last executing test programs: 10m21.175928361s ago: executing program 32 (id=354): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x6009, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, "", [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x6, 0xb, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xdf, 0x8, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffb8c5, 0xaf91, 0x8000000000000001}) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0xb75, @local, 0x9}, 0x1c) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="000628"], 0x0, 0x0, 0x0, 0x0}, 0x0) 9m48.478705509s ago: executing program 33 (id=450): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) (async) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000000)=@e={0xff, 0xb, 0x0, 0x84, @SEQ_CONTROLLER=0xfe, 0x7, 0xc, 0x1}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) (async) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x1c, r3, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000000c0), &(0x7f0000000100)=0xc) (async) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000180)={r6, @in6={{0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x1e}, 0xbc29}}, 0xfffe, 0x5}, 0x90) mount(&(0x7f0000000300)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000140)='exfat\x00', 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000280)=0x0) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000240)=@nbd={'/dev/nbd', 0x0}, r7, &(0x7f00000002c0)) (async) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000240)=@nbd={'/dev/nbd', 0x0}, r7, &(0x7f00000002c0)) 9m14.415745583s ago: executing program 34 (id=551): r0 = socket$inet(0x2, 0x80000, 0x6) recvmmsg(r0, &(0x7f0000006380)=[{{&(0x7f0000000180)=@qipcrtr, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000280)=""/174, 0xae}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f00000004c0)=""/232, 0xe8}, {&(0x7f0000000600)=""/243, 0xf3}, {&(0x7f0000000700)=""/108, 0x6c}, {&(0x7f0000000780)=""/1, 0x1}], 0x7, &(0x7f0000000840)=""/93, 0x5d}, 0x800}, {{&(0x7f00000008c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000940)=""/28, 0x1c}, {&(0x7f0000000980)=""/73, 0x49}], 0x2, &(0x7f0000000a40)=""/4, 0x4}, 0x6}, {{&(0x7f0000000a80)=@alg, 0x80, &(0x7f0000001f40)=[{&(0x7f0000000b00)=""/50, 0x32}, {&(0x7f0000000b40)=""/163, 0xa3}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/125, 0x7d}, {&(0x7f00000022c0)=""/88, 0x58}, {&(0x7f0000001d00)=""/235, 0xeb}, {&(0x7f0000001e00)=""/21, 0x15}, {&(0x7f0000001e40)=""/69, 0x45}, {&(0x7f0000001ec0)=""/36, 0x24}, {&(0x7f0000001f00)=""/60, 0x3c}], 0xa}, 0x4}, {{&(0x7f0000002000)=@nl, 0x80, &(0x7f0000002600)=[{&(0x7f0000002080)=""/236, 0xec}, {&(0x7f0000002180)=""/49, 0x31}, {&(0x7f00000021c0)=""/234, 0xea}, {&(0x7f0000006300)=""/118, 0x76}, {&(0x7f0000002340)=""/181, 0xb5}, {&(0x7f0000002400)=""/97, 0x61}, {&(0x7f0000002480)=""/224, 0xe0}, {&(0x7f0000002580)=""/83, 0x53}], 0x8}, 0x7}, {{&(0x7f0000002680)=@phonet, 0x80, &(0x7f0000003d80)=[{&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000003ec0)=""/217, 0xd9}, {&(0x7f0000003800)=""/53, 0x35}, {&(0x7f0000003840)=""/200, 0xc8}, {&(0x7f0000003940)=""/249, 0xf9}, {&(0x7f0000003a40)=""/249, 0xf9}, {&(0x7f0000003700)=""/176, 0xb0}, {&(0x7f0000003c00)=""/139, 0x8b}, {&(0x7f0000003cc0)=""/184, 0xb8}], 0x9, &(0x7f0000003e40)=""/67, 0x43}, 0x8}], 0x5, 0x141, &(0x7f0000004000)={0x77359400}) syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x300, 0x1200, 0x0, 0x3) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_dev$evdev(0x0, 0x7, 0x28902) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r2, 0x8b2c, &(0x7f0000000040)) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40) getsockopt(0xffffffffffffffff, 0x6b, 0xe0e, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$describe(0x6, r3, 0x0, 0xffffffffffffff87) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40000000e, 0x2) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r6 = add_key(&(0x7f0000000200)='encrypted\x00', &(0x7f0000004040)={'syz', 0x2}, 0x0, 0x0, r3) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000004080)={r6, 0x7a, 0x6b}, &(0x7f00000040c0)={'enc=', 'raw', ' hash=', {'nhpoly1305-sse2\x00'}}, &(0x7f0000004140)="402743852b7b818de477709c5fc5fee74fadececc2c80df84450ac35a1bbe92e6f93ec6d9280446bad4c2508a2a9c5a2c3eb69b8c981bd5a09991de3d69a1ac2d1a3a4b6733ecc2bfa945ce0e2e95785faca92d69094925b7be6f4731cc7a7578cdf4e230544105e2d809540508957b5577e9f140df30079eb5e", &(0x7f00000041c0)=""/107) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r9, 0xffffffffffffffff}) close_range(r5, r7, 0x0) poll(&(0x7f0000000380)=[{r10, 0x10}], 0x1, 0x5) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000000)={0x49, 0x2, 0x8, "4649f6441214bdf0c12f00007f9d0000310fa1450c000079c07cb500", 0x30364d54}) add_key(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)="d496dafd84f2a28fafc403a1498572f273feace27da82d0fc83f0797ee05e6c9aa0467dd4c11ffd1ae82229b6152821d6edacc342c8672c2d7b1bc26428058cc521ec99460", 0x45, r3) read$FUSE(r1, &(0x7f0000004240)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000006280)={0x50, 0x0, r11, {0x7, 0x2d, 0x3, 0x1000, 0x9e, 0x8, 0x0, 0x5, 0x0, 0x0, 0x2, 0x8}}, 0x50) 7m52.681339163s ago: executing program 2 (id=973): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mmap(&(0x7f0000030000/0x3000)=nil, 0x3000, 0x5, 0x6b35e9d94325c671, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r0, 0x4001000000, 0x0) 7m52.419510406s ago: executing program 2 (id=976): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000007, 0x40032, 0xffffffffffffffff, 0x40000000) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) vmsplice(r0, &(0x7f0000001b80)=[{&(0x7f00000020c0)='+', 0x1}], 0x1, 0x0) madvise(&(0x7f00001c2000/0x2000)=nil, 0x2000, 0x64) 7m52.358189822s ago: executing program 2 (id=978): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x4, @empty, 0x3}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001"], 0x190) 7m52.25504294s ago: executing program 2 (id=979): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400)='fusectl\x00', 0x800, 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 7m52.21153573s ago: executing program 2 (id=980): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@int=0x3ff, 0x4) 7m51.18937679s ago: executing program 2 (id=995): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000080)={0x100000000, 0x3}) close(0x5) 7m50.899462797s ago: executing program 35 (id=995): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000080)={0x100000000, 0x3}) close(0x5) 7m37.14855005s ago: executing program 6 (id=1068): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0) 7m36.967239303s ago: executing program 6 (id=1070): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @private0}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x3c) 7m36.741220316s ago: executing program 6 (id=1071): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$RTC_AIE_OFF(r0, 0x7002) 7m36.296355445s ago: executing program 6 (id=1073): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x200) 7m36.136276347s ago: executing program 6 (id=1074): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010100}}, 0x3, 0xeffc}, &(0x7f0000000080)=0x90) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r1, 0x84, 0x84, &(0x7f0000000080)=""/4096, &(0x7f0000001200)=0x1000) 7m34.256959903s ago: executing program 6 (id=1092): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000040)={0x3, 0xfffffffe}) 7m33.628202168s ago: executing program 36 (id=1092): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000040)={0x3, 0xfffffffe}) 7m20.982897039s ago: executing program 4 (id=1163): r0 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'bond0\x00', &(0x7f0000000100)=@ethtool_eeprom={0x43, 0xffffffff, 0x20000000}}) 7m20.870962037s ago: executing program 4 (id=1165): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001300010026bd7000fcdbdf25010000000800010003"], 0x1c}, 0x1, 0x0, 0x0, 0x14004800}, 0x400c8c0) 7m20.73773043s ago: executing program 4 (id=1167): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) close(r0) 7m20.609976735s ago: executing program 4 (id=1169): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x9) write(r1, &(0x7f0000000180)="a788b9a48d1de6603c475fe3cfa8a27d7c8425073f756d1cefddc08a6dd4c4c0a5323f8f93d65682bc4974397001a396624e1bd23560952dee5736311e3d06e60f168e59f8a3125595ff42643b55d9addf2ea3fa011611a8c539558baf2581e9a8b722f2108f58cb3d552779ea51ba9462992a9156243c50c162d06280d116e26d280aacfb494b66c66bb4df665381440690afc4854f4a19db6357a3e57802de79c221ae7c5171faa19b3dc84934b452b1c81e98bf2eaeedca4e6cce792c6e01c592688acaefe150f0ffd163d3d54d4318b5df03be5916dd0fc3cbb297cc1cda81fbc3cc8c552216b48289eb4065a84e76d035c469ed7f879f1d522715f615d3d9b4e7b270b25837894d7609819a02fd202762975b2bf49910e57aea28e3632353f29711d460d5e85c5881f265e2372722654532bfb30b7ee54d40cafe09c96e65a6304a570ea8069fa0649f1bd6cbe5b2d8e42fa0ab835b4eae46e983df2fefa0b5e5bec1594ba024b6acef03fc561a86959e3b928c552b39845621b549746ea4157b0d4b72855c0d7f7578474c456a888a7b60a6e73a57bbccc733319619c140728332ae5d4c3a2c949741dd9950774fddd896ad9ca2d190176537eccee02958a68c4eb26384721bf0f3902387902a0e1fc7ce3d1b92291a1da43f29ac9ccccc5224909627819dae861ad9a80bb145e161851017f6967c4d6786df994c99cfd14eeec8a906f919196bf4fe42ba78c1e7c9559a32104562180e23b6bd02556d324d210c05d4c11b375b9a496f245670f1390341c533ed70b927ac87b14dded63dec46c80949c44b344e897deda9c96485a6fdcbfb6a81fa1f06548b62d6e4726d6c7c724c860cc0a3ae911692255cac73c6bd24332f763b7ee4411ac4c7bdfb4dc5243111e80e1275adbec72259dfd7bdbfe8b16ee19f73b444b094b64d33558116e37404b83ccf56fd3002880b44f9f0e46d8549bf061274812047665f83f82f71d0e8260668e026b7914f89a66342c38337e372efb345d4eb5273613a69fd5318cbc21788825895cffd0a93aaf0a25c7c17aadfe0415d00062aff52abea2b08", 0x301) 7m20.395072146s ago: executing program 4 (id=1170): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r1, &(0x7f0000001700)=[{&(0x7f00000001c0)="80", 0x1}], 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) splice(r0, 0x0, r2, 0x0, 0x2, 0xb) 7m20.270018487s ago: executing program 4 (id=1171): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000800)=[{&(0x7f0000000c40)="89e5ee0c7cd1d9fcb47300c988cae9", 0xf}], 0x1) 7m14.863546121s ago: executing program 0 (id=1198): r0 = syz_open_dev$loop(&(0x7f0000001740), 0x7, 0x108062) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x80802, 0x1cc) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x2, 0x6010000000000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "42d8cc26f7061a74df2cfc1fc89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd0c7f3f800b2f7b6aa54cc50c1fcaed1e831fa79a00", "141802c4daf4162e43ac61b7ad3300", [0xbffffffffffffce8, 0x100]}}) pwritev2(r0, &(0x7f0000000740)=[{&(0x7f00000002c0)="da2a78", 0x3}], 0x1, 0x2, 0xf, 0x9) 7m14.814385948s ago: executing program 0 (id=1199): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000032c0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000400)="91f8a9849519def2f8eb48d9173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000f38a6a4cb6b275ee91bd0196db0af38f2665cbbb4e66534143d02eac997657cf0a3df3cc8df5281ca813b255039632532f021a46b78fb7892513e4d3307f2dc6eca9986be0", 0x86}, {&(0x7f0000000700)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a482", 0x48}], 0x2}}, {{0x0, 0x0, &(0x7f0000002e40)=[{0x0}, {&(0x7f0000001e00)="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", 0x780}], 0x2, &(0x7f0000002e80)=[@ip_retopts={{0x10}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_retopts={{0x30, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0x4e, 0x3, 0x1, [{@private=0xa010100, 0x6}, {@multicast2, 0x1}]}, @generic={0x83, 0x7, "5982eaf455"}, @timestamp_addr={0x44, 0x4, 0x73, 0x1, 0x3}, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x3f}, @loopback}}}], 0xa8}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3ff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x78}}], 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 7m14.699723648s ago: executing program 0 (id=1200): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x18bdb, 0x325967a866143452) ioctl$LOOP_CHANGE_FD(r0, 0x4c07, 0xffffffffffffffff) 7m14.688767192s ago: executing program 0 (id=1201): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000009340)=[{{&(0x7f0000000140)={0xa, 0x4e24, 0x40, @mcast1, 0x9}, 0x1c, 0x0, 0x0, 0x0, 0x30}}], 0x1, 0x80) chdir(&(0x7f0000000000)='./cgroup\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000000c0)=ANY=[]) 7m14.657925872s ago: executing program 0 (id=1202): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x66a5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000180)="bf", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffa}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000001c0)="05", 0x1}], 0x1}}], 0x2, 0x931766f6319eed11) shutdown(r0, 0x1) 7m14.442953401s ago: executing program 0 (id=1203): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_int(r0, &(0x7f00000000c0)=0xa7, 0x12) 7m4.36439616s ago: executing program 37 (id=1171): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000800)=[{&(0x7f0000000c40)="89e5ee0c7cd1d9fcb47300c988cae9", 0xf}], 0x1) 6m59.439880511s ago: executing program 38 (id=1203): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_int(r0, &(0x7f00000000c0)=0xa7, 0x12) 5m57.925945278s ago: executing program 7 (id=1363): r0 = socket$nl_generic(0x10, 0x3, 0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r0]) file_setattr(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x20, 0xffd, 0x245b1f2a, 0x4, 0x10010}, 0x18, 0x1000) 5m57.533129358s ago: executing program 7 (id=1366): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r1, 0x0, 0x0, 0x40408c1) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) r3 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) writev(r4, &(0x7f0000001340)=[{&(0x7f0000004940)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e000000000ec000", 0x48}], 0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, 0x0, 0x0) 5m56.442616175s ago: executing program 7 (id=1367): setuid(0xee00) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd00000010000100060808004149014006040800", 0x58}], 0x1) 5m56.154689732s ago: executing program 7 (id=1368): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) chdir(&(0x7f0000000000)='./cgroup\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x40e8662e, &(0x7f0000000040)) 5m55.941324771s ago: executing program 7 (id=1369): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x34, r3, 0x1, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c454}, 0x0) 5m55.604490942s ago: executing program 7 (id=1370): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 5m40.149322082s ago: executing program 39 (id=1370): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 4m25.339939573s ago: executing program 3 (id=1530): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r4, 0x4734}}, 0x10) 4m24.135199651s ago: executing program 3 (id=1531): socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) pipe2$9p(&(0x7f0000001900), 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) syz_open_dev$sg(&(0x7f0000000080), 0x6f5e, 0xa0001) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x4d) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000180)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r0], 0x0) 4m21.305950658s ago: executing program 3 (id=1533): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000024c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x810) 4m20.325020766s ago: executing program 3 (id=1535): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') preadv(r0, 0x0, 0x0, 0x12c, 0x0) 4m20.141396624s ago: executing program 3 (id=1536): syz_open_dev$tty1(0xc, 0x4, 0x1) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mknodat$loop(0xffffffffffffffff, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, '.