last executing test programs: 2m37.251654597s ago: executing program 1 (id=589): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e12d2b23bb6010500d3df163e89962d86dd606712e9000d118db0049d90491c3248040000dbb8a1000075f026314c1233f7a88ea8b70fe381fe320e", 0x3c}], 0x1) 2m36.915698799s ago: executing program 1 (id=594): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x10}, 0x0, 0x4, 0x4e24, 0x20, 0x2, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x80000000, 0x20, 0x842, 0xfffffffffffffffd, 0x8000000000000001}, {0xfffffffffffffffe, 0x0, 0x2, 0xfffffffffffffffc}, 0x9, 0x6e6bb4, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x20008010}, 0x50) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) 2m36.692422457s ago: executing program 1 (id=595): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(&(0x7f0000000100)='\x00', 0x0, &(0x7f0000000180), 0x40000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) mount$tmpfs(0x0, 0x0, &(0x7f0000000340), 0x0, 0x0) mount$bind(&(0x7f0000000440)='\x00', &(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0), 0x21, 0x0) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00') 2m36.576926953s ago: executing program 1 (id=596): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f00000003c0)={0x3000000000000000, 0x200000, 0x5, 0x4, 0xfe}) 2m36.276478592s ago: executing program 1 (id=601): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x121800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x41, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x9, 0x5, 0x0, 0x3, 0x2, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@arm64={0xea, 0xa, 0x8, '\x00', 0xfffffffffffffd6d}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xfec00000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7}, {0xe000, 0x5000, 0xc, 0xff, 0x4, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xf000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x0, 0x6}, {0xeeee8000, 0xffff1000, 0x9, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3c, 0x83}, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, {0xd000, 0x0, 0xa, 0xfe, 0x0, 0x0, 0x3}, {0x2, 0x2000, 0x0, 0x0, 0x0, 0x1, 0xfd, 0xca, 0x26, 0x0, 0x0, 0xfd}, {0x80a0000}, {0x7000, 0x9fa}, 0xddf8ffdb, 0x0, 0x10000, 0x50, 0x0, 0x0, 0x0, [0x0, 0x0, 0x1, 0x40]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m36.099794366s ago: executing program 1 (id=604): openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x20, 0x2000003}) unlinkat(r0, &(0x7f00000011c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x14a600, 0x78e22799f4a46f8f) getdents64(0xffffffffffffffff, 0x0, 0x0) 2m20.987836975s ago: executing program 32 (id=604): openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x20, 0x2000003}) unlinkat(r0, &(0x7f00000011c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x14a600, 0x78e22799f4a46f8f) getdents64(0xffffffffffffffff, 0x0, 0x0) 1m15.568521269s ago: executing program 0 (id=1270): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x47524247}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0xffffffffffffffe0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x5}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000100)={r6, 0x80}, 0x8) ioctl$KVM_SET_DEBUGREGS(r5, 0x4080aea2, &(0x7f00000001c0)={[0x4000, 0x30000, 0x6eeb7000, 0x4000], 0x8, 0x80, 0x8000000000000001}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3400000044000701feffffff00000000037c0000040042800c00018006000600800a0000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4c815}, 0x4008804) 1m15.104105277s ago: executing program 0 (id=1276): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000040000701"], 0x14}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) 1m14.460969279s ago: executing program 0 (id=1281): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x5, 0x6577, 0x7f}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], 0x3, 0x9, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000200)={0x8, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r3, 0xc01064ab, &(0x7f0000000080)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x1, 0x1, 0x6}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x2, 0x5, 0x6}) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r8}) r9 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f0000000400)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r9, 0xc01864b1, &(0x7f0000000580)={r11, 0x3, 0x1002a, 0x2, &(0x7f0000000080)=[{0xd4f9, 0x1ff, 0x1ff, 0x7}, {0x7, 0xc899, 0x2}]}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000500)={&(0x7f00000004c0)=[r1, r2, r4, r5, r6], 0x5, r8, r11, 0x3, 0x7fff, 0x1, 0x6, {0x0, 0x0, 0x0, 0xffff, 0x4, 0xe4c, 0x38, 0x3, 0x400, 0xd7d, 0x7f, 0x0, 0x3ff, 0xd6, "f8ee746d0cd9d3fd7e4495e62a74a663a5f1fbdc96b3c75542081a70dda5f0e4"}}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) 1m13.495456801s ago: executing program 0 (id=1287): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14, 0x1200}, @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local, {[@rr={0x7, 0x3, 0x47}]}}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 1m13.267974469s ago: executing program 0 (id=1288): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lchown(&(0x7f0000000880)='./file0\x00', 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000300), 0x2, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000008c0)={0x13, 0x1, 0x0, "0e6a605103787fa03e08fd65b728aec1b20a1ca8de67a818b1c85f5a22f39ca6", 0x30314442}) 1m12.288201748s ago: executing program 0 (id=1296): ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x63, 0x2, 0xff05, 0x100, 0x9, 0x42020180}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc82c00fe8000000000000000000ff0000000aaff020000000000000000000000000001"], 0xffe) 56.942304757s ago: executing program 33 (id=1296): ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x63, 0x2, 0xff05, 0x100, 0x9, 0x42020180}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc82c00fe8000000000000000000ff0000000aaff020000000000000000000000000001"], 0xffe) 5.578634702s ago: executing program 3 (id=1730): r0 = socket$netlink(0x10, 0x3, 0xe) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) setsockopt$sock_cred(r1, 0x1, 0x2f, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc) (async) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x200200, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) (async, rerun: 64) getresuid(0x0, 0x0, 0x0) (async, rerun: 64) mbind(&(0x7f00006f4000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x6, 0x6, 0x2) (async) remap_file_pages(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x100) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc) (async, rerun: 64) r4 = socket$netlink(0x10, 0x3, 0x4) (rerun: 64) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) (async) write$ppp(r2, &(0x7f0000000040)="a56055284b129e8d0be99fa18ac5e640f6", 0x11) 5.326904839s ago: executing program 3 (id=1733): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0x8, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x81}], 0x1c) sendto$inet(r1, &(0x7f0000000140)="f89e36", 0x3, 0x40, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) (async) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0xe651, 0x5, 0x134, 0x48, 0xff}, 0x9c) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x80}) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) (async) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async) ioctl$BLKBSZSET(r4, 0x40081271, &(0x7f0000000180)=0x5617db21) (async) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000300)=ANY=[@ANYRES32=r8], 0x9) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={r8, @in6={{0xa, 0x4e21, 0xf, @empty, 0x46f}}, 0x0, 0x1, 0x2f06, 0x7, 0xb4, 0x7f, 0xe}, 0x9c) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 5.023778225s ago: executing program 3 (id=1735): syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0xfe, 0xc8, "330565b2042170eb"}}}, 0xe) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmmsg(r1, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)=""/249, 0xf9}, {&(0x7f0000000440)=""/84, 0x54}], 0x2}, 0xffff}], 0x1, 0x10041, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x2001, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010002000000208c0d2601400001020301090212000101057001090400000001033005"], 0x0) r3 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f00000003c0)={0x0, 0x2, &(0x7f0000000080)=[r4, r4], &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x8001}) sendmsg$SOCK_DESTROY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1100000015002b"], 0x14}, 0x1, 0x0, 0x0, 0x20008941}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x610202, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1198}, 0x1, 0x0, 0x0, 0x44018}, 0x20004000) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4001) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) inotify_init() r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000080)={0x7, {{0xa, 0x0, 0xb7fe, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) 5.023396255s ago: executing program 2 (id=1736): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x80b40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000340)={0x81, 0x0, 0x3}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x7000, 0xdddd1000, 0x9, 0x0, 0xb}) syz_usb_connect(0x3, 0x8c6, &(0x7f0000000300)=ANY=[], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="04b9b46cadbe4d3504290033f3d6eb48950e0009c9000008f8ffc90006000400c900feff0080bf6b0500ff01c80000600200c80006004300c90035ec0004c80005000600c800010405005d06359512270e18b0df4ce78d5bb9c6"], 0x3c) r2 = syz_open_pts(0xffffffffffffffff, 0x3a3002) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x40, 0x1, 0x76, 0x7, {{0x14, 0x4, 0x1, 0x9, 0x50, 0x64, 0x0, 0x40, 0x6, 0x0, @multicast1, @multicast1, {[@end, @end, @noop, @generic={0x86, 0xc, "d22e1ae19155d2cb9fef"}, @lsrr={0x83, 0xf, 0x42, [@remote, @remote, @multicast2]}, @lsrr={0x83, 0x1b, 0xe8, [@multicast1, @broadcast, @dev={0xac, 0x14, 0x14, 0x41}, @private=0xa010102, @multicast1, @dev={0xac, 0x14, 0x14, 0x19}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f00000003c0)={'syztnl0\x00', r4, 0x4, 0x1, 0x21, 0xf, 0x2, @remote, @mcast2, 0x20, 0x40, 0xe, 0x2}}) socket(0x1e, 0x4, 0x0) poll(&(0x7f0000000000), 0x0, 0x6) r5 = socket$tipc(0x1e, 0x2, 0x0) r6 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10, 0x800) poll(&(0x7f0000000080)=[{r2, 0x1080}, {r2, 0x7040}, {r2, 0x600}, {r5, 0x1003}, {r6}, {0xffffffffffffffff, 0x20}, {r2, 0x400}, {r2, 0x6000}], 0x8, 0x101) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x12, 0x2010, r5, 0xc8b6f000) 4.895584003s ago: executing program 5 (id=1737): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0xfffff000) (async, rerun: 64) read(r1, &(0x7f00000002c0)=""/153, 0x99) (async, rerun: 64) r2 = memfd_create(&(0x7f0000000540)='\x02A\xbb\xcc\xeb\x14\x16\xe8m\x14oSaW', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x100000f, 0x13, r2, 0x0) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f00000004c0)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) (async, rerun: 32) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'dummy0\x00', 0x100}) (async, rerun: 32) socket$kcm(0x2, 0xa, 0x2) (async) ptrace$poke(0x5, 0x0, &(0x7f0000000200), 0x4) (async) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'team_slave_1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}) (async) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r3, 0x8918) (async, rerun: 32) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0a000000bbdabbbbbbbbaaaaaaaaaaaa080600"], 0x2e) (async, rerun: 32) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x20) r5 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) (async) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/vmcoreinfo', 0x8000, 0x14) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) shutdown(r7, 0x0) (async, rerun: 32) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (rerun: 32) read$FUSE(r6, &(0x7f0000000580)={0x2020}, 0x2020) (async) ioctl$SNDRV_PCM_IOCTL_STATUS32(r5, 0x806c4120, &(0x7f0000000080)) (async) syz_usb_connect(0x4, 0x24, &(0x7f0000000100)=ANY=[@ANYRESOCT], 0x0) (async, rerun: 64) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) (rerun: 64) write$P9_RSYMLINK(r8, &(0x7f0000000080)={0x56, 0x11, 0x1, {0x20, 0x0, 0x4}}, 0x14) 4.78502336s ago: executing program 5 (id=1738): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000280)={@flat=@weak_binder={0x77622a85, 0x1000, 0xffffffffffffffff}, @flat=@handle={0x73682a85, 0x0, 0x1}, @flat=@binder={0x70742a85, 0x1, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0xfc, 0x0}) 4.675852118s ago: executing program 5 (id=1739): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) connect$inet6(r3, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f00000015c0)={@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, {&(0x7f00000005c0)=""/4096, 0x1000}, &(0x7f0000000540), 0x78}, 0xa0) sendto$inet6(r3, &(0x7f0000000200)="ca192a0c16000738d25927629bc2d239ef0a0000c12ea40205", 0x19, 0x3b00, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3e, &(0x7f0000000040), 0x4) ioctl$KVM_SET_PIT2(r5, 0x4070aea0, &(0x7f0000000340)={[{0x0, 0xd2, 0x9, 0x9, 0x91, 0xff, 0xfe, 0x8, 0x0, 0x5, 0x46, 0xd, 0x5}, {0x7c4, 0x7, 0x4b, 0x7, 0x5, 0x7, 0xbe, 0x6, 0x4, 0x4, 0xd3, 0x3, 0x1}, {0x4, 0x4, 0x4, 0x7, 0x2, 0x7, 0x83, 0x0, 0x7, 0xf, 0x0, 0x5, 0x100000000007ff}], 0x9}) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000140)={0x14, &(0x7f0000000100)={0x20, 0x1, 0x8, {0x8, 0x11, "3717b4caa78c"}}, &(0x7f0000000240)={0x0, 0x3, 0xc1, @string={0xc1, 0x3, "2c116cc6ff74b0db718bf61b8b65d4daf67bc8d905c28a41e211976d5338fb758af7b35fcfda00342ef1c09406b1d775555175f052f6ed524bfc260b7a7e69f9c6b5ddfd5c2c3cb6002ead6c366feff8d44d91f7ca6f1313311c76aae7e13c5a02dd137986ae8aa9153d417cc6b3a272f19927fdffead7bf27936714bf650a0e24561718c286abbb44dbd90145e0eccd2e4d311896beecda3673124c633a9526ca0159306d38a4009b0e0f6ee9b44a2054ef3ef27d15edd5c2b8cd407282a0"}}}, &(0x7f0000000500)={0x34, &(0x7f0000000180)={0x40, 0x8, 0x1e, "436baa954e79af0ea10b96defc4d19cfcc0cc05e4db3594301be5c804327"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x10}, &(0x7f00000003c0)={0x0, 0x8, 0x1}, &(0x7f0000000400)={0xc0, 0xa1, 0x4, 0x6}, &(0x7f0000000440)={0x40, 0xa0, 0x4, 0x7b7}, &(0x7f0000000480)={0xc0, 0xa2, 0x2f, "55d49c7e2ca20af299292ce6ab2df43446b7f4d65c523b2a62ee6128476b055258ed6f4e633092f978b5b1011c7fa3"}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="0331070000632fbde05db10adb000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0}) 2.248587915s ago: executing program 5 (id=1754): sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000006c0)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffffc}, 0x1c, 0x0}}], 0x1, 0x2000c8c0) syz_usb_connect(0x2, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x83) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000080)=""/170) r1 = socket$igmp(0x2, 0x3, 0x2) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hfsplus\x00', 0x2000010, &(0x7f0000000100)='barrier') recvmmsg(r1, &(0x7f0000004300)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40002031, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) 1.909101344s ago: executing program 3 (id=1758): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000800)={'wlan1\x00'}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8051}, 0x0) 1.861887309s ago: executing program 2 (id=1759): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000400000000fc00000000000000020000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 1.659655099s ago: executing program 3 (id=1760): socketpair$tipc(0x1e, 0x5, 0x2000000, &(0x7f0000000080)) r0 = socket$inet6(0xa, 0x4, 0x10) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0xe, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x4e21, @empty}}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000b5403340861a22753635010203010902120001000000000904"], 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x20, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_CQM={0x4}]}, 0x20}}, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000240)={@host, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)={0x20, 0x21, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x00\x00\x00\x01\x01b'}, @nested={0x4, 0x15}]}, 0x20}], 0x1}, 0x0) r9 = dup2(r1, r0) setsockopt$inet6_mtu(r9, 0x29, 0x17, &(0x7f0000000080)=0x4, 0x4) sendmmsg$inet6(r1, &(0x7f0000002800)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x2, @mcast2, 0x2}, 0x1c, 0x0}}], 0x1, 0x200000c4) 1.599071182s ago: executing program 2 (id=1761): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0xfffffffffffffe4a, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x90, 0x0, &(0x7f00000009c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @fd={0x66642a85, 0x0, r0}}, 0x0}}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4000, 0x0, 0x0}) 1.359204737s ago: executing program 2 (id=1762): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f00000001c0)=0x1, 0x4) sendmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000100), 0x1}}], 0x4000253, 0x44) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848160000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1, 0x0, 0x0, 0x1f000000}, 0x80054) 1.096009618s ago: executing program 2 (id=1763): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000400a20000000000a01030000000000000000010000000900010073797a310000000054000000030a010200000000000000000100ffff0900030073797a320000000028000480080002400000000008000140000000051400030076657468315f746f5f687372000000000900010073797a31000000004c000000050a05000000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d616376746107000000080001"], 0xe8}}, 0x0) 1.08202158s ago: executing program 2 (id=1764): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fdffffff1000000018000180140002006e657464657673696d3000000000000008001100"], 0x34}, 0x1, 0x0, 0x0, 0x4008045}, 0x20000010) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x24, 0x200000b, r6}}], 0x20, 0x2400e044}, 0x0) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip6tnl0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r7, 0x40047452, &(0x7f00000001c0)={0x18, 0x0, {0x5, @multicast, 'pim6reg\x00'}}) r8 = syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_G_PARM(r8, 0xc0cc5615, &(0x7f0000000080)={0x0, @output}) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000080)=0x4) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x822b01) syz_usb_connect(0x5, 0x24, &(0x7f00000002c0)=ANY=[@ANYRES64=r11], 0x0) socket$igmp(0x2, 0x3, 0x2) 872.21727ms ago: executing program 4 (id=1765): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0201050009000a0040ff623d885d000c1101fc000000000000000000000000000000ff0200000000000000000000030000014e220e21"], 0x42) 683.762244ms ago: executing program 5 (id=1766): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='befs\x00', 