last executing test programs: 19.29423716s ago: executing program 3 (id=2042): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="1f003300d03f0000080211000001080211000000505050505050"], 0x3c}, 0x1, 0x0, 0x0, 0x40054}, 0x10) 19.055760453s ago: executing program 3 (id=2044): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x20, r1, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x4008800) 18.902373982s ago: executing program 3 (id=2047): sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x8) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40106f52, &(0x7f0000000040)={0x32, &(0x7f0000000100)}) 18.701990315s ago: executing program 3 (id=2051): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback, 0x8}, 0x1c) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1, 0xd9d66f70c72f68b7) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0xc000) close(0xffffffffffffffff) sendto$inet6(r0, &(0x7f00000004c0)='s', 0x1, 0x20004084, 0x0, 0x0) close(0x3) 18.036675134s ago: executing program 3 (id=2058): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) ioctl$KVM_GET_TSC_KHZ_vm(r0, 0xaea3) 17.9232915s ago: executing program 3 (id=2060): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x8, 0x6, 0x6}, 0x65}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) socket$unix(0x1, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000740)=@xdp={0x2c, 0x0, 0x0, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dc0f14000e00113c0ff000000024ff880000000200000003125ce882cbf490d908f1523f000000002d9c", 0x2e}], 0x1}, 0x8bb3a321efc09a) 17.151925197s ago: executing program 0 (id=2078): r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}]}}) 17.055437829s ago: executing program 0 (id=2080): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x8) 16.903856977s ago: executing program 0 (id=2082): r0 = syz_open_dev$loop(0x0, 0x47ffffa, 0x1a6c42) ioctl$LOOP_SET_STATUS(r0, 0x125f, 0x0) 16.646978186s ago: executing program 0 (id=2084): openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x5, 0x980900, 0x1}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x3, 0x10980901, 0x1}) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80d40, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={&(0x7f0000000040), 0x0, 0x80000, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000000)=0xffb) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000001180)={{0x6, 0x2, 0x7fff, 0xfc, 'syz1\x00', 0xfffffeff}, 0x0, [0x6ba74c59, 0x85, 0x12, 0x1, 0x1000000009, 0x6, 0x7, 0xdb, 0x0, 0xf0, 0x3, 0x5, 0x8001, 0xfffffffffffffffb, 0x6, 0x2938, 0x100, 0xfffffffffffffff8, 0xfffffffffffffff9, 0xfffffffffffffffc, 0x5, 0x9025, 0x5, 0x5, 0x7, 0x100000001, 0x40, 0x9, 0x9, 0x100000005, 0x100, 0x9, 0xb, 0x1a7427cb, 0x7, 0x8, 0x7, 0x6, 0x5, 0x10001, 0xffffffff, 0xffffffffffffff3d, 0x800, 0x5, 0xe4e, 0x9, 0x6, 0xa8, 0x659, 0xc2, 0xfff, 0x2, 0xffff, 0xffffffffffffff53, 0x0, 0x101, 0x7f, 0x100000000004, 0x7, 0x10, 0x2, 0x40d1c, 0x0, 0x9, 0x8001, 0x0, 0x1, 0x6, 0x4, 0x4, 0x4, 0x1, 0x9, 0xe3, 0xfa0, 0x9, 0xffffffffffffbffd, 0x401, 0x8, 0x7fffffffffffffff, 0x9, 0xffffffffffffff2f, 0xe, 0x4, 0x4040000, 0xffffffff, 0x1, 0x2, 0x5, 0x1ff, 0xa46, 0xfff7fffffffffb27, 0x100, 0x5, 0x7, 0x5, 0x3, 0xfffffffffffffff9, 0x6, 0x5, 0x3, 0x9, 0x9, 0x800027ee, 0x0, 0x0, 0x0, 0x4, 0x101, 0x8, 0x6, 0x8000000000000001, 0x4, 0x3, 0x1, 0x4, 0x8001, 0x3, 0x9, 0x87, 0x80, 0x3, 0x2, 0x2c, 0xa, 0x1, 0x1, 0x8]}) epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000380)={0x40000000}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000400)={0x0, 0x0, r3, 0x0, 0x0, 0x0, &(0x7f0000000340)}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 16.215894678s ago: executing program 0 (id=2088): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f0000000200)='9', 0x1, 0x0, 0x0, 0x0) 16.115778061s ago: executing program 0 (id=2091): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 14.414447447s ago: executing program 4 (id=2102): syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="1201000300000020b804020500000000000000000000000100807f0904000000637b9707010000090501020000"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) renameat(r3, &(0x7f0000000180)='./file0\x00', r3, &(0x7f00000001c0)='\x00') close(r3) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r6 = accept4(r4, 0x0, 0x0, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r5, 0xc0286687, &(0x7f00000000c0)={0x1, 0x6, 0xe2, &(0x7f0000000500)=""/226}) sendto(r6, &(0x7f0000000200)='9', 0x1, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004400)=""/211, 0xd3}}, {{0x0, 0x0, &(0x7f0000004600), 0x2}}, {{0x0, 0x0, &(0x7f0000005c40)=[{0x0, 0x7}], 0x1}}], 0x3, 0x0, &(0x7f0000005ec0)={0x0, 0x3938700}) 10.895538474s ago: executing program 4 (id=2124): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x30, 0x0, 0x1, 0x70bd2d, 0x25dfdc00, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "beb6f40baf55590538c48f0c5c"}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000801}, 0x20044080) 10.762800789s ago: executing program 4 (id=2127): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) sched_setscheduler(0x0, 0x1, 0x0) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000040)={0x32, &(0x7f0000000100)}) 10.641318397s ago: executing program 4 (id=2129): openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8000) r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}) io_uring_enter(r1, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x35c, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 8.122236128s ago: executing program 4 (id=2141): io_uring_setup(0x1d4c, &(0x7f0000000340)={0x0, 0x64b13e, 0x0, 0x4, 0x18e}) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_procfs(0x0, &(0x7f0000001380)) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x19040) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r1, 0x2285, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) 6.763456458s ago: executing program 1 (id=2155): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0, 0xc6}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) tgkill(0x0, r0, 0x27) fanotify_init(0x200, 0x0) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x40187013, &(0x7f0000000680)) pipe2$9p(0x0, 0x84880) r3 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x2) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000080)={"5381d6dc", 0x2, 0x6, 0x1, 0x400, 0x7, "9ad7f18bee5970ebb85649ef55e24c", "1012e304", "6ef1fee9", "a88bb21f", ["5c294bd54bdbcc454ec4fe2a", "1e823e1929dad85f7c58b964", "0cefddcd3a6e078d00c07b4e", "faf2b69f1b22666ad990e013"]}) ioctl$CEC_TRANSMIT(r3, 0xc0386105, &(0x7f0000000840)={0x3, 0x3, 0x9, 0x6, 0xf1e, 0x6, "991deb753abfea8f408844d477546aef", 0x2, 0x36, 0xe2, 0x7, 0xc, 0xad, 0xee}) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000480)={'\x00', 0x0, 0x5, 0x0, 0x2, 0x9, '\x00', "249e4502", "9e068dd9", '\x00', ["fdffcf89171100bb08844f10", "d78cb8b0ff00000000fc00", "0000effffffff700c00500", "000000000000000400"]}) r4 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r5, 0x6, 0x1a, 0x0, &(0x7f00000001c0)) syz_open_dev$loop(&(0x7f0000000040), 0x100000000000000, 0x140) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000180)) 5.649341448s ago: executing program 1 (id=2161): openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/oss_mixer\x00', 0x286002, 0x0) socket$isdn_base(0x22, 0x3, 0x0) r0 = syz_clone(0x20000000, 0x0, 0xf, 0x0, 0x0, 0x0) ptrace(0x10, r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x27) syz_usb_connect$hid(0x6, 0x5d, 0x0, 0x0) r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000300)={'pcl711\x00', [0x2f00, 0x5, 0xd09a, 0x1002, 0x1, 0xfffffffe, 0x20000004, 0x6, 0xffe, 0x9, 0x10, 0x3, 0x4, 0xaba5, 0xffff, 0x100006, 0x5, 0x8, 0x830, 0x40, 0x10000, 0xa, 0x800, 0xe2df, 0x2, 0x0, 0xdf, 0xb, 0x4, 0x5, 0x800]}) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000000)={0x4000000, 0xf, &(0x7f0000000080)=[0x3, 0xfff, 0xc, 0xb, 0x660, 0xfffffff9, 0xe0, 0xfffffff7, 0x9, 0xf5, 0xffffffff, 0x2, 0x0, 0x4, 0x6], 0x0, 0x4}) chdir(0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x240141, 0x0) creat(0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getsockopt(r2, 0x2007, 0xcb28, &(0x7f00000003c0)=""/102387, &(0x7f00000000c0)=0x18ff3) 5.255580978s ago: executing program 4 (id=2165): r0 = socket$inet_tcp(0x2, 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000240), 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000840)={{r0, &(0x7f00000000c0)='/$%-\xb6\x8a\x00', 0x800, &(0x7f0000000100)={@align=0x2, {0x3, 0xe, 0x9, 0x8}}, 0x8, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000280)=0x7}, 0x6, &(0x7f0000000780)=[{0x2, 0x0, &(0x7f00000002c0)='O\xba@\x00', &(0x7f0000000300), 0x0, 0x2}, {0x2, 0x8000, &(0x7f0000000380)='.