last executing test programs: 24m31.218495187s ago: executing program 32 (id=126): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x10b801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r1, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) 20m1.25851357s ago: executing program 33 (id=1462): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f0000000500)=""/68, 0x0, 0x60000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000ac0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) unshare(0x42000000) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) dup(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mtdblock0\x00', 0x101340, 0x0) 11m12.648934946s ago: executing program 1 (id=4474): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) recvmsg(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000200)=""/133, 0x85}], 0x1}, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000e00)=[{&(0x7f0000000dc0)='?', 0x1}], 0x1) recvfrom(r0, &(0x7f00000015c0)=""/4059, 0xfdb, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000001540), 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 11m11.309398969s ago: executing program 1 (id=4484): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xd, 0x4, 0x4, 0x2008, 0x5, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x800000, 0x4}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="7a0af8ff000000007a0af0ff000000007a0ae8ff000000007a0ae0ff000000007a0ad8ff000000007a0ad0ff000000007a0ac8ff000000007a0ac0ff00000000bfa100000000000007010000d8ffffffbfa200000000000007020000c0ffffff85000000cf000000b70000000200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000580)="b9e20300600d0600fb9e34f086f8", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x634d67e01b069bb0, 0xfffffffffffffdb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 11m11.178535885s ago: executing program 1 (id=4487): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="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", 0x17e}, {&(0x7f0000000700)="44900001000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fffe4b81c", 0x8b}], 0x2}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) writev(r0, &(0x7f0000000940)=[{&(0x7f0000000a00)="396cf87d08c5a180ab47bb5bf073f86e645bdcec1582ceaa94028bed754c6a0a9ee51723aba90ee33675431670f9548c745b3da48b83d07d7eccc4eb90a1e0e95fa8b02a190ec6899154b7410e1d84c95416f10bf24f7da37249ca1fa786f57c23ba93b389f5220c418523d836670706d8805eb8fb9df7231e2e643ecb223f032a1ae2", 0x83}], 0x1) write(r0, &(0x7f0000000e00)="39270725d93c4ab6cb559938ef75d3d7fd5c06a228a59b717b6934bdefb8b8e2dfca955f26b8cab29bdfdce27e4f9cb112fe41e0a6799578f252519cd4a289985be050d209b4c9617cfb94f1bed81696b0c741f6d366efd7ad3dc7cef66647abaf4108076fdffecb7457f5b6b01835a3c79b873f6ebbcb5ee659861a7b4cce43711bbd6b13c941fbb38ef7e1fe0c70fa4aa49b98b43615605d51cc4d742b364a4e7a2f3dee73b86af3fa4ca8f616eaaedcf155820e1767f7d66ecd818ece03f32c3367bbd9ce6656122772b54526f1e0420a9ac4cb25638c75fc3c487ba76fd64c26da6d7ce7f1ee8f49d6e9cc95f5c94bf93183ebf8e6be081e0b9f34bd6c2fe5f895dc1cc01e3018cef11ad9e2e1baf55254258efbaf3e8898f561bdb5c4c49f9d3146503df48e194ea3d06396e970ea9fc7c47eb9988477ed2c5f8641dfeea7b57b5a9967c58762574262efde8795f20f2d45e964ede39c7a1d000000863e6a21a33ba324e6474d4f0495054745f3a80e6554d4d1fd5ddbca11c5e3e6f9087ca1980900baa3a2956faa8f6b1652e8cf30d74564cb33ef144ed0c51bdd66675302692d979297f30e2d9523f85afbbf54c5b5e2261f8b792f83b33cca78c44a5c4e6ff96273979acbb447d49c0502cc9f8991e9bc784a2e978912d8102d867b631d54269936f54bb20ee57e2b4ba4b6c44e767575e7bcb1943c0e837eaa1448917aef24f6c3a8bb5a3b2084d7abc4965db601fa3bb220e35ac140913e0e55257af03c4dcf376f24773642c14279e2b5599f536e0aa34fa4d73f37a5feeca1cf93395b998ddcc557d0e2ae112cf1566f7097e7acb6c0bdf9350781341bb83936b355779417839a70c3cbe13e9561b0820df44dbd2a24bd3d6d480d9e83983cb7ad8f147f980b06be823e93a93395f5e60b7f31f5aeadc81f02e177446888c15d2845fd675b98360ac2f584a8ab618789499babac77e3311c563fa51949b91a46cc355f8e976c04dfc3b8e218dbe0302ff463fc94eceec7050b7477d9542f6d05d36ee13e664dfc0bb165601e6bd70615f3c299a9c7c7004cc9987a76afc54b3c83e5d23c0790f3000000002592cf0548f21823f61076340a87dae9d3427acc844357d6bdbba726e7a41eb30a826df698ab241b5e4991f41d34afd2c2b99f259ca582f09c8027c3381e63f30aad6ec7f7c7c973d55a33eca3cc4245bf488a497ac966aa13111ec3033172a3512e97700b3b58b621ccb71309d6ccafb05352718a362d14c38501ec0c00000015fceaed4ffb00000000d1f46e3fc182181ca5583096ec3849fb5db88ba0bcf565ec4665280402275fe98483a6c6b9da46659670fcdfa27684a69d0f9c003fd4b20127b080bf82664e51c36a4c4681dd332c6cb068cd106cff6a1e9621000000000000000000861372666c508f83a60ea1c4c365a7e3535c71ca2fd5fc059b0d9094df0cee297f025ee4cb93bd246edd062c1cfe3f42a666135fdd0a4173deafc4db31dae13a5c150074a7e945607047e2259a2d2954663e840a1efe16434a0dcb798a7f57ac8f89067adbb9617551b0f022d407299d7ce8867328468888d296dda548dbf411dc1a6b9aaa83200aa7ea942fa1db85c43a939ee4a5a2f8366238b81e6b413e36bff4e830f33b94d4ee56a700000000000000000000000000000029082939d4990654c8ff52119aebb6c5bde8dc555bde00c53fed8d1a3caebf9c82e20ce2e16301b92980db8343d2e3d5ab7721dcf6bbfdf78bbd44afdf119d28b5b192f4e58886adafc1161587a7b956a739ab713e857b7202a5ea414c1a4ec31e2ae03de9233e55c2d490c61e48997e13d1f3c88c2827ac2480ea91896cd61a4e1859d74740274575f061353086482ef51ad0e44947db6507b80871bfbcf6d929f1221c7746727f7d8a04d9c067ff5958de589da67dfcc5b1a26552c45baf133f2005c0851de64e963fb6e27460972960dfb20c926e18ed32cc916b3ed0f361938ceeb9472ecbd8f2ce6c4458648ca2763ff70b8ffa2fab88d97f637d9e42ec25e7df5375c9c64a4acbb655a70c2aedd1a4636de6d4cbd0c5bc77d3299b9dbb58d3e513a1afb9e187a93750942ff194450d0dcd2e94e2a5a55378c10ec6c125373d6f65b8862c4a38916604ffb120bc3c5dfe95091f0d7b7171635295049882c3ba0c47b6880e0a833b7b12cff5d4ef90c4619cb1bcc992a96f9fd025d0a78657c36a4a39414c7b25b41243efc0a552e6d0b77b2e434ab6976ae9adc6aa358221", 0x64c) 11m10.225173439s ago: executing program 1 (id=4494): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) recvmsg(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000200)=""/133, 0x85}], 0x1}, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000e00)=[{&(0x7f0000000dc0)='?', 0x1}], 0x1) recvfrom(r0, &(0x7f00000015c0)=""/4059, 0xfdb, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000001540), 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 11m8.335297972s ago: executing program 1 (id=4500): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, 0x0, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x0, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x60c3b961, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f00000008c0)={0x10, &(0x7f0000000380)=ANY=[], 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0xea}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4007, @fd=r2, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 11m6.537446725s ago: executing program 1 (id=4508): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x6, &(0x7f0000000100)=[{&(0x7f0000000380)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00e517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb000011d600a0680d4bbd6df1db6f1078bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000800)}, 0x40012100) 11m6.410405245s ago: executing program 0 (id=4509): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) fsopen(0x0, 0x0) 11m6.257226983s ago: executing program 0 (id=4511): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0x4040400) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x28}, 0xfc40) 11m6.201432224s ago: executing program 4 (id=4512): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="b000000000000000f9ffffffffffffff03000000000000000100000000000000ccb600000000000007000000000000003b00000003000000010000000000000034fcffffffffffff01000000000000000300000000000000ff7f000000000000000100000000000005000000fdffffff070000000040000000000000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="018000000000b8df0000000002000000844d793c108331c20000000001"], 0x0, 0x0, 0x0}) getdents64(r4, &(0x7f0000000100)=""/134, 0x86) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11m5.935369154s ago: executing program 4 (id=4513): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x10, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffff76b}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11m5.610198023s ago: executing program 4 (id=4514): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000240)=r0, 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x9) 11m5.474682685s ago: executing program 4 (id=4516): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000280), 0x4) sendmmsg$inet6(r0, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0xffffffff, @mcast1}, 0x1c, 0x0}}], 0x1, 0xc040) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000fec000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x7, 0x10023}) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 11m5.345710315s ago: executing program 4 (id=4517): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000500)={0x0, 0x595f, 0xf07b0862da8e804d, 0x0, 0x2bf}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r4 = epoll_create(0x1) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x9, 0x0, r4, r4, &(0x7f0000000040)={0x4000001a}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x2000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r5, r5, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) r7 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x7fffffff, 0x36314d4e, 0x3, 0x10000, 0x9, 0x5, 0x5a4, 0x1, 0x0, 0x2, 0x4}}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r8 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000480)=ANY=[@ANYRESOCT=r5, @ANYRES64=r7, @ANYRES64=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r9, 0xc0145b0d, 0x0) close(r7) r10 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r11 = socket$inet_udp(0x2, 0x2, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000004c0)={'bond0\x00'}) sendmsg$nl_route(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRESDEC=r8, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r11], 0x44}}, 0xc0) 11m5.343991482s ago: executing program 0 (id=4518): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0xff00}, 0x48) r1 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 11m4.881292835s ago: executing program 0 (id=4519): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/65, 0x0, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001840)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000740)=""/183, 0x0, 0xb000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000140)=0x4, 0x8) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) 11m4.049772677s ago: executing program 0 (id=4521): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) fsopen(0x0, 0x0) 11m3.975841868s ago: executing program 0 (id=4522): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000940)=""/4044, 0xfcc}], 0x1}, 0x20000000) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 11m1.550995835s ago: executing program 4 (id=4526): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0xfffd, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x20}, 0x4008804) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000002140)=@l2tp={0x2, 0x0, @remote, 0xfffffffe}, 0x80, &(0x7f0000002240)=[{&(0x7f0000000c40)="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", 0x3f3}, {&(0x7f0000002b40)="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", 0x1000}, {&(0x7f0000000200)="f2", 0x1}], 0x3}, 0x8400) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x40084) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 10m54.665643481s ago: executing program 34 (id=4496): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb601288763608646667021"], 0xffdd) 10m51.114980298s ago: executing program 35 (id=4508): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x6, &(0x7f0000000100)=[{&(0x7f0000000380)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00e517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb000011d600a0680d4bbd6df1db6f1078bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000800)}, 0x40012100) 10m48.614437165s ago: executing program 36 (id=4522): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000940)=""/4044, 0xfcc}], 0x1}, 0x20000000) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 10m46.120084043s ago: executing program 37 (id=4526): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0xfffd, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x20}, 0x4008804) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000002140)=@l2tp={0x2, 0x0, @remote, 0xfffffffe}, 0x80, &(0x7f0000002240)=[{&(0x7f0000000c40)="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", 0x3f3}, {&(0x7f0000002b40)="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", 0x1000}, {&(0x7f0000000200)="f2", 0x1}], 0x3}, 0x8400) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x40084) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 2m32.369301001s ago: executing program 3 (id=6903): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0xffffffffffffffa9, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {0x0, 0x410c}}}, 0x1c}, 0x1, 0x0, 0x0, 0x400c015}, 0x8000) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) 2m32.030938039s ago: executing program 9 (id=6905): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000140)={0xfffffffffffffc04, 0xd5f4d005, 0x8, 0xffffffffffffffff, 0x11}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00'], 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x0) syz_usb_connect(0x4, 0xe5, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x37, 0x12, 0xac, 0x10, 0x1199, 0x21, 0x7b70, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd3, 0x3, 0x40, 0x7, 0x20, 0x8, "", [{{0x9, 0x4, 0x29, 0x9, 0x3, 0x6f, 0xeb, 0x98, 0x9, [@uac_control={{0xa, 0x24, 0x1, 0x8, 0x1a}, [@mixer_unit={0x6, 0x24, 0x4, 0x5, 0x3, "b0"}, @extension_unit={0xa, 0x24, 0x8, 0x1, 0x8, 0xf8, "c44b1d"}]}], [{{0x9, 0x5, 0x3, 0x8, 0x3ff, 0x2, 0xbc, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xdd, 0x7}, @generic={0x4, 0xa, "8c8e"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x40, 0xc5, 0xdf, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x1}]}}, {{0x9, 0x5, 0x7, 0x0, 0x0, 0x7, 0x4, 0x7, [@generic={0x61, 0x22, "6c41bcca94385ff41f98e9cb901d775e462adb6c8b1343dd4a899f9e6107aecf33d17f71764be4583278a086ee0b4d558b87053ef6aa21c4d8213302247fd353b99fdc4a73d6fa8591df208b6182d15ea0b293f6fc95df251e622d70e5e3ce"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0xff}]}}]}}, {{0x9, 0x4, 0x64, 0x8c, 0x0, 0xff, 0xb2, 0x52, 0xd4}}, {{0x9, 0x4, 0x71, 0x7, 0x0, 0x82, 0x1, 0x9e, 0x40}}]}}]}}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0xfffffffffffffe42, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="81000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) 2m31.424661804s ago: executing program 9 (id=6908): r0 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904014cbcda4430000904010101010230000905010960"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f00000005c0)={0x20, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000e40)={0x0, 0xb, 0x6, "18adac0a8d41"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2m31.060661337s ago: executing program 3 (id=6911): mkdir(0x0, 0x16c) mount(0x0, &(0x7f00000005c0)='./trace\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffff9c, &(0x7f0000000640)='./trace/events/mac80211/enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000680)='1', 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) 2m30.676691295s ago: executing program 3 (id=6914): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100767266000c00028008000100e8"], 0x48}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="28000000130001000200", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x28}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000880)='veth0\x00', 0x6) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x18980) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000001140)={0xa, 0x5000, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 2m30.41244633s ago: executing program 3 (id=6915): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf30000001400010069"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000002c80)={@void, @val={0x6, 0x0, 0x6488, 0x8, 0x14}, @x25={0x2, 0x7, 0x1, "ab2f434a532710a9fbc1893bb3ecc15ce09408a14b"}}, 0x22) 2m29.696779575s ago: executing program 3 (id=6918): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000140)={0xfffffffffffffc04, 0xd5f4d005, 0x8, 0xffffffffffffffff, 0x11}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00'], 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x0) syz_usb_connect(0x4, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x37, 0x12, 0xac, 0x10, 0x1199, 0x21, 0x7b70, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x2, 0x40, 0x7, 0x20, 0x8, "", [{{0x9, 0x4, 0x64, 0x8c, 0x0, 0xff, 0xb2, 0x52, 0xd4, [@hid_hid={0x9, 0x21, 0x3fd, 0x81, 0x1, {0x22, 0x953}}]}}, {{0x9, 0x4, 0x71, 0x7, 0x0, 0x82, 0x1, 0x9e, 0x40}}]}}]}}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0xfffffffffffffe42, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="81000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) 2m29.475460666s ago: executing program 9 (id=6920): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fanotify_init(0x200, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='timers\x00') inotify_init() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') pipe2$9p(&(0x7f00000027c0), 0x84800) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) userfaultfd(0x801) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000140)=""/41, 0x29}], 0x1) ptrace$setregs(0xd, r3, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r3, 0x5, 0x4) 2m29.340742649s ago: executing program 9 (id=6921): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x7b, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0x42f, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x123}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0x123, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x2, 0x0, 0x146, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xdf}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0xfff9, 0x7, 0x0, 0x0}}, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8) 2m28.978138058s ago: executing program 3 (id=6923): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd\x00', 0x1ff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='tcp 2', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='1', 0x1) 2m28.481263203s ago: executing program 9 (id=6924): r0 = socket(0x2, 0x3, 0x100000001) setsockopt(r0, 0xff, 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000010080000900010073797a30000000002c000000030a"], 0x10c}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000002c40)=ANY=[], 0x40c}, 0x1, 0x0, 0x0, 0x90}, 0x8000) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@gcm_128={{0x304, 0x38}, "b575c2c1c3a227b7", "7f9298c9413f0000fb5868d41337f3a2", "8df69b29", "ae7ebfdf4de38175"}, 0x28) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x41, 0x109, 0xfffffffe, 0x25dfdbfd, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x20000080) getresgid(&(0x7f0000000300), &(0x7f0000000340), 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r6, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r5, {0xffffffffffffffff}}, './file0\x00'}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r3) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r8) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) sendmsg$NBD_CMD_DISCONNECT(r7, 0x0, 0x4) 2m26.387005567s ago: executing program 9 (id=6929): syz_usb_connect$uac2(0x3, 0x83, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100020000002082052500400001020301090271000301f81005080b020001052008090400000001012000092401fdff0a11004708240a00000b7f00090401efff01022000090401010101022000090501"], 0x0) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x8000) socket(0x10, 