0x8000, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064d1, &(0x7f0000000040)={0x2, 0x0, &(0x7f00000000c0)=[0x0, 0x0]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r1, &(0x7f0000001d00)={0x0, 0x0, 0x0}, 0x40000020) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/167, 0xa7}, {&(0x7f00000001c0)=""/88, 0x58}, {&(0x7f00000006c0)=""/4083, 0xff3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000003700)=""/4080, 0xff0}, {&(0x7f0000001d40)=""/4090, 0xffa}], 0x6}, 0x32120) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000000)) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000100)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000140)="0f30c402fd3eecae660f38800a66b80c010f00d0662e3646d87213460f09b98c0900000f32b8010000000f01c12e644c0fc72f", 0x33}], 0x1, 0x68, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000240)={0x0, 0x1, 0x0, 0x81, 0x2, [], [0x2, 0x2b7, 0x8, 0x4], [0xa6, 0x2, 0xf37], [0x2, 0x401, 0x2, 0x9]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 683.318487ms ago: executing program 4 (id=1767): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e", 0x68}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c", 0x16}, {&(0x7f00000001c0)="985e44efeabe", 0x6}], 0x4}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c", 0x87}, {&(0x7f0000000d00)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171", 0x25}], 0x2}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmmsg$inet(r0, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000011c0)="a2587becf7e1e085649ac6104204d09ecb05a13f146abe945049f4aed9c9a8f72403f43f534b88eb66ed092b4a78e4344ec26b04c7fb5f4fb5e9a591f786f632305fc2aa", 0x44}], 0x1}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001780)="d1ef1bb59f70ec9b719b1589c8f3d0678afd96", 0x13}, {&(0x7f00000017c0)="dad5b14f2f8f950502cf28805d8714f935c655d7ea96", 0x16}, {&(0x7f0000001800)="e9d7b200bf6ecf325e1a9c0dccd8c357998ad687717f392aab546e2ad010fb16c3120d5c20a62654dfa7da737faea449d323a40f6b39ce3ccea07331a90678979abfde57efde701f4c14b7897b8ef0530b2eecee7536d3c0186c646980b6c78eaf6f4d9d55d211f1d5a38fe9f95f95e72127a07b02bd5f5b3bcb265680ae107e6cf387fb56fca7ecd4e7257f1dc5a9ac14a40036a3f8675e691f6f6e9067617ffa6045157cf5b7562f68838b5e13843d24469663f76355633256edfdebaeee1320c3303b3d6a06113505045fb3ec9be769234a276ebec1707dae5cde125d22383405763a724ee1cfe93b3d4542c820", 0xef}, {0x0}], 0x4}, 0x13000000}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001ac0)="6c5b0b3e474f01bac640e7eb9064ec8e2ccac8b36c7d9ab464dc0bd7221bbae89e38ef0efc78f3e2f90e6236ad1ad1fb3dbd3e4fd8f2de84e526dfafb354837ff3958d97c8366471850ce9c14b83bb6e9a7c282a1d3e03cdfb675b61e1dbacc6ebcd08e105d4df684f2cd13262d10ffb8b0794f39b3e490416530423da29406a6a4b5a356dc898052883f1e54fd041e5a82247a4bbb784ce30ce321a2805b28d308a12c659df7f1d8ba12b3ac50605cda86b262fc1d874e1", 0xb8}, {&(0x7f0000001b80)="66a7d24b8451d3e0201a73aaabe1e3fe371dfbf029efdbc2de3742c687d72207cab9988bc15b9e27135be8e1d84bbeb01ccf943eb163a18b6a02c752c829c5f24ccd2c02f1c208e64deb4d916ff1727fe172cb09868b", 0x56}, {&(0x7f0000001c00)="811e3e8966b4199496dc8329eca81fa24aedba0078949553b10b0df3cc25de83324cb3fb6672cbb763e260abad0adca5ab04cf5988b6c9a912e96ba01b3508998595bfad50323f42fa943adb8d0324801ae6efa1e38cda7fa68458db8fce3f84fe3c3ed16f9b3fc3c9328ff5ec4d", 0x6e}], 0x3}}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000002f00)="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", 0x2c3}, {0x0}], 0x2}}], 0x4, 0x40000) 522.53687ms ago: executing program 4 (id=1768): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000800)={'wlan1\x00'}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0}, 0x1, 0x0, 0x0, 0x8051}, 0x0) 445.637906ms ago: executing program 4 (id=1769): r0 = socket$inet(0xa, 0x801, 0x84) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) setresuid(0xee01, 0xee00, 0x0) listen(r0, 0xfffffffd) r2 = socket$inet(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) listen(r2, 0x1) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r6, 0x3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r5) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000005", 0x40b}], 0x1) 315.761613ms ago: executing program 4 (id=1770): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000914e73f"], 0x30}, 0x1, 0x0, 0x0, 0xbe9b70533f0d9e1}, 0x0) recvfrom(r0, 0x0, 0x0, 0x20, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) recvfrom(r2, &(0x7f0000000140)=""/251, 0xfb, 0x41, &(0x7f0000000240)=@ethernet={0x306}, 0x80) fcntl$setstatus(r2, 0x4, 0x42000) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r3, 0x4, 0x42000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b20, &(0x7f0000000040)={'wlan1\x00', @random="adc161a63aeb"}) 294.40106ms ago: executing program 4 (id=1771): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x7, 0x100000000, 0x100000000000000, 0x1, 0xfdb1, 0xc, 0x288100000400000b, 0x5}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000340000001"], 0xfdef) 94.656114ms ago: executing program 5 (id=1772): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r3, 0x5) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81006e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xa8282, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r4, 0x0) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd86) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000700)=ANY=[], 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=1773): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f50009058202"], 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000040000701"], 0x14}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) kernel console output (not intermixed with test programs): 249.246319][T10201] ? ieee80211_register_hw+0x1911/0x4980 [ 249.246369][T10201] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 249.246397][T10201] ? __asan_memset+0x22/0x50 [ 249.246424][T10201] ? __hrtimer_setup+0x1b7/0x260 [ 249.246444][T10201] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 249.246475][T10201] mac80211_hwsim_new_radio+0x3334/0x5ba0 [ 249.246531][T10201] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 249.246554][T10201] ? kstrndup+0xbf/0x160 [ 249.246586][T10201] hwsim_new_radio_nl+0xf6a/0x1c00 [ 249.246634][T10201] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 249.246668][T10201] ? rcu_is_watching+0x15/0xb0 [ 249.246690][T10201] ? trace_kmalloc+0x2a/0x110 [ 249.246728][T10201] ? __nla_parse+0x40/0x60 [ 249.246760][T10201] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 249.246787][T10201] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 249.246822][T10201] genl_family_rcv_msg_doit+0x22a/0x330 [ 249.246865][T10201] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 249.246905][T10201] ? bpf_lsm_capable+0x9/0x20 [ 249.246927][T10201] ? security_capable+0x7e/0x2c0 [ 249.246963][T10201] genl_rcv_msg+0x61c/0x7a0 [ 249.246995][T10201] ? __pfx_genl_rcv_msg+0x10/0x10 [ 249.247018][T10201] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 249.247043][T10201] ? __lock_acquire+0x6b5/0x2cf0 [ 249.247085][T10201] netlink_rcv_skb+0x232/0x4b0 [ 249.247118][T10201] ? __pfx_genl_rcv_msg+0x10/0x10 [ 249.247143][T10201] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 249.247194][T10201] ? down_read+0x270/0x2e0 [ 249.247215][T10201] ? genl_rcv+0xd/0x40 [ 249.247239][T10201] genl_rcv+0x28/0x40 [ 249.247260][T10201] netlink_unicast+0x80f/0x9b0 [ 249.247297][T10201] ? __pfx_netlink_unicast+0x10/0x10 [ 249.247328][T10201] ? netlink_sendmsg+0x650/0xb40 [ 249.247346][T10201] ? skb_put+0x11b/0x210 [ 249.247369][T10201] netlink_sendmsg+0x813/0xb40 [ 249.247398][T10201] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.247420][T10201] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 249.247464][T10201] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.247483][T10201] sock_sendmsg_nosec+0x112/0x150 [ 249.247516][T10201] ____sys_sendmsg+0x589/0x8c0 [ 249.247537][T10201] ? futex_unqueue+0x211/0x240 [ 249.247575][T10201] ? __pfx_____sys_sendmsg+0x10/0x10 [ 249.247609][T10201] ? import_iovec+0x73/0xa0 [ 249.247639][T10201] ___sys_sendmsg+0x2a5/0x360 [ 249.247666][T10201] ? __pfx____sys_sendmsg+0x10/0x10 [ 249.247694][T10201] ? futex_wait+0x2a2/0x390 [ 249.247743][T10201] ? __fget_files+0x2a/0x420 [ 249.247768][T10201] ? __fget_files+0x3a0/0x420 [ 249.247806][T10201] __x64_sys_sendmsg+0x1bd/0x2a0 [ 249.247833][T10201] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 249.247889][T10201] ? rcu_is_watching+0x15/0xb0 [ 249.247926][T10201] do_syscall_64+0x14d/0xf80 [ 249.247945][T10201] ? trace_irq_disable+0x3b/0x150 [ 249.247969][T10201] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.247991][T10201] ? clear_bhb_loop+0x40/0x90 [ 249.248017][T10201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.248037][T10201] RIP: 0033:0x7fbacd39c799 [ 249.248058][T10201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.248076][T10201] RSP: 002b:00007fbace219028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 249.248098][T10201] RAX: ffffffffffffffda RBX: 00007fbacd615fa0 RCX: 00007fbacd39c799 [ 249.248113][T10201] RDX: 0000000000040000 RSI: 0000200000000040 RDI: 0000000000000004 [ 249.248127][T10201] RBP: 00007fbacd432c99 R08: 0000000000000000 R09: 0000000000000000 [ 249.248140][T10201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.248153][T10201] R13: 00007fbacd616038 R14: 00007fbacd615fa0 R15: 00007fff8f2767d8 [ 249.248188][T10201] [ 249.841550][ T1240] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 249.991544][ T1240] usb 5-1: Using ep0 maxpacket: 32 [ 249.998380][ T1240] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 250.006599][ T1240] usb 5-1: config 0 has no interface number 0 [ 250.015251][ T1240] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 250.029545][ T1240] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.038195][ T1240] usb 5-1: Product: syz [ 250.042489][ T1240] usb 5-1: Manufacturer: syz [ 250.047114][ T1240] usb 5-1: SerialNumber: syz [ 250.055471][ T1240] usb 5-1: config 0 descriptor?? [ 250.063309][ T1240] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 250.303524][ T1240] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 250.370616][ T1240] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 250.418643][T10223] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 250.539055][T10227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1257'. [ 250.569898][T10225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1256'. [ 250.678605][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 250.687139][ T1240] usb 5-1: USB disconnect, device number 14 [ 250.703299][ T1240] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 250.790238][ T1240] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 250.814931][ T1240] quatech2 5-1:0.51: device disconnected [ 251.205932][T10256] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1265'. [ 251.674604][T10275] netlink: 'syz.0.1270': attribute type 2 has an invalid length. [ 251.763942][T10270] xfrm0 speed is unknown, defaulting to 1000 [ 252.118219][T10289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1277'. [ 252.919803][T10321] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1283'. [ 254.842043][ T5917] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 254.981575][ T5917] usb 5-1: device descriptor read/64, error -71 [ 255.084870][T10402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1298'. [ 255.151731][T10405] binder: 10404:10405 ioctl c0306201 2000000001c0 returned -14 [ 255.241620][ T5917] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 255.371620][ T5917] usb 5-1: device descriptor read/64, error -71 [ 255.461627][ T1240] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 255.500282][ T5917] usb usb5-port1: attempt power cycle [ 255.625567][ T1240] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 255.634310][ T1240] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 7354, setting to 64 [ 255.662808][ T1240] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 255.671312][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.673377][ T1240] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 255.679739][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.695771][ T1240] usb 3-1: Manufacturer: syz [ 255.705482][ T1240] usb 3-1: config 0 descriptor?? [ 255.720636][T10409] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 255.734185][ T1240] igorplugusb 3-1:0.0: endpoint incorrect [ 255.851617][ T5917] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 255.872434][ T5917] usb 5-1: device descriptor read/8, error -71 [ 255.934375][ T5976] usb 3-1: USB disconnect, device number 38 [ 256.112039][ T5917] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 256.134017][ T5917] usb 5-1: device descriptor read/8, error -71 [ 256.243114][ T5917] usb usb5-port1: unable to enumerate USB device [ 257.420179][T10469] netlink: 796 bytes leftover after parsing attributes in process `syz.2.1308'. [ 258.059124][T10491] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1314'. [ 258.168684][T10502] binder: 10501:10502 ioctl c0306201 2000000004c0 returned -14 [ 258.324404][T10506] xfrm0 speed is unknown, defaulting to 1000 [ 259.431539][ T1240] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 259.583536][ T1240] usb 3-1: unable to get BOS descriptor or descriptor too short [ 259.592874][ T1240] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 259.603386][ T1240] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 259.614452][ T1240] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 259.629688][ T1240] usb 3-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 259.639089][ T1240] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.648608][ T1240] usb 3-1: Product: syz [ 259.652873][ T1240] usb 3-1: Manufacturer: syz [ 259.657485][ T1240] usb 3-1: SerialNumber: syz [ 259.910491][ T1240] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 259.930250][ T1240] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 260.046000][ T1240] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 260.059983][ T1240] usb 3-1: USB disconnect, device number 39 [ 260.099369][T10545] sysfs: cannot create duplicate filename '/class/ieee80211/4Ï€!F' [ 260.116004][T10545] CPU: 1 UID: 0 PID: 10545 Comm: syz.4.1328 Not tainted syzkaller #0 PREEMPT(full) [ 260.116033][T10545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 260.116045][T10545] Call Trace: [ 260.116052][T10545] [ 260.116060][T10545] dump_stack_lvl+0xe8/0x150 [ 260.116094][T10545] sysfs_warn_dup+0x8e/0xa0 [ 260.116119][T10545] sysfs_do_create_link_sd+0xc0/0x110 [ 260.116146][T10545] device_add_class_symlinks+0x1cf/0x240 [ 260.116181][T10545] device_add+0x475/0xb70 [ 260.116211][T10545] wiphy_register+0x1d73/0x2d50 [ 260.116249][T10545] ? __pfx_wiphy_register+0x10/0x10 [ 260.116276][T10545] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 260.116304][T10545] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 260.116328][T10545] ieee80211_register_hw+0x3cb7/0x4980 [ 260.116348][T10545] ? __lock_acquire+0x6b5/0x2cf0 [ 260.116388][T10545] ? ieee80211_register_hw+0x1911/0x4980 [ 260.116435][T10545] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 260.116460][T10545] ? __asan_memset+0x22/0x50 [ 260.116486][T10545] ? __hrtimer_setup+0x1b7/0x260 [ 260.116505][T10545] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 260.116533][T10545] mac80211_hwsim_new_radio+0x3334/0x5ba0 [ 260.116586][T10545] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 260.116605][T10545] ? kstrndup+0xbf/0x160 [ 260.116637][T10545] hwsim_new_radio_nl+0xf6a/0x1c00 [ 260.116679][T10545] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 260.116709][T10545] ? rcu_is_watching+0x15/0xb0 [ 260.116726][T10545] ? trace_kmalloc+0x2a/0x110 [ 260.116761][T10545] ? __nla_parse+0x40/0x60 [ 260.116803][T10545] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 260.116826][T10545] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 260.116857][T10545] genl_family_rcv_msg_doit+0x22a/0x330 [ 260.116895][T10545] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 260.116930][T10545] ? bpf_lsm_capable+0x9/0x20 [ 260.116950][T10545] ? security_capable+0x7e/0x2c0 [ 260.116982][T10545] genl_rcv_msg+0x61c/0x7a0 [ 260.117012][T10545] ? __pfx_genl_rcv_msg+0x10/0x10 [ 260.117033][T10545] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 260.117054][T10545] ? __lock_acquire+0x6b5/0x2cf0 [ 260.117091][T10545] netlink_rcv_skb+0x232/0x4b0 [ 260.117122][T10545] ? __pfx_genl_rcv_msg+0x10/0x10 [ 260.117145][T10545] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 260.117191][T10545] ? down_read+0x270/0x2e0 [ 260.117210][T10545] ? genl_rcv+0xd/0x40 [ 260.117233][T10545] genl_rcv+0x28/0x40 [ 260.117253][T10545] netlink_unicast+0x80f/0x9b0 [ 260.117288][T10545] ? __pfx_netlink_unicast+0x10/0x10 [ 260.117315][T10545] ? netlink_sendmsg+0x650/0xb40 [ 260.117332][T10545] ? skb_put+0x11b/0x210 [ 260.117355][T10545] netlink_sendmsg+0x813/0xb40 [ 260.117382][T10545] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.117401][T10545] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 260.117439][T10545] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.117456][T10545] sock_sendmsg_nosec+0x112/0x150 [ 260.117485][T10545] ____sys_sendmsg+0x589/0x8c0 [ 260.117504][T10545] ? futex_unqueue+0x211/0x240 [ 260.117539][T10545] ? __pfx_____sys_sendmsg+0x10/0x10 [ 260.117570][T10545] ? import_iovec+0x73/0xa0 [ 260.117598][T10545] ___sys_sendmsg+0x2a5/0x360 [ 260.117624][T10545] ? __pfx____sys_sendmsg+0x10/0x10 [ 260.117652][T10545] ? futex_wait+0x2a2/0x390 [ 260.117699][T10545] ? __fget_files+0x2a/0x420 [ 260.117724][T10545] ? __fget_files+0x3a0/0x420 [ 260.117758][T10545] __x64_sys_sendmsg+0x1bd/0x2a0 [ 260.117783][T10545] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 260.117813][T10545] ? rcu_is_watching+0x15/0xb0 [ 260.117845][T10545] do_syscall_64+0x14d/0xf80 [ 260.117862][T10545] ? trace_irq_disable+0x3b/0x150 [ 260.117894][T10545] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.117914][T10545] ? clear_bhb_loop+0x40/0x90 [ 260.117938][T10545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.117957][T10545] RIP: 0033:0x7f804439c799 [ 260.117978][T10545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.117994][T10545] RSP: 002b:00007f80451fa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 260.118015][T10545] RAX: ffffffffffffffda RBX: 00007f8044615fa0 RCX: 00007f804439c799 [ 260.118029][T10545] RDX: 0000000000040000 RSI: 0000200000000040 RDI: 0000000000000004 [ 260.118040][T10545] RBP: 00007f8044432c99 R08: 0000000000000000 R09: 0000000000000000 [ 260.118052][T10545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.118063][T10545] R13: 00007f8044616038 R14: 00007f8044615fa0 R15: 00007ffd60cd85b8 [ 260.118096][T10545] [ 260.171051][ T5964] udevd[5964]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 261.223347][ T5976] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 