\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) socket$nl_route(0x10, 0x3, 0x0) syz_clone3(&(0x7f0000000500)={0x4000000, &(0x7f0000000040), 0x0, &(0x7f00000001c0), {0x25}, 0x0, 0x0, &(0x7f0000000480)=""/51, 0x0}, 0x58) 4m17.826959465s ago: executing program 3 (id=1546): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='3', 0x1}], 0x1) 4m2.260453685s ago: executing program 40 (id=1546): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='3', 0x1}], 0x1) 4.590551551s ago: executing program 1 (id=2264): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r4, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x48080) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r5, r2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r5, r6, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r1, 0x3b8d, &(0x7f0000000280)={0x20, r7, &(0x7f0000000000)=[{0x1, 0x2}, {0x0, 0x3}], 0xdeadbeef, 0x8, 0x2}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r8, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @remote}) 4.17502283s ago: executing program 1 (id=2268): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000900)=ANY=[@ANYBLOB="1400000010000100000000000a05000000000000000000050000000900010073797a30000000002c000000060a010400000000000000000500000008000b4000000000040004800900010073797a3000000000140000001100010000000000000000000000000a00"/116], 0x74}}, 0x0) 4.056443263s ago: executing program 1 (id=2269): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xefff, &(0x7f0000001840)=[{&(0x7f0000000040)="6700000011008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649ff9", 0x68}], 0x1}, 0x4000010) 2.322780772s ago: executing program 9 (id=2278): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0xa888, &(0x7f0000000080)=[{&(0x7f0000000600)={0x24, 0x11, 0x1, 0x2, 0x25dfdbf6, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x3fff, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x1a}]}, 0x24}], 0x1}, 0x0) 2.272679465s ago: executing program 8 (id=2279): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.106664033s ago: executing program 9 (id=2280): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x20084884) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0) 2.057489767s ago: executing program 1 (id=2281): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc00000000000000"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0) 1.965613321s ago: executing program 9 (id=2282): openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 1.873342549s ago: executing program 9 (id=2283): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 1.868536272s ago: executing program 1 (id=2284): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007"], 0x84}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 1.798956949s ago: executing program 8 (id=2285): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 1.792906066s ago: executing program 1 (id=2286): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f00000000c0)="93") 1.700303922s ago: executing program 9 (id=2287): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xefff, 0xfa64}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r3 = syz_open_pts(r2, 0x141601) fcntl$setstatus(r3, 0x4, 0x182400) write(r3, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x1b) close_range(r1, 0xffffffffffffffff, 0x0) 1.634828223s ago: executing program 8 (id=2288): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x25dfdbfe, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x6, 0x8000000000000001, 0x0, 0x397}, {0x0, 0x0, 0x0, 0xffffffffffff0000}, 0x2, 0x0, 0x0, 0x1, 0x3}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00"/88], 0xc4}}, 0x4c050) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 1.4882903s ago: executing program 9 (id=2289): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz0\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x10000, 0x1000001, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x7, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r4, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x44094}, 0x24004004) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x101) write$UHID_INPUT(r5, &(0x7f0000002b40)={0x8, {"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", 0x1000}}, 0x1006) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000017000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x4, 0x5, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io$sierra_net(r9, 0x0, 0x0) r10 = dup(r8) write$UHID_INPUT(r10, &(0x7f0000001a00)={0xf, {"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", 0x1000}}, 0x1006) r11 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) 1.257014224s ago: executing program 5 (id=2291): ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) capset(0x0, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1.137556691s ago: executing program 5 (id=2292): openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 1.071104362s ago: executing program 5 (id=2293): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) ioctl$KVM_RUN(r2, 0xae80, 0x0) 957.217963ms ago: executing program 8 (id=2294): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007"], 0x84}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 863.22685ms ago: executing program 8 (id=2295): recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40000000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) sendto(r1, 0x0, 0x44, 0x0, &(0x7f0000002500)=@un=@abs={0x1, 0x0, 0x4e22}, 0x80) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffff, 0x4}, 0x6) r4 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000040)=0xe2, 0x4) sendmsg$inet(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10, &(0x7f0000000400)=[{&(0x7f00000004c0)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}, {0x0}, {0x0, 0x50}], 0x4, &(0x7f0000000340)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x18}, 0x24008004) write(r0, &(0x7f0000000000)="23000300", 0x4) 800.486124ms ago: executing program 5 (id=2296): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 754.458131ms ago: executing program 5 (id=2297): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) getgroups(0xffffffffffffff50, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x40) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x5, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x7ffe}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x5, 0xfffffffffffffffc, 0x0, 0x8, 0xffffffff, 0xfffffffe, 0xfffffffc, 0x80000, 0x8000, 0x0, 0x0, r2, 0x4, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f0000000200)=[0x0, r2]) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = eventfd2(0x0, 0x0) io_setup(0x4, &(0x7f0000000080)=0x0) io_submit(r5, 0x1, &(0x7f00000009c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x400, r3, 0x0, 0x0, 0x6, 0x0, 0x2, r4}]) io_pgetevents(r5, 0x2, 0x2, &(0x7f0000000100)=[{}, {}], 0x0, 0x0) io_submit(r5, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffe, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, 0x0) setpgid(0x0, r6) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x2, 0x80, 0xf40, 0x81, 0x444a, r6}) capget(&(0x7f00000001c0)={0x20071026, r7}, &(0x7f0000000240)={0x2, 0x4, 0x80, 0x819, 0xb74, 0x7dd}) sched_setaffinity(r6, 0x8, &(0x7f0000000000)=0x9) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 450.948621ms ago: executing program 5 (id=2298): r0 = epoll_create(0xc) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x9, &(0x7f00000001c0), 0x8) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x3, 0x81, 0xffffffff}) keyctl$invalidate(0x15, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) write$tun(r1, &(0x7f0000000240)={@val={0x8, 0x88fb}, @val={0x2, 0x4, 0x4, 0x6, 0x3, 0x3}, @ipv4=@igmp={{0x5, 0x4, 0x1, 0xa, 0x3f, 0x68, 0x0, 0x9, 0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote}, {0x12, 0x3, 0x0, @broadcast, "a26224806ee6d6e0af1c196d8ccadae44732a765db0158f687682c8c09b2aad7e666c0"}}}, 0x4d) (async) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYRES8=r1, @ANYRES64=r1, @ANYRESOCT=r1, @ANYRESDEC=r1], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) (async) r5 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x30, 0x0) landlock_restrict_self(r5, 0x0) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file5\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file7\x00', 0x0) (async) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000000)={0x18, r4, 0x100000000000007d, 0x0, &(0x7f0000000100)=[{0xffffffffffffe5ca, 0xfffffffffffffff9}]}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000700)={0x48, 0x2, r4}) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20d42, 0x4) fcntl$setstatus(r6, 0x4, 0x42000) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r6, 0xc01864c1, &(0x7f00000002c0)) syz_usb_control_io(r2, &(0x7f0000000080)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 8 (id=2299): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="ad5a97"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="200103"], 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="400c1c"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000500)={&(0x7f00000018c0)=[{0x8, 0x0, 0x0, 0x0}], 0x1}) kernel console output (not intermixed with test programs): d_usb: The device isn't a Human Interface Device [ 580.541876][ T5700] usb 10-1: USB disconnect, device number 2 [ 581.908329][ T4907] Bluetooth: hci2: command tx timeout [ 585.198720][ T4907] Bluetooth: hci2: command tx timeout [ 587.252637][ T4907] Bluetooth: hci2: command tx timeout [ 588.641867][T11835] syz.3.1546 (11835): drop_caches: 3 [ 591.803578][T11951] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.803901][T11951] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.804173][T11951] bridge_slave_0: entered allmulticast mode [ 591.827697][T11951] bridge_slave_0: entered promiscuous mode [ 591.849983][T11951] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.850384][T11951] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.850626][T11951] bridge_slave_1: entered allmulticast mode [ 591.897509][T11951] bridge_slave_1: entered promiscuous mode [ 592.097636][T11951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 592.563550][ T199] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 592.625157][ T8398] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.724534][ T199] usb 10-1: Using ep0 maxpacket: 16 [ 592.745859][ T199] usb 10-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 592.745889][ T199] usb 10-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid maxpacket 1792, setting to 1024 [ 592.745914][ T199] usb 10-1: config 0 interface 0 has no altsetting 0 [ 592.745943][ T199] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 592.745965][ T199] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.751130][ T199] usb 10-1: config 0 descriptor?? [ 592.755312][T12100] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 592.876059][T11951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 593.245782][ T199] mcp2221 0003:04D8:00DD.000D: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.9-1/input0 [ 593.655561][T11951] team0: Port device team_slave_0 added [ 593.701399][T11951] team0: Port device team_slave_1 added [ 596.487070][ T5673] usb 10-1: USB disconnect, device number 3 [ 596.722699][ T37] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 596.994845][ T37] usb 2-1: Using ep0 maxpacket: 16 [ 597.008808][ T37] usb 2-1: unable to get BOS descriptor or descriptor too short [ 597.015101][ T37] usb 2-1: config 1 has an invalid interface number: 17 but max is 0 [ 597.015125][ T37] usb 2-1: config 1 has no interface number 0 [ 597.015155][ T37] usb 2-1: config 1 interface 17 has no altsetting 0 [ 597.018108][ T37] usb 2-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=88.84 [ 597.018134][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.018153][ T37] usb 2-1: Product: syz [ 597.018167][ T37] usb 2-1: Manufacturer: syz [ 597.018180][ T37] usb 2-1: SerialNumber: syz [ 597.040177][ T8398] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.646683][T11951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 597.646697][T11951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 597.646730][T11951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 597.707066][T11951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 597.707083][T11951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 597.707111][T11951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 597.837807][ T37] pcwd_usb: This driver only supports 1 device [ 597.850486][ T37] usb 2-1: USB disconnect, device number 49 [ 599.507693][ T8398] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.659649][T11951] hsr_slave_0: entered promiscuous mode [ 599.661749][T11951] hsr_slave_1: entered promiscuous mode [ 599.678245][T11951] debugfs: 'hsr0' already exists in 'hsr' [ 599.678270][T11951] Cannot create hsr debugfs directory [ 601.108440][ T8398] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.332673][ T4907] Bluetooth: hci4: command 0x0406 tx timeout [ 604.236304][ T5699] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 604.413411][ T5699] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 604.413440][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.413460][ T5699] usb 2-1: Product: syz [ 604.413475][ T5699] usb 2-1: Manufacturer: syz [ 604.413489][ T5699] usb 2-1: SerialNumber: syz [ 604.419532][ T5699] usb 2-1: config 0 descriptor?? [ 604.849957][ T5699] usb 2-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 604.849986][ T5699] usb 2-1: Firmware version (0.0) predates our first public release. [ 604.850003][ T5699] usb 2-1: Please update to version 0.2 or newer [ 606.485767][ T5699] usb 2-1: USB disconnect, device number 50 [ 610.494424][T12272] JFS: discard option not supported on device [ 610.500644][T12272] Mount JFS Failure: -5 [ 610.500662][T12272] jfs_mount failed w/return code = -5 [ 611.099867][ T4907] Bluetooth: hci1: command 0x0406 tx timeout [ 611.402596][ T37] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 611.572645][ T37] usb 10-1: Using ep0 maxpacket: 16 [ 611.575241][ T37] usb 10-1: config 4 has an invalid interface number: 9 but max is 0 [ 611.575264][ T37] usb 10-1: config 4 has no interface number 0 [ 611.575305][ T37] usb 10-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 611.575330][ T37] usb 10-1: config 4 interface 9 altsetting 2 bulk endpoint 0x84 has invalid maxpacket 64 [ 611.575352][ T37] usb 10-1: config 4 interface 9 has no altsetting 0 [ 611.624351][ T37] usb 10-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 611.624379][ T37] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.624398][ T37] usb 10-1: Product: syz [ 611.624410][ T37] usb 10-1: Manufacturer: syz [ 611.624424][ T37] usb 10-1: SerialNumber: syz [ 611.625400][ T8398] bridge_slave_1: left allmulticast mode [ 611.625432][ T8398] bridge_slave_1: left promiscuous mode [ 611.625712][ T8398] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.643229][T12274] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 611.644001][T12274] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 611.731852][ T37] usb 10-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 611.865743][ T37] usb 10-1: USB disconnect, device number 4 [ 611.891980][ T6753] usb 10-1: Failed to submit usb control message: -71 [ 611.892013][ T6753] usb 10-1: unable to send the bmi data to the device: -71 [ 611.892031][ T6753] usb 10-1: unable to get target info from device [ 611.892061][ T6753] usb 10-1: could not get target info (-71) [ 611.927250][ T6753] usb 10-1: could not probe fw (-71) [ 611.954915][ T8398] bridge_slave_0: left allmulticast mode [ 611.954949][ T8398] bridge_slave_0: left promiscuous mode [ 611.955211][ T8398] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.827206][T12288] serio: Serial port ptm0 [ 614.016421][ T8398] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 614.093386][ T8398] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 614.117959][ T8398] bond0 (unregistering): Released all slaves [ 617.872593][ T8398] hsr_slave_0: left promiscuous mode [ 617.914943][ T8398] hsr_slave_1: left promiscuous mode [ 617.916736][ T8398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 617.916763][ T8398] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 618.009196][ T8398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 618.009223][ T8398] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 618.221560][ T8398] veth1_macvtap: left promiscuous mode [ 618.227288][ T8398] veth0_macvtap: left promiscuous mode [ 618.227575][ T8398] veth1_vlan: left promiscuous mode [ 618.227779][ T8398] veth0_vlan: left promiscuous mode [ 619.553311][ T8398] team0 (unregistering): Port device team_slave_1 removed [ 619.595349][ T8398] team0 (unregistering): Port device team_slave_0 removed [ 623.403213][T11951] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 623.458798][T11951] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 623.473797][T11951] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 623.608882][T11951] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 623.636179][T11951] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 623.684116][T11951] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 623.685187][T11951] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 623.718653][ T8398] IPVS: stop unused estimator thread 0... [ 623.746257][T11951] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 624.316536][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.316637][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.421573][T11951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 624.609941][T11951] 8021q: adding VLAN 0 to HW filter on device team0 [ 624.641830][ T6762] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.645100][ T6762] bridge0: port 1(bridge_slave_0) entered forwarding state [ 624.677021][ T8409] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.677292][ T8409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 625.872924][ T5324] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 626.022638][ T5324] usb 10-1: Using ep0 maxpacket: 16 [ 626.027015][ T5324] usb 10-1: unable to get BOS descriptor or descriptor too short [ 626.028536][ T5324] usb 10-1: config 1 has an invalid interface number: 17 but max is 0 [ 626.028560][ T5324] usb 10-1: config 1 has no interface number 0 [ 626.028591][ T5324] usb 10-1: config 1 interface 17 has no altsetting 0 [ 626.103032][ T5324] usb 10-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=88.84 [ 626.103063][ T5324] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.103089][ T5324] usb 10-1: Product: syz [ 626.103103][ T5324] usb 10-1: Manufacturer: syz [ 626.103118][ T5324] usb 10-1: SerialNumber: syz [ 626.422870][ T5324] pcwd_usb: This driver only supports 1 device [ 626.443428][ T5324] usb 10-1: USB disconnect, device number 5 [ 626.651422][ T5253] 8021q: adding VLAN 0 to HW filter on device eth5 [ 629.161681][T11951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 629.910719][ T5253] 8021q: adding VLAN 0 to HW filter on device eth6 [ 631.365913][T11951] veth0_vlan: entered promiscuous mode [ 631.409346][T11951] veth1_vlan: entered promiscuous mode [ 632.566737][T11951] veth0_macvtap: entered promiscuous mode [ 632.590113][T11951] veth1_macvtap: entered promiscuous mode [ 632.651529][T11951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 632.764650][T11951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 632.986093][ T6139] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.986445][ T6139] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.986487][ T6139] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.986522][ T6139] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.929262][ T5253] 8021q: adding VLAN 0 to HW filter on device eth7 [ 634.706407][ T6767] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 634.706428][ T6767] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.253996][ T8398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.254166][ T8398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.797605][ T5699] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 636.443699][ T5699] usb 10-1: Using ep0 maxpacket: 32 [ 636.446234][ T5699] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 636.446260][ T5699] usb 10-1: config 0 has no interface number 0 [ 636.454147][ T5699] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 636.454175][ T5699] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.454195][ T5699] usb 10-1: Product: syz [ 636.454210][ T5699] usb 10-1: Manufacturer: syz [ 636.454225][ T5699] usb 10-1: SerialNumber: syz [ 636.485002][ T5699] usb 10-1: config 0 descriptor?? [ 637.735157][ T4907] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 637.783559][ T4907] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 637.792195][ T4907] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 637.815547][ T4907] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 637.820671][ T4907] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 638.111734][ T5699] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 638.111766][ T5699] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 638.115735][ T5699] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 638.116022][ T5699] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -71 [ 638.198237][ T5699] usb 10-1: USB disconnect, device number 6 [ 638.472577][ T7262] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 638.633012][ T7262] usb 2-1: Using ep0 maxpacket: 32 [ 638.688936][ T7262] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 638.688969][ T7262] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 638.689008][ T7262] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 638.689031][ T7262] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.699627][ T7262] usb 2-1: config 0 descriptor?? [ 638.743118][ T7262] hub 2-1:0.0: USB hub found [ 639.635596][ T7262] hub 2-1:0.0: 1 port detected [ 640.088896][ T4907] Bluetooth: hci3: command tx timeout [ 640.706994][ T5253] 8021q: adding VLAN 0 to HW filter on device eth8 [ 640.853658][ T7262] hub 2-1:0.0: activate --> -90 [ 641.186897][T11133] usb 2-1-port1: config error [ 641.280963][ T5741] usb 2-1: USB disconnect, device number 51 [ 641.281228][T11133] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 641.281327][T11133] usb 2-1-port1: connect-debounce failed [ 642.135866][ T4907] Bluetooth: hci3: command tx timeout [ 643.505021][ T6767] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.223437][ T4907] Bluetooth: hci3: command tx timeout [ 646.292538][ T4907] Bluetooth: hci3: command tx timeout [ 646.546090][ T6767] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.074602][ T9] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 649.232590][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 649.408282][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 649.417556][ T9] usb 2-1: config 1 has an invalid interface number: 17 but max is 0 [ 649.417580][ T9] usb 2-1: config 1 has no interface number 0 [ 649.417599][ T9] usb 2-1: config 1 interface 17 has no altsetting 0 [ 649.450105][ T9] usb 2-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=88.84 [ 649.450122][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.450132][ T9] usb 2-1: Product: syz [ 649.450139][ T9] usb 2-1: Manufacturer: syz [ 649.450147][ T9] usb 2-1: SerialNumber: syz [ 649.751421][ T9] pcwd_usb: This driver only supports 1 device [ 649.762222][ T9] usb 2-1: USB disconnect, device number 52 [ 651.111437][ T6767] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.276860][T12653] kvm: Disabled LAPIC found during irq injection [ 651.712625][ T5741] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 651.759690][ T6767] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.874958][ T5741] usb 9-1: config 0 interface 0 altsetting 250 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 651.874991][ T5741] usb 9-1: config 0 interface 0 altsetting 250 endpoint 0x81 has invalid wMaxPacketSize 0 [ 651.875014][ T5741] usb 9-1: config 0 interface 0 has no altsetting 0 [ 651.875046][ T5741] usb 9-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 651.875068][ T5741] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.936304][ T5741] usb 9-1: config 0 descriptor?? [ 652.403942][ T5741] uclogic 0003:5543:0064.000E: unknown main item tag 0x0 [ 652.403977][ T5741] uclogic 0003:5543:0064.000E: unknown main item tag 0x0 [ 652.404000][ T5741] uclogic 0003:5543:0064.000E: unknown main item tag 0x0 [ 652.404025][ T5741] uclogic 0003:5543:0064.000E: unknown main item tag 0x0 [ 652.404049][ T5741] uclogic 0003:5543:0064.000E: unknown main item tag 0x0 [ 652.404073][ T5741] uclogic 0003:5543:0064.000E: unknown main item tag 0x0 [ 652.523915][ T5741] uclogic 0003:5543:0064.000E: hidraw0: USB HID v0.02 Device [HID 5543:0064] on usb-dummy_hcd.8-1/input0 [ 652.581824][ T5741] usb 9-1: USB disconnect, device number 5 [ 653.005568][T12672] fido_id[12672]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 653.592345][T12533] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.592927][T12533] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.593217][T12533] bridge_slave_0: entered allmulticast mode [ 653.608568][T12533] bridge_slave_0: entered promiscuous mode [ 653.818384][T12533] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.818704][T12533] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.818995][T12533] bridge_slave_1: entered allmulticast mode [ 653.865985][T12533] bridge_slave_1: entered promiscuous mode [ 653.876658][ T37] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 654.033978][ T37] usb 9-1: Using ep0 maxpacket: 16 [ 654.153428][ T37] usb 9-1: unable to get BOS descriptor or descriptor too short [ 654.154931][ T37] usb 9-1: config 1 has an invalid interface number: 17 but max is 0 [ 654.154960][ T37] usb 9-1: config 1 has no interface number 0 [ 654.154991][ T37] usb 9-1: config 1 interface 17 has no altsetting 0 [ 654.157793][ T37] usb 9-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=88.84 [ 654.157821][ T37] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.157841][ T37] usb 9-1: Product: syz [ 654.157854][ T37] usb 9-1: Manufacturer: syz [ 654.157868][ T37] usb 9-1: SerialNumber: syz [ 655.217058][ T37] pcwd_usb: This driver only supports 1 device [ 655.232677][ T37] usb 9-1: USB disconnect, device number 6 [ 656.561280][T12533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 656.655111][T12533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 657.390538][ T6767] bridge_slave_1: left allmulticast mode [ 657.390569][ T6767] bridge_slave_1: left promiscuous mode [ 657.390794][ T6767] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.612263][ T6767] bridge_slave_0: left allmulticast mode [ 657.612297][ T6767] bridge_slave_0: left promiscuous mode [ 657.622711][ T6767] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.196576][ T7262] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 660.172579][ T7262] usb 9-1: Using ep0 maxpacket: 16 [ 660.183335][ T7262] usb 9-1: unable to get BOS descriptor or descriptor too short [ 660.184840][ T7262] usb 9-1: config 1 has an invalid interface number: 17 but max is 0 [ 660.184874][ T7262] usb 9-1: config 1 has no interface number 0 [ 660.184905][ T7262] usb 9-1: config 1 interface 17 has no altsetting 0 [ 660.187674][ T7262] usb 9-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=88.84 [ 660.187699][ T7262] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.187718][ T7262] usb 9-1: Product: syz [ 660.187732][ T7262] usb 9-1: Manufacturer: syz [ 660.187746][ T7262] usb 9-1: SerialNumber: syz [ 660.804084][ T6767] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 660.863509][ T6767] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 660.885566][ T6767] bond0 (unregistering): Released all slaves [ 660.930393][T12533] team0: Port device team_slave_0 added [ 661.073219][T12533] team0: Port device team_slave_1 added [ 661.169300][ T7262] pcwd_usb: This driver only supports 1 device [ 661.299919][ T7262] usb 9-1: USB disconnect, device number 7 [ 661.458570][T12533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 661.458587][T12533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 661.458613][T12533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 661.564414][T12533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 661.564425][T12533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 661.564441][T12533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 661.999678][T12784] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 662.004166][T12784] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 664.940195][T12533] hsr_slave_0: entered promiscuous mode [ 664.958831][T12533] hsr_slave_1: entered promiscuous mode [ 664.962219][T12533] debugfs: 'hsr0' already exists in 'hsr' [ 664.962246][T12533] Cannot create hsr debugfs directory [ 667.052609][ T5324] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 667.224797][ T5324] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 667.224830][ T5324] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 667.224869][ T5324] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 667.224892][ T5324] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.277474][ T5324] usb 10-1: config 0 descriptor?? [ 667.293878][ T6767] hsr_slave_0: left promiscuous mode [ 667.322583][ T7262] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 667.333783][ T6767] hsr_slave_1: left promiscuous mode [ 667.343119][ T6767] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 667.343145][ T6767] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 667.373759][ T6767] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 667.373785][ T6767] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 667.483335][ T7262] usb 9-1: Using ep0 maxpacket: 16 [ 667.490621][ T7262] usb 9-1: unable to get BOS descriptor or descriptor too short [ 667.492503][ T7262] usb 9-1: config 1 has an invalid interface number: 17 but max is 0 [ 667.492560][ T7262] usb 9-1: config 1 has no interface number 0 [ 667.492592][ T7262] usb 9-1: config 1 interface 17 has no altsetting 0 [ 667.496147][ T7262] usb 9-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=88.84 [ 667.496174][ T7262] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.496195][ T7262] usb 9-1: Product: syz [ 667.496209][ T7262] usb 9-1: Manufacturer: syz [ 667.496223][ T7262] usb 9-1: SerialNumber: syz [ 667.659497][ T6767] veth1_macvtap: left promiscuous mode [ 667.690116][ T6767] veth0_macvtap: left promiscuous mode [ 667.702119][ T6767] veth1_vlan: left promiscuous mode [ 667.733827][ T6767] veth0_vlan: left promiscuous mode [ 667.744722][ T5324] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 667.744757][ T5324] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 667.744783][ T5324] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 667.744807][ T5324] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 667.744832][ T5324] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 667.744857][ T5324] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 667.744883][ T5324] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 667.855689][ T5324] cp2112 0003:10C4:EA90.000F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.9-1/input0 [ 667.856905][ T7262] pcwd_usb: This driver only supports 1 device [ 667.885785][ T7262] usb 9-1: USB disconnect, device number 8 [ 667.955923][ T5324] cp2112 0003:10C4:EA90.000F: Part Number: 0x00 Device Version: 0x00 [ 668.575674][ T5324] cp2112 0003:10C4:EA90.000F: error reading lock byte: -32 [ 668.672034][T12823] cp2112 0003:10C4:EA90.000F: Error starting transaction: -38 [ 668.705522][ T7262] usb 10-1: USB disconnect, device number 7 [ 671.075780][ T6767] team0 (unregistering): Port device team_slave_1 removed [ 671.174437][ T6767] team0 (unregistering): Port device team_slave_0 removed [ 674.141501][ T7262] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 675.001844][ T7262] usb 10-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 675.001874][ T7262] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.007388][ T7262] usb 10-1: config 0 descriptor?? [ 675.049372][ T7262] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 675.189565][T12930] pim6reg1: entered promiscuous mode [ 675.189591][T12930] pim6reg1: entered allmulticast mode [ 676.539230][ T7262] usb 10-1: USB disconnect, device number 8 [ 677.135281][ T6767] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.332697][ T7262] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 678.493097][ T7262] usb 10-1: Using ep0 maxpacket: 16 [ 678.509746][ T7262] usb 10-1: unable to get BOS descriptor or descriptor too short [ 678.520864][ T7262] usb 10-1: config 1 has an invalid interface number: 17 but max is 0 [ 678.520900][ T7262] usb 10-1: config 1 has no interface number 0 [ 678.520931][ T7262] usb 10-1: config 1 interface 17 has no altsetting 0 [ 678.561746][ T7262] usb 10-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=88.84 [ 678.561776][ T7262] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.561797][ T7262] usb 10-1: Product: syz [ 678.561812][ T7262] usb 10-1: Manufacturer: syz [ 678.561827][ T7262] usb 10-1: SerialNumber: syz [ 678.967525][ T7262] pcwd_usb: This driver only supports 1 device [ 678.999685][ T7262] usb 10-1: USB disconnect, device number 9 [ 680.299297][ T6767] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.724860][ T9] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 681.925617][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 681.925648][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 681.925682][ T9] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 681.925704][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.946346][ T9] usb 2-1: config 0 descriptor?? [ 682.006241][ T6767] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.345428][T11775] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 682.419924][ T9] playstation 0003:054C:0DF2.0010: unknown main item tag 0x0 [ 682.419961][ T9] playstation 0003:054C:0DF2.0010: unknown main item tag 0x0 [ 682.419986][ T9] playstation 0003:054C:0DF2.0010: unknown main item tag 0x0 [ 682.420008][ T9] playstation 0003:054C:0DF2.0010: unknown main item tag 0x0 [ 682.420031][ T9] playstation 0003:054C:0DF2.0010: unknown main item tag 0x0 [ 682.436397][ T9] playstation 0003:054C:0DF2.0010: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 682.472664][T11775] usb 9-1: device descriptor read/64, error -71 [ 682.783034][ T6767] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.822765][T11775] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 682.952680][T11775] usb 9-1: device descriptor read/64, error -71 [ 683.036138][ T9] playstation 0003:054C:0DF2.0010: Invalid accelerometer calibration data for axis (1), disabling calibration. [ 683.058132][ T9] input: HID 054c:0df2 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:0DF2.0010/input/input31 [ 683.070399][T11775] usb usb9-port1: attempt power cycle [ 683.424652][ T5324] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 683.428214][T11775] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 683.444976][T11775] usb 9-1: device descriptor read/8, error -71 [ 683.587720][T12533] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 683.594456][ T5324] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 683.594503][ T5324] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 683.594534][ T5324] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.638765][ T5324] usb 10-1: config 0 descriptor?? [ 683.682620][T11775] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 683.697487][T12533] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 683.719022][T11775] usb 9-1: device descriptor read/8, error -71 [ 683.831551][T11775] usb usb9-port1: unable to enumerate USB device [ 683.908260][ T9] input: HID 054c:0df2 Motion Sensors as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:0DF2.0010/input/input32 [ 683.910542][ T5324] usbhid 10-1:0.0: can't add hid device: -71 [ 683.910661][ T5324] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 684.004166][ T5324] usb 10-1: USB disconnect, device number 10 [ 684.010090][T13055] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1790'. [ 684.045172][ T9] input: HID 054c:0df2 Touchpad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:0DF2.0010/input/input33 [ 684.225465][T12533] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 684.288462][ T9] input: HID 054c:0df2 Headset Jack as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:0DF2.0010/input/input34 [ 684.542557][ T5324] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 684.713464][ T5324] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 684.713512][ T5324] usb 10-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 684.713535][ T5324] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.895683][ T5324] usb 10-1: config 0 descriptor?? [ 685.060766][T12533] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 685.190710][T12533] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 685.317947][T12533] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 685.320389][T12533] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 686.296587][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.296697][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.365253][T12533] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 686.416552][ T9] playstation 0003:054C:0DF2.0010: Registered DualSense controller hw_version=0xe8f2453f fw_version=0xa9ff1c9c [ 686.421411][ T9] usb 2-1: USB disconnect, device number 53 [ 686.546471][T13072] loop8: detected capacity change from 0 to 8 [ 686.592611][T13072] Dev loop8: unable to read RDB block 8 [ 686.592703][T13072] loop8: unable to read partition table [ 686.592901][T13072] loop8: partition table beyond EOD, truncated [ 686.592919][T13072] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 686.593792][T13071] Flush: task=syz.8.1793[13071] dev=loop8 state=2 [ 686.719648][ T5324] aiptek 10-1:0.0: Aiptek using 400 ms programming speed [ 686.721730][ T5324] input: Aiptek as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input35 [ 686.724369][T13071] Teardown: task=syz.8.1793[13071] dev=loop8 state=2 [ 688.485174][ T5324] usb 10-1: USB disconnect, device number 11 [ 688.485264][ C0] aiptek 10-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 