708.243070][T13721] __kmalloc_cache_noprof+0x88/0x660 [ 708.243094][T13721] ? rtnl_newlink+0x136/0x1be0 [ 708.243246][T13721] rtnl_newlink+0x136/0x1be0 [ 708.243274][T13721] ? unwind_next_frame+0xa5/0x23c0 [ 708.243323][T13721] ? __pfx_rtnl_newlink+0x10/0x10 [ 708.243358][T13721] ? __lock_acquire+0x6b5/0x2cf0 [ 708.243391][T13721] ? __lock_acquire+0x6b5/0x2cf0 [ 708.243418][T13721] ? __lock_acquire+0x6b5/0x2cf0 [ 708.243454][T13721] ? unwind_next_frame+0xa5/0x23c0 [ 708.243513][T13721] ? __lock_acquire+0x6b5/0x2cf0 [ 708.243542][T13721] ? is_bpf_text_address+0x26/0x2b0 [ 708.243567][T13721] ? kernel_text_address+0xa5/0xe0 [ 708.243624][T13721] ? __pfx_rtnl_newlink+0x10/0x10 [ 708.243649][T13721] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 708.243680][T13721] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 708.243704][T13721] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 708.243734][T13721] ? __lock_acquire+0x6b5/0x2cf0 [ 708.243769][T13721] netlink_rcv_skb+0x232/0x4b0 [ 708.243796][T13721] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 708.243824][T13721] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 708.243860][T13721] ? netlink_deliver_tap+0x2e/0x1b0 [ 708.243892][T13721] netlink_unicast+0x80f/0x9b0 [ 708.243924][T13721] ? __pfx_netlink_unicast+0x10/0x10 [ 708.243948][T13721] ? netlink_sendmsg+0x650/0xb40 [ 708.243971][T13721] ? skb_put+0x11b/0x210 [ 708.244003][T13721] netlink_sendmsg+0x813/0xb40 [ 708.244037][T13721] ? __pfx_netlink_sendmsg+0x10/0x10 [ 708.244066][T13721] ? aa_sock_msg_perm+0xf1/0x1b0 [ 708.244095][T13721] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 708.244120][T13721] ? __pfx_netlink_sendmsg+0x10/0x10 [ 708.244144][T13721] ____sys_sendmsg+0xa68/0xad0 [ 708.244183][T13721] ? __pfx_____sys_sendmsg+0x10/0x10 [ 708.244222][T13721] ? import_iovec+0x73/0xa0 [ 708.244256][T13721] ___sys_sendmsg+0x2a5/0x360 [ 708.244318][T13721] ? __pfx____sys_sendmsg+0x10/0x10 [ 708.244383][T13721] ? __fget_files+0x2a/0x420 [ 708.244412][T13721] ? __fget_files+0x3a0/0x420 [ 708.244451][T13721] __x64_sys_sendmsg+0x1bd/0x2a0 [ 708.244483][T13721] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 708.244554][T13721] ? __pfx_ksys_write+0x10/0x10 [ 708.244589][T13721] do_syscall_64+0x14d/0xf80 [ 708.244608][T13721] ? trace_irq_disable+0x3b/0x150 [ 708.244637][T13721] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.244658][T13721] ? clear_bhb_loop+0x40/0x90 [ 708.244683][T13721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.244703][T13721] RIP: 0033:0x7f1be959c799 [ 708.244725][T13721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 708.244744][T13721] RSP: 002b:00007f1bea44e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 708.244768][T13721] RAX: ffffffffffffffda RBX: 00007f1be9815fa0 RCX: 00007f1be959c799 [ 708.244784][T13721] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000008 [ 708.244797][T13721] RBP: 00007f1bea44e090 R08: 0000000000000000 R09: 0000000000000000 [ 708.244810][T13721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 708.244822][T13721] R13: 00007f1be9816038 R14: 00007f1be9815fa0 R15: 00007f1be993fa48 [ 708.244855][T13721] [ 708.598997][ T7788] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 708.656440][ T7788] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input59 [ 708.677155][T13723] SET target dimension over the limit! [ 708.686856][T13723] netdevsim netdevsim3: Direct firmware load for / [ 708.686856][T13723] failed with error -2 [ 708.697766][T13723] netdevsim netdevsim3: Falling back to sysfs fallback for: / [ 708.697766][T13723] [ 708.747884][ T7788] dvb-usb: schedule remote query interval to 150 msecs. [ 708.772495][ T7788] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 708.805734][ T7788] usb 2-1: USB disconnect, device number 83 [ 708.886678][ T7788] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 709.120791][T13734] FAULT_INJECTION: forcing a failure. [ 709.120791][T13734] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 709.190351][T13734] CPU: 1 UID: 0 PID: 13734 Comm: syz.1.2195 Tainted: G L syzkaller #0 PREEMPT(full) [ 709.190386][T13734] Tainted: [L]=SOFTLOCKUP [ 709.190395][T13734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 709.190407][T13734] Call Trace: [ 709.190416][T13734] [ 709.190426][T13734] dump_stack_lvl+0xe8/0x150 [ 709.190460][T13734] should_fail_ex+0x412/0x560 [ 709.190492][T13734] _copy_to_user+0x31/0xb0 [ 709.190526][T13734] simple_read_from_buffer+0xe1/0x170 [ 709.190560][T13734] proc_fail_nth_read+0x1bb/0x230 [ 