261.347436][T10580] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1336'. [ 261.348158][T10577] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 261.363122][T10577] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 261.373284][T10577] vhci_hcd vhci_hcd.0: Device attached [ 261.382693][T10581] vhci_hcd: connection closed [ 261.385919][ T138] vhci_hcd vhci_hcd.3: stop threads [ 261.397655][ T138] vhci_hcd vhci_hcd.3: release socket [ 261.407843][ T138] vhci_hcd vhci_hcd.3: disconnect device [ 261.413979][ T5976] usb 3-1: Using ep0 maxpacket: 16 [ 261.424093][ T5976] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 261.434428][ T5976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.451511][ T5976] usb 3-1: Product: syz [ 261.459195][ T5976] usb 3-1: Manufacturer: syz [ 261.471179][ T5976] usb 3-1: SerialNumber: syz [ 261.484775][ T5976] usb 3-1: config 0 descriptor?? [ 261.897016][ T5976] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 261.930571][ T5976] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 261.944301][ T5976] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 261.975228][ T5976] usb 3-1: media controller created [ 262.028540][ T5976] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 262.043649][ T5896] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 262.222982][ T5896] usb 5-1: Using ep0 maxpacket: 32 [ 262.245165][ T5896] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 262.267437][ T5896] usb 5-1: config 0 has no interface number 0 [ 262.278418][ T5896] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 262.292997][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.301318][ T5976] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 262.309444][ T5896] usb 5-1: Product: syz [ 262.314827][ T5896] usb 5-1: Manufacturer: syz [ 262.319489][ T5976] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 262.328723][ T5896] usb 5-1: SerialNumber: syz [ 262.336274][ T5896] usb 5-1: config 0 descriptor?? [ 262.547831][ T5976] usb 3-1: USB disconnect, device number 40 [ 262.588580][ T5976] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 262.756950][ T5896] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 262.769032][ T5896] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 263.182643][T10597] netlink: 'syz.4.1340': attribute type 8 has an invalid length. [ 263.190560][T10597] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1340'. [ 263.819232][T10621] netlink: 'syz.2.1344': attribute type 10 has an invalid length. [ 263.832634][T10621] team0: Device vxcan1 is of different type [ 264.181608][ T5917] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 264.331902][ T5917] usb 3-1: Using ep0 maxpacket: 8 [ 264.341210][ T5917] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 264.350474][ T5917] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 264.361775][ T5917] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 264.372877][ T5917] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 264.383060][ T5917] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 264.396325][ T5917] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 264.406171][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.417362][ T5896] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -61 [ 264.433201][ T5896] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -61 [ 264.626843][ T5896] usb 5-1: USB disconnect, device number 19 [ 264.648696][ T5917] usb 3-1: GET_CAPABILITIES returned 0 [ 264.657985][ T5917] usbtmc 3-1:16.0: can't read capabilities [ 264.858877][T10625] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1345'. [ 264.870933][ T5917] usb 3-1: USB disconnect, device number 41 [ 265.549071][T10670] input: syz0 as /devices/virtual/input/input15 [ 265.592841][ T1240] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 265.752315][ T1240] usb 5-1: device descriptor read/64, error -71 [ 265.821334][T10678] QAT: Invalid ioctl -1069524929 [ 265.830384][T10678] fuse: Unknown parameter '000000000000000000050x0000000000000005ÿ' [ 265.923989][T10680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1356'. [ 265.965979][T10683] binder: 10682:10683 ioctl c0306201 2000000001c0 returned -14 [ 266.030371][ T1240] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 266.161781][T10695] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1360'. [ 266.181583][ T1240] usb 5-1: device descriptor read/64, error -71 [ 266.301811][ T1240] usb usb5-port1: attempt power cycle [ 266.325582][T10700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1361'. [ 266.641569][ T1240] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 266.673384][ T1240] usb 5-1: device descriptor read/8, error -71 [ 266.935007][ T1240] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 266.962709][ T1240] usb 5-1: device descriptor read/8, error -71 [ 266.994568][T10730] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1366'. [ 267.092127][ T1240] usb usb5-port1: unable to enumerate USB device [ 267.345860][T10752] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 267.711567][ T5917] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 267.865726][ T5917] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 267.874872][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.883520][ T5917] usb 3-1: Product: syz [ 267.887731][ T5917] usb 3-1: Manufacturer: syz [ 267.892418][ T5917] usb 3-1: SerialNumber: syz [ 267.899951][ T5917] usb 3-1: config 0 descriptor?? [ 267.909520][ T5917] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 268.732048][T10780] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.749110][ T5917] gspca_sunplus: reg_w_riv err -71 [ 268.760825][ T5917] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 268.774731][T10780] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1377'. [ 268.786249][ T5917] usb 3-1: USB disconnect, device number 42 [ 268.841341][T10780] netlink: 'syz.4.1377': attribute type 11 has an invalid length. [ 268.849743][T10780] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1377'. [ 269.181611][ T5917] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 269.282353][T10804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1380'. [ 269.353469][ T5917] usb 5-1: Using ep0 maxpacket: 16 [ 269.387674][ T5917] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 269.406546][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.425889][ T5917] usb 5-1: Product: syz [ 269.435151][ T5917] usb 5-1: Manufacturer: syz [ 269.444629][ T5917] usb 5-1: SerialNumber: syz [ 269.459366][ T5917] usb 5-1: config 0 descriptor?? [ 269.871314][ T5917] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 269.883132][ T5917] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 269.893156][ T5917] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 269.901532][ T1223] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 269.915374][ T5917] usb 5-1: media controller created [ 269.934862][ T5917] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 270.031565][ T1223] usb 3-1: device descriptor read/64, error -71 [ 270.237923][ T5917] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 270.269323][ T5917] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 270.281736][ T1223] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 270.419707][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 270.432359][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 270.443994][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 270.451582][ T1223] usb 3-1: device descriptor read/64, error -71 [ 270.462529][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 270.470163][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 270.534496][ T9] usb 5-1: USB disconnect, device number 24 [ 270.579116][T10828] xfrm0 speed is unknown, defaulting to 1000 [ 270.602782][ T1223] usb usb3-port1: attempt power cycle [ 270.644465][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 270.866083][ T203] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.941613][ T1223] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 270.962362][ T1223] usb 3-1: device descriptor read/8, error -71 [ 271.007635][ T808] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 271.036223][ T203] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.044106][ T808] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 271.078962][ T808] usb 4-1: USB disconnect, device number 14 [ 271.203661][ T1223] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 271.239694][ T203] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.262945][ T1223] usb 3-1: device descriptor read/8, error -71 [ 271.372473][ T1223] usb usb3-port1: unable to enumerate USB device [ 271.401613][ T808] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 271.497497][ T203] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.528731][T10828] chnl_net:caif_netlink_parms(): no params data found [ 271.571541][ T808] usb 4-1: Using ep0 maxpacket: 16 [ 271.585928][T10840] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 271.594640][ T808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.613190][ T808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.627943][ T808] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 271.651764][ T808] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 271.661840][ T808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.677319][ T808] usb 4-1: config 0 descriptor?? [ 271.797187][T10847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1388'. [ 271.910090][T10828] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.939895][T10828] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.972258][T10828] bridge_slave_0: entered allmulticast mode [ 271.991920][T10828] bridge_slave_0: entered promiscuous mode [ 272.008765][T10828] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.016415][T10828] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.027342][T10828] bridge_slave_1: entered allmulticast mode [ 272.044975][T10828] bridge_slave_1: entered promiscuous mode [ 272.164239][ T808] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0008/input/input16 [ 272.172429][T10857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.191573][T10857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.209368][ T203] bridge_slave_1: left allmulticast mode [ 272.222412][ T203] bridge_slave_1: left promiscuous mode [ 272.231625][ T203] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.258503][ T203] bridge_slave_0: left allmulticast mode [ 272.268176][ T808] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 272.279693][ T203] bridge_slave_0: left promiscuous mode [ 272.301249][ T203] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.332591][ T203] dvmrp0: left allmulticast mode [ 272.350211][ T1223] usb 4-1: USB disconnect, device number 15 [ 272.397769][T10861] fido_id[10861]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 272.423504][ T1240] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 272.531283][ T5856] Bluetooth: hci5: command tx timeout [ 272.581763][ T1240] usb 5-1: Using ep0 maxpacket: 16 [ 272.600831][ T1240] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 272.615570][ T138] smc: removing ib device syz1 [ 272.616359][ T1240] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.632331][ T1240] usb 5-1: config 0 has no interface number 0 [ 272.641277][ T1240] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 272.650540][ T1240] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.671331][ T1240] usb 5-1: Product: syz [ 272.681314][ T1240] usb 5-1: Manufacturer: syz [ 272.688805][ T1240] usb 5-1: SerialNumber: syz [ 272.734224][ T1240] usb 5-1: config 0 descriptor?? [ 272.763793][ T1240] uvcvideo 5-1:0.105: Found Unit with invalid ID 0 [ 272.778603][ T1240] uvcvideo 5-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 272.810164][ T1240] uvcvideo 5-1:0.105: No valid video chain found. [ 272.843416][ T138] smbdirect: ib_dev[syz1] removed [ 272.995442][ T808] usb 5-1: USB disconnect, device number 25 [ 273.138690][ T203] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.204505][ T203] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.222467][ T1223] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 273.235203][ T203] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 273.262986][ T203] bond0 (unregistering): Released all slaves [ 273.308075][T10828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.318546][ T5934] xfrm0 speed is unknown, defaulting to 1000 [ 273.329570][ T5934] syz1: Port: 1 Link DOWN [ 273.392360][T10828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.416215][ T1223] usb 3-1: not running at top speed; connect to a high speed hub [ 273.426042][ T1223] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 252, changing to 4 [ 273.439091][ T1223] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 49415, setting to 1023 [ 273.451461][ T1223] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 273.464823][ T1223] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 273.474143][ T1223] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.482771][ T1223] usb 3-1: Product: 䀊 [ 273.487159][ T1223] usb 3-1: Manufacturer: à°š [ 273.491906][ T1223] usb 3-1: SerialNumber: syz [ 273.657944][T10828] team0: Port device team_slave_0 added [ 273.698323][T10828] team0: Port device team_slave_1 added [ 273.725199][T10872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.754341][T10872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.782948][T10872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.799490][T10872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.828312][T10872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.856303][T10872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.876345][T10872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.907259][T10872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.954726][T10828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.964454][T10828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 273.993777][T10828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.016515][ T1223] usb 3-1: 1:1 : format type 0 is detected, processed as PCM [ 274.017226][T10828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.032774][T10828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 274.046079][ T1223] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 274.062013][ T808] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 274.079502][T10828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.151502][ T1240] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 274.202029][ T808] usb 4-1: device descriptor read/64, error -71 [ 274.223296][ T1223] usb 3-1: USB disconnect, device number 47 [ 274.335530][ T1240] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.386431][ T1240] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.406943][ T1240] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 274.444836][ T1240] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 274.451898][ T808] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 274.465333][ T1240] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.498591][T10828] hsr_slave_0: entered promiscuous mode [ 274.509908][T10828] hsr_slave_1: entered promiscuous mode [ 274.537372][ T1240] usb 5-1: config 0 descriptor?? [ 274.579204][T10828] debugfs: 'hsr0' already exists in 'hsr' [ 274.590347][T10828] Cannot create hsr debugfs directory [ 274.601809][ T5856] Bluetooth: hci5: command tx timeout [ 274.624079][ T808] usb 4-1: device descriptor read/64, error -71 [ 274.751965][ T808] usb usb4-port1: attempt power cycle [ 274.854193][T10910] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 274.864408][T10910] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 275.111676][ T808] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 275.129881][ T1240] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 275.164807][ T808] usb 4-1: device descriptor read/8, error -71 [ 275.422272][ T808] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 275.453148][ T808] usb 4-1: device descriptor read/8, error -71 [ 275.581883][ T808] usb usb4-port1: unable to enumerate USB device [ 276.329426][ C1] plantronics 0003:047F:FFFF.0009: usb_submit_urb(ctrl) failed: -1 [ 276.393426][T10828] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 276.424263][T10828] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 276.463180][T10828] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 276.506429][T10828] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 276.516390][ T1223] usb 5-1: reset high-speed USB device number 26 using dummy_hcd [ 276.673539][ T1223] usb 5-1: device descriptor read/64, error -32 [ 276.681579][ T5856] Bluetooth: hci5: command tx timeout [ 276.746822][T10828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.899850][T10828] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.923500][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.930797][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.942027][ T1223] usb 5-1: reset high-speed USB device number 26 using dummy_hcd [ 276.986796][ T138] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.994074][ T138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.092603][ T1223] usb 5-1: device descriptor read/64, error -32 [ 277.224272][ T203] hsr_slave_0: left promiscuous mode [ 277.238600][ T203] hsr_slave_1: left promiscuous mode [ 277.252361][ T203] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.261936][ T203] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.276445][ T203] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.284129][ T203] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.357828][ T203] veth1_macvtap: left promiscuous mode [ 277.369975][ T203] veth0_macvtap: left promiscuous mode [ 277.388791][ T203] veth1_vlan: left promiscuous mode [ 277.394981][ T1223] usb 5-1: reset high-speed USB device number 26 using dummy_hcd [ 277.409119][ T203] veth0_vlan: left promiscuous mode [ 277.432239][ T1223] usb 5-1: device descriptor read/8, error -32 [ 277.501979][ T9] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 277.672511][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 277.696437][ T9] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 277.721900][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.743901][ T9] usb 3-1: config 0 descriptor?? [ 277.756756][ T9] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 277.881799][ T5856] Bluetooth: hci4: command tx timeout [ 277.979774][T10961] option changes via remount are deprecated (pid=10960 comm=syz.2.1408) [ 278.014934][T10961] cgroup: option or name mismatch, new: 0x0 "pim6reg0", old: 0x0 "" [ 278.026421][ T9] usb 3-1: Detected FT232A [ 278.053292][ T9] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 278.067546][ T5848] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 