688.826777][T13084] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 689.893417][ T6767] bridge_slave_1: left allmulticast mode [ 689.893452][ T6767] bridge_slave_1: left promiscuous mode [ 689.893732][ T6767] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.111749][ T6767] bridge_slave_0: left allmulticast mode [ 690.111774][ T6767] bridge_slave_0: left promiscuous mode [ 690.111961][ T6767] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.133081][ T37] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 690.262923][ T37] usb 9-1: device descriptor read/64, error -71 [ 690.502619][ T37] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 690.685974][ T37] usb 9-1: device descriptor read/64, error -71 [ 690.794116][ T37] usb usb9-port1: attempt power cycle [ 691.584283][ T37] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 691.995533][ T37] usb 9-1: device descriptor read/8, error -71 [ 692.263298][ T37] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 692.293203][ T37] usb 9-1: device descriptor read/8, error -71 [ 692.412836][ T37] usb usb9-port1: unable to enumerate USB device [ 692.473229][ T6767] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 692.556635][ T6767] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 692.597542][ T6767] bond0 (unregistering): Released all slaves [ 692.835740][T12533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 692.961567][T12533] 8021q: adding VLAN 0 to HW filter on device team0 [ 693.037957][ T6754] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.038052][ T6754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 693.887526][ T6754] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.013657][ T6754] bridge0: port 2(bridge_slave_1) entered forwarding state [ 694.394339][T11133] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 694.565147][T11133] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 694.565180][T11133] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 694.565193][T11133] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.637456][T11133] usb 2-1: config 0 descriptor?? [ 694.938603][T11133] usbhid 2-1:0.0: can't add hid device: -71 [ 694.938722][T11133] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 694.995513][T11133] usb 2-1: USB disconnect, device number 54 [ 695.634148][ T9] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 696.901161][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 696.901210][ T9] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 696.901232][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.939799][ T9] usb 2-1: config 0 descriptor?? [ 697.289548][ T9] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 697.388023][ T9] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input36 [ 697.532561][ T7262] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 697.707084][ T7262] usb 9-1: Using ep0 maxpacket: 16 [ 697.729409][ T7262] usb 9-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 697.729435][ T7262] usb 9-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 697.800212][ T7262] usb 9-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 697.800241][ T7262] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.800260][ T7262] usb 9-1: Product: syz [ 697.800274][ T7262] usb 9-1: Manufacturer: syz [ 697.800287][ T7262] usb 9-1: SerialNumber: syz [ 698.832855][T13160] Bluetooth: hci0: command 0x0406 tx timeout [ 699.172124][ T5612] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 699.344182][ T5612] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 699.367848][ T5612] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 699.422571][ T5612] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 699.438370][ T7262] usb 9-1: USB disconnect, device number 17 [ 699.448563][ T5612] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 700.303044][ T6767] hsr_slave_0: left promiscuous mode [ 700.461700][ T6767] hsr_slave_1: left promiscuous mode [ 700.485294][ T6767] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 700.485321][ T6767] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 700.584839][ T6767] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 700.584867][ T6767] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 700.591643][ T9] usb 2-1: USB disconnect, device number 55 [ 700.591738][ C0] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 700.872456][ T6767] veth1_macvtap: left promiscuous mode [ 700.872560][ T6767] veth0_macvtap: left promiscuous mode [ 700.872785][ T6767] veth1_vlan: left promiscuous mode [ 700.872922][ T6767] veth0_vlan: left promiscuous mode [ 701.905733][ T9] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 702.055445][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 702.055492][ T9] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 702.055515][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.098099][ T9] usb 9-1: config 0 descriptor?? [ 702.132797][ T60] Bluetooth: hci2: command tx timeout [ 702.267160][T13196] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1824'. [ 702.325831][ T9] usbhid 9-1:0.0: can't add hid device: -71 [ 702.326369][ T9] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 702.370442][ T9] usb 9-1: USB disconnect, device number 18 [ 702.493148][ T6767] team0 (unregistering): Port device team_slave_1 removed [ 702.553004][ T6767] team0 (unregistering): Port device team_slave_0 removed [ 702.652615][ T5324] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 702.803292][ T5324] usb 10-1: Using ep0 maxpacket: 16 [ 702.805345][ T5324] usb 10-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 702.805372][ T5324] usb 10-1: config 0 interface 0 has no altsetting 0 [ 702.805392][ T5324] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 702.805404][ T5324] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.809103][ T5324] usb 10-1: config 0 descriptor?? [ 702.892662][ T9] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 703.051282][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 703.051623][ T9] usb 9-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 703.051648][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.101933][ T9] usb 9-1: config 0 descriptor?? [ 703.290507][ T5324] mcp2221 0003:04D8:00DD.0011: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.9-1/input0 [ 703.730829][ T5324] usb 10-1: USB disconnect, device number 12 [ 703.981523][ T9] aiptek 9-1:0.0: Aiptek using 400 ms programming speed [ 704.000173][ T9] input: Aiptek as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input37 [ 704.223370][ T60] Bluetooth: hci2: command tx timeout [ 704.821194][ C0] aiptek 9-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 704.821251][ T9] usb 9-1: USB disconnect, device number 19 [ 705.439257][T13238] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1832'. [ 705.673654][ T822] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 705.832538][ T822] usb 9-1: Using ep0 maxpacket: 16 [ 705.840808][ T822] usb 9-1: unable to get BOS descriptor or descriptor too short [ 705.865239][ T822] usb 9-1: config 1 has an invalid interface number: 17 but max is 0 [ 705.865267][ T822] usb 9-1: config 1 has no interface number 0 [ 705.865306][ T822] usb 9-1: config 1 interface 17 has no altsetting 0 [ 705.869426][ T822] usb 9-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=88.84 [ 705.869455][ T822] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.869475][ T822] usb 9-1: Product: syz [ 705.869490][ T822] usb 9-1: Manufacturer: syz [ 705.869504][ T822] usb 9-1: SerialNumber: syz [ 706.146300][ T822] pcwd_usb: This driver only supports 1 device [ 706.215333][ T822] usb 9-1: USB disconnect, device number 20 [ 706.292590][ T60] Bluetooth: hci2: command tx timeout [ 707.153005][ T5324] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 707.346370][ T5324] usb 9-1: Using ep0 maxpacket: 16 [ 707.361018][ T5324] usb 9-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 707.361050][ T5324] usb 9-1: config 0 interface 0 has no altsetting 0 [ 707.361081][ T5324] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 707.361104][ T5324] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.384801][ T5324] usb 9-1: config 0 descriptor?? [ 707.534245][ T822] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 707.687039][ T822] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 707.687074][ T822] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 707.687109][ T822] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 707.687130][ T822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.738821][T13281] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 707.769364][ T822] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 707.852724][ T5324] mcp2221 0003:04D8:00DD.0012: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.8-1/input0 [ 708.104052][T13292] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1840'. [ 708.215269][ T822] usb 2-1: USB disconnect, device number 56 [ 708.271914][ T5324] usb 9-1: USB disconnect, device number 21 [ 708.372518][ T60] Bluetooth: hci2: command tx timeout [ 708.940345][T13150] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.943015][T13150] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.943270][T13150] bridge_slave_0: entered allmulticast mode [ 708.950204][T13150] bridge_slave_0: entered promiscuous mode [ 709.324185][T13306] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 709.463037][T13150] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.463359][T13150] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.463647][T13150] bridge_slave_1: entered allmulticast mode [ 709.469834][T13150] bridge_slave_1: entered promiscuous mode [ 709.552568][ T822] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 709.679031][T13150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 709.701110][T13150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 709.732640][ T822] usb 10-1: Using ep0 maxpacket: 16 [ 709.741174][ T822] usb 10-1: unable to get BOS descriptor or descriptor too short [ 709.751375][ T822] usb 10-1: config 1 has an invalid interface number: 17 but max is 0 [ 709.751402][ T822] usb 10-1: config 1 has no interface number 0 [ 709.751528][ T822] usb 10-1: config 1 interface 17 has no altsetting 0 [ 709.780696][ T822] usb 10-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=88.84 [ 709.780725][ T822] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.780745][ T822] usb 10-1: Product: syz [ 709.780759][ T822] usb 10-1: Manufacturer: syz [ 709.780773][ T822] usb 10-1: SerialNumber: syz [ 710.049997][ T822] pcwd_usb: This driver only supports 1 device [ 710.073221][ T822] usb 10-1: USB disconnect, device number 13 [ 710.136239][T13150] team0: Port device team_slave_0 added [ 710.237609][T13150] team0: Port device team_slave_1 added [ 710.511762][T13150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 710.511779][T13150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 710.511805][T13150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 710.616364][T13150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 710.616376][T13150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 710.616391][T13150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 710.640712][T13336] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1848'. [ 711.253327][ T822] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 711.692055][ T822] usb 9-1: Using ep0 maxpacket: 16 [ 711.950147][ T822] usb 9-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 711.950175][ T822] usb 9-1: config 0 interface 0 has no altsetting 0 [ 711.950196][ T822] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 711.950208][ T822] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.104547][ T822] usb 9-1: config 0 descriptor?? [ 713.642165][T13150] hsr_slave_0: entered promiscuous mode [ 713.644515][T13150] hsr_slave_1: entered promiscuous mode [ 713.646487][T13150] debugfs: 'hsr0' already exists in 'hsr' [ 713.646512][T13150] Cannot create hsr debugfs directory [ 714.293792][ T822] mcp2221 0003:04D8:00DD.0013: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.8-1/input0 [ 714.510166][ T822] usb 9-1: USB disconnect, device number 22 [ 714.639844][T13375] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1857'. [ 716.662784][ T6767] bridge_slave_1: left allmulticast mode [ 716.662816][ T6767] bridge_slave_1: left promiscuous mode [ 716.663080][ T6767] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.845668][ T6767] bridge_slave_0: left allmulticast mode [ 716.845702][ T6767] bridge_slave_0: left promiscuous mode [ 716.845972][ T6767] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.391057][T13415] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1865'. [ 720.943154][ T6767] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 720.953458][T11133] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 721.023440][ T6767] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 721.064350][ T6767] bond0 (unregistering): Released all slaves [ 721.115317][T11133] usb 2-1: Using ep0 maxpacket: 16 [ 721.126162][T11133] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 721.126196][T11133] usb 2-1: config 0 interface 0 has no altsetting 0 [ 721.126229][T11133] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 721.126251][T11133] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.139664][T11133] usb 2-1: config 0 descriptor?? [ 721.878325][T11133] mcp2221 0003:04D8:00DD.0014: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 722.096195][T11133] usb 2-1: USB disconnect, device number 57 [ 722.123220][ T6767] hsr_slave_0: left promiscuous mode [ 722.165182][ T6767] hsr_slave_1: left promiscuous mode [ 722.168367][ T6767] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 722.203497][ T6767] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 722.372596][ T822] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 722.533553][ T822] usb 9-1: Using ep0 maxpacket: 16 [ 722.541996][ T822] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 722.542026][ T822] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 722.542047][ T822] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 722.542089][ T822] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 722.542111][ T822] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.563012][ T822] usb 9-1: config 0 descriptor?? [ 723.023457][ T822] microsoft 0003:045E:07DA.0015: ignoring exceeding usage max [ 723.032065][ T822] microsoft 0003:045E:07DA.0015: ignoring exceeding usage max [ 723.035420][ T822] microsoft 0003:045E:07DA.0015: unknown main item tag 0x5 [ 723.035453][ T822] microsoft 0003:045E:07DA.0015: unknown main item tag 0x7 [ 723.035483][ T822] microsoft 0003:045E:07DA.0015: unbalanced collection at end of report description [ 723.036402][ T822] microsoft 0003:045E:07DA.0015: parse failed [ 723.036494][ T822] microsoft 0003:045E:07DA.0015: probe with driver microsoft failed with error -22 [ 723.264235][ T7262] usb 9-1: USB disconnect, device number 23 [ 723.476430][T13459] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1874'. [ 723.582652][ T9] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 723.733294][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 723.735643][ T9] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 723.735676][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 723.735707][ T9] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 723.735730][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.792543][ T199] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 723.820430][ T9] usb 2-1: config 0 descriptor?? [ 723.893411][ T6767] team0 (unregistering): Port device team_slave_1 removed [ 723.943046][ T199] usb 10-1: Using ep0 maxpacket: 16 [ 723.946010][ T199] usb 10-1: config 4 has an invalid interface number: 9 but max is 0 [ 723.946034][ T199] usb 10-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 723.946051][ T199] usb 10-1: config 4 has no interface number 0 [ 723.946147][ T199] usb 10-1: config 4 interface 9 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 723.946168][ T199] usb 10-1: config 4 interface 9 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 723.946193][ T199] usb 10-1: config 4 interface 9 has no altsetting 0 [ 723.950696][ T199] usb 10-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 723.950720][ T199] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.950738][ T199] usb 10-1: Product: syz [ 723.950824][ T199] usb 10-1: Manufacturer: syz [ 723.950839][ T199] usb 10-1: SerialNumber: syz [ 724.069971][ T6767] team0 (unregistering): Port device team_slave_0 removed [ 724.198022][ T199] usb 10-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 724.330228][ T6140] usb 10-1: Failed to submit usb control message: -71 [ 724.330264][ T6140] usb 10-1: unable to send the bmi data to the device: -71 [ 724.330282][ T6140] usb 10-1: unable to get target info from device [ 724.330297][ T6140] usb 10-1: could not get target info (-71) [ 724.330314][ T6140] usb 10-1: could not probe fw (-71) [ 724.380936][ T199] usb 10-1: USB disconnect, device number 14 [ 724.393349][ T9] mcp2221 0003:04D8:00DD.0016: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 724.636934][ T9] usb 2-1: USB disconnect, device number 58 [ 732.022603][ T5609] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 732.174894][ T5609] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 732.174926][ T5609] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 732.174965][ T5609] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 732.174987][ T5609] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.185248][ T5609] usb 10-1: config 0 descriptor?? [ 732.443029][ T5253] 8021q: adding VLAN 0 to HW filter on device eth9 [ 732.821915][ T5609] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0 [ 732.821954][ T5609] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0 [ 732.821979][ T5609] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0 [ 732.822004][ T5609] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0 [ 732.822029][ T5609] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0 [ 732.822054][ T5609] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0 [ 732.822078][ T5609] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0 [ 732.854608][ T5609] cp2112 0003:10C4:EA90.0017: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.9-1/input0 [ 733.585318][ T5609] cp2112 0003:10C4:EA90.0017: Part Number: 0x00 Device Version: 0x00 [ 734.032707][T13558] cp2112 0003:10C4:EA90.0017: Error starting transaction: -38 [ 734.037985][ T5609] cp2112 0003:10C4:EA90.0017: error reading lock byte: -71 [ 734.054974][ T5609] usb 10-1: USB disconnect, device number 15 [ 734.390923][T13572] fido_id[13572]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory [ 735.423842][T13150] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 735.469131][T13150] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 735.470915][T13150] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 735.612543][ T822] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 735.804347][T13599] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1899'. [ 735.892506][ T822] usb 2-1: Using ep0 maxpacket: 16 [ 735.901487][ T822] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 735.901518][ T822] usb 2-1: config 0 interface 0 has no altsetting 0 [ 735.901551][ T822] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 735.901573][ T822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.948119][ T822] usb 2-1: config 0 descriptor?? [ 736.464532][T13150] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 736.575231][ T822] usbhid 2-1:0.0: can't add hid device: -71 [ 736.575349][ T822] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 736.618664][ T822] usb 2-1: USB disconnect, device number 59 [ 736.666089][T13150] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 736.709334][T13150] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 736.714885][T13150] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 736.793684][T13150] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 737.092586][T11775] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 737.125287][T13150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 737.243048][T11775] usb 9-1: Using ep0 maxpacket: 16 [ 737.245821][T11775] usb 9-1: unable to get BOS descriptor or descriptor too short [ 737.248965][T11775] usb 9-1: config 1 has an invalid interface number: 17 but max is 0 [ 737.248988][T11775] usb 9-1: config 1 has no interface number 0 [ 737.249018][T11775] usb 9-1: config 1 interface 17 has no altsetting 0 [ 737.255273][T11775] usb 9-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=88.84 [ 737.255301][T11775] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.255320][T11775] usb 9-1: Product: syz [ 737.255331][T11775] usb 9-1: Manufacturer: syz [ 737.255344][T11775] usb 9-1: SerialNumber: syz [ 737.266643][T13150] 8021q: adding VLAN 0 to HW filter on device team0 [ 737.421167][ T6767] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.422029][ T6767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 737.557213][ T6767] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.557437][ T6767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 737.564281][T11775] pcwd_usb: This driver only supports 1 device [ 737.584170][T11775] usb 9-1: USB disconnect, device number 24 [ 738.339597][T13643] sctp: [Deprecated]: syz.9.1903 (pid 13643) Use of int in max_burst socket option. [ 738.339597][T13643] Use struct sctp_assoc_value instead [ 739.502605][T11133] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 739.657793][T13150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 739.674901][T11133] usb 10-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 739.674931][T11133] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.699199][T11133] usb 10-1: config 0 descriptor?? [ 739.728237][T11133] pwc: Creative Labs Webcam 5 detected. [ 739.832584][ T199] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 739.984781][ T199] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 739.984814][ T199] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 739.984853][ T199] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 739.984876][ T199] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.997479][ T199] usb 2-1: config 0 descriptor?? [ 741.364661][ T199] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 741.364698][ T199] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 741.364725][ T199] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 741.364750][ T199] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 741.364785][ T199] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 741.364810][ T199] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 741.364833][ T199] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 741.368656][T11133] pwc: recv_control_msg error -71 req 02 val 2b00 [ 741.369174][T11133] pwc: recv_control_msg error -71 req 02 val 2700 [ 741.369723][T11133] pwc: recv_control_msg error -71 req 04 val 1600 [ 741.370249][T11133] pwc: recv_control_msg error -71 req 02 val 2c00 [ 741.375416][T11133] pwc: recv_control_msg error -71 req 04 val 1000 [ 741.378348][T11133] pwc: recv_control_msg error -71 req 04 val 1300 [ 741.380718][T11133] pwc: recv_control_msg error -71 req 04 val 1400 [ 741.383020][T11133] pwc: recv_control_msg error -71 req 02 val 2000 [ 741.383573][T11133] pwc: recv_control_msg error -71 req 02 val 2100 [ 741.390659][T11133] pwc: recv_control_msg error -71 req 06 val 0600 [ 741.391123][T11133] pwc: recv_control_msg error -71 req 04 val 1500 [ 741.392367][T11133] pwc: recv_control_msg error -71 req 02 val 2500 [ 741.393013][T11133] pwc: recv_control_msg error -71 req 02 val 2400 [ 741.393444][T11133] pwc: recv_control_msg error -71 req 02 val 2600 [ 741.394388][T11133] pwc: recv_control_msg error -71 req 02 val 2900 [ 741.398281][T11133] pwc: recv_control_msg error -71 req 02 val 2800 [ 741.401915][T11133] pwc: recv_control_msg error -71 req 04 val 1100 [ 741.415083][T11133] pwc: recv_control_msg error -71 req 04 val 1200 [ 741.416188][T11133] pwc: Failed to power off camera (-71) [ 741.523092][T11133] pwc: Registered as video103. [ 741.559658][ T199] cp2112 0003:10C4:EA90.0018: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 741.561471][T11133] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input38 [ 741.616578][ T199] cp2112 0003:10C4:EA90.0018: Part Number: 0x00 Device Version: 0x00 [ 741.635225][T11133] usb 10-1: USB disconnect, device number 16 [ 741.920793][T13681] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 742.148942][ T199] cp2112 0003:10C4:EA90.0018: error setting SMBus config [ 742.160199][T13150] veth0_vlan: entered promiscuous mode [ 742.203545][T13150] veth1_vlan: entered promiscuous mode [ 742.328100][ T199] cp2112 0003:10C4:EA90.0018: probe with driver cp2112 failed with error -71 [ 742.429873][ T199] usb 2-1: USB disconnect, device number 60 [ 742.502553][ T9] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 742.554719][T13150] veth0_macvtap: entered promiscuous mode [ 742.603411][T13150] veth1_macvtap: entered promiscuous mode [ 742.653552][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 742.678676][ T9] usb 10-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 742.678708][ T9] usb 10-1: config 0 interface 0 has no altsetting 0 [ 742.678740][ T9] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 742.678762][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.726127][ T9] usb 10-1: config 0 descriptor?? [ 742.796263][T13150] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 742.840884][T13150] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 742.915116][ T1535] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.915593][ T1535] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.915773][ T1535] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.915811][ T1535] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.426404][ T9] usbhid 10-1:0.0: can't add hid device: -71 [ 743.426520][ T9] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 743.477402][ T9] usb 10-1: USB disconnect, device number 17 [ 745.015724][ T5253] 8021q: adding VLAN 0 to HW filter on device eth10 [ 745.161872][ T6752] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 745.161890][ T6752] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 745.435180][ T8409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 745.435201][ T8409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 745.732577][ T5753] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 745.886454][ T5753] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 745.886488][ T5753] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 745.886526][ T5753] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 745.886549][ T5753] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.940958][ T5753] usb 9-1: config 0 descriptor?? [ 746.409433][ T5753] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0 [ 746.409468][ T5753] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0 [ 746.409492][ T5753] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0 [ 746.409516][ T5753] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0 [ 746.409539][ T5753] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0 [ 746.409561][ T5753] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0 [ 746.409585][ T5753] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0 [ 746.537368][T13628] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 746.564621][ T5753] cp2112 0003:10C4:EA90.0019: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.8-1/input0 [ 746.624260][ T5753] cp2112 0003:10C4:EA90.0019: Part Number: 0x00 Device Version: 0x00 [ 746.702574][T13628] usb 6-1: Using ep0 maxpacket: 16 [ 746.732558][T13628] usb 6-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 746.732592][T13628] usb 6-1: config 0 interface 0 has no altsetting 0 [ 746.732626][T13628] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 746.732704][T13628] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.782027][T13628] usb 6-1: config 0 descriptor?? [ 746.900296][ T5253] 8021q: adding VLAN 0 to HW filter on device eth11 [ 747.050985][ T5753] cp2112 0003:10C4:EA90.0019: error setting SMBus config [ 747.101462][ T5753] cp2112 0003:10C4:EA90.0019: probe with driver cp2112 failed with error -71 [ 747.149762][ T5753] usb 9-1: USB disconnect, device number 25 [ 747.223837][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.232268][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.424685][T13628] usbhid 6-1:0.0: can't add hid device: -71 [ 747.424892][T13628] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 747.446212][T13628] usb 6-1: USB disconnect, device number 7 [ 747.573038][ T5775] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 747.733880][ T5775] usb 2-1: Using ep0 maxpacket: 16 [ 747.744524][ T5775] usb 2-1: config 4 has an invalid interface number: 9 but max is 0 [ 747.744549][ T5775] usb 2-1: config 4 has no interface number 0 [ 747.744593][ T5775] usb 2-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 747.744616][ T5775] usb 2-1: config 4 interface 9 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 747.744637][ T5775] usb 2-1: config 4 interface 9 has no altsetting 0 [ 747.753226][ T5775] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 747.753255][ T5775] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.753274][ T5775] usb 2-1: Product: syz [ 747.753288][ T5775] usb 2-1: Manufacturer: syz [ 747.753302][ T5775] usb 2-1: SerialNumber: syz [ 747.772697][T13766] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 747.845665][ T5775] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 748.056275][ T5775] usb 2-1: USB disconnect, device number 61 [ 748.092544][ T8398] usb 2-1: Failed to submit usb control message: -71 [ 748.092579][ T8398] usb 2-1: unable to send the bmi data to the device: -71 [ 748.092597][ T8398] usb 2-1: unable to get target info from device [ 748.092612][ T8398] usb 2-1: could not get target info (-71) [ 748.092776][ T8398] usb 2-1: could not probe fw (-71) [ 748.729166][ T5253] 8021q: adding VLAN 0 to HW filter on device eth12 [ 750.232561][ T5775] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 750.413356][ T5775] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 750.413388][ T5775] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 750.413424][ T5775] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 750.413447][ T5775] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.422262][ T5775] usb 9-1: config 0 descriptor?? [ 750.882727][T11133] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 750.895682][ T5775] cp2112 0003:10C4:EA90.001A: unknown main item tag 0x0 [ 750.895717][ T5775] cp2112 0003:10C4:EA90.001A: unknown main item tag 0x0 [ 750.895743][ T5775] cp2112 0003:10C4:EA90.001A: unknown main item tag 0x0 [ 750.900875][ T5775] cp2112 0003:10C4:EA90.001A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.8-1/input0 [ 751.037489][T11133] usb 10-1: Using ep0 maxpacket: 16 [ 751.086101][T11133] usb 10-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 751.086122][T11133] usb 10-1: config 0 interface 0 has no altsetting 0 [ 751.086142][T11133] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 751.086194][T11133] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.089663][ T5775] cp2112 0003:10C4:EA90.001A: Part Number: 0x00 Device Version: 0x00 [ 751.141496][T11133] usb 10-1: config 0 descriptor?? [ 751.986550][ T5775] cp2112 0003:10C4:EA90.001A: error setting SMBus config [ 751.987356][T11133] usbhid 10-1:0.0: can't add hid device: -71 [ 751.987493][T11133] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 752.032667][T11133] usb 10-1: USB disconnect, device number 18 [ 752.198877][ T5775] cp2112 0003:10C4:EA90.001A: probe with driver cp2112 failed with error -71 [ 752.260337][ T5775] usb 9-1: USB disconnect, device number 26 [ 753.887053][T11133] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 754.455567][T11133] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 754.455599][T11133] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 754.455635][T11133] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 754.455658][T11133] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.467589][T11133] usb 2-1: config 0 descriptor?? [ 754.792578][ T7262] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 754.935201][T11133] hid_parser_main: 4 callbacks suppressed [ 754.935304][T11133] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 754.935336][T11133] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 754.935362][T11133] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 754.935389][T11133] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 754.935415][T11133] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 754.935440][T11133] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 754.935466][T11133] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 754.947959][T11133] cp2112 0003:10C4:EA90.001B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 754.952685][ T7262] usb 6-1: Using ep0 maxpacket: 16 [ 754.955932][ T7262] usb 6-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 754.955961][ T7262] usb 6-1: config 0 interface 0 has no altsetting 0 [ 754.955993][ T7262] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 754.956015][ T7262] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.971916][ T7262] usb 6-1: config 0 descriptor?? [ 755.058856][ T60] Bluetooth: hci0: ACL packet for unknown connection handle 191 [ 755.127070][T11133] cp2112 0003:10C4:EA90.001B: Part Number: 0x00 Device Version: 0x00 [ 755.328793][T11133] cp2112 0003:10C4:EA90.001B: error requesting SMBus config [ 755.483379][T11133] cp2112 0003:10C4:EA90.001B: probe with driver cp2112 failed with error -32 [ 755.535008][T11133] usb 2-1: USB disconnect, device number 62 [ 755.639644][ T7262] usbhid 6-1:0.0: can't add hid device: -71 [ 755.639762][ T7262] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 755.672822][ T7262] usb 6-1: USB disconnect, device number 8 [ 756.009040][T13937] FAULT_INJECTION: forcing a failure. [ 756.009040][T13937] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 756.009077][T13937] CPU: 1 UID: 0 PID: 13937 Comm: syz.9.1964 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 756.009104][T13937] Tainted: [L]=SOFTLOCKUP [ 756.009111][T13937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 756.009129][T13937] Call Trace: [ 756.009213][T13937] [ 756.009285][T13937] dump_stack_lvl+0xe8/0x150 [ 756.009367][T13937] should_fail_ex+0x467/0x600 [ 756.009425][T13937] _copy_from_user+0x2d/0xb0 [ 756.009469][T13937] proc_control+0xa8/0x130 [ 756.009547][T13937] ? __pfx_proc_control+0x10/0x10 [ 756.009605][T13937] ? lockdep_hardirqs_on+0x7a/0x110 [ 756.009625][T13937] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 756.009645][T13937] ? mutex_lock_nested+0x152/0x1d0 [ 756.009669][T13937] ? usbdev_ioctl+0x14c/0x2100 [ 756.009697][T13937] usbdev_ioctl+0xc39/0x2100 [ 756.009732][T13937] ? __pfx_usbdev_ioctl+0x10/0x10 [ 756.009761][T13937] ? __fget_files+0x3a8/0x420 [ 756.009811][T13937] ? __fget_files+0x2a/0x420 [ 756.009834][T13937] ? bpf_lsm_file_ioctl+0x9/0x20 [ 756.009910][T13937] ? __pfx_usbdev_ioctl+0x10/0x10 [ 756.009938][T13937] __se_sys_ioctl+0xff/0x170 [ 756.009967][T13937] do_syscall_64+0x17b/0x530 [ 756.009986][T13937] ? irqentry_exit+0x10f/0x8f0 [ 756.010004][T13937] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.010024][T13937] ? clear_bhb_loop+0x40/0x90 [ 756.010071][T13937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.010090][T13937] RIP: 0033:0x7efefe3ede99 [ 756.010140][T13937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 756.010193][T13937] RSP: 002b:00007efefc646028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 756.010241][T13937] RAX: ffffffffffffffda RBX: 00007efefe675fa0 RCX: 00007efefe3ede99 [ 756.010256][T13937] RDX: 0000200000000040 RSI: 00000000c0185500 RDI: 0000000000000004 [ 756.010270][T13937] RBP: 00007efefc646090 R08: 0000000000000000 R09: 0000000000000000 [ 756.010283][T13937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 