709.190594][T13734] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 709.190626][T13734] ? rw_verify_area+0x2a6/0x4d0 [ 709.190647][T13734] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 709.190679][T13734] vfs_read+0x20c/0xa70 [ 709.190698][T13734] ? fdget_pos+0x246/0x320 [ 709.190733][T13734] ? __pfx___mutex_lock+0x10/0x10 [ 709.190756][T13734] ? __pfx_vfs_read+0x10/0x10 [ 709.190777][T13734] ? __fget_files+0x2a/0x420 [ 709.190811][T13734] ? __fget_files+0x3a0/0x420 [ 709.190839][T13734] ? __fget_files+0x2a/0x420 [ 709.190877][T13734] ksys_read+0x150/0x270 [ 709.190906][T13734] ? __pfx_ksys_read+0x10/0x10 [ 709.190936][T13734] do_syscall_64+0x14d/0xf80 [ 709.190955][T13734] ? trace_irq_disable+0x3b/0x150 [ 709.190983][T13734] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.191005][T13734] ? clear_bhb_loop+0x40/0x90 [ 709.191030][T13734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.191050][T13734] RIP: 0033:0x7f7b84d5cfce [ 709.191070][T13734] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 709.191087][T13734] RSP: 002b:00007f7b85bf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 709.191109][T13734] RAX: ffffffffffffffda RBX: 00007f7b85bf66c0 RCX: 00007f7b84d5cfce [ 709.191124][T13734] RDX: 000000000000000f RSI: 00007f7b85bf60a0 RDI: 0000000000000004 [ 709.191136][T13734] RBP: 00007f7b85bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 709.191149][T13734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 709.191161][T13734] R13: 00007f7b85016038 R14: 00007f7b85015fa0 R15: 00007f7b8513fa48 [ 709.191193][T13734] [ 709.752846][T13742] netlink: 'syz.1.2198': attribute type 39 has an invalid length. [ 710.211325][ T7788] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 710.471112][ T29] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 710.471137][ T7788] usb 5-1: Using ep0 maxpacket: 16 [ 710.477665][ T7788] usb 5-1: unable to get BOS descriptor or descriptor too short [ 710.493872][ T7788] usb 5-1: config 13 has an invalid interface number: 50 but max is 0 [ 710.518546][ T7788] usb 5-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 710.570562][ T7788] usb 5-1: config 13 has no interface number 0 [ 710.608183][ T7788] usb 5-1: config 13 interface 50 altsetting 167 endpoint 0x7 has invalid wMaxPacketSize 0 [ 710.633060][T13758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2202'. [ 710.644715][ T7788] usb 5-1: config 13 interface 50 altsetting 167 bulk endpoint 0x7 has invalid maxpacket 0 [ 710.657473][ T29] usb 2-1: too many endpoints for config 4 interface 0 altsetting 0: 79, using maximum allowed: 30 [ 710.676665][ T7788] usb 5-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 710.704350][ T7788] usb 5-1: config 13 interface 50 has no altsetting 0 [ 710.720588][ T29] usb 2-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x32, changing to 0x2 [ 710.747421][ T29] usb 2-1: config 4 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 91 [ 710.781153][ T29] usb 2-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 79 [ 710.805124][ T7788] usb 5-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 710.837564][ T7788] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.857595][ T29] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 710.859631][ T7788] usb 5-1: Product: syz [ 710.899227][ T30] kauditd_printk_skb: 110 callbacks suppressed [ 710.899247][ T30] audit: type=1326 audit(1772415877.803:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13753 comm="syz.0.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe459c799 code=0x7ffc0000 [ 710.935398][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.943704][ T7788] usb 5-1: Manufacturer: syz [ 710.964039][ T7788] usb 5-1: SerialNumber: syz [ 711.008315][ T30] audit: type=1326 audit(1772415877.813:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13753 comm="syz.0.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe459c799 code=0x7ffc0000 [ 711.088519][T13748] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 711.218058][ T30] audit: type=1326 audit(1772415877.903:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13753 comm="syz.0.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f5fe459c799 code=0x7ffc0000 [ 711.335858][ T30] audit: type=1326 audit(1772415877.903:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13753 comm="syz.0.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe459c799 code=0x7ffc0000 [ 711.430990][ T30] audit: type=1326 audit(1772415877.903:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13753 comm="syz.0.