278.161863][ T1223] usb 5-1: reset high-speed USB device number 26 using dummy_hcd [ 278.188976][ T203] team0 (unregistering): Port device team_slave_1 removed [ 278.207901][ T1223] usb 5-1: device descriptor read/8, error -71 [ 278.231530][ T5848] usb 4-1: Using ep0 maxpacket: 16 [ 278.236787][ T203] team0 (unregistering): Port device team_slave_0 removed [ 278.249438][ T5848] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 278.272228][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.291552][ T5848] usb 4-1: Product: syz [ 278.302222][ T5848] usb 4-1: Manufacturer: syz [ 278.308451][ T5848] usb 4-1: SerialNumber: syz [ 278.328230][ T5848] usb 4-1: config 0 descriptor?? [ 278.372105][ T1240] usb 5-1: USB disconnect, device number 26 [ 278.601575][ T1240] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 278.630772][ T5950] usb 3-1: USB disconnect, device number 48 [ 278.656763][ T5950] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 278.675190][ T5950] ftdi_sio 3-1:0.0: device disconnected [ 278.761236][ T5848] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 278.768840][ T5856] Bluetooth: hci5: command tx timeout [ 278.781534][ T1240] usb 5-1: device descriptor read/64, error -71 [ 278.812845][ T5848] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 278.833674][ T5848] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 278.856640][ T5848] usb 4-1: media controller created [ 278.906213][ T5848] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 279.052421][ T1240] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 279.125097][ T5848] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 279.159100][ T5848] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 279.201540][ T1240] usb 5-1: device descriptor read/64, error -71 [ 279.221348][T10828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.332916][ T1240] usb usb5-port1: attempt power cycle [ 279.398446][ T5848] usb 4-1: USB disconnect, device number 20 [ 279.525524][ T5848] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 279.627459][T11011] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1415'. [ 279.703893][ T1240] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 279.754741][ T1240] usb 5-1: device descriptor read/8, error -71 [ 279.820808][T11017] trusted_key: syz.2.1416 sent an empty control message without MSG_MORE. [ 279.986943][T10828] veth0_vlan: entered promiscuous mode [ 280.011976][ T1240] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 280.037251][T10828] veth1_vlan: entered promiscuous mode [ 280.051730][ T1240] usb 5-1: device descriptor read/8, error -71 [ 280.172206][ T1240] usb usb5-port1: unable to enumerate USB device [ 280.240635][T10828] veth0_macvtap: entered promiscuous mode [ 280.258959][T10828] veth1_macvtap: entered promiscuous mode [ 280.303034][T10828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.337103][T10828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.372074][ T138] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.390129][ T138] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.407092][ T138] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.445951][ T138] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.457164][ T5950] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 280.628075][ T138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.639279][ T5950] usb 4-1: Using ep0 maxpacket: 32 [ 280.664189][ T5950] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 280.684796][ T138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.701271][ T5950] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 280.733841][ T5950] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 280.748540][ T5950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 280.781604][ T5950] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 280.793908][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.795982][ T5950] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x66, changing to 0x6 [ 280.811862][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.825521][ T5950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 280.858571][ T5950] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 280.901102][ T5950] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 280.943934][ T5950] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 280.969680][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.978269][ T24] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 281.010312][ T5950] usb 4-1: config 0 descriptor?? [ 281.152373][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 281.180118][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.222551][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.255290][ T9] usb 4-1: USB disconnect, device number 21 [ 281.257002][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 281.308439][ T24] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 281.333640][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.367889][ T24] usb 3-1: config 0 descriptor?? [ 281.387453][T11061] sysfs: cannot create duplicate filename '/class/ieee80211/4Ï€!F' [ 281.421988][T11061] CPU: 0 UID: 0 PID: 11061 Comm: syz.5.1427 Tainted: G L syzkaller #0 PREEMPT(full) [ 281.422022][T11061] Tainted: [L]=SOFTLOCKUP [ 281.422030][T11061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 281.422043][T11061] Call Trace: [ 281.422051][T11061] [ 281.422060][T11061] dump_stack_lvl+0xe8/0x150 [ 281.422096][T11061] sysfs_warn_dup+0x8e/0xa0 [ 281.422124][T11061] sysfs_do_create_link_sd+0xc0/0x110 [ 281.422155][T11061] device_add_class_symlinks+0x1cf/0x240 [ 281.422190][T11061] device_add+0x475/0xb70 [ 281.422226][T11061] wiphy_register+0x1d73/0x2d50 [ 281.422271][T11061] ? __pfx_wiphy_register+0x10/0x10 [ 281.422309][T11061] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 281.422345][T11061] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 281.422373][T11061] ieee80211_register_hw+0x3cb7/0x4980 [ 281.422398][T11061] ? __lock_acquire+0x6b5/0x2cf0 [ 281.422444][T11061] ? ieee80211_register_hw+0x1911/0x4980 [ 281.422494][T11061] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 281.422524][T11061] ? __asan_memset+0x22/0x50 [ 281.422552][T11061] ? __hrtimer_setup+0x1b7/0x260 [ 281.422573][T11061] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 281.422603][T11061] mac80211_hwsim_new_radio+0x3334/0x5ba0 [ 281.422670][T11061] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 281.422710][T11061] ? kstrndup+0xbf/0x160 [ 281.422743][T11061] hwsim_new_radio_nl+0xf6a/0x1c00 [ 281.422792][T11061] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 281.422825][T11061] ? rcu_is_watching+0x15/0xb0 [ 281.422847][T11061] ? trace_kmalloc+0x2a/0x110 [ 281.422884][T11061] ? __nla_parse+0x40/0x60 [ 281.422916][T11061] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 281.422941][T11061] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 281.422976][T11061] genl_family_rcv_msg_doit+0x22a/0x330 [ 281.423013][T11061] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 281.423052][T11061] ? bpf_lsm_capable+0x9/0x20 [ 281.423074][T11061] ? security_capable+0x7e/0x2c0 [ 281.423111][T11061] genl_rcv_msg+0x61c/0x7a0 [ 281.423143][T11061] ? __pfx_genl_rcv_msg+0x10/0x10 [ 281.423167][T11061] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 281.423190][T11061] ? __lock_acquire+0x6b5/0x2cf0 [ 281.423238][T11061] netlink_rcv_skb+0x232/0x4b0 [ 281.423271][T11061] ? __pfx_genl_rcv_msg+0x10/0x10 [ 281.423314][T11061] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 281.423366][T11061] ? down_read+0x270/0x2e0 [ 281.423387][T11061] ? genl_rcv+0xd/0x40 [ 281.423413][T11061] genl_rcv+0x28/0x40 [ 281.423435][T11061] netlink_unicast+0x80f/0x9b0 [ 281.423472][T11061] ? __pfx_netlink_unicast+0x10/0x10 [ 281.423501][T11061] ? netlink_sendmsg+0x650/0xb40 [ 281.423518][T11061] ? skb_put+0x11b/0x210 [ 281.423543][T11061] netlink_sendmsg+0x813/0xb40 [ 281.423572][T11061] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.423593][T11061] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 281.423632][T11061] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.423651][T11061] sock_sendmsg_nosec+0x112/0x150 [ 281.423684][T11061] ____sys_sendmsg+0x589/0x8c0 [ 281.423703][T11061] ? futex_unqueue+0x211/0x240 [ 281.423739][T11061] ? __pfx_____sys_sendmsg+0x10/0x10 [ 281.423770][T11061] ? import_iovec+0x73/0xa0 [ 281.423800][T11061] ___sys_sendmsg+0x2a5/0x360 [ 281.423831][T11061] ? __pfx____sys_sendmsg+0x10/0x10 [ 281.423861][T11061] ? futex_wait+0x2a2/0x390 [ 281.423909][T11061] ? __fget_files+0x2a/0x420 [ 281.423934][T11061] ? __fget_files+0x3a0/0x420 [ 281.423973][T11061] __x64_sys_sendmsg+0x1bd/0x2a0 [ 281.423998][T11061] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 281.424030][T11061] ? rcu_is_watching+0x15/0xb0 [ 281.424063][T11061] do_syscall_64+0x14d/0xf80 [ 281.424082][T11061] ? trace_irq_disable+0x3b/0x150 [ 281.424106][T11061] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.424128][T11061] ? clear_bhb_loop+0x40/0x90 [ 281.424154][T11061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.424174][T11061] RIP: 0033:0x7f7c6979c799 [ 281.424194][T11061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.424212][T11061] RSP: 002b:00007f7c6a589028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 281.424235][T11061] RAX: ffffffffffffffda RBX: 00007f7c69a15fa0 RCX: 00007f7c6979c799 [ 281.424251][T11061] RDX: 0000000000040000 RSI: 0000200000000040 RDI: 0000000000000004 [ 281.424264][T11061] RBP: 00007f7c69832c99 R08: 0000000000000000 R09: 0000000000000000 [ 281.424277][T11061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 281.424290][T11061] R13: 00007f7c69a16038 R14: 00007f7c69a15fa0 R15: 00007ffe656e0a78 [ 281.424333][T11061] [ 282.120475][T11044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.138174][T11044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.333335][T11079] netlink: 'syz.3.1433': attribute type 1 has an invalid length. [ 282.341154][T11079] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1433'. [ 282.353422][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 282.359529][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 282.368927][ T5950] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 282.419629][ T24] usb 3-1: USB disconnect, device number 49 [ 282.532910][ T5950] usb 5-1: device descriptor read/64, error -71 [ 282.792975][ T5950] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 282.889663][T11098] netlink: 'syz.3.1437': attribute type 10 has an invalid length. [ 282.916422][T11098] team0: Device vxcan1 is of different type [ 282.954349][ T5950] usb 5-1: device descriptor read/64, error -71 [ 282.983053][T11102] binder: 11100:11102 ioctl c0306201 2000000004c0 returned -14 [ 283.048088][T11105] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 283.060603][T11106] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 283.080743][T11105] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 283.102509][ T5950] usb usb5-port1: attempt power cycle [ 283.441611][ T5950] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 283.484655][ T5950] usb 5-1: device descriptor read/8, error -71 [ 283.741533][ T5950] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 283.787134][ T5950] usb 5-1: device descriptor read/8, error -71 [ 283.866881][ T5848] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 283.890246][T11146] loop4: detected capacity change from 0 to 1 [ 283.911967][ T5950] usb usb5-port1: unable to enumerate USB device [ 283.950226][T11146] Dev loop4: unable to read RDB block 1 [ 283.956470][T11146] loop4: unable to read partition table [ 283.965841][T11146] loop4: partition table beyond EOD, truncated [ 283.974708][T11146] loop_reread_partitions: partition scan of loop4 (îÝ·ÂU@™:ÖB$Œ{WÎÉ´å) failed (rc=-5) [ 284.025051][ T5848] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.070462][ T5848] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.103937][ T5848] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 284.125245][ T5848] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 284.136834][ T5848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.148113][T11149] binder: 11148:11149 ioctl c0306201 2000000001c0 returned -14 [ 284.176536][ T5848] usb 4-1: config 0 descriptor?? [ 284.189062][T11152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1451'. [ 284.637171][ T5848] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 284.886500][T11174] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1456'. [ 285.061179][T11182] FAULT_INJECTION: forcing a failure. [ 285.061179][T11182] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.091514][T11182] CPU: 1 UID: 0 PID: 11182 Comm: syz.2.1459 Tainted: G L syzkaller #0 PREEMPT(full) [ 285.091548][T11182] Tainted: [L]=SOFTLOCKUP [ 285.091556][T11182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 285.091567][T11182] Call Trace: [ 285.091576][T11182] [ 285.091584][T11182] dump_stack_lvl+0xe8/0x150 [ 285.091617][T11182] should_fail_ex+0x412/0x560 [ 285.091644][T11182] _copy_from_iter+0x1d3/0x1670 [ 285.091665][T11182] ? format_decode+0x60f/0xe10 [ 285.091695][T11182] ? vsnprintf+0xdf1/0xee0 [ 285.091720][T11182] ? __pfx__copy_from_iter+0x10/0x10 [ 285.091756][T11182] tun_get_user+0x267/0x4300 [ 285.091788][T11182] ? unwind_get_return_address+0x4d/0x90 [ 285.091828][T11182] ? __pfx_tun_get_user+0x10/0x10 [ 285.091858][T11182] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 285.091887][T11182] ? lockdep_hardirqs_on+0x7a/0x110 [ 285.091906][T11182] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 285.091934][T11182] ? save_netdev_trace_buffer+0x4e2/0x610 [ 285.091971][T11182] ? ref_tracker_alloc+0x35c/0x4c0 [ 285.091995][T11182] ? tun_chr_write_iter+0x60/0x210 [ 285.092023][T11182] ? vfs_write+0x61d/0xb90 [ 285.092039][T11182] ? ksys_write+0x150/0x270 [ 285.092056][T11182] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 285.092086][T11182] ? tun_get+0x1c/0x2f0 [ 285.092119][T11182] ? tun_get+0x1c/0x2f0 [ 285.092148][T11182] ? tun_get+0x1c/0x2f0 [ 285.092181][T11182] tun_chr_write_iter+0x113/0x210 [ 285.092213][T11182] vfs_write+0x61d/0xb90 [ 285.092240][T11182] ? __pfx_vfs_write+0x10/0x10 [ 285.092268][T11182] ? __fget_files+0x2a/0x420 [ 285.092302][T11182] ksys_write+0x150/0x270 [ 285.092323][T11182] ? __pfx_ksys_write+0x10/0x10 [ 285.092353][T11182] do_syscall_64+0x14d/0xf80 [ 285.092371][T11182] ? trace_irq_disable+0x3b/0x150 [ 285.092393][T11182] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.092423][T11182] ? clear_bhb_loop+0x40/0x90 [ 285.092447][T11182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.092467][T11182] RIP: 0033:0x7fbacd39c799 [ 285.092486][T11182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.092502][T11182] RSP: 002b:00007fbace219028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 285.092523][T11182] RAX: ffffffffffffffda RBX: 00007fbacd615fa0 RCX: 00007fbacd39c799 [ 285.092537][T11182] RDX: 000000000000fdef RSI: 0000200000000080 RDI: 0000000000000003 [ 285.092550][T11182] RBP: 00007fbace219090 R08: 0000000000000000 R09: 0000000000000000 [ 285.092562][T11182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.092573][T11182] R13: 00007fbacd616038 R14: 00007fbacd615fa0 R15: 00007fff8f2767d8 [ 285.092603][T11182] [ 285.511543][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 285.664932][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 285.680552][T11192] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1462'. [ 285.699011][ T9] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 285.733815][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.768007][ T9] usb 6-1: Product: syz [ 285.776459][ T9] usb 6-1: Manufacturer: syz [ 285.787838][ T9] usb 6-1: SerialNumber: syz [ 285.812808][ T9] usb 6-1: config 0 descriptor?? [ 285.951749][ C0] plantronics 0003:047F:FFFF.000A: usb_submit_urb(ctrl) failed: -1 [ 286.114886][ T5917] usb 4-1: reset high-speed USB device number 22 using dummy_hcd [ 286.227692][ T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 286.257170][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 286.266599][ T5917] usb 4-1: device descriptor read/64, error -32 [ 286.271962][ T24] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 286.282440][ T9] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 286.300772][ T9] usb 6-1: media controller created [ 286.335460][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 286.446127][ T24] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 286.461002][ T24] usb 5-1: can't read configurations, error -22 [ 286.541560][ T5917] usb 4-1: reset high-speed USB device number 22 using dummy_hcd [ 286.613705][ T24] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 286.643612][ T9] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 286.661529][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 286.695039][ T5917] usb 4-1: device descriptor read/64, error -32 [ 286.803976][ T24] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 286.819237][ T24] usb 5-1: can't read configurations, error -22 [ 286.833522][ T24] usb usb5-port1: attempt power cycle [ 286.891904][ T9] usb 6-1: USB disconnect, device number 2 [ 286.942877][ T5917] usb 4-1: reset high-speed USB device number 22 using dummy_hcd [ 286.993953][ T5917] usb 4-1: device descriptor read/8, error -32 [ 287.002707][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 287.182307][ T24] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 287.230860][ T24] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 287.263200][ T24] usb 5-1: can't read configurations, error -22 [ 287.411740][ T24] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 287.457167][ T24] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 287.472461][ T24] usb 5-1: can't read configurations, error -22 [ 287.489497][ T24] usb usb5-port1: unable to enumerate USB device [ 287.551508][ T5950] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 287.642549][ T5856] Bluetooth: hci0: command 0x0c1a tx timeout [ 287.721124][T11245] sysfs: cannot create duplicate filename '/class/ieee80211/4Ï€!F' [ 287.731514][ T5950] usb 3-1: Using ep0 maxpacket: 32 [ 287.736797][T11245] CPU: 0 UID: 0 PID: 11245 Comm: syz.5.1471 Tainted: G L syzkaller #0 PREEMPT(full) [ 287.736829][T11245] Tainted: [L]=SOFTLOCKUP [ 287.736836][T11245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 287.736848][T11245] Call Trace: [ 287.736856][T11245] [ 287.736865][T11245] dump_stack_lvl+0xe8/0x150 [ 287.736901][T11245] sysfs_warn_dup+0x8e/0xa0 [ 287.736929][T11245] sysfs_do_create_link_sd+0xc0/0x110 [ 287.736960][T11245] device_add_class_symlinks+0x1cf/0x240 [ 287.736995][T11245] device_add+0x475/0xb70 [ 287.737030][T11245] wiphy_register+0x1d73/0x2d50 [ 287.737074][T11245] ? __pfx_wiphy_register+0x10/0x10 [ 287.737103][T11245] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 