}', &(0x7f00000003c0)="ea9989bdefef52f44bd0df76b1492e30c705a979e5ee926f4ce59780182a161b95bbc01e7e9b54b839197a6fea3a81e65b37d62b641022351795aa100520f41d41991b3b5c847e266769ae43cc7dfb41e2e52d54ec9571f698b865f8a48711a9a6350490f412fb0cefd1b11c313eb857d805430be315aa3c71c153764ee3e0836feebaed2aa7ff93d21a534ce2", 0x8d, 0x22}, {0x3, 0x6, &(0x7f00000004c0)='(\x00', &(0x7f0000000500)="dda6c8b3d195bf4308ce56e5f4d3f75b9d111c7f54adc697dd9535beb5341fe8d68fd755f854755e0d9db1f77a204d46717cb0527d8c57bb9fe294bda92270a796d8681a1025fdf3a6bbc64532d1766ba1d71a68d5c51484b844350d4e295bbdc7cd77e0e6d193e0ef6727877a72ec8f8cb2209b46ee4c6cb34d3be4d734e60c5bb96ff614bd1202b3fafb530b8ddc6d7dc716cbba3098e625f148a9fb41d475932cc86409871feb2a90ff52915b2fbb5d9fc4e2b8b9c539408234daae1694d3b5820dc1327c1dbbfedb2638d084494860ae", 0xd2, 0x22}, {0x1, 0x9, &(0x7f0000000600)='\\/-\x00', &(0x7f0000000640)="57765e04e7f83d8e6e33bcd537f322de9f57164674a97ee1c9be9241c206c0c13be285e1df56e4f61c6fc67b16c608d0bc609f289ffa611a02474085b033c8cdcae21d86aaafe911124d2b185e5c9fbb9e1e7b15c12902594802dff8a06e", 0x5e, 0xb1befbe5a366acc3}, {0x2, 0x7, &(0x7f00000006c0)=',B\'\')&\\}\x92,@^\x00', &(0x7f0000000700)="2eab3f9167400d7619f273c986234784b4e94e58", 0x14}, {0x2, 0x9, &(0x7f0000000740)='\x00', &(0x7f0000000a80)="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", 0x1000, 0x20}]}) recvfrom$rxrpc(r1, &(0x7f00000008c0)=""/218, 0xda, 0x40000000, &(0x7f00000009c0)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @remote}}, 0x24) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0x11, 0x2, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000000)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r6, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x1a000, 0x0) setsockopt$RDS_CONG_MONITOR(r6, 0x114, 0x6, &(0x7f0000000040), 0x4) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000140)={[{@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x37, 0x65]}}]}) ioctl$SIOCAX25ADDUID(r5, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) ptrace(0x4208, r2) shutdown(r5, 0x0) ioctl$SIOCAX25GETUID(r5, 0x89e0, &(0x7f0000000480)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) socket$inet6_sctp(0xa, 0x1, 0x84) 3.175609281s ago: executing program 1 (id=2188): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, 0x0, 0x0) 2.99204158s ago: executing program 1 (id=2191): r0 = syz_io_uring_setup(0x498, &(0x7f0000000240)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, &(0x7f0000000040)=0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd=r3, 0xffffffffffffffff, &(0x7f00000006c0)=""/210, 0xd2, 0x2, 0x1}) io_uring_enter(r0, 0x627, 0x4c1, 0xb, 0x0, 0x0) 2.866577341s ago: executing program 32 (id=2060): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x8, 0x6, 0x6}, 0x65}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) socket$unix(0x1, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000740)=@xdp={0x2c, 0x0, 0x0, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dc0f14000e00113c0ff000000024ff880000000200000003125ce882cbf490d908f1523f000000002d9c", 0x2e}], 0x1}, 0x8bb3a321efc09a) 2.749639615s ago: executing program 1 (id=2197): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r1, 0xff, 0x4, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x5100, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000340), 0x0) r5 = socket(0x15, 0x5, 0x0) getpeername$llc(r5, 0x0, 0x0) 1.624293939s ago: executing program 1 (id=2203): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000500)=@ready={0x0, 0x0, 0x8, "72918f72", {0x1, 0x1, 0x1000, 0x2, 0x5}}) 190.88405ms ago: executing program 2 (id=2228): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="028920da66b820"], 0x10}}, 0x0) 151.947766ms ago: executing program 2 (id=2229): capget(&(0x7f0000000840)={0x19980330}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) socketpair(0x1d, 0x800, 0x0, 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000480)="1c0000001a009b8a140000003b000000000000000000000000000000fd", 0x1d) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 68.295168ms ago: executing program 2 (id=2230): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1fffe000000000, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x20493859}}) 65.91727ms ago: executing program 2 (id=2231): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x29, 0x50, 0x0, &(0x7f0000000000)) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r4, &(0x7f0000000280)={{0x3, @default, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @null]}, 0x48) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xf32f, 0xfe000000}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000100)={0x6, 0x810, 0x208, 0xe, 0x2, 0x3, 0x8, 0x9, r5}, 0x20) setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) connect$ax25(r4, &(0x7f0000000180)={{0x3, @bcast, 0x5}, [@bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) syz_emit_ethernet(0x80, &(0x7f0000000580)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000286dd605f1060004a2f00fc000000000000000000000000000000ff"], 0x0) unshare(0x22020400) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x40, 0x6, 0x8}, 0x48) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000040)="09000000010001", 0x7) socket$inet6_sctp(0xa, 0x801, 0x84) 35.67756ms ago: executing program 2 (id=2232): r0 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x5ba4, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000001f00)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x80, r0, &(0x7f0000000680), 0x0, 0x80f6, 0x0, 0x2}]) 0s ago: executing program 2 (id=2233): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = fanotify_init(0x200, 0x8000) fanotify_mark(r0, 0x1, 0x4800003e, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000100)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): ftover after parsing attributes in process `syz.2.42'. [ 103.496642][ C1] usb 4-1: NFC: Urb failure (status -71) [ 103.510956][ T6061] vivid-002: reconnect [ 103.514616][ C1] usb 4-1: NFC: Urb failure (status -71) [ 103.517339][ T993] usb 4-1: NFC: Unable to get FW version [ 103.534535][ T993] pn533_usb 4-1:0.106: probe with driver pn533_usb failed with error -71 [ 103.676242][ T993] usb 4-1: USB disconnect, device number 4 [ 104.542806][ T809] usb 3-1: USB disconnect, device number 2 [ 104.769216][ T6085] FAULT_INJECTION: forcing a failure. [ 104.769216][ T6085] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 104.769259][ T6085] CPU: 0 UID: 0 PID: 6085 Comm: syz.4.56 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 104.769279][ T6085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 104.769296][ T6085] Call Trace: [ 104.769304][ T6085] [ 104.769311][ T6085] dump_stack_lvl+0xe8/0x150 [ 104.769347][ T6085] should_fail_ex+0x46b/0x600 [ 104.769373][ T6085] _copy_from_user+0x2d/0xb0 [ 104.769397][ T6085] ___sys_sendmsg+0x1c6/0x360 [ 104.769421][ T6085] ? __pfx____sys_sendmsg+0x10/0x10 [ 104.769471][ T6085] ? __fget_files+0x2a/0x420 [ 104.769492][ T6085] ? __fget_files+0x3a6/0x420 [ 104.769522][ T6085] __x64_sys_sendmsg+0x1c3/0x2a0 [ 104.769542][ T6085] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 104.769569][ T6085] ? __pfx_ksys_write+0x10/0x10 [ 104.769604][ T6085] do_syscall_64+0x14d/0xf80 [ 104.769620][ T6085] ? trace_irq_disable+0x3b/0x150 [ 104.769639][ T6085] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.769657][ T6085] ? clear_bhb_loop+0x40/0x90 [ 104.769684][ T6085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.769702][ T6085] RIP: 0033:0x7faa5209c799 [ 104.769722][ T6085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.769736][ T6085] RSP: 002b:00007faa502f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.769755][ T6085] RAX: ffffffffffffffda RBX: 00007faa52315fa0 RCX: 00007faa5209c799 [ 104.769768][ T6085] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 104.769779][ T6085] RBP: 00007faa502f6090 R08: 0000000000000000 R09: 0000000000000000 [ 104.769789][ T6085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.769799][ T6085] R13: 00007faa52316038 R14: 00007faa52315fa0 R15: 00007fffcbfd6908 [ 104.769828][ T6085] [ 107.223386][ T6115] overlayfs: missing 'lowerdir' [ 107.280543][ T6120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.66'. [ 109.919931][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.508074][ T6160] netlink: 260 bytes leftover after parsing attributes in process `syz.0.81'. [ 112.143640][ T6177] netlink: 20 bytes leftover after parsing attributes in process `syz.4.87'. [ 112.873710][ T6177] nbd: socks must be embedded in a SOCK_ITEM attr [ 113.259783][ T5815] udevd[5815]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 113.265940][ T5815] udevd[5815]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 113.400034][ T5907] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 113.565090][ T5907] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.565116][ T5907] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 113.565133][ T5907] usb 3-1: config 1 has no interface number 0 [ 113.565256][ T5907] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 113.565323][ T5907] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 113.565348][ T5907] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 113.565378][ T5907] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 113.565437][ T5907] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.661743][ T5907] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 113.661771][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.661790][ T5907] usb 3-1: Product: syz [ 113.661836][ T5907] usb 3-1: Manufacturer: syz [ 113.661849][ T5907] usb 3-1: SerialNumber: syz [ 113.734624][ T6204] netlink: 20 bytes leftover after parsing attributes in process `syz.1.93'. [ 113.870422][ T6195] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 113.899890][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.713387][ T6195] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 114.905619][ T6209] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 115.137183][ T5907] cdc_ncm 3-1:1.1: failed GET_NTB_PARAMETERS [ 115.137218][ T5907] cdc_ncm 3-1:1.1: bind() failure [ 115.163739][ T5907] usb 3-1: USB disconnect, device number 3 [ 115.214421][ T6204] nbd: socks must be embedded in a SOCK_ITEM attr [ 118.032210][ T5803] udevd[5803]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 118.133462][ T5815] udevd[5815]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 119.263716][ T993] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 119.449903][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.481795][ T993] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.481819][ T993] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 119.481845][ T993] usb 4-1: config 1 has no interface number 0 [ 119.481887][ T993] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 119.481913][ T993] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 119.481935][ T993] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 119.481965][ T993] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 119.485911][ T993] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 119.485936][ T993] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.485953][ T993] usb 4-1: Product: syz [ 119.485965][ T993] usb 4-1: Manufacturer: syz [ 119.485977][ T993] usb 4-1: SerialNumber: syz [ 119.540077][ T6227] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 119.997586][ T6227] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 120.904743][ T993] cdc_ncm 4-1:1.1: failed GET_NTB_PARAMETERS [ 120.904788][ T993] cdc_ncm 4-1:1.1: bind() failure [ 121.026378][ T993] usb 4-1: USB disconnect, device number 5 [ 122.669970][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.729909][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 123.420024][ T809] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 123.970048][ T809] usb 1-1: Using ep0 maxpacket: 32 [ 123.971771][ T809] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 123.971785][ T809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.974888][ T809] usb 1-1: config 0 descriptor?? [ 124.220058][ T809] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 124.236199][ T809] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 124.240318][ T809] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 124.240368][ T809] usb 1-1: media controller created [ 124.306773][ T809] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 124.404795][ T6283] syz.4.119 (6283) used greatest stack depth: 18360 bytes left [ 124.599264][ T809] DVB: Unable to find symbol dib7000p_attach() [ 124.599278][ T809] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 124.936751][ T6300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.937267][ T6300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.937416][ T809] rc_core: IR keymap rc-dib0700-rc5 not found [ 124.937430][ T809] Registered IR keymap rc-empty [ 124.943083][ T809] dvb-usb: could not initialize remote control. [ 124.943095][ T809] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 125.234239][ T5856] usb 1-1: USB disconnect, device number 3 [ 125.409390][ T5856] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 127.271223][ T5870] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 128.178498][ T5870] usb 4-1: Using ep0 maxpacket: 32 [ 128.193190][ T5870] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 128.193216][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.224749][ T5870] usb 4-1: config 0 descriptor?? [ 128.431718][ T5870] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 128.435880][ T5870] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 128.436694][ T5870] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 128.436745][ T5870] usb 4-1: media controller created [ 128.507759][ T5870] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 129.999906][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 130.029908][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 130.039894][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 