last executing test programs: 22.529405186s ago: executing program 0 (id=603): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) ppoll(&(0x7f0000000240)=[{r0, 0x4040}], 0x1, &(0x7f00000002c0)={r1, r2+10000000}, &(0x7f0000000300)={[0xc0]}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./sec\x00', &(0x7f00000003c0)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sec/tomoyo/query\x00', 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000540)={{0x1, 0x1, 0x18}, './file0\x00'}) r4 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r4, 0x107, 0xb, &(0x7f0000000580), &(0x7f00000005c0)=0x4) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mount$9p_fd(0x0, &(0x7f0000000480)='.\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f0000000040)={0x2, 0x1, 0x7}) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_GUEST_MEMFD(r6, 0xc040aed4, &(0x7f0000000080)={0x100000, 0x2}) ioctl$KVM_SET_USER_MEMORY_REGION2(r6, 0x40a0ae49, &(0x7f00000000c0)={0x0, 0x4, 0x10000, 0x1000, &(0x7f0000100000/0x1000)=nil, 0x0, r7}) ioctl$KVM_SET_USER_MEMORY_REGION2(r6, 0x40a0ae49, &(0x7f0000000180)={0x1, 0x4, 0x0, 0x1000, &(0x7f0000100000/0x1000)=nil, 0x1000, r7}) 22.301129014s ago: executing program 0 (id=607): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(0xffffffffffffffff, 0xc0106441, &(0x7f0000000040)={0x0, 0x0, 0x80}) ioctl$DRM_IOCTL_PANTHOR_VM_GET_STATE(r2, 0xc0086444, &(0x7f0000000080)={r3}) r4 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r5 = openat$kvm(0x0, &(0x7f0000000200), 0x20022, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_X86_SET_MSR_FILTER(r6, 0x4188aec6, &(0x7f0000000480)={0x1, [{0x1, 0x8, 0x109, &(0x7f0000000640)='z'}, {0x2, 0x0, 0x2, 0x0}, {0x2, 0x0, 0x7ff, 0x0}, {0x1, 0x0, 0x912b, 0x0}, {0x1, 0x0, 0x3cb3, 0x0}, {0x2, 0x0, 0x3fa, 0x0}, {0x1, 0x0, 0x4, 0x0}, {0x0, 0x0, 0xfffffffe, 0x0}, {0x2, 0x0, 0xb, 0x0}, {0x0, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x0, 0x0, 0xa, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x7fffffff, 0x0}, {0x3, 0x0, 0x2, 0x0}, {0x1, 0x0, 0x8002, 0x0}]}) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r6, 0x4068aea3, &(0x7f0000000680)={0xbc, 0x0, 0x5}) r7 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000700)={0x0, &(0x7f0000000740)=[@enable_nested={0x12c, 0x18}], 0x18}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) connect$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f0000000180)={r10, 0x2, 0xb9c, 0x4}, &(0x7f00000001c0)=0x10) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000380)={r1, r1, 0x7, 0x0, 0x0, 0xe, 0xff, 0x8, 0x9, 0x3, 0x2, 0x2, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000440)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 21.556329474s ago: executing program 0 (id=611): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000000c0)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="201019"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000002480)={0x14, &(0x7f0000000180)={0x20, 0xa, 0x97, {0x97, 0xa, "1b362e0c661e4009ac9071493301453086e6dd5f26f161041c22372ee5651d31428972bcdd04067781f3671f918991ac6ea438c90869f4a836f45c4127c2f8a7b9b91654c86ff70c0855ec2ce7f638449ff588804eed90a2001ca767cbe1dad5ab7aef6c5f42174cac24d62d97627c61f890e15137551c95f258bb51ca33e1dae61549522567b5ae4b8d5473edd8ee93c3c60bc616"}}, &(0x7f0000002380)={0x0, 0x3, 0x7d, @string={0x7d, 0x3, "9c0a7bde2e2dd5f83e4632fdb47da8cfdd3ecb70c3e0642e10fc341a970afc6288b4b79f2706c44ce53f9cc801a05334f9c691a1ce8b190a15a731dfe19951937344076912be137f5ac2324946fccea341f927e37681e04337531df4c6017967b8db290c46a2eda5653458e2a0ce9fabf9e77100b4ba4d1d2fb236"}}}, &(0x7f0000002740)={0x44, &(0x7f00000024c0)={0x20, 0xf, 0x5b, "6a9c347b94f3c6c063b4b1f712168b59c88b4030cffbff7a8f6a90509d6098484d3b8f87b6da96d25da746753e0bcc4a9f0e9c2c3f8a5eacdfc090bf6d2b6354c55e21e9de8b2c709c1e3f463033a169ef74357ae3713e98a30fe6"}, &(0x7f0000002580)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000025c0)={0x0, 0x8, 0x1, 0xa7}, &(0x7f0000002600)={0x20, 0x81, 0x3, "563e06"}, &(0x7f0000002640)={0x20, 0x82, 0x2, "cb6c"}, &(0x7f0000000240)={0x20, 0x83, 0x3, "22eee5"}, &(0x7f00000026c0)=ANY=[@ANYRES8=r0], &(0x7f0000002700)={0x20, 0x85, 0x3, "15f475"}}) 17.862505962s ago: executing program 0 (id=631): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat$comedi(0xffffff9c, &(0x7f0000000640)='/dev/comedi4\x00', 0x22380, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, 0x0) request_key(&(0x7f0000000500)='rxrpc_s\x00', &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)='@\'%}-\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='p:p1 ./file0:0', 0xe) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) open_by_handle_at(r2, &(0x7f0000000240)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0x8, 0xa, 0xfffd, 0x10000}, 0xcf, 0x7}}, 0x12201) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x18, 0x43, 0x107, 0xfffffffd, 0x25dfdbfc, {0x1, 0x7c}, [@nested={0x4, 0x145}]}, 0xb0}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7a897b60", @ANYRES16=r3, @ANYBLOB="010026bd7000ffdbdf256a00000008000300", @ANYRES32=r5, @ANYBLOB="0500d200020000000a000600ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x4000081}, 0x40040) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0xffffffffbeae3146, 0x1800005, 0x81, 0x1, 0xfff8, 0x7fff, 0x7, 0x40000000009, 0x4bfb, 0x2, 0x10, 0xa8000000000004, 0x401, 0x2, 0x3570e1cc, 0x52e], 0x0, 0x28657}) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) readv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r6, 0x2, &(0x7f0000000500)) ptrace$cont(0x21, r6, 0x5, 0x4) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x200, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0xd5) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x8c02, 0x111) ioctl$IOC_PR_CLEAR(r8, 0x401070cd, 0x0) 17.641147822s ago: executing program 0 (id=634): ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, 0x0) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, 0x0) pipe2$watch_queue(0x0, 0x80) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x12, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8041) socket$kcm(0x10, 0x2, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'syzkaller1\x00', 0x5001}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000540)={'syzkaller1\x00', 0x1}) write$tun(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="010307003000140006006d831a4f00140600fe880000000000000000000000000001ff0200000000000000000000000000014e204e21", @ANYRES32=0x41424344, @ANYBLOB='~Y'], 0x46) 16.726443217s ago: executing program 0 (id=639): mkdir(&(0x7f00000002c0)='./proc\x00', 0x39) lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./proc/net/rpc/auth.rpcsec.context/channel\x00', &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0xffffffffffffffc9, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x19}, 0x5}, @in={0x2, 0x4e22, @rand_addr=0x64010101}, @in6={0xa, 0x4e22, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0xa}, @in6={0xa, 0x4e21, 0x76, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}]}, &(0x7f0000000180)=0x10) mount(0x0, &(0x7f00000004c0)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x8) write(r1, &(0x7f0000000580)='\\x01020304 2000000000 0 0 0 krb5 \\x00000000ffffff7f00', 0x35) 16.625764336s ago: executing program 32 (id=639): mkdir(&(0x7f00000002c0)='./proc\x00', 0x39) lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./proc/net/rpc/auth.rpcsec.context/channel\x00', &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0xffffffffffffffc9, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x19}, 0x5}, @in={0x2, 0x4e22, @rand_addr=0x64010101}, @in6={0xa, 0x4e22, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0xa}, @in6={0xa, 0x4e21, 0x76, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}]}, &(0x7f0000000180)=0x10) mount(0x0, &(0x7f00000004c0)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x8) write(r1, &(0x7f0000000580)='\\x01020304 2000000000 0 0 0 krb5 \\x00000000ffffff7f00', 0x35) 8.91371682s ago: executing program 1 (id=667): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000040)={0x4, 0x4}) (fail_nth: 3) 8.546639872s ago: executing program 1 (id=668): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 8.443126128s ago: executing program 1 (id=669): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_connect(0x0, 0x39, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.374161613s ago: executing program 3 (id=673): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000000c0)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000001c0)={0x44, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) socket(0x5, 0x1, 0xff) fadvise64(0xffffffffffffffff, 0x18, 0xc3, 0x1) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_clone3(&(0x7f0000000880)={0x23800000, &(0x7f0000000d80)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000dc0)=0x0) io_submit(r2, 0x1, &(0x7f0000000e00)=[&(0x7f0000000e40)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0, 0x300}]) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000500)={0x14, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)={0x0, 0x3, 0xc6, @string={0xc6, 0x3, "380582c2d44a037119e95203c500146567d80273adb9789958988b371abf1e5488308d3fcf1b1abdaf1674c321a4ac45b8cc9e7536f3ad0d856335f3b153f35572ba80c810716549c31b17e08bcf68712d2aaa60f461cd5315c3fe2984a8ac9d15a249883ed6f2ba8cc7f36b8072d3c232a15ff174259a84ef63f92719903849777af6e4294429d442505e3698b2c7211c735078fc3623e8ee27817dc3aa15ad37040f31dfe2e85301c79c0c1f52d4ef492aa298a87cff3bd1ab4a5c11039e0def213372"}}}, &(0x7f0000000740)={0x34, &(0x7f0000001040)=ANY=[@ANYBLOB="200f88000000380fb13b5ce291c30b496dcc2c6bc6eb0e3e1c7e469c87464c3ce030eab80c3180ac348fc67027f451b3975342fabfddb131f87ec01f510195adef996bba3f20fb949d54cf516e725ef002254d0046f9a95fd85cb4f9c8ce59eed4126812a783f2a498ee0a0ac73e298c6436147313a93bbeb53a7976d34f58ad7d423d5c184ba5eb9b754e0bcb3f1e1c2b09d94d1eb5b01f3a2aeb84b2edb9b3d063ef0ca9a572f9c65be1c75cf9609eece52da50b4581ac134bf93bdee2bd530bf377f89bfa55a85b1e02e30df0a9c27e21a9acedf38fcc3e0042d4eff620bd48241fc0de686c75322760034e9aa8cd57a7d6871fa8497b7c9fd3c125dfee3bfd9a47c6f1e7f1bfc3a448e44e41f7357e1ff1b0f57a80d62be260dca7839f9d"], &(0x7f0000000600)={0x0, 0xa, 0x1, 0xc4}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000680)={0xc0, 0xa1, 0x4, 0xd71c}, &(0x7f00000006c0)={0x40, 0xa0, 0x4, 0x101}, &(0x7f0000000700)={0xc0, 0xa2, 0x2f, "bffede93d3982276756897b09757ca34c3c702b86ee953e854a027681043ea31fd84647edf84dc7a89393227067938"}}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000300)=ANY=[@ANYBLOB="6005060000002328"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.142526626s ago: executing program 1 (id=681): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000001a80)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000002c0)="ebe3a0e9796cfd1647e299f4e376fdba128a80b372219d205e81f4a7fe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587304800"/77, 0x4d}, {&(0x7f0000002640)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000002740)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f0000001900)=[{&(0x7f00000016c0)="909dc1c3675eb8723b6ee9e156b29fc6a367df20c38952998c96773f6855d456eaade580f190ccd14cc073", 0x2b}, {&(0x7f0000001700)="8b46d247c33cdfb412caf14bf7fa8ab46a4fb7d3106ac7e5", 0x18}, {&(0x7f0000001740)="a64d68f1f40aa88bcb1baf793401dcb6a92c7366dba6ad65fd1ae778afcc295091b6d37f0f20a7f95fa21f8191741067fd072ea8086e664f63ddaf4e85d26fcdc40779368a181fc5362fb32ffc8eaee8407e5be330b4b8c09ab60395c8344f94524047f1af26861b5c8aea", 0x6b}, {&(0x7f00000017c0)="a834a2f966bb056d7c4fafe3d3816be86d5269bdafbb5f155b19ae7adde6d4b0bdbb27ea979f787ed07e99bd281117d34c20d9b40cb3ef2a37952e415e6c40f41550f6af6c8688ffc551cc3dce5556e48d26117989403064ebaa7060dd754152a04e0fcb75c7a05ddd31bc61c3fcde9ef36e1ded6c97da21549ae3f86f2fb66ff05ff0ec4d50d60d66dc31979dba", 0x8e}, {&(0x7f0000001880)="6d7bbc790240b441bba9be", 0xb}, {&(0x7f00000018c0)="3da6a84ccd3c8245db15e800bbe07f2f491b92f6a8f1132a6ef8842605", 0x1d}], 0x6, &(0x7f0000001980)=[@iv={0xc8, 0x117, 0x2, 0xaf, "8582c4726ce8aabc28b2027b2273132788a86ed96469477554a99366ca592173dc4d85e73eb2dc8dac1de57fc69aa554a6ea86af73faeb957c912c3c34da91eb02b469ef54c7efcc2794d2c07dcd1714c3d02fe7d71c9721693e5642aa365c35b019b79447fd816ad19a7be917efb1e551e9d4d3a869b8b6d0ab1dbb56fe5638da7cc93a0748a30c3dcc7b01a1def00fe3027ede27d6462a2e4ef2c057690ab8c33451572c6fca02755c1519ede75f"}], 0xc8, 0x845}], 0x2, 0x40800) recvmsg(r1, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000005a80)=[{&(0x7f0000000040)=""/60, 0x3c}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x2}, 0x20) 5.084202428s ago: executing program 1 (id=682): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/ptp/ptp0/n_vclocks\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x0, 0x8, 0x5, 0x33e, 0x7, 0x7c9}}, 0x118) syz_usb_connect(0x2, 0x4e, &(0x7f0000000300)=ANY=[@ANYBLOB="12010002ff000040cd06310100010102030109023c00010100a0320904000006ff000000070501024000000705020240000007050402400000070506024000000705810340000107058802"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) 5.033651905s ago: executing program 2 (id=683): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/serio/devices/serio1/drvctl\x00', 0x1, 0x8) write(r0, &(0x7f0000000140)='r', 0x1) ioctl$TIOCCONS(r0, 0x541d) prctl$PR_SCHED_CORE(0x29, 0x1, 0x0, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2840, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r3, 0x1, 0x2f, &(0x7f0000000080)=0x8, 0x5f) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_GET_SREGS2(r0, 0x8140aecc, &(0x7f00000003c0)) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6ead"], 0x0) syz_usb_ep_write(r5, 0x8d, 0xc3, &(0x7f0000000ec0)="fec0d853c36e19054ad26eb286fdf7b3b45c98319d9bc0881eb4c87d843e42d86fe3dea682cc42ef582f9ac6a54e007eb7d567e1143c54daf41196871fd4d016a53e15ab2904f6dc40941f41540b10e3f2663377ebd7a2175d94826950912c883cabc14699f054b8fd9cb43a40924e83f4e43ca7b45ab82f5f6aa1aa26ae8c0e50e93f7e3f102d926dfd3cf307ca8018658b90ada2b616efbb39ca56be6f0f9b3cd0fa89d475432b5e5c0c70210dff08b961cf2d5f2789792dff473fe61e4026af5a54") 4.25132645s ago: executing program 3 (id=688): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000000c0)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="201019"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000002480)={0x14, &(0x7f0000000180)={0x20, 0xa, 0x97, {0x97, 0xa, "1b362e0c661e4009ac9071493301453086e6dd5f26f161041c22372ee5651d31428972bcdd04067781f3671f918991ac6ea438c90869f4a836f45c4127c2f8a7b9b91654c86ff70c0855ec2ce7f638449ff588804eed90a2001ca767cbe1dad5ab7aef6c5f42174cac24d62d97627c61f890e15137551c95f258bb51ca33e1dae61549522567b5ae4b8d5473edd8ee93c3c60bc616"}}, &(0x7f0000002380)={0x0, 0x3, 0x7d, @string={0x7d, 0x3, "9c0a7bde2e2dd5f83e4632fdb47da8cfdd3ecb70c3e0642e10fc341a970afc6288b4b79f2706c44ce53f9cc801a05334f9c691a1ce8b190a15a731dfe19951937344076912be137f5ac2324946fccea341f927e37681e04337531df4c6017967b8db290c46a2eda5653458e2a0ce9fabf9e77100b4ba4d1d2fb236"}}}, &(0x7f0000002740)={0x44, &(0x7f00000024c0)={0x20, 0xf, 0xd, "6a9c347b94f3c6c063b4b1f712"}, &(0x7f0000002580)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000025c0)={0x0, 0x8, 0x1, 0xa7}, &(0x7f0000002600)={0x20, 0x81, 0x3, "563e06"}, &(0x7f0000002640)={0x20, 0x82, 0x2, "cb6c"}, &(0x7f0000000240)={0x20, 0x83, 0x3, "22eee5"}, &(0x7f00000026c0)=ANY=[@ANYRES8=r0], &(0x7f0000002700)={0x20, 0x85, 0x3, "15f475"}}) 3.379663645s ago: executing program 2 (id=690): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000001a80)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000002c0)="ebe3a0e9796cfd1647e299f4e376fdba128a80b372219d205e81f4a7fe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587304800"/77, 0x4d}, {&(0x7f0000002640)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000002740)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f0000001900)=[{&(0x7f00000016c0)="909dc1c3675eb8723b6ee9e156b29fc6a367df20c38952998c96773f6855d456eaade580f190ccd14cc073", 0x2b}, {&(0x7f0000001700)="8b46d247c33cdfb412caf14bf7fa8ab46a4fb7d3106ac7e5", 0x18}, {&(0x7f0000001740)="a64d68f1f40aa88bcb1baf793401dcb6a92c7366dba6ad65fd1ae778afcc295091b6d37f0f20a7f95fa21f8191741067fd072ea8086e664f63ddaf4e85d26fcdc40779368a181fc5362fb32ffc8eaee8407e5be330b4b8c09ab60395c8344f94524047f1af26861b5c8aea", 0x6b}, {&(0x7f00000017c0)="a834a2f966bb056d7c4fafe3d3816be86d5269bdafbb5f155b19ae7adde6d4b0bdbb27ea979f787ed07e99bd281117d34c20d9b40cb3ef2a37952e415e6c40f41550f6af6c8688ffc551cc3dce5556e48d26117989403064ebaa7060dd754152a04e0fcb75c7a05ddd31bc61c3fcde9ef36e1ded6c97da21549ae3f86f2fb66ff05ff0ec4d50d60d66dc31979dba", 0x8e}, {&(0x7f0000001880)="6d7bbc790240b441bba9be", 0xb}, {&(0x7f00000018c0)="3da6a84ccd3c8245db15e800bbe07f2f491b92f6a8f1132a6ef8842605", 0x1d}], 0x6, &(0x7f0000001980)=[@iv={0xc8, 0x117, 0x2, 0xaf, "8582c4726ce8aabc28b2027b2273132788a86ed96469477554a99366ca592173dc4d85e73eb2dc8dac1de57fc69aa554a6ea86af73faeb957c912c3c34da91eb02b469ef54c7efcc2794d2c07dcd1714c3d02fe7d71c9721693e5642aa365c35b019b79447fd816ad19a7be917efb1e551e9d4d3a869b8b6d0ab1dbb56fe5638da7cc93a0748a30c3dcc7b01a1def00fe3027ede27d6462a2e4ef2c057690ab8c33451572c6fca02755c1519ede75f"}], 0xc8, 0x845}], 0x2, 0x40800) recvmsg(r1, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000005a80)=[{&(0x7f0000000040)=""/60, 0x3c}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x2}, 0x20) 3.343271513s ago: executing program 2 (id=691): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./trace\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r0) syz_usb_connect(0x0, 0x2f, &(0x7f0000000340)=ANY=[@ANYBLOB="12010102b4e98a401320480204eed500030109021d00020407180709047603004354a207090468"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) r1 = epoll_create1(0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000680)={&(0x7f00000006c0)=@id, 0x10, 0x0}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000700)={0xe0000014}) r3 = syz_pidfd_open(0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000400)={0x0, 0x1, 0x7, 0x9}) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x800) mknodat$null(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x0, 