287.737136][T11245] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 287.737163][T11245] ieee80211_register_hw+0x3cb7/0x4980 [ 287.737186][T11245] ? __lock_acquire+0x6b5/0x2cf0 [ 287.737230][T11245] ? ieee80211_register_hw+0x1911/0x4980 [ 287.737281][T11245] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 287.737309][T11245] ? __asan_memset+0x22/0x50 [ 287.737337][T11245] ? __hrtimer_setup+0x1b7/0x260 [ 287.737366][T11245] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 287.737398][T11245] mac80211_hwsim_new_radio+0x3334/0x5ba0 [ 287.737455][T11245] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 287.737477][T11245] ? kstrndup+0xbf/0x160 [ 287.737510][T11245] hwsim_new_radio_nl+0xf6a/0x1c00 [ 287.737558][T11245] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 287.737592][T11245] ? rcu_is_watching+0x15/0xb0 [ 287.737612][T11245] ? trace_kmalloc+0x2a/0x110 [ 287.737659][T11245] ? __nla_parse+0x40/0x60 [ 287.737691][T11245] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 287.737715][T11245] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 287.737745][T11245] genl_family_rcv_msg_doit+0x22a/0x330 [ 287.737775][T11245] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 287.737811][T11245] ? bpf_lsm_capable+0x9/0x20 [ 287.737831][T11245] ? security_capable+0x7e/0x2c0 [ 287.737864][T11245] genl_rcv_msg+0x61c/0x7a0 [ 287.737893][T11245] ? __pfx_genl_rcv_msg+0x10/0x10 [ 287.737914][T11245] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 287.737935][T11245] ? __lock_acquire+0x6b5/0x2cf0 [ 287.737975][T11245] netlink_rcv_skb+0x232/0x4b0 [ 287.738004][T11245] ? __pfx_genl_rcv_msg+0x10/0x10 [ 287.738027][T11245] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 287.738073][T11245] ? down_read+0x270/0x2e0 [ 287.738092][T11245] ? genl_rcv+0xd/0x40 [ 287.738115][T11245] genl_rcv+0x28/0x40 [ 287.738135][T11245] netlink_unicast+0x80f/0x9b0 [ 287.738171][T11245] ? __pfx_netlink_unicast+0x10/0x10 [ 287.738197][T11245] ? netlink_sendmsg+0x650/0xb40 [ 287.738213][T11245] ? skb_put+0x11b/0x210 [ 287.738236][T11245] netlink_sendmsg+0x813/0xb40 [ 287.738263][T11245] ? __pfx_netlink_sendmsg+0x10/0x10 [ 287.738283][T11245] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 287.738321][T11245] ? __pfx_netlink_sendmsg+0x10/0x10 [ 287.738345][T11245] sock_sendmsg_nosec+0x112/0x150 [ 287.738376][T11245] ____sys_sendmsg+0x589/0x8c0 [ 287.738395][T11245] ? futex_unqueue+0x211/0x240 [ 287.738430][T11245] ? __pfx_____sys_sendmsg+0x10/0x10 [ 287.738460][T11245] ? import_iovec+0x73/0xa0 [ 287.738488][T11245] ___sys_sendmsg+0x2a5/0x360 [ 287.738515][T11245] ? __pfx____sys_sendmsg+0x10/0x10 [ 287.738544][T11245] ? futex_wait+0x2a2/0x390 [ 287.738592][T11245] ? __fget_files+0x2a/0x420 [ 287.738616][T11245] ? __fget_files+0x3a0/0x420 [ 287.738651][T11245] __x64_sys_sendmsg+0x1bd/0x2a0 [ 287.738675][T11245] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 287.738705][T11245] ? rcu_is_watching+0x15/0xb0 [ 287.738736][T11245] do_syscall_64+0x14d/0xf80 [ 287.738753][T11245] ? trace_irq_disable+0x3b/0x150 [ 287.738775][T11245] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.738814][T11245] ? clear_bhb_loop+0x40/0x90 [ 287.738839][T11245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.738859][T11245] RIP: 0033:0x7f7c6979c799 [ 287.738879][T11245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.738896][T11245] RSP: 002b:00007f7c6a589028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 287.738918][T11245] RAX: ffffffffffffffda RBX: 00007f7c69a15fa0 RCX: 00007f7c6979c799 [ 287.738932][T11245] RDX: 0000000000040000 RSI: 0000200000000040 RDI: 0000000000000004 [ 287.738944][T11245] RBP: 00007f7c69832c99 R08: 0000000000000000 R09: 0000000000000000 [ 287.738957][T11245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 287.738968][T11245] R13: 00007f7c69a16038 R14: 00007f7c69a15fa0 R15: 00007ffe656e0a78 [ 287.739000][T11245] [ 287.754706][ T5950] usb 3-1: config 0 has no interfaces? [ 287.794086][ T5917] usb 4-1: reset high-speed USB device number 22 using dummy_hcd [ 287.813326][ T5917] usb 4-1: device descriptor read/8, error -71 [ 288.003848][ T5950] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 288.154150][ T5848] usb 4-1: USB disconnect, device number 22 [ 288.315685][ T5950] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 288.324503][ T5950] usb 3-1: Product: syz [ 288.328825][ T5950] usb 3-1: Manufacturer: syz [ 288.335247][ T5950] usb 3-1: SerialNumber: syz [ 288.356592][ T5950] usb 3-1: config 0 descriptor?? [ 288.529696][T11259] netlink: 188 bytes leftover after parsing attributes in process `syz.5.1474'. [ 288.542370][ T5848] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 288.589394][T11230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.621120][T11230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.648350][T11230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.659168][T11230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.671868][ T9] usb 3-1: USB disconnect, device number 50 [ 288.691670][ T5848] usb 4-1: device descriptor read/64, error -71 [ 288.837618][T11265] random: crng reseeded on system resumption [ 288.857918][T11265] tls_set_device_offload_rx: netdev not found [ 288.911266][T11269] Unrecognized hibernate image header format! [ 288.917833][T11269] PM: hibernation: Image mismatch: architecture specific data [ 288.941622][ T5848] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 289.074888][ T5848] usb 4-1: device descriptor read/64, error -71 [ 289.113763][T11274] netlink: 'syz.5.1479': attribute type 11 has an invalid length. [ 289.141559][ T5950] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 289.208616][ T5848] usb usb4-port1: attempt power cycle [ 289.316165][ T5950] usb 3-1: config index 0 descriptor too short (expected 36, got 27) [ 289.333792][ T5950] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 289.360091][ T5950] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 0.40 [ 289.371158][ T5950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.395147][ T5950] usb 3-1: config 0 descriptor?? [ 289.414682][ T5950] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 289.440858][ T5950] usb 3-1: Detected SIO [ 289.457082][ T5950] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 289.551606][ T5848] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 289.593487][ T5848] usb 4-1: device descriptor read/8, error -71 [ 289.611311][T11230] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 289.643475][ T5950] usb 3-1: USB disconnect, device number 51 [ 289.658519][ T5950] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 289.674665][ T5950] ftdi_sio 3-1:0.0: device disconnected [ 289.844435][ T5848] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 289.872483][ T5848] usb 4-1: device descriptor read/8, error -71 [ 289.981978][ T5848] usb usb4-port1: unable to enumerate USB device [ 290.195453][T11301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1489'. [ 290.981295][T11323] FAULT_INJECTION: forcing a failure. [ 290.981295][T11323] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 291.021195][T11328] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 291.037706][T11323] CPU: 1 UID: 0 PID: 11323 Comm: syz.2.1497 Tainted: G L syzkaller #0 PREEMPT(full) [ 291.037740][T11323] Tainted: [L]=SOFTLOCKUP [ 291.037748][T11323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 291.037760][T11323] Call Trace: [ 291.037768][T11323] [ 291.037777][T11323] dump_stack_lvl+0xe8/0x150 [ 291.037812][T11323] should_fail_ex+0x412/0x560 [ 291.037841][T11323] _copy_from_iter+0x1d3/0x1670 [ 291.037864][T11323] ? format_decode+0x60f/0xe10 [ 291.037897][T11323] ? vsnprintf+0xdf1/0xee0 [ 291.037923][T11323] ? __pfx__copy_from_iter+0x10/0x10 [ 291.037962][T11323] tun_get_user+0x6cf/0x4300 [ 291.038017][T11323] ? __pfx_tun_get_user+0x10/0x10 [ 291.038048][T11323] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 291.038077][T11323] ? lockdep_hardirqs_on+0x7a/0x110 [ 291.038097][T11323] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 291.038127][T11323] ? save_netdev_trace_buffer+0x4e2/0x610 [ 291.038164][T11323] ? ref_tracker_alloc+0x35c/0x4c0 [ 291.038188][T11323] ? tun_chr_write_iter+0x60/0x210 [ 291.038215][T11323] ? vfs_write+0x61d/0xb90 [ 291.038232][T11323] ? ksys_write+0x150/0x270 [ 291.038250][T11323] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 291.038281][T11323] ? tun_get+0x1c/0x2f0 [ 291.038316][T11323] ? tun_get+0x1c/0x2f0 [ 291.038344][T11323] ? tun_get+0x1c/0x2f0 [ 291.038379][T11323] tun_chr_write_iter+0x113/0x210 [ 291.038413][T11323] vfs_write+0x61d/0xb90 [ 291.038441][T11323] ? __pfx_vfs_write+0x10/0x10 [ 291.038471][T11323] ? __fget_files+0x2a/0x420 [ 291.038506][T11323] ksys_write+0x150/0x270 [ 291.038529][T11323] ? __pfx_ksys_write+0x10/0x10 [ 291.038567][T11323] do_syscall_64+0x14d/0xf80 [ 291.038586][T11323] ? trace_irq_disable+0x3b/0x150 [ 291.038610][T11323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.038630][T11323] ? clear_bhb_loop+0x40/0x90 [ 291.038656][T11323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.038676][T11323] RIP: 0033:0x7fbacd39c799 [ 291.038696][T11323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.038714][T11323] RSP: 002b:00007fbace219028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 291.038740][T11323] RAX: ffffffffffffffda RBX: 00007fbacd615fa0 RCX: 00007fbacd39c799 [ 291.038754][T11323] RDX: 000000000000fdef RSI: 0000200000000080 RDI: 0000000000000003 [ 291.038767][T11323] RBP: 00007fbace219090 R08: 0000000000000000 R09: 0000000000000000 [ 291.038779][T11323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.038791][T11323] R13: 00007fbacd616038 R14: 00007fbacd615fa0 R15: 00007fff8f2767d8 [ 291.038823][T11323] [ 291.316818][T11328] overlayfs: failed lookup in lower (newroot/347, name='file0', err=-40): overlapping layers [ 291.881704][ T5848] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 292.051684][ T5917] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 292.071939][ T5848] usb 6-1: Using ep0 maxpacket: 32 [ 292.080956][ T5848] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.103162][ T5848] usb 6-1: config 0 has no interfaces? [ 292.125736][ T5848] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 292.143274][ T5848] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.161565][ T5848] usb 6-1: Product: syz [ 292.170338][ T5848] usb 6-1: Manufacturer: syz [ 292.181509][ T5848] usb 6-1: SerialNumber: syz [ 292.196087][ T5848] usb 6-1: config 0 descriptor?? [ 292.242829][ T5917] usb 3-1: Using ep0 maxpacket: 32 [ 292.266619][ T5917] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 292.287098][T11359] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1505'. [ 292.302586][T11357] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1504'. [ 292.328790][ T5917] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 292.350131][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.377507][ T5917] usb 3-1: Product: syz [ 292.391505][ T5917] usb 3-1: Manufacturer: syz [ 292.399243][ T5917] usb 3-1: SerialNumber: syz [ 292.509798][T11365] random: crng reseeded on system resumption [ 292.553675][T11365] tls_set_device_offload_rx: netdev not found [ 292.659756][ T5917] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 292.697728][ T5917] usb 3-1: unit 4 not found! [ 292.707662][ T5917] usb 3-1: unit 85 not found! [ 292.839561][T11365] Unrecognized hibernate image header format! [ 292.857335][ T5917] usb 3-1: USB disconnect, device number 52 [ 292.871017][T11365] PM: hibernation: Image mismatch: architecture specific data [ 292.982841][ T5854] udevd[5854]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 293.137860][T11390] binder: 11389:11390 ioctl c0306201 2000000004c0 returned -14 [ 293.661537][ T5950] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 293.836964][ T5950] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.875248][ T5950] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.897538][ T5950] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 293.929469][ T5950] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 293.942565][ T5950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.975490][ T5950] usb 3-1: config 0 descriptor?? [ 294.463197][ T5950] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 294.678079][ T5917] usb 6-1: USB disconnect, device number 3 [ 295.179461][T11459] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 295.733992][ C1] plantronics 0003:047F:FFFF.000B: usb_submit_urb(ctrl) failed: -1 [ 295.934338][ T5950] usb 3-1: reset high-speed USB device number 53 using dummy_hcd [ 296.112921][ T5950] usb 3-1: device descriptor read/64, error -32 [ 296.147272][T11486] loop4: detected capacity change from 0 to 1 [ 296.182531][ T9151] Dev loop4: unable to read RDB block 1 [ 296.189773][ T9151] loop4: unable to read partition table [ 296.196253][ T9151] loop4: partition table beyond EOD, truncated [ 296.215563][T11486] Dev loop4: unable to read RDB block 1 [ 296.226496][T11486] loop4: unable to read partition table [ 296.232868][T11486] loop4: partition table beyond EOD, truncated [ 296.239682][T11486] loop_reread_partitions: partition scan of loop4 (îÝ·ÂU@™:ÖB$Œ{WÎÉ´å) failed (rc=-5) [ 296.251802][ T5917] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 296.381783][ T5950] usb 3-1: reset high-speed USB device number 53 using dummy_hcd [ 296.422516][ T5917] usb 5-1: Using ep0 maxpacket: 32 [ 296.439620][ T5917] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.452773][ T5917] usb 5-1: config 0 has no interfaces? [ 296.461025][ T5917] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 296.470374][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.479184][ T5917] usb 5-1: Product: syz [ 296.483718][ T5917] usb 5-1: Manufacturer: syz [ 296.488428][ T5917] usb 5-1: SerialNumber: syz [ 296.499970][ T5917] usb 5-1: config 0 descriptor?? [ 296.511965][ T5950] usb 3-1: device descriptor read/64, error -32 [ 296.599207][ T29] audit: type=1326 audit(1773815244.626:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11498 comm="syz.3.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcad9c799 code=0x7ffc0000 [ 296.627137][ T29] audit: type=1326 audit(1773815244.626:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11498 comm="syz.3.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcad9c799 code=0x7ffc0000 [ 296.651587][ T29] audit: type=1326 audit(1773815244.626:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11498 comm="syz.3.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcad9c799 code=0x7ffc0000 [ 296.675693][ T29] audit: type=1326 audit(1773815244.626:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11498 comm="syz.3.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcad9c799 code=0x7ffc0000 [ 296.698635][ T29] audit: type=1326 audit(1773815244.636:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11498 comm="syz.3.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8bcad5cfce code=0x7ffc0000 [ 296.727377][ T29] audit: type=1326 audit(1773815244.636:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11498 comm="syz.3.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcad9c799 code=0x7ffc0000 [ 296.783883][ T29] audit: type=1326 audit(1773815244.636:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11498 comm="syz.3.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcad9c799 code=0x7ffc0000 [ 296.806440][ T5950] usb 3-1: reset high-speed USB device number 53 using dummy_hcd [ 296.834304][ T5950] usb 3-1: device descriptor read/8, error -32 [ 296.860834][ T29] audit: type=1326 audit(1773815244.636:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11498 comm="syz.3.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcad9c799 code=0x7ffc0000 [ 296.918297][ T29] audit: type=1326 audit(1773815244.636:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11498 comm="syz.3.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f8bcad9c799 code=0x7ffc0000 [ 297.000526][ T29] audit: type=1326 audit(1773815244.636:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11498 comm="syz.3.