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe459c799 code=0x7ffc0000 [ 711.545640][ T30] audit: type=1326 audit(1772415877.903:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13753 comm="syz.0.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5fe459c799 code=0x7ffc0000 [ 711.590049][ T30] audit: type=1326 audit(1772415877.903:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13753 comm="syz.0.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe459c799 code=0x7ffc0000 [ 711.725785][ T30] audit: type=1326 audit(1772415877.903:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13753 comm="syz.0.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe459c799 code=0x7ffc0000 [ 711.813745][ T30] audit: type=1326 audit(1772415877.903:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13753 comm="syz.0.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f5fe459c799 code=0x7ffc0000 [ 711.848636][ T30] audit: type=1326 audit(1772415877.903:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13753 comm="syz.0.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe459c799 code=0x7ffc0000 [ 712.036218][ T29] ath6kl: Failed to submit usb control message: -71 [ 712.044481][ T29] ath6kl: unable to send the bmi data to the device: -71 [ 712.059059][ T29] ath6kl: Unable to send get target info: -71 [ 712.138387][ T29] ath6kl: Failed to init ath6kl core: -71 [ 712.211652][ T29] ath6kl_usb 2-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 712.253707][ T29] usb 2-1: USB disconnect, device number 84 [ 712.786437][T13781] netlink: 'syz.2.2209': attribute type 39 has an invalid length. [ 712.883221][T13786] tipc: Resetting bearer [ 712.926633][ T7788] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 713.025551][ T7788] usb 5-1: MIDIStreaming interface descriptor not found [ 713.131492][ T7788] usb 5-1: USB disconnect, device number 87 [ 713.309373][ T6069] udevd[6069]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 713.906340][T13800] netlink: 'syz.2.2216': attribute type 1 has an invalid length. [ 714.023394][T13804] bond5: (slave geneve2): making interface the new active one [ 714.060420][T13804] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 714.079342][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 714.088450][ T7788] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 714.096360][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 714.148887][ T9412] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 714.201055][ T9412] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 714.281023][ T7788] usb 2-1: Using ep0 maxpacket: 8 [ 714.290198][ T7788] usb 2-1: unable to get BOS descriptor or descriptor too short [ 714.300208][ T7788] usb 2-1: config 4 interface 0 has no altsetting 0 [ 714.379950][ T7788] usb 2-1: string descriptor 0 read error: -22 [ 714.386683][ T7788] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 714.396442][ T7788] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 714.445580][ T7788] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 714.472623][ T7788] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 714.502964][ T7788] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 714.511508][ T7788] usb 2-1: media controller created [ 714.537356][T13808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2218'. [ 714.555019][ T7788] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 715.036604][T13822] netlink: 'syz.3.2222': attribute type 39 has an invalid length. [ 715.211976][ T29] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 715.371179][ T7802] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 715.383174][ T29] usb 3-1: too many endpoints for config 4 interface 0 altsetting 0: 79, using maximum allowed: 30 [ 715.680990][ T7802] usb 4-1: Using ep0 maxpacket: 16 [ 715.746271][ T7788] usb 2-1: USB disconnect, device number 85 [ 716.201049][ T7802] usb 4-1: config index 0 descriptor too short (expected 59, got 36) [ 716.209260][ T7802] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 716.222153][ T29] usb 3-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x32, changing to 0x2 [ 716.233715][ T29] usb 3-1: config 4 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 91 [ 716.243657][ T7802] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 716.253545][ T29] usb 3-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 79 [ 716.266663][ T7802] usb 4-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 716.275902][ T29] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 716.285103][ T7802] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.295125][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.304519][ T7802] usb 4-1: config 0 descriptor?? [ 716.329727][ T7802] usbhid 4-1:0.0: fixing wrong optional hid class descriptors count [ 716.342916][T13819] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 716.469941][T13831] tipc: Started in network mode [ 716.491068][T13831] tipc: Node identity 72a458f73d24, cluster identity 4711 [ 716.498434][T13831] tipc: Enabled bearer , priority 0 [ 716.512671][T13824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 716.529568][T13824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 716.540182][T13836] syzkaller0: entered promiscuous mode [ 716.546406][ T7802] usbhid 4-1:0.0: can't add hid device: -71 [ 716.552665][T13836] syzkaller0: entered allmulticast mode [ 716.597411][T13831] tipc: Resetting bearer [ 716.602842][ T7802] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 716.634557][ T7802] usb 4-1: USB disconnect, device number 57 [ 716.647594][T13830] tipc: Resetting bearer [ 716.711661][T13830] tipc: Disabling bearer [ 717.007228][T13846] macsec0: entered promiscuous mode [ 717.013320][T13846] macsec0: left promiscuous mode [ 717.088538][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 717.088562][ T30] audit: type=1326 audit(1772415883.993:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13847 comm="syz.0.2230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe459c799 code=0x7ffc0000 [ 717.259301][ T30] audit: type=1326 audit(1772415884.053:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13847 comm="syz.0.2230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe459c799 code=0x7ffc0000 [ 717.355396][ T30] audit: type=1326 audit(1772415884.103:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13847 comm="syz.0.2230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f5fe459c799 code=0x7ffc0000 [ 717.380345][ T30] audit: type=1326 audit(1772415884.103:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13847 comm="syz.0.2230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe459c799 code=0x7ffc0000 [ 717.410746][ T30] audit: type=1326 audit(1772415884.103:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13847 comm="syz.0.2230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe459c799 code=0x7ffc0000 [ 717.436353][ T29] ath6kl: Failed to submit usb control message: -110 [ 717.443752][ T29] ath6kl: unable to send the bmi data to the device: -110 [ 717.451977][ T29] ath6kl: Unable to send get target info: -110 [ 717.459771][ T30] audit: type=1326 audit(1772415884.113:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13847 comm="syz.0.2230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f5fe459c799 code=0x7ffc0000 [ 717.484682][ T29] ath6kl: Failed to init ath6kl core: -110 [ 717.492722][ T29] ath6kl_usb 3-1:4.0: probe with driver ath6kl_usb failed with error -110 [ 717.508218][ T30] audit: type=1326 audit(1772415884.113:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13847 comm="syz.0.2230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe459c799 code=0x7ffc0000 [ 717.538290][ T30] audit: type=1326 audit(1772415884.133:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13847 comm="syz.0.2230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe459c799 code=0x7ffc0000 [ 717.568386][ T30] audit: type=1326 audit(1772415884.133:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13847 comm="syz.0.2230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f5fe459c799 code=0x7ffc0000 [ 717.617412][ T30] audit: type=1326 audit(1772415884.133:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13847 comm="syz.0.2230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe459c799 code=0x7ffc0000 [ 717.750661][T13859] netlink: 'syz.3.2234': attribute type 39 has an invalid length. [ 718.042929][T13872] syzkaller0: entered promiscuous mode [ 718.048499][T13872] syzkaller0: entered allmulticast mode [ 718.109497][ T7792] usb 3-1: USB disconnect, device number 80 [ 718.121019][ T29] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 718.181325][T13874] libceph: resolve 'c' (ret=-3): failed [ 718.291287][ T7788] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 718.315819][ T29] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 718.349658][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 718.379824][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 718.434144][ T29] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 718.454282][ T7788] usb 5-1: Using ep0 maxpacket: 8 [ 718.459552][ T29] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 718.474150][ T7788] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 718.482538][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.508808][T13880] vlan3: entered promiscuous mode [ 718.565381][ T29] usb 4-1: config 0 descriptor?? [ 718.586840][ T7788] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 718.826593][ T7788] usb 5-1: config 0 has no interface number 0 [ 718.841071][ T7788] usb 5-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 718.861413][ T7788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.890392][ T7788] usb 5-1: config 0 descriptor?? [ 719.040710][ T29] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 719.710040][T13891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 719.762897][T13891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 719.807909][T13891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 719.917645][T13891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 720.171977][ T29] usb 4-1: USB disconnect, device number 58 [ 720.461381][T13898] syzkaller0: entered promiscuous mode [ 720.488347][T13898] syzkaller0: entered allmulticast mode [ 721.319521][T13911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2250'. [ 721.328561][T13911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2250'. [ 722.033753][ T7788] usb 5-1: USB disconnect, device number 88 [ 722.227697][ T30] kauditd_printk_skb: 305 callbacks suppressed [ 722.227719][ T30] audit: type=1326 audit(1772415889.133:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13918 comm="syz.4.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c1b9c799 code=0x7ffc0000 [ 722.287719][T13923] libceph: resolve 'c' (ret=-3): failed [ 722.362293][ T30] audit: type=1326 audit(1772415889.173:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13918 comm="syz.4.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc0c1b9c799 code=0x7ffc0000 [ 722.412743][ T30] audit: type=1326 audit(1772415889.173:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13918 comm="syz.4.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c1b9c799 code=0x7ffc0000 [ 722.435983][ T30] audit: type=1326 audit(1772415889.173:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13918 comm="syz.4.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c1b9c799 code=0x7ffc0000 [ 722.512974][ T30] audit: type=1326 audit(1772415889.173:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13918 comm="syz.4.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fc0c1b9c799 code=0x7ffc0000 [ 722.686072][ T30] audit: type=1326 audit(1772415889.173:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13918 comm="syz.4.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c1b9c799 code=0x7ffc0000 [ 722.710269][ T30] audit: type=1326 audit(1772415889.173:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13918 comm="syz.4.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fc0c1b9c799 code=0x7ffc0000 [ 722.771044][ T30] audit: type=1326 audit(1772415889.173:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13918 comm="syz.4.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c1b9c799 code=0x7ffc0000 [ 722.889264][ T30] audit: type=1326 audit(1772415889.173:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13918 comm="syz.4.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fc0c1b9c799 code=0x7ffc0000 [ 722.913325][ T30] audit: type=1326 audit(1772415889.173:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13918 comm="syz.4.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c1b9c799 code=0x7ffc0000 [ 725.320515][T13939] FAULT_INJECTION: forcing a failure. [ 725.320515][T13939] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 725.435730][T13939] CPU: 1 UID: 0 PID: 13939 Comm: syz.1.2256 Tainted: G L syzkaller #0 PREEMPT(full) [ 725.435764][T13939] Tainted: [L]=SOFTLOCKUP [ 725.435773][T13939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 725.435785][T13939] Call Trace: [ 725.435794][T13939] [ 725.435802][T13939] dump_stack_lvl+0xe8/0x150 [ 725.435837][T13939] should_fail_ex+0x412/0x560 [ 725.435867][T13939] prepare_alloc_pages+0x22a/0x650 [ 725.435900][T13939] __alloc_frozen_pages_noprof+0x12f/0x380 [ 725.435928][T13939] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 725.435957][T13939] ? __pfx_policy_nodemask+0x10/0x10 [ 725.435984][T13939] ? __lock_acquire+0x6b5/0x2cf0 [ 725.436013][T13939] alloc_pages_mpol+0x232/0x4a0 [ 725.436044][T13939] alloc_pages_noprof+0xa8/0x190 [ 725.436106][T13939] pte_alloc_one+0x23/0x370 [ 