756.010294][T13937] R13: 00007efefe676038 R14: 00007efefe675fa0 R15: 00007ffcfa4e17c8 [ 756.010326][T13937] [ 758.062895][ T9] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 758.218971][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 758.219004][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 758.219042][ T9] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 758.219064][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.271006][ T9] usb 2-1: config 0 descriptor?? [ 758.718204][ T9] cp2112 0003:10C4:EA90.001C: unknown main item tag 0x0 [ 758.718241][ T9] cp2112 0003:10C4:EA90.001C: unknown main item tag 0x0 [ 758.718270][ T9] cp2112 0003:10C4:EA90.001C: unknown main item tag 0x0 [ 758.749404][ T9] cp2112 0003:10C4:EA90.001C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 758.902323][ T9] cp2112 0003:10C4:EA90.001C: Part Number: 0x00 Device Version: 0x00 [ 758.961913][ T60] Bluetooth: hci1: ACL packet for unknown connection handle 191 [ 759.112724][ T9] cp2112 0003:10C4:EA90.001C: error requesting SMBus config [ 759.119659][ T9] cp2112 0003:10C4:EA90.001C: probe with driver cp2112 failed with error -32 [ 759.144899][ T9] usb 2-1: USB disconnect, device number 63 [ 760.582637][T11775] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 760.749028][T11775] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 760.749058][T11775] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.749078][T11775] usb 10-1: Product: syz [ 760.749092][T11775] usb 10-1: Manufacturer: syz [ 760.749106][T11775] usb 10-1: SerialNumber: syz [ 760.925379][ T822] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 761.113246][ T822] usb 6-1: Using ep0 maxpacket: 16 [ 761.116509][ T822] usb 6-1: config 4 has an invalid interface number: 9 but max is 0 [ 761.116536][ T822] usb 6-1: config 4 has no interface number 0 [ 761.116580][ T822] usb 6-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 761.116606][ T822] usb 6-1: config 4 interface 9 altsetting 2 endpoint 0x84 has invalid wMaxPacketSize 0 [ 761.116627][ T822] usb 6-1: config 4 interface 9 altsetting 2 bulk endpoint 0x84 has invalid maxpacket 0 [ 761.116650][ T822] usb 6-1: config 4 interface 9 has no altsetting 0 [ 761.190172][ T822] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 761.190200][ T822] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.190220][ T822] usb 6-1: Product: syz [ 761.190234][ T822] usb 6-1: Manufacturer: syz [ 761.190248][ T822] usb 6-1: SerialNumber: syz [ 761.275834][T11775] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 761.275900][T11775] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 761.276456][T14000] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 761.373674][ T822] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 761.506680][ T822] usb 6-1: USB disconnect, device number 9 [ 761.535172][ T1535] usb 6-1: Failed to submit usb control message: -19 [ 761.535205][ T1535] usb 6-1: unable to send the bmi data to the device: -19 [ 761.535222][ T1535] usb 6-1: unable to get target info from device [ 761.535293][ T1535] usb 6-1: could not get target info (-19) [ 761.591206][ T1535] usb 6-1: could not probe fw (-19) [ 761.689477][T11775] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 761.689531][T11775] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 762.002252][T11775] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 762.048779][T11775] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -32 [ 762.512874][T11775] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 762.576280][ T60] Bluetooth: hci2: ACL packet for unknown connection handle 191 [ 762.664967][T11775] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 762.664999][T11775] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 762.665022][T11775] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 762.665034][T11775] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.668692][T11775] usb 2-1: config 0 descriptor?? [ 762.963338][T11133] usb 10-1: USB disconnect, device number 19 [ 763.156660][T11775] hid_parser_main: 4 callbacks suppressed [ 763.156684][T11775] cp2112 0003:10C4:EA90.001D: unknown main item tag 0x0 [ 763.156705][T11775] cp2112 0003:10C4:EA90.001D: unknown main item tag 0x0 [ 763.156723][T11775] cp2112 0003:10C4:EA90.001D: unknown main item tag 0x0 [ 763.156738][T11775] cp2112 0003:10C4:EA90.001D: unknown main item tag 0x0 [ 763.156753][T11775] cp2112 0003:10C4:EA90.001D: unknown main item tag 0x0 [ 763.156767][T11775] cp2112 0003:10C4:EA90.001D: unknown main item tag 0x0 [ 763.156782][T11775] cp2112 0003:10C4:EA90.001D: unknown main item tag 0x0 [ 763.205949][T11775] cp2112 0003:10C4:EA90.001D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 763.346028][T11775] cp2112 0003:10C4:EA90.001D: Part Number: 0x00 Device Version: 0x00 [ 763.533787][T14049] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1997'. [ 763.554035][T11775] cp2112 0003:10C4:EA90.001D: error requesting SMBus config [ 763.560708][T11775] cp2112 0003:10C4:EA90.001D: probe with driver cp2112 failed with error -32 [ 763.595114][T11775] usb 2-1: USB disconnect, device number 64 [ 764.661420][ T60] Bluetooth: hci2: Malformed Event: 0x02 [ 766.152682][T11775] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 766.308860][T11775] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 766.308893][T11775] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 766.308929][T11775] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 766.308952][T11775] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.319061][T11775] usb 2-1: config 0 descriptor?? [ 766.736001][T11775] cp2112 0003:10C4:EA90.001E: unknown main item tag 0x0 [ 766.736038][T11775] cp2112 0003:10C4:EA90.001E: unknown main item tag 0x0 [ 766.736065][T11775] cp2112 0003:10C4:EA90.001E: unknown main item tag 0x0 [ 766.756717][T11775] cp2112 0003:10C4:EA90.001E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 766.931856][T11775] cp2112 0003:10C4:EA90.001E: Part Number: 0x00 Device Version: 0x00 [ 767.133671][T11775] cp2112 0003:10C4:EA90.001E: error requesting SMBus config [ 767.136600][T11775] cp2112 0003:10C4:EA90.001E: probe with driver cp2112 failed with error -32 [ 767.198206][T11775] usb 2-1: USB disconnect, device number 65 [ 767.202137][T14106] netlink: 'syz.8.2018': attribute type 27 has an invalid length. [ 767.530418][ T60] Bluetooth: hci0: Malformed Event: 0x02 [ 768.241959][T14134] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2027'. [ 769.365500][ T37] usb 10-1: new full-speed USB device number 20 using dummy_hcd [ 769.472516][ T5775] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 769.517305][ T37] usb 10-1: config 2 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 769.517342][ T37] usb 10-1: config 2 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 769.517364][ T37] usb 10-1: config 2 interface 0 has no altsetting 0 [ 769.517396][ T37] usb 10-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 769.517419][ T37] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.645723][ T5775] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 769.645755][ T5775] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 769.645847][ T5775] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 769.645870][ T5775] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.716109][ T5775] usb 9-1: config 0 descriptor?? [ 770.054315][ T37] elo 0003:04E7:0009.001F: item fetching failed at offset 4/5 [ 770.056756][ T37] elo 0003:04E7:0009.001F: parse failed [ 770.057084][ T37] elo 0003:04E7:0009.001F: probe with driver elo failed with error -22 [ 770.145882][ T5775] hid_parser_main: 4 callbacks suppressed [ 770.145904][ T5775] cp2112 0003:10C4:EA90.0020: unknown main item tag 0x0 [ 770.145930][ T5775] cp2112 0003:10C4:EA90.0020: unknown main item tag 0x0 [ 770.145952][ T5775] cp2112 0003:10C4:EA90.0020: unknown main item tag 0x0 [ 770.145972][ T5775] cp2112 0003:10C4:EA90.0020: unknown main item tag 0x0 [ 770.145993][ T5775] cp2112 0003:10C4:EA90.0020: unknown main item tag 0x0 [ 770.146015][ T5775] cp2112 0003:10C4:EA90.0020: unknown main item tag 0x0 [ 770.146038][ T5775] cp2112 0003:10C4:EA90.0020: unknown main item tag 0x0 [ 770.239351][ T5775] cp2112 0003:10C4:EA90.0020: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.8-1/input0 [ 770.283681][ T5758] usb 10-1: USB disconnect, device number 20 [ 770.341522][ T5775] cp2112 0003:10C4:EA90.0020: Part Number: 0x00 Device Version: 0x00 [ 770.546229][ T5775] cp2112 0003:10C4:EA90.0020: error requesting SMBus config [ 770.571419][ T5775] cp2112 0003:10C4:EA90.0020: probe with driver cp2112 failed with error -32 [ 770.595960][ T5775] usb 9-1: USB disconnect, device number 27 [ 770.714676][ T60] Bluetooth: hci4: Malformed Event: 0x02 [ 771.141474][T14179] SET target dimension over the limit! [ 771.352562][T13628] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 771.486505][T13628] usb 2-1: device descriptor read/64, error -71 [ 771.744506][T13628] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 771.879442][T13628] usb 2-1: device descriptor read/64, error -71 [ 771.991735][T13628] usb usb2-port1: attempt power cycle [ 772.352651][T13628] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 772.373289][T13628] usb 2-1: device descriptor read/8, error -71 [ 772.523030][T14202] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2040'. [ 772.612558][T13628] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 772.633391][T13628] usb 2-1: device descriptor read/8, error -71 [ 772.744462][T13628] usb usb2-port1: unable to enumerate USB device [ 774.144538][ T60] Bluetooth: hci1: Malformed LE Event: 0x1b [ 774.199293][ T60] Bluetooth: hci2: Malformed Event: 0x02 [ 774.832232][T14245] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2049'. [ 775.381406][T14264] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2056'. [ 775.542808][ T37] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 775.673789][ T37] usb 9-1: device descriptor read/64, error -71 [ 775.764952][ T60] Bluetooth: hci4: Malformed Event: 0x02 [ 775.922638][ T37] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 776.058093][ T37] usb 9-1: device descriptor read/64, error -71 [ 776.173911][ T37] usb usb9-port1: attempt power cycle [ 776.182015][T14275] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2059'. [ 776.553844][ T37] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 776.584175][ T37] usb 9-1: device descriptor read/8, error -71 [ 776.892487][ T37] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 776.913201][ T37] usb 9-1: device descriptor read/8, error -71 [ 777.022983][ T37] usb usb9-port1: unable to enumerate USB device [ 777.113404][T14283] FAULT_INJECTION: forcing a failure. [ 777.113404][T14283] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 777.113442][T14283] CPU: 1 UID: 0 PID: 14283 Comm: syz.5.2063 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 777.113470][T14283] Tainted: [L]=SOFTLOCKUP [ 777.113478][T14283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 777.113491][T14283] Call Trace: [ 777.113499][T14283] [ 777.113508][T14283] dump_stack_lvl+0xe8/0x150 [ 777.113538][T14283] should_fail_ex+0x467/0x600 [ 777.113569][T14283] strncpy_from_user+0x36/0x2c0 [ 777.113671][T14283] do_getname+0x77/0x250 [ 777.113739][T14283] do_sys_openat2+0xcc/0x200 [ 777.113799][T14283] ? __pfx_do_sys_openat2+0x10/0x10 [ 777.113834][T14283] ? exc_page_fault+0x6a/0xc0 [ 777.113861][T14283] __x64_sys_openat+0x138/0x170 [ 777.113895][T14283] do_syscall_64+0x17b/0x530 [ 777.113916][T14283] ? irqentry_exit+0x10f/0x8f0 [ 777.113934][T14283] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.113955][T14283] ? clear_bhb_loop+0x40/0x90 [ 777.113980][T14283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.113999][T14283] RIP: 0033:0x7f48849fe6ce [ 777.114017][T14283] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 777.114034][T14283] RSP: 002b:00007f4882c95b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 777.114054][T14283] RAX: ffffffffffffffda RBX: 00007f4882c966c0 RCX: 00007f48849fe6ce [ 777.114067][T14283] RDX: 0000000000006002 RSI: 00007f4882c95c00 RDI: ffffffffffffff9c [ 777.114081][T14283] RBP: 00007f4882c95c00 R08: 0000000000000000 R09: 0000000000000000 [ 777.114094][T14283] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 777.114106][T14283] R13: 00007f4884cc6038 R14: 00007f4884cc5fa0 R15: 00007ffd7ce2f5c8 [ 777.114136][T14283] [ 777.912559][T11775] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 778.043365][T11775] usb 10-1: device descriptor read/64, error -71 [ 778.142209][T14298] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2070'. [ 778.158775][T14298] netlink: 'syz.5.2070': attribute type 23 has an invalid length. [ 778.161201][ T60] Bluetooth: hci4: Malformed Event: 0x02 [ 778.282742][T11775] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 778.415909][T11775] usb 10-1: device descriptor read/64, error -71 [ 778.559236][T11775] usb usb10-port1: attempt power cycle [ 778.674071][T14306] FAULT_INJECTION: forcing a failure. [ 778.674071][T14306] name failslab, interval 1, probability 0, space 0, times 0 [ 778.674101][T14306] CPU: 0 UID: 0 PID: 14306 Comm: syz.1.2073 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 778.674122][T14306] Tainted: [L]=SOFTLOCKUP [ 778.674128][T14306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 778.674136][T14306] Call Trace: [ 778.674143][T14306] [ 778.674149][T14306] dump_stack_lvl+0xe8/0x150 [ 778.674173][T14306] should_fail_ex+0x467/0x600 [ 778.674196][T14306] should_failslab+0xa8/0x100 [ 778.674282][T14306] ? security_file_alloc+0x34/0x2d0 [ 778.674331][T14306] kmem_cache_alloc_noprof+0x9e/0x680 [ 778.674385][T14306] ? rcu_is_watching+0x15/0xb0 [ 778.674452][T14306] ? security_file_alloc+0x34/0x2d0 [ 778.674468][T14306] ? alloc_empty_file+0x5b/0x1d0 [ 778.674492][T14306] security_file_alloc+0x34/0x2d0 [ 778.674510][T14306] init_file+0x96/0x2d0 [ 778.674532][T14306] alloc_empty_file+0x74/0x1d0 [ 778.674554][T14306] alloc_file_pseudo+0x115/0x1e0 [ 778.674586][T14306] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 778.674620][T14306] __sys_socket+0x1c1/0x320 [ 778.674646][T14306] __x64_sys_socket+0x7a/0x90 [ 778.674668][T14306] do_syscall_64+0x17b/0x530 [ 778.674683][T14306] ? irqentry_exit+0x10f/0x8f0 [ 778.674697][T14306] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.674716][T14306] ? clear_bhb_loop+0x40/0x90 [ 778.674739][T14306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.674758][T14306] RIP: 0033:0x7f129c97f707 [ 778.674780][T14306] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 778.674800][T14306] RSP: 002b:00007f129abd4f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 778.674821][T14306] RAX: ffffffffffffffda RBX: 00007f129cc05fa0 RCX: 00007f129c97f707 [ 778.674833][T14306] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 778.674846][T14306] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 778.674856][T14306] R10: 0000200000000440 R11: 0000000000000286 R12: 0000000000000001 [ 778.674866][T14306] R13: 00007f129cc06038 R14: 00007f129cc05fa0 R15: 00007ffcdbed10e8 [ 778.674891][T14306] [ 778.871066][ T37] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 778.902597][T11775] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 778.923886][T11775] usb 10-1: device descriptor read/8, error -71 [ 779.104428][ T37] usb 9-1: config 1 has an invalid interface number: 54 but max is 2 [ 779.104468][ T37] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 779.104487][ T37] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 779.104508][ T37] usb 9-1: config 1 has no interface number 0 [ 779.104538][ T37] usb 9-1: too many endpoints for config 1 interface 54 altsetting 108: 152, using maximum allowed: 30 [ 779.104576][ T37] usb 9-1: config 1 interface 54 altsetting 108 has 0 endpoint descriptors, different from the interface descriptor's value: 152 [ 779.104604][ T37] usb 9-1: config 1 interface 54 has no altsetting 0 [ 779.162527][T11775] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 779.193552][ T37] usb 9-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 779.193582][ T37] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.193601][ T37] usb 9-1: Product: syz [ 779.193614][ T37] usb 9-1: Manufacturer: syz [ 779.193627][ T37] usb 9-1: SerialNumber: syz [ 779.197746][T11775] usb 10-1: device descriptor read/8, error -71 [ 779.304194][T11775] usb usb10-port1: unable to enumerate USB device [ 779.532772][ T37] usb 9-1: disable ehci-hcd to run US-144 [ 779.551158][ T37] usb 9-1: USB disconnect, device number 32 [ 780.020202][T14319] Bluetooth: MGMT ver 1.23 [ 780.573365][T11133] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 780.712566][T11133] usb 9-1: device descriptor read/64, error -71 [ 780.952627][T11133] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 781.083897][T11133] usb 9-1: device descriptor read/64, error -71 [ 781.198527][T11133] usb usb9-port1: attempt power cycle [ 781.361151][T14348] netlink: 'syz.1.2088': attribute type 1 has an invalid length. [ 781.554680][T11133] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 781.574807][T11775] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 781.576243][T11133] usb 9-1: device descriptor read/8, error -71 [ 781.722729][T11775] usb 10-1: Using ep0 maxpacket: 16 [ 781.729756][T11775] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 781.729790][T11775] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 781.733120][T11775] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 781.733148][T11775] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.733231][T11775] usb 10-1: Product: syz [ 781.733247][T11775] usb 10-1: Manufacturer: syz [ 781.733262][T11775] usb 10-1: SerialNumber: syz [ 781.755015][T11775] usb 10-1: config 0 descriptor?? [ 781.803066][T11775] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 781.803107][T11775] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 781.852627][T11133] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 781.874677][T11133] usb 9-1: device descriptor read/8, error -71 [ 