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcad9c799 code=0x7ffc0000 [ 297.205528][T11516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1545'. [ 297.276939][T11518] ./file0: Can't lookup blockdev [ 297.296348][T11518] ./file0: Can't lookup blockdev [ 297.591522][ T5950] usb 3-1: reset high-speed USB device number 53 using dummy_hcd [ 297.623894][ T5950] usb 3-1: device reset changed ep0 maxpacket size! [ 297.643986][ T24] usb 3-1: USB disconnect, device number 53 [ 297.801687][ T5856] Bluetooth: hci3: command 0x0c1a tx timeout [ 297.828295][ T24] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 298.001625][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 298.021124][ T24] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 298.044496][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.062740][ T24] usb 3-1: Product: syz [ 298.076122][ T24] usb 3-1: Manufacturer: syz [ 298.086801][ T24] usb 3-1: SerialNumber: syz [ 298.114117][ T24] usb 3-1: config 0 descriptor?? [ 298.272748][ T5934] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 298.431904][ T5934] usb 6-1: device descriptor read/64, error -71 [ 298.555409][ T24] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 298.585271][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 298.598251][ T24] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 298.613360][ T24] usb 3-1: media controller created [ 298.634891][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 298.691665][ T5934] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 298.764595][T11564] program syz.3.1556 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 298.841796][ T5934] usb 6-1: device descriptor read/64, error -71 [ 298.890297][ T24] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 298.899234][ T24] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 298.962390][ T5934] usb usb6-port1: attempt power cycle [ 299.034130][ T24] usb 5-1: USB disconnect, device number 39 [ 299.119380][ T9] usb 3-1: USB disconnect, device number 54 [ 299.243202][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 299.301831][ T5934] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 299.333596][ T5934] usb 6-1: device descriptor read/8, error -71 [ 299.487839][T11586] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1560'. [ 299.591756][ T5934] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 299.627944][ T5934] usb 6-1: device descriptor read/8, error -71 [ 299.754627][ T5934] usb usb6-port1: unable to enumerate USB device [ 300.055011][ T5934] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 300.095966][T11614] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1569'. [ 300.112984][T11614] input: syz0 as /devices/virtual/input/input17 [ 300.161819][T11614] syz.4.1569 (11614) used obsolete PPPIOCDETACH ioctl [ 300.199447][T11619] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:16x16 (0x30314442, 8, 0, 0, 0) [ 300.244726][ T5934] usb 4-1: Using ep0 maxpacket: 32 [ 300.257627][ T5934] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.285271][ T5934] usb 4-1: config 0 has no interfaces? [ 300.303424][ T5934] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 300.320135][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.330760][ T5934] usb 4-1: Product: syz [ 300.335299][ T5934] usb 4-1: Manufacturer: syz [ 300.343742][ T5934] usb 4-1: SerialNumber: syz [ 300.357397][ T5934] usb 4-1: config 0 descriptor?? [ 301.121168][T11651] loop4: detected capacity change from 0 to 1 [ 301.174875][T11651] Dev loop4: unable to read RDB block 1 [ 301.191959][T11651] loop4: unable to read partition table [ 301.200670][T11651] loop4: partition table beyond EOD, truncated [ 301.228936][T11651] loop_reread_partitions: partition scan of loop4 (îÝ·ÂU@™:ÖB$Œ{WÎÉ´å) failed (rc=-5) [ 301.510218][T11666] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1583'. [ 301.891153][T11684] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1588'. [ 302.068732][T11695] 9p: Bad value for 'wfdno' [ 302.275992][ T5934] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 302.481010][ T5934] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 302.496690][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.509627][ T5934] usb 3-1: Product: syz [ 302.514194][ T5934] usb 3-1: Manufacturer: syz [ 302.522425][ T5934] usb 3-1: SerialNumber: syz [ 302.533134][T11708] netlink: 208240 bytes leftover after parsing attributes in process `syz.5.1594'. [ 302.551871][ T5934] usb 3-1: config 0 descriptor?? [ 302.780570][T11693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.810782][T11693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.903904][ T9] usb 4-1: USB disconnect, device number 27 [ 302.952076][T11718] binder: 11717:11718 ioctl c0306201 2000000004c0 returned -14 [ 303.098650][T11693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.099073][T11693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.159950][ T5934] usb 3-1: Firmware: major: 50, minor: 195, hardware type: UNKNOWN (85) [ 303.365284][T11693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.419083][T11693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.444439][ T5934] usb 3-1: no permanent extended address found, random address set [ 303.494904][ T5934] usb 3-1: atusb_probe: initialization failed, error = -524 [ 303.522416][ T5934] atusb 3-1:0.0: probe with driver atusb failed with error -524 [ 303.544455][ T9] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 303.721665][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 303.744741][ T9] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 303.761850][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 303.772555][ T9] usb 5-1: config 1 has no interface number 0 [ 303.778770][ T9] usb 5-1: config 1 interface 105 altsetting 2 endpoint 0x3 has invalid wMaxPacketSize 0 [ 303.789964][ T9] usb 5-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 303.804823][ T9] usb 5-1: config 1 interface 105 has no altsetting 0 [ 303.816180][ T9] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 303.826711][ T9] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 303.835204][ T9] usb 5-1: Product: syz [ 303.839432][ T9] usb 5-1: Manufacturer: syz [ 303.845001][ T9] usb 5-1: SerialNumber: syz [ 303.931801][ T5917] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 303.982077][ T5848] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 304.057295][ T9] aqc111 5-1:1.105: probe with driver aqc111 failed with error -22 [ 304.101707][ T5917] usb 6-1: Using ep0 maxpacket: 16 [ 304.115955][ T5917] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 304.131250][ T5917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.144428][ T5848] usb 4-1: Using ep0 maxpacket: 32 [ 304.150287][ T5917] usb 6-1: Product: syz [ 304.155864][ T5917] usb 6-1: Manufacturer: syz [ 304.161108][ T5917] usb 6-1: SerialNumber: syz [ 304.166991][ T5848] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 304.177387][ T5848] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.189525][ T5917] usb 6-1: config 0 descriptor?? [ 304.200124][ T5848] usb 4-1: config 0 has no interface number 0 [ 304.206887][ T5848] usb 4-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 304.229707][ T5848] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 304.240548][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.249034][ T5848] usb 4-1: Product: syz [ 304.254986][ T5848] usb 4-1: Manufacturer: syz [ 304.259775][ T5848] usb 4-1: SerialNumber: syz [ 304.263029][T11731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.286564][T11731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.296320][ T5848] usb 4-1: config 0 descriptor?? [ 304.309985][ T5848] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 304.319770][T11731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.341006][T11763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.350947][T11731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.362705][T11763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.512446][ T5848] usb 4-1: qt2_setup_urbs - submit read urb failed -8 [ 304.519871][ T5848] quatech2 4-1:0.51: probe with driver quatech2 failed with error -8 [ 304.625786][ T5917] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 304.646604][ T5917] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 304.656683][ T5917] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 304.670933][ T5917] usb 6-1: media controller created [ 304.711335][ T5917] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 304.731566][ T5848] usb 4-1: USB disconnect, device number 28 [ 304.954640][ T5917] zl10353_read_register: readreg error (reg=127, ret==0) [ 304.970417][ T5917] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 304.978868][ T5917] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 304.995232][ T5917] usb 6-1: USB disconnect, device number 8 [ 305.076831][ T5848] usb 3-1: USB disconnect, device number 55 [ 305.085004][ T5917] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 305.562113][ T5848] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 305.707701][T11805] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:16x16 (0x30314442, 8, 0, 0, 0) [ 305.723346][ T5848] usb 3-1: Using ep0 maxpacket: 16 [ 305.734466][ T5848] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.746571][ T5848] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.757617][ T5848] usb 3-1: config 0 interface 0 has no altsetting 0 [ 305.775759][ T5848] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 305.785572][ T5848] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.818093][ T5848] usb 3-1: config 0 descriptor?? [ 306.050107][ T5848] hid_parser_main: 1 callbacks suppressed [ 306.050124][ T5848] nzxt-smart2 0003:1E71:2009.000C: unknown main item tag 0x0 [ 306.063817][ T5848] nzxt-smart2 0003:1E71:2009.000C: unknown main item tag 0x0 [ 306.071241][ T5848] nzxt-smart2 0003:1E71:2009.000C: unknown main item tag 0x0 [ 306.079962][ T5848] nzxt-smart2 0003:1E71:2009.000C: unknown main item tag 0x0 [ 306.087560][ T5848] nzxt-smart2 0003:1E71:2009.000C: unknown main item tag 0x0 [ 306.104133][ T5848] nzxt-smart2 0003:1E71:2009.000C: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 306.221693][ T5934] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 306.251524][ T24] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 306.303914][ T5848] usb 5-1: USB disconnect, device number 40 [ 306.383901][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.398619][ T5934] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 306.411792][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 306.417326][ T5934] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 306.426956][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.441903][ T24] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 306.457939][ T5934] usb 4-1: config 0 descriptor?? [ 306.466088][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.483820][ T5917] usb 3-1: USB disconnect, device number 56 [ 306.491616][ T24] usb 6-1: config 0 has no interface number 0 [ 306.500236][ T24] usb 6-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 306.519035][ T24] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 306.530562][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.540484][ T24] usb 6-1: Product: syz [ 306.559779][ T24] usb 6-1: Manufacturer: syz [ 306.566355][ T24] usb 6-1: SerialNumber: syz [ 306.607106][ T24] usb 6-1: config 0 descriptor?? [ 306.642344][ T24] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 306.720827][T11829] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 306.732184][T11829] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 306.744807][T11829] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 306.754920][T11829] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 306.768012][T11829] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 306.773616][T11832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1621'. [ 306.782221][T11829] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 306.803002][T11829] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 306.814937][T11829] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 306.826838][T11829] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 306.849975][ T24] usb 6-1: qt2_setup_urbs - submit read urb failed -8 [ 306.861733][ T24] quatech2 6-1:0.51: probe with driver quatech2 failed with error -8 [ 307.060343][ T5848] usb 6-1: USB disconnect, device number 9 [ 307.124934][ T5934] usbhid 4-1:0.0: can't add hid device: -71 [ 307.133252][ T5934] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 307.144530][ T5934] usb 4-1: USB disconnect, device number 29 [ 307.172765][ T5917] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 307.231688][ T808] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 307.321639][ T5917] usb 3-1: Using ep0 maxpacket: 16 [ 307.330648][ T5917] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 307.339811][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.347913][ T5917] usb 3-1: Product: syz [ 307.352180][ T5917] usb 3-1: Manufacturer: syz [ 307.356809][ T5917] usb 3-1: SerialNumber: syz [ 307.365037][ T5917] usb 3-1: config 0 descriptor?? [ 307.391554][ T808] usb 5-1: Using ep0 maxpacket: 16 [ 307.398548][ T808] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.409933][ T808] usb 5-1: config 0 has no interfaces? [ 307.417941][ T808] usb 5-1: string descriptor 0 read error: -71 [ 307.424733][ T808] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 307.445386][ T808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.459057][ T808] usb 5-1: config 0 descriptor?? [ 307.467316][ T808] usb 5-1: can't set config #0, error -71 [ 307.477003][ T808] usb 5-1: USB disconnect, device number 41 [ 307.779629][ T5917] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 307.845976][ T5917] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 307.864072][ T5917] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 307.877214][ T5917] usb 3-1: media controller created [ 307.924854][ T5917] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 308.275974][T11865] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1629'. [ 308.329801][ T5917] zl10353_read_register: readreg error (reg=127, ret==0) [ 308.340966][ T5917] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 308.372816][ T5917] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 308.404086][ T5917] usb 3-1: USB disconnect, device number 57 [ 308.488317][ T5917] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 308.498503][ T808] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 308.573706][ T5848] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 308.686932][ T808] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.718950][ T808] usb 6-1: config 0 has no interfaces? [ 308.734033][ T808] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 308.760085][ T5848] usb 4-1: unable to get BOS descriptor or descriptor too short [ 308.774084][ T808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.787303][ T5848] usb 4-1: not running at top speed; connect to a high speed hub [ 308.801969][ T808] usb 6-1: Product: syz [ 308.812908][ T808] usb 6-1: Manufacturer: syz [ 308.818763][ T5848] usb 4-1: config 86 has an invalid interface number: 117 but max is 0 [ 308.833339][ T808] usb 6-1: SerialNumber: syz [ 308.838271][ T5848] usb 4-1: config 86 has no interface number 0 [ 308.848527][ T5848] usb 4-1: config 86 interface 117 has no altsetting 0 [ 308.856589][ T808] usb 6-1: config 0 descriptor?? [ 308.865833][ T5848] usb 4-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=de.f7 [ 308.903229][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.926515][ T5848] usb 4-1: Product: syz [ 308.939774][ T5848] usb 4-1: Manufacturer: syz [ 308.949687][ T5848] usb 4-1: SerialNumber: syz [ 308.979913][T11876] binder: 11875:11876 ioctl c0306201 2000000004c0 returned -14 [ 309.194493][ T5848] redrat3 4-1:86.117: Couldn't find all endpoints [ 309.217654][ T5848] usb 4-1: USB disconnect, device number 30 [ 309.278294][ T5917] usb 6-1: USB disconnect, device number 10 [ 309.411704][ T5934] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 309.561868][ T5934] usb 5-1: Using ep0 maxpacket: 32 [ 309.567137][ T24] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 309.577116][ T5934] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 309.586180][ T5934] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.597379][ T5934] usb 5-1: config 0 has no interface number 0 [ 309.603874][ T5934] usb 5-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 309.619421][ T5934] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 309.628564][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.636707][ T5934] usb 5-1: Product: syz [ 309.640894][ T5934] usb 5-1: Manufacturer: syz [ 309.646204][ T5934] usb 5-1: SerialNumber: syz [ 309.657798][ T5934] usb 5-1: config 0 descriptor?? [ 309.667297][ T5934] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 309.726637][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.749977][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 309.765221][ T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 309.774883][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.792051][ T24] usb 3-1: config 0 descriptor?? [ 309.871178][ T5934] usb 5-1: qt2_setup_urbs - submit read urb failed -8 [ 309.878479][ T5934] quatech2 5-1:0.51: probe with driver quatech2 failed with error -8 [ 310.071829][ T5934] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 310.084377][ T1223] usb 5-1: USB disconnect, device number 42 [ 310.233983][ T5934] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 310.244854][ T5934] usb 4-1: config 0 has no interface number 0 [ 310.251069][ T5934] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 310.283568][ T5934] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 310.297783][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.306310][ T5934] usb 4-1: Product: syz [ 310.310566][ T5934] usb 4-1: Manufacturer: syz [ 310.316435][ T5934] usb 4-1: SerialNumber: syz [ 310.327200][ T5934] usb 4-1: config 0 descriptor?? [ 310.379112][ T5934] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 310.465332][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 310.485699][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 310.517903][ T24] usb 3-1: USB disconnect, device number 58 [ 310.709763][T11910] random: crng reseeded on system resumption [ 310.913559][T11918] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1648'. [ 310.949318][T11920] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1648'. [ 311.102833][T11929] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:16x16 (0x30314442, 8, 0, 0, 0) [ 311.214039][T11933] IPVS: set_ctl: invalid protocol: 0 172.20.20.63:20000 [ 311.501952][ T5848] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 311.590959][T11945] random: crng reseeded on system resumption [ 311.661623][ T5848] usb 5-1: Using ep0 maxpacket: 8 [ 311.676114][T11947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1656'. [ 311.699364][ T5848] usb 5-1: unable to get BOS descriptor or descriptor too short [ 311.724472][ T5848] usb 5-1: config 86 has an invalid interface number: 187 but max is 0 [ 311.751167][ T5848] usb 5-1: config 86 has no interface number 0 [ 311.769336][ T5848] usb 5-1: config 86 interface 187 has no altsetting 0 [ 311.791336][ T5848] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice=e6.a5 [ 311.814542][ T5848] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.833579][ T5848] usb 5-1: Product: syz [ 311.843303][ T5848] usb 5-1: Manufacturer: syz [ 311.854029][ T5848] usb 5-1: SerialNumber: syz [ 311.970701][T11953] kvm: kvm [11952]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010006) = 0xffffffffffffffff [ 312.086925][ T5848] sierra 5-1:86.187: Sierra USB modem converter detected [ 312.120976][ T5848] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 312.129745][ T5848] usb 5-1: USB disconnect, device number 43 [ 312.171769][ T5848] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 312.199689][ T5848] sierra 5-1:86.187: device disconnected [ 312.236192][ T24] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 312.436666][T11969] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1662'. [ 312.712035][T11980] random: crng reseeded on system resumption [ 312.849847][ T1223] usb 4-1: USB disconnect, device number 31 [ 312.907020][ T1223] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 313.101096][T11994] FAULT_INJECTION: forcing a failure. [ 313.101096][T11994] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.150793][T11994] CPU: 1 UID: 0 PID: 11994 Comm: syz.3.1669 Tainted: G L syzkaller #0 PREEMPT(full) [ 313.150827][T11994] Tainted: [L]=SOFTLOCKUP [ 313.150835][T11994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 313.150862][T11994] Call Trace: [ 313.150870][T11994] [ 313.150879][T11994] dump_stack_lvl+0xe8/0x150 [ 313.150915][T11994] should_fail_ex+0x412/0x560 [ 313.150943][T11994] _copy_from_iter+0x1d3/0x1670 [ 313.150972][T11994] ? sock_alloc_send_pskb+0x896/0x990 [ 313.151003][T11994] ? __pfx__copy_from_iter+0x10/0x10 [ 313.151035][T11994] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 313.151063][T11994] skb_copy_datagram_from_iter+0xf5/0x710 [ 313.151093][T11994] ? skb_put+0x11b/0x210 [ 313.151117][T11994] tun_get_user+0xc5c/0x4300 [ 313.151181][T11994] ? __pfx_tun_get_user+0x10/0x10 [ 313.151211][T11994] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 313.151242][T11994] ? lockdep_hardirqs_on+0x7a/0x110 [ 313.151261][T11994] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 