0x2, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x404000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32, @ANYBLOB="3d000e00800000000802110000000802110000000802110000000000000000000002086903cd"], 0x7c}}, 0x39db77225c63fa4c) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x100) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x21, 0x40000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x20502, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x101000, 0x110) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x5}, {0xf, 0xf}, {0x3, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0xc4abbf0a4a40694b}, 0x90) r3 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000080)={0x0, 0x4, 0x10000, 0x0, 0x0, 0x1, 0x2}) creat(&(0x7f0000000100)='./file0\x00', 0x7a) 2m26.191886482s ago: executing program 38 (id=6929): syz_usb_connect$uac2(0x3, 0x83, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100020000002082052500400001020301090271000301f81005080b020001052008090400000001012000092401fdff0a11004708240a00000b7f00090401efff01022000090401010101022000090501"], 0x0) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x8000) socket(0x10, 0x2, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x404000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32, @ANYBLOB="3d000e00800000000802110000000802110000000802110000000000000000000002086903cd"], 0x7c}}, 0x39db77225c63fa4c) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x100) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x21, 0x40000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x20502, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x101000, 0x110) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x5}, {0xf, 0xf}, {0x3, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0xc4abbf0a4a40694b}, 0x90) r3 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000080)={0x0, 0x4, 0x10000, 0x0, 0x0, 0x1, 0x2}) creat(&(0x7f0000000100)='./file0\x00', 0x7a) 2m13.800324378s ago: executing program 39 (id=6923): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd\x00', 0x1ff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='tcp 2', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='1', 0x1) 31.744911085s ago: executing program 8 (id=7389): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000040)={0x1, 0x0, [{0x80000008, 0x800, 0x3, 0x8, 0xb}]}) 31.491976327s ago: executing program 8 (id=7390): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x8, 0x404d, 0x2ba9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x5, 0xcd}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x4, 0xe608}) close_range(r3, 0xffffffffffffffff, 0x0) 31.18983958s ago: executing program 8 (id=7393): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x7b, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0x42f, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x123}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0x123, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x2, 0x0, 0x146, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xdf}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0xfff9, 0x7, 0x0, 0x0}}, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8) 30.907117385s ago: executing program 8 (id=7394): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r0, 0x100000000000011, 0xb00, 0x2f93) 30.698752143s ago: executing program 8 (id=7396): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0x80000000, 0xfffffffe, 0x3, 0x80000, 0x2000, 0xfffffffe, 0x0, r3, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) writev(r4, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 13.136373843s ago: executing program 2 (id=7444): ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x8800, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000c0780a402a1101007f9e0102030109022400010000000009"], 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1}, 0x6e) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 8.735076882s ago: executing program 2 (id=7454): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="2048fc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.744926829s ago: executing program 6 (id=7458): syz_usb_ep_write(0xffffffffffffffff, 0x3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x1c, &(0x7f00000000c0)={0x20, 0x18, 0x2, "0200"}, 0x0, 0x0}) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x4, &(0x7f00000013c0)={[{}]}) 6.834820906s ago: executing program 6 (id=7460): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x2000}, 0x40090) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000002280)="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", 0x37c}, {&(0x7f0000000a00)="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", 0x162}, {0x0}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x20004080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 6.828512002s ago: executing program 2 (id=7461): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x1, r2, 0x0, 0x0, 0x7ae590b0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'syz_tun\x00', 0x1}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="000008050010010b"], 0xa) 5.332300527s ago: executing program 6 (id=7462): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000040)={0x1, 0x0, [{0x80000008, 0x800, 0x3, 0x8, 0xb}]}) 5.331854121s ago: executing program 2 (id=7463): ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x8800, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000c0780a402a1101007f9e0102030109022400010000000009"], 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1}, 0x6e) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 5.290650633s ago: executing program 5 (id=7464): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000040)="1b000000080011aaaaaaaaaa0100", 0xe) 5.220677264s ago: executing program 6 (id=7465): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x908a, 0x840) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e0102030109021200010000000009"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000cc0)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 5.127258245s ago: executing program 5 (id=7466): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x8880}, 0x4) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x42}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 5.00302924s ago: executing program 5 (id=7467): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) 4.858615148s ago: executing program 5 (id=7468): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x40002, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) prctl$PR_CAPBSET_DROP(0x18, 0x17) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_setup(0x239f, 0x0) 3.112568343s ago: executing program 7 (id=7470): munmap(&(0x7f0000c32000/0x4000)=nil, 0x4000) mremap(&(0x7f000047f000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000f91000/0x2000)=nil) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sys/class/net/bridge0/bridge/max_age\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000002580)={0x2020}, 0x2020) 3.09538064s ago: executing program 5 (id=7471): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x2000}, 0x40090) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000002280)="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", 0x37c}, {&(0x7f0000000a00)="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", 0x162}, {&(0x7f00000006c0)}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x20004080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2.844299936s ago: executing program 7 (id=7472): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x1, r2, 0x0, 0x0, 0x7ae590b0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'syz_tun\x00', 0x1}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="000008050010010b"], 0xa) 2.773302501s ago: executing program 5 (id=7473): open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) inotify_init1(0x800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) write$tun(r0, &(0x7f0000001840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x14, 0x66, 0x0, 0xb, 0x6, 0x0, @rand_addr=0x64010101, @broadcast}}}, 0x22) 2.54489721s ago: executing program 7 (id=7474): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)={0x1, 0x0, [{0x80000008, 0x800, 0x3, 0x8, 0xb}]}) 2.539082686s ago: executing program 2 (id=7475): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0xe9, 0x6b, 0xa5, 0x8, 0x10b8, 0x1f9c, 0xcf68, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x26, 0x0, 0xb0, 0x1, "", [{{0x9, 0x4, 0xe9, 0x9, 0x0, 0x9f, 0xa2, 0xb, 0x8}}]}}]}}, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, &(0x7f0000001080)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000018c0)={0x2c, &(0x7f00000016c0)={0x40, 0x7, 0x1, '3'}, 0x0, 0x0, 0x0, 0x0}) 2.52206936s ago: executing program 8 (id=7397): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.388649662s ago: executing program 7 (id=7476): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x8880}, 0x4) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x42}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 2.383477525s ago: executing program 7 (id=7477): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r0, 0x0, 0xff2e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x9, 0x0, 0x1, 0x0, 0x83, "40ef62d75aaa04f7a64dffff0a00"}) 1.100024951s ago: executing program 7 (id=7478): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406a053b030000000000010902220001010080320904000001030000000921110100012217"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022170000000600ff0901a10185020901150026ff00750895098102c0"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 863.186798ms ago: executing program 6 (id=7479): syz_usb_ep_write(0xffffffffffffffff, 0x3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x1c, &(0x7f00000000c0)={0x20, 0x18, 0x2, "0200"}, 0x0, 0x0}) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x4, &(0x7f00000013c0)={[{}]}) 3.847131ms ago: executing program 6 (id=7480): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000a40)={0x20, 0x38, 0x1, '@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) 0s ago: executing program 2 (id=7481): bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xff50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x15, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xceb3}}, 0x0, 0x1, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) close(r4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fffb) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000180)=0x7, 0x4) ioctl$TUNGETVNETLE(r4, 0x40047451, &(0x7f0000000180)) socket$inet6_tcp(0xa, 0x1, 0x0) kernel console output (not intermixed with test programs): 59924][T28660] syzkaller1: entered promiscuous mode [ 1538.559952][T28660] syzkaller1: entered allmulticast mode [ 1538.630992][ T5698] hub 6-1:0.0: 1 port detected [ 1538.937242][ T5698] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 1538.943744][ T5698] usbhid 6-1:0.0: can't add hid device: -71 [ 1538.943860][ T5698] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1538.972524][T14595] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 1538.987070][T20572] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 1538.987744][ T5698] usb 6-1: USB disconnect, device number 13 [ 1539.104924][T28675] sit0: entered promiscuous mode [ 1539.110194][T28675] netlink: 'syz.6.7200': attribute type 1 has an invalid length. [ 1539.110209][T28675] netlink: 1 bytes leftover after parsing attributes in process `syz.6.7200'. [ 1539.142327][T14595] usb 9-1: Using ep0 maxpacket: 16 [ 1539.143969][T14595] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1539.145506][T14595] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1539.148661][T14595] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1539.148684][T14595] usb 9-1: Product: syz [ 1539.148698][T14595] usb 9-1: Manufacturer: syz [ 1539.148712][T14595] usb 9-1: SerialNumber: syz [ 1539.201861][T20572] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1539.210114][T20572] usb 3-1: not running at top speed; connect to a high speed hub [ 1539.210141][T20572] usb 3-1: New USB device found, idVendor=10b8, idProduct=1f9c, bcdDevice=cf.68 [ 1539.211260][T20572] usb 3-1: config 38 has an invalid interface number: 233 but max is 0 [ 1539.211285][T20572] usb 3-1: config 38 has no interface number 0 [ 1539.211317][T20572] usb 3-1: config 38 interface 233 has no altsetting 0 [ 1539.211440][T14595] usb 9-1: config 0 descriptor?? [ 1539.233450][T20572] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1539.233481][T20572] usb 3-1: Product: syz [ 1539.233496][T20572] usb 3-1: Manufacturer: syz [ 1539.233511][T20572] usb 3-1: SerialNumber: syz [ 1539.293166][T14595] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1539.293189][T14595] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 1539.335418][T28677] FAULT_INJECTION: forcing a failure. [ 1539.335418][T28677] name failslab, interval 1, probability 0, space 0, times 0 [ 1539.335463][T28677] CPU: 1 UID: 0 PID: 28677 Comm: syz.6.7201 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1539.335480][T28677] Tainted: [L]=SOFTLOCKUP [ 1539.335485][T28677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1539.335493][T28677] Call Trace: [ 1539.335501][T28677] [ 1539.335510][T28677] dump_stack_lvl+0xe8/0x150 [ 1539.335547][T28677] should_fail_ex+0x46b/0x600 [ 1539.335583][T28677] should_failslab+0xa8/0x100 [ 1539.335607][T28677] __kmalloc_noprof+0xfb/0x790 [ 1539.335631][T28677] ? kobject_get_path+0xc5/0x2f0 [ 1539.335735][T28677] ? kobject_get_path+0xc5/0x2f0 [ 1539.335768][T28677] kobject_get_path+0xc5/0x2f0 [ 1539.335796][T28677] kobject_uevent_env+0x2a1/0x9e0 [ 1539.335850][T28677] swnode_register+0x4f2/0x590 [ 1539.335943][T28677] fwnode_create_software_node+0x194/0x1f0 [ 1539.335971][T28677] device_create_managed_software_node+0xce/0x1f0 [ 1539.335991][T28677] iommufd_test+0x38a8/0x6370 [ 1539.336050][T28677] ? __lock_acquire+0x747/0x2de0 [ 1539.336080][T28677] ? __pfx_iommufd_test+0x10/0x10 [ 1539.336116][T28677] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1539.336141][T28677] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1539.336157][T28677] ? lock_acquire+0x115/0x350 [ 1539.336196][T28677] iommufd_fops_ioctl+0x468/0x600 [ 1539.336258][T28677] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 1539.336299][T28677] ? __fget_files+0x2a/0x420 [ 1539.336314][T28677] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1539.336328][T28677] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 1539.336348][T28677] __se_sys_ioctl+0xff/0x170 [ 1539.336380][T28677] do_syscall_64+0x166/0x520 [ 1539.336403][T28677] ? trace_irq_disable+0x3b/0x140 [ 1539.336430][T28677] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1539.336460][T28677] ? clear_bhb_loop+0x70/0xc0 [ 1539.336476][T28677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1539.336488][T28677] RIP: 0033:0x7f7aba88e199 [ 1539.336503][T28677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1539.336520][T28677] RSP: 002b:00007f7ab8ae6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1539.336544][T28677] RAX: ffffffffffffffda RBX: 00007f7abab15fa0 RCX: 00007f7aba88e199 [ 1539.336561][T28677] RDX: 0000200000000200 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 1539.336576][T28677] RBP: 00007f7aba9258e0 R08: 0000000000000000 R09: 0000000000000000 [ 1539.336590][T28677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1539.336604][T28677] R13: 00007f7abab16038 R14: 00007f7abab15fa0 R15: 00007ffffbe1a9c8 [ 1539.336635][T28677] [ 1539.337920][T28677] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1539.575098][T28681] FAULT_INJECTION: forcing a failure. [ 1539.575098][T28681] name failslab, interval 1, probability 0, space 0, times 0 [ 1539.575140][T28681] CPU: 1 UID: 0 PID: 28681 Comm: syz.5.7203 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1539.575171][T28681] Tainted: [L]=SOFTLOCKUP [ 1539.575180][T28681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1539.575192][T28681] Call Trace: [ 1539.575201][T28681] [ 1539.575211][T28681] dump_stack_lvl+0xe8/0x150 [ 1539.575250][T28681] should_fail_ex+0x46b/0x600 [ 1539.575287][T28681] should_failslab+0xa8/0x100 [ 1539.575312][T28681] __kmalloc_noprof+0xfb/0x790 [ 1539.575342][T28681] ? aio_setup_ring+0x2e5/0xe20 [ 1539.575370][T28681] ? aio_setup_ring+0x2e5/0xe20 [ 1539.575403][T28681] aio_setup_ring+0x2e5/0xe20 [ 1539.575440][T28681] ? pcpu_alloc_noprof+0xdae/0x18d0 [ 1539.575478][T28681] ? pcpu_alloc_noprof+0xff5/0x18d0 [ 1539.575509][T28681] ? __pfx_aio_setup_ring+0x10/0x10 [ 1539.575549][T28681] ioctx_alloc+0x323/0x840 [ 1539.575583][T28681] __se_sys_io_setup+0x7b/0x1d0 [ 1539.575611][T28681] do_syscall_64+0x166/0x520 [ 1539.575635][T28681] ? trace_irq_disable+0x3b/0x140 [ 1539.575663][T28681] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1539.575685][T28681] ? clear_bhb_loop+0x70/0xc0 [ 1539.575710][T28681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1539.575732][T28681] RIP: 0033:0x7f658982e199 [ 1539.575752][T28681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1539.575770][T28681] RSP: 002b:00007f6587a86028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 1539.575794][T28681] RAX: ffffffffffffffda RBX: 00007f6589ab5fa0 RCX: 00007f658982e199 [ 1539.575811][T28681] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000239f [ 1539.575825][T28681] RBP: 00007f65898c58e0 R08: 0000000000000000 R09: 0000000000000000 [ 1539.575839][T28681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1539.575852][T28681] R13: 00007f6589ab6038 R14: 00007f6589ab5fa0 R15: 00007ffd72b90018 [ 1539.575899][T28681] [ 1539.797457][ T5698] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 1539.908200][T14595] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1539.942540][ T5698] usb 7-1: device descriptor read/64, error -71 [ 1539.982717][T28689] syzkaller1: entered promiscuous mode [ 1539.982744][T28689] syzkaller1: entered allmulticast mode [ 1540.049646][T20572] dvb-usb: found a 'DiBcom TFE8096P reference design' in warm state. [ 1540.080877][T20572] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 1540.081615][T20572] dvbdev: DVB: registering new adapter (DiBcom TFE8096P reference design) [ 1540.081681][T20572] usb 3-1: media controller created [ 1540.111577][T20572] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1540.307656][T20572] DVB: Unable to find symbol dib8000_attach() [ 1540.307669][T20572] dvb-usb: no frontend was attached by 'DiBcom TFE8096P reference design' [ 1540.332356][ T5698] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1540.371954][T14595] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1540.371986][T14595] em28xx 9-1:0.0: board has no eeprom [ 1540.432411][T20572] rc_core: IR keymap rc-dib0700-rc5 not found [ 1540.432435][T20572] Registered IR keymap rc-empty [ 1540.432890][T20572] dvb-usb: could not initialize remote control. [ 1540.432903][T20572] dvb-usb: DiBcom TFE8096P reference design successfully initialized and connected. [ 1540.472366][ T5698] usb 7-1: device descriptor read/64, error -71 [ 1540.494096][T14595] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1540.494125][T14595] em28xx 9-1:0.0: dvb set to bulk mode. [ 1540.495620][ T5586] em28xx 9-1:0.0: Binding DVB extension [ 1540.539119][T20572] usb 3-1: USB disconnect, device number 70 [ 1540.541649][T14595] usb 9-1: USB disconnect, device number 31 [ 1540.563297][T14595] em28xx 9-1:0.0: Disconnecting em28xx [ 1540.583502][ T5698] usb usb7-port1: attempt power cycle [ 1540.655401][T20572] dvb-usb: DiBcom TFE8096P reference design successfully deinitialized and disconnected. [ 1540.744425][ T5586] em28xx 9-1:0.0: Registering input extension [ 1540.751573][T14595] em28xx 9-1:0.0: Closing input extension [ 1540.932876][ T5698] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 1540.964848][ T5698] usb 7-1: device descriptor read/8, error -71 [ 1541.003221][T14595] em28xx: Freeing device [ 1541.198061][T28712] fuse: Bad value for 'fd' [ 