0x103) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800), 0x10001, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0]) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./trace/trace\x00', 0x0, 0x42) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240), 0x106, 0x1}}, 0x20) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000900)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000940)='bridge0\x00', 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000980)="846bb66f", 0x4, 0xc, 0x0, 0x0) readv(r5, &(0x7f00000055c0)=[{&(0x7f00000009c0)=""/122, 0x7a}], 0x1) semget(0x0, 0x4, 0x80) 2.126632741s ago: executing program 2 (id=692): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') writev(r0, &(0x7f0000002a00)=[{&(0x7f0000002a40)='2', 0x300}], 0x1) (async) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x79}) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async, rerun: 32) ioctl$UFFDIO_MOVE(r1, 0xc028aa05, &(0x7f0000000300)={&(0x7f00003e3000/0x1000)=nil, &(0x7f0000c76000/0x1000)=nil, 0x1000}) (rerun: 32) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000000)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xf5, "97834ac037559822bb5147a0dbe3e19599605340283d07842616e7ea10b641f88cc2f97d5096741cb35ee53e06139f372b18c51f89a1ef98c02eea9ce15bbb", 0x31}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000380)="7d11d09bc2dd1c085ba654e6f157fde664607eef3fb43a852608f651bb7e977aac8c0fd1a8fbbfa3c7f8e2fbf8854b86acb3cd4a5f8c5db0e37c0a66ccd54d2fe5aa2bc1f6727dc8135c849a77d9140d492e49303750ec5d3af152660902393b40e189e817d8f4a1d861e0dbcbcc02edd90963d22ec36478a7ec5f5e81ce399b82bebcc21a09f99790fba483d3671c38329f0fa7541c388b2fc16a96657d5a834b2899ff061864748dfcad5c56a9dc6b9369e692b462234397645c0127ff3bf1e30d8060db7db18c6c8a459431cdbf529202e46436644f638bb3be8d78b432667936988ee0f07fa582ead4e63ec3e14b73da160c7a", 0xf5}, {&(0x7f0000000340)="15db2485c924bf1bc19cc4d2453bf2f5213e66a7bf5cceab56f2400912", 0x1d}], 0x2}, 0xf0418222f4766223) 2.034353781s ago: executing program 2 (id=694): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa2f01, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) syz_usb_connect$uac2(0x3, 0x8b, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000300000020532b2300400001020301090279000301fb4004080b02010103200109040000000101200009240108000c1900e508240a00040b060308240a0901030602090401000001022000090401010101022000090501090002080706082501800f070000090402000001022000090402010101022000090582"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) connect$pppoe(r1, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'ip6_vti0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000200)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl(r2, 0x40047438, &(0x7f0000000280)) ioctl$PPPIOCCONNECT(r2, 0x4004743a, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000180)=0xb8) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000003c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000400)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x628e01, 0x0) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000480)="2e9b7d0007e03dd65193dfb6c575963f86ddaf62a6de000000000368a60a0165d83d00009d90491ceaebfd26d4eef23248000000f8", 0x35}, {&(0x7f00000004c0)="73ec50044732", 0x6}, {&(0x7f0000000500)="1082fdf637f3139d7b39e2d1d9fe45b502541e36843b60d08736795646348926f76577897efa579600be14710e09b20333ca010000003ac211ed1a1d792c888776a57239dcbbbce68612181ca43e2e7f6fdab18ed465564a3b55ff9f3c22a973e066e08cd4778a1b6afb7b836511f3901e745abd613b6bca2e6a00"/135, 0x87}], 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', 0x1}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x40000) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a0000800180c2000002ffffffffffff86dd694fd2cd00483afffc000000000000000000000000000001ff0200000000000000000000000000010200907800000003632c7b82000a331000000000000000000000000000000001fc020000000000000000000000000000290100000000000007080000000102080500000000000000"], 0x82) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r6, 0x84, 0x7a, &(0x7f0000000740)={0x1}, &(0x7f0000000780)=0xc) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f00000007c0)={r8, 0x10}, 0x8) syz_open_dev$dvb_dvr(&(0x7f0000000380), 0x14, 0x2040c0) 1.975966886s ago: executing program 1 (id=696): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000000c0)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000001c0)={0x44, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) socket(0x5, 0x1, 0xff) fadvise64(0xffffffffffffffff, 0x18, 0xc3, 0x1) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_clone3(&(0x7f0000000880)={0x23800000, &(0x7f0000000d80)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000dc0)=0x0) io_submit(r2, 0x1, &(0x7f0000000e00)=[&(0x7f0000000e40)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0, 0x300}]) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000500)={0x14, &(0x7f0000000e80)=ANY=[@ANYBLOB="200daa000000aa049da5a290b7bb543ce8a0e4e0e83f5461b680c5da751f8a3d450ae1ca66463dac87326b4df6c43d542ad500083ea473569ef0cf36e12f3717cf7e27a6daff2656c71fd3b593ef85589b032c02d6c55b279628468090b316b352657f623b381963ba4c9888296770b5243728577bc25c71c2f179385825a9e3e20a9ecb58224caa8c9459d52a2a243889ce51fa220148c4e72ba5d55c0b78d4b88a5e3f83d018535f33072a45f1f04aa0916a56273be68bb9ee0568825fc745afad2e958838aa9b319551c84bc1ce611911bd1dc36c527546885e2f3f16885f8a658f3e9f3b4f1f3095a169773afd57eeee364aad7655c5f14083c7155490e08f141a71510a3535d241e11d86ac691aeba4ecca84b48bd8731eb8ac6f00352bf6d0817114dc5d79c54c339a9f78b3bddbd4a38eda9ac6e08cc62a266b9baad34c26eb6640b581dd74ba5fd7b02bbd032fbf307b214279becd3a7031623c6c0e22f57ea75276a6e93a4d8279994d7dfa3e0c93f5cbf13fa7d6abe70e333cff52836df14fd3290d"], &(0x7f0000000400)={0x0, 0x3, 0xc6, @string={0xc6, 0x3, "380582c2d44a037119e95203c500146567d80273adb9789958988b371abf1e5488308d3fcf1b1abdaf1674c321a4ac45b8cc9e7536f3ad0d856335f3b153f35572ba80c810716549c31b17e08bcf68712d2aaa60f461cd5315c3fe2984a8ac9d15a249883ed6f2ba8cc7f36b8072d3c232a15ff174259a84ef63f92719903849777af6e4294429d442505e3698b2c7211c735078fc3623e8ee27817dc3aa15ad37040f31dfe2e85301c79c0c1f52d4ef492aa298a87cff3bd1ab4a5c11039e0def213372"}}}, &(0x7f0000000740)={0x34, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000600)={0x0, 0xa, 0x1, 0xc4}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000680)={0xc0, 0xa1, 0x4, 0xd71c}, &(0x7f00000006c0)={0x40, 0xa0, 0x4, 0x101}, &(0x7f0000000700)={0xc0, 0xa2, 0x2f, "bffede93d3982276756897b09757ca34c3c702b86ee953e854a027681043ea31fd84647edf84dc7a89393227067938"}}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000300)=ANY=[@ANYBLOB="6005060000002328"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.917295159s ago: executing program 4 (id=697): r0 = socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./trace/trace\x00', 0x0, 0x42) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000380)=""/205, 0xcd}], 0x1, 0x802e, 0x79654e17) r2 = openat(r1, &(0x7f0000000140)='./dev/kmsg\x00', 0x4a81, 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000280)='<', 0x1}, {&(0x7f00000002c0)="bd", 0x1}], 0x2, 0x8, 0x3) setns(0xc9, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write(r3, &(0x7f0000000000)='2', 0x1) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000004c0)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/70, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000580)={0x1, 0x1, 0x0, &(0x7f00000005c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000640)={0x1, 0x0, [{0x54000, 0x8b, &(0x7f0000000680)=""/139}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000740)=0x1) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000780)=0x4000000) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r4, 0x4008af04, &(0x7f00000007c0)) bind$802154_raw(r3, &(0x7f0000000040)={0x24, @long={0x3, 0x1}}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x84, 0xa, 0x4078a0b, 0x11, @mcast2, @local, 0x80, 0x20, 0x0, 0x7fffffff}}) 1.770314672s ago: executing program 4 (id=698): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x20, 0x1405, 0x1, 0x70bd27, 0x25dfdbfb, "", [{{0x8}, {0x8, 0x3, 0x1000021}}]}, 0x20}}, 0x2) (fail_nth: 7) 1.452319773s ago: executing program 4 (id=699): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000001a80)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000002c0)="ebe3a0e9796cfd1647e299f4e376fdba128a80b372219d205e81f4a7fe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587304800"/77, 0x4d}, {&(0x7f0000002640)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000002740)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f0000001900)=[{&(0x7f00000016c0)="909dc1c3675eb8723b6ee9e156b29fc6a367df20c38952998c96773f6855d456eaade580f190ccd14cc073811ee5463236d9", 0x32}, {&(0x7f0000001700)="8b46d247c33cdfb412caf14bf7fa8ab46a4fb7d3106ac7e5", 0x18}, {&(0x7f0000001740)="a64d68f1f40aa88bcb1baf793401dcb6a92c7366dba6ad65fd1ae778afcc295091b6d37f0f20a7f95fa21f8191741067fd072ea8086e664f63ddaf4e85d26fcdc40779368a181fc5362fb32ffc8eaee8407e5be330b4b8c09ab60395c8344f94524047f1af26861b5c8aea", 0x6b}, {&(0x7f00000017c0)="a834a2f966bb056d7c4fafe3d3816be86d5269bdafbb5f155b19ae7adde6d4b0bdbb27ea979f787ed07e99bd281117d34c20d9b40cb3ef2a37952e415e6c40f41550f6af6c8688ffc551cc3dce5556e48d26117989403064ebaa7060dd754152a04e0fcb75c7a05ddd31bc61c3fcde9ef36e1ded6c97da21549ae3f86f2fb66ff05ff0ec4d50d60d66dc31979dba", 0x8e}, {&(0x7f0000001880)="6d7bbc790240b441bba9be", 0xb}, {&(0x7f00000018c0)="3da6a84ccd3c8245db15e800bbe07f2f491b92f6a8f1132a6ef8842605", 0x1d}], 0x6, &(0x7f0000001980)=[@iv={0xc8, 0x117, 0x2, 0xaf, "8582c4726ce8aabc28b2027b2273132788a86ed96469477554a99366ca592173dc4d85e73eb2dc8dac1de57fc69aa554a6ea86af73faeb957c912c3c34da91eb02b469ef54c7efcc2794d2c07dcd1714c3d02fe7d71c9721693e5642aa365c35b019b79447fd816ad19a7be917efb1e551e9d4d3a869b8b6d0ab1dbb56fe5638da7cc93a0748a30c3dcc7b01a1def00fe3027ede27d6462a2e4ef2c057690ab8c33451572c6fca02755c1519ede75f"}], 0xc8, 0x845}], 0x2, 0x40800) recvmsg(r1, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000005a80)=[{&(0x7f0000000040)=""/60, 0x3c}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x2}, 0x20) 1.404597368s ago: executing program 4 (id=700): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./trace\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r0) syz_usb_connect(0x0, 0x2f, &(0x7f0000000340)=ANY=[@ANYBLOB="12010102b4e98a401320480204eed500030109021d00020407180709047603004354a207090468"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) r1 = epoll_create1(0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000680)={&(0x7f00000006c0)=@id, 0x10, 0x0}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000700)={0xe0000014}) r3 = syz_pidfd_open(0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000400)={0x0, 0x1, 0x7, 0x9}) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x800) mknodat$null(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x0, 0x103) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800), 0x10001, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0]) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./trace/trace\x00', 0x0, 0x42) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240), 0x106, 0x1}}, 0x20) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000900)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000940)='bridge0\x00', 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000980)="846bb66f", 0x4, 0xc, 0x0, 0x0) readv(r5, &(0x7f00000055c0)=[{&(0x7f00000009c0)=""/122, 0x7a}], 0x1) semget(0x0, 0x4, 0x80) 690.093387ms ago: executing program 3 (id=701): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000380)={0x0, 0x400, 0x380, &(0x7f00000003c0)=[0x16, 0xfffffffffffffffd, 0x8, 0x6, 0x3e3c, 0xffff, 0x8d, 0x8001, 0x3f8000, 0x1, 0x80000001, 0x61f, 0x36, 0x1000, 0xffffffffffffffcf, 0xfb7f000000000000, 0x8, 0xffffffffffffffff, 0x0, 0x1, 0x8, 0x80000001, 0x9, 0x4, 0x1000, 0x3, 0x0, 0x0, 0x8, 0x29, 0x335, 0x409, 0x6, 0x3, 0x4c0, 0x0, 0xc, 0x400004a17b51d, 0x0, 0xd9d, 0x5, 0x5, 0xfffffffffffffffb, 0x7, 0xe244, 0x0, 0x0, 0x5, 0x4, 0x4, 0x0, 0x0, 0x401, 0x7, 0x3ff, 0x5, 0x5, 0xc, 0x2, 0x8, 0xbe1f938, 0x0, 0x200, 0x5, 0x10000003, 0x8, 0x8004, 0x5, 0x2, 0x3, 0x6, 0x8, 0x4, 0x24, 0x9, 0x7, 0x5, 0xd, 0xf, 0x4, 0x93a, 0xc4a, 0xed7a, 0x8, 0x3a, 0x200, 0x0, 0x8, 0x11, 0x8, 0x400, 0xa, 0x0, 0x4bb, 0x4, 0x8, 0x800, 0x3719, 0x401, 0x8, 0x0, 0x7, 0x2, 0x4f38, 0x9, 0xfffffffffffffffe, 0x0, 0x3, 0x887, 0x2, 0xe2a, 0x2, 0x9, 0x7fffffffffffffff, 0xfffffffffffffff2, 0x9, 0x0, 0x0, 0x3, 0xfffffffffffffff2, 0x2, 0x7, 0x101, 0x80, 0xfffffffffffffffa, 0x8, 0x6, 0x2]}) 410.544565ms ago: executing program 2 (id=702): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_connect(0x0, 0x39, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0}, &(0x7f0000000540)={0x44, 0x0, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000300)={0x20, 0x81, 0x2, "c8dc"}, &(0x7f0000000340)={0x20, 0x82, 0x1, '@'}, &(0x7f0000000400)={0x20, 0x83, 0x1, '|'}, &(0x7f0000000440)={0x20, 0x84, 0x1, "d9"}, &(0x7f0000000480)={0x20, 0x85, 0x3, "30aa98"}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 391.367952ms ago: executing program 3 (id=703): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) 359.730229ms ago: executing program 3 (id=704): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x82f41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000580)={'syzkaller1\x00', 0x1}) 242.414288ms ago: executing program 3 (id=705): mkdir(0x0, 0x8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000740), 0x10001, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000880)='.\x00', 0x0, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./file1\x00', 0x103a42, 0x32) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r1, 0x84, 0x7a, &(0x7f0000000000)={0x2, 0xffffffffffffffff, 0x80800}, &(0x7f0000000080)=0xc) ioctl$sock_SIOCDELDLCI(r3, 0x8981, &(0x7f00000000c0)={'bridge_slave_1\x00'}) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000100)={0x3, 0x1ff, 0x9, 0x1, 0x4, 0x6, 0x1ff, 0xaef, r2}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) fsopen(&(0x7f0000000900)='erofs\x00', 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x2, 0xb3, &(0x7f0000000980)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470881000200000001001b24", @ANYRES8=r4], &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0}) 85.293407ms ago: executing program 4 (id=706): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') close_range(r0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = timerfd_create(0x7, 0x0) syz_open_dev$audion(&(0x7f0000000280), 0x5, 0x200001) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x83) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="ab", 0x1}], 0x1, &(0x7f00000001c0)=[@rights={{0x18, 0x1, 0x1, [r4, r4]}}], 0x18}, 0x20040001) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001300010000000000ee1664c204e11b5ad6bc1de255dbdf251c0000000c0035"], 0x2c}], 0x1}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x11, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x54, r8, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x7530, @local}}, {0x14, 0x2, @in={0x2, 0x7530, @remote}}}}]}]}, 0x54}}, 0x0) 0s ago: executing program 4 (id=707): socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x81, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = epoll_create(0x80) sendmsg$nl_generic(r1, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x420000}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)={0x2a8, 0x12, 0x300, 0x70bd27, 0x25dfdbfc, {0x12}, [@nested={0x108, 0x105, 0x0, 0x1, [@generic="f42d70f7723a05d162baa9cf443e4b878a50bbf2a3a7880ee0bdc58bc4515b0a3b93b8cf7659a6e68667c7b1e5b1984e89aa8b77bd091410f84392e81e34dc9d1b68fce8d021178bba0124b9ab1be4fbc71edea5a2a09562255d155869bc2b480bed3868b14e998f539843b6c247774530f08ba6cf73a9196eab3d6ec24924443fc5d36c67f61b1066c05baab7b316831a4d810fd10408ad7d0d0015cdcb4377eb90ed639435496602", @generic="aaa2bcb8be234cc5cdf74426202a42e67df32cc39a185832fabb2252fbd2e669ef6abbe75ec3d9e6cf9f60da1d084478498e03d1aa04681c656e673a9a828a4e25f21da8ba01786a2afe296914ad8b658fad7e5a53162e82da512b"]}, @generic="cd16f759f0a132f575355a660e5d7296ab4999aeecb79d915e3fb9cbecf3dd9a4e1b32cffd99142b60dc4ab34b92af71ee54785649d507cc8ee46267713a2dda3c7c36ac01fd7269fa5e535c2a5184175fe866b74dbef88aecd3e076bd504b6d21560ddfd57017aa24f47c301f9f9a832c5fe2d2c86d1cf2459cd9c9e71ba5c664b6", @typed={0x4, 0x38}, @generic="2749d3d56d0f2b222d5b5f850d36336fb525669820fbd812857ae9038703d8fbabea0ec9186ac63e2ade27deebd7b0aa3f403ebf86fba1cb4e584603267d96c4fc3fedc9f792a46149f0dcc5bb42d96b931ad13a8c9e8e88aa03b476df8691a9cfdba134aa10208035f0c3bdb3a58fcab85e6cf1f18587c60a53f04aa18e832f9cfd30d36cf63d8f0380d63e26b92305a4dd11b8a22b22ea53a939f35e8ffa84d273ebbbb868d627323ddb6b90b2f875f253a01a8d79013595308a29e571641df96fac6ecbc00d06fa95c363e772b6733f629f12fbb49e3c4915", @generic="91a097a4e770500b7be3f7d0844b1b7ae98c5e3f2b260655941c5ccf39daa301d11bc2a2b1303b0ba6bf7b91"]}, 0x2a8}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000400)={0x5, 0x9, 0xdd90, 0x1, 0x7, "000000000000000000008000"}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)={0x40000004}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_COPY(r2, 0x3b83, &(0x7f0000000040)={0x28, 0x1, 0x0, 0x0, 0x6, 0x4, 0xffffffffffffffff}) ppoll(&(0x7f0000000240)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): file_ioctl+0x9/0x20 [ 151.923208][ T7183] ? __pfx_sock_ioctl+0x10/0x10 [ 151.923232][ T7183] __se_sys_ioctl+0xfc/0x170 [ 151.923258][ T7183] do_syscall_64+0x166/0x520 [ 151.923283][ T7183] ? trace_irq_disable+0x3b/0x140 [ 151.923304][ T7183] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.923324][ T7183] ? clear_bhb_loop+0x70/0xc0 [ 151.923346][ T7183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.923365][ T7183] RIP: 0033:0x7f837499f559 [ 151.923382][ T7183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.923398][ T7183] RSP: 002b:00007f8375909028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 151.923419][ T7183] RAX: ffffffffffffffda RBX: 00007f8374c25fa0 RCX: 00007f837499f559 [ 151.923432][ T7183] RDX: 0000200000000940 RSI: 