781.983074][T11133] usb usb9-port1: unable to enumerate USB device [ 782.367719][T11775] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 782.380766][T11775] em28xx 10-1:0.0: Config register raw data: 0xfffffffb [ 782.447930][T14355] FAULT_INJECTION: forcing a failure. [ 782.447930][T14355] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 782.447958][T14355] CPU: 1 UID: 0 PID: 14355 Comm: syz.5.2092 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 782.447986][T14355] Tainted: [L]=SOFTLOCKUP [ 782.447993][T14355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 782.448006][T14355] Call Trace: [ 782.448017][T14355] [ 782.448026][T14355] dump_stack_lvl+0xe8/0x150 [ 782.448057][T14355] should_fail_ex+0x467/0x600 [ 782.448077][T14355] _copy_from_user+0x2d/0xb0 [ 782.448088][T14355] memdup_user+0x5e/0xd0 [ 782.448182][T14355] con_font_op+0x87b/0xfe0 [ 782.448261][T14355] ? __pfx_con_font_op+0x10/0x10 [ 782.448281][T14355] ? lock_acquire+0x115/0x350 [ 782.448383][T14355] vt_ioctl+0x1b93/0x20d0 [ 782.448433][T14355] ? __pfx_vt_ioctl+0x10/0x10 [ 782.448460][T14355] ? __fget_files+0x2a/0x420 [ 782.448485][T14355] ? tty_jobctrl_ioctl+0x358/0xb50 [ 782.448538][T14355] ? __fget_files+0x2a/0x420 [ 782.448561][T14355] tty_ioctl+0x926/0xde0 [ 782.448576][T14355] ? __pfx_tty_ioctl+0x10/0x10 [ 782.448586][T14355] __se_sys_ioctl+0xff/0x170 [ 782.448600][T14355] do_syscall_64+0x17b/0x530 [ 782.448612][T14355] ? irqentry_exit+0x10f/0x8f0 [ 782.448627][T14355] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.448648][T14355] ? clear_bhb_loop+0x40/0x90 [ 782.448672][T14355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.448692][T14355] RIP: 0033:0x7f4884a3de99 [ 782.448711][T14355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 782.448729][T14355] RSP: 002b:00007f4882c96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 782.448744][T14355] RAX: ffffffffffffffda RBX: 00007f4884cc5fa0 RCX: 00007f4884a3de99 [ 782.448751][T14355] RDX: 0000200000000000 RSI: 0000000000004b72 RDI: 0000000000000003 [ 782.448758][T14355] RBP: 00007f4882c96090 R08: 0000000000000000 R09: 0000000000000000 [ 782.448765][T14355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 782.448771][T14355] R13: 00007f4884cc6038 R14: 00007f4884cc5fa0 R15: 00007ffd7ce2f5c8 [ 782.448792][T14355] [ 783.057920][T11775] em28xx 10-1:0.0: Unknown AC97 audio processor detected! [ 783.074522][T11775] em28xx 10-1:0.0: couldn't setup AC97 register 2 [ 783.078456][T11775] em28xx 10-1:0.0: couldn't setup AC97 register 4 [ 783.079036][T11775] em28xx 10-1:0.0: couldn't setup AC97 register 6 [ 783.079626][T11775] em28xx 10-1:0.0: couldn't setup AC97 register 54 [ 783.080169][T11775] em28xx 10-1:0.0: couldn't setup AC97 register 56 [ 783.315742][T11775] em28xx 10-1:0.0: couldn't setup AC97 register 2 [ 783.315768][T11775] em28xx 10-1:0.0: couldn't setup AC97 register 4 [ 783.315784][T11775] em28xx 10-1:0.0: couldn't setup AC97 register 6 [ 783.315800][T11775] em28xx 10-1:0.0: couldn't setup AC97 register 54 [ 783.315815][T11775] em28xx 10-1:0.0: couldn't setup AC97 register 56 [ 783.361269][T11775] usb 10-1: USB disconnect, device number 25 [ 783.458975][T14367] FAULT_INJECTION: forcing a failure. [ 783.458975][T14367] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 783.459010][T14367] CPU: 0 UID: 0 PID: 14367 Comm: syz.8.2098 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 783.459035][T14367] Tainted: [L]=SOFTLOCKUP [ 783.459042][T14367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 783.459054][T14367] Call Trace: [ 783.459062][T14367] [ 783.459070][T14367] dump_stack_lvl+0xe8/0x150 [ 783.459102][T14367] should_fail_ex+0x467/0x600 [ 783.459133][T14367] prepare_alloc_pages+0x223/0x650 [ 783.459274][T14367] __alloc_frozen_pages_noprof+0x193/0x5b0 [ 783.459308][T14367] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 783.459340][T14367] ? __pfx_policy_nodemask+0x10/0x10 [ 783.459382][T14367] ? do_execveat_common+0x172/0x670 [ 783.459404][T14367] ? __x64_sys_execve+0x97/0xc0 [ 783.459429][T14367] ? mas_next_node+0x3ba/0xe50 [ 783.459461][T14367] alloc_pages_mpol+0xd4/0x280 [ 783.459486][T14367] alloc_pages_noprof+0xd2/0x2f0 [ 783.459509][T14367] __pud_alloc+0x3a/0x460 [ 783.459593][T14367] handle_mm_fault+0x2158/0x28d0 [ 783.459628][T14367] ? handle_mm_fault+0xeb/0x28d0 [ 783.459652][T14367] ? mt_find+0x186/0x630 [ 783.459690][T14367] ? __pfx_handle_mm_fault+0x10/0x10 [ 783.459741][T14367] __get_user_pages+0x1676/0x2650 [ 783.459797][T14367] get_user_pages_remote+0x307/0xb10 [ 783.459827][T14367] ? __pfx_down_read+0x10/0x10 [ 783.459848][T14367] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 783.459870][T14367] ? __pfx_get_user_pages_remote+0x10/0x10 [ 783.459899][T14367] ? mmap_read_lock_maybe_expand+0xc6/0x3a0 [ 783.459958][T14367] copy_string_kernel+0x2f9/0x5f0 [ 783.459993][T14367] ? __pfx_copy_string_kernel+0x10/0x10 [ 783.460015][T14367] ? rt_spin_unlock+0x163/0x200 [ 783.460043][T14367] ? alloc_bprm+0x582/0x640 [ 783.460068][T14367] do_execveat_common+0x373/0x670 [ 783.460100][T14367] __x64_sys_execve+0x97/0xc0 [ 783.460126][T14367] do_syscall_64+0x17b/0x530 [ 783.460147][T14367] ? irqentry_exit+0x10f/0x8f0 [ 783.460165][T14367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.460185][T14367] ? clear_bhb_loop+0x40/0x90 [ 783.460209][T14367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.460229][T14367] RIP: 0033:0x7ff26eb7de99 [ 783.460248][T14367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 783.460265][T14367] RSP: 002b:00007ff26cdd6028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 783.460287][T14367] RAX: ffffffffffffffda RBX: 00007ff26ee05fa0 RCX: 00007ff26eb7de99 [ 783.460302][T14367] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 783.460315][T14367] RBP: 00007ff26cdd6090 R08: 0000000000000000 R09: 0000000000000000 [ 783.460333][T14367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 783.460345][T14367] R13: 00007ff26ee06038 R14: 00007ff26ee05fa0 R15: 00007fffdcbcbb08 [ 783.460377][T14367] [ 784.902222][T14381] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2102'. [ 785.502626][T11775] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 785.671027][T11775] usb 9-1: device descriptor read/64, error -71 [ 786.762568][T11775] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 786.892554][T11775] usb 9-1: device descriptor read/64, error -71 [ 786.909401][T14414] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2113'. [ 787.002879][T11775] usb usb9-port1: attempt power cycle [ 787.343394][T11775] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 787.365858][T11775] usb 9-1: device descriptor read/8, error -71 [ 787.642554][T11775] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 787.663689][T11775] usb 9-1: device descriptor read/8, error -71 [ 787.773542][T11775] usb usb9-port1: unable to enumerate USB device [ 789.131462][T14445] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2125'. [ 789.182672][ T199] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 789.334831][ T199] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 789.334892][ T199] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 789.334912][ T199] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.342116][ T199] usb 2-1: config 0 descriptor?? [ 789.410910][ T199] pwc: Askey VC010 type 2 USB webcam detected. [ 789.490627][T14456] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2129'. [ 789.490658][T14456] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2129'. [ 790.192934][ T199] pwc: recv_control_msg error -32 req 02 val 2b00 [ 790.243346][ T199] pwc: recv_control_msg error -32 req 02 val 2700 [ 790.244315][ T199] pwc: recv_control_msg error -32 req 02 val 2c00 [ 790.261203][ T199] pwc: recv_control_msg error -32 req 04 val 1000 [ 790.497551][ T199] pwc: recv_control_msg error -71 req 04 val 1400 [ 790.502257][ T199] pwc: recv_control_msg error -71 req 02 val 2000 [ 790.518974][ T199] pwc: recv_control_msg error -71 req 02 val 2100 [ 790.519517][ T199] pwc: recv_control_msg error -71 req 04 val 1500 [ 790.521482][ T199] pwc: recv_control_msg error -71 req 02 val 2500 [ 790.522151][ T199] pwc: recv_control_msg error -71 req 02 val 2400 [ 790.551231][ T199] pwc: recv_control_msg error -71 req 02 val 2600 [ 790.560198][ T199] pwc: recv_control_msg error -71 req 02 val 2900 [ 790.560696][ T199] pwc: recv_control_msg error -71 req 02 val 2800 [ 790.580559][ T199] pwc: recv_control_msg error -71 req 04 val 1100 [ 790.590825][ T199] pwc: recv_control_msg error -71 req 04 val 1200 [ 790.643843][ T199] pwc: Registered as video103. [ 790.659977][ T199] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input39 [ 790.695890][ T199] usb 2-1: USB disconnect, device number 70 [ 791.053494][T11133] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 791.201988][T11133] usb 10-1: device descriptor read/64, error -71 [ 791.442533][T11133] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 791.444209][T14487] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2138'. [ 791.485889][T14490] Scaler: ================= START STATUS ================= [ 791.485907][T14490] Scaler: ================== END STATUS ================== [ 791.639527][T14494] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2141'. [ 791.639559][T14494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2141'. [ 791.647782][T11133] usb 10-1: device descriptor read/64, error -71 [ 791.763175][T11133] usb usb10-port1: attempt power cycle [ 792.112634][T11133] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 792.358266][T11133] usb 10-1: device descriptor read/8, error -71 [ 792.595256][T11133] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 792.630428][T11133] usb 10-1: device descriptor read/8, error -71 [ 792.733487][T11133] usb usb10-port1: unable to enumerate USB device [ 793.285585][ T5753] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 793.412572][ T5753] usb 6-1: device descriptor read/64, error -71 [ 793.556756][ T60] Bluetooth: hci4: Malformed Event: 0x02 [ 793.652630][ T5753] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 793.738502][T14524] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2149'. [ 793.782555][ T5753] usb 6-1: device descriptor read/64, error -71 [ 793.838079][T14528] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2151'. [ 793.902112][ T5753] usb usb6-port1: attempt power cycle [ 794.242551][ T5753] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 794.264177][ T5753] usb 6-1: device descriptor read/8, error -71 [ 794.502628][ T5753] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 794.524426][ T5753] usb 6-1: device descriptor read/8, error -71 [ 794.633403][ T5753] usb usb6-port1: unable to enumerate USB device [ 794.957427][ T60] Bluetooth: hci0: Malformed Event: 0x02 [ 795.382771][T14552] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2161'. [ 795.397541][T14554] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2162'. [ 795.493515][ T199] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 795.530788][T14556] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2163'. [ 795.632492][ T199] usb 2-1: device descriptor read/64, error -71 [ 795.882561][ T199] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 796.138298][ T199] usb 2-1: device descriptor read/64, error -71 [ 796.253914][ T199] usb usb2-port1: attempt power cycle [ 796.288357][ T60] Bluetooth: hci0: Malformed Event: 0x02 [ 796.652542][ T199] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 796.673269][ T199] usb 2-1: device descriptor read/8, error -71 [ 796.814028][T14569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 796.879778][T14569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 796.912621][ T199] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 796.934619][T14569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 796.935493][ T199] usb 2-1: device descriptor read/8, error -71 [ 796.974761][T14576] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2172'. [ 797.043624][ T199] usb usb2-port1: unable to enumerate USB device [ 797.167702][T14583] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2175'. [ 797.187433][T14582] netlink: 'syz.5.2174': attribute type 10 has an invalid length. [ 797.210201][T14582] team0: Device vxcan0 is of different type [ 798.506499][ T7262] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 798.675522][T14597] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2182'. [ 798.676605][ T7262] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 798.676697][ T7262] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 798.676719][ T7262] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 798.676760][ T7262] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 798.676782][ T7262] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.693885][T14599] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2181'. [ 798.759067][ T7262] usb 6-1: config 0 descriptor?? [ 798.927784][T14604] FAULT_INJECTION: forcing a failure. [ 798.927784][T14604] name failslab, interval 1, probability 0, space 0, times 0 [ 798.927880][T14604] CPU: 1 UID: 0 PID: 14604 Comm: syz.1.2184 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 798.927909][T14604] Tainted: [L]=SOFTLOCKUP [ 798.927916][T14604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 798.927929][T14604] Call Trace: [ 798.927937][T14604] [ 798.927945][T14604] dump_stack_lvl+0xe8/0x150 [ 798.927977][T14604] should_fail_ex+0x467/0x600 [ 798.928008][T14604] should_failslab+0xa8/0x100 [ 798.928030][T14604] __kmalloc_noprof+0xfb/0x790 [ 798.928075][T14604] ? __kasan_kmalloc+0x93/0xb0 [ 798.928219][T14604] ? nla_strdup+0x9d/0x140 [ 798.928245][T14604] ? nla_strdup+0x9d/0x140 [ 798.928278][T14604] nla_strdup+0x9d/0x140 [ 798.928308][T14604] nf_tables_newtable+0x49a/0x1950 [ 798.928347][T14604] nfnetlink_rcv+0x1291/0x28d0 [ 798.928406][T14604] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 798.928450][T14604] ? __pfx_save_netdev_trace_buffer+0x10/0x10 [ 798.928470][T14604] ? ref_tracker_free+0x668/0x820 [ 798.928519][T14604] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 798.928539][T14604] ? lockdep_hardirqs_on+0x7a/0x110 [ 798.928578][T14604] netlink_unicast+0x7f5/0x990 [ 798.928615][T14604] netlink_sendmsg+0x813/0xb40 [ 798.928654][T14604] ? __pfx_netlink_sendmsg+0x10/0x10 [ 798.928686][T14604] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 798.928777][T14604] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 798.928859][T14604] ? arch_stack_walk+0xfb/0x150 [ 798.928921][T14604] ? __pfx_netlink_sendmsg+0x10/0x10 [ 798.928950][T14604] sock_sendmsg_nosec+0x13a/0x180 [ 798.928974][T14604] ____sys_sendmsg+0x565/0x870 [ 798.929011][T14604] ? __pfx_____sys_sendmsg+0x10/0x10 [ 798.929047][T14604] ? import_iovec+0x73/0xa0 [ 798.929340][T14604] ___sys_sendmsg+0x2a5/0x360 [ 798.929372][T14604] ? __lock_acquire+0x6df/0x2e40 [ 798.929397][T14604] ? __pfx____sys_sendmsg+0x10/0x10 [ 798.929463][T14604] ? __fget_files+0x2a/0x420 [ 798.929483][T14604] ? __fget_files+0x3a8/0x420 [ 798.929515][T14604] __x64_sys_sendmsg+0x1b7/0x290 [ 798.929545][T14604] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 798.929595][T14604] do_syscall_64+0x17b/0x530 [ 798.929624][T14604] ? irqentry_exit+0x10f/0x8f0 [ 798.929642][T14604] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.929663][T14604] ? clear_bhb_loop+0x40/0x90 [ 798.929688][T14604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.929723][T14604] RIP: 0033:0x7f129c97de99 [ 798.929743][T14604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 798.929761][T14604] RSP: 002b:00007f129abd6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 798.929782][T14604] RAX: ffffffffffffffda RBX: 00007f129cc05fa0 RCX: 00007f129c97de99 [ 798.929798][T14604] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 798.929812][T14604] RBP: 00007f129abd6090 R08: 0000000000000000 R09: 0000000000000000 [ 798.929825][T14604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 798.929837][T14604] R13: 00007f129cc06038 R14: 00007f129cc05fa0 R15: 00007ffcdbed10e8 [ 798.929880][T14604] [ 799.292335][ T7262] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 799.329932][T14607] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2185'. [ 800.202627][ T7262] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 800.362772][ T7262] usb 10-1: Using ep0 maxpacket: 16 [ 800.365899][ T7262] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 800.365922][ T7262] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 800.365952][ T7262] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 800.365973][ T7262] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.424957][ T7262] usb 10-1: config 0 descriptor?? [ 800.742559][T11775] usb 9-1: new full-speed USB device number 41 using dummy_hcd [ 800.872602][T11775] usb 9-1: device descriptor read/64, error -71 [ 801.112681][T11775] usb 9-1: new full-speed USB device number 42 using dummy_hcd [ 801.114088][T14627] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2191'. [ 801.181399][T14629] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2192'. [ 801.242753][T11775] usb 9-1: device descriptor read/64, error -71 [ 801.353285][T11775] usb usb9-port1: attempt power cycle [ 801.610214][ T5753] usb 6-1: reset high-speed USB device number 14 using dummy_hcd [ 801.692686][T11775] usb 9-1: new full-speed USB device number 43 using dummy_hcd [ 801.716636][T11775] usb 9-1: device descriptor read/8, error -71 [ 801.744524][T14635] netlink: 33111 bytes leftover after parsing attributes in process `syz.1.2194'. [ 801.775246][ T5753] usb 6-1: device descriptor read/64, error -71 [ 801.962625][T11775] usb 9-1: new full-speed USB device number 44 using dummy_hcd [ 801.995143][T11775] usb 9-1: device descriptor read/8, error -71 [ 802.064258][ T5753] usb 6-1: reset high-speed USB device number 14 using dummy_hcd [ 802.103564][T11775] usb usb9-port1: unable to enumerate USB device [ 802.213784][ T5753] usb 6-1: device descriptor read/64, error -71 [ 802.454382][ T5753] usb 6-1: reset high-speed USB device number 14 using dummy_hcd [ 802.479298][T14644] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2198'. [ 