1541.218793][T28713] kvm: MWAIT instruction emulated as NOP! [ 1541.222499][ T5698] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 1541.254185][ T5698] usb 7-1: device descriptor read/8, error -71 [ 1541.269418][T28716] 9p: Bad value for 'rfdno' [ 1541.336789][T28718] syzkaller1: entered promiscuous mode [ 1541.336818][T28718] syzkaller1: entered allmulticast mode [ 1541.374785][ T5698] usb usb7-port1: unable to enumerate USB device [ 1541.432493][T20722] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1541.582848][T20722] usb 8-1: Using ep0 maxpacket: 8 [ 1541.583856][T20722] usb 8-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 1541.586407][T20722] usb 8-1: config index 0 descriptor too short (expected 1060, got 36) [ 1541.586463][T20722] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1541.586490][T20722] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1541.586513][T20722] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1541.586561][T20722] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1541.592422][T20722] usb 8-1: config 0 descriptor?? [ 1542.010110][T20722] usbhid 8-1:0.0: can't add hid device: -71 [ 1542.010239][T20722] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1542.018235][T20722] usb 8-1: USB disconnect, device number 22 [ 1542.022314][T14595] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1542.193105][T14595] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1542.197562][T14595] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1542.197591][T14595] usb 3-1: Product: syz [ 1542.197605][T14595] usb 3-1: Manufacturer: syz [ 1542.197620][T14595] usb 3-1: SerialNumber: syz [ 1542.626393][T28730] FAULT_INJECTION: forcing a failure. [ 1542.626393][T28730] name failslab, interval 1, probability 0, space 0, times 0 [ 1542.626431][T28730] CPU: 1 UID: 0 PID: 28730 Comm: syz.7.7219 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1542.626459][T28730] Tainted: [L]=SOFTLOCKUP [ 1542.626466][T28730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1542.626478][T28730] Call Trace: [ 1542.626487][T28730] [ 1542.626496][T28730] dump_stack_lvl+0xe8/0x150 [ 1542.626537][T28730] should_fail_ex+0x46b/0x600 [ 1542.626569][T28730] ? sock_alloc_inode+0x2c/0x1a0 [ 1542.626599][T28730] should_failslab+0xa8/0x100 [ 1542.626623][T28730] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 1542.626652][T28730] ? sock_alloc_inode+0x2c/0x1a0 [ 1542.626686][T28730] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1542.626714][T28730] sock_alloc_inode+0x2c/0x1a0 [ 1542.626742][T28730] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1542.626768][T28730] alloc_inode+0x6a/0x1b0 [ 1542.626791][T28730] __sock_create+0x12d/0x9d0 [ 1542.626829][T28730] __sys_socket+0xd6/0x1b0 [ 1542.626863][T28730] __x64_sys_socket+0x7a/0x90 [ 1542.626894][T28730] do_syscall_64+0x166/0x520 [ 1542.626917][T28730] ? trace_irq_disable+0x3b/0x140 [ 1542.626945][T28730] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1542.626963][T28730] ? clear_bhb_loop+0x70/0xc0 [ 1542.626987][T28730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1542.627007][T28730] RIP: 0033:0x7fef1717e199 [ 1542.627038][T28730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1542.627055][T28730] RSP: 002b:00007fef153d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1542.627079][T28730] RAX: ffffffffffffffda RBX: 00007fef17405fa0 RCX: 00007fef1717e199 [ 1542.627094][T28730] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 000000000000000f [ 1542.627107][T28730] RBP: 00007fef172158e0 R08: 0000000000000000 R09: 0000000000000000 [ 1542.627121][T28730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1542.627134][T28730] R13: 00007fef17406038 R14: 00007fef17405fa0 R15: 00007ffd53031518 [ 1542.627167][T28730] [ 1542.627188][T28730] socket: no more sockets [ 1542.885567][T14595] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -EPROTO [ 1542.885631][T14595] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 1542.886089][T14595] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1542.886138][T14595] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1542.887280][T14595] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1542.967182][T14595] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1542.985881][T14595] usb 3-1: USB disconnect, device number 71 [ 1543.022392][T20722] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1543.183900][T20722] usb 6-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1543.185715][T20722] usb 6-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1543.185742][T20722] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1543.188700][T20722] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1543.188716][T20722] usb 6-1: Product: syz [ 1543.188724][T20722] usb 6-1: Manufacturer: syz [ 1543.188732][T20722] usb 6-1: SerialNumber: syz [ 1543.196575][T20722] usb 6-1: config 0 descriptor?? [ 1543.211894][T20722] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1543.309849][T28743] 9p: Bad value for 'rfdno' [ 1543.752625][T14595] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1543.902402][T14595] usb 3-1: Using ep0 maxpacket: 8 [ 1543.904262][T14595] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1543.906360][T14595] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 1543.906386][T14595] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1543.906405][T14595] usb 3-1: config 0 has no interfaces? [ 1543.909151][T14595] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1543.909176][T14595] usb 3-1: Product: syz [ 1543.909190][T14595] usb 3-1: Manufacturer: syz [ 1543.909264][T14595] usb 3-1: SerialNumber: syz [ 1543.974592][T14595] usb 3-1: config 0 descriptor?? [ 1544.183558][ T5698] usb 3-1: USB disconnect, device number 72 [ 1544.460224][T20722] gspca_sunplus: reg_r err -71 [ 1544.460331][T20722] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 1544.487756][T20722] usb 6-1: USB disconnect, device number 14 [ 1545.236909][T28750] syzkaller1: entered promiscuous mode [ 1545.236926][T28750] syzkaller1: entered allmulticast mode [ 1545.372334][T14595] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1545.562333][T14595] usb 3-1: device descriptor read/64, error -71 [ 1545.785489][ T5698] usb 9-1: new full-speed USB device number 32 using dummy_hcd [ 1545.802417][T14595] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1545.887498][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.887547][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.932371][T14595] usb 3-1: device descriptor read/64, error -71 [ 1545.943805][ T5698] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1545.945396][ T5698] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1545.945425][ T5698] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1545.945467][ T5698] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1546.022411][ T5586] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1546.094978][T14595] usb usb3-port1: attempt power cycle [ 1546.153986][ T5586] usb 6-1: device descriptor read/64, error -71 [ 1546.186947][ T5698] usb 9-1: usb_control_msg returned -32 [ 1546.187000][ T5698] usbtmc 9-1:16.0: can't read capabilities [ 1546.392391][ T5586] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1546.432315][T14595] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1546.453156][T14595] usb 3-1: device descriptor read/8, error -71 [ 1546.527135][ T5586] usb 6-1: device descriptor read/64, error -71 [ 1546.632767][ T5586] usb usb6-port1: attempt power cycle [ 1546.702583][T14595] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1546.725991][T14595] usb 3-1: device descriptor read/8, error -71 [ 1546.762429][T20572] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 1546.833613][T14595] usb usb3-port1: unable to enumerate USB device [ 1546.913954][T20572] usb 7-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 1546.915534][T20572] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1546.915568][T20572] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1546.915595][T20572] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1546.915640][T20572] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1546.972481][ T5586] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1546.976363][T28785] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 1546.976487][T28785] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 1547.005579][ T5586] usb 6-1: device descriptor read/8, error -71 [ 1547.010934][T20572] pl2303 7-1:1.0: pl2303 converter detected [ 1547.045499][T20572] usb 7-1: pl2303 converter now attached to ttyUSB0 [ 1547.242559][ T5586] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1547.263032][ T5586] usb 6-1: device descriptor read/8, error -71 [ 1547.292670][T28785] pl2303 7-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 1547.293065][T28785] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 1547.293714][T28785] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 1547.295093][T28785] pl2303 7-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 1547.295600][T28785] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 1547.375791][ T5586] usb usb6-port1: unable to enumerate USB device [ 1547.423054][T20572] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1547.563298][T28785] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 1547.567269][T28785] pl2303 ttyUSB0: error sending break = -32 [ 1547.572294][T20572] usb 8-1: Using ep0 maxpacket: 16 [ 1547.572605][T13639] usb 7-1: USB disconnect, device number 51 [ 1547.597883][T20572] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1547.612347][T20572] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1547.616984][T20572] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1547.617009][T20572] usb 8-1: Product: syz [ 1547.617033][T20572] usb 8-1: Manufacturer: syz [ 1547.617047][T20572] usb 8-1: SerialNumber: syz [ 1547.617406][T13639] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 1547.626829][T13639] pl2303 7-1:1.0: device disconnected [ 1547.671118][T20572] usb 8-1: config 0 descriptor?? [ 1547.683194][T20572] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1547.683230][T20572] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 1547.929354][T28806] syzkaller1: entered promiscuous mode [ 1547.929381][T28806] syzkaller1: entered allmulticast mode [ 1548.289246][T20572] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 1548.402316][T13639] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 1548.554172][T13639] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1548.555794][T13639] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1548.555853][T13639] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1548.594924][T13639] usb 7-1: config 0 descriptor?? [ 1548.622474][T13639] pwc: Askey VC010 type 2 USB webcam detected. [ 1548.942908][T20572] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1548.942942][T20572] em28xx 8-1:0.0: board has no eeprom [ 1549.010505][T14595] usb 9-1: USB disconnect, device number 32 [ 1549.014107][T20572] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1549.014219][T20572] em28xx 8-1:0.0: dvb set to bulk mode. [ 1549.017228][T20008] em28xx 8-1:0.0: Binding DVB extension [ 1549.221505][T20572] usb 8-1: USB disconnect, device number 23 [ 1549.244276][T20572] em28xx 8-1:0.0: Disconnecting em28xx [ 1549.311745][T13639] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1549.336966][T13639] pwc: recv_control_msg error -32 req 02 val 2700 [ 1549.338508][T13639] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1549.341371][T13639] pwc: recv_control_msg error -32 req 04 val 1000 [ 1549.408075][T13639] pwc: recv_control_msg error -32 req 04 val 1300 [ 1549.419848][T13639] pwc: recv_control_msg error -32 req 04 val 1400 [ 1549.425924][T13639] pwc: recv_control_msg error -32 req 02 val 2000 [ 1549.459337][T13639] pwc: recv_control_msg error -32 req 02 val 2100 [ 1549.667939][ T5698] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1549.693030][T20008] em28xx 8-1:0.0: Registering input extension [ 1549.696317][T20572] em28xx 8-1:0.0: Closing input extension [ 1549.715811][T13639] pwc: recv_control_msg error -71 req 02 val 2500 [ 1549.716317][T13639] pwc: recv_control_msg error -71 req 02 val 2400 [ 1549.716782][T13639] pwc: recv_control_msg error -71 req 02 val 2600 [ 1549.717251][T13639] pwc: recv_control_msg error -71 req 02 val 2900 [ 1549.720188][T13639] pwc: recv_control_msg error -71 req 02 val 2800 [ 1549.721115][T13639] pwc: recv_control_msg error -71 req 04 val 1100 [ 1549.721591][T13639] pwc: recv_control_msg error -71 req 04 val 1200 [ 1549.776731][T13639] pwc: Registered as video103. [ 1549.782130][T13639] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input74 [ 1549.805875][T13639] usb 7-1: USB disconnect, device number 52 [ 1549.825559][ T5698] usb 6-1: Using ep0 maxpacket: 32 [ 1549.826487][ T5698] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1549.829672][ T5698] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=4 [ 1549.829698][ T5698] usb 6-1: SerialNumber: syz [ 1549.960769][ T5698] usb 6-1: config 0 descriptor?? [ 1549.996292][ T5698] as10x_usb: device has been detected [ 1549.997189][ T5698] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1550.055552][ T5698] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1550.096819][ T5698] as10x_usb: error during firmware upload part1 [ 1550.097431][ T5698] Registered device nBox DVB-T Dongle [ 1550.268067][T20572] em28xx: Freeing device [ 1550.294439][ T5698] usb 6-1: USB disconnect, device number 19 [ 1550.367667][ T5698] Unregistered device nBox DVB-T Dongle [ 1550.370880][ T5698] as10x_usb: device has been disconnected [ 1550.673250][T20008] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1550.704767][T28837] FAULT_INJECTION: forcing a failure. [ 1550.704767][T28837] name failslab, interval 1, probability 0, space 0, times 0 [ 1550.704806][T28837] CPU: 0 UID: 0 PID: 28837 Comm: syz.2.7259 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1550.704836][T28837] Tainted: [L]=SOFTLOCKUP [ 1550.704845][T28837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1550.704858][T28837] Call Trace: [ 1550.704867][T28837] [ 1550.704877][T28837] dump_stack_lvl+0xe8/0x150 [ 1550.704915][T28837] should_fail_ex+0x46b/0x600 [ 1550.704952][T28837] should_failslab+0xa8/0x100 [ 1550.704977][T28837] __kmalloc_noprof+0xfb/0x790 [ 1550.705011][T28837] ? rcu_is_watching+0x16/0xb0 [ 1550.705041][T28837] ? handler_new_ref+0x244/0x930 [ 1550.705154][T28837] ? handler_new_ref+0x244/0x930 [ 1550.705187][T28837] handler_new_ref+0x244/0x930 [ 1550.705219][T28837] ? __pfx_v4l2_ctrl_type_op_init+0x10/0x10 [ 1550.705256][T28837] v4l2_ctrl_new+0x1395/0x1820 [ 1550.705297][T28837] v4l2_ctrl_new_std+0x24e/0x300 [ 1550.705333][T28837] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1550.705361][T28837] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 1550.705388][T28837] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1550.705426][T28837] ? find_ref_lock+0x425/0x480 [ 1550.705457][T28837] ? find_ref_lock+0x425/0x480 [ 1550.705480][T28837] ? trace_kmalloc+0x2a/0xf0 [ 1550.705512][T28837] handler_new_ref+0x153/0x930 [ 1550.705544][T28837] ? __pfx_v4l2_ctrl_type_op_init+0x10/0x10 [ 1550.705571][T28837] v4l2_ctrl_new+0x1395/0x1820 [ 1550.705611][T28837] v4l2_ctrl_new_std+0x24e/0x300 [ 1550.705650][T28837] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 1550.705676][T28837] ? trace_kmalloc+0x2a/0xf0 [ 1550.705705][T28837] ? v4l2_ctrl_handler_init_class+0x1a1/0x2c0 [ 1550.705731][T28837] ? __kvmalloc_node_noprof+0x5d4/0x890 [ 1550.705764][T28837] ? v4l2_ctrl_handler_init_class+0x1fb/0x2c0 [ 1550.705793][T28837] vicodec_open+0x219/0xbf0 [ 1550.705875][T28837] v4l2_open+0x1bf/0x3a0 [ 1550.705960][T28837] chrdev_open+0x4dc/0x600 [ 1550.705994][T28837] ? __pfx_chrdev_open+0x10/0x10 [ 1550.706026][T28837] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 1550.706062][T28837] ? __pfx_chrdev_open+0x10/0x10 [ 1550.706091][T28837] do_dentry_open+0x849/0x1420 [ 1550.706125][T28837] vfs_open+0x3b/0x350 [ 1550.706143][T28837] ? path_openat+0x142d/0x1d60 [ 1550.706174][T28837] path_openat+0x1448/0x1d60 [ 1550.706222][T28837] do_file_open+0x23e/0x4a0 [ 1550.706263][T28837] ? __pfx_do_file_open+0x10/0x10 [ 1550.706315][T28837] ? alloc_fd+0x654/0x6d0 [ 1550.706349][T28837] do_sys_openat2+0x115/0x200 [ 1550.706375][T28837] ? __pfx_do_sys_openat2+0x10/0x10 [ 1550.706399][T28837] ? exc_page_fault+0x6a/0xc0 [ 1550.706427][T28837] ? do_user_addr_fault+0xc4c/0x1340 [ 1550.706453][T28837] __x64_sys_openat+0x138/0x170 [ 1550.706481][T28837] do_syscall_64+0x166/0x520 [ 1550.706504][T28837] ? trace_irq_disable+0x3b/0x140 [ 1550.706532][T28837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1550.706554][T28837] ? clear_bhb_loop+0x70/0xc0 [ 1550.706581][T28837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1550.706602][T28837] RIP: 0033:0x7f9d03c3e9ce [ 1550.706623][T28837] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1550.706642][T28837] RSP: 002b:00007f9d01ed5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1550.706666][T28837] RAX: ffffffffffffffda RBX: 00007f9d01ed66c0 RCX: 00007f9d03c3e9ce [ 1550.706682][T28837] RDX: 0000000000000002 RSI: 00007f9d01ed5c00 RDI: ffffffffffffff9c [ 1550.706697][T28837] RBP: 00007f9d01ed5c00 R08: 0000000000000000 R09: 0000000000000000 [ 1550.706712][T28837] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1550.706726][T28837] R13: 00007f9d03f06038 R14: 00007f9d03f05fa0 R15: 00007ffd5e864e98 [ 1550.706761][T28837] [ 1550.777464][T20572] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1550.826402][T20008] usb 9-1: Using ep0 maxpacket: 32 [ 1550.827235][T20008] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1550.829039][T20008] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1550.829070][T20008] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1550.829107][T20008] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1550.840057][T20008] usb 9-1: config 0 descriptor?? [ 1550.851735][T20008] hub 9-1:0.0: USB hub found [ 1550.937916][T20572] usb 8-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1550.944826][T20572] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1550.944859][T20572] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1550.944885][T20572] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1550.952747][T20572] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1550.952774][T20572] usb 8-1: Product: syz [ 1550.952797][T20572] usb 8-1: Manufacturer: syz [ 1550.952812][T20572] usb 8-1: SerialNumber: syz [ 1550.984021][T20572] usb 8-1: config 0 descriptor?? [ 1550.989176][T28829] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1550.989846][T28829] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1551.009915][T20572] usb 8-1: ucan: probing device on interface #0 [ 1551.094072][T20008] hub 9-1:0.0: 1 port detected [ 1551.096667][T13639] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 1551.247598][T20572] usb 8-1: ucan: could not read protocol version, ret=0 [ 1551.247679][T20572] usb 8-1: ucan: probe failed; try to update the device firmware [ 1551.556011][T13639] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1551.557379][T13639] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1551.557419][T13639] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1551.560078][T13639] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1551.560103][T13639] usb 7-1: Product: syz [ 1551.560118][T13639] usb 7-1: Manufacturer: syz [ 1551.560133][T13639] usb 7-1: SerialNumber: syz [ 1551.570935][T20008] usb 9-1: USB disconnect, device number 33 [ 1551.648792][T28841] syzkaller1: entered promiscuous mode [ 1551.648821][T28841] syzkaller1: entered allmulticast mode [ 1551.922673][T28835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1551.923646][T28835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1551.932160][T13639] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 