00000000000089f2 RDI: 0000000000000003 [ 151.923445][ T7183] RBP: 00007f8375909090 R08: 0000000000000000 R09: 0000000000000000 [ 151.923457][ T7183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.923476][ T7183] R13: 00007f8374c26038 R14: 00007f8374c25fa0 R15: 00007ffe33be6de8 [ 151.923504][ T7183] [ 152.367699][ T5705] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 152.436999][ T32] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 152.520007][ T5705] usb 4-1: unable to get BOS descriptor or descriptor too short [ 152.520060][ T5705] usb 4-1: New USB device found: idVendor=2013, idProduct=0248, bcdDevice=ee.04 [ 152.521150][ T5705] usb 4-1: config 4 has an invalid interface number: 118 but max is 1 [ 152.521174][ T5705] usb 4-1: config 4 has an invalid interface number: 104 but max is 1 [ 152.521192][ T5705] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 152.521210][ T5705] usb 4-1: config 4 has no interface number 0 [ 152.521225][ T5705] usb 4-1: config 4 has no interface number 1 [ 152.521262][ T5705] usb 4-1: config 4 interface 118 has no altsetting 0 [ 152.525534][ T5705] usb 4-1: New USB device strings: Mfr=213, Product=0, SerialNumber=3 [ 152.525560][ T5705] usb 4-1: Manufacturer: syz [ 152.525574][ T5705] usb 4-1: SerialNumber: syz [ 152.616114][ T32] usb 1-1: New USB device found: idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 152.627013][ T32] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 152.627032][ T32] usb 1-1: config 0 has no interface number 0 [ 152.627074][ T32] usb 1-1: config 0 interface 41 has no altsetting 0 [ 152.631426][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.631441][ T32] usb 1-1: Product: syz [ 152.631450][ T32] usb 1-1: Manufacturer: syz [ 152.631463][ T32] usb 1-1: SerialNumber: syz [ 152.663412][ T2252] usb 2-1: USB disconnect, device number 23 [ 152.694698][ T32] usb 1-1: config 0 descriptor?? [ 152.738473][ T7203] FAULT_INJECTION: forcing a failure. [ 152.738473][ T7203] name failslab, interval 1, probability 0, space 0, times 0 [ 152.738531][ T7203] CPU: 1 UID: 0 PID: 7203 Comm: syz.1.463 Tainted: G L syzkaller #0 PREEMPT(full) [ 152.738556][ T7203] Tainted: [L]=SOFTLOCKUP [ 152.738564][ T7203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 152.738574][ T7203] Call Trace: [ 152.738582][ T7203] [ 152.738590][ T7203] dump_stack_lvl+0xe8/0x150 [ 152.738622][ T7203] should_fail_ex+0x3eb/0x540 [ 152.738654][ T7203] should_failslab+0xa8/0x100 [ 152.738679][ T7203] ? alloc_empty_file+0x5b/0x1d0 [ 152.738696][ T7203] kmem_cache_alloc_noprof+0x9c/0x600 [ 152.738716][ T7203] ? stack_depot_save_flags+0x33/0x810 [ 152.738742][ T7203] ? alloc_empty_file+0x5b/0x1d0 [ 152.738763][ T7203] alloc_empty_file+0x5b/0x1d0 [ 152.738780][ T7203] path_openat+0x96/0x20f0 [ 152.738818][ T7203] do_file_open+0x23e/0x4a0 [ 152.738845][ T7203] ? __pfx_do_file_open+0x10/0x10 [ 152.738893][ T7203] ? _raw_spin_unlock+0x28/0x50 [ 152.738914][ T7203] ? alloc_fd+0x6af/0x760 [ 152.738942][ T7203] do_sys_openat2+0x115/0x200 [ 152.738962][ T7203] ? __pfx_do_sys_openat2+0x10/0x10 [ 152.738980][ T7203] ? ksys_write+0x242/0x270 [ 152.739001][ T7203] ? __pfx_ksys_write+0x10/0x10 [ 152.739025][ T7203] __x64_sys_creat+0x8f/0xc0 [ 152.739046][ T7203] do_syscall_64+0x166/0x520 [ 152.739068][ T7203] ? trace_irq_disable+0x3b/0x140 [ 152.739090][ T7203] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.739108][ T7203] ? clear_bhb_loop+0x70/0xc0 [ 152.739130][ T7203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.739148][ T7203] RIP: 0033:0x7f93e2d9f559 [ 152.739164][ T7203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.739179][ T7203] RSP: 002b:00007f93e3d0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 152.739199][ T7203] RAX: ffffffffffffffda RBX: 00007f93e3025fa0 RCX: 00007f93e2d9f559 [ 152.739212][ T7203] RDX: 0000000000000000 RSI: 0000000000000188 RDI: 0000200000000180 [ 152.739223][ T7203] RBP: 00007f93e3d0c090 R08: 0000000000000000 R09: 0000000000000000 [ 152.739235][ T7203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.739245][ T7203] R13: 00007f93e3026038 R14: 00007f93e3025fa0 R15: 00007fff5f2adaa8 [ 152.739275][ T7203] [ 152.781589][ T5705] dvb-usb: found a 'Pinnacle PCTV 282e' in cold state, will try to load a firmware [ 152.783434][ T5705] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 152.783475][ T5705] dib0700: firmware download failed at 7 with -22 [ 152.789463][ T5705] dvb-usb: found a 'Pinnacle PCTV 282e' in cold state, will try to load a firmware [ 152.791382][ T5705] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 152.791425][ T5705] dib0700: firmware download failed at 7 with -22 [ 152.799835][ T5705] usb 4-1: USB disconnect, device number 39 [ 152.939143][ T7205] FAULT_INJECTION: forcing a failure. [ 152.939143][ T7205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.939174][ T7205] CPU: 0 UID: 0 PID: 7205 Comm: syz.1.464 Tainted: G L syzkaller #0 PREEMPT(full) [ 152.939200][ T7205] Tainted: [L]=SOFTLOCKUP [ 152.939206][ T7205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 152.939217][ T7205] Call Trace: [ 152.939223][ T7205] [ 152.939230][ T7205] dump_stack_lvl+0xe8/0x150 [ 152.939262][ T7205] should_fail_ex+0x3eb/0x540 [ 152.939294][ T7205] _copy_to_user+0x31/0xb0 [ 152.939322][ T7205] __se_sys_newfstat+0x37b/0x440 [ 152.939353][ T7205] ? __pfx___se_sys_newfstat+0x10/0x10 [ 152.939386][ T7205] ? __fget_files+0x2a/0x420 [ 152.939404][ T7205] ? __fget_files+0x3a2/0x420 [ 152.939444][ T7205] ? __pfx_ksys_write+0x10/0x10 [ 152.939476][ T7205] do_syscall_64+0x166/0x520 [ 152.939501][ T7205] ? trace_irq_disable+0x3b/0x140 [ 152.939524][ T7205] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.939543][ T7205] ? clear_bhb_loop+0x70/0xc0 [ 152.939565][ T7205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.939582][ T7205] RIP: 0033:0x7f93e2d9f559 [ 152.939600][ T7205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.939615][ T7205] RSP: 002b:00007f93e3d0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000005 [ 152.939635][ T7205] RAX: ffffffffffffffda RBX: 00007f93e3025fa0 RCX: 00007f93e2d9f559 [ 152.939648][ T7205] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 152.939659][ T7205] RBP: 00007f93e3d0c090 R08: 0000000000000000 R09: 0000000000000000 [ 152.939669][ T7205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.939679][ T7205] R13: 00007f93e3026038 R14: 00007f93e3025fa0 R15: 00007fff5f2adaa8 [ 152.939706][ T7205] [ 152.989819][ T2252] tipc: Node number set to 2886997162 [ 153.180599][ T5776] usb 3-1: USB disconnect, device number 35 [ 153.290749][ T7213] netlink: 168 bytes leftover after parsing attributes in process `syz.1.468'. [ 153.585118][ T32] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 153.614256][ T7226] binder: Write failure EFAULT in pid:236 [ 153.785170][ T5632] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 153.934789][ T7244] netlink: 5 bytes leftover after parsing attributes in process `syz.2.478'. [ 153.934849][ T7244] netlink: 5 bytes leftover after parsing attributes in process `syz.2.478'. [ 153.938619][ T7244] tipc: Started in network mode [ 153.938649][ T7244] tipc: Node identity ac1414aa, cluster identity 4711 [ 153.938870][ T7244] tipc: New replicast peer: 172.20.20.187 [ 153.941079][ T7244] tipc: Enabled bearer , priority 10 [ 154.136655][ T2252] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 154.288472][ T2252] usb 4-1: unable to get BOS descriptor or descriptor too short [ 154.288507][ T2252] usb 4-1: New USB device found: idVendor=2013, idProduct=0248, bcdDevice=ee.04 [ 154.289307][ T2252] usb 4-1: config 4 has an invalid interface number: 118 but max is 1 [ 154.289322][ T2252] usb 4-1: config 4 has an invalid interface number: 104 but max is 1 [ 154.289332][ T2252] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 154.289341][ T2252] usb 4-1: config 4 has no interface number 0 [ 154.289350][ T2252] usb 4-1: config 4 has no interface number 1 [ 154.289370][ T2252] usb 4-1: config 4 interface 118 has no altsetting 0 [ 154.290609][ T2252] usb 4-1: New USB device strings: Mfr=213, Product=0, SerialNumber=3 [ 154.290623][ T2252] usb 4-1: Manufacturer: syz [ 154.290632][ T2252] usb 4-1: SerialNumber: syz [ 154.528618][ T2252] dvb-usb: found a 'Pinnacle PCTV 282e' in cold state, will try to load a firmware [ 154.530174][ T2252] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 154.530213][ T2252] dib0700: firmware download failed at 7 with -22 [ 154.535133][ T2252] dvb-usb: found a 'Pinnacle PCTV 282e' in cold state, will try to load a firmware [ 154.537503][ T2252] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 154.537550][ T2252] dib0700: firmware download failed at 7 with -22 [ 154.544255][ T2252] usb 4-1: USB disconnect, device number 40 [ 154.838591][ T32] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffe0 [ 154.840442][ T32] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 154.840669][ T32] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 154.845940][ T32] usb 1-1: USB disconnect, device number 26 [ 154.947272][ T5784] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 155.013265][ T7263] netlink: 196 bytes leftover after parsing attributes in process `syz.2.486'. [ 155.059220][ T11] tipc: Node number set to 2886997162 [ 155.089648][ T5784] usb 2-1: device descriptor read/64, error -71 [ 155.194434][ T7267] netlink: 5 bytes leftover after parsing attributes in process `syz.3.488'. [ 155.194496][ T7267] netlink: 5 bytes leftover after parsing attributes in process `syz.3.488'. [ 155.200834][ T7267] tipc: Started in network mode [ 155.200863][ T7267] tipc: Node identity ac1414aa, cluster identity 4711 [ 155.201128][ T7267] tipc: New replicast peer: 172.20.20.187 [ 155.201919][ T7267] tipc: Enabled bearer , priority 10 [ 155.337175][ T5784] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 155.435010][ T7271] syz.3.492 uses obsolete (PF_INET,SOCK_PACKET) [ 155.467379][ T5784] usb 2-1: device descriptor read/64, error -71 [ 155.489680][ T7275] netlink: 5 bytes leftover after parsing attributes in process `syz.0.490'. [ 155.489756][ T7275] netlink: 5 bytes leftover after parsing attributes in process `syz.0.490'. [ 155.577081][ T5784] usb usb2-port1: attempt power cycle [ 155.595591][ T7285] kvm [7284]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x80ffffff [ 155.607390][ T7285] kvm [7284]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010006) = 0x8000000000000 [ 155.716623][ T11] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 155.868062][ T11] usb 4-1: New USB device found: idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 155.869079][ T11] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 155.869100][ T11] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 155.869122][ T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.871617][ T7271] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 155.877316][ T11] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 155.936804][ T5733] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 155.938155][ T5784] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 155.969527][ T5784] usb 2-1: device descriptor read/8, error -71 [ 156.072900][ T11] usb 4-1: USB disconnect, device number 41 [ 156.114244][ T5733] usb 1-1: unable to get BOS descriptor or descriptor too short [ 156.114293][ T5733] usb 1-1: New USB device found: idVendor=2013, idProduct=0248, bcdDevice=ee.04 [ 156.120707][ T5733] usb 1-1: config 4 has an invalid interface number: 118 but max is 1 [ 156.120734][ T5733] usb 1-1: config 4 has an invalid interface number: 104 but max is 1 [ 156.120752][ T5733] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 156.120795][ T5733] usb 1-1: config 4 has no interface number 0 [ 156.120809][ T5733] usb 1-1: config 4 has no interface number 1 [ 156.120845][ T5733] usb 1-1: config 4 interface 118 has no altsetting 0 [ 156.122460][ T5733] usb 1-1: New USB device strings: Mfr=213, Product=0, SerialNumber=3 [ 156.122482][ T5733] usb 1-1: Manufacturer: syz [ 156.122496][ T5733] usb 1-1: SerialNumber: syz [ 156.226709][ T5784] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 156.260570][ T5784] usb 2-1: device descriptor read/8, error -71 [ 156.326665][ T53] tipc: Node number set to 2886997162 [ 156.367496][ T5784] usb usb2-port1: unable to enumerate USB device [ 156.391290][ T5733] dvb-usb: found a 'Pinnacle PCTV 282e' in cold state, will try to load a firmware [ 156.392214][ T5733] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 156.392240][ T5733] dib0700: firmware download failed at 7 with -22 [ 156.428734][ T5733] dvb-usb: found a 'Pinnacle PCTV 282e' in cold state, will try to load a firmware [ 156.431997][ T5733] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 156.432025][ T5733] dib0700: firmware download failed at 7 with -22 [ 156.436597][ T5733] usb 1-1: USB disconnect, device number 27 [ 156.918784][ T7300] tipc: Enabling of bearer rejected, already enabled [ 157.047821][ T11] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 157.111021][ T7308] netlink: 5 bytes leftover after parsing attributes in process `syz.0.503'. [ 157.111068][ T7308] netlink: 5 bytes leftover after parsing attributes in process `syz.0.503'. [ 157.197911][ T11] usb 4-1: New USB device found: idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 157.199016][ T11] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 157.199048][ T11] usb 4-1: config 0 has no interface number 0 [ 157.199088][ T11] usb 4-1: config 0 interface 41 has no altsetting 0 [ 157.201060][ T11] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.201083][ T11] usb 4-1: Product: syz [ 157.201096][ T11] usb 4-1: Manufacturer: syz [ 157.201108][ T11] usb 4-1: SerialNumber: syz [ 157.203112][ T11] usb 4-1: config 0 descriptor?? [ 157.354317][ T7313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.505'. [ 157.373866][ T7313] ovs-system: entered promiscuous mode [ 157.728479][ T7320] tipc: Started in network mode [ 157.728502][ T7320] tipc: Node identity ac1414aa, cluster identity 4711 [ 157.729759][ T7320] tipc: New replicast peer: 172.20.20.187 [ 157.730227][ T7320] tipc: Enabled bearer , priority 10 [ 157.826622][ T5733] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 157.978675][ T5733] usb 3-1: unable to get BOS descriptor or descriptor too short [ 157.978717][ T5733] usb 3-1: New USB device found: idVendor=2013, idProduct=0248, bcdDevice=ee.04 [ 157.979720][ T5733] usb 3-1: config 4 has an invalid interface number: 118 but max is 1 [ 157.979743][ T5733] usb 3-1: config 4 has an invalid interface number: 104 but max is 1 [ 157.979761][ T5733] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 157.979776][ T5733] usb 3-1: config 4 has no interface number 0 [ 157.979785][ T5733] usb 3-1: config 4 has no interface number 1 [ 157.979805][ T5733] usb 3-1: config 4 interface 118 has no altsetting 0 [ 157.981117][ T5733] usb 3-1: New USB device strings: Mfr=213, Product=0, SerialNumber=3 [ 157.981138][ T5733] usb 3-1: Manufacturer: syz [ 157.981152][ T5733] usb 3-1: SerialNumber: syz [ 158.022359][ T11] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 158.120077][ T7328] netlink: 5 bytes leftover after parsing attributes in process `syz.0.512'. [ 158.120137][ T7328] netlink: 5 bytes leftover after parsing attributes in process `syz.0.512'. [ 158.126950][ T5784] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 158.209675][ T5733] dvb-usb: found a 'Pinnacle PCTV 282e' in cold state, will try to load a firmware [ 158.210946][ T5733] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 158.210989][ T5733] dib0700: firmware download failed at 7 with -22 [ 158.214950][ T5733] dvb-usb: found a 'Pinnacle PCTV 282e' in cold state, will try to load a firmware [ 158.216099][ T5733] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 158.216140][ T5733] dib0700: firmware download failed at 7 with -22 [ 158.225897][ T5733] usb 3-1: USB disconnect, device number 36 [ 158.277837][ T5784] usb 2-1: Using ep0 maxpacket: 16 [ 158.278771][ T5784] usb 2-1: New USB device found: idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 158.281436][ T5784] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.281450][ T5784] usb 2-1: Product: syz [ 158.281458][ T5784] usb 2-1: Manufacturer: syz [ 158.281465][ T5784] usb 2-1: SerialNumber: syz [ 158.285257][ T5784] usb 2-1: config 0 descriptor?? [ 158.292604][ T5784] usb 2-1: selecting invalid altsetting 1 [ 158.292621][ T5784] technisat-usb2: could not set alternate setting to 0 [ 158.488981][ T5784] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in cold state, will try to load a firmware [ 158.491941][ T5784] usb 2-1: Direct firmware load for dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw failed with error -2 [ 158.491968][ T5784] usb 2-1: Falling back to sysfs fallback for: dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw [ 158.847534][ T5705] tipc: Node number set to 2886997162 [ 158.946666][ T5733] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 159.056686][ T2252] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 159.096656][ T5733] usb 1-1: Using ep0 maxpacket: 32 [ 159.098301][ T5733] usb 1-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40 [ 159.099500][ T5733] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 159.099521][ T5733] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 159.099540][ T5733] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 159.099584][ T5733] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 159.099632][ T5733] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 159.099656][ T5733] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 159.099695][ T5733] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.126171][ T5733] usb 1-1: config 0 descriptor?? [ 159.258460][ T2252] usb 3-1: not running at top speed; connect to a high speed hub [ 159.258525][ T2252] usb 3-1: New USB device found: idVendor=06cd, idProduct=0131, bcdDevice=1.00 [ 159.261831][ T2252] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.261851][ T2252] usb 3-1: Product: syz [ 159.261858][ T2252] usb 3-1: Manufacturer: syz [ 159.261865][ T2252] usb 3-1: SerialNumber: syz [ 159.306923][ T11] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffe0 [ 159.307287][ T11] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 159.307463][ T11] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 159.310463][ T2252] keyspan 3-1:1.0: Keyspan 4 port adapter converter detected [ 159.329221][ T11] usb 4-1: USB disconnect, device number 42 [ 159.378514][ T5733] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 28 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 159.378713][ T2252] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 159.406221][ T2252] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 159.421709][ T2252] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 159.426097][ T2252] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 159.504440][ T53] usb 3-1: USB disconnect, device number 37 [ 159.523618][ T53] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 159.529607][ T53] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 159.547855][ T53] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 159.551063][ T53] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 159.552155][ T53] keyspan 3-1:1.0: device disconnected [ 159.609985][ T7345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.610642][ T7345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.664987][ T7348] bridge0: port 3(veth0_to_bridge) entered blocking state [ 159.665262][ T7348] bridge0: port 3(veth0_to_bridge) entered disabled state [ 159.665434][ T7348] veth0_to_bridge: entered allmulticast mode [ 159.689501][ T7348] veth0_to_bridge: entered promiscuous mode [ 159.689720][ T7348] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 159.690334][ T7348] bridge0: port 3(veth0_to_bridge) entered blocking state [ 159.690391][ T7348] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 159.694910][ T7348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.695491][ T7348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.703430][ T7350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.712495][ T7350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.923982][ T7360] Zero length message leads to an empty skb [ 160.311738][ T7373] comedi comedi3: s526: I/O base address not correctly aligned [ 160.687316][ T2252] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 160.847280][ T2252] usb 4-1: New USB device found: idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 160.849091][ T2252] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 160.849116][ T2252] usb 4-1: config 0 has no interface number 0 [ 160.849158][ T2252] usb 4-1: config 0 interface 41 has no altsetting 0 [ 160.851659][ T2252] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.851681][ T2252] usb 4-1: Product: syz [ 160.851695][ T2252] usb 4-1: Manufacturer: syz [ 160.851709][ T2252] usb 4-1: SerialNumber: syz [ 160.895987][ T2252] usb 4-1: config 0 descriptor?? [ 161.715272][ T2252] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 161.751373][ T32] usb 1-1: USB disconnect, device number 28 [ 161.762889][ T32] usblp0: removed [ 161.803004][ T7384] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 161.803044][ T7384] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 161.803080][ T7384] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 161.906028][ T7388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.906465][ T7388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.957363][ T7390] ima: policy update failed [ 161.957499][ T33] audit: type=1802 audit(1793360414.712:3): pid=7390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.535" res=0 errno=-22 [ 162.124143][ T7395] __nla_validate_parse: 2 callbacks suppressed [ 162.124158][ T7395] netlink: 5 bytes leftover after parsing attributes in process `syz.2.537'. [ 162.124200][ T7395] netlink: 5 bytes leftover after parsing attributes in process `syz.2.537'. [ 162.218703][ T32] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 162.243132][ T7399] ima: rule for LSM 'u' is undefined [ 162.244001][ T33] audit: type=1807 audit(1793360414.992:4): action=measure func=FILE_CHECK obj_type=u res=0 [ 162.244122][ T33] audit: type=1802 audit(1793360414.992:5): pid=7399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.539" res=0 errno=-22 [ 162.244273][ T7398] ima: policy update failed [ 162.244374][ T33] audit: type=1802 audit(1793360414.992:6): pid=7398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.539" res=0 errno=-22 [ 162.338861][ T7401] FAULT_INJECTION: forcing a failure. [ 162.338861][ T7401] name failslab, interval 1, probability 0, space 0, times 0 [ 162.338884][ T7401] CPU: 1 UID: 0 PID: 7401 Comm: syz.2.540 Tainted: G L syzkaller #0 PREEMPT(full) [ 162.338898][ T7401] Tainted: [L]=SOFTLOCKUP [ 162.338902][ T7401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 162.338909][ T7401] Call Trace: [ 162.338913][ T7401] [ 162.338919][ T7401] dump_stack_lvl+0xe8/0x150 [ 162.338939][ T7401] should_fail_ex+0x3eb/0x540 [ 162.338958][ T7401] should_failslab+0xa8/0x100 [ 162.338972][ T7401] ? alloc_empty_file+0x5b/0x1d0 [ 162.338982][ T7401] kmem_cache_alloc_noprof+0x9c/0x600 [ 162.338992][ T7401] ? stack_depot_save_flags+0x33/0x810 [ 162.339008][ T7401] ? alloc_empty_file+0x5b/0x1d0 [ 162.339023][ T7401] alloc_empty_file+0x5b/0x1d0 [ 162.339033][ T7401] path_openat+0x96/0x20f0 [ 162.339056][ T7401] do_file_open+0x23e/0x4a0 [ 162.339072][ T7401] ? __pfx_do_file_open+0x10/0x10 [ 162.339094][ T7401] ? _raw_spin_unlock+0x28/0x50 [ 162.339108][ T7401] ? alloc_fd+0x6af/0x760 [ 162.339123][ T7401] do_sys_openat2+0x115/0x200 [ 162.339135][ T7401] ? __pfx_do_sys_openat2+0x10/0x10 [ 162.339148][ T7401] ? do_user_addr_fault+0xd3f/0x1480 [ 162.339161][ T7401] __x64_sys_openat+0x138/0x170 [ 162.339174][ T7401] do_syscall_64+0x166/0x520 [ 162.339188][ T7401] ? trace_irq_disable+0x3b/0x140 [ 162.339201][ T7401] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.339211][ T7401] ? clear_bhb_loop+0x70/0xc0 [ 162.339224][ T7401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.339233][ T7401] RIP: 0033:0x7f837495fd8e [ 162.339244][ T7401] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 162.339252][ T7401] RSP: 002b:00007f8375908b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 162.339265][ T7401] RAX: ffffffffffffffda RBX: 00007f83759096c0 RCX: 00007f837495fd8e [ 162.339279][ T7401] RDX: 000000000000c100 RSI: 00007f8375908c00 RDI: ffffffffffffff9c [ 162.339286][ T7401] RBP: 00007f8375908c00 R08: 0000000000000000 R09: 0000000000000000 [ 162.339293][ T7401] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 162.339299][ T7401] R13: 00007f8374c26038 R14: 00007f8374c25fa0 R15: 00007ffe33be6de8 [ 162.339314][ T7401] [ 162.432159][ T32] usb 1-1: New USB device found: idVendor=0d8c, idProduct=0022, bcdDevice=0.00 [ 162.484154][ T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.484189][ T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.484236][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.574602][ T32] usb 1-1: config 0 descriptor?? [ 162.785025][ T32] usbhid 1-1:0.0: can't add hid device: -71 [ 162.785138][ T32] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 162.802429][ T32] usb 1-1: USB disconnect, device number 29 [ 162.968925][ T2252] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffea [ 163.169704][ T2252] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 163.169970][ T2252] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 163.186432][ T2252] usb 4-1: USB disconnect, device number 43 [ 163.356050][ T7417] netlink: 5 bytes leftover after parsing attributes in process `syz.0.546'. [ 163.356114][ T7417] netlink: 5 bytes leftover after parsing attributes in process `syz.0.546'. [ 163.503204][ T7427] binder: BINDER_SET_CONTEXT_MGR already set [ 163.848246][ T7449] netlink: 5 bytes leftover after parsing attributes in process `syz.3.559'. [ 163.848300][ T7449] netlink: 5 bytes leftover after parsing attributes in process `syz.3.559'. [ 163.866643][ T5743] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 164.016608][ T5743] usb 1-1: Using ep0 maxpacket: 8 [ 164.019134][ T5743] usb 1-1: unable to get BOS descriptor or descriptor too short [ 164.019166][ T5743] usb 1-1: New USB device found: idVendor=046d, idProduct=08b7, bcdDevice=22.d5 [ 164.019188][ T5743] usb 1-1: too many configurations: 114, using maximum allowed: 8 [ 164.042559][ T5743] usb 1-1: New USB device strings: Mfr=11, Product=2, SerialNumber=3 [ 164.042587][ T5743] usb 1-1: Product: syz [ 164.042600][ T5743] usb 1-1: Manufacturer: syz [ 164.042614][ T5743] usb 1-1: SerialNumber: syz [ 164.050060][ T5743] usb 1-1: config 0 descriptor?? [ 164.260427][ T5743] pwc: Logitech ViewPort AV 100 webcam detected. [ 164.262364][ T5743] pwc: Warning: more than 1 configuration available. [ 164.262803][ T5743] pwc: Failed to set LED on/off time (-71) [ 164.263057][ T5743] pwc: send_video_command error -71 [ 164.263064][ T5743] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 164.263124][ T5743] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 164.265194][ T5743] usb 1-1: USB disconnect, device number 30 [ 165.056671][ T2252] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 165.207447][ T2252] usb 1-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 165.210129][ T2252] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 165.210146][ T2252] usb 1-1: config 1 has no interface number 0 [ 165.211732][ T2252] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.211746][ T2252] usb 1-1: Product: syz [ 165.211754][ T2252] usb 1-1: Manufacturer: syz [ 165.211761][ T2252] usb 1-1: SerialNumber: syz [ 165.254058][ T2252] usb 1-1: 3:0 : does not exist [ 165.254072][ T2252] usb 1-1: 3:0 : does not exist [ 166.439115][ T2252] usb 1-1: USB disconnect, device number 31 [ 166.514952][ T7429] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 167.130878][ T7481] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 167.167113][ T2252] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 167.316658][ T2252] usb 3-1: Using ep0 maxpacket: 8 [ 167.317189][ T2252] usb 3-1: New USB device found: idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 167.318117][ T2252] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.318148][ T2252] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.320090][ T2252] usb 3-1: config 0 descriptor?? [ 167.324018][ T2252] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 167.376709][ T5705] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 167.506706][ T5705] usb 1-1: device descriptor read/64, error -71 [ 167.746662][ T5705] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 167.876670][ T5705] usb 1-1: device descriptor read/64, error -71 [ 167.987540][ T7485] netlink: 5 bytes leftover after parsing attributes in process `syz.3.573'. [ 167.987604][ T7485] netlink: 5 bytes leftover after parsing attributes in process `syz.3.573'. [ 167.989919][ T5705] usb usb1-port1: attempt power cycle [ 168.130508][ T2252] gspca_vc032x: reg_w err -71 [ 168.130563][ T2252] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 168.132890][ T2252] usb 3-1: USB disconnect, device number 38 [ 168.326674][ T5705] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 168.347940][ T5705] usb 1-1: device descriptor read/8, error -71 [ 168.476666][ T5733] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 168.587185][ T5705] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 168.607277][ T5705] usb 1-1: device descriptor read/8, error -71 [ 168.636622][ T5733] usb 4-1: Using ep0 maxpacket: 8 [ 168.637505][ T5733] usb 4-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 168.640231][ T5733] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.640245][ T5733] usb 4-1: Product: syz [ 168.640252][ T5733] usb 4-1: Manufacturer: syz [ 168.640260][ T5733] usb 4-1: SerialNumber: syz [ 168.642187][ T5733] usb 4-1: config 0 descriptor?? [ 168.718344][ T5705] usb usb1-port1: unable to enumerate USB device [ 168.850319][ T5733] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 168.858905][ T33] audit: type=1807 audit(1793360421.602:7): action=appraise func=POLICY_CHECK res=1 [ 168.859232][ T7498] ima: policy update completed [ 168.860054][ T33] audit: type=1802 audit(1793360421.602:8): pid=7498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.2.579" res=1 errno=0 [ 169.911294][ T7506] netlink: 5 bytes leftover after parsing attributes in process `syz.1.582'. [ 169.911379][ T7506] netlink: 5 bytes leftover after parsing attributes in process `syz.1.582'. [ 170.066899][ T5733] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 170.080998][ T5733] usb 4-1: USB disconnect, device number 44 [ 170.378647][ T7520] smpboot: CPU 1 is now offline [ 170.397786][ T5776] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 170.555122][ T5776] usb 3-1: New USB device found: idVendor=8087, idProduct=0025, bcdDevice=0.01 [ 170.556906][ T5776] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 170.556923][ T5776] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 170.556934][ T5776] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 170.556955][ T5776] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.658987][ T7509] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 171.058210][ T5705] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 171.080021][ T7509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.080326][ T7509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.122669][ T5632] Bluetooth: hci4: Reading Intel version command failed (-71) [ 171.125737][ T2252] usb 3-1: USB disconnect, device number 39 [ 171.235271][ T5705] usb 1-1: New USB device found: idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 171.236341][ T5705] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 171.236358][ T5705] usb 1-1: config 0 has no interface number 0 [ 171.236385][ T5705] usb 1-1: config 0 interface 41 has no altsetting 0 [ 171.271679][ T5705] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.271696][ T5705] usb 1-1: Product: syz [ 171.271704][ T5705] usb 1-1: Manufacturer: syz [ 171.271711][ T5705] usb 1-1: SerialNumber: syz [ 171.299849][ T5705] usb 1-1: config 0 descriptor?? [ 171.323117][ T7535] netlink: 56 bytes leftover after parsing attributes in process `syz.1.591'. [ 172.028403][ T2252] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 172.062679][ T7552] comedi comedi0: No hardware detected at I/O base 0x300 [ 172.063185][ T7552] device-mapper: ioctl: populate_table: target parameters not NUL-terminated [ 172.111459][ T5705] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 172.177882][ T2252] usb 4-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 172.182421][ T2252] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.182438][ T2252] usb 4-1: Product: syz [ 172.182446][ T2252] usb 4-1: Manufacturer: syz [ 172.182453][ T2252] usb 4-1: SerialNumber: syz [ 172.253728][ T5743] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 172.463414][ T7550] overlayfs: missing 'lowerdir' [ 172.688728][ T11] usb 4-1: USB disconnect, device number 45 [ 173.309370][ T5743] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 173.309504][ T5743] ath9k_htc: Failed to initialize the device [ 173.311983][ T11] usb 4-1: ath9k_htc: USB layer deinitialized [ 173.361634][ T5705] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffea [ 173.562088][ T5705] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 173.562231][ T5705] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 173.594621][ T5705] usb 1-1: USB disconnect, device number 36 [ 174.669482][ T7588] loop3: detected capacity change from 0 to 7 [ 174.712197][ T7588] Dev loop3: unable to read RDB block 7 [ 174.712236][ T7588] loop3: unable to read partition table [ 174.712368][ T7588] loop3: partition table beyond EOD, truncated [ 174.712379][ T7588] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 174.887316][ T7586] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input11 [ 174.928226][ T7592] netlink: 'syz.1.609': attribute type 39 has an invalid length. [ 175.325822][ T7584] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 175.325993][ T7584] block device autoloading is deprecated and will be removed. [ 175.589065][ T5705] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 175.741133][ T7611] capability: warning: `syz.3.615' uses deprecated v2 capabilities in a way that may be insecure [ 175.754487][ T5705] usb 1-1: New USB device found: idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 175.766919][ T5705] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 175.766936][ T5705] usb 1-1: config 0 has no interface number 0 [ 175.766959][ T5705] usb 1-1: config 0 interface 41 has no altsetting 0 [ 175.795422][ T5705] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.795439][ T5705] usb 1-1: Product: syz [ 175.795446][ T5705] usb 1-1: Manufacturer: syz [ 175.795454][ T5705] usb 1-1: SerialNumber: syz [ 175.822642][ T5705] usb 1-1: config 0 descriptor?? [ 176.096818][ T5743] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 176.257508][ T5743] usb 4-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 176.258494][ T5743] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.258523][ T5743] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.297237][ T5743] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 176.297392][ T5743] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 81 [ 176.297431][ T5743] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 1 [ 176.330870][ T5743] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 176.330937][ T5743] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 176.343738][ T5743] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 176.367165][ T5743] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 176.367216][ T5743] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 176.368483][ T5743] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 176.496996][ T11] usb 4-1: USB disconnect, device