725.436134][T13939] ? __pte_alloc+0x1d/0x430 [ 725.436159][T13939] __pte_alloc+0x25/0x430 [ 725.436186][T13939] do_pte_missing+0x2e9a/0x3750 [ 725.436209][T13939] ? do_raw_spin_unlock+0xf5/0x210 [ 725.436243][T13939] handle_mm_fault+0x1bec/0x3310 [ 725.436285][T13939] ? handle_mm_fault+0xee/0x3310 [ 725.436322][T13939] ? __pfx_handle_mm_fault+0x10/0x10 [ 725.436378][T13939] ? lock_mm_and_find_vma+0xa7/0x340 [ 725.436404][T13939] do_user_addr_fault+0x75b/0x1340 [ 725.436448][T13939] exc_page_fault+0x6a/0xc0 [ 725.436482][T13939] asm_exc_page_fault+0x26/0x30 [ 725.436504][T13939] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 725.436605][T13939] Code: c4 10 e9 94 48 04 00 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e [ 725.436624][T13939] RSP: 0018:ffffc90048047a18 EFLAGS: 00050202 [ 725.436643][T13939] RAX: 00007ffffffff001 RBX: 0000000000000004 RCX: 0000000000000004 [ 725.436657][T13939] RDX: 0000000000000001 RSI: 0000200000000400 RDI: ffffc90048047ac0 [ 725.436671][T13939] RBP: ffffc90048047d58 R08: 0000000000000003 R09: 0000000000000004 [ 725.436683][T13939] R10: dffffc0000000000 R11: fffff52009008f58 R12: 00000000000003d8 [ 725.436697][T13939] R13: ffff888078ab0000 R14: ffffc90048047ac0 R15: 0000200000000400 [ 725.436730][T13939] _copy_from_user+0x7a/0xb0 [ 725.436762][T13939] do_ipv6_setsockopt+0x264/0x31c0 [ 725.436837][T13939] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 725.436868][T13939] ? kstrtouint+0x6e/0xe0 [ 725.436893][T13939] ? aa_label_sk_perm+0x532/0x6e0 [ 725.436927][T13939] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 725.436951][T13939] ? get_pid_task+0x20/0x1f0 [ 725.436971][T13939] ? get_pid_task+0x20/0x1f0 [ 725.436988][T13939] ? get_pid_task+0x20/0x1f0 [ 725.437022][T13939] ? __lock_acquire+0x6b5/0x2cf0 [ 725.437065][T13939] ? aa_sk_perm+0x6d5/0x900 [ 725.437100][T13939] ipv6_setsockopt+0x59/0x170 [ 725.437134][T13939] rawv6_setsockopt+0x276/0x5f0 [ 725.437209][T13939] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 725.437240][T13939] ? aa_sock_opt_perm+0xff/0x1a0 [ 725.437273][T13939] ? sock_common_setsockopt+0x36/0xc0 [ 725.437304][T13939] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 725.437332][T13939] do_sock_setsockopt+0x17c/0x1b0 [ 725.437367][T13939] __x64_sys_setsockopt+0x13d/0x1b0 [ 725.437403][T13939] do_syscall_64+0x14d/0xf80 [ 725.437422][T13939] ? trace_irq_disable+0x3b/0x150 [ 725.437451][T13939] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.437474][T13939] ? clear_bhb_loop+0x40/0x90 [ 725.437500][T13939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.437521][T13939] RIP: 0033:0x7f7b84d9c799 [ 725.437540][T13939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 725.437558][T13939] RSP: 002b:00007f7b85bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 725.437579][T13939] RAX: ffffffffffffffda RBX: 00007f7b85015fa0 RCX: 00007f7b84d9c799 [ 725.437595][T13939] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 725.437607][T13939] RBP: 00007f7b85bf6090 R08: 00000000000003d8 R09: 0000000000000000 [ 725.437620][T13939] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000001 [ 725.437633][T13939] R13: 00007f7b85016038 R14: 00007f7b85015fa0 R15: 00007f7b8513fa48 [ 725.437666][T13939] [ 725.882204][T13943] netlink: 'syz.3.2255': attribute type 1 has an invalid length. [ 725.942864][T13944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2255'. [ 726.280084][T13944] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2255'. [ 727.331226][ T29] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 727.410358][T13970] xt_hashlimit: size too large, truncated to 1048576 [ 727.483696][ T29] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 727.493157][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.514941][ T29] usb 2-1: config 0 descriptor?? [ 727.539787][ T29] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 728.086573][ T29] gp8psk: usb in 138 operation failed. [ 728.092233][ T29] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 728.126676][ T29] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 728.176838][ T29] usb 2-1: USB disconnect, device number 86 [ 730.291184][T14017] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2283'. [ 730.846737][ T5822] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 731.663236][T14025] hsr0: entered promiscuous mode [ 731.807273][T14010] hsr0: left promiscuous mode [ 733.894534][T14075] x_tables: duplicate underflow at hook 2 [ 734.251050][ T29] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 734.471178][ T29] usb 5-1: too many