130.049901][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 130.059899][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 130.228207][ T5870] DVB: Unable to find symbol dib7000p_attach() [ 130.228221][ T5870] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 131.409972][ T5870] rc_core: IR keymap rc-dib0700-rc5 not found [ 131.409990][ T5870] Registered IR keymap rc-empty [ 131.410271][ T5870] dvb-usb: could not initialize remote control. [ 131.410280][ T5870] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 131.418599][ T5870] usb 4-1: USB disconnect, device number 6 [ 131.453681][ T5856] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 131.505136][ T5870] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 131.619971][ T5856] usb 1-1: Using ep0 maxpacket: 32 [ 131.621915][ T5856] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 131.621939][ T5856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.626830][ T5856] usb 1-1: config 0 descriptor?? [ 132.207824][ T5856] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 132.213260][ T5856] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 132.214018][ T5856] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 132.214068][ T5856] usb 1-1: media controller created [ 132.260815][ T5870] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 132.303080][ T5856] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 132.402527][ T5856] DVB: Unable to find symbol dib7000p_attach() [ 132.402541][ T5856] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 132.425238][ T5870] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.425252][ T5870] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 132.425262][ T5870] usb 4-1: config 1 has no interface number 0 [ 132.425285][ T5870] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 132.427742][ T5870] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 132.427767][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.427784][ T5870] usb 4-1: Product: syz [ 132.427797][ T5870] usb 4-1: Manufacturer: syz [ 132.427810][ T5870] usb 4-1: SerialNumber: syz [ 132.522112][ T5870] cdc_ncm 4-1:1.1: skipping garbage [ 132.522131][ T5870] cdc_ncm 4-1:1.1: NCM or ECM functional descriptors missing [ 132.522167][ T5870] cdc_ncm 4-1:1.1: bind() failure [ 132.609965][ T5856] rc_core: IR keymap rc-dib0700-rc5 not found [ 132.609982][ T5856] Registered IR keymap rc-empty [ 132.610259][ T5856] dvb-usb: could not initialize remote control. [ 132.610268][ T5856] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 132.769404][ T6374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.779152][ T6374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.828327][ T5799] usb 1-1: USB disconnect, device number 4 [ 132.830284][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.830368][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.912270][ T5799] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 134.640749][ T5907] usb 4-1: USB disconnect, device number 7 [ 136.131032][ T993] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 136.440222][ T993] usb 1-1: Using ep0 maxpacket: 32 [ 136.715756][ T993] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 136.715783][ T993] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.739591][ T993] usb 1-1: config 0 descriptor?? [ 136.948337][ T993] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 136.987554][ T993] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 136.988299][ T993] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 136.988356][ T993] usb 1-1: media controller created [ 137.298644][ T993] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 138.437647][ T6442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.438177][ T6442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.485327][ T993] DVB: Unable to find symbol dib7000p_attach() [ 138.485340][ T993] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 138.508647][ T6441] syz.4.169 (6441) used greatest stack depth: 18264 bytes left [ 138.727751][ T993] rc_core: IR keymap rc-dib0700-rc5 not found [ 138.727770][ T993] Registered IR keymap rc-empty [ 138.728055][ T993] dvb-usb: could not initialize remote control. [ 138.728062][ T993] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 138.995875][ T993] usb 1-1: USB disconnect, device number 5 [ 139.077665][ T993] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 146.140007][ T5907] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 146.295856][ T5907] usb 5-1: Using ep0 maxpacket: 32 [ 147.275195][ T5907] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 147.275229][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.410845][ T5907] usb 5-1: config 0 descriptor?? [ 147.643550][ T5907] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 147.724934][ T5907] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 147.725578][ T5907] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 147.725608][ T5907] usb 5-1: media controller created [ 147.773751][ T5907] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 148.106960][ T5907] DVB: Unable to find symbol dib7000p_attach() [ 148.106975][ T5907] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 148.200985][ T6529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.201496][ T6529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.375623][ T5907] rc_core: IR keymap rc-dib0700-rc5 not found [ 149.375659][ T5907] Registered IR keymap rc-empty [ 149.375948][ T5907] dvb-usb: could not initialize remote control. [ 149.375956][ T5907] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 149.531425][ T36] usb 5-1: USB disconnect, device number 3 [ 150.590569][ T36] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 150.591721][ T6550] netlink: 20 bytes leftover after parsing attributes in process `syz.2.202'. [ 153.513044][ T6550] nbd: socks must be embedded in a SOCK_ITEM attr [ 154.393867][ T5921] udevd[5921]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 154.480963][ T5921] udevd[5921]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 155.305484][ T6606] netlink: 20 bytes leftover after parsing attributes in process `syz.0.223'. [ 155.881537][ T6606] nbd: socks must be embedded in a SOCK_ITEM attr [ 157.072173][ T6359] udevd[6359]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 158.774194][ T6654] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 162.400066][ T5799] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 162.470034][ T5908] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 162.610382][ T5799] usb 2-1: Using ep0 maxpacket: 32 [ 162.690391][ T5908] usb 3-1: Using ep0 maxpacket: 32 [ 162.844609][ T5799] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 162.844632][ T5799] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.873561][ T5908] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 162.873578][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.878224][ T5908] usb 3-1: config 0 descriptor?? [ 162.914429][ T5799] usb 2-1: config 0 descriptor?? [ 163.085603][ T5908] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 163.117456][ T5799] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 163.167516][ T5908] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 163.181230][ T5908] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 163.181284][ T5908] usb 3-1: media controller created [ 163.217007][ T5799] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 163.261012][ T5908] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 163.302432][ T5799] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 