number 46 [ 176.515000][ T11] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 176.543454][ T11] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 176.566436][ T11] keyspan 4-1:1.0: device disconnected [ 176.656034][ T5705] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 176.891459][ T7621] FAULT_INJECTION: forcing a failure. [ 176.891459][ T7621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.891501][ T7621] CPU: 0 UID: 0 PID: 7621 Comm: syz.2.617 Tainted: G L syzkaller #0 PREEMPT(full) [ 176.891516][ T7621] Tainted: [L]=SOFTLOCKUP [ 176.891520][ T7621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 176.891528][ T7621] Call Trace: [ 176.891532][ T7621] [ 176.891538][ T7621] dump_stack_lvl+0xe8/0x150 [ 176.891558][ T7621] should_fail_ex+0x3eb/0x540 [ 176.891577][ T7621] _copy_to_user+0x31/0xb0 [ 176.891594][ T7621] simple_read_from_buffer+0xe1/0x170 [ 176.891609][ T7621] proc_fail_nth_read+0x1bb/0x230 [ 176.891627][ T7621] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 176.891642][ T7621] ? rw_verify_area+0x24a/0x4c0 [ 176.891656][ T7621] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 176.891685][ T7621] vfs_read+0x213/0xa80 [ 176.891700][ T7621] ? __pfx___mutex_lock+0x10/0x10 [ 176.891716][ T7621] ? __pfx_vfs_read+0x10/0x10 [ 176.891728][ T7621] ? __fget_files+0x2a/0x420 [ 176.891738][ T7621] ? __fget_files+0x3a2/0x420 [ 176.891748][ T7621] ? __fget_files+0x2a/0x420 [ 176.891761][ T7621] ? fdget+0x1ac/0x250 [ 176.891775][ T7621] ksys_read+0x150/0x270 [ 176.891788][ T7621] ? __pfx_ksys_read+0x10/0x10 [ 176.891806][ T7621] do_syscall_64+0x166/0x520 [ 176.891820][ T7621] ? trace_irq_disable+0x3b/0x140 [ 176.891833][ T7621] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.891843][ T7621] ? clear_bhb_loop+0x70/0xc0 [ 176.891855][ T7621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.891866][ T7621] RIP: 0033:0x7f837495fd8e [ 176.891877][ T7621] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 176.891886][ T7621] RSP: 002b:00007f8375908fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 176.891898][ T7621] RAX: ffffffffffffffda RBX: 00007f83759096c0 RCX: 00007f837495fd8e [ 176.891905][ T7621] RDX: 000000000000000f RSI: 00007f83759090a0 RDI: 0000000000000003 [ 176.891911][ T7621] RBP: 00007f8375909090 R08: 0000000000000000 R09: 0000000000000000 [ 176.891917][ T7621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.891923][ T7621] R13: 00007f8374c26038 R14: 00007f8374c25fa0 R15: 00007ffe33be6de8 [ 176.891939][ T7621] [ 177.199329][ T7625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.619'. [ 177.343529][ T7632] No control pipe specified [ 177.354318][ T7632] FAULT_INJECTION: forcing a failure. [ 177.354318][ T7632] name failslab, interval 1, probability 0, space 0, times 0 [ 177.354341][ T7632] CPU: 0 UID: 0 PID: 7632 Comm: syz.3.622 Tainted: G L syzkaller #0 PREEMPT(full) [ 177.354356][ T7632] Tainted: [L]=SOFTLOCKUP [ 177.354360][ T7632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 177.354367][ T7632] Call Trace: [ 177.354372][ T7632] [ 177.354377][ T7632] dump_stack_lvl+0xe8/0x150 [ 177.354400][ T7632] should_fail_ex+0x3eb/0x540 [ 177.354420][ T7632] should_failslab+0xa8/0x100 [ 177.354436][ T7632] __kmalloc_noprof+0xf9/0x710 [ 177.354447][ T7632] ? sk_prot_alloc+0x57/0x210 [ 177.354460][ T7632] ? security_sk_alloc+0x52/0x360 [ 177.354471][ T7632] ? security_sk_alloc+0x52/0x360 [ 177.354482][ T7632] ? kmem_cache_alloc_noprof+0x151/0x600 [ 177.354494][ T7632] security_sk_alloc+0x52/0x360 [ 177.354506][ T7632] sk_prot_alloc+0x101/0x210 [ 177.354521][ T7632] sk_alloc+0x3a/0x390 [ 177.354534][ T7632] unix_create1+0xb0/0x7c0 [ 177.354549][ T7632] unix_create+0x14c/0x1d0 [ 177.354562][ T7632] __sock_create+0x4b5/0xac0 [ 177.354576][ T7632] __sys_socketpair+0x19d/0x5e0 [ 177.354591][ T7632] __x64_sys_socketpair+0x9b/0xb0 [ 177.354603][ T7632] do_syscall_64+0x166/0x520 [ 177.354617][ T7632] ? trace_irq_disable+0x3b/0x140 [ 177.354631][ T7632] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.354642][ T7632] ? clear_bhb_loop+0x70/0xc0 [ 177.354654][ T7632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.354664][ T7632] RIP: 0033:0x7fee35f9f559 [ 177.354675][ T7632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.354684][ T7632] RSP: 002b:00007fee36f51028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 177.354697][ T7632] RAX: ffffffffffffffda RBX: 00007fee36225fa0 RCX: 00007fee35f9f559 [ 177.354705][ T7632] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 177.354711][ T7632] RBP: 00007fee36036b20 R08: 0000000000000000 R09: 0000000000000000 [ 177.354717][ T7632] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000000 [ 177.354723][ T7632] R13: 00007fee36226038 R14: 00007fee36225fa0 R15: 00007ffe2e0e2568 [ 177.354739][ T7632] [ 177.877868][ T5743] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 178.027989][ T5743] usb 3-1: New USB device found: idVendor=08ca, idProduct=0110, bcdDevice=1.00 [ 178.028886][ T5743] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.030791][ T5743] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.030843][ T5743] usb 3-1: Product: syz [ 178.030856][ T5743] usb 3-1: Manufacturer: syz [ 178.030864][ T5743] usb 3-1: SerialNumber: syz [ 178.079400][ T2252] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 178.090225][ T5743] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 178.189153][ T5705] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 178.189322][ T5705] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 178.215953][ T5705] usb 1-1: USB disconnect, device number 37 [ 178.225380][ T2252] usb 4-1: device descriptor read/64, error -71 [ 178.455504][ T7635] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 178.465099][ T2252] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 178.478478][ T7635] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 178.519623][ T5743] gspca_mr97310a: reg write [21] error -71 [ 178.519678][ T5743] mr97310a 3-1:1.0: probe with driver mr97310a failed with error -71 [ 178.550616][ T5743] usb 3-1: USB disconnect, device number 40 [ 178.596670][ T2252] usb 4-1: device descriptor read/64, error -71 [ 178.631878][ T7649] FAULT_INJECTION: forcing a failure. [ 178.631878][ T7649] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.631902][ T7649] CPU: 0 UID: 0 PID: 7649 Comm: syz.1.629 Tainted: G L syzkaller #0 PREEMPT(full) [ 178.631916][ T7649] Tainted: [L]=SOFTLOCKUP [ 178.631920][ T7649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 178.631927][ T7649] Call Trace: [ 178.631931][ T7649] [ 178.631936][ T7649] dump_stack_lvl+0xe8/0x150 [ 178.631957][ T7649] should_fail_ex+0x3eb/0x540 [ 178.631975][ T7649] _copy_to_user+0x31/0xb0 [ 178.631992][ T7649] simple_read_from_buffer+0xe1/0x170 [ 178.632006][ T7649] proc_fail_nth_read+0x1bb/0x230 [ 178.632025][ T7649] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 178.632040][ T7649] ? rw_verify_area+0x24a/0x4c0 [ 178.632054][ T7649] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 178.632068][ T7649] vfs_read+0x213/0xa80 [ 178.632082][ T7649] ? __pfx___mutex_lock+0x10/0x10 [ 178.632098][ T7649] ? __pfx_vfs_read+0x10/0x10 [ 178.632111][ T7649] ? __fget_files+0x2a/0x420 [ 178.632121][ T7649] ? __fget_files+0x3a2/0x420 [ 178.632131][ T7649] ? __fget_files+0x2a/0x420 [ 178.632143][ T7649] ? fdget+0x1ac/0x250 [ 178.632157][ T7649] ksys_read+0x150/0x270 [ 178.632170][ T7649] ? __pfx_ksys_read+0x10/0x10 [ 178.632181][ T7649] ? __pfx_blkdev_ioctl+0x10/0x10 [ 178.632202][ T7649] do_syscall_64+0x166/0x520 [ 178.632223][ T7649] ? trace_irq_disable+0x3b/0x140 [ 178.632236][ T7649] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.632247][ T7649] ? clear_bhb_loop+0x70/0xc0 [ 178.632260][ T7649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.632269][ T7649] RIP: 0033:0x7f93e2d5fd8e [ 178.632279][ T7649] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 178.632288][ T7649] RSP: 002b:00007f93e3d0bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 178.632300][ T7649] RAX: ffffffffffffffda RBX: 00007f93e3d0c6c0 RCX: 00007f93e2d5fd8e [ 178.632307][ T7649] RDX: 000000000000000f RSI: 00007f93e3d0c0a0 RDI: 0000000000000004 [ 178.632314][ T7649] RBP: 00007f93e3d0c090 R08: 0000000000000000 R09: 0000000000000000 [ 178.632320][ T7649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.632326][ T7649] R13: 00007f93e3026038 R14: 00007f93e3025fa0 R15: 00007fff5f2adaa8 [ 178.632342][ T7649] [ 178.735114][ T2252] usb usb4-port1: attempt power cycle [ 179.181398][ T2252] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 179.200057][ T2252] usb 4-1: device descriptor read/8, error -71 [ 179.214756][ T7659] FAULT_INJECTION: forcing a failure. [ 179.214756][ T7659] name failslab, interval 1, probability 0, space 0, times 0 [ 179.214778][ T7659] CPU: 0 UID: 0 PID: 7659 Comm: syz.1.633 Tainted: G L syzkaller #0 PREEMPT(full) [ 179.214793][ T7659] Tainted: [L]=SOFTLOCKUP [ 179.214797][ T7659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 179.214804][ T7659] Call Trace: [ 179.214808][ T7659] [ 179.214813][ T7659] dump_stack_lvl+0xe8/0x150 [ 179.214835][ T7659] should_fail_ex+0x3eb/0x540 [ 179.214855][ T7659] should_failslab+0xa8/0x100 [ 179.214870][ T7659] __kmalloc_node_noprof+0xfb/0x720 [ 179.214883][ T7659] ? crypto_create_tfm_node+0x81/0x3c0 [ 179.214897][ T7659] ? crypto_create_tfm_node+0x81/0x3c0 [ 179.214912][ T7659] crypto_create_tfm_node+0x81/0x3c0 [ 179.214927][ T7659] crypto_alloc_tfm_node+0x169/0x3e0 [ 179.214941][ T7659] ? __asan_memcpy+0x40/0x70 [ 179.214955][ T7659] x509_get_sig_params+0x271/0x690 [ 179.214973][ T7659] x509_cert_parse+0x514/0x7a0 [ 179.214989][ T7659] x509_key_preparse+0x64/0x6d0 [ 179.215002][ T7659] ? down_read+0x2b9/0x320 [ 179.215020][ T7659] asymmetric_key_preparse+0xb9/0x1b0 [ 179.215032][ T7659] __key_create_or_update+0x360/0xab0 [ 179.215052][ T7659] ? __pfx___key_create_or_update+0x10/0x10 [ 179.215065][ T7659] ? lookup_user_key+0x112c/0x12c0 [ 179.215086][ T7659] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 179.215099][ T7659] ? __pfx_keyring_search_iterator+0x10/0x10 [ 179.215119][ T7659] key_create_or_update+0x42/0x60 [ 179.215134][ T7659] __se_sys_add_key+0x349/0x420 [ 179.215146][ T7659] ? __pfx___se_sys_add_key+0x10/0x10 [ 179.215161][ T7659] ? __x64_sys_add_key+0x20/0xc0 [ 179.215172][ T7659] do_syscall_64+0x166/0x520 [ 179.215186][ T7659] ? trace_irq_disable+0x3b/0x140 [ 179.215199][ T7659] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.215209][ T7659] ? clear_bhb_loop+0x70/0xc0 [ 179.215221][ T7659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.215231][ T7659] RIP: 0033:0x7f93e2d9f559 [ 179.215241][ T7659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.215250][ T7659] RSP: 002b:00007f93e3d0c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 179.215264][ T7659] RAX: ffffffffffffffda RBX: 00007f93e3025fa0 RCX: 00007f93e2d9f559 [ 179.215271][ T7659] RDX: 0000200000000a80 RSI: 0000000000000000 RDI: 0000200000000a40 [ 179.215278][ T7659] RBP: 00007f93e3d0c090 R08: 000000003e29f97f R09: 0000000000000000 [ 179.215284][ T7659] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000002 [ 179.215291][ T7659] R13: 00007f93e3026038 R14: 00007f93e3025fa0 R15: 00007fff5f2adaa8 [ 179.215308][ T7659] [ 179.457918][ T2252] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 179.503350][ T2252] usb 4-1: device descriptor read/8, error -71 [ 179.608937][ T2252] usb usb4-port1: unable to enumerate USB device [ 179.644456][ T7661] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 180.046833][ T5745] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 180.197225][ T5745] usb 3-1: Using ep0 maxpacket: 16 [ 180.203450][ T5745] usb 3-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 180.204256][ T5745] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 180.204275][ T5745] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 180.205874][ T5745] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.205887][ T5745] usb 3-1: Product: syz [ 180.205894][ T5745] usb 3-1: Manufacturer: syz [ 180.205903][ T5745] usb 3-1: SerialNumber: syz [ 180.276950][ T5745] usb 3-1: config 0 descriptor?? [ 180.284250][ T5745] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 180.284275][ T5745] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 180.382093][ T5632] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 180.385809][ T5632] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 180.386397][ T5632] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 180.401715][ T5632] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 180.409322][ T5632] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 180.684308][ T7671] rxe_eth0 speed is unknown, defaulting to 1000 [ 180.884579][ T5745] em28xx 3-1:0.0: chip ID is em2840 [ 181.070430][ T7671] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.070550][ T7671] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.070803][ T7671] bridge_slave_0: entered allmulticast mode [ 181.071896][ T7671] bridge_slave_0: entered promiscuous mode [ 181.105412][ T7671] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.105735][ T7671] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.106450][ T7671] bridge_slave_1: entered allmulticast mode [ 181.134470][ T7671] bridge_slave_1: entered promiscuous mode [ 181.141917][ T5632] Bluetooth: hci2: unexpected event for opcode 0x0428 [ 181.159575][ T5745] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 181.159967][ T5745] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 181.159990][ T5745] em28xx 3-1:0.0: No AC97 audio processor [ 181.194684][ T5745] usb 3-1: USB disconnect, device number 41 [ 181.208277][ T5745] em28xx 3-1:0.0: Disconnecting em28xx [ 181.234028][ T5745] em28xx: Freeing device [ 181.258814][ T5743] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 181.278840][ T7671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.280983][ T7671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.321309][ T7671] team0: Port device team_slave_0 added [ 181.323041][ T7671] team0: Port device team_slave_1 added [ 181.354446][ T7671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.354460][ T7671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.354473][ T7671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.355716][ T7671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.355725][ T7671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.355738][ T7671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.468605][ T5743] usb 4-1: New USB device found: idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 181.469424][ T5743] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 181.469438][ T5743] usb 4-1: config 0 has no interface number 0 [ 181.469461][ T5743] usb 4-1: config 0 interface 41 has no altsetting 0 [ 181.471022][ T5743] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.471036][ T5743] usb 4-1: Product: syz [ 181.471043][ T5743] usb 4-1: Manufacturer: syz [ 181.471051][ T5743] usb 4-1: SerialNumber: syz [ 181.475686][ T5743] usb 4-1: config 0 descriptor?? [ 181.559558][ T7671] hsr_slave_0: entered promiscuous mode [ 181.560253][ T7671] hsr_slave_1: entered promiscuous mode [ 181.560734][ T7671] debugfs: 'hsr0' already exists in 'hsr' [ 181.560748][ T7671] Cannot create hsr debugfs directory [ 181.860650][ T7671] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 181.874635][ T7671] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 181.884876][ T7671] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 181.895130][ T7671] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 181.909194][ T7671] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 181.912199][ T7671] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 181.914797][ T7671] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 181.943752][ T7671] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 182.103137][ T7671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.134198][ T7671] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.152159][ T3001] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.152231][ T3001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.176452][ T3001] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.176601][ T3001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.292098][ T7706] netlink: 16 bytes leftover after parsing attributes in process `syz.2.644'. [ 182.319757][ T5743] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 182.508136][ T5632] Bluetooth: hci0: command tx timeout [ 182.903613][ T7730] FAULT_INJECTION: forcing a failure. [ 182.903613][ T7730] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.903636][ T7730] CPU: 0 UID: 0 PID: 7730 Comm: syz.1.649 Tainted: G L syzkaller #0 PREEMPT(full) [ 182.903650][ T7730] Tainted: [L]=SOFTLOCKUP [ 182.903654][ T7730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 182.903660][ T7730] Call Trace: [ 182.903665][ T7730] [ 182.903670][ T7730] dump_stack_lvl+0xe8/0x150 [ 182.903691][ T7730] should_fail_ex+0x3eb/0x540 [ 182.903710][ T7730] _copy_from_user+0x2d/0xb0 [ 182.903726][ T7730] kvm_arch_vm_ioctl+0x745/0x1a10 [ 182.903742][ T7730] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 182.903757][ T7730] ? __lock_acquire+0x747/0x2de0 [ 182.903781][ T7730] ? lock_acquire+0x115/0x350 [ 182.903795][ T7730] ? lock_acquire+0x115/0x350 [ 182.903809][ T7730] ? is_bpf_text_address+0x26/0x2b0 [ 182.903827][ T7730] ? is_bpf_text_address+0x292/0x2b0 [ 182.903841][ T7730] ? is_bpf_text_address+0x26/0x2b0 [ 182.903856][ T7730] ? kernel_text_address+0xa5/0xe0 [ 182.903868][ T7730] ? __kernel_text_address+0xd/0x30 [ 182.903879][ T7730] ? unwind_get_return_address+0x4d/0x90 [ 182.903891][ T7730] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 182.903903][ T7730] ? arch_stack_walk+0xfb/0x150 [ 182.903944][ T7730] kvm_vm_ioctl+0x883/0xcb0 [ 182.903960][ T7730] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 182.903981][ T7730] ? kasan_quarantine_put+0xbb/0x1f0 [ 182.903998][ T7730] ? tomoyo_path_number_perm+0x219/0x5f0 [ 182.904012][ T7730] ? tomoyo_path_number_perm+0x219/0x5f0 [ 182.904025][ T7730] ? do_vfs_ioctl+0x116f/0x1530 [ 182.904040][ T7730] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 182.904070][ T7730] ? __fget_files+0x2a/0x420 [ 182.904082][ T7730] ? __fget_files+0x2a/0x420 [ 182.904092][ T7730] ? __fget_files+0x2a/0x420 [ 182.904104][ T7730] ? bpf_lsm_file_ioctl+0x9/0x20 [ 182.904118][ T7730] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 182.904132][ T7730] __se_sys_ioctl+0xfc/0x170 [ 182.904146][ T7730] do_syscall_64+0x166/0x520 [ 182.904160][ T7730] ? trace_irq_disable+0x3b/0x140 [ 182.904172][ T7730] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.904182][ T7730] ? clear_bhb_loop+0x70/0xc0 [ 182.904195][ T7730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.904205][ T7730] RIP: 0033:0x7f93e2d9f559 [ 182.904215][ T7730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.904225][ T7730] RSP: 002b:00007f93e3d0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 182.904236][ T7730] RAX: ffffffffffffffda RBX: 00007f93e3025fa0 RCX: 00007f93e2d9f559 [ 182.904243][ T7730] RDX: 0000200000000900 RSI: 000000004188aec6 RDI: 0000000000000004 [ 182.904250][ T7730] RBP: 00007f93e3d0c090 R08: 0000000000000000 R09: 0000000000000000 [ 182.904256][ T7730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.904262][ T7730] R13: 00007f93e3026038 R14: 00007f93e3025fa0 R15: 00007fff5f2adaa8 [ 182.904286][ T7730] [ 183.264110][ T7671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.486415][ T7671] veth0_vlan: entered promiscuous mode [ 183.501663][ T7671] veth1_vlan: entered promiscuous mode [ 183.518550][ T10] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 183.559497][ T7671] veth0_macvtap: entered promiscuous mode [ 183.564209][ T7671] veth1_macvtap: entered promiscuous mode [ 183.591248][ T7671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.609584][ T7671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.627838][ T46] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.629746][ T89] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.629944][ T89] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.687724][ T89] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.709538][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 183.709591][ T10] usb 3-1: New USB device found: idVendor=2013, idProduct=0248, bcdDevice=ee.04 [ 183.734486][ T10] usb 3-1: config 4 has an invalid interface number: 118 but max is 1 [ 183.734506][ T10] usb 3-1: config 4 has an invalid interface number: 104 but max is 1 [ 183.734516][ T10] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 183.734526][ T10] usb 3-1: config 4 has no interface number 0 [ 183.734535][ T10] usb 3-1: config 4 has no interface number 1 [ 183.734571][ T10] usb 3-1: config 4 interface 118 has no altsetting 0 [ 183.805768][ T10] usb 3-1: New USB device strings: Mfr=213, Product=0, SerialNumber=3 [ 183.805787][ T10] usb 3-1: Manufacturer: syz [ 183.805796][ T10] usb 3-1: SerialNumber: syz [ 183.924069][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.924086][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.002326][ T5743] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 184.002485][ T5743] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 184.033753][ T5743] usb 4-1: USB disconnect, device number 51 [ 184.054392][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.054408][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.158727][ T7743] netlink: 'syz.1.652': attribute type 21 has an invalid length. [ 184.180942][ T10] dvb-usb: found a 'Pinnacle PCTV 282e' in cold state, will try to load a firmware [ 184.181861][ T10] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 184.181885][ T10] dib0700: firmware download failed at 7 with -22 [ 184.223611][ T10] dvb-usb: found a 'Pinnacle PCTV 282e' in cold state, will try to load a firmware [ 184.224477][ T10] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 184.224502][ T10] dib0700: firmware download failed at 7 with -22 [ 184.265041][ T10] usb 3-1: USB disconnect, device number 42 [ 184.586957][ T5632] Bluetooth: hci0: command tx timeout [ 184.686718][ T2252] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 184.836641][ T2252] usb 5-1: Using ep0 maxpacket: 8 [ 184.837252][ T2252] usb 5-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 184.840135][ T2252] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.840149][ T2252] usb 5-1: Product: syz [ 184.840157][ T2252] usb 5-1: Manufacturer: syz [ 184.840164][ T2252] usb 5-1: SerialNumber: syz [ 184.843629][ T2252] usb 5-1: config 0 descriptor?? [ 185.016632][ T10] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 185.018650][ T5743] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 185.076667][ T2252] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 185.149579][ T5743] usb 3-1: device descriptor read/64, error -71 [ 185.167426][ T10] usb 4-1: New USB device found: idVendor=08ca, idProduct=0110, bcdDevice=1.00 [ 185.168278][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.169905][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.169918][ T10] usb 4-1: Product: syz [ 185.169926][ T10] usb 4-1: Manufacturer: syz [ 185.169933][ T10] usb 4-1: SerialNumber: syz [ 185.223125][ T10] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 185.388735][ T5743] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 185.516882][ T5743] usb 3-1: device descriptor read/64, error -71 [ 185.593450][ T7757] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 185.605254][ T7757] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 185.633367][ T5743] usb usb3-port1: attempt power cycle [ 185.666066][ T10] gspca_mr97310a: reg write [21] error -71 [ 185.666139][ T10] mr97310a 4-1:1.0: probe with driver mr97310a failed with error -71 [ 185.699616][ T10] usb 4-1: USB disconnect, device number 52 [ 185.895464][ T2252] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 185.914719][ T2252] usb 5-1: USB disconnect, device number 2 [ 185.966681][ T5743] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 185.987705][ T5743] usb 3-1: device descriptor read/8, error -71 [ 186.226747][ T5743] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 186.248559][ T5743] usb 3-1: device descriptor read/8, error -71 [ 186.358225][ T5743] usb usb3-port1: unable to enumerate USB device [ 186.527030][ T2252] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 186.667476][ T5632] Bluetooth: hci0: command tx timeout [ 186.682828][ T2252] usb 4-1: Using ep0 maxpacket: 16 [ 186.689839][ T2252] usb 4-1: New USB device found: idVendor=1781, idProduct=0898, bcdDevice=0.00 [ 186.702404][ T2252] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.702424][ T2252] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.702436][ T2252] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 186.702460][ T2252] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.705209][ T2252] usb 4-1: config 0 descriptor?? [ 186.767315][ T2252] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input12 [ 186.768882][ T4990] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 186.813516][ T4990] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 186.813785][ T4990] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 186.813960][ T4990] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 186.888943][ T5982] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 186.905099][ T4990] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 186.932029][ T4990] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 186.932432][ T4990] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 186.932698][ T4990] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 186.975456][ T7760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.977043][ T7760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.003207][ T7760] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 187.004559][ T2252] usb 4-1: USB disconnect, device number 53 [ 187.826774][ T5743] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 187.836822][ T2252] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 187.909902][ T7780] FAULT_INJECTION: forcing a failure. [ 187.909902][ T7780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.909924][ T7780] CPU: 0 UID: 0 PID: 7780 Comm: syz.1.667 Tainted: G L syzkaller #0 PREEMPT(full) [ 187.909939][ T7780] Tainted: [L]=SOFTLOCKUP [ 187.909943][ T7780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 187.909950][ T7780] Call Trace: [ 187.909954][ T7780] [ 187.909959][ T7780] dump_stack_lvl+0xe8/0x150 [ 187.909979][ T7780] should_fail_ex+0x3eb/0x540 [ 187.909998][ T7780] _copy_from_user+0x2d/0xb0 [ 187.910014][ T7780] vt_do_kbkeycode_ioctl+0xcf/0x360 [ 187.910033][ T7780] ? __pfx_vt_do_kbkeycode_ioctl+0x10/0x10 [ 187.910094][ T7780] ? tomoyo_path_number_perm+0x219/0x5f0 [ 187.910109][ T7780] ? tomoyo_path_number_perm+0x219/0x5f0 [ 187.910124][ T7780] ? apparmor_capable+0x126/0x170 [ 187.910135][ T7780] ? bpf_lsm_capable+0x9/0x20 [ 187.910149][ T7780] ? security_capable+0x7e/0x2c0 [ 187.910165][ T7780] vt_ioctl+0x10a1/0x20e0 [ 187.910181][ T7780] ? __pfx_vt_ioctl+0x10/0x10 [ 187.910200][ T7780] ? __fget_files+0x2a/0x420 [ 187.910214][ T7780] ? tty_jobctrl_ioctl+0x378/0xba0 [ 187.910226][ T7780] ? __fget_files+0x2a/0x420 [ 187.910243][ T7780] tty_ioctl+0x920/0xde0 [ 187.910259][ T7780] ? __pfx_tty_ioctl+0x10/0x10 [ 187.910274][ T7780] __se_sys_ioctl+0xfc/0x170 [ 187.910290][ T7780] do_syscall_64+0x166/0x520 [ 187.910303][ T7780] ? trace_irq_disable+0x3b/0x140 [ 187.910316][ T7780] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.910326][ T7780] ? clear_bhb_loop+0x70/0xc0 [ 187.910354][ T7780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.910365][ T7780] RIP: 0033:0x7f93e2d9f559 [ 187.910376][ T7780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.910386][ T7780] RSP: 002b:00007f93e3d0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 187.910398][ T7780] RAX: ffffffffffffffda RBX: 00007f93e3025fa0 RCX: 00007f93e2d9f559 [ 187.910405][ T7780] RDX: 0000200000000040 RSI: 0000000000004b4d RDI: 0000000000000003 [ 187.910412][ T7780] RBP: 00007f93e3d0c090 R08: 0000000000000000 R09: 0000000000000000 [ 187.910418][ T7780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.910424][ T7780] R13: 00007f93e3026038 R14: 00007f93e3025fa0 R15: 00007fff5f2adaa8 [ 187.910440][ T7780] [ 188.008397][ T5743] usb 4-1: New USB device found: idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 188.163146][ T2252] usb 5-1: New USB device found: idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 188.203630][ T2252] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 188.203651][ T2252] usb 5-1: config 0 has no interface number 0 [ 188.203675][ T2252] usb 5-1: config 0 interface 41 has no altsetting 0 [ 188.213869][ T5743] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 188.227270][ T5743] usb 4-1: Product: syz [ 188.227283][ T5743] usb 4-1: SerialNumber: syz [ 188.258286][ T2252] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.258307][ T2252] usb 5-1: Product: syz [ 188.258315][ T2252] usb 5-1: Manufacturer: syz [ 188.258322][ T2252] usb 5-1: SerialNumber: syz [ 188.296756][ T5743] usb 4-1: config 0 descriptor?? [ 188.297215][ T2252] usb 5-1: config 0 descriptor?? [ 188.317862][ T10] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 188.480168][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 188.480221][ T10] usb 3-1: New USB device found: idVendor=2013, idProduct=0248, bcdDevice=ee.04 [ 188.481193][ T10] usb 3-1: config 4 has an invalid interface number: 118 but max is 1 [ 188.481212][ T10] usb 3-1: config 4 has an invalid interface number: 104 but max is 1 [ 188.481223][ T10] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 188.481252][ T10] usb 3-1: config 4 has no interface number 0 [ 188.481261][ T10] usb 3-1: config 4 has no interface number 1 [ 188.481282][ T10] usb 3-1: config 4 interface 118 has no altsetting 0 [ 188.482699][ T10] usb 3-1: New USB device strings: Mfr=213, Product=0, SerialNumber=3 [ 188.482712][ T10] usb 3-1: Manufacturer: syz [ 188.482719][ T10] usb 3-1: SerialNumber: syz [ 188.517291][ T5743] hso 4-1:0.0: Failed to find BULK eps [ 188.721950][ T10] dvb-usb: found a 'Pinnacle PCTV 282e' in cold state, will try to load a firmware [ 188.724922][ T10] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 188.724950][ T10] dib0700: firmware download failed at 7 with -22 [ 188.753483][ T5632] Bluetooth: hci0: command tx timeout [ 188.766767][ T10] dvb-usb: found a 'Pinnacle PCTV 282e' in cold state, will try to load a firmware [ 188.778147][ T10] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 188.778175][ T10] dib0700: firmware download failed at 7 with -22 [ 188.783387][ T10] usb 3-1: USB disconnect, device number 47 [ 188.819109][ T196] usb 4-1: USB disconnect, device number 54 [ 189.226465][ T2252] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 189.351605][ T7788] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 189.373077][ T5632] Bluetooth: hci2: ISO packet for unknown connection handle 777 [ 189.677117][ T196] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 189.826649][ T196] usb 4-1: Using ep0 maxpacket: 8 [ 189.827400][ T196] usb 4-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 189.830608][ T196] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.830624][ T196] usb 4-1: Product: syz [ 189.830631][ T196] usb 4-1: Manufacturer: syz [ 189.830639][ T196] usb 4-1: SerialNumber: syz [ 189.832305][ T196] usb 4-1: config 0 descriptor?? [ 189.943995][ T7795] can0: slcan on ttyS3. [ 189.998765][ T7794] can0 (unregistered): slcan off ttyS3. [ 190.048145][ T196] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 190.546637][ T5743] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 190.684361][ T2252] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 190.684535][ T2252] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 190.725450][ T5743] usb 3-1: unable to get BOS descriptor or descriptor too short [ 190.725483][ T5743] usb 3-1: New USB device found: idVendor=2013, idProduct=0248, bcdDevice=ee.04 [ 190.726458][ T5743] usb 3-1: config 4 has an invalid interface number: 118 but max is 1 [ 190.726475][ T5743] usb 3-1: config 4 has an invalid interface number: 104 but max is 1 [ 190.726710][ T5743] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 190.726721][ T5743] usb 3-1: config 4 has no interface number 0 [ 190.726729][ T5743] usb 3-1: config 4 has no interface number 1 [ 190.726750][ T5743] usb 3-1: config 4 interface 118 has no altsetting 0 [ 190.744679][ T2252] usb 5-1: USB disconnect, device number 3 [ 190.816137][ T5743] usb 3-1: New USB device strings: Mfr=213, Product=0, SerialNumber=3 [ 190.816170][ T5743] usb 3-1: Manufacturer: syz [ 190.816178][ T5743] usb 3-1: SerialNumber: syz [ 191.088858][ T5743] dvb-usb: found a 'Pinnacle PCTV 282e' in cold state, will try to load a firmware [ 191.090212][ T5743] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 191.090239][ T5743] dib0700: firmware download failed at 7 with -22 [ 191.128425][ T5743] dvb-usb: found a 'Pinnacle PCTV 282e' in cold state, will try to load a firmware [ 191.131427][ T5743] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 191.131455][ T5743] dib0700: firmware download failed at 7 with -22 [ 191.148080][ T196] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 191.183638][ T5743] usb 3-1: USB disconnect, device number 48 [ 191.326184][ T7837] FAULT_INJECTION: forcing a failure. [ 191.326184][ T7837] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.326212][ T7837] CPU: 0 UID: 0 PID: 7837 Comm: syz.4.679 Tainted: G L syzkaller #0 PREEMPT(full) [ 191.326226][ T7837] Tainted: [L]=SOFTLOCKUP [ 191.326230][ T7837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 191.326237][ T7837] Call Trace: [ 191.326241][ T7837] [ 191.326247][ T7837] dump_stack_lvl+0xe8/0x150 [ 191.326267][ T7837] should_fail_ex+0x3eb/0x540 [ 191.326286][ T7837] _copy_to_user+0x31/0xb0 [ 191.326310][ T7837] simple_read_from_buffer+0xe1/0x170 [ 191.326326][ T7837] proc_fail_nth_read+0x1bb/0x230 [ 191.326343][ T7837] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 191.326358][ T7837] ? rw_verify_area+0x24a/0x4c0 [ 191.326372][ T7837] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 191.326385][ T7837] vfs_read+0x213/0xa80 [ 191.326400][ T7837] ? __pfx___mutex_lock+0x10/0x10 [ 191.326415][ T7837] ? __pfx_vfs_read+0x10/0x10 [ 191.326428][ T7837] ? __fget_files+0x2a/0x420 [ 191.326438][ T7837] ? __fget_files+0x3a2/0x420 [ 191.326448][ T7837] ? __fget_files+0x2a/0x420 [ 191.326460][ T7837] ? fdget+0x1ac/0x250 [ 191.326475][ T7837] ksys_read+0x150/0x270 [ 191.326490][ T7837] ? __pfx_ksys_read+0x10/0x10 [ 191.326508][ T7837] do_syscall_64+0x166/0x520 [ 191.326522][ T7837] ? trace_irq_disable+0x3b/0x140 [ 191.326535][ T7837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.326545][ T7837] ? clear_bhb_loop+0x70/0xc0 [ 191.326557][ T7837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.326567][ T7837] RIP: 0033:0x7f519ff5fd8e [ 191.326578][ T7837] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 191.326587][ T7837] RSP: 002b:00007f51a0ed3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 191.326598][ T7837] RAX: ffffffffffffffda RBX: 00007f51a0ed46c0 RCX: 00007f519ff5fd8e [ 191.326606][ T7837] RDX: 000000000000000f RSI: 00007f51a0ed40a0 RDI: 0000000000000004 [ 191.326612][ T7837] RBP: 00007f51a0ed4090 R08: 0000000000000000 R09: 0000000000000000 [ 191.326618][ T7837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.326624][ T7837] R13: 00007f51a0226038 R14: 00007f51a0225fa0 R15: 00007ffc52c95748 [ 191.326641][ T7837] [ 191.694111][ T7840] netlink: 5 bytes leftover after parsing attributes in process `syz.4.680'. [ 191.694157][ T7840] netlink: 5 bytes leftover after parsing attributes in process `syz.4.680'. [ 191.725458][ T7840] tipc: Started in network mode [ 191.725479][ T7840] tipc: Node identity ac1414aa, cluster identity 4711 [ 191.725625][ T7840] tipc: New replicast peer: 172.20.20.187 [ 191.749575][ T7840] tipc: Enabled