313.151287][T11994] ? save_netdev_trace_buffer+0x4e2/0x610 [ 313.151324][T11994] ? ref_tracker_alloc+0x35c/0x4c0 [ 313.151346][T11994] ? tun_chr_write_iter+0x60/0x210 [ 313.151373][T11994] ? vfs_write+0x61d/0xb90 [ 313.151390][T11994] ? ksys_write+0x150/0x270 [ 313.151410][T11994] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 313.151439][T11994] ? tun_get+0x1c/0x2f0 [ 313.151474][T11994] ? tun_get+0x1c/0x2f0 [ 313.151503][T11994] ? tun_get+0x1c/0x2f0 [ 313.151537][T11994] tun_chr_write_iter+0x113/0x210 [ 313.151569][T11994] vfs_write+0x61d/0xb90 [ 313.151594][T11994] ? __pfx_vfs_write+0x10/0x10 [ 313.151619][T11994] ? __fget_files+0x2a/0x420 [ 313.151651][T11994] ksys_write+0x150/0x270 [ 313.151670][T11994] ? __pfx_ksys_write+0x10/0x10 [ 313.151698][T11994] do_syscall_64+0x14d/0xf80 [ 313.151717][T11994] ? trace_irq_disable+0x3b/0x150 [ 313.151740][T11994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.151761][T11994] ? clear_bhb_loop+0x40/0x90 [ 313.151785][T11994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.151806][T11994] RIP: 0033:0x7f8bcad9c799 [ 313.151827][T11994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.151844][T11994] RSP: 002b:00007f8bcbc55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 313.151865][T11994] RAX: ffffffffffffffda RBX: 00007f8bcb015fa0 RCX: 00007f8bcad9c799 [ 313.151880][T11994] RDX: 000000000000fdef RSI: 0000200000000080 RDI: 0000000000000003 [ 313.151893][T11994] RBP: 00007f8bcbc55090 R08: 0000000000000000 R09: 0000000000000000 [ 313.151905][T11994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.151917][T11994] R13: 00007f8bcb016038 R14: 00007f8bcb015fa0 R15: 00007ffd70298728 [ 313.151948][T11994] [ 313.769698][T12024] random: crng reseeded on system resumption [ 313.883091][ T5848] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 313.894504][T12027] binder: 12026:12027 ioctl c0306201 2000000004c0 returned -14 [ 313.914940][T12027] binder: 12026:12027 ioctl c0306201 2000000001c0 returned -14 [ 314.061558][ T5848] usb 3-1: Using ep0 maxpacket: 16 [ 314.078303][ T5848] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 314.088141][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.096604][ T5848] usb 3-1: Product: syz [ 314.100977][ T5848] usb 3-1: Manufacturer: syz [ 314.106125][ T5848] usb 3-1: SerialNumber: syz [ 314.116360][ T5848] usb 3-1: config 0 descriptor?? [ 314.301678][ T808] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 314.464404][ T808] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 314.494521][ T808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.528061][ T5848] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 314.551892][ T808] usb 5-1: config 0 descriptor?? [ 314.594597][ T808] cp210x 5-1:0.0: cp210x converter detected [ 314.636447][ T5848] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 314.647549][ T5848] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 314.682218][ T5848] usb 3-1: media controller created [ 314.731293][ T5848] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 314.812570][ T5848] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 314.831523][ T5848] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 314.881534][ T24] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 314.988079][ T808] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 315.010094][ T808] usb 5-1: cp210x converter now attached to ttyUSB0 [ 315.026814][ T5950] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 315.046194][ T1223] usb 3-1: USB disconnect, device number 60 [ 315.052269][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 315.065294][ T24] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 315.094251][ T24] usb 6-1: config 0 has no interface number 0 [ 315.108171][ T24] usb 6-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 315.159929][ T24] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 315.171889][ T1223] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 315.194384][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.217016][ T5950] usb 4-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 315.234359][ T24] usb 6-1: Product: syz [ 315.238630][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.248560][ T24] usb 6-1: Manufacturer: syz [ 315.254043][ T24] usb 6-1: SerialNumber: syz [ 315.258720][ T5950] usb 4-1: Product: syz [ 315.263361][ T5950] usb 4-1: Manufacturer: syz [ 315.271011][ T24] usb 6-1: config 0 descriptor?? [ 315.276526][ T5950] usb 4-1: SerialNumber: syz [ 315.288409][ T24] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 315.304857][ T5950] usb 4-1: config 0 descriptor?? [ 315.319575][ T5950] hub 4-1:0.0: bad descriptor, ignoring hub [ 315.326024][ T5950] hub 4-1:0.0: probe with driver hub failed with error -5 [ 315.334968][ T5950] f81232 4-1:0.0: f81534a converter detected [ 315.490980][ T24] usb 6-1: qt2_setup_urbs - submit read urb failed -8 [ 315.499173][ T24] quatech2 6-1:0.51: probe with driver quatech2 failed with error -8 [ 315.519433][T12046] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1680'. [ 315.537723][T12046] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 315.566528][T12046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.575543][T12046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.592317][ T5950] usb 4-1: f81534a converter now attached to ttyUSB1 [ 315.697928][ T5848] usb 6-1: USB disconnect, device number 11 [ 315.891789][ T808] usb 4-1: USB disconnect, device number 32 [ 315.916642][ T808] f81534a ttyUSB1: f81534a converter now disconnected from ttyUSB1 [ 315.945173][ T808] f81232 4-1:0.0: device disconnected [ 316.071190][T12079] random: crng reseeded on system resumption [ 316.581508][ T5950] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 316.640701][T12106] EXT4-fs (loop2): unable to read superblock [ 316.667589][T12108] EXT4-fs (loop2): unable to read superblock [ 316.674319][ T24] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 316.761620][ T5950] usb 6-1: Using ep0 maxpacket: 16 [ 316.773520][ T5950] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.793132][ T5950] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.818944][ T5950] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 316.841722][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 316.847160][ T5950] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 316.864301][ T24] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 316.875067][ T5950] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.885589][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.886555][T12114] random: crng reseeded on system resumption [ 316.899606][ T24] usb 4-1: Product: syz [ 316.907943][ T5950] usb 6-1: config 0 descriptor?? [ 316.917554][ T24] usb 4-1: Manufacturer: syz [ 316.940444][ T24] usb 4-1: SerialNumber: syz [ 316.956854][ T24] usb 4-1: config 0 descriptor?? [ 317.079211][ T5848] usb 5-1: USB disconnect, device number 44 [ 317.105259][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.112152][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.159086][ T5848] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 317.205528][T12119] netlink: 'syz.5.1688': attribute type 1 has an invalid length. [ 317.212279][ T5848] cp210x 5-1:0.0: device disconnected [ 317.380114][ T24] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 317.384135][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 317.386559][ T24] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 317.480472][ T5950] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.000D/input/input18 [ 317.492496][ T24] usb 4-1: media controller created [ 317.511367][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 317.586885][ T5950] microsoft 0003:045E:07DA.000D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 317.633562][ T24] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 317.649683][ T24] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 317.860256][ T5848] usb 4-1: USB disconnect, device number 33 [ 317.988529][ T5848] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 318.215622][T12149] random: crng reseeded on system resumption [ 318.623647][ T5848] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 318.721660][ T24] usb 6-1: reset high-speed USB device number 12 using dummy_hcd [ 318.806466][ T5848] usb 3-1: config 0 has an invalid interface number: 96 but max is 0 [ 318.830087][ T5848] usb 3-1: config 0 has no interface number 0 [ 318.850152][ T5848] usb 3-1: config 0 interface 96 altsetting 3 endpoint 0x88 has invalid wMaxPacketSize 0 [ 318.863484][ T5848] usb 3-1: config 0 interface 96 has no altsetting 0 [ 318.879592][ T5848] usb 3-1: New USB device found, idVendor=0b57, idProduct=6a8d, bcdDevice=33.74 [ 318.890447][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.909376][ T5848] usb 3-1: Product: syz [ 318.918416][ T5848] usb 3-1: Manufacturer: syz [ 318.927100][ T5848] usb 3-1: SerialNumber: syz [ 318.936595][ T5848] usb 3-1: config 0 descriptor?? [ 318.957340][ T5848] usbhid 3-1:0.96: couldn't find an input interrupt endpoint [ 319.157261][ T5848] usb 3-1: USB disconnect, device number 61 [ 319.166105][ T5856] Bluetooth: hci4: command 0x0406 tx timeout [ 319.475636][T12193] fuse: Unknown parameter '˜roup_id' [ 319.574484][T12197] FAULT_INJECTION: forcing a failure. [ 319.574484][T12197] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.606381][T12197] CPU: 0 UID: 0 PID: 12197 Comm: syz.3.1714 Tainted: G L syzkaller #0 PREEMPT(full) [ 319.606429][T12197] Tainted: [L]=SOFTLOCKUP [ 319.606435][T12197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 319.606452][T12197] Call Trace: [ 319.606465][T12197] [ 319.606473][T12197] dump_stack_lvl+0xe8/0x150 [ 319.606521][T12197] should_fail_ex+0x412/0x560 [ 319.606548][T12197] _copy_from_iter+0x1d3/0x1670 [ 319.606590][T12197] ? sock_alloc_send_pskb+0x896/0x990 [ 319.606619][T12197] ? __pfx__copy_from_iter+0x10/0x10 [ 319.606650][T12197] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 319.606678][T12197] skb_copy_datagram_from_iter+0xf5/0x710 [ 319.606708][T12197] ? skb_put+0x11b/0x210 [ 319.606731][T12197] tun_get_user+0xc5c/0x4300 [ 319.606794][T12197] ? __pfx_tun_get_user+0x10/0x10 [ 319.606825][T12197] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 319.606855][T12197] ? lockdep_hardirqs_on+0x7a/0x110 [ 319.606875][T12197] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 319.606904][T12197] ? save_netdev_trace_buffer+0x4e2/0x610 [ 319.606942][T12197] ? ref_tracker_alloc+0x35c/0x4c0 [ 319.606965][T12197] ? tun_chr_write_iter+0x60/0x210 [ 319.606993][T12197] ? vfs_write+0x61d/0xb90 [ 319.607009][T12197] ? ksys_write+0x150/0x270 [ 319.607027][T12197] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 319.607058][T12197] ? tun_get+0x1c/0x2f0 [ 319.607092][T12197] ? tun_get+0x1c/0x2f0 [ 319.607121][T12197] ? tun_get+0x1c/0x2f0 [ 319.607155][T12197] tun_chr_write_iter+0x113/0x210 [ 319.607187][T12197] vfs_write+0x61d/0xb90 [ 319.607214][T12197] ? __pfx_vfs_write+0x10/0x10 [ 319.607244][T12197] ? __fget_files+0x2a/0x420 [ 319.607278][T12197] ksys_write+0x150/0x270 [ 319.607300][T12197] ? __pfx_ksys_write+0x10/0x10 [ 319.607331][T12197] do_syscall_64+0x14d/0xf80 [ 319.607349][T12197] ? trace_irq_disable+0x3b/0x150 [ 319.607372][T12197] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.607393][T12197] ? clear_bhb_loop+0x40/0x90 [ 319.607418][T12197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.607438][T12197] RIP: 0033:0x7f8bcad9c799 [ 319.607458][T12197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.607475][T12197] RSP: 002b:00007f8bcbc55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 319.607496][T12197] RAX: ffffffffffffffda RBX: 00007f8bcb015fa0 RCX: 00007f8bcad9c799 [ 319.607511][T12197] RDX: 000000000000fdef RSI: 0000200000000080 RDI: 0000000000000003 [ 319.607522][T12197] RBP: 00007f8bcbc55090 R08: 0000000000000000 R09: 0000000000000000 [ 319.607534][T12197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.607545][T12197] R13: 00007f8bcb016038 R14: 00007f8bcb015fa0 R15: 00007ffd70298728 [ 319.607574][T12197] [ 320.073709][T12207] binder: 12203:12207 ioctl c0306201 2000000004c0 returned -14 [ 320.130826][T12207] binder: 12203:12207 ioctl c0306201 2000000001c0 returned -14 [ 320.214351][T12213] netlink: 'syz.3.1721': attribute type 10 has an invalid length. [ 320.235554][T12213] team0: Device vxcan1 is of different type [ 320.314601][ T1223] usb 6-1: USB disconnect, device number 12 [ 320.533034][ T1240] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 320.699372][ T1240] usb 5-1: Using ep0 maxpacket: 32 [ 320.750283][ T1240] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 320.782267][ T1240] usb 5-1: config 0 has no interface number 0 [ 320.807622][ T1240] usb 5-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 320.839949][ T1240] usb 5-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 320.880681][ T1240] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 320.892008][T12239] sysfs: cannot create duplicate filename '/class/ieee80211/4Ï€!F' [ 320.902750][T12239] CPU: 0 UID: 0 PID: 12239 Comm: syz.2.1728 Tainted: G L syzkaller #0 PREEMPT(full) [ 320.902784][T12239] Tainted: [L]=SOFTLOCKUP [ 320.902792][T12239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 320.902804][T12239] Call Trace: [ 320.902812][T12239] [ 320.902822][T12239] dump_stack_lvl+0xe8/0x150 [ 320.902859][T12239] sysfs_warn_dup+0x8e/0xa0 [ 320.902887][T12239] sysfs_do_create_link_sd+0xc0/0x110 [ 320.902917][T12239] device_add_class_symlinks+0x1cf/0x240 [ 320.902952][T12239] device_add+0x475/0xb70 [ 320.902986][T12239] wiphy_register+0x1d73/0x2d50 [ 320.903031][T12239] ? __pfx_wiphy_register+0x10/0x10 [ 320.903071][T12239] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 320.903099][T12239] ieee80211_register_hw+0x3cb7/0x4980 [ 320.903121][T12239] ? __lock_acquire+0x6b5/0x2cf0 [ 320.903167][T12239] ? ieee80211_register_hw+0x1911/0x4980 [ 320.903217][T12239] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 320.903245][T12239] ? __asan_memset+0x22/0x50 [ 320.903274][T12239] ? __hrtimer_setup+0x1b7/0x260 [ 320.903294][T12239] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 320.903324][T12239] mac80211_hwsim_new_radio+0x3334/0x5ba0 [ 320.903379][T12239] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 320.903402][T12239] ? kstrndup+0xbf/0x160 [ 320.903434][T12239] hwsim_new_radio_nl+0xf6a/0x1c00 [ 320.903482][T12239] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 320.903516][T12239] ? rcu_is_watching+0x15/0xb0 [ 320.903540][T12239] ? trace_kmalloc+0x2a/0x110 [ 320.903578][T12239] ? __nla_parse+0x40/0x60 [ 320.903610][T12239] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 320.903636][T12239] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 320.903677][T12239] genl_family_rcv_msg_doit+0x22a/0x330 [ 320.903710][T12239] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 320.903750][T12239] ? bpf_lsm_capable+0x9/0x20 [ 320.903772][T12239] ? security_capable+0x7e/0x2c0 [ 320.903808][T12239] genl_rcv_msg+0x61c/0x7a0 [ 320.903840][T12239] ? __pfx_genl_rcv_msg+0x10/0x10 [ 320.903863][T12239] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 320.903887][T12239] ? __lock_acquire+0x6b5/0x2cf0 [ 320.903930][T12239] netlink_rcv_skb+0x232/0x4b0 [ 320.903962][T12239] ? __pfx_genl_rcv_msg+0x10/0x10 [ 320.903988][T12239] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 320.904039][T12239] ? down_read+0x270/0x2e0 [ 320.904059][T12239] ? genl_rcv+0xd/0x40 [ 320.904084][T12239] genl_rcv+0x28/0x40 [ 320.904106][T12239] netlink_unicast+0x80f/0x9b0 [ 320.904145][T12239] ? __pfx_netlink_unicast+0x10/0x10 [ 320.904176][T12239] ? netlink_sendmsg+0x650/0xb40 [ 320.904193][T12239] ? skb_put+0x11b/0x210 [ 320.904218][T12239] netlink_sendmsg+0x813/0xb40 [ 320.904248][T12239] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.904270][T12239] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 320.904312][T12239] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.904331][T12239] sock_sendmsg_nosec+0x112/0x150 [ 320.904362][T12239] ____sys_sendmsg+0x589/0x8c0 [ 320.904383][T12239] ? futex_unqueue+0x211/0x240 [ 320.904432][T12239] ? __pfx_____sys_sendmsg+0x10/0x10 [ 320.904464][T12239] ? import_iovec+0x73/0xa0 [ 320.904494][T12239] ___sys_sendmsg+0x2a5/0x360 [ 320.904522][T12239] ? __pfx____sys_sendmsg+0x10/0x10 [ 320.904552][T12239] ? futex_wait+0x2a2/0x390 [ 320.904602][T12239] ? __fget_files+0x2a/0x420 [ 320.904626][T12239] ? __fget_files+0x3a0/0x420 [ 320.904669][T12239] __x64_sys_sendmsg+0x1bd/0x2a0 [ 320.904695][T12239] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 320.904728][T12239] ? rcu_is_watching+0x15/0xb0 [ 320.904762][T12239] do_syscall_64+0x14d/0xf80 [ 320.904780][T12239] ? trace_irq_disable+0x3b/0x150 [ 320.904803][T12239] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.904824][T12239] ? clear_bhb_loop+0x40/0x90 [ 320.904850][T12239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.904869][T12239] RIP: 0033:0x7fbacd39c799 [ 320.904889][T12239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.904906][T12239] RSP: 002b:00007fbace219028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 320.904938][T12239] RAX: ffffffffffffffda RBX: 00007fbacd615fa0 RCX: 00007fbacd39c799 [ 320.904952][T12239] RDX: 0000000000040000 RSI: 0000200000000040 RDI: 0000000000000004 [ 320.904964][T12239] RBP: 00007fbacd432c99 R08: 0000000000000000 R09: 0000000000000000 [ 320.904976][T12239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 320.904986][T12239] R13: 00007fbacd616038 R14: 00007fbacd615fa0 R15: 00007fff8f2767d8 [ 320.905018][T12239] [ 320.963300][ T1240] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.383992][ T1240] usb 5-1: Product: syz [ 321.388294][ T1240] usb 5-1: Manufacturer: syz [ 321.393021][ T1240] usb 5-1: SerialNumber: syz [ 321.400714][ T1240] usb 5-1: config 0 descriptor?? [ 321.425345][ T1240] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 321.649366][ T1240] usb 5-1: qt2_setup_urbs - submit read urb failed -90 [ 321.672640][ T1240] quatech2 5-1:0.51: probe with driver quatech2 failed with error -90 [ 321.887934][ T1240] usb 5-1: USB disconnect, device number 45 [ 322.372763][ T5848] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 322.401764][ T808] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 322.511815][ T5848] usb 3-1: device descriptor read/64, error -71 [ 322.572033][ T808] usb 4-1: Using ep0 maxpacket: 32 [ 322.599151][ T808] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0126, bcdDevice= 0.40 [ 322.614588][ T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 322.639388][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.678399][ T808] usb 4-1: Product: syz [ 322.688262][ T808] usb 4-1: Manufacturer: syz [ 322.700150][ T808] usb 4-1: SerialNumber: syz [ 322.791583][ T5848] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 322.831603][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 