802.509035][ T5753] usb 6-1: device descriptor read/8, error -71 [ 802.679705][T11775] usb 10-1: USB disconnect, device number 30 [ 802.842778][ T5753] usb 6-1: reset high-speed USB device number 14 using dummy_hcd [ 802.981650][ T5753] usb 6-1: device descriptor read/8, error -71 [ 803.136192][ T7262] usb 6-1: USB disconnect, device number 14 [ 803.231641][T14648] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2200'. [ 803.282834][ T7262] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 803.323186][T14650] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2201'. [ 803.414074][ T7262] usb 6-1: device descriptor read/64, error -71 [ 803.655647][ T7262] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 803.782964][ T7262] usb 6-1: device descriptor read/64, error -71 [ 803.838202][T14664] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2208'. [ 803.894561][ T7262] usb usb6-port1: attempt power cycle [ 803.982492][T11133] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 804.096833][T14666] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2209'. [ 804.195336][T11133] usb 9-1: Using ep0 maxpacket: 16 [ 804.212909][T11133] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 804.212934][T11133] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 804.212971][T11133] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 804.212994][T11133] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.289801][T11133] usb 9-1: config 0 descriptor?? [ 804.342568][ T7262] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 804.399955][ T7262] usb 6-1: device descriptor read/8, error -71 [ 804.512198][T14670] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2211'. [ 805.009329][T14681] cgroup2: Unknown parameter 'lowerdir' [ 805.019673][T14681] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 805.213611][T14695] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2218'. [ 805.578755][T14702] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2220'. [ 805.670699][T14704] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2221'. [ 806.723787][ T199] usb 9-1: USB disconnect, device number 45 [ 806.838183][T14715] FAULT_INJECTION: forcing a failure. [ 806.838183][T14715] name failslab, interval 1, probability 0, space 0, times 0 [ 806.838218][T14715] CPU: 0 UID: 0 PID: 14715 Comm: syz.1.2226 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 806.838243][T14715] Tainted: [L]=SOFTLOCKUP [ 806.838250][T14715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 806.838262][T14715] Call Trace: [ 806.838270][T14715] [ 806.838278][T14715] dump_stack_lvl+0xe8/0x150 [ 806.838309][T14715] should_fail_ex+0x467/0x600 [ 806.838339][T14715] should_failslab+0xa8/0x100 [ 806.838360][T14715] __kmalloc_node_track_caller_noprof+0xfb/0x7b0 [ 806.838391][T14715] ? ovl_parse_param+0x6c1/0xf40 [ 806.838491][T14715] ? ovl_parse_param+0x6c1/0xf40 [ 806.838519][T14715] kstrdup+0x42/0x100 [ 806.838540][T14715] ovl_parse_param+0x6c1/0xf40 [ 806.838566][T14715] ? rcu_is_watching+0x15/0xb0 [ 806.838589][T14715] ? __pfx_ovl_parse_param+0x10/0x10 [ 806.838619][T14715] ? static_key_count+0x41/0x70 [ 806.838710][T14715] vfs_parse_fs_param+0x1a9/0x420 [ 806.838784][T14715] vfs_parse_monolithic_sep+0x281/0x360 [ 806.838809][T14715] ? __pfx_ovl_next_opt+0x10/0x10 [ 806.838834][T14715] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 806.838864][T14715] ? alloc_fs_context+0x9b7/0xd00 [ 806.838894][T14715] do_new_mount+0x2e2/0xdc0 [ 806.838937][T14715] ? cap_capable+0x123/0x460 [ 806.838991][T14715] ? __pfx_do_new_mount+0x10/0x10 [ 806.839013][T14715] ? ns_capable+0x89/0xe0 [ 806.839067][T14715] ? path_mount+0x647/0x1050 [ 806.839088][T14715] ? user_path_at+0xd4/0x160 [ 806.839112][T14715] __se_sys_mount+0x31d/0x420 [ 806.839137][T14715] ? __pfx___se_sys_mount+0x10/0x10 [ 806.839161][T14715] ? __x64_sys_mount+0x20/0xc0 [ 806.839182][T14715] do_syscall_64+0x17b/0x530 [ 806.839200][T14715] ? irqentry_exit+0x10f/0x8f0 [ 806.839218][T14715] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.839239][T14715] ? clear_bhb_loop+0x40/0x90 [ 806.839262][T14715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.839281][T14715] RIP: 0033:0x7f129c97de99 [ 806.839300][T14715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 806.839317][T14715] RSP: 002b:00007f129abd6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 806.839337][T14715] RAX: ffffffffffffffda RBX: 00007f129cc05fa0 RCX: 00007f129c97de99 [ 806.839352][T14715] RDX: 0000200000000b80 RSI: 0000200000000100 RDI: 0000000000000000 [ 806.839365][T14715] RBP: 00007f129abd6090 R08: 0000200000000280 R09: 0000000000000000 [ 806.839377][T14715] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002 [ 806.839389][T14715] R13: 00007f129cc06038 R14: 00007f129cc05fa0 R15: 00007ffcdbed10e8 [ 806.839420][T14715] [ 807.071479][T14719] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2227'. [ 807.555223][T14728] __nla_validate_parse: 1 callbacks suppressed [ 807.555305][T14728] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2231'. [ 807.809611][T14682] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 807.938158][ T5753] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 808.102521][ T5753] usb 9-1: Using ep0 maxpacket: 16 [ 808.105363][ T5753] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 808.105388][ T5753] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 808.105431][ T5753] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 808.105454][ T5753] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.118995][ T5753] usb 9-1: config 0 descriptor?? [ 808.444194][T14732] ./bus: Can't lookup blockdev [ 808.646834][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.646928][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.761258][T14742] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2237'. [ 808.845915][T14746] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2240'. [ 809.095657][T14754] 9pnet_fd: Insufficient options for proto=fd [ 809.097672][T14756] 9pnet_fd: Insufficient options for proto=fd [ 809.551462][T14763] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2244'. [ 809.584459][T14764] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2245'. [ 811.182518][T11133] usb 9-1: USB disconnect, device number 46 [ 811.264394][T14776] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2249'. [ 811.633298][T14785] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2253'. [ 811.672551][ T5753] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 811.674282][T14790] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2254'. [ 811.824768][ T5753] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 811.824800][ T5753] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 811.824822][ T5753] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 811.824863][ T5753] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 811.824886][ T5753] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.830295][ T5753] usb 2-1: config 0 descriptor?? [ 812.311976][T14800] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2257'. [ 812.340179][T14784] overlayfs: missing 'lowerdir' [ 812.391717][ T5753] usbhid 2-1:0.0: can't add hid device: -71 [ 812.391838][ T5753] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 812.419815][ T5753] usb 2-1: USB disconnect, device number 75 [ 812.692711][ T199] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 812.842552][ T199] usb 10-1: Using ep0 maxpacket: 16 [ 812.845255][ T199] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 812.845307][ T199] usb 10-1: config 0 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 812.845444][ T199] usb 10-1: config 0 interface 0 has no altsetting 0 [ 812.845478][ T199] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 812.845501][ T199] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.851987][ T199] usb 10-1: config 0 descriptor?? [ 812.930912][ T199] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 813.161809][T14811] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2260'. [ 813.244724][T14813] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2263'. [ 813.374897][T14818] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 813.521900][T14821] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2266'. [ 813.690334][T14823] netlink: 'syz.8.2267': attribute type 10 has an invalid length. [ 813.690357][T14823] netlink: 55 bytes leftover after parsing attributes in process `syz.8.2267'. [ 813.839487][T14829] netlink: 'syz.1.2269': attribute type 10 has an invalid length. [ 813.839518][T14829] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2269'. [ 814.319343][T14835] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2271'. [ 814.391407][T14837] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2272'. [ 814.946192][T14846] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2275'. [ 815.512902][ T5761] usb 10-1: USB disconnect, device number 31 [ 815.826341][T14861] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2280'. [ 815.918805][T14863] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2281'. [ 816.392646][ T5761] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 816.573569][ T5761] usb 2-1: Using ep0 maxpacket: 16 [ 816.577727][ T5761] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 816.577766][ T5761] usb 2-1: config 0 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 816.577782][ T5761] usb 2-1: config 0 interface 0 has no altsetting 0 [ 816.577800][ T5761] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 816.577819][ T5761] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.642080][ T5761] usb 2-1: config 0 descriptor?? [ 816.661957][ T5761] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 817.012627][ T5761] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 817.162637][ T5761] usb 10-1: Using ep0 maxpacket: 16 [ 817.165330][ T5761] usb 10-1: config 0 has an invalid interface number: 8 but max is 0 [ 817.165353][ T5761] usb 10-1: config 0 has no interface number 0 [ 817.165397][ T5761] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 817.167423][ T5761] usb 10-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 817.167449][ T5761] usb 10-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 817.167469][ T5761] usb 10-1: Product: syz [ 817.167482][ T5761] usb 10-1: SerialNumber: syz [ 817.177691][ T5761] usb 10-1: config 0 descriptor?? [ 817.193517][ T5761] cm109 10-1:0.8: invalid payload size 5, expected 4 [ 817.197543][ T5761] input: CM109 USB driver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.8/input/input41 [ 817.742732][ T37] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 817.885681][ T37] usb 6-1: device descriptor read/64, error -71 [ 818.122477][ T37] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 818.142556][ T5753] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 818.264552][ T37] usb 6-1: device descriptor read/64, error -71 [ 818.289700][ T5753] usb 9-1: device descriptor read/64, error -71 [ 818.374733][ T37] usb usb6-port1: attempt power cycle [ 818.522638][ T5753] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 818.652567][ T5753] usb 9-1: device descriptor read/64, error -71 [ 818.712526][ T37] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 818.733224][ T37] usb 6-1: device descriptor read/8, error -71 [ 818.763523][ T5753] usb usb9-port1: attempt power cycle [ 818.955231][ C0] cm109 10-1:0.8: cm109_urb_irq_callback: urb status -71 [ 818.955297][ C0] ------------[ cut here ]------------ [ 818.955308][ C0] URB ffff888040300700 submitted while active [ 818.955333][ C0] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x79/0x18b0, CPU#0: ktimers/0/16 [ 818.955428][ C0] Modules linked in: [ 818.955460][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 818.955494][ C0] Tainted: [L]=SOFTLOCKUP [ 818.955503][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 818.955520][ C0] RIP: 0010:usb_submit_urb+0x7c/0x18b0 [ 818.955545][ C0] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 f9 92 4d fb 49 83 3e 00 74 40 e8 0e 3c e1 fa 48 8d 3d 87 f1 f8 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 f3 3b e1 fa eb 05 e8 ec 3b [ 818.955561][ T5775] usb 10-1: USB disconnect, device number 32 [ 818.955567][ C0] RSP: 0018:ffffc900001577b8 EFLAGS: 00010287 [ 818.955588][ C0] RAX: ffffffff86e467a2 RBX: ffff888040300700 RCX: 0000000000040000 [ 818.955606][ C0] RDX: ffffc90003163000 RSI: ffff888040300700 RDI: ffffffff8fdd5930 [ 818.955624][ C0] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000100 [ 818.955641][ C0] R10: 0000000000000000 R11: ffffffff8e3c3880 R12: ffff8880287e99c2 [ 818.955658][ C0] R13: ffff88803880d3c4 R14: ffff888040300708 R15: 0000000000000820 [ 818.955678][ C0] FS: 0000000000000000(0000) GS:ffff8881259f2000(0000) knlGS:0000000000000000 [ 818.955699][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 818.955716][ C0] CR2: 0000000000000000 CR3: 0000000060f38000 CR4: 00000000003526f0 [ 818.955736][ C0] Call Trace: [ 818.955746][ C0] [ 818.955756][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 818.955784][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 818.955809][ C0] ? ___ratelimit+0x584/0x8e0 [ 818.955852][ C0] cm109_urb_irq_callback+0x6f1/0xc90 [ 818.955920][ C0] ? kcov_remote_start+0x545/0x710 [ 818.956013][ C0] __usb_hcd_giveback_urb+0x3b8/0x5f0 [ 818.956052][ C0] dummy_timer+0xab9/0x4b30 [ 818.956150][ C0] ? __lock_acquire+0x6df/0x2e40 [ 818.956181][ C0] ? ktime_get+0x1f5/0x220 [ 818.956296][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 818.956343][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 818.956385][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 818.956412][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 818.956451][ C0] __hrtimer_run_queues+0x3eb/0xaf0 [ 818.956508][ C0] hrtimer_run_softirq+0x18f/0x260 [ 818.956550][ C0] handle_softirqs+0x1d9/0x6c0 [ 818.956587][ C0] run_ktimerd+0x69/0x100 [ 818.956616][ C0] smpboot_thread_fn+0x57c/0xa80 [ 818.956676][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 818.956715][ C0] kthread+0x388/0x470 [ 818.956746][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 818.956773][ C0] ? __pfx_kthread+0x10/0x10 [ 818.956805][ C0] ret_from_fork+0x514/0xb70 [ 818.956840][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 818.956882][ C0] ? __switch_to+0xc89/0x1420 [ 818.956913][ C0] ? __pfx_kthread+0x10/0x10 [ 818.956947][ C0] ret_from_fork_asm+0x1a/0x30 [ 818.957001][ C0] [ 818.957014][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 818.957036][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 818.957071][ C0] Tainted: [L]=SOFTLOCKUP [ 818.957081][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 818.957097][ C0] Call Trace: [ 818.957107][ C0] [ 818.957117][ C0] vpanic+0x56c/0xa60 [ 818.957182][ C0] ? __pfx__printk+0x10/0x10 [ 818.957213][ C0] ? __pfx_vpanic+0x10/0x10 [ 818.957235][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 818.957300][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 818.957336][ C0] panic+0xc5/0xd0 [ 818.957359][ C0] ? __pfx_panic+0x10/0x10 [ 818.957394][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 818.957432][ C0] __warn+0x315/0x4c0 [ 818.957452][ C0] ? usb_submit_urb+0x79/0x18b0 [ 818.957481][ C0] ? usb_submit_urb+0x79/0x18b0 [ 818.957505][ C0] __report_bug+0x276/0x570 [ 818.957535][ C0] ? usb_submit_urb+0x79/0x18b0 [ 818.957564][ C0] ? __pfx___report_bug+0x10/0x10 [ 818.957600][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 818.957643][ C0] report_bug_entry+0x19a/0x290 [ 818.957667][ C0] ? usb_submit_urb+0x7c/0x18b0 [ 818.957689][ C0] ? usb_submit_urb+0x81/0x18b0 [ 818.957712][ C0] handle_bug+0xce/0x200 [ 818.957740][ C0] exc_invalid_op+0x1a/0x50 [ 818.957766][ C0] asm_exc_invalid_op+0x1a/0x20 [ 818.957786][ C0] RIP: 0010:usb_submit_urb+0x7c/0x18b0 [ 818.957809][ C0] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 f9 92 4d fb 49 83 3e 00 74 40 e8 0e 3c e1 fa 48 8d 3d 87 f1 f8 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 f3 3b e1 fa eb 05 e8 ec 3b [ 818.957829][ C0] RSP: 0018:ffffc900001577b8 EFLAGS: 00010287 [ 818.957851][ C0] RAX: ffffffff86e467a2 RBX: ffff888040300700 RCX: 0000000000040000 [ 818.957871][ C0] RDX: ffffc90003163000 RSI: ffff888040300700 RDI: ffffffff8fdd5930 [ 818.957888][ C0] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000100 [ 818.957906][ C0] R10: 0000000000000000 R11: ffffffff8e3c3880 R12: ffff8880287e99c2 [ 818.957923][ C0] R13: ffff88803880d3c4 R14: ffff888040300708 R15: 0000000000000820 [ 818.957951][ C0] ? usb_submit_urb+0x72/0x18b0 [ 818.957983][ C0] ? usb_submit_urb+0x72/0x18b0 [ 818.958007][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 818.958031][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 818.958054][ C0] ? ___ratelimit+0x584/0x8e0 [ 818.958103][ C0] cm109_urb_irq_callback+0x6f1/0xc90 [ 818.958131][ C0] ? kcov_remote_start+0x545/0x710 [ 818.958172][ C0] __usb_hcd_giveback_urb+0x3b8/0x5f0 [ 818.958214][ C0] dummy_timer+0xab9/0x4b30 [ 818.958261][ C0] ? __lock_acquire+0x6df/0x2e40 [ 818.958301][ C0] ? ktime_get+0x1f5/0x220 [ 818.958359][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 818.958402][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 818.958443][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 818.958467][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 818.958504][ C0] __hrtimer_run_queues+0x3eb/0xaf0 [ 818.958559][ C0] hrtimer_run_softirq+0x18f/0x260 [ 818.958600][ C0] handle_softirqs+0x1d9/0x6c0 [ 818.958639][ C0] run_ktimerd+0x69/0x100 [ 818.958668][ C0] smpboot_thread_fn+0x57c/0xa80 [ 818.958701][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 818.958738][ C0] kthread+0x388/0x470 [ 818.958771][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 818.958797][ C0] ? __pfx_kthread+0x10/0x10 [ 818.958831][ C0] ret_from_fork+0x514/0xb70 [ 818.958869][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 818.958902][ C0] ? __switch_to+0xc89/0x1420 [ 818.958934][ C0] ? __pfx_kthread+0x10/0x10 [ 818.958968][ C0] ret_from_fork_asm+0x1a/0x30 [ 818.959020][ C0] [ 818.959163][ C0] Kernel Offset: disabled