bearer , priority 10 [ 191.845525][ T7847] comedi comedi3: pcl724: I/O base address or length out of range [ 191.928617][ T7849] FAULT_INJECTION: forcing a failure. [ 191.928617][ T7849] name failslab, interval 1, probability 0, space 0, times 0 [ 191.928640][ T7849] CPU: 0 UID: 0 PID: 7849 Comm: syz.4.685 Tainted: G L syzkaller #0 PREEMPT(full) [ 191.928655][ T7849] Tainted: [L]=SOFTLOCKUP [ 191.928658][ T7849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 191.928665][ T7849] Call Trace: [ 191.928670][ T7849] [ 191.928676][ T7849] dump_stack_lvl+0xe8/0x150 [ 191.928698][ T7849] should_fail_ex+0x3eb/0x540 [ 191.928717][ T7849] should_failslab+0xa8/0x100 [ 191.928736][ T7849] __kmalloc_noprof+0xf9/0x710 [ 191.928749][ T7849] ? security_inode_init_security+0x102/0x3e0 [ 191.928763][ T7849] ? security_inode_init_security+0x102/0x3e0 [ 191.928781][ T7849] security_inode_init_security+0x102/0x3e0 [ 191.928796][ T7849] ? __pfx_ext4_initxattrs+0x10/0x10 [ 191.928808][ T7849] ? __pfx_security_inode_init_security+0x10/0x10 [ 191.928823][ T7849] ? _raw_spin_unlock+0x28/0x50 [ 191.928835][ T7849] ? insert_inode_locked+0x433/0x4e0 [ 191.928847][ T7849] ? crc32c+0x18a/0x470 [ 191.928863][ T7849] __ext4_new_inode+0x349f/0x3ed0 [ 191.928889][ T7849] ? __pfx___ext4_new_inode+0x10/0x10 [ 191.928905][ T7849] ? d_splice_alias_ops+0x11c/0x440 [ 191.928922][ T7849] ? ext4_lookup+0x302/0x710 [ 191.928936][ T7849] ext4_create+0x237/0x480 [ 191.928955][ T7849] ? __pfx_ext4_create+0x10/0x10 [ 191.928971][ T7849] ? bpf_lsm_inode_create+0x9/0x20 [ 191.928984][ T7849] ? security_inode_create+0xc3/0x340 [ 191.929000][ T7849] lookup_open+0xedc/0x1970 [ 191.929028][ T7849] path_openat+0x70c/0x20f0 [ 191.929051][ T7849] do_file_open+0x23e/0x4a0 [ 191.929067][ T7849] ? __pfx_do_file_open+0x10/0x10 [ 191.929091][ T7849] ? _raw_spin_unlock+0x28/0x50 [ 191.929102][ T7849] ? alloc_fd+0x6af/0x760 [ 191.929118][ T7849] do_sys_openat2+0x115/0x200 [ 191.929129][ T7849] ? __pfx_do_sys_openat2+0x10/0x10 [ 191.929139][ T7849] ? ksys_write+0x242/0x270 [ 191.929153][ T7849] ? __pfx_ksys_write+0x10/0x10 [ 191.929167][ T7849] __x64_sys_open+0x11e/0x150 [ 191.929179][ T7849] do_syscall_64+0x166/0x520 [ 191.929193][ T7849] ? trace_irq_disable+0x3b/0x140 [ 191.929205][ T7849] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.929215][ T7849] ? clear_bhb_loop+0x70/0xc0 [ 191.929235][ T7849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.929245][ T7849] RIP: 0033:0x7f519ff9f559 [ 191.929256][ T7849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.929265][ T7849] RSP: 002b:00007f51a0ed4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 191.929277][ T7849] RAX: ffffffffffffffda RBX: 00007f51a0225fa0 RCX: 00007f519ff9f559 [ 191.929284][ T7849] RDX: 0000000000000010 RSI: 00000000001c527e RDI: 0000200000000040 [ 191.929291][ T7849] RBP: 00007f51a0ed4090 R08: 0000000000000000 R09: 0000000000000000 [ 191.929297][ T7849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 191.929303][ T7849] R13: 00007f51a0226038 R14: 00007f51a0225fa0 R15: 00007ffc52c95748 [ 191.929321][ T7849] [ 192.140267][ T196] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 192.356802][ T196] usb 3-1: Using ep0 maxpacket: 8 [ 192.358622][ T196] usb 3-1: New USB device found: idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 192.359442][ T196] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 192.359461][ T196] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 192.359472][ T196] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 192.359484][ T196] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 173 [ 192.359503][ T196] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.365791][ T196] usb 3-1: config 0 descriptor?? [ 192.366405][ T7845] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 192.532833][ T196] usb 4-1: USB disconnect, device number 55 [ 192.595307][ C0] Bluetooth: hci4: Unexpected continuation: 1 bytes [ 192.798041][ T5632] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 192.798912][ T10] usb 3-1: USB disconnect, device number 49 [ 192.845001][ T2252] tipc: Node number set to 2886997162 [ 192.877849][ T5743] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 192.946679][ T196] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 193.026643][ T5743] usb 5-1: Using ep0 maxpacket: 8 [ 193.027425][ T5743] usb 5-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 193.030212][ T5743] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.030228][ T5743] usb 5-1: Product: syz [ 193.030235][ T5743] usb 5-1: Manufacturer: syz [ 193.030242][ T5743] usb 5-1: SerialNumber: syz [ 193.041979][ T5743] usb 5-1: config 0 descriptor?? [ 193.071013][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.071074][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.117495][ T196] usb 4-1: New USB device found: idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 193.118502][ T196] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 193.118517][ T196] usb 4-1: config 0 has no interface number 0 [ 193.118542][ T196] usb 4-1: config 0 interface 41 has no altsetting 0 [ 193.120397][ T196] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.120411][ T196] usb 4-1: Product: syz [ 193.120418][ T196] usb 4-1: Manufacturer: syz [ 193.120426][ T196] usb 4-1: SerialNumber: syz [ 193.123807][ T196] usb 4-1: config 0 descriptor?? [ 193.310508][ T5743] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 193.716827][ T2252] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 193.869724][ T2252] usb 3-1: unable to get BOS descriptor or descriptor too short [ 193.869761][ T2252] usb 3-1: New USB device found: idVendor=2013, idProduct=0248, bcdDevice=ee.04 [ 193.870721][ T2252] usb 3-1: config 4 has an invalid interface number: 118 but max is 1 [ 193.870735][ T2252] usb 3-1: config 4 has an invalid interface number: 104 but max is 1 [ 193.870745][ T2252] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 193.870755][ T2252] usb 3-1: config 4 has no interface number 0 [ 193.870787][ T2252] usb 3-1: config 4 has no interface number 1 [ 193.870808][ T2252] usb 3-1: config 4 interface 118 has no altsetting 0 [ 193.872219][ T2252] usb 3-1: New USB device strings: Mfr=213, Product=0, SerialNumber=3 [ 193.872233][ T2252] usb 3-1: Manufacturer: syz [ 193.872240][ T2252] usb 3-1: SerialNumber: syz [ 193.971808][ T196] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 194.155100][ T2252] dvb-usb: found a 'Pinnacle PCTV 282e' in cold state, will try to load a firmware [ 194.156396][ T2252] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 194.156425][ T2252] dib0700: firmware download failed at 7 with -22 [ 194.185340][ T5743] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 194.207055][ T5743] usb 5-1: USB disconnect, device number 4 [ 194.216431][ T2252] dvb-usb: found a 'Pinnacle PCTV 282e' in cold state, will try to load a firmware [ 194.219126][ T2252] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 194.219153][ T2252] dib0700: firmware download failed at 7 with -22 [ 194.261429][ T2252] usb 3-1: USB disconnect, device number 50 [ 194.902052][ T7879] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.997031][ T5743] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 195.001636][ T7885] FAULT_INJECTION: forcing a failure. [ 195.001636][ T7885] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.001659][ T7885] CPU: 0 UID: 0 PID: 7885 Comm: syz.4.698 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.001673][ T7885] Tainted: [L]=SOFTLOCKUP [ 195.001677][ T7885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 195.001684][ T7885] Call Trace: [ 195.001688][ T7885] [ 195.001693][ T7885] dump_stack_lvl+0xe8/0x150 [ 195.001715][ T7885] should_fail_ex+0x3eb/0x540 [ 195.001733][ T7885] _copy_to_user+0x31/0xb0 [ 195.001750][ T7885] simple_read_from_buffer+0xe1/0x170 [ 195.001764][ T7885] proc_fail_nth_read+0x1bb/0x230 [ 195.001782][ T7885] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 195.001797][ T7885] ? rw_verify_area+0x24a/0x4c0 [ 195.001811][ T7885] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 195.001825][ T7885] vfs_read+0x213/0xa80 [ 195.001839][ T7885] ? __pfx___mutex_lock+0x10/0x10 [ 195.001855][ T7885] ? __pfx_vfs_read+0x10/0x10 [ 195.001867][ T7885] ? __fget_files+0x2a/0x420 [ 195.001877][ T7885] ? __fget_files+0x3a2/0x420 [ 195.001887][ T7885] ? __fget_files+0x2a/0x420 [ 195.001900][ T7885] ? fdget+0x1ac/0x250 [ 195.001914][ T7885] ksys_read+0x150/0x270 [ 195.001927][ T7885] ? __pfx_ksys_read+0x10/0x10 [ 195.001945][ T7885] do_syscall_64+0x166/0x520 [ 195.001959][ T7885] ? trace_irq_disable+0x3b/0x140 [ 195.001971][ T7885] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.001981][ T7885] ? clear_bhb_loop+0x70/0xc0 [ 195.001994][ T7885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.002004][ T7885] RIP: 0033:0x7f519ff5fd8e [ 195.002014][ T7885] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 195.002022][ T7885] RSP: 002b:00007f51a0ed3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 195.002034][ T7885] RAX: ffffffffffffffda RBX: 00007f51a0ed46c0 RCX: 00007f519ff5fd8e [ 195.002042][ T7885] RDX: 000000000000000f RSI: 00007f51a0ed40a0 RDI: 0000000000000004 [ 195.002048][ T7885] RBP: 00007f51a0ed4090 R08: 0000000000000000 R09: 0000000000000000 [ 195.002054][ T7885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.002060][ T7885] R13: 00007f51a0226038 R14: 00007f51a0225fa0 R15: 00007ffc52c95748 [ 195.002077][ T7885] [ 195.177333][ T5743] usb 3-1: Using ep0 maxpacket: 32 [ 195.276834][ T5743] usb 3-1: unable to get BOS descriptor or descriptor too short [ 195.276870][ T5743] usb 3-1: New USB device found: idVendor=2b53, idProduct=0023, bcdDevice=0.40 [ 195.277797][ T5743] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 195.277852][ T5743] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 195.279506][ T5743] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.279519][ T5743] usb 3-1: Product: syz [ 195.279526][ T5743] usb 3-1: Manufacturer: syz [ 195.279534][ T5743] usb 3-1: SerialNumber: syz [ 195.532960][ T7873] netlink: 'syz.2.694': attribute type 39 has an invalid length. [ 195.556978][ T2252] syzkaller1: tun_net_xmit 90 [ 195.562342][ T196] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 195.562502][ T196] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 195.596338][ T196] usb 4-1: USB disconnect, device number 56 [ 195.660513][ T5705] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 195.750982][ T5743] usb 3-1: USB disconnect, device number 51 [ 195.840995][ T5705] usb 5-1: unable to get BOS descriptor or descriptor too short [ 195.841028][ T5705] usb 5-1: New USB device found: idVendor=2013, idProduct=0248, bcdDevice=ee.04 [ 195.842959][ T5705] usb 5-1: config 4 has an invalid interface number: 118 but max is 1 [ 195.842975][ T5705] usb 5-1: config 4 has an invalid interface number: 104 but max is 1 [ 195.842985][ T5705] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 195.842996][ T5705] usb 5-1: config 4 has no interface number 0 [ 195.843004][ T5705] usb 5-1: config 4 has no interface number 1 [ 195.843026][ T5705] usb 5-1: config 4 interface 118 has no altsetting 0 [ 195.844948][ T5705] usb 5-1: New USB device strings: Mfr=213, Product=0, SerialNumber=3 [ 195.844962][ T5705] usb 5-1: Manufacturer: syz [ 195.844970][ T5705] usb 5-1: SerialNumber: syz [ 195.952215][ T7893] udevd[7893]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 196.196038][ T5705] dvb-usb: found a 'Pinnacle PCTV 282e' in cold state, will try to load a firmware [ 196.210152][ T5705] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 196.210180][ T5705] dib0700: firmware download failed at 7 with -22 [ 196.236781][ T5705] dvb-usb: found a 'Pinnacle PCTV 282e' in cold state, will try to load a firmware [ 196.243524][ T5705] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 196.243552][ T5705] dib0700: firmware download failed at 7 with -22 [ 196.282168][ T5705] usb 5-1: USB disconnect, device number 5 [ 196.616615][ T5743] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 196.740387][ T7907] netlink: 5 bytes leftover after parsing attributes in process `syz.4.706'. [ 196.740429][ T7907] netlink: 5 bytes leftover after parsing attributes in process `syz.4.706'. [ 196.741794][ T7907] tipc: Enabling of bearer rejected, already enabled [ 196.768080][ T10] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 196.796598][ T5743] usb 3-1: Using ep0 maxpacket: 8 [ 196.798482][ T5743] usb 3-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 196.801522][ T5743] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.801539][ T5743] usb 3-1: Product: syz [ 196.801546][ T5743] usb 3-1: Manufacturer: syz [ 196.801553][ T5743] usb 3-1: SerialNumber: syz [ 196.805788][ T5743] usb 3-1: config 0 descriptor?? [ 196.937580][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 196.937603][ T10] usb 4-1: New USB device found: idVendor=046d, idProduct=0825, bcdDevice=1.00 [ 196.938551][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 196.938584][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.996422][ T10] uvcvideo 4-1:1.0: Found UVC 1.00 device (046d:0825) [ 196.996906][ T10] uvcvideo 4-1:1.0: No streaming interface found for terminal 32770. [ 197.065819][ T5743] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 197.157635][ T10] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 197.160550][ T2252] usb 4-1: USB disconnect, device number 57 [ 197.309760][ T10] usb 5-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 197.310574][ T10] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 197.310602][ T10] usb 5-1: config 0 has no interface number 0 [ 197.310625][ T10] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 197.310638][ T10] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 197.310660][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.314527][ T10] usb 5-1: config 0 descriptor?? [ 197.315128][ T7909] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 197.396872][ T10] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 197.535025][ T10] usb 5-1: USB disconnect, device number 6 [ 197.549587][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 197.550043][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 197.550251][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 197.550463][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 197.550676][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 197.550917][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 197.551121][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 197.551317][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 197.551513][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 197.551748][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 200.860340][ T5743] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 202.556533][ C0] net_ratelimit: 24498 callbacks suppressed [ 202.556550][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 202.556761][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 202.556954][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 202.557152][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 202.557345][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 202.557537][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 202.557729][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 202.557921][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 202.558117][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 202.558309][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 202.638803][ T5632] Bluetooth: hci1: command 0x0406 tx timeout [ 202.638835][ T5632] Bluetooth: hci2: command 0x0406 tx timeout [ 207.566945][ C0] net_ratelimit: 23403 callbacks suppressed [ 207.566962][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 207.567161][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.567389][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:5b:1a:ce:0f:e2, vlan:0) [ 207.567581][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.568232][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 207.568430][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.568662][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:5b:1a:ce:0f:e2, vlan:0) [ 207.568858][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.569491][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 207.569682][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.576524][ C0] net_ratelimit: 15017 callbacks suppressed [ 212.576542][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.577166][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 212.577358][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.577578][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:5b:1a:ce:0f:e2, vlan:0) [ 212.577776][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.578427][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 212.578618][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.578845][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:5b:1a:ce:0f:e2, vlan:0) [ 212.579035][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.579642][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 217.586621][ C0] net_ratelimit: 15176 callbacks suppressed [ 217.586638][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.586924][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:5b:1a:ce:0f:e2, vlan:0) [ 217.587136][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.587792][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 217.587996][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.588266][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:5b:1a:ce:0f:e2, vlan:0) [ 217.588476][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.589339][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 217.589571][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.589814][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:5b:1a:ce:0f:e2, vlan:0) [ 219.496521][ C0] sched: DL replenish lagged too much [ 222.596685][ C0] net_ratelimit: 16353 callbacks suppressed [ 222.596702][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 222.596893][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.597134][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:5b:1a:ce:0f:e2, vlan:0) [ 222.597322][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.597930][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 222.598119][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.598358][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:5b:1a:ce:0f:e2, vlan:0) [ 222.598553][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.599175][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 222.599364][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.606643][ C0] net_ratelimit: 16569 callbacks suppressed [ 227.606661][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.607257][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 227.607451][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.607666][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:5b:1a:ce:0f:e2, vlan:0) [ 227.607853][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.608503][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 227.608695][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.608913][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:5b:1a:ce:0f:e2, vlan:0) [ 227.609120][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.609757][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 232.616753][ C0] net_ratelimit: 16883 callbacks suppressed [ 232.616770][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 232.616956][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.617168][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:5b:1a:ce:0f:e2, vlan:0) [ 232.617359][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.617963][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 232.618216][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.618436][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:5b:1a:ce:0f:e2, vlan:0) [ 232.618619][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.619228][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 232.619417][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.626511][ C0] net_ratelimit: 16900 callbacks suppressed [ 237.626529][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:5b:1a:ce:0f:e2, vlan:0) [ 237.626751][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.627383][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 237.627567][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.627784][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:5b:1a:ce:0f:e2, vlan:0) [ 237.627967][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.628548][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 237.628760][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.628972][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:5b:1a:ce:0f:e2, vlan:0) [ 237.629596][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.637454][ C0] net_ratelimit: 16656 callbacks suppressed [ 242.637472][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 242.637668][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.637884][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:5b:1a:ce:0f:e2, vlan:0) [ 242.638077][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.638695][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 242.638883][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.639104][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:5b:1a:ce:0f:e2, vlan:0) [ 242.639295][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.639929][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 242.640124][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.646518][ C0] net_ratelimit: 16592 callbacks suppressed [ 247.646536][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:5b:1a:ce:0f:e2, vlan:0) [ 247.646732][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.647347][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 247.647534][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.647755][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:5b:1a:ce:0f:e2, vlan:0) [ 247.647940][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.648531][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 247.648745][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.649550][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:5b:1a:ce:0f:e2, vlan:0) [ 247.649750][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.656580][ C0] net_ratelimit: 16747 callbacks suppressed [ 252.656598][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.657215][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 252.657411][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.657622][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:5b:1a:ce:0f:e2, vlan:0) [ 252.657807][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.658424][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 252.658607][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.658818][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:5b:1a:ce:0f:e2, vlan:0) [ 252.659007][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.659608][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 257.666660][ C0] net_ratelimit: 16944 callbacks suppressed [ 257.666677][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.666894][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:5b:1a:ce:0f:e2, vlan:0) [ 257.667102][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.667721][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 257.667905][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.668117][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:5b:1a:ce:0f:e2, vlan:0) [ 257.668301][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.668892][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 257.669075][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.669286][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:5b:1a:ce:0f:e2, vlan:0) [ 262.676585][ C0] net_ratelimit: 16612 callbacks suppressed [ 262.676602][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.677234][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 262.677444][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.677658][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:5b:1a:ce:0f:e2, vlan:0) [ 262.677851][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.678450][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 262.678637][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.678878][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:5b:1a:ce:0f:e2, vlan:0) [ 262.679073][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.679720][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 267.686519][ C0] net_ratelimit: 16480 callbacks suppressed [ 267.686538][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.686759][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:5b:1a:ce:0f:e2, vlan:0) [ 267.686946][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.687548][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 267.687735][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.687949][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:5b:1a:ce:0f:e2, vlan:0) [ 267.688158][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.688824][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 267.689018][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.689249][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:5b:1a:ce:0f:e2, vlan:0) [ 272.696620][ C0] net_ratelimit: 16622 callbacks suppressed [ 272.696636][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.696860][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:5b:1a:ce:0f:e2, vlan:0) [ 272.697051][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.697711][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 272.697898][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.698112][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:5b:1a:ce:0f:e2, vlan:0) [ 272.698300][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.698933][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 272.699120][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.699334][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:5b:1a:ce:0f:e2, vlan:0) [ 277.706502][ C0] net_ratelimit: 16879 callbacks suppressed [ 277.706519][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:5b:1a:ce:0f:e2, vlan:0) [ 277.706712][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.707325][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 277.707509][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.707731][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:5b:1a:ce:0f:e2, vlan:0) [ 277.707916][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.708503][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 277.708687][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.708898][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:5b:1a:ce:0f:e2, vlan:0) [ 277.709094][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.716561][ C0] net_ratelimit: 16791 callbacks suppressed [ 282.716578][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.717185][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 282.717382][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.717616][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:5b:1a:ce:0f:e2, vlan:0) [ 282.717807][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.718415][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 282.718642][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.718862][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:5b:1a:ce:0f:e2, vlan:0) [ 282.719068][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.719690][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 287.726735][ C0] net_ratelimit: 16527 callbacks suppressed [ 287.726751][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 287.726941][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.727156][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:5b:1a:ce:0f:e2, vlan:0) [ 287.727342][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.728027][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 287.728216][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.728430][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:5b:1a:ce:0f:e2, vlan:0) [ 287.728616][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.729234][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 287.729420][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.736961][ C0] net_ratelimit: 16770 callbacks suppressed [ 292.736978][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 292.737172][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.737400][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:5b:1a:ce:0f:e2, vlan:0) [ 292.737584][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.738186][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 292.738370][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.738601][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:5b:1a:ce:0f:e2, vlan:0) [ 292.738786][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.739403][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 292.739586][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.747021][ C0] net_ratelimit: 16954 callbacks suppressed [ 297.747038][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 297.747224][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.747463][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:5b:1a:ce:0f:e2, vlan:0) [ 297.747680][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.748311][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 297.748501][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.748712][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:5b:1a:ce:0f:e2, vlan:0) [ 297.748895][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.749480][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 297.749663][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.756973][ C0] net_ratelimit: 16802 callbacks suppressed [ 302.756990][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 302.757177][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.757389][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:5b:1a:ce:0f:e2, vlan:0) [ 302.757572][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.758180][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 302.758384][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.758595][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:5b:1a:ce:0f:e2, vlan:0) [ 302.758782][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.759427][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 302.759613][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.026468][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 309.221633][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7908/1:b..l.. [ 309.230682][ C0] rcu: (detected by 0, t=10502 jiffies, g=38529, q=1760 ncpus=1) [ 309.238481][ C0] task:syz.4.707 state:R running task stack:25608 pid:7908 tgid:7908 ppid:7671 task_flags:0x40044c flags:0x00080002 [ 309.251965][ C0] Call Trace: [ 309.255229][ C0] [ 309.258146][ C0] __schedule+0x17dd/0x5830 [ 309.262645][ C0] ? __lock_acquire+0x747/0x2de0 [ 309.267566][ C0] ? __lock_acquire+0x747/0x2de0 [ 309.272486][ C0] ? __pfx___schedule+0x10/0x10 [ 309.277322][ C0] ? __lock_acquire+0x747/0x2de0 [ 309.282246][ C0] preempt_schedule_irq+0x4b/0x90 [ 309.287253][ C0] irqentry_exit+0x14f/0x9b0 [ 309.291823][ C0] ? trace_irq_disable+0x3b/0x140 [ 309.296828][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 309.302787][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 309.308070][ C0] Code: ff ff ff e8 a0 a3 74 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 a2 4d 46 13 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 bf b6 77 0a cc 48 8d 3d 57 ab 1f [ 309.327656][ C0] RSP: 0018:ffffc90002647400 EFLAGS: 00000296 [ 309.333704][ C0] RAX: c332cd24cc8fd200 RBX: 0000000000000000 RCX: 0000000000000046 [ 309.341670][ C0] RDX: 00000000c719f98b RSI: ffffffff8ea7a962 RDI: ffffffff8c8ff980 [ 309.349624][ C0] RBP: ffff888033388000 R08: ffffffff8178a98f R09: 0000000000000000 [ 309.357591][ C0] R10: ffffc90002647538 R11: ffffffff81b3dda0 R12: ffffffff9015a420 [ 309.365545][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 309.373497][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 309.379631][ C0] ? unwind_next_frame+0x8f/0x2550 [ 309.384731][ C0] ? do_exit+0x688/0x2360 [ 309.389039][ C0] ? unwind_next_frame+0x8f/0x2550 [ 309.394135][ C0] unwind_next_frame+0xac/0x2550 [ 309.399062][ C0] ? unwind_next_frame+0x8f/0x2550 [ 309.404183][ C0] ? taskstats_exit+0x19e/0xe10 [ 309.409034][ C0] ? unwind_next_frame+0x8f/0x2550 [ 309.414143][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 309.420292][ C0] arch_stack_walk+0x11b/0x150 [ 309.425066][ C0] ? do_exit+0x688/0x2360 [ 309.429406][ C0] stack_trace_save+0xa9/0x100 [ 309.434152][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 309.439502][ C0] ? __lock_acquire+0x747/0x2de0 [ 309.444452][ C0] save_stack+0x122/0x230 [ 309.448768][ C0] ? __pfx_save_stack+0x10/0x10 [ 309.453619][ C0] ? lock_acquire+0x115/0x350 [ 309.458296][ C0] ? __free_frozen_pages+0xc97/0xd90 [ 309.463561][ C0] ? __slab_free+0x269/0x2c0 [ 309.468130][ C0] ? qlist_free_all+0x99/0x100 [ 309.472875][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 309.478494][ C0] ? __kasan_slab_alloc+0x22/0x80 [ 309.483501][ C0] ? kmem_cache_alloc_noprof+0x2b4/0x600 [ 309.489110][ C0] ? taskstats_exit+0x19e/0xe10 [ 309.493961][ C0] ? do_exit+0x688/0x2360 [ 309.498281][ C0] __reset_page_owner+0x73/0x2a0 [ 309.503200][ C0] __free_frozen_pages+0xc97/0xd90 [ 309.508296][ C0] __slab_free+0x269/0x2c0 [ 309.512697][ C0] ? qlist_free_all+0x8e/0x100 [ 309.517462][ C0] qlist_free_all+0x99/0x100 [ 309.522048][ C0] ? taskstats_exit+0x19e/0xe10 [ 309.526891][ C0] ? kmem_cache_alloc_noprof+0x151/0x600 [ 309.532532][ C0] kasan_quarantine_reduce+0x148/0x160 [ 309.538048][ C0] __kasan_slab_alloc+0x22/0x80 [ 309.542945][ C0] kmem_cache_alloc_noprof+0x2b4/0x600 [ 309.548424][ C0] ? taskstats_exit+0x19e/0xe10 [ 309.553261][ C0] ? kmem_cache_alloc_noprof+0x151/0x600 [ 309.558882][ C0] ? taskstats_exit+0x19e/0xe10 [ 309.563717][ C0] taskstats_exit+0x19e/0xe10 [ 309.568377][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 309.573741][ C0] ? __pfx_taskstats_exit+0x10/0x10 [ 309.578921][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 309.584101][ C0] do_exit+0x688/0x2360 [ 309.588250][ C0] ? __pfx_do_exit+0x10/0x10 [ 309.592826][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 309.597862][ C0] do_group_exit+0x22d/0x2f0 [ 309.602438][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 309.607617][ C0] get_signal+0x136a/0x1430 [ 309.612116][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 309.617647][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 309.622836][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 309.628971][ C0] ? __se_sys_clock_nanosleep+0x35b/0x3b0 [ 309.634670][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 309.640024][ C0] ? rcu_is_watching+0x16/0xb0 [ 309.644771][ C0] do_syscall_64+0x328/0x520 [ 309.649345][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.655403][ C0] ? clear_bhb_loop+0x70/0xc0 [ 309.660084][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.665973][ C0] RIP: 0033:0x7f519ff5fd8e [ 309.670375][ C0] RSP: 002b:00007ffc52c95828 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 309.678785][ C0] RAX: 0000000000000000 RBX: 000055556f02e500 RCX: 00007f519ff5fd8e [ 309.686740][ C0] RDX: 00007ffc52c95880 RSI: 0000000000000000 RDI: 0000000000000000 [ 309.694692][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 309.702640][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc52c959d0 [ 309.710600][ C0] R13: 00007f51a0225fac R14: 00000000000303aa R15: 00007f51a0225fa0 [ 309.718576][ C0]