1551.966455][T13639] usb 7-1: USB disconnect, device number 53 [ 1552.352379][ T5698] usb 9-1: new full-speed USB device number 34 using dummy_hcd [ 1552.472933][T13639] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 1552.504281][ T5698] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1552.506232][ T5698] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1552.506261][ T5698] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1552.506302][ T5698] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1552.643553][T13639] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1552.646344][T13639] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1552.646387][T13639] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1552.650073][T13639] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1552.650100][T13639] usb 7-1: Product: syz [ 1552.650116][T13639] usb 7-1: Manufacturer: syz [ 1552.650189][T13639] usb 7-1: SerialNumber: syz [ 1552.787057][ T5698] usb 9-1: usb_control_msg returned -32 [ 1552.787106][ T5698] usbtmc 9-1:16.0: can't read capabilities [ 1552.962860][T13639] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 1553.072914][T13639] usb 7-1: USB disconnect, device number 54 [ 1553.162029][T20008] usb 9-1: USB disconnect, device number 34 [ 1553.428304][T27998] usb 8-1: USB disconnect, device number 24 [ 1553.672381][T20008] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1553.792306][T20572] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1553.823031][T20008] usb 6-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 1553.824132][T20008] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1553.824163][T20008] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1553.824182][T20008] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1553.824206][T20008] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1553.864171][T28874] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1553.864347][T28874] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1553.881040][T20008] pl2303 6-1:1.0: pl2303 converter detected [ 1553.909131][T20008] usb 6-1: pl2303 converter now attached to ttyUSB0 [ 1553.944203][T20572] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1553.948403][T20572] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1553.948458][T20572] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1553.948507][T20572] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1554.003762][T20572] usb 3-1: config 0 descriptor?? [ 1554.030037][T20572] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1554.052332][T13639] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 1554.079788][T28888] syzkaller1: entered promiscuous mode [ 1554.079818][T28888] syzkaller1: entered allmulticast mode [ 1554.091871][T20572] usb 6-1: USB disconnect, device number 20 [ 1554.150967][T20572] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 1554.154775][T20572] pl2303 6-1:1.0: device disconnected [ 1554.202695][T13639] usb 9-1: Using ep0 maxpacket: 32 [ 1554.203523][T13639] usb 9-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1554.210285][T13639] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.210314][T13639] usb 9-1: Product: syz [ 1554.210329][T13639] usb 9-1: Manufacturer: syz [ 1554.210344][T13639] usb 9-1: SerialNumber: syz [ 1554.271511][T13639] usb 9-1: config 0 descriptor?? [ 1554.304067][T13639] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1554.709957][T28894] FAULT_INJECTION: forcing a failure. [ 1554.709957][T28894] name failslab, interval 1, probability 0, space 0, times 0 [ 1554.709997][T28894] CPU: 1 UID: 0 PID: 28894 Comm: syz.5.7276 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1554.710027][T28894] Tainted: [L]=SOFTLOCKUP [ 1554.710036][T28894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1554.710048][T28894] Call Trace: [ 1554.710057][T28894] [ 1554.710067][T28894] dump_stack_lvl+0xe8/0x150 [ 1554.710103][T28894] should_fail_ex+0x46b/0x600 [ 1554.710138][T28894] should_failslab+0xa8/0x100 [ 1554.710162][T28894] kmem_cache_alloc_node_noprof+0xac/0x660 [ 1554.710191][T28894] ? blk_alloc_queue+0x2f/0x690 [ 1554.710208][T28894] ? blk_alloc_queue+0x2f/0x690 [ 1554.710234][T28894] blk_alloc_queue+0x2f/0x690 [ 1554.710262][T28894] __blk_mq_alloc_disk+0x194/0x390 [ 1554.710291][T28894] ? __pfx___blk_mq_alloc_disk+0x10/0x10 [ 1554.710356][T28894] loop_add+0x480/0xb50 [ 1554.710387][T28894] ? __pfx_loop_add+0x10/0x10 [ 1554.710431][T28894] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1554.710465][T28894] loop_control_ioctl+0x12b/0x5b0 [ 1554.710491][T28894] ? __fget_files+0x2a/0x420 [ 1554.710515][T28894] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1554.710538][T28894] ? __fget_files+0x2a/0x420 [ 1554.710566][T28894] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1554.710592][T28894] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1554.710617][T28894] __se_sys_ioctl+0xff/0x170 [ 1554.710648][T28894] do_syscall_64+0x166/0x520 [ 1554.710672][T28894] ? trace_irq_disable+0x3b/0x140 [ 1554.710699][T28894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1554.710721][T28894] ? clear_bhb_loop+0x70/0xc0 [ 1554.710747][T28894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1554.710768][T28894] RIP: 0033:0x7f658982e199 [ 1554.710789][T28894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1554.710807][T28894] RSP: 002b:00007f6587a86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1554.710831][T28894] RAX: ffffffffffffffda RBX: 00007f6589ab5fa0 RCX: 00007f658982e199 [ 1554.710847][T28894] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1554.710861][T28894] RBP: 00007f65898c58e0 R08: 0000000000000000 R09: 0000000000000000 [ 1554.710875][T28894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1554.710889][T28894] R13: 00007f6589ab6038 R14: 00007f6589ab5fa0 R15: 00007ffd72b90018 [ 1554.710923][T28894] [ 1555.320044][T13639] gspca_ov534_9: reg_w failed -71 [ 1555.392340][T20008] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1555.542568][T20008] usb 6-1: Using ep0 maxpacket: 8 [ 1555.544017][T20008] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1555.544054][T20008] usb 6-1: no configurations [ 1555.544062][T20008] usb 6-1: can't read configurations, error -22 [ 1555.642535][T20722] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1555.672354][T13639] gspca_ov534_9: Unknown sensor 0000 [ 1555.672429][T20008] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1555.672454][T13639] ov534_9 9-1:0.0: probe with driver ov534_9 failed with error -22 [ 1555.681015][T13639] usb 9-1: USB disconnect, device number 35 [ 1555.813555][T20722] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1555.817125][T20722] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1555.817154][T20722] usb 8-1: Product: syz [ 1555.817169][T20722] usb 8-1: Manufacturer: syz [ 1555.817184][T20722] usb 8-1: SerialNumber: syz [ 1555.822859][T20008] usb 6-1: Using ep0 maxpacket: 8 [ 1555.824492][T20008] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1555.824550][T20008] usb 6-1: no configurations [ 1555.824563][T20008] usb 6-1: can't read configurations, error -22 [ 1555.825036][T20008] usb usb6-port1: attempt power cycle [ 1556.132396][T27998] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 1556.162322][T20008] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1556.183394][T20008] usb 6-1: Using ep0 maxpacket: 8 [ 1556.184214][T20008] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1556.184271][T20008] usb 6-1: no configurations [ 1556.184286][T20008] usb 6-1: can't read configurations, error -22 [ 1556.273818][T20722] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1556.273857][T20722] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1556.293423][T27998] usb 9-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1556.294889][T27998] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1556.294917][T27998] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1556.294944][T27998] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1556.297548][T27998] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1556.297573][T27998] usb 9-1: Product: syz [ 1556.297588][T27998] usb 9-1: Manufacturer: syz [ 1556.297603][T27998] usb 9-1: SerialNumber: syz [ 1556.310717][T27998] usb 9-1: config 0 descriptor?? [ 1556.317441][T28910] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 1556.318074][T28910] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 1556.322937][T27998] usb 9-1: ucan: probing device on interface #0 [ 1556.332379][T20008] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1556.353892][T20008] usb 6-1: Using ep0 maxpacket: 8 [ 1556.354819][T20008] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1556.356122][T20008] usb 6-1: no configurations [ 1556.356139][T20008] usb 6-1: can't read configurations, error -22 [ 1556.359878][T20008] usb usb6-port1: unable to enumerate USB device [ 1556.554251][T27998] usb 9-1: ucan: device protocol version 0 is not supported [ 1556.554525][T27998] usb 9-1: ucan: probe failed; try to update the device firmware [ 1556.715992][T20008] usb 3-1: USB disconnect, device number 77 [ 1556.827066][T28912] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 1556.827203][T28912] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 1556.922827][T28912] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1556.923121][T28912] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1556.923399][T28912] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1556.923518][T28912] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1557.003146][T26876] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1557.031664][T28912] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1557.185008][T28912] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1557.187835][T28912] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1557.271684][T28912] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1557.581531][T20722] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1557.597994][T20722] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 1557.600004][T20722] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1557.600059][T20722] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1557.600939][T20722] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1557.667566][T20722] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 1557.812282][T20722] usb 8-1: USB disconnect, device number 25 [ 1558.192330][T20008] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1558.344010][T20008] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 1558.345276][T20008] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1558.345308][T20008] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1558.345333][T20008] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1558.345376][T20008] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1558.351754][T28924] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1558.351873][T28924] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1558.420124][T20008] pl2303 3-1:1.0: pl2303 converter detected [ 1558.438270][T20008] usb 3-1: pl2303 converter now attached to ttyUSB0 [ 1558.558955][T20008] usb 3-1: USB disconnect, device number 78 [ 1558.580252][T20008] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 1558.591730][T20008] pl2303 3-1:1.0: device disconnected [ 1558.792345][ T5889] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1558.842425][T24994] Bluetooth: hci8: command 0x0406 tx timeout [ 1558.875421][ T5904] IPVS: starting estimator thread 0... [ 1558.907797][T20722] usb 9-1: USB disconnect, device number 36 [ 1558.953025][ T5889] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1558.954264][ T5889] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1558.956440][ T5889] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1558.956466][ T5889] usb 7-1: Product: syz [ 1558.956481][ T5889] usb 7-1: Manufacturer: syz [ 1558.956495][ T5889] usb 7-1: SerialNumber: syz [ 1558.972945][T28944] IPVS: using max 9 ests per chain, 21600 per kthread [ 1559.002446][T24994] Bluetooth: hci1: command 0x0c1a tx timeout [ 1559.002735][T24994] Bluetooth: hci2: command 0x0406 tx timeout [ 1559.002874][T24994] Bluetooth: hci0: command 0x0406 tx timeout [ 1559.132336][T27998] usb 8-1: new full-speed USB device number 26 using dummy_hcd [ 1559.242375][T26876] Bluetooth: hci3: command 0x0c1a tx timeout [ 1559.283152][ T5889] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 55 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1559.296842][T27998] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1559.299487][T27998] usb 8-1: not running at top speed; connect to a high speed hub [ 1559.299526][T27998] usb 8-1: New USB device found, idVendor=10b8, idProduct=1f9c, bcdDevice=cf.68 [ 1559.303525][T27998] usb 8-1: config 38 has an invalid interface number: 233 but max is 0 [ 1559.303563][T27998] usb 8-1: config 38 has no interface number 0 [ 1559.303596][T27998] usb 8-1: config 38 interface 233 has no altsetting 0 [ 1559.328701][T27998] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1559.328730][T27998] usb 8-1: Product: syz [ 1559.328746][T27998] usb 8-1: Manufacturer: syz [ 1559.328760][T27998] usb 8-1: SerialNumber: syz [ 1559.402354][T20008] usb 9-1: new full-speed USB device number 37 using dummy_hcd [ 1559.412678][ T5698] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1559.458004][ T9] usb 7-1: USB disconnect, device number 55 [ 1559.463961][ T9] usblp0: removed [ 1559.472628][T20572] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1559.563239][ T5698] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1559.564407][T20008] usb 9-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.40 [ 1559.566611][T20008] usb 9-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1559.566644][T20008] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1559.570765][T20008] usb 9-1: string descriptor 0 read error: -22 [ 1559.570952][T20008] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1559.602901][ T5698] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1559.621151][ T5698] usb 6-1: config 0 descriptor?? [ 1559.622334][T20572] usb 3-1: Using ep0 maxpacket: 8 [ 1559.623229][T20572] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1559.625936][T20572] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1559.625960][T20572] usb 3-1: config 0 has no interfaces? [ 1559.634076][T20572] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1559.634101][T20572] usb 3-1: Product: syz [ 1559.634117][T20572] usb 3-1: Manufacturer: syz [ 1559.634131][T20572] usb 3-1: SerialNumber: syz [ 1559.715403][ T5698] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1559.716757][T27998] dvb-usb: found a 'DiBcom TFE8096P reference design' in cold state, will try to load a firmware [ 1559.743580][T20572] usb 3-1: config 0 descriptor?? [ 1559.766441][T28950] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 1559.938936][T27998] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1559.939956][T27998] dib0700: firmware download failed at 7 with -22 [ 1559.974239][T27998] usb 8-1: USB disconnect, device number 26 [ 1560.472377][T27998] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1560.496116][T20008] usbhid 9-1:1.0: can't add hid device: -71 [ 1560.496248][T20008] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 1560.501644][T20008] usb 9-1: USB disconnect, device number 37 [ 1560.665620][T27998] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1560.665679][T27998] usb 8-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1560.668953][T27998] usb 8-1: config index 0 descriptor too short (expected 40744, got 96) [ 1560.668984][T27998] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1560.669006][T27998] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1560.669055][T27998] usb 8-1: too many endpoints for config 1 interface 1 altsetting 1: 226, using maximum allowed: 30 [ 1560.669094][T27998] usb 8-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1560.669122][T27998] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1560.669145][T27998] usb 8-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 226 [ 1560.672651][T27998] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1560.672678][T27998] usb 8-1: Product: syz [ 1560.672693][T27998] usb 8-1: Manufacturer: syz [ 1560.672707][T27998] usb 8-1: SerialNumber: syz [ 1560.928567][T26876] Bluetooth: hci8: command 0x0406 tx timeout [ 1561.038825][T27998] usb 8-1: 1:1 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 01 [ 1561.083119][T26876] Bluetooth: hci1: command 0x0c1a tx timeout [ 1561.091114][T27998] usb 8-1: 1:1: cannot set freq 48000 to ep 0x1 [ 1561.163733][T27998] usb 8-1: USB disconnect, device number 27 [ 1561.302080][ T5698] usb 6-1: USB disconnect, device number 25 [ 1561.322385][T26876] Bluetooth: hci3: command 0x0c1a tx timeout [ 1561.374805][T20664] udevd[20664]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1561.752460][T27998] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 1561.902350][T20722] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1561.912026][T27998] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1561.930479][T27998] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1561.930511][T27998] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1561.930531][T27998] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1561.965261][T27998] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1561.965287][T27998] usb 7-1: Product: syz [ 1561.965295][T27998] usb 7-1: Manufacturer: syz [ 1561.965303][T27998] usb 7-1: SerialNumber: syz [ 1561.971008][T27998] usb 7-1: config 0 descriptor?? [ 1561.971777][T28975] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1561.971896][T28975] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1562.026782][T27998] usb 7-1: ucan: probing device on interface #0 [ 1562.053343][T20722] usb 8-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 1562.055100][T20722] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1562.055127][T20722] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1562.055148][T20722] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1562.055193][T20722] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1562.077742][T28981] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1562.079132][T28981] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1562.105107][T20722] pl2303 8-1:1.0: pl2303 converter detected [ 1562.123338][T20722] usb 8-1: pl2303 converter now attached to ttyUSB0 [ 1562.199176][T27998] usb 7-1: ucan: device protocol version 0 is not supported [ 1562.199211][T27998] usb 7-1: ucan: probe failed; try to update the device firmware [ 1562.202380][T20008] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 1562.277880][T27998] usb 3-1: USB disconnect, device number 79 [ 1562.295943][ T9] usb 8-1: USB disconnect, device number 28 [ 1562.345791][ T9] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 1562.346704][ T9] pl2303 8-1:1.0: device disconnected [ 1562.364610][ T5698] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 1562.373366][T20008] usb 9-1: Using ep0 maxpacket: 16 [ 1562.374118][T20008] usb 9-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 1562.375210][T20008] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1562.375236][T20008] usb 9-1: config 0 has no interfaces? [ 1562.381815][T20008] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1562.381840][T20008] usb 9-1: Product: syz [ 1562.381855][T20008] usb 9-1: Manufacturer: syz [ 1562.381892][T20008] usb 9-1: SerialNumber: syz [ 1562.446405][T20008] usb 9-1: config 0 descriptor?? [ 1562.514724][ T5698] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1562.515314][ T5698] usb 6-1: not running at top speed; connect to a high speed hub [ 1562.515352][ T5698] usb 6-1: New USB device found, idVendor=10b8, idProduct=1f9c, bcdDevice=cf.68 [ 1562.516426][ T5698] usb 6-1: config 38 has an invalid interface number: 233 but max is 0 [ 1562.516452][ T5698] usb 6-1: config 38 has no interface number 0 [ 1562.516484][ T5698] usb 6-1: config 38 interface 233 has no altsetting 0 [ 1562.518763][ T5698] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1562.518788][ T5698] usb 6-1: Product: syz [ 1562.518803][ T5698] usb 6-1: Manufacturer: syz [ 1562.518824][ T5698] usb 6-1: SerialNumber: syz [ 1562.659490][ T9] usb 9-1: USB disconnect, device number 38 [ 1562.722387][T27998] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1562.799861][ C1] raw-gadget.3 gadget.5: ignoring, device is not running [ 1562.809950][ T5698] dvb-usb: found a 'DiBcom TFE8096P reference design' in cold state, will try to load a firmware [ 1562.811986][ T5698] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1562.812032][ T5698] dib0700: firmware download failed at 7 with -22 [ 1562.819929][ T5698] usb 6-1: USB disconnect, device number 26 [ 1562.873848][T27998] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1562.877570][T27998] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1562.877599][T27998] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1562.880898][T27998] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1562.880923][T27998] usb 3-1: Product: syz [ 1562.880939][T27998] usb 3-1: Manufacturer: syz [ 1562.880952][T27998] usb 3-1: SerialNumber: syz [ 1562.941293][T27998] usb 3-1: config 0 descriptor?? [ 1562.951266][T27998] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1563.162976][T26876] Bluetooth: hci1: command 0x0c1a tx timeout [ 1563.332547][ T9] usb 8-1: new full-speed USB device number 29 using dummy_hcd [ 1563.402439][T26876] Bluetooth: hci3: command 0x0c1a tx timeout [ 1563.504692][ T9] usb 8-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.40 [ 1563.507135][ T9] usb 8-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1563.507170][ T9] usb 8-1: config 1 interface 0 has no altsetting 0 [ 1563.523921][ T9] usb 8-1: string descriptor 0 read error: -22 [ 1563.524129][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1563.554963][T28994] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 1563.977733][T27998] gspca_sunplus: reg_r err -71 [ 1563.977893][T27998] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 1564.000773][T27998] usb 3-1: USB disconnect, device number 80 [ 1564.442538][T20722] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 1564.618871][T20722] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1564.618932][T20722] usb 9-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1564.621794][T20722] usb 9-1: config index 0 descriptor too short (expected 40744, got 96) [ 1564.621825][T20722] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1564.621845][T20722] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1564.621895][T20722] usb 9-1: too many endpoints for config 1 interface 1 altsetting 1: 226, using maximum allowed: 30 [ 1564.621934][T20722] usb 9-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1564.621962][T20722] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1564.621986][T20722] usb 9-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 226 [ 1564.650337][T14595] usb 7-1: USB disconnect, device number 56 [ 1564.728392][T20722] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1564.728433][T20722] usb 9-1: Product: syz [ 1564.728447][T20722] usb 9-1: Manufacturer: syz [ 1564.728463][T20722] usb 9-1: SerialNumber: syz [ 1565.090778][T20722] usb 9-1: 1:1 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 01 [ 1565.132226][T20722] usb 9-1: 1:1: cannot set freq 48000 to ep 0x1 [ 1565.309583][T20722] usb 9-1: USB disconnect, device number 39 [ 1565.627969][T22825] udevd[22825]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1565.891405][ T9] usbhid 8-1:1.0: can't add hid device: -71 [ 1565.891532][ T9] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 1565.928056][ T9] usb 8-1: USB disconnect, device number 29 [ 1566.262419][T20572] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 1566.280498][ T31] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1566.415637][T20572] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1566.417193][T20572] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1566.417248][T20572] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1566.417291][T20572] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1566.432696][T20572] usb 9-1: config 0 descriptor?? [ 1566.441621][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 1566.455904][ T31] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1566.468960][T20572] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1566.492108][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1566.492137][ T31] usb 3-1: config 0 has no interfaces? [ 1566.512935][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1566.512964][ T31] usb 3-1: Product: syz [ 1566.512980][ T31] usb 3-1: Manufacturer: syz [ 1566.512994][ T31] usb 3-1: SerialNumber: syz [ 1566.545970][ T31] usb 3-1: config 0 descriptor?? [ 1566.733365][T20572] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 1566.883510][T14595] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 1566.905050][T20572] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1566.917340][T20572] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1566.917368][T20572] usb 7-1: Product: syz [ 1566.917384][T20572] usb 7-1: Manufacturer: syz [ 1566.917399][T20572] usb 7-1: SerialNumber: syz [ 1567.051326][T14595] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1567.058341][T14595] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1567.058397][T14595] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1567.058493][T14595] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1567.126072][T14595] usbtmc 6-1:16.0: bulk endpoints not found [ 1567.410030][T20572] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1567.410095][T20572] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1568.392482][T14595] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1568.543408][T14595] usb 8-1: Using ep0 maxpacket: 32 [ 1568.546190][T14595] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1568.549058][T14595] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 1568.549085][T14595] usb 8-1: config 0 has no interface number 0 [ 1568.549134][T14595] usb 8-1: config 0 interface 184 has no altsetting 0 [ 1568.557502][T14595] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1568.557656][T14595] usb 8-1: Product: syz [ 1568.557673][T14595] usb 8-1: Manufacturer: syz [ 1568.557687][T14595] usb 8-1: SerialNumber: syz [ 1568.571417][T14595] usb 8-1: config 0 descriptor?? [ 1568.833582][T20572] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPIPE [ 1568.834891][ C0] raw-gadget.2 gadget.6: ignoring, device is not running [ 1568.835757][T20572] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 1568.893552][T20572] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1568.893665][T20572] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1568.903267][T20572] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1568.986697][T20572] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 1569.040497][ T5698] usb 9-1: USB disconnect, device number 40 [ 1569.108440][T20572] usb 7-1: USB disconnect, device number 57 [ 1569.191855][T14595] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1569.196461][T14595] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1569.318058][ T9] usb 3-1: USB disconnect, device number 81 [ 1569.637404][ T31] usb 6-1: USB disconnect, device number 27 [ 1569.652413][ T5698] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 1569.732335][T20722] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1569.806985][ T5698] usb 9-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1569.808243][ T5698] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1569.808274][ T5698] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1569.808300][ T5698] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1569.811694][ T5698] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1569.811722][ T5698] usb 9-1: Product: syz [ 1569.811736][ T5698] usb 9-1: Manufacturer: syz [ 1569.811751][ T5698] usb 9-1: SerialNumber: syz [ 1569.881192][ T5698] usb 9-1: config 0 descriptor?? [ 1569.883130][T29042] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1569.884638][T29042] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1569.892428][T20722] usb 7-1: Using ep0 maxpacket: 16 [ 1569.897726][T20722] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1569.917818][T20722] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1569.918839][ T5698] usb 9-1: ucan: probing device on interface #0 [ 1569.938671][T20722] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1569.938691][T20722] usb 7-1: Product: syz [ 1569.938699][T20722] usb 7-1: Manufacturer: syz [ 1569.938707][T20722] usb 7-1: SerialNumber: syz [ 1569.968237][T20722] usb 7-1: config 0 descriptor?? [ 1570.024256][T20722] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1570.024350][T20722] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 1570.106233][ T5698] usb 9-1: ucan: device protocol version 0 is not supported [ 1570.106261][ T5698] usb 9-1: ucan: probe failed; try to update the device firmware [ 1570.425167][T14595] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1570.425200][T14595] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1570.425220][T14595] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 1570.425518][T14595] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -32 [ 1570.604533][T20722] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1571.027023][T20722] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1571.027057][T20722] em28xx 7-1:0.0: board has no eeprom [ 1571.242512][T14595] usb 3-1: new full-speed USB device number 82 using dummy_hcd [ 1571.395698][T14595] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.40 [ 1571.397164][T14595] usb 3-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1571.397200][T14595] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1571.400867][T14595] usb 3-1: string descriptor 0 read error: -22 [ 1571.401119][T14595] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1571.402380][T20722] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1571.402405][T20722] em28xx 7-1:0.0: dvb set to bulk mode. [ 1571.453210][T29063] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1571.479879][ T31] em28xx 7-1:0.0: Binding DVB extension [ 1571.501809][T27998] usb 8-1: USB disconnect, device number 30 [ 1571.848327][T29070] fuse: Bad value for 'user_id' [ 1571.848403][T29070] fuse: Bad value for 'user_id' [ 1571.942337][T27998] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1572.168973][T27998] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1572.173668][T27998] usb 8-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1572.174333][T27998] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1572.175084][T27998] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1572.190129][T27998] usb 8-1: config 0 descriptor?? [ 1572.232504][T20572] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1572.239831][T27998] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1572.336310][T14595] usbhid 3-1:1.0: can't add hid device: -71 [ 1572.336443][T14595] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 1572.344922][T14595] usb 3-1: USB disconnect, device number 82 [ 1572.390871][T20572] usb 6-1: New USB device found, idVendor=046d, idProduct=c71e, bcdDevice= 0.00 [ 1572.400889][T20572] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1572.400927][T20572] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1572.400954][T20572] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1572.400990][T20572] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1572.426834][T20572] usb 6-1: config 0 descriptor?? [ 1572.493375][T27998] usb 9-1: USB disconnect, device number 41 [ 1572.596003][T29046] em28xx 7-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 1572.649543][T14595] usb 7-1: USB disconnect, device number 58 [ 1572.651995][T14595] em28xx 7-1:0.0: Disconnecting em28xx [ 1572.750292][ T31] em28xx 7-1:0.0: Registering input extension [ 1572.750791][T14595] em28xx 7-1:0.0: Closing input extension [ 1572.887174][T20572] hid_parser_main: 1 callbacks suppressed [ 1572.887198][T20572] logitech-djreceiver 0003:046D:C71E.0047: unknown main item tag 0x4 [ 1572.887232][T20572] logitech-djreceiver 0003:046D:C71E.0047: unknown main item tag 0x6 [ 1572.887258][T20572] logitech-djreceiver 0003:046D:C71E.0047: item fetching failed at offset 23/24 [ 1572.900606][T20572] logitech-djreceiver 0003:046D:C71E.0047: logi_dj_probe: parse failed [ 1572.900684][T20572] logitech-djreceiver 0003:046D:C71E.0047: probe with driver logitech-djreceiver failed with error -22 [ 1573.008393][T14595] em28xx: Freeing device [ 1573.070655][T20572] usb 6-1: USB disconnect, device number 28 [ 1573.312845][T14595] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1573.463236][T14595] usb 7-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 1573.464370][T14595] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1573.464395][T14595] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1573.466582][T14595] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1573.466607][T14595] usb 7-1: Product: syz [ 1573.466621][T14595] usb 7-1: Manufacturer: syz [ 1573.466633][T14595] usb 7-1: SerialNumber: syz [ 1573.469935][T14595] usb 7-1: config 0 descriptor?? [ 1573.572320][ T5889] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 1573.666974][T29095] fuse: Bad value for 'user_id' [ 1573.666988][T29095] fuse: Bad value for 'user_id' [ 1573.715902][T29077] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7342'. [ 1573.733501][ T5889] usb 9-1: Using ep0 maxpacket: 32 [ 1573.737672][ T5889] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1573.740266][ T5889] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 1573.740292][ T5889] usb 9-1: config 0 has no interface number 0 [ 1573.740338][ T5889] usb 9-1: config 0 interface 184 has no altsetting 0 [ 1573.779015][ T5889] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1573.779044][ T5889] usb 9-1: Product: syz [ 1573.779053][ T5889] usb 9-1: Manufacturer: syz [ 1573.779061][ T5889] usb 9-1: SerialNumber: syz [ 1573.805188][ T5889] usb 9-1: config 0 descriptor?? [ 1573.854797][T14595] usb 7-1: USB disconnect, device number 59 [ 1573.962365][ T31] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1574.154486][ T31] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1574.155856][ T31] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1574.155886][ T31] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1574.155970][ T31] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1574.159045][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1574.159072][ T31] usb 3-1: Product: syz [ 1574.159087][ T31] usb 3-1: Manufacturer: syz [ 1574.159102][ T31] usb 3-1: SerialNumber: syz [ 1574.247483][ T31] usb 3-1: config 0 descriptor?? [ 1574.248848][T29097] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1574.248978][T29097] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1574.279042][ T31] usb 3-1: ucan: probing device on interface #0 [ 1574.424218][ T5889] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1574.424253][ T5889] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1574.459622][ T31] usb 3-1: ucan: device protocol version 0 is not supported [ 1574.459894][ T31] usb 3-1: ucan: probe failed; try to update the device firmware [ 1574.621951][T14595] usb 8-1: USB disconnect, device number 31 [ 1574.802400][T20572] usb 7-1: new full-speed USB device number 60 using dummy_hcd [ 1574.955223][T20572] usb 7-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.40 [ 1574.956489][T20572] usb 7-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1574.956523][T20572] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1574.959927][T20572] usb 7-1: string descriptor 0 read error: -22 [ 1574.960065][T20572] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1575.010071][T29102] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1575.122508][T14595] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1575.231165][ T5889] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1575.231188][ T5889] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1575.231208][ T5889] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 1575.231471][ T5889] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -32 [ 1575.283194][T14595] usb 8-1: Using ep0 maxpacket: 16 [ 1575.285423][T14595] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1575.288387][T14595] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1575.319765][T14595] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1575.320011][T14595] usb 8-1: Product: syz [ 1575.320029][T14595] usb 8-1: Manufacturer: syz [ 1575.320045][T14595] usb 8-1: SerialNumber: syz [ 1575.354967][T14595] usb 8-1: config 0 descriptor?? [ 1575.395130][T14595] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1575.395280][T14595] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 1575.451461][T29110] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7357'. [ 1575.919583][T20572] usbhid 7-1:1.0: can't add hid device: -71 [ 1575.919776][T20572] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 1575.930812][T20572] usb 7-1: USB disconnect, device number 60 [ 1575.970629][T14595] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 1576.072450][T20008] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1576.223474][T20008] usb 6-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 1576.224622][T20008] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1576.224651][T20008] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1576.224687][T20008] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1576.263550][T20008] idmouse 6-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 1576.331709][T20008] usb 9-1: USB disconnect, device number 42 [ 1576.399614][T14595] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1576.399647][T14595] em28xx 8-1:0.0: board has no eeprom [ 1576.472363][T14595] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1576.472394][T14595] em28xx 8-1:0.0: dvb set to bulk mode. [ 1576.475429][T20572] em28xx 8-1:0.0: Binding DVB extension [ 1576.495242][T14595] usb 8-1: USB disconnect, device number 32 [ 1576.508721][T14595] em28xx 8-1:0.0: Disconnecting em28xx [ 1576.577288][T20572] em28xx 8-1:0.0: Registering input extension [ 1576.583732][T14595] em28xx 8-1:0.0: Closing input extension [ 1576.619662][T14595] em28xx: Freeing device [ 1576.627435][T20661] udevd[20661]: setting mode of /dev/bus/usb/008/032 to 020664 failed: No such file or directory [ 1576.627606][T20661] udevd[20661]: setting owner of /dev/bus/usb/008/032 to uid=0, gid=0 failed: No such file or directory [ 1576.720400][ T5889] usb 3-1: USB disconnect, device number 83 [ 1576.822364][T20722] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 1576.985140][T20722] usb 9-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 1576.987729][T20722] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1576.987806][T20722] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1576.990204][T20722] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1576.990228][T20722] usb 9-1: Product: syz [ 1576.990237][T20722] usb 9-1: Manufacturer: syz [ 1576.990245][T20722] usb 9-1: SerialNumber: syz [ 1577.051195][T20722] usb 9-1: config 0 descriptor?? [ 1577.102456][ T5889] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1577.267489][ T5889] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1577.286773][ T5889] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1577.286810][ T5889] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1577.286834][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1577.320472][T29128] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7363'. [ 1577.353221][ T5889] usb 3-1: config 0 descriptor?? [ 1577.387154][ T5889] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1577.529067][T20008] usb 9-1: USB disconnect, device number 43 [ 1577.792797][ T5889] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 1577.954215][ T5889] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1577.959062][ T5889] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1577.959090][ T5889] usb 7-1: Product: syz [ 1577.959105][ T5889] usb 7-1: Manufacturer: syz [ 1577.959120][ T5889] usb 7-1: SerialNumber: syz [ 1578.032637][T20008] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1578.182358][T20008] usb 8-1: Using ep0 maxpacket: 32 [ 1578.183688][T20008] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1578.185564][T20008] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1578.185595][T20008] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1578.185854][T20008] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1578.201097][T20008] usb 8-1: config 0 descriptor?? [ 1578.244343][T20008] hub 8-1:0.0: USB hub found [ 1578.427022][T20008] hub 8-1:0.0: 1 port detected [ 1578.450884][ T5889] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1578.450949][ T5889] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1578.532746][ T5698] usb 6-1: USB disconnect, device number 29 [ 1578.572812][ T5698] idmouse 6-1:1.0: disconnected [ 1578.895974][T20008] usb 8-1: USB disconnect, device number 33 [ 1579.432382][T20008] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1579.542479][T20722] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 1579.583933][T20008] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 1579.586686][T20008] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1579.586714][T20008] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1579.620976][T20008] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1579.621006][T20008] usb 6-1: Product: syz [ 1579.621021][T20008] usb 6-1: Manufacturer: syz [ 1579.621036][T20008] usb 6-1: SerialNumber: syz [ 1579.692437][T20722] usb 9-1: device descriptor read/64, error -71 [ 1579.808959][T28384] usb 3-1: USB disconnect, device number 84 [ 1579.918795][ T5889] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPIPE [ 1579.919147][ C1] raw-gadget.0 gadget.6: ignoring, device is not running [ 1579.920785][ T5889] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 1579.921264][ T5889] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1579.921316][ T5889] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1579.962712][T20722] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 1580.012959][ T5889] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1580.106041][ T5889] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 1580.120991][T20008] usb 6-1: Cannot retrieve CPort count: -32 [ 1580.121050][T20008] usb 6-1: Cannot retrieve CPort count: -32 [ 1580.121084][T20008] es2_ap_driver 6-1:1.0: probe with driver es2_ap_driver failed with error -32 [ 1580.125631][ T5889] usb 7-1: USB disconnect, device number 61 [ 1580.172339][T20722] usb 9-1: device descriptor read/64, error -71 [ 1580.286704][T20722] usb usb9-port1: attempt power cycle [ 1580.532504][ T31] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1580.574345][T29183] fuse: Bad value for 'fd' [ 1580.642281][T20722] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 1580.673248][T20722] usb 9-1: device descriptor read/8, error -71 [ 1580.697715][ T31] usb 3-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 1580.699599][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1580.699615][ T31] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1581.875915][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1581.875944][ T31] usb 3-1: Product: syz [ 1581.875959][ T31] usb 3-1: Manufacturer: syz [ 1581.875975][ T31] usb 3-1: SerialNumber: syz [ 1581.920876][ T31] usb 3-1: config 0 descriptor?? [ 1582.022357][T20008] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 1582.102394][T20722] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 1582.124023][T20722] usb 9-1: device descriptor read/8, error -71 [ 1582.140835][T29173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7381'. [ 1582.173303][T20008] usb 8-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 1582.175088][T20008] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1582.175116][T20008] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1582.175156][T20008] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1582.241648][T20722] usb usb9-port1: unable to enumerate USB device [ 1582.259729][T20008] idmouse 8-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 1582.287044][T20008] usb 6-1: USB disconnect, device number 30 [ 1582.312359][T27998] usb 3-1: USB disconnect, device number 85 [ 1582.683281][T29196] FAULT_INJECTION: forcing a failure. [ 1582.683281][T29196] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1582.683322][T29196] CPU: 1 UID: 0 PID: 29196 Comm: syz.6.7387 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1582.683351][T29196] Tainted: [L]=SOFTLOCKUP [ 1582.683359][T29196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1582.683371][T29196] Call Trace: [ 1582.683379][T29196] [ 1582.683389][T29196] dump_stack_lvl+0xe8/0x150 [ 1582.683424][T29196] should_fail_ex+0x46b/0x600 [ 1582.683457][T29196] get_futex_key+0x8e2/0x1580 [ 1582.683499][T29196] ? __pfx_get_futex_key+0x10/0x10 [ 1582.683540][T29196] futex_wake+0x119/0x600 [ 1582.683570][T29196] ? __pfx_futex_wake+0x10/0x10 [ 1582.683591][T29196] ? do_raw_spin_lock+0x12b/0x2f0 [ 1582.683631][T29196] do_futex+0x458/0x4e0 [ 1582.683657][T29196] ? __pfx_do_futex+0x10/0x10 [ 1582.683684][T29196] ? __might_fault+0xaf/0x130 [ 1582.683713][T29196] mm_exit_exec_release+0x10d/0x290 [ 1582.683743][T29196] exit_mm+0x50/0x240 [ 1582.683765][T29196] do_exit+0x6cd/0x2360 [ 1582.683787][T29196] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1582.683817][T29196] ? __pfx_do_exit+0x10/0x10 [ 1582.683837][T29196] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1582.683874][T29196] ? rt_spin_unlock+0x159/0x200 [ 1582.683905][T29196] do_group_exit+0x22d/0x2f0 [ 1582.683925][T29196] ? rt_spin_unlock+0x165/0x200 [ 1582.683956][T29196] get_signal+0x121b/0x12c0 [ 1582.684003][T29196] arch_do_signal_or_restart+0xbb/0x860 [ 1582.684036][T29196] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1582.684072][T29196] ? exc_page_fault+0x6a/0xc0 [ 1582.684104][T29196] exit_to_user_mode_loop+0x10e/0x770 [ 1582.684131][T29196] ? rcu_is_watching+0x16/0xb0 [ 1582.684166][T29196] do_syscall_64+0x328/0x520 [ 1582.684187][T29196] ? trace_irq_disable+0x3b/0x140 [ 1582.684220][T29196] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1582.684241][T29196] ? clear_bhb_loop+0x70/0xc0 [ 1582.684266][T29196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1582.684286][T29196] RIP: 0033:0x7f7aba88e199 [ 1582.684305][T29196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1582.684322][T29196] RSP: 002b:00007f7ab8ae60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1582.684343][T29196] RAX: fffffffffffffe00 RBX: 00007f7abab15fa8 RCX: 00007f7aba88e199 [ 1582.684358][T29196] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7abab15fa8 [ 1582.684371][T29196] RBP: 00007f7abab15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1582.684385][T29196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1582.684398][T29196] R13: 00007f7abab16038 R14: 00007ffffbe1a8e0 R15: 00007ffffbe1a9c8 [ 1582.684430][T29196] [ 1582.742290][T20008] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1582.973085][T20008] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1582.987490][T20008] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1583.007976][T20008] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1583.008005][T20008] usb 6-1: Product: syz [ 1583.008020][T20008] usb 6-1: Manufacturer: syz [ 1583.008035][T20008] usb 6-1: SerialNumber: syz [ 1583.506505][T29211] fuse: Bad value for 'fd' [ 1583.552401][T20572] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 1583.713045][T20572] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1583.714568][T20572] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1583.714617][T20572] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1583.715873][T20572] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1583.715899][T20572] usb 7-1: Manufacturer: syz [ 1583.770951][T20572] usb 7-1: config 0 descriptor?? [ 1584.092460][T27998] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1584.243408][T27998] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1584.245374][T27998] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1584.245430][T27998] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1584.308954][T27998] usb 3-1: config 0 descriptor?? [ 1584.357937][T27998] pwc: Askey VC010 type 2 USB webcam detected. [ 1584.558606][T14595] usb 8-1: USB disconnect, device number 34 [ 1584.593989][T20008] usblp 6-1:1.0: usblp1: USB Unidirectional printer dev 31 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1584.623928][T14595] idmouse 8-1:1.0: disconnected [ 1584.663480][T20008] usb 6-1: USB disconnect, device number 31 [ 1584.665815][ C0] raw-gadget.2 gadget.6: ignoring, device is not running [ 1584.667330][T20572] uclogic 0003:256C:006D.0048: interface is invalid, ignoring [ 1584.763368][T27998] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1584.808233][T27998] pwc: recv_control_msg error -32 req 02 val 2700 [ 1584.809126][T27998] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1584.809716][T27998] pwc: recv_control_msg error -32 req 04 val 1000 [ 1584.810316][T27998] pwc: recv_control_msg error -32 req 04 val 1300 [ 1584.810924][T27998] pwc: recv_control_msg error -32 req 04 val 1400 [ 1584.812133][T27998] pwc: recv_control_msg error -32 req 02 val 2000 [ 1584.853173][T27998] pwc: recv_control_msg error -32 req 02 val 2100 [ 1584.873942][T20008] usblp1: removed [ 1584.890523][T20572] usb 7-1: USB disconnect, device number 62 [ 1584.995490][T24994] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1585.105198][T27998] pwc: recv_control_msg error -71 req 02 val 2500 [ 1585.107250][T27998] pwc: recv_control_msg error -71 req 02 val 2400 [ 1585.109323][T27998] pwc: recv_control_msg error -71 req 02 val 2600 [ 1585.117221][T27998] pwc: recv_control_msg error -71 req 02 val 2900 [ 1585.117751][T27998] pwc: recv_control_msg error -71 req 02 val 2800 [ 1585.132504][T27998] pwc: recv_control_msg error -71 req 04 val 1100 [ 1585.133011][T27998] pwc: recv_control_msg error -71 req 04 val 1200 [ 1585.177861][T24994] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1585.213128][T24994] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1585.216977][T24994] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1585.227206][T24994] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1585.289440][T27998] pwc: Registered as video103. [ 1585.572316][T27998] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input77 [ 1585.588430][T27998] usb 3-1: USB disconnect, device number 86 [ 1586.383953][T29235] syzkaller1: entered promiscuous mode [ 1586.383981][T29235] syzkaller1: entered allmulticast mode [ 1586.422358][T27998] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1586.613691][T27998] usb 3-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 1586.614776][T27998] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1586.614801][T27998] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1586.617137][T27998] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1586.617163][T27998] usb 3-1: Product: syz [ 1586.617178][T27998] usb 3-1: Manufacturer: syz [ 1586.617193][T27998] usb 3-1: SerialNumber: syz [ 1586.621758][T27998] usb 3-1: config 0 descriptor?? [ 1586.887270][T29229] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7402'. [ 1587.062352][T20722] usb 3-1: USB disconnect, device number 87 [ 1587.352367][T27998] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1587.442365][T14595] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 1587.504475][T27998] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1587.505553][T27998] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1587.507641][T27998] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1587.507667][T27998] usb 6-1: Product: syz [ 1587.507680][T27998] usb 6-1: Manufacturer: syz [ 1587.507688][T27998] usb 6-1: SerialNumber: syz [ 1587.562422][T26876] Bluetooth: hci4: command tx timeout [ 1587.573566][T29216] bridge0: port 1(bridge_slave_0) entered blocking state [ 1587.573852][T29216] bridge0: port 1(bridge_slave_0) entered disabled state [ 1587.574066][T29216] bridge_slave_0: entered allmulticast mode [ 1587.590470][T29216] bridge_slave_0: entered promiscuous mode [ 1587.624756][T29216] bridge0: port 2(bridge_slave_1) entered blocking state [ 1587.624946][T29216] bridge0: port 2(bridge_slave_1) entered disabled state [ 1587.625129][T29216] bridge_slave_1: entered allmulticast mode [ 1587.630477][T29216] bridge_slave_1: entered promiscuous mode [ 1587.632376][T20722] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 1587.640886][T14595] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1587.662328][T14595] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1587.662581][T14595] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1587.662606][T14595] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1587.662651][T14595] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1587.764395][T14595] usb 7-1: config 0 descriptor?? [ 1587.785712][T27998] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 32 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1587.794009][T20722] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1587.796051][T20722] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1587.796111][T20722] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1587.837584][T29216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1587.866995][T20722] usb 8-1: config 0 descriptor?? [ 1587.889397][T20722] pwc: Askey VC010 type 2 USB webcam detected. [ 1587.943034][T29216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1587.976599][T13639] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1588.115014][T29216] team0: Port device team_slave_0 added [ 1588.132689][T29216] team0: Port device team_slave_1 added [ 1588.148506][T13639] usb 3-1: Using ep0 maxpacket: 16 [ 1588.149710][T13639] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1588.154837][T13639] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1588.161758][T13639] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1588.161785][T13639] usb 3-1: Product: syz [ 1588.161800][T13639] usb 3-1: Manufacturer: syz [ 1588.161814][T13639] usb 3-1: SerialNumber: syz [ 1588.210354][T13639] usb 3-1: config 0 descriptor?? [ 1588.280595][T13639] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1588.280711][T13639] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 1588.316606][T20722] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1588.318124][T20722] pwc: recv_control_msg error -32 req 02 val 2700 [ 1588.318733][T20722] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1588.319835][T20722] pwc: recv_control_msg error -32 req 04 val 1000 [ 1588.320492][T20722] pwc: recv_control_msg error -32 req 04 val 1300 [ 1588.321482][T20722] pwc: recv_control_msg error -32 req 04 val 1400 [ 1588.338785][T20722] pwc: recv_control_msg error -32 req 02 val 2000 [ 1588.350472][T20722] pwc: recv_control_msg error -32 req 02 val 2100 [ 1588.394867][T14595] plantronics 0003:047F:FFFF.0049: hiddev1,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1588.445475][T14595] usb 7-1: USB disconnect, device number 63 [ 1588.553902][T29272] fido_id[29272]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1588.556158][T20722] pwc: recv_control_msg error -71 req 02 val 2500 [ 1588.556951][T20722] pwc: recv_control_msg error -71 req 02 val 2400 [ 1588.559191][T20722] pwc: recv_control_msg error -71 req 02 val 2600 [ 1588.559839][T20722] pwc: recv_control_msg error -71 req 02 val 2900 [ 1588.560496][T20722] pwc: recv_control_msg error -71 req 02 val 2800 [ 1588.564327][T20722] pwc: recv_control_msg error -71 req 04 val 1100 [ 1588.566633][T20722] pwc: recv_control_msg error -71 req 04 val 1200 [ 1588.602841][T20722] pwc: Registered as video103. [ 1588.608160][T20722] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input79 [ 1588.811966][T20722] usb 8-1: USB disconnect, device number 35 [ 1588.884050][T13639] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1588.951714][T29216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1588.951795][T29216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1588.951826][T29216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1588.963991][T29216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1588.964011][T29216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1588.964039][T29216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1589.427269][T29216] hsr_slave_0: entered promiscuous mode [ 1589.429246][T29216] hsr_slave_1: entered promiscuous mode [ 1589.462510][T29216] debugfs: 'hsr0' already exists in 'hsr' [ 1589.462542][T29216] Cannot create hsr debugfs directory [ 1589.652522][T26876] Bluetooth: hci4: command tx timeout [ 1589.825921][T13639] em28xx 3-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 1589.826013][T13639] em28xx 3-1:0.0: board has no eeprom [ 1589.933877][T13639] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1589.933944][T13639] em28xx 3-1:0.0: dvb set to bulk mode. [ 1589.935014][T20722] em28xx 3-1:0.0: Binding DVB extension [ 1590.012618][T13639] usb 3-1: USB disconnect, device number 88 [ 1590.028855][T13639] em28xx 3-1:0.0: Disconnecting em28xx [ 1590.291869][T20722] em28xx 3-1:0.0: Registering input extension [ 1590.292055][T13639] em28xx 3-1:0.0: Closing input extension [ 1590.651187][T13639] em28xx: Freeing device [ 1591.033128][T13639] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1591.084444][T20722] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 1591.196915][T13639] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1591.198078][T13639] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1591.198101][T13639] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1591.198114][T13639] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1591.198176][T13639] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1591.216374][T13639] usb 3-1: config 0 descriptor?? [ 1591.254032][T20722] usb 7-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 1591.254148][T20722] usb 7-1: too many configurations: 102, using maximum allowed: 8 [ 1591.255935][T20722] usb 7-1: config 1 has an invalid interface number: 3 but max is 0 [ 1591.255960][T20722] usb 7-1: config 1 has no interface number 0 [ 1591.258705][T20722] usb 7-1: config 1 has an invalid interface number: 3 but max is 0 [ 1591.258730][T20722] usb 7-1: config 1 has no interface number 0 [ 1591.265344][T20722] usb 7-1: config 1 has an invalid interface number: 3 but max is 0 [ 1591.265425][T20722] usb 7-1: config 1 has no interface number 0 [ 1591.269662][T20722] usb 7-1: config 1 has an invalid interface number: 3 but max is 0 [ 1591.270101][T20722] usb 7-1: config 1 has no interface number 0 [ 1591.278779][T20722] usb 7-1: config 1 has an invalid interface number: 3 but max is 0 [ 1591.278805][T20722] usb 7-1: config 1 has no interface number 0 [ 1591.295187][T20722] usb 7-1: config 1 has an invalid interface number: 3 but max is 0 [ 1591.295216][T20722] usb 7-1: config 1 has no interface number 0 [ 1591.297614][T20008] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 