163.302492][ T5799] usb 2-1: media controller created [ 163.384706][ T5799] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 163.501422][ T36] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 163.567991][ T5908] DVB: Unable to find symbol dib7000p_attach() [ 163.568006][ T5908] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 163.687499][ T36] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.687525][ T36] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 163.687543][ T36] usb 1-1: config 1 has no interface number 0 [ 163.687585][ T36] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 163.709939][ T5908] rc_core: IR keymap rc-dib0700-rc5 not found [ 163.709957][ T5908] Registered IR keymap rc-empty [ 163.710245][ T5908] dvb-usb: could not initialize remote control. [ 163.710253][ T5908] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 163.716142][ T36] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 163.719018][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.719041][ T36] usb 1-1: Product: syz [ 163.719053][ T36] usb 1-1: Manufacturer: syz [ 163.719066][ T36] usb 1-1: SerialNumber: syz [ 164.117664][ T36] cdc_ncm 1-1:1.1: skipping garbage [ 164.117681][ T36] cdc_ncm 1-1:1.1: NCM or ECM functional descriptors missing [ 164.117702][ T36] cdc_ncm 1-1:1.1: bind() failure [ 164.140570][ T5799] DVB: Unable to find symbol dib7000p_attach() [ 164.140580][ T5799] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 164.368431][ T36] usb 3-1: USB disconnect, device number 4 [ 164.406392][ T5907] usb 1-1: USB disconnect, device number 6 [ 164.610177][ T5799] rc_core: IR keymap rc-dib0700-rc5 not found [ 164.611836][ T5799] Registered IR keymap rc-empty [ 165.496205][ T5799] dvb-usb: could not initialize remote control. [ 165.496220][ T5799] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 165.810868][ T5799] usb 2-1: USB disconnect, device number 4 [ 166.185222][ T36] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 166.758948][ T5799] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 169.324439][ T5870] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 169.474768][ T5870] usb 2-1: Using ep0 maxpacket: 32 [ 169.478439][ T5870] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 169.478465][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.543691][ T5870] usb 2-1: config 0 descriptor?? [ 169.746207][ T5870] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 169.766285][ T5870] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 169.930200][ T5870] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 169.930254][ T5870] usb 2-1: media controller created [ 171.335385][ T5870] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 171.697046][ T5870] DVB: Unable to find symbol dib7000p_attach() [ 171.697059][ T5870] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 171.820066][ T5870] rc_core: IR keymap rc-dib0700-rc5 not found [ 171.820086][ T5870] Registered IR keymap rc-empty [ 171.820354][ T5870] dvb-usb: could not initialize remote control. [ 171.820364][ T5870] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 171.824468][ T5870] usb 2-1: USB disconnect, device number 5 [ 172.585396][ T5870] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 175.624500][ T6802] netlink: 260 bytes leftover after parsing attributes in process `syz.3.291'. [ 175.989999][ T5870] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 176.415725][ T5870] usb 5-1: Using ep0 maxpacket: 32 [ 176.598318][ T5870] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 176.598347][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.613464][ T5870] usb 5-1: config 0 descriptor?? [ 176.815587][ T5870] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 176.817886][ T5870] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 176.818571][ T5870] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 176.818633][ T5870] usb 5-1: media controller created [ 176.864050][ T5870] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 177.002556][ T5870] DVB: Unable to find symbol dib7000p_attach() [ 177.002570][ T5870] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 177.181348][ T5870] rc_core: IR keymap rc-dib0700-rc5 not found [ 177.181368][ T5870] Registered IR keymap rc-empty [ 177.181668][ T5870] dvb-usb: could not initialize remote control. [ 177.181677][ T5870] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 177.253916][ T5870] usb 5-1: USB disconnect, device number 4 [ 177.319710][ T5870] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 180.710039][ T5870] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 180.869939][ T5870] usb 5-1: Using ep0 maxpacket: 32 [ 180.872615][ T5870] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 180.872641][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.878155][ T5870] usb 5-1: config 0 descriptor?? [ 181.080199][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 181.084709][ T5870] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 181.107536][ T5870] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 181.108406][ T5870] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 181.108459][ T5870] usb 5-1: media controller created [ 181.145959][ T5870] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 181.242938][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 181.260132][ T10] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 181.260160][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.260178][ T10] usb 2-1: Product: syz [ 181.260190][ T10] usb 2-1: Manufacturer: syz [ 181.260202][ T10] usb 2-1: SerialNumber: syz [ 181.465006][ T5870] DVB: Unable to find symbol dib7000p_attach() [ 181.465021][ T5870] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 181.649949][ T5870] rc_core: IR keymap rc-dib0700-rc5 not found [ 181.649969][ T5870] Registered IR keymap rc-empty [ 181.651053][ T5870] dvb-usb: could not initialize remote control. [ 181.651064][ T5870] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 181.654250][ T6865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.654750][ T6865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.632969][ T5812] usb 5-1: USB disconnect, device number 5 [ 182.730778][ T10] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 182.749503][ T5812] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 182.768201][ T10] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 182.780544][ T10] usb 2-1: unit 6 not found! [ 182.780569][ T10] usb 2-1: unit 2 not found! [ 182.958670][ T10] usb 2-1: USB disconnect, device number 6 [ 183.329758][ T6359] udevd[6359]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 184.340002][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 184.911686][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 184.913969][ T10] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 184.913985][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.916872][ T10] usb 2-1: config 0 descriptor?? [ 185.175814][ T10] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 185.202093][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 185.204229][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 185.204280][ T10] usb 2-1: media controller created [ 185.244571][ T6884] syz.0.315 (6884) used greatest stack depth: 18232 bytes left [ 185.261324][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 185.340280][ T10] DVB: Unable to find symbol dib7000p_attach() [ 185.340295][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 185.479493][ T6897] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 