322.842550][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 322.864503][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 322.900176][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 322.919982][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.942165][ T5848] usb 3-1: device descriptor read/64, error -71 [ 322.952851][ T9] usb 6-1: Product: syz [ 322.962500][ T9] usb 6-1: Manufacturer: syz [ 322.987288][ T9] usb 6-1: SerialNumber: syz [ 323.036717][ T9] usb 6-1: config 0 descriptor?? [ 323.062092][ T5848] usb usb3-port1: attempt power cycle [ 323.070986][ T9] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 323.086652][ T9] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 323.113035][T12306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1742'. [ 323.358541][T12315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1744'. [ 323.421614][ T5848] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 323.447381][ T5848] usb 3-1: device descriptor read/8, error -71 [ 323.698605][ T9] em28xx 6-1:0.0: unknown em28xx chip ID (67) [ 323.709308][ T5848] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 323.732749][ T5848] usb 3-1: device descriptor read/8, error -71 [ 323.852383][ T5848] usb usb3-port1: unable to enumerate USB device [ 323.907305][ T9] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 323.937162][T12330] loop4: detected capacity change from 0 to 1 [ 323.995968][T12330] Dev loop4: unable to read RDB block 1 [ 324.003450][T12330] loop4: unable to read partition table [ 324.009563][T12330] loop4: partition table beyond EOD, truncated [ 324.016719][T12330] loop_reread_partitions: partition scan of loop4 (îÝ·ÂU@™:ÖB$Œ{WÎÉ´å) failed (rc=-5) [ 324.216954][ T9] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 324.236660][ T9] em28xx 6-1:0.0: No AC97 audio processor [ 324.255873][ T9] usb 6-1: USB disconnect, device number 13 [ 324.265685][ T9] em28xx 6-1:0.0: Disconnecting em28xx [ 324.310599][ T9] em28xx 6-1:0.0: Freeing device [ 324.483600][T12346] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1750'. [ 324.561000][T12348] overlay: Unknown parameter 'smackfsdef' [ 325.031528][ T5950] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 325.117906][ T808] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 325.142424][ T808] usb 4-1: MIDIStreaming interface descriptor not found [ 325.189497][ T5950] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 325.222097][ T5950] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 325.249071][ T5950] usb 6-1: config 220 has no interface number 2 [ 325.269583][ T5950] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 325.304853][ T5950] usb 6-1: config 220 interface 0 has no altsetting 0 [ 325.330875][ T5950] usb 6-1: config 220 interface 76 has no altsetting 0 [ 325.356627][ T808] usb 4-1: USB disconnect, device number 34 [ 325.376600][ T5950] usb 6-1: config 220 interface 1 has no altsetting 0 [ 325.409903][ T5950] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 325.447484][ T5950] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.461507][ T5950] usb 6-1: Product: syz [ 325.471722][ T5950] usb 6-1: Manufacturer: syz [ 325.492252][ T5950] usb 6-1: SerialNumber: syz [ 325.579888][T12376] binder: 12374:12376 ioctl c0306201 2000000004c0 returned -14 [ 325.609761][T12376] binder: 12374:12376 ioctl c0306201 2000000001c0 returned -14 [ 325.620429][ T5988] udevd[5988]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 325.763621][T12355] hfsplus: unable to find HFS+ superblock [ 325.789228][T12379] netlink: 'syz.2.1762': attribute type 10 has an invalid length. [ 325.802899][T12379] team0: Device vxcan1 is of different type [ 325.814255][ T5950] usb 6-1: selecting invalid altsetting 0 [ 325.837306][ T5950] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 325.846582][ T5950] uvcvideo 6-1:220.0: No valid video chain found. [ 325.859431][ T5950] usb 6-1: selecting invalid altsetting 0 [ 325.862023][ T808] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 325.866432][ T5950] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 325.884626][ T5950] usb 6-1: USB disconnect, device number 14 [ 326.057436][ T808] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 326.081580][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.091331][ T808] usb 4-1: Product: syz [ 326.101496][ T808] usb 4-1: Manufacturer: syz [ 326.111486][ T808] usb 4-1: SerialNumber: syz [ 326.122585][ T808] usb 4-1: config 0 descriptor?? [ 326.144815][ T808] ch341 4-1:0.0: ch341-uart converter detected [ 326.372967][T12371] netlink: 'syz.3.1760': attribute type 21 has an invalid length. [ 326.412237][ T808] usb 4-1: failed to receive control message: -71 [ 326.422832][ T808] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 326.456092][ T808] usb 4-1: USB disconnect, device number 35 [ 326.485170][ T808] ch341 4-1:0.0: device disconnected [ 326.631518][ T9] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 326.781564][ T9] usb 3-1: device descriptor read/64, error -71 [ 327.032844][ T9] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 327.181573][ T9] usb 3-1: device descriptor read/64, error -71 [ 327.331106][ T30] INFO: task syz.1.604:7910 blocked for more than 143 seconds. [ 327.339007][ T1223] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 327.352753][ T30] Tainted: G L syzkaller #0 [ 327.360227][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 327.377381][ T30] task:syz.1.604 state:D stack:26832 pid:7910 tgid:7906 ppid:5843 task_flags:0x400040 flags:0x00080002 [ 327.398289][ T30] Call Trace: [ 327.404503][ T30] [ 327.407711][ T30] __schedule+0x1665/0x5590 [ 327.412747][ T30] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 327.419291][ T30] ? __pfx___schedule+0x10/0x10 [ 327.425374][ T30] ? schedule+0x90/0x360 [ 327.429969][ T30] schedule+0x164/0x360 [ 327.437212][ T9] usb usb3-port1: attempt power cycle [ 327.444040][ T30] schedule_preempt_disabled+0x13/0x30 [ 327.460723][ T30] rwsem_down_write_slowpath+0x883/0x1080 [ 327.468343][ T30] ? rwsem_down_write_slowpath+0x4a3/0x1080 [ 327.481472][ T30] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 327.501734][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 327.509343][ T30] ? irqentry_exit+0x61a/0x700 [ 327.514328][ T1223] usb 4-1: Using ep0 maxpacket: 32 [ 327.525718][ T30] ? rcu_is_watching+0x15/0xb0 [ 327.542680][ T30] down_write+0x1bc/0x200 [ 327.547177][ T30] ? __pfx_down_write+0x10/0x10 [ 327.554817][ T1223] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 327.571477][ T30] vfs_unlink+0xed/0x6c0 [ 327.575840][ T1223] usb 4-1: config 0 has no interface number 0 [ 327.582897][ T30] filename_unlinkat+0x3cd/0x610 [ 327.591374][ T30] ? __pfx_filename_unlinkat+0x10/0x10 [ 327.597248][ T1223] usb 4-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 327.621016][ T30] ? __se_sys_unlinkat+0x5c/0x1a0 [ 327.626485][ T1223] usb 4-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 327.636468][ T30] __se_sys_unlinkat+0x83/0x1a0 [ 327.653259][ T30] do_syscall_64+0x14d/0xf80 [ 327.667045][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.680835][ T1223] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 327.697747][ T30] ? clear_bhb_loop+0x40/0x90 [ 327.703636][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.709703][ T1223] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.719648][ T30] RIP: 0033:0x7fdab499c799 [ 327.727202][ T30] RSP: 002b:00007fdab58a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 327.735791][ T1223] usb 4-1: Product: syz [ 327.740141][ T1223] usb 4-1: Manufacturer: syz [ 327.744884][ T30] RAX: ffffffffffffffda RBX: 00007fdab4c16090 RCX: 00007fdab499c799 [ 327.753081][ T1223] usb 4-1: SerialNumber: syz [ 327.759598][ T30] RDX: 0000000000000000 RSI: 00002000000011c0 RDI: 0000000000000003 [ 327.768854][ T1223] usb 4-1: config 0 descriptor?? [ 327.779069][ T30] RBP: 00007fdab4a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 327.781696][ T9] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 327.789953][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 327.806145][ T1223] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 327.815673][ T30] R13: 00007fdab4c16128 R14: 00007fdab4c16090 R15: 00007ffdf8a57a08 [ 327.828064][ T30] [ 327.831230][ T30] INFO: task syz.1.604:7912 blocked for more than 143 seconds. [ 327.841303][ T9] usb 3-1: device descriptor read/8, error -71 [ 327.848510][ T30] Tainted: G L syzkaller #0 [ 327.855326][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 327.864315][ T30] task:syz.1.604 state:D stack:27472 pid:7912 tgid:7906 ppid:5843 task_flags:0x400140 flags:0x00080002 [ 327.876473][ T30] Call Trace: [ 327.879992][ T30] [ 327.883049][ T30] __schedule+0x1665/0x5590 [ 327.887821][ T30] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 327.895594][ T30] ? __pfx___schedule+0x10/0x10 [ 327.900594][ T30] ? schedule+0x90/0x360 [ 327.904955][ T30] schedule+0x164/0x360 [ 327.909410][ T30] schedule_preempt_disabled+0x13/0x30 [ 327.915026][ T30] rwsem_down_write_slowpath+0x883/0x1080 [ 327.920975][ T30] ? rwsem_down_write_slowpath+0x4a3/0x1080 [ 327.926993][ T30] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 327.936976][ T30] ? irqentry_exit+0x61a/0x700 [ 327.943979][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 327.949295][ T30] down_write+0x1bc/0x200 [ 327.954949][ T30] ? __pfx_down_write+0x10/0x10 [ 327.959990][ T30] do_lock_mount+0x2b3/0x960 [ 327.964902][ T30] do_new_mount+0x483/0xd30 [ 327.969505][ T30] ? __pfx_do_new_mount+0x10/0x10 [ 327.974651][ T30] ? path_mount+0x690/0x10e0 [ 327.979514][ T30] ? user_path_at+0xd4/0x160 [ 327.984219][ T30] __se_sys_mount+0x31d/0x420 [ 327.989121][ T30] ? __pfx___se_sys_mount+0x10/0x10 [ 327.996003][ T30] ? __x64_sys_mount+0x20/0xc0 [ 328.000896][ T30] do_syscall_64+0x14d/0xf80 [ 328.005632][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.016734][ T1223] usb 4-1: qt2_setup_urbs - submit read urb failed -90 [ 328.023794][ T30] ? clear_bhb_loop+0x40/0x90 [ 328.028831][ T1223] quatech2 4-1:0.51: probe with driver quatech2 failed with error -90 [ 328.037160][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.049500][ T30] RIP: 0033:0x7fdab499c799 [ 328.066415][ T30] RSP: 002b:00007fdab5881028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 328.085709][ T30] RAX: ffffffffffffffda RBX: 00007fdab4c16180 RCX: 00007fdab499c799 [ 328.092220][ T9] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 328.096339][ T30] RDX: 0000200000000300 RSI: 00002000000001c0 RDI: 0000000000000000 [ 328.110240][ T30] RBP: 00007fdab4a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 328.118333][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 328.128435][ T30] R13: 00007fdab4c16218 R14: 00007fdab4c16180 R15: 00007ffdf8a57a08 [ 328.133602][ T9] usb 3-1: device descriptor read/8, error -71 [ 328.136696][ T30] [ 328.146222][ T30] [ 328.146222][ T30] Showing all locks held in the system: [ 328.157724][ T30] 5 locks held by kworker/0:0/9: [ 328.164779][ T30] 3 locks held by kworker/u8:0/12: [ 328.169953][ T30] #0: ffff88813fe44140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x894/0x1780 [ 328.184151][ T30] #1: ffffc90000117c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1780 [ 328.194681][ T30] #2: ffffffff8fff66c0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 328.205176][ T30] 1 lock held by khungtaskd/30: [ 328.210098][ T30] #0: ffffffff8eb5d6a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 328.224308][ T1223] usb 4-1: USB disconnect, device number 36 [ 328.255336][ T30] 3 locks held by kworker/1:2/1223: [ 328.265431][ T30] #0: ffff88801ee99940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x894/0x1780 [ 328.279871][ T30] #1: ffffc9000598fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1780 [ 328.297107][ T30] #2: ffff88802a58d190 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 328.307403][ T30] 2 locks held by getty/5606: [ 328.312190][ T30] #0: ffff888036df60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 328.322253][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 328.332841][ T30] 3 locks held by syz.1.604/7910: [ 328.337977][ T30] #0: ffff88802b830410 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 328.347508][ T30] #1: ffff88805980b9a0 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: filename_unlinkat+0x2a7/0x610 [ 328.352861][ T9] usb usb3-port1: unable to enumerate USB device [ 328.362126][ T30] #2: ffff8880333b4c00 (&sb->s_type->i_mutex_key#15){+.+.}-{4:4}, at: vfs_unlink+0xed/0x6c0 [ 328.379716][ T30] 1 lock held by syz.1.604/7912: [ 328.389735][ T30] #0: ffff8880333b4c00 (&sb->s_type->i_mutex_key#15){+.+.}-{4:4}, at: do_lock_mount+0x2b3/0x960 [ 328.402194][ T30] 2 locks held by syz.4.1771/12400: [ 328.407458][ T30] #0: ffffffff8fff66c0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 328.417736][ T30] #1: ffffffff8eb638e8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 328.429130][ T30] 1 lock held by sed/12417: [ 328.434009][ T30] [ 328.436399][ T30] ============================================= [ 328.436399][ T30] [ 328.446748][ T30] NMI backtrace for cpu 1 [ 328.446767][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 328.446790][ T30] Tainted: [L]=SOFTLOCKUP [ 328.446796][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 328.446807][ T30] Call Trace: [ 328.446814][ T30] [ 328.446821][ T30] dump_stack_lvl+0xe8/0x150 [ 328.446852][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 328.446877][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 328.446903][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 328.446928][ T30] sys_info+0x135/0x170 [ 328.446946][ T30] watchdog+0x1002/0x1060 [ 328.446973][ T30] ? watchdog+0x1da/0x1060 [ 328.446998][ T30] kthread+0x388/0x470 [ 328.447018][ T30] ? __pfx_watchdog+0x10/0x10 [ 328.447036][ T30] ? __pfx_kthread+0x10/0x10 [ 328.447057][ T30] ret_from_fork+0x51e/0xb90 [ 328.447083][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 328.447105][ T30] ? __switch_to+0xc7d/0x1450 [ 328.447130][ T30] ? __pfx_kthread+0x10/0x10 [ 328.447150][ T30] ret_from_fork_asm+0x1a/0x30 [ 328.447180][ T30] [ 328.447186][ T30] Sending NMI from CPU 1 to CPUs 0: [ 328.564885][ C0] NMI backtrace for cpu 0 [ 328.564904][ C0] CPU: 0 UID: 0 PID: 138 Comm: kworker/u8:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 328.564929][ C0] Tainted: [L]=SOFTLOCKUP [ 328.564934][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 328.564945][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 328.564973][ C0] RIP: 0010:__lock_acquire+0x3ac/0x2cf0 [ 328.565001][ C0] Code: 27 90 e8 67 1d 15 03 85 c0 74 1c 83 3d a0 8e b1 0e 00 75 13 48 8d 3d c3 b1 b4 0e 48 c7 c6 23 8a 37 8e 67 48 0f b9 3a 90 31 c0 <0f> b6 98 c4 00 00 00 41 8b 45 20 25 ff 1f 00 00 48 0f a3 05 4c da [ 328.565015][ C0] RSP: 0018:ffffc90002ed72f8 EFLAGS: 00000006 [ 328.565029][ C0] RAX: ffffffff940cc8a8 RBX: 0000000000020000 RCX: 0000000000000007 [ 328.565040][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 328.565050][ C0] RBP: 0000000000000004 R08: ffffffff81778bb5 R09: ffffffff8eb5d6a0 [ 328.565061][ C0] R10: ffffc90002ed7638 R11: fffff520005daec9 R12: 0000000000000007 [ 328.565072][ C0] R13: ffff88801fbec8f0 R14: ffff88801fbebd00 R15: ffff88801fbec850 [ 328.565085][ C0] FS: 0000000000000000(0000) GS:ffff888124de1000(0000) knlGS:0000000000000000 [ 328.565098][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 328.565109][ C0] CR2: 00007ffca40f4358 CR3: 000000004b774000 CR4: 00000000003526f0 [ 328.565124][ C0] Call Trace: [ 328.565130][ C0] [ 328.565152][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 328.565177][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 328.565201][ C0] lock_acquire+0xf0/0x2e0 [ 328.565222][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 328.565238][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 328.565252][ C0] ? arch_stack_walk+0xe3/0x150 [ 328.565267][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 328.565280][ C0] unwind_next_frame+0xc2/0x23c0 [ 328.565294][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 328.565310][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 328.565324][ C0] ? __unwind_start+0xf7/0x760 [ 328.565340][ C0] __unwind_start+0x5b8/0x760 [ 328.565357][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 328.565377][ C0] arch_stack_walk+0xe3/0x150 [ 328.565394][ C0] ? arch_stack_walk+0xe3/0x150 [ 328.565428][ C0] stack_trace_save+0xa9/0x100 [ 328.565447][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 328.565467][ C0] ? stack_depot_save_flags+0x33/0x810 [ 328.565490][ C0] kasan_save_track+0x3e/0x80 [ 328.565536][ C0] __kasan_kmalloc+0x93/0xb0 [ 328.565551][ C0] __kmalloc_node_track_caller_noprof+0x4db/0x7b0 [ 328.565590][ C0] ? nsim_dev_trap_report_work+0x29a/0xb80 [ 328.565609][ C0] ? __kmalloc_node_track_caller_noprof+0x34a/0x7b0 [ 328.565635][ C0] __alloc_skb+0x2c1/0x7d0 [ 328.565652][ C0] nsim_dev_trap_report_work+0x29a/0xb80 [ 328.565679][ C0] ? process_one_work+0x8bb/0x1780 [ 328.565700][ C0] process_one_work+0x9ab/0x1780 [ 328.565730][ C0] ? __pfx_process_one_work+0x10/0x10 [ 328.565751][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 328.565776][ C0] worker_thread+0xba8/0x11e0 [ 328.565799][ C0] kthread+0x388/0x470 [ 328.565816][ C0] ? __pfx_worker_thread+0x10/0x10 [ 328.565829][ C0] ? __pfx_kthread+0x10/0x10 [ 328.565846][ C0] ret_from_fork+0x51e/0xb90 [ 328.565875][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 328.565896][ C0] ? __switch_to+0xc7d/0x1450 [ 328.565915][ C0] ? __pfx_kthread+0x10/0x10 [ 328.565932][ C0] ret_from_fork_asm+0x1a/0x30 [ 328.565952][ C0] [ 328.938478][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 328.945395][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 328.956096][ T30] Tainted: [L]=SOFTLOCKUP [ 328.960445][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 328.970522][ T30] Call Trace: [ 328.973838][ T30] [ 328.976797][ T30] vpanic+0x56c/0xa60 [ 328.980805][ T30] ? __pfx___schedule+0x10/0x10 [ 328.985688][ T30] ? __pfx_vpanic+0x10/0x10 [ 328.990233][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 328.996449][ T30] panic+0xc5/0xd0 [ 329.000194][ T30] ? __pfx_panic+0x10/0x10 [ 329.004632][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 329.010042][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 329.016231][ T30] watchdog+0x105b/0x1060 [ 329.020591][ T30] ? watchdog+0x1da/0x1060 [ 329.025032][ T30] kthread+0x388/0x470 [ 329.029131][ T30] ? __pfx_watchdog+0x10/0x10 [ 329.033827][ T30] ? __pfx_kthread+0x10/0x10 [ 329.038436][ T30] ret_from_fork+0x51e/0xb90 [ 329.043056][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 329.048189][ T30] ? __switch_to+0xc7d/0x1450 [ 329.052896][ T30] ? __pfx_kthread+0x10/0x10 [ 329.057511][ T30] ret_from_fork_asm+0x1a/0x30 [ 329.062302][ T30] [ 329.066280][ T30] Kernel Offset: disabled [ 329.070623][ T30] Rebooting in 86400 seconds..