configurations: 53, using maximum allowed: 8 [ 734.604104][ T29] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 734.620975][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.644313][ T29] usb 5-1: Product: syz [ 734.648520][ T29] usb 5-1: Manufacturer: syz [ 734.661231][ T29] usb 5-1: SerialNumber: syz [ 736.053923][T14099] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2310'. [ 736.884660][ T29] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 736.904599][ T29] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 736.934960][ T29] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 736.953371][ T29] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 736.976712][ T29] usb 5-1: USB disconnect, device number 89 [ 737.301320][T14115] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 737.320982][T14112] kvm: pic: level sensitive irq not supported [ 737.326454][T14112] kvm: pic: non byte read [ 739.201394][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 739.201416][ T30] audit: type=1326 audit(1772415906.073:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14143 comm="syz.4.2328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c1b9c799 code=0x7ffc0000 [ 739.461224][ T30] audit: type=1326 audit(1772415906.073:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14143 comm="syz.4.2328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c1b9c799 code=0x7ffc0000 [ 739.544784][ T30] audit: type=1326 audit(1772415906.073:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14143 comm="syz.4.2328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fc0c1b9c799 code=0x7ffc0000 [ 739.594214][T14156] ------------[ cut here ]------------ [ 739.600132][T14156] ((d_inode(path->dentry))->i_flags & (1 << 19)) && !(path->mnt->mnt_sb->s_iflags & 0x00000002) [ 739.600156][T14156] WARNING: fs/exec.c:119 at path_noexec+0x1af/0x200, CPU#0: syz.1.2330/14156 [ 739.619600][T14156] Modules linked in: [ 739.623936][T14156] CPU: 0 UID: 0 PID: 14156 Comm: syz.1.2330 Tainted: G L syzkaller #0 PREEMPT(full) [ 739.635025][T14156] Tainted: [L]=SOFTLOCKUP [ 739.639364][T14156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 739.649581][T14156] RIP: 0010:path_noexec+0x1af/0x200 [ 739.655092][T14156] Code: 02 31 ff 48 89 de e8 20 b2 81 ff d1 eb eb 07 e8 37 ad 81 ff b3 01 89 d8 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 22 ad 81 ff 90 <0f> 0b 90 e9 48 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a6 [ 739.675045][T14156] RSP: 0018:ffffc900072f7bd8 EFLAGS: 00010287 [ 739.681232][T14156] RAX: ffffffff8243e8be RBX: ffff88807a9005c0 RCX: 0000000000080000 [ 739.689252][T14156] RDX: ffffc90003fb9000 RSI: 0000000000000068 RDI: 0000000000000069 [ 739.697323][T14156] RBP: 0000000000080000 R08: ffff888028500000 R09: 0000000000000003 [ 739.705830][T14156] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000001 [ 739.714025][T14156] R13: 1ffff92000e5ef90 R14: 0000000000000000 R15: dffffc0000000000 [ 739.722157][T14156] FS: 00007f7b85bf66c0(0000) GS:ffff888125464000(0000) knlGS:0000000000000000 [ 739.731247][T14156] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 739.737900][T14156] CR2: 000000110c3b346e CR3: 000000009eacc000 CR4: 00000000003526f0 [ 739.745949][T14156] DR0: 0000000040000005 DR1: 0000000100000000 DR2: 0000000000000898 [ 739.754061][T14156] DR3: 0000000000000006 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 739.762246][T14156] Call Trace: [ 739.765568][T14156] [ 739.768578][T14156] do_mmap+0xa32/0x10c0 [ 739.772852][T14156] ? __pfx_do_mmap+0x10/0x10 [ 739.777497][T14156] ? down_write_killable+0x180/0x240 [ 739.782927][T14156] ? __pfx_down_write_killable+0x10/0x10 [ 739.788607][T14156] ? apparmor_mmap_file+0x2da/0x3e0 [ 739.793977][T14156] vm_mmap_pgoff+0x2c9/0x4f0 [ 739.798665][T14156] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 739.803890][T14156] ? __fget_files+0x2a/0x420 [ 739.808552][T14156] ? __fget_files+0x3a0/0x420 [ 739.809557][ T30] audit: type=1326 audit(1772415906.073:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14143 comm="syz.4.2328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c1b9c799 code=0x7ffc0000 [ 739.813358][T14156] ? __fget_files+0x2a/0x420 [ 739.840839][T14156] ksys_mmap_pgoff+0x51e/0x760 [ 739.845731][T14156] do_syscall_64+0x14d/0xf80 [ 739.850413][T14156] ? trace_irq_disable+0x3b/0x150 [ 739.855566][T14156] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.861707][T14156] ? clear_bhb_loop+0x40/0x90 [ 739.866459][T14156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.872412][T14156] RIP: 