1591.299828][T20722] usb 7-1: config 1 has an invalid interface number: 3 but max is 0 [ 1591.299852][T20722] usb 7-1: config 1 has no interface number 0 [ 1591.313228][T20722] usb 7-1: config 1 has an invalid interface number: 3 but max is 0 [ 1591.313256][T20722] usb 7-1: config 1 has no interface number 0 [ 1591.355773][T20722] usb 7-1: New USB device strings: Mfr=219, Product=128, SerialNumber=211 [ 1591.355805][T20722] usb 7-1: Product: syz [ 1591.355820][T20722] usb 7-1: Manufacturer: syz [ 1591.355931][T20722] usb 7-1: SerialNumber: syz [ 1591.397996][T20722] usb 7-1: 3:0 : does not exist [ 1591.398020][T20722] usb 7-1: 3:0 : does not exist [ 1591.553378][T20008] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1591.567455][T20008] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1591.567484][T20008] usb 8-1: Product: syz [ 1591.567499][T20008] usb 8-1: Manufacturer: syz [ 1591.567514][T20008] usb 8-1: SerialNumber: syz [ 1591.692785][T20722] usb 7-1: USB disconnect, device number 64 [ 1591.729685][T26876] Bluetooth: hci4: command tx timeout [ 1591.871926][T19868] udevd[19868]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1592.137951][T20008] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1592.138019][T20008] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1592.204344][T13639] plantronics 0003:047F:FFFF.004A: hiddev1,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1592.241973][T13639] usb 3-1: USB disconnect, device number 89 [ 1592.479905][T29308] fido_id[29308]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1592.912857][T29216] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1593.042417][T20722] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 1593.092860][T13639] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1593.161031][T20008] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO [ 1593.161091][T20008] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1593.161829][T20008] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1593.205020][T20722] usb 7-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 1593.214886][T20722] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1593.214981][T20722] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1593.232390][T13639] usb 3-1: device descriptor read/64, error -71 [ 1593.234655][T20722] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1593.234681][T20722] usb 7-1: Product: syz [ 1593.234696][T20722] usb 7-1: Manufacturer: syz [ 1593.234762][T20722] usb 7-1: SerialNumber: syz [ 1593.285364][T20008] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 1593.307486][T20008] usb 8-1: USB disconnect, device number 36 [ 1593.509324][T13639] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1593.678700][T13639] usb 3-1: device descriptor read/64, error -71 [ 1593.728313][T29216] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1593.794675][T13639] usb usb3-port1: attempt power cycle [ 1593.814019][T26876] Bluetooth: hci4: command tx timeout [ 1594.275069][T13639] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1594.546412][T13639] usb 3-1: device descriptor read/8, error -71 [ 1595.345872][T13639] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1595.392263][T20722] usb 7-1: USB disconnect, device number 65 [ 1595.400873][ C1] usb 7-1: failed to resubmit arpc in-urb: -19 [ 1595.400938][ C1] usb 7-1: failed to resubmit arpc in-urb: -19 [ 1595.484333][T13639] usb 3-1: device descriptor read/8, error -71 [ 1595.485070][T20722] usb 7-1: failed to send ARPC request 4: -19 [ 1595.485207][T20722] usb 7-1: failed to execute ARPC: -19 [ 1595.485260][T20722] usb 7-1: failed to flush cport 0: -19 [ 1595.485279][T20722] greybus greybus1: 0/0:0: failed to flush host cport: -19 [ 1595.485616][T20722] usb 7-1: failed to send ARPC request 2: -19 [ 1595.485746][T20722] usb 7-1: failed to execute ARPC: -19 [ 1595.485763][T20722] usb 7-1: failed to quiesce cport 0: -19 (0) [ 1595.485782][T20722] greybus greybus1: 0/0:0: failed to quiesce host cport: -19 [ 1595.545761][T27998] usb 6-1: USB disconnect, device number 32 [ 1595.603491][T13639] usb usb3-port1: unable to enumerate USB device [ 1595.604173][T27998] usblp0: removed [ 1595.628054][T20722] usb 7-1: failed to send ARPC request 3: -19 [ 1595.628131][T20722] usb 7-1: failed to execute ARPC: -19 [ 1595.628148][T20722] usb 7-1: failed to clear cport 0: -19 [ 1595.628167][T20722] greybus greybus1: 0/0:0: failed to clear host cport: -19 [ 1595.890658][T29216] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1596.273977][T13639] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 1596.402529][T20722] usb 7-1: new full-speed USB device number 66 using dummy_hcd [ 1596.432418][T13639] usb 8-1: Using ep0 maxpacket: 16 [ 1596.436188][T13639] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1596.437578][T13639] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1596.462363][T27998] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1596.480644][T13639] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1596.480672][T13639] usb 8-1: Product: syz [ 1596.480687][T13639] usb 8-1: Manufacturer: syz [ 1596.480701][T13639] usb 8-1: SerialNumber: syz [ 1596.517528][T13639] usb 8-1: config 0 descriptor?? [ 1596.532120][T13639] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1596.532177][T13639] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 1596.558315][T29216] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1596.597964][T20722] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1596.601538][T20722] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1596.601573][T20722] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1596.601586][T20722] usb 7-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1596.601609][T20722] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1596.636665][T27998] usb 3-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 1596.636724][T27998] usb 3-1: too many configurations: 102, using maximum allowed: 8 [ 1596.672540][T27998] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 1596.672568][T27998] usb 3-1: config 1 has no interface number 0 [ 1596.681258][T27998] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 1596.681303][T27998] usb 3-1: config 1 has no interface number 0 [ 1596.697240][T27998] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 1596.697269][T27998] usb 3-1: config 1 has no interface number 0 [ 1596.698782][T27998] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 1596.698806][T27998] usb 3-1: config 1 has no interface number 0 [ 1596.704018][T27998] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 1596.704056][T27998] usb 3-1: config 1 has no interface number 0 [ 1596.715202][T27998] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 1596.715233][T27998] usb 3-1: config 1 has no interface number 0 [ 1596.716872][T27998] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 1596.716896][T27998] usb 3-1: config 1 has no interface number 0 [ 1596.719480][T27998] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 1596.719504][T27998] usb 3-1: config 1 has no interface number 0 [ 1596.728284][T27998] usb 3-1: New USB device strings: Mfr=219, Product=128, SerialNumber=211 [ 1596.728312][T27998] usb 3-1: Product: syz [ 1596.728327][T27998] usb 3-1: Manufacturer: syz [ 1596.728341][T27998] usb 3-1: SerialNumber: syz [ 1596.823042][T27998] usb 3-1: 3:0 : does not exist [ 1596.823065][T27998] usb 3-1: 3:0 : does not exist [ 1596.850543][T20722] usbtmc 7-1:16.0: bulk endpoints not found [ 1597.024779][T27998] usb 3-1: USB disconnect, device number 94 [ 1597.077665][T20661] udevd[20661]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1597.151454][T13639] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 1597.182394][T20008] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1597.397029][T20008] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1597.406238][T20008] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1597.406273][T20008] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1597.406296][T20008] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1597.406338][T20008] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1597.413174][T20008] usb 6-1: config 0 descriptor?? [ 1597.870807][T13639] em28xx 8-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 1597.870841][T13639] em28xx 8-1:0.0: board has no eeprom [ 1597.907301][T20008] usbhid 6-1:0.0: can't add hid device: -71 [ 1597.907432][T20008] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1597.952685][T20722] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1597.986254][T20008] usb 6-1: USB disconnect, device number 33 [ 1598.042368][T13639] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1598.042398][T13639] em28xx 8-1:0.0: dvb set to bulk mode. [ 1598.042451][ T5889] em28xx 8-1:0.0: Binding DVB extension [ 1598.105345][T20722] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1598.106721][T20722] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1598.106778][T20722] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1598.159746][T13639] usb 8-1: USB disconnect, device number 37 [ 1598.161603][T20722] usb 3-1: config 0 descriptor?? [ 1598.192633][T20722] pwc: Askey VC010 type 2 USB webcam detected. [ 1598.193309][T13639] em28xx 8-1:0.0: Disconnecting em28xx [ 1598.243199][ T5889] em28xx 8-1:0.0: Registering input extension [ 1598.243518][T13639] em28xx 8-1:0.0: Closing input extension [ 1598.435662][T13639] em28xx: Freeing device [ 1598.588036][T20722] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1598.589756][T20722] pwc: recv_control_msg error -32 req 02 val 2700 [ 1598.610392][T20722] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1598.620273][T20722] pwc: recv_control_msg error -32 req 04 val 1000 [ 1598.621121][T20722] pwc: recv_control_msg error -32 req 04 val 1300 [ 1598.637455][T20722] pwc: recv_control_msg error -32 req 04 val 1400 [ 1598.640017][T20722] pwc: recv_control_msg error -32 req 02 val 2000 [ 1598.845387][T20722] pwc: recv_control_msg error -71 req 04 val 1500 [ 1598.846012][T20722] pwc: recv_control_msg error -71 req 02 val 2500 [ 1598.846486][T20722] pwc: recv_control_msg error -71 req 02 val 2400 [ 1598.847434][T20722] pwc: recv_control_msg error -71 req 02 val 2600 [ 1598.849723][T20722] pwc: recv_control_msg error -71 req 02 val 2900 [ 1598.850256][T20722] pwc: recv_control_msg error -71 req 02 val 2800 [ 1598.850915][T20722] pwc: recv_control_msg error -71 req 04 val 1100 [ 1598.880555][T20722] pwc: recv_control_msg error -71 req 04 val 1200 [ 1598.919928][T20722] pwc: Registered as video103. [ 1598.931647][T20722] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input83 [ 1598.982812][T20722] usb 3-1: USB disconnect, device number 95 [ 1599.027356][T14595] usb 7-1: USB disconnect, device number 66 [ 1599.348906][T29216] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1599.375332][T29216] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1599.381379][T29216] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1599.406767][T29216] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1599.426697][T29216] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1599.442333][T14595] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 1599.499103][T29216] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1599.520051][T29216] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1599.550591][T29216] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1600.136429][T29355] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7443'. [ 1601.035612][T14595] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1601.055675][T14595] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1601.072399][T14595] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1601.072428][T14595] usb 7-1: Product: syz [ 1601.072442][T14595] usb 7-1: Manufacturer: syz [ 1601.072457][T14595] usb 7-1: SerialNumber: syz [ 1601.362115][T14595] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 67 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1601.542333][ T5889] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1601.692335][ T5889] usb 6-1: device descriptor read/64, error -71 [ 1601.952346][ T5889] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1602.087134][ T5889] usb 6-1: device descriptor read/64, error -71 [ 1602.197041][ T5889] usb usb6-port1: attempt power cycle [ 1602.661951][ T5889] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1602.688252][T29216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1602.702882][ T5889] usb 6-1: device descriptor read/8, error -71 [ 1602.704254][T28384] usb 7-1: USB disconnect, device number 67 [ 1602.709775][T28384] usblp0: removed [ 1602.843673][T29216] 8021q: adding VLAN 0 to HW filter on device team0 [ 1602.868348][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 1602.868486][ T5805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1602.906631][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 1602.908334][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1602.977655][T13639] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1602.977796][ T5889] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1602.999603][ T5889] usb 6-1: device descriptor read/8, error -71 [ 1603.114796][ T5889] usb usb6-port1: unable to enumerate USB device [ 1604.450462][T13639] usb 3-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 1604.452107][T13639] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1604.452133][T13639] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1604.455770][T13639] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1604.455795][T13639] usb 3-1: Product: syz [ 1604.455810][T13639] usb 3-1: Manufacturer: syz [ 1604.455826][T13639] usb 3-1: SerialNumber: syz [ 1604.489273][T13639] usb 3-1: config 0 descriptor?? [ 1604.697297][T29369] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7444'. [ 1604.849152][T20572] usb 3-1: USB disconnect, device number 96 [ 1605.441239][T29400] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 1605.495634][T29216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1605.792305][T13639] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1605.813836][T29408] FAULT_INJECTION: forcing a failure. [ 1605.813836][T29408] name failslab, interval 1, probability 0, space 0, times 0 [ 1605.813875][T29408] CPU: 1 UID: 0 PID: 29408 Comm: syz.7.7455 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1605.813903][T29408] Tainted: [L]=SOFTLOCKUP [ 1605.813910][T29408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1605.813921][T29408] Call Trace: [ 1605.813930][T29408] [ 1605.813939][T29408] dump_stack_lvl+0xe8/0x150 [ 1605.813973][T29408] should_fail_ex+0x46b/0x600 [ 1605.814005][T29408] should_failslab+0xa8/0x100 [ 1605.814026][T29408] ? prepare_creds+0x30/0x820 [ 1605.814050][T29408] kmem_cache_alloc_noprof+0x9e/0x690 [ 1605.814078][T29408] ? prepare_creds+0x30/0x820 [ 1605.814106][T29408] prepare_creds+0x30/0x820 [ 1605.814131][T29408] cap_task_prctl+0x25a/0xaa0 [ 1605.814168][T29408] security_task_prctl+0xf6/0x190 [ 1605.814194][T29408] __se_sys_prctl+0xbf/0x1910 [ 1605.814222][T29408] ? __pfx___se_sys_prctl+0x10/0x10 [ 1605.814250][T29408] ? __x64_sys_prctl+0x20/0xc0 [ 1605.814273][T29408] do_syscall_64+0x166/0x520 [ 1605.814296][T29408] ? trace_irq_disable+0x3b/0x140 [ 1605.814321][T29408] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1605.814342][T29408] ? clear_bhb_loop+0x70/0xc0 [ 1605.814366][T29408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1605.814387][T29408] RIP: 0033:0x7fef1717e199 [ 1605.814407][T29408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1605.814424][T29408] RSP: 002b:00007fef153d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 1605.814448][T29408] RAX: ffffffffffffffda RBX: 00007fef17405fa0 RCX: 00007fef1717e199 [ 1605.814463][T29408] RDX: 0000000000000000 RSI: 0000000000000017 RDI: 0000000000000018 [ 1605.814477][T29408] RBP: 00007fef172158e0 R08: 0000000000000000 R09: 0000000000000000 [ 1605.814491][T29408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1605.814504][T29408] R13: 00007fef17406038 R14: 00007fef17405fa0 R15: 00007ffd53031518 [ 1605.814546][T29408] [ 1605.887889][T29410] syzkaller1: entered promiscuous mode [ 1605.887916][T29410] syzkaller1: entered allmulticast mode [ 1606.039113][T13639] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1606.052565][T13639] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1606.052624][T13639] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1606.084463][T13639] usb 3-1: config 0 descriptor?? [ 1606.141658][T13639] pwc: Askey VC010 type 2 USB webcam detected. [ 1606.495542][T13639] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1606.496303][T13639] pwc: recv_control_msg error -32 req 02 val 2700 [ 1606.498659][T13639] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1606.499758][T13639] pwc: recv_control_msg error -32 req 04 val 1000 [ 1606.500409][T13639] pwc: recv_control_msg error -32 req 04 val 1300 [ 1606.501256][T13639] pwc: recv_control_msg error -32 req 04 val 1400 [ 1606.502116][T13639] pwc: recv_control_msg error -32 req 02 val 2000 [ 1606.510865][T13639] pwc: recv_control_msg error -32 req 02 val 2100 [ 1606.720130][T13639] pwc: recv_control_msg error -71 req 02 val 2500 [ 1606.721108][T13639] pwc: recv_control_msg error -71 req 02 val 2400 [ 1606.724201][T13639] pwc: recv_control_msg error -71 req 02 val 2600 [ 1606.726214][T13639] pwc: recv_control_msg error -71 req 02 val 2900 [ 1606.726671][T13639] pwc: recv_control_msg error -71 req 02 val 2800 [ 1606.728608][T13639] pwc: recv_control_msg error -71 req 04 val 1100 [ 1606.729136][T13639] pwc: recv_control_msg error -71 req 04 val 1200 [ 1606.737233][T13639] pwc: Registered as video103. [ 1606.741693][T13639] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input84 [ 1606.748229][T13639] usb 3-1: USB disconnect, device number 97 [ 1607.014023][ T5698] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 1607.164060][ T5698] usb 8-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 1607.165241][ T5698] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1607.165293][ T5698] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1607.165320][ T5698] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1607.180949][ T5698] usbhid 8-1:1.0: couldn't find an input interrupt endpoint [ 1607.330406][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.330479][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.982679][T29216] veth0_vlan: entered promiscuous mode [ 1609.000903][T29216] veth1_vlan: entered promiscuous mode [ 1609.068969][T29216] veth0_macvtap: entered promiscuous mode [ 1609.080833][T29216] veth1_macvtap: entered promiscuous mode [ 1609.128394][T29216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1609.151557][T29216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1609.182409][ T57] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1609.183655][ T57] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1609.202394][T20572] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1609.341938][T29445] FAULT_INJECTION: forcing a failure. [ 1609.341938][T29445] name failslab, interval 1, probability 0, space 0, times 0 [ 1609.341974][T29445] CPU: 0 UID: 0 PID: 29445 Comm: syz.5.7468 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1609.342000][T29445] Tainted: [L]=SOFTLOCKUP [ 1609.342006][T29445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1609.342019][T29445] Call Trace: [ 1609.342027][T29445] [ 1609.342035][T29445] dump_stack_lvl+0xe8/0x150 [ 1609.342070][T29445] should_fail_ex+0x46b/0x600 [ 1609.342104][T29445] should_failslab+0xa8/0x100 [ 1609.342126][T29445] ? prepare_creds+0x30/0x820 [ 1609.342152][T29445] kmem_cache_alloc_noprof+0x9e/0x690 [ 1609.342180][T29445] ? prepare_creds+0x30/0x820 [ 1609.342206][T29445] prepare_creds+0x30/0x820 [ 1609.342232][T29445] cap_task_prctl+0x25a/0xaa0 [ 1609.342264][T29445] security_task_prctl+0xf6/0x190 [ 1609.342291][T29445] __se_sys_prctl+0xbf/0x1910 [ 1609.342319][T29445] ? __pfx___se_sys_prctl+0x10/0x10 [ 1609.342346][T29445] ? __x64_sys_prctl+0x20/0xc0 [ 1609.342370][T29445] do_syscall_64+0x166/0x520 [ 1609.342392][T29445] ? trace_irq_disable+0x3b/0x140 [ 1609.342429][T29445] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1609.342452][T29445] ? clear_bhb_loop+0x70/0xc0 [ 1609.342477][T29445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1609.342497][T29445] RIP: 0033:0x7f658982e199 [ 1609.342518][T29445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1609.342536][T29445] RSP: 002b:00007f6587a86028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 1609.342560][T29445] RAX: ffffffffffffffda RBX: 00007f6589ab5fa0 RCX: 00007f658982e199 [ 1609.342578][T29445] RDX: 0000000000000000 RSI: 0000000000000017 RDI: 0000000000000018 [ 1609.342592][T29445] RBP: 00007f65898c58e0 R08: 0000000000000000 R09: 0000000000000000 [ 1609.342608][T29445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1609.342621][T29445] R13: 00007f6589ab6038 R14: 00007f6589ab5fa0 R15: 00007ffd72b90018 [ 1609.342652][T29445] [ 1609.390704][T20572] usb 3-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 1609.411352][ T48] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1609.426624][T20572] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1609.426651][T20572] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1609.495614][ T5698] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 1609.542373][T20572] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1609.542402][T20572] usb 3-1: Product: syz [ 1609.542421][T20572] usb 3-1: Manufacturer: syz [ 1609.542435][T20572] usb 3-1: SerialNumber: syz [ 1609.641028][T20572] usb 3-1: config 0 descriptor?? [ 1609.796686][T20572] usb 8-1: USB disconnect, device number 38 [ 1609.848808][ T5698] usb 7-1: Using ep0 maxpacket: 8 [ 1609.870635][ T5698] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1609.873684][ T5698] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1609.894880][ T5698] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1609.894909][ T5698] usb 7-1: Product: syz [ 1609.894924][ T5698] usb 7-1: Manufacturer: syz [ 1609.894939][ T5698] usb 7-1: SerialNumber: syz [ 1610.012488][ T5698] usb 7-1: config 0 descriptor?? [ 1610.095591][T29435] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7463'. [ 1610.764950][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1610.840111][ T5904] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1610.840133][ T5904] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1610.979555][T20008] usb 3-1: USB disconnect, device number 98 [ 1611.372890][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1611.372912][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1611.468967][T29462] syzkaller1: entered promiscuous mode [ 1611.469046][T29462] syzkaller1: entered allmulticast mode [ 1613.088972][T27998] usb 3-1: new full-speed USB device number 99 using dummy_hcd [ 1613.152263][T13639] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 1613.280704][T14595] usb 7-1: USB disconnect, device number 68 [ 1613.314772][T27998] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1613.315367][T27998] usb 3-1: not running at top speed; connect to a high speed hub [ 1613.315406][T27998] usb 3-1: New USB device found, idVendor=10b8, idProduct=1f9c, bcdDevice=cf.68 [ 1613.318141][T27998] usb 3-1: config 38 has an invalid interface number: 233 but max is 0 [ 1613.318168][T27998] usb 3-1: config 38 has no interface number 0 [ 1613.318201][T27998] usb 3-1: config 38 interface 233 has no altsetting 0 [ 1613.321092][T27998] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1613.321118][T27998] usb 3-1: Product: syz [ 1613.321133][T27998] usb 3-1: Manufacturer: syz [ 1613.321147][T27998] usb 3-1: SerialNumber: syz [ 1613.397438][T13639] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1613.400621][T13639] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1613.400652][T13639] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1613.400676][T13639] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1613.400719][T13639] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1613.464748][T13639] usb 9-1: config 0 descriptor?? [ 1613.590301][T27998] dvb-usb: found a 'DiBcom TFE8096P reference design' in cold state, will try to load a firmware [ 1613.594110][T27998] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1613.594158][T27998] dib0700: firmware download failed at 7 with -22 [ 1613.626696][T27998] usb 3-1: USB disconnect, device number 99 [ 1613.891039][T13639] usbhid 9-1:0.0: can't add hid device: -71 [ 1613.891160][T13639] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1613.915402][T13639] usb 9-1: USB disconnect, device number 48 [ 1615.388278][ T38] INFO: task syz.3.6923:27375 blocked for more than 144 seconds. [ 1615.388309][ T38] Tainted: G L syzkaller #0 [ 1615.388321][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1615.388332][ T38] task:syz.3.6923 state:D stack:27464 pid:27375 tgid:27371 ppid:19465 task_flags:0x400040 flags:0x00080002 [ 1615.388392][ T38] Call Trace: [ 1615.388400][ T38] [ 1615.388414][ T38] __schedule+0x16d9/0x5700 [ 1615.388470][ T38] ? __pfx___schedule+0x10/0x10 [ 1615.388513][ T38] rt_mutex_schedule+0x76/0xf0 [ 1615.388540][ T38] rt_mutex_slowlock_block+0x55e/0x690 [ 1615.388575][ T38] ? rt_mutex_slowlock_block+0x33c/0x690 [ 1615.388605][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 1615.388636][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 1615.388665][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1615.388713][ T38] ? write_threads+0x3b4/0x610 [ 1615.388743][ T38] ? write_threads+0x3b4/0x610 [ 1615.388764][ T38] mutex_lock_nested+0x168/0x1d0 [ 1615.388798][ T38] write_threads+0x3b4/0x610 [ 1615.388824][ T38] ? __pfx_write_threads+0x10/0x10 [ 1615.388863][ T38] ? __pfx_write_threads+0x10/0x10 [ 1615.388896][ T38] nfsctl_transaction_write+0x112/0x160 [ 1615.388921][ T38] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 1615.388945][ T38] vfs_write+0x29f/0xbb0 [ 1615.388980][ T38] ? __pfx_vfs_write+0x10/0x10 [ 1615.389009][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1615.389035][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1615.389058][ T38] ? mutex_lock_nested+0x152/0x1d0 [ 1615.389085][ T38] ? fdget_pos+0x252/0x320 [ 1615.389122][ T38] ksys_write+0x156/0x270 [ 1615.389150][ T38] ? __pfx_ksys_write+0x10/0x10 [ 1615.389187][ T38] do_syscall_64+0x166/0x520 [ 1615.389210][ T38] ? trace_irq_disable+0x3b/0x140 [ 1615.389236][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1615.389262][ T38] ? clear_bhb_loop+0x70/0xc0 [ 1615.389287][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1615.389308][ T38] RIP: 0033:0x7facb69ae199 [ 1615.389327][ T38] RSP: 002b:00007facb4be5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1615.389348][ T38] RAX: ffffffffffffffda RBX: 00007facb6c36090 RCX: 00007facb69ae199 [ 1615.389364][ T38] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004 [ 1615.389378][ T38] RBP: 00007facb6a458e0 R08: 0000000000000000 R09: 0000000000000000 [ 1615.389392][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1615.389405][ T38] R13: 00007facb6c36128 R14: 00007facb6c36090 R15: 00007ffef1acf748 [ 1615.389439][ T38] [ 1615.389509][ T38] [ 1615.389509][ T38] Showing all locks held in the system: [ 1615.389542][ T38] locks held by kworker/u8:1/13: 3, on CPU#0: [ 1615.389559][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1615.389619][ T38] #1: ffffc90000127c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1615.389675][ T38] #2: ffffffff8f5d59b8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1615.389841][ T38] locks held by khungtaskd/38: 1, last CPU#1: [ 1615.389857][ T38] #0: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1615.389909][ T38] locks held by kworker/u8:3/57: 3, on CPU#1: [ 1615.389924][ T38] #0: ffff88803300d938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1615.389978][ T38] #1: ffffc9000123fc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1615.390034][ T38] #2: ffffffff8f5d59b8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x123/0x16e0 [ 1615.390131][ T38] locks held by kworker/u9:0/60: 2, on CPU#1: [ 1615.390146][ T38] #0: ffff888027132138 ((wq_completion)nbd1-recv){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1615.390202][ T38] #1: ffffc9000126fc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1615.390275][ T38] locks held by kworker/u9:1/4897: 2, on CPU#0: [ 1615.390290][ T38] #0: ffff8880271d8138 ((wq_completion)nbd2-recv){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1615.390345][ T38] #1: ffffc900109bfc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1615.390402][ T38] locks held by getty/5336: 2, on CPU#0: [ 1615.390416][ T38] #0: ffff8880331e20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1615.390502][ T38] #1: ffffc900044c32e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 1615.390563][ T38] locks held by kworker/1:7/5889: 5, last CPU#1: [ 1615.390577][ T38] #0: ffff88813ff26938 ((wq_completion)events_freezable){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1615.390631][ T38] #1: ffffc900058b7c40 ((work_completion)(&hcd->wakeup_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1615.390686][ T38] #2: ffff88802a5ee210 (&dev->mutex){....}-{4:4}, at: usb_remote_wakeup+0x23/0x120 [ 1615.390778][ T38] #3: ffff88802a5f3088 (&hub->status_mutex){+.+.}-{4:4}, at: hub_ext_port_status+0x52/0x840 [ 1615.390833][ T38] #4: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1615.390886][ T38] locks held by kworker/0:2/14595: 1, last CPU#0: [ 1615.390901][ T38] #0: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: process_scheduled_works+0x97a/0x1630 [ 1615.390956][ T38] locks held by kworker/u9:2/19449: 2, on CPU#1: [ 1615.390971][ T38] #0: ffff8880272f2138 ((wq_completion)nbd5-recv){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1615.391026][ T38] #1: ffffc90006897c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1615.391081][ T38] locks held by kworker/u9:3/19467: 2, on CPU#1: [ 1615.391095][ T38] #0: ffff8880271de138 ((wq_completion)nbd3-recv){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1615.391149][ T38] #1: ffffc90006a47c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1615.391205][ T38] locks held by kworker/u9:4/22355: 2, on CPU#1: [ 1615.391218][ T38] #0: ffff888027264138 ((wq_completion)nbd4-recv){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1615.391265][ T38] #1: ffffc9000d41fc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1615.391314][ T38] locks held by kworker/u9:5/22383: 2, on CPU#1: [ 1615.391329][ T38] #0: ffff8880273d8138 ((wq_completion)nbd6-recv){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1615.391381][ T38] #1: ffffc9000bb2fc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1615.391436][ T38] locks held by kworker/u9:6/22448: 2, on CPU#1: [ 1615.391451][ T38] #0: ffff8880273de138 ((wq_completion)nbd7-recv){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1615.391502][ T38] #1: ffffc90007637c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1615.391551][ T38] locks held by kworker/u9:7/22475: 2, on CPU#0: [ 1615.391565][ T38] #0: ffff888027614138 ((wq_completion)nbd12-recv){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1615.391636][ T38] #1: ffffc90006defc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1615.391686][ T38] locks held by kworker/u9:8/22477: 2, on CPU#1: [ 1615.391699][ T38] #0: ffff88802775a138 ((wq_completion)nbd13-recv){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1615.391750][ T38] #1: ffffc900092cfc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1615.391805][ T38] locks held by kworker/u9:9/23939: 2, on CPU#1: [ 1615.391819][ T38] #0: ffff888027788138 ((wq_completion)nbd14-recv){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1615.391871][ T38] #1: ffffc90006c3fc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1615.391924][ T38] locks held by kworker/u9:10/24412: 2, on CPU#0: [ 1615.391938][ T38] #0: ffff888063182138 ((wq_completion)nbd16-recv){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1615.391989][ T38] #1: ffffc900068ffc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1615.392036][ T38] locks held by kworker/u9:11/24476: 2, on CPU#0: [ 1615.392050][ T38] #0: ffff88802778e138 ((wq_completion)nbd15-recv){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1615.392101][ T38] #1: ffffc900053cfc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1615.392282][ T38] locks held by kworker/u9:12/24518: 2, on CPU#0: [ 1615.392298][ T38] #0: ffff888081241938 ((wq_completion)nbd17-recv){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1615.392354][ T38] #1: ffffc9000646fc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1615.392407][ T38] locks held by kworker/u9:13/24816: 2, on CPU#1: [ 1615.392420][ T38] #0: ffff88803c2ec938 ((wq_completion)nbd18-recv){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1615.392468][ T38] #1: ffffc900062f7c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1615.392517][ T38] locks held by kworker/u9:15/26120: 2, on CPU#0: [ 1615.392530][ T38] #0: ffff8880217f2938 ((wq_completion)nbd19-recv){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1615.392580][ T38] #1: ffffc90005f0fc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1615.392629][ T38] locks held by kworker/u9:16/26305: 2, on CPU#1: [ 1615.392643][ T38] #0: ffff88803b027938 ((wq_completion)nbd20-recv){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1615.392693][ T38] #1: ffffc90005897c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1615.392742][ T38] locks held by kworker/u9:17/26590: 2, on CPU#0: [ 1615.392754][ T38] #0: ffff888064c2f938 ((wq_completion)nbd21-recv){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1615.392803][ T38] #1: ffffc9000643fc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1615.392856][ T38] locks held by syz.3.6923/27372: 3, on CPU#1: [ 1615.392871][ T38] #0: ffff88803e0aa928 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1615.392946][ T38] #1: ffff888059732510 (sb_writers#21){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1615.393001][ T38] #2: ffffffff8e4f87b8 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 1615.393052][ T38] locks held by syz.3.6923/27375: 3, on CPU#1: [ 1615.393067][ T38] #0: ffff888035534928 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1615.393125][ T38] #1: ffff888059732510 (sb_writers#21){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1615.393181][ T38] #2: ffffffff8e4f87b8 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b4/0x610 [ 1615.393236][ T38] locks held by kworker/0:5/27998: 3, last CPU#0: [ 1615.393251][ T38] #0: ffff88813ff26538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1615.393305][ T38] #1: ffffc9000687fc40 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1615.393359][ T38] #2: ffffffff8ed10338 ("ratelimiter_table_lock"){+.+.}-{3:3}, at: rt_spin_lock+0x1e2/0x400 [ 1615.393417][ T38] locks held by syz.5.7473/29461: 2, on CPU#1: [ 1615.393432][ T38] #0: ffffffff8f5d59b8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 1615.393552][ T38] #1: ffff8880625b30d8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_netdev_event+0xad/0x160 [ 1615.393637][ T38] locks held by syz.5.7473/29462: 1, on CPU#1: [ 1615.393652][ T38] #0: ffff8880625b30d8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_valid_genid+0x3e/0x100 [ 1615.393732][ T38] locks held by syz.7.7478/29486: 3, last CPU#1: [ 1615.393748][ T38] #0: ffff88802a2d4eb8 (&dev->mutex){....}-{4:4}, at: __driver_attach+0x32e/0x600 [ 1615.393827][ T38] #1: ffff88802af72690 (&udc->connect_lock){+.+.}-{4:4}, at: gadget_bind_driver+0x2fd/0x9e0 [ 1615.393940][ T38] #2: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1615.393996][ T38] locks held by syz.2.7481/29485: 1, on CPU#1: [ 1615.394010][ T38] #0: ffffffff8f5d59b8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 1615.394065][ T38] locks held by syz.6.7480/29484: 2, last CPU#0: [ 1615.394080][ T38] #0: ffff8880327dd308 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 1615.394144][ T38] #1: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 1615.394198][ T38] [ 1615.394204][ T38] ============================================= [ 1615.394204][ T38] [ 1615.394215][ T38] NMI backtrace for cpu 1 [ 1615.394232][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1615.394259][ T38] Tainted: [L]=SOFTLOCKUP [ 1615.394267][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1615.394279][ T38] Call Trace: [ 1615.394288][ T38] [ 1615.394297][ T38] dump_stack_lvl+0xe8/0x150 [ 1615.394326][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 1615.394355][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1615.394378][ T38] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1615.394409][ T38] sys_info+0x135/0x170 [ 1615.394465][ T38] watchdog+0xfd7/0x1030 [ 1615.394497][ T38] ? watchdog+0x1c7/0x1030 [ 1615.394526][ T38] kthread+0x38b/0x470 [ 1615.394545][ T38] ? __pfx_watchdog+0x10/0x10 [ 1615.394566][ T38] ? __pfx_kthread+0x10/0x10 [ 1615.394587][ T38] ret_from_fork+0x514/0xb70 [ 1615.394609][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1615.394628][ T38] ? __switch_to+0xc89/0x1420 [ 1615.394656][ T38] ? __pfx_kthread+0x10/0x10 [ 1615.394677][ T38] ret_from_fork_asm+0x1a/0x30 [ 1615.394709][ T38] [ 1615.394717][ T38] Sending NMI from CPU 1 to CPUs 0: [ 1615.394750][ C0] NMI backtrace for cpu 0 [ 1615.394766][ C0] CPU: 0 UID: 0 PID: 4930 Comm: syslogd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1615.394791][ C0] Tainted: [L]=SOFTLOCKUP [ 1615.394798][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1615.394808][ C0] RIP: 0033:0x7f8d0e8db420 [ 1615.394825][ C0] Code: 4c 89 f7 e8 02 8d fc ff 4c 89 f7 48 8d 70 01 e8 c6 cc 0a 00 44 8b 4c 24 04 89 44 24 78 e9 2d e9 ff ff 48 8d bc 24 80 00 00 00 <44> 89 4c 24 0c e8 06 c3 ff ff 41 89 c6 83 f8 ff 0f 84 af 01 00 00 [ 1615.394840][ C0] RSP: 002b:00007fff8edd2f20 EFLAGS: 00000293 [ 1615.394855][ C0] RAX: 0000000000000006 RBX: 00007fff8edd3420 RCX: 00007f8d0e8d980d [ 1615.394868][ C0] RDX: 0000000000000001 RSI: 00007f8d0eafd0f2 RDI: 00007fff8edd2fa0 [ 1615.394881][ C0] RBP: 0000000000000000 R08: 0000000000000036 R09: 0000000000000000 [ 1615.394892][ C0] R10: 0000000000000000 R11: 00007f8d0eafd0f4 R12: 0000000000000000 [ 1615.394903][ C0] R13: 00007fff8edd3468 R14: 0000000000000000 R15: 0000000000000000 [ 1615.394915][ C0] FS: 00007f8d0e7b3c80 GS: 0000000000000000 [ 1615.395758][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1616.802165][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1616.813366][ T38] Tainted: [L]=SOFTLOCKUP [ 1616.817677][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1616.827717][ T38] Call Trace: [ 1616.830986][ T38] [ 1616.833907][ T38] vpanic+0x56d/0xa60 [ 1616.837898][ T38] ? __pfx_vpanic+0x10/0x10 [ 1616.842392][ T38] ? console_srcu_read_unlock+0x3a/0x60 [ 1616.847962][ T38] panic+0xc5/0xd0 [ 1616.851690][ T38] ? __pfx_panic+0x10/0x10 [ 1616.856106][ T38] ? wq_watchdog_touch+0xf9/0x160 [ 1616.861145][ T38] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 1616.867320][ T38] watchdog+0x1030/0x1030 [ 1616.871674][ T38] ? watchdog+0x1c7/0x1030 [ 1616.876093][ T38] kthread+0x38b/0x470 [ 1616.880160][ T38] ? __pfx_watchdog+0x10/0x10 [ 1616.884839][ T38] ? __pfx_kthread+0x10/0x10 [ 1616.889419][ T38] ret_from_fork+0x514/0xb70 [ 1616.894002][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1616.899101][ T38] ? __switch_to+0xc89/0x1420 [ 1616.903774][ T38] ? __pfx_kthread+0x10/0x10 [ 1616.908440][ T38] ret_from_fork_asm+0x1a/0x30 [ 1616.913234][ T38] [ 1616.916516][ T38] Kernel Offset: disabled [ 1616.920846][ T38] Rebooting in 86400 seconds..