0033:0x7f7b84d9c799 [ 739.876845][T14156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 739.896583][T14156] RSP: 002b:00007f7b85bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 739.905162][T14156] RAX: ffffffffffffffda RBX: 00007f7b85015fa0 RCX: 00007f7b84d9c799 [ 739.913241][T14156] RDX: 0000000003000007 RSI: 0000000000003000 RDI: 0000200000000000 [ 739.921310][T14156] RBP: 00007f7b84e32bd9 R08: 0000000000000005 R09: 0000000000000000 [ 739.929342][T14156] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 739.937423][T14156] R13: 00007f7b85016038 R14: 00007f7b85015fa0 R15: 00007f7b8513fa48 [ 739.945498][T14156] [ 739.948582][T14156] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 739.955892][T14156] CPU: 0 UID: 0 PID: 14156 Comm: syz.1.2330 Tainted: G L syzkaller #0 PREEMPT(full) [ 739.966844][T14156] Tainted: [L]=SOFTLOCKUP [ 739.971179][T14156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 739.981262][T14156] Call Trace: [ 739.984568][T14156] [ 739.987512][T14156] vpanic+0x56c/0xa60 [ 739.991541][T14156] ? __pfx__printk+0x10/0x10 [ 739.996141][T14156] ? __pfx_vpanic+0x10/0x10 [ 740.000683][T14156] ? is_bpf_text_address+0x292/0x2b0 [ 740.005989][T14156] ? is_bpf_text_address+0x26/0x2b0 [ 740.011215][T14156] panic+0xc5/0xd0 [ 740.014980][T14156] ? __pfx_panic+0x10/0x10 [ 740.019445][T14156] __warn+0x315/0x4f0 [ 740.023506][T14156] ? path_noexec+0x1af/0x200 [ 740.028117][T14156] ? path_noexec+0x1af/0x200 [ 740.032732][T14156] __report_bug+0x29a/0x540 [ 740.037385][T14156] ? path_noexec+0x1af/0x200 [ 740.041998][T14156] ? __pfx___report_bug+0x10/0x10 [ 740.047042][T14156] ? futex_unqueue+0x211/0x240 [ 740.051847][T14156] ? arch_get_unmapped_area_topdown+0x264/0xb60 [ 740.058129][T14156] ? path_noexec+0x1af/0x200 [ 740.062746][T14156] report_bug+0x16a/0x220 [ 740.067100][T14156] ? path_noexec+0x1af/0x200 [ 740.071710][T14156] ? path_noexec+0x1b1/0x200 [ 740.076329][T14156] handle_bug+0x9c/0x200 [ 740.080620][T14156] exc_invalid_op+0x1a/0x50 [ 740.085192][T14156] asm_exc_invalid_op+0x1a/0x20 [ 740.090062][T14156] RIP: 0010:path_noexec+0x1af/0x200 [ 740.095284][T14156] Code: 02 31 ff 48 89 de e8 20 b2 81 ff d1 eb eb 07 e8 37 ad 81 ff b3 01 89 d8 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 22 ad 81 ff 90 <0f> 0b 90 e9 48 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a6 [ 740.114904][T14156] RSP: 0018:ffffc900072f7bd8 EFLAGS: 00010287 [ 740.120995][T14156] RAX: ffffffff8243e8be RBX: ffff88807a9005c0 RCX: 0000000000080000 [ 740.128991][T14156] RDX: ffffc90003fb9000 RSI: 0000000000000068 RDI: 0000000000000069 [ 740.136983][T14156] RBP: 0000000000080000 R08: ffff888028500000 R09: 0000000000000003 [ 740.145049][T14156] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000001 [ 740.153036][T14156] R13: 1ffff92000e5ef90 R14: 0000000000000000 R15: dffffc0000000000 [ 740.161229][T14156] ? path_noexec+0x1ae/0x200 [ 740.166056][T14156] ? path_noexec+0x1ae/0x200 [ 740.170676][T14156] do_mmap+0xa32/0x10c0 [ 740.174864][T14156] ? __pfx_do_mmap+0x10/0x10 [ 740.179481][T14156] ? down_write_killable+0x180/0x240 [ 740.184790][T14156] ? __pfx_down_write_killable+0x10/0x10 [ 740.190435][T14156] ? apparmor_mmap_file+0x2da/0x3e0 [ 740.195647][T14156] vm_mmap_pgoff+0x2c9/0x4f0 [ 740.200267][T14156] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 740.205399][T14156] ? __fget_files+0x2a/0x420 [ 740.210016][T14156] ? __fget_files+0x3a0/0x420 [ 740.214734][T14156] ? __fget_files+0x2a/0x420 [ 740.219347][T14156] ksys_mmap_pgoff+0x51e/0x760 [ 740.224139][T14156] do_syscall_64+0x14d/0xf80 [ 740.228749][T14156] ? trace_irq_disable+0x3b/0x150 [ 740.233819][T14156] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.239895][T14156] ? clear_bhb_loop+0x40/0x90 [ 740.244592][T14156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.250496][T14156] RIP: 0033:0x7f7b84d9c799 [ 740.254922][T14156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 740.274548][T14156] RSP: 002b:00007f7b85bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 740.282982][T14156] RAX: ffffffffffffffda RBX: 00007f7b85015fa0 RCX: 00007f7b84d9c799 [ 740.290984][T14156] RDX: 0000000003000007 RSI: 0000000000003000 RDI: 0000200000000000 [ 740.299003][T14156] RBP: 00007f7b84e32bd9 R08: 0000000000000005 R09: 0000000000000000 [ 740.307017][T14156] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 740.315007][T14156] R13: 00007f7b85016038 R14: 00007f7b85015fa0 R15: 00007f7b8513fa48 [ 740.323008][T14156] [ 740.326229][T14156] Kernel Offset: disabled [ 740.330566][T14156] Rebooting in 86400 seconds..