185.489671][ T10] rc_core: IR keymap rc-dib0700-rc5 not found [ 185.489686][ T10] Registered IR keymap rc-empty [ 185.502103][ T10] dvb-usb: could not initialize remote control. [ 185.502115][ T10] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 185.782860][ T6871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.785563][ T6871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.813659][ T5856] usb 2-1: USB disconnect, device number 7 [ 185.939476][ T5856] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 186.089439][ T6909] nfs4: Unknown parameter '' [ 187.058733][ T6897] loop2: detected capacity change from 0 to 7 [ 187.103130][ T6359] Dev loop2: unable to read RDB block 7 [ 187.103163][ T6359] loop2: AHDI p1 p2 p3 [ 187.103194][ T6359] loop2: partition table partially beyond EOD, truncated [ 187.151086][ T6359] loop2: p1 start 1601398130 is beyond EOD, truncated [ 187.151116][ T6359] loop2: p2 start 1702059890 is beyond EOD, truncated [ 187.179727][ T6897] Dev loop2: unable to read RDB block 7 [ 187.179759][ T6897] loop2: AHDI p1 p2 p3 [ 187.179787][ T6897] loop2: partition table partially beyond EOD, truncated [ 187.197018][ T6897] loop2: p1 start 1601398130 is beyond EOD, truncated [ 187.197042][ T6897] loop2: p2 start 1702059890 is beyond EOD, truncated [ 192.340590][ T6956] netlink: 36 bytes leftover after parsing attributes in process `syz.0.336'. [ 192.628954][ T6965] netlink: 24 bytes leftover after parsing attributes in process `syz.0.336'. [ 194.273557][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.273628][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.582731][ T7009] vivid-004: disconnect [ 195.583272][ T7008] vivid-004: reconnect [ 198.130371][ T7041] Zero length message leads to an empty skb [ 198.983609][ T7057] netlink: 20 bytes leftover after parsing attributes in process `syz.3.371'. [ 201.464063][ T7061] Bluetooth: hci4: command 0x0406 tx timeout [ 201.793746][ T7061] Bluetooth: hci0: command 0x0406 tx timeout [ 201.793788][ T7061] Bluetooth: hci1: command 0x0406 tx timeout [ 201.793812][ T7061] Bluetooth: hci3: command 0x0406 tx timeout [ 203.397237][ T7057] nbd: socks must be embedded in a SOCK_ITEM attr [ 203.535018][ T7066] netlink: 20 bytes leftover after parsing attributes in process `syz.2.372'. [ 203.535046][ T7066] nbd: device at index 64 is going down [ 204.664049][ T5800] Bluetooth: hci2: command 0x0406 tx timeout [ 206.206748][ T6359] udevd[6359]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 206.251883][ T37] audit: type=1326 audit(1774269938.245:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7084 comm="syz.0.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a3c1c799 code=0x7ffc0000 [ 206.251930][ T37] audit: type=1326 audit(1774269938.245:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7084 comm="syz.0.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a3c1c799 code=0x7ffc0000 [ 206.304229][ T37] audit: type=1326 audit(1774269938.245:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7084 comm="syz.0.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7fe5a3c1c799 code=0x7ffc0000 [ 206.304277][ T37] audit: type=1326 audit(1774269938.295:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7084 comm="syz.0.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a3c1c799 code=0x7ffc0000 [ 206.304317][ T37] audit: type=1326 audit(1774269938.295:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7084 comm="syz.0.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a3c1c799 code=0x7ffc0000 [ 206.308958][ T6359] udevd[6359]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 207.199663][ T7101] netlink: 20 bytes leftover after parsing attributes in process `syz.4.384'. [ 210.695736][ T993] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 210.868961][ T993] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.869013][ T993] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 210.869041][ T993] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 210.869059][ T993] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 210.935584][ T993] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 210.935601][ T993] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.935611][ T993] usb 2-1: Product: syz [ 210.935618][ T993] usb 2-1: Manufacturer: syz [ 210.935624][ T993] usb 2-1: SerialNumber: syz [ 210.983314][ T993] usb 2-1: config 0 descriptor?? [ 210.987787][ T993] adutux 2-1:0.0: interrupt endpoints not found [ 211.001394][ T7101] nbd: socks must be embedded in a SOCK_ITEM attr [ 211.231778][ T993] usb 2-1: USB disconnect, device number 8 [ 211.271637][ T5856] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 211.441453][ T5856] usb 1-1: Using ep0 maxpacket: 32 [ 211.444207][ T5856] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 211.444234][ T5856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.497420][ T5803] udevd[5803]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 211.513041][ T5815] udevd[5815]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 211.514529][ T5856] usb 1-1: config 0 descriptor?? [ 212.280259][ T5856] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 212.300506][ T5856] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 212.319233][ T5856] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 212.319291][ T5856] usb 1-1: media controller created [ 212.417360][ T5856] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 212.483556][ T7115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.484017][ T7115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.605478][ T5856] DVB: Unable to find symbol dib7000p_attach() [ 212.605493][ T5856] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 212.711687][ T5856] rc_core: IR keymap rc-dib0700-rc5 not found [ 212.711707][ T5856] Registered IR keymap rc-empty [ 212.711964][ T5856] dvb-usb: could not initialize remote control. [ 212.711972][ T5856] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 212.770459][ T5856] usb 1-1: USB disconnect, device number 7 [ 212.811189][ T5856] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 213.335819][ T7144] 9p: Bad value for 'wfdno' [ 213.773718][ T5908] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 214.020060][ T5908] usb 3-1: Using ep0 maxpacket: 16 [ 214.022136][ T5908] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 214.022161][ T5908] usb 3-1: config 0 has no interface number 0 [ 214.022201][ T5908] usb 3-1: config 0 interface 106 altsetting 7 has an endpoint descriptor with address 0x95, changing to 0x85 [ 214.022223][ T5908] usb 3-1: config 0 interface 106 altsetting 7 bulk endpoint 0x85 has invalid maxpacket 16 [ 214.022245][ T5908] usb 3-1: config 0 interface 106 altsetting 7 bulk endpoint 0xA has invalid maxpacket 1023 [ 214.022264][ T5908] usb 3-1: config 0 interface 106 has no altsetting 0 [ 214.025290][ T5908] usb 3-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=a3.1e [ 214.025321][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.025338][ T5908] usb 3-1: Product: syz [ 214.025351][ T5908] usb 3-1: Manufacturer: syz [ 214.025364][ T5908] usb 3-1: SerialNumber: syz [ 214.259955][ T7159] netlink: 20 bytes leftover after parsing attributes in process `syz.3.403'. [ 216.100385][ T7159] nbd: socks must be embedded in a SOCK_ITEM attr [ 216.902075][ T5908] usb 3-1: config 0 descriptor?? [ 217.454279][ T5908] usb 3-1: can't set config #0, error -71 [ 217.941479][ T5908] usb 3-1: USB disconnect, device number 5 [ 218.627207][ T5908] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 218.802969][ T5803] udevd[5803]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 218.861819][ T5908] usb 3-1: Using ep0 maxpacket: 32 [ 218.863822][ T5908] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 218.863847][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.871995][ T5908] usb 3-1: config 0 descriptor?? [ 219.040022][ T993] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 219.135857][ T5908] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 219.177401][ T5908] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 219.183944][ T5908] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 219.183997][ T5908] usb 3-1: media controller created [ 219.220078][ T993] usb 2-1: device descriptor read/64, error -71 [ 219.223296][ T5908] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 219.615251][ T993] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 219.789974][ T5908] DVB: Unable to find symbol dib7000p_attach() [ 219.789983][ T5908] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 219.939958][ T993] usb 2-1: device descriptor read/64, error -71 [ 220.242335][ T993] usb usb2-port1: attempt power cycle [ 220.279946][ T5908] rc_core: IR keymap rc-dib0700-rc5 not found [ 220.279963][ T5908] Registered IR keymap rc-empty [ 220.280259][ T5908] dvb-usb: could not initialize remote control. [ 220.280269][ T5908] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 220.437818][ T7210] netlink: 12 bytes leftover after parsing attributes in process `syz.0.416'. [ 220.504878][ T5908] usb 3-1: USB disconnect, device number 6 [ 220.579915][ T993] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 220.583156][ T5908] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 220.607080][ T993] usb 2-1: device descriptor read/8, error -71 [ 221.769697][ T993] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 221.792884][ T993] usb 2-1: device descriptor read/8, error -71 [ 221.902899][ T993] usb usb2-port1: unable to enumerate USB device [ 223.533395][ T7236] capability: warning: `syz.3.424' uses 32-bit capabilities (legacy support in use) [ 223.723959][ T7236] program syz.3.424 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 224.310129][ T37] audit: type=1326 audit(1774270212.276:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7253 comm="syz.3.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f286e73c799 code=0x7fc00000 [ 225.067351][ T7271] netlink: 20 bytes leftover after parsing attributes in process `syz.4.435'. [ 225.068228][ T37] audit: type=1326 audit(1774270213.056:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7253 comm="syz.3.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f286e73c799 code=0x7fc00000 [ 225.700553][ T7271] nbd: socks must be embedded in a SOCK_ITEM attr [ 229.355653][ T5802] udevd[5802]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 229.420181][ T7296] netlink: 36 bytes leftover after parsing attributes in process `syz.1.441'. [ 229.464955][ T5802] udevd[5802]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 235.513294][ T993] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 235.689893][ T993] usb 3-1: Using ep0 maxpacket: 16 [ 235.706476][ T993] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 235.721349][ T993] usb 3-1: config 0 has no interface number 0 [ 235.725905][ T993] usb 3-1: config 0 interface 106 altsetting 7 has an endpoint descriptor with address 0x95, changing to 0x85 [ 235.725935][ T993] usb 3-1: config 0 interface 106 altsetting 7 bulk endpoint 0x85 has invalid maxpacket 16 [ 235.725956][ T993] usb 3-1: config 0 interface 106 altsetting 7 bulk endpoint 0xA has invalid maxpacket 1023 [ 235.726009][ T993] usb 3-1: config 0 interface 106 has no altsetting 0 [ 235.778994][ T993] usb 3-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=a3.1e [ 235.779022][ T993] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.779040][ T993] usb 3-1: Product: syz [ 235.779051][ T993] usb 3-1: Manufacturer: syz [ 235.779063][ T993] usb 3-1: SerialNumber: syz [ 235.816702][ T993] usb 3-1: config 0 descriptor?? [ 235.817802][ T7363] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 235.817910][ T7363] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 236.022985][ T7363] vivid-000: disconnect [ 236.042185][ C1] usb 3-1: NFC: Urb failure (status -71) [ 236.086601][ T7362] vivid-000: reconnect [ 236.099671][ C1] usb 3-1: NFC: Urb failure (status -71) [ 236.107060][ T993] usb 3-1: NFC: Unable to get FW version [ 236.428689][ T993] pn533_usb 3-1:0.106: probe with driver pn533_usb failed with error -71 [ 237.446867][ T993] usb 3-1: USB disconnect, device number 7 [ 250.272498][ T809] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 250.499169][ T809] usb 1-1: Using ep0 maxpacket: 16 [ 250.648473][ T809] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.771045][ T7507] 9p: Bad value for 'wfdno' [ 250.795231][ T809] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 250.801623][ T809] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 250.801682][ T809] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 250.801734][ T809] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 250.808528][ T809] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 250.808569][ T809] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 250.808625][ T809] usb 1-1: Manufacturer: syz [ 251.095668][ T809] usb 1-1: config 0 descriptor?? [ 252.044525][ T5856] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 252.610152][ T5856] usb 5-1: Using ep0 maxpacket: 16 [ 252.662958][ T5856] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 252.663305][ T5856] usb 5-1: config 0 has no interface number 0 [ 252.663416][ T5856] usb 5-1: config 0 interface 106 altsetting 7 has an endpoint descriptor with address 0x95, changing to 0x85 [ 252.663480][ T5856] usb 5-1: config 0 interface 106 altsetting 7 bulk endpoint 0x85 has invalid maxpacket 16 [ 252.663618][ T5856] usb 5-1: config 0 interface 106 altsetting 7 bulk endpoint 0xA has invalid maxpacket 1023 [ 252.663781][ T5856] usb 5-1: config 0 interface 106 has no altsetting 0 [ 253.011274][ T5856] usb 5-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=a3.1e [ 253.011317][ T5856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.011458][ T5856] usb 5-1: Product: syz [ 253.011473][ T5856] usb 5-1: Manufacturer: syz [ 253.011485][ T5856] usb 5-1: SerialNumber: syz [ 253.917141][ T5856] usb 5-1: config 0 descriptor?? [ 254.836704][ T5856] usb 5-1: can't set config #0, error -71 [ 254.874676][ T5856] usb 5-1: USB disconnect, device number 6 [ 256.190536][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.190605][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.309981][ T809] rc_core: IR keymap rc-hauppauge not found [ 256.309999][ T809] Registered IR keymap rc-empty [ 256.310629][ T809] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 256.330290][ T809] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 256.358456][ T809] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 256.362117][ T809] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input19 [ 256.483336][ T809] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 256.500391][ T809] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 256.521290][ T809] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 256.539988][ T809] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 256.561112][ T809] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 256.580053][ T809] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 256.600009][ T809] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 256.620014][ T809] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 256.640016][ T809] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 256.660080][ T809] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 257.186419][ T809] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 257.186813][ T809] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 257.662111][ T809] usb 1-1: USB disconnect, device number 8 [ 264.009956][ T36] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 264.169907][ T36] usb 4-1: Using ep0 maxpacket: 32 [ 264.175208][ T36] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 264.175234][ T36] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.207447][ T36] usb 4-1: config 0 descriptor?? [ 264.554413][ T36] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 264.626930][ T36] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 264.628674][ T36] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 264.628937][ T36] usb 4-1: media controller created [ 264.724762][ T36] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 265.024717][ T36] DVB: Unable to find symbol dib7000p_attach() [ 265.024738][ T36] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 265.110468][ T7632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.110955][ T7632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.260145][ T36] rc_core: IR keymap rc-dib0700-rc5 not found [ 265.260164][ T36] Registered IR keymap rc-empty [ 265.260522][ T36] dvb-usb: could not initialize remote control. [ 265.260531][ T36] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 265.679159][ T5996] usb 4-1: USB disconnect, device number 8 [ 265.736303][ T5996] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 265.739953][ T36] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 265.920062][ T36] usb 3-1: Using ep0 maxpacket: 32 [ 266.322380][ T36] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 266.322407][ T36] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 266.322429][ T36] usb 3-1: config 0 interface 0 has no altsetting 0 [ 266.364662][ T36] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 266.364689][ T36] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.364713][ T36] usb 3-1: Product: syz [ 266.364725][ T36] usb 3-1: Manufacturer: syz [ 266.364738][ T36] usb 3-1: SerialNumber: syz [ 266.411871][ T36] usb 3-1: config 0 descriptor?? [ 266.867825][ T36] gs_usb 3-1:0.0: Configuring for 25 interfaces [ 268.399961][ T36] gs_usb 3-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 268.400579][ T36] gs_usb 3-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 268.401179][ T36] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 268.414587][ T36] usb 3-1: USB disconnect, device number 8 [ 270.009204][ T7694] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 270.174486][ T7694] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 270.659986][ T10] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 270.816334][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.816359][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 270.816377][ T10] usb 2-1: config 1 has no interface number 0 [ 270.816418][ T10] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 270.818729][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 270.818754][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.818769][ T10] usb 2-1: Product: syz [ 270.818780][ T10] usb 2-1: Manufacturer: syz [ 270.818790][ T10] usb 2-1: SerialNumber: syz [ 270.918923][ T10] cdc_ncm 2-1:1.1: NCM or ECM functional descriptors missing [ 270.918970][ T10] cdc_ncm 2-1:1.1: bind() failure [ 271.159767][ T5996] usb 2-1: USB disconnect, device number 13 [ 283.709293][ T7847] netlink: 20 bytes leftover after parsing attributes in process `syz.3.631'. [ 284.081020][ T7847] nbd: socks must be embedded in a SOCK_ITEM attr [ 285.217070][ T6359] udevd[6359]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 285.734858][ T5802] udevd[5802]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 287.443347][ T7888] batadv0: entered promiscuous mode [ 287.445218][ T7888] bond0: entered promiscuous mode [ 287.445420][ T7888] bond_slave_0: entered promiscuous mode [ 287.445720][ T7888] bond_slave_1: entered promiscuous mode [ 287.487513][ T7888] hsr1: entered allmulticast mode [ 287.487535][ T7888] batadv0: entered allmulticast mode [ 287.487553][ T7888] bond0: entered allmulticast mode [ 287.487564][ T7888] bond_slave_0: entered allmulticast mode [ 287.487581][ T7888] bond_slave_1: entered allmulticast mode [ 287.487872][ T7890] netlink: 'syz.4.643': attribute type 2 has an invalid length. [ 287.487960][ T7890] netlink: 36 bytes leftover after parsing attributes in process `syz.4.643'. [ 287.488878][ T7888] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 287.542711][ T7888] 9p: Bad value for 'rfdno' [ 288.651240][ T5799] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 289.132866][ T5799] usb 5-1: device descriptor read/64, error -71 [ 289.405077][ T5799] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 289.602884][ T5799] usb 5-1: device descriptor read/64, error -71 [ 289.779518][ T5799] usb usb5-port1: attempt power cycle [ 290.143576][ T7928] siw: device registration error -23 [ 290.209972][ T5799] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 290.233628][ T5799] usb 5-1: device descriptor read/8, error -71 [ 290.245366][ T7928] netlink: 136 bytes leftover after parsing attributes in process `syz.2.658'. [ 290.490451][ T5799] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 290.578261][ T5799] usb 5-1: device descriptor read/8, error -71 [ 290.687426][ T5799] usb usb5-port1: unable to enumerate USB device [ 290.924117][ T7942] netlink: 20 bytes leftover after parsing attributes in process `syz.1.661'. [ 291.141081][ T7942] nbd: socks must be embedded in a SOCK_ITEM attr [ 293.474196][ T7950] netlink: 12 bytes leftover after parsing attributes in process `syz.3.664'. [ 295.111269][ T5802] udevd[5802]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 295.593664][ T5802] udevd[5802]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 299.263251][ T809] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 299.529934][ T809] usb 3-1: device descriptor read/64, error -71 [ 302.639984][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 302.791499][ T10] usb 5-1: device descriptor read/64, error -71 [ 303.033066][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 303.181005][ T10] usb 5-1: device descriptor read/64, error -71 [ 303.290429][ T10] usb usb5-port1: attempt power cycle [ 303.890168][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 303.993973][ T10] usb 5-1: device descriptor read/8, error -71 [ 304.599667][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 306.089741][ T10] usb 5-1: device descriptor read/8, error -71 [ 306.194342][ T10] usb usb5-port1: unable to enumerate USB device [ 308.039939][ T5908] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 308.209932][ T5908] usb 5-1: Using ep0 maxpacket: 32 [ 308.211949][ T5908] usb 5-1: no configurations [ 308.211965][ T5908] usb 5-1: can't read configurations, error -22 [ 308.350287][ T5908] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 308.766682][ T5908] usb 5-1: Using ep0 maxpacket: 32 [ 308.768965][ T5908] usb 5-1: no configurations [ 308.768981][ T5908] usb 5-1: can't read configurations, error -22 [ 308.769628][ T5908] usb usb5-port1: attempt power cycle [ 309.141488][ T5908] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 309.162149][ T5908] usb 5-1: Using ep0 maxpacket: 32 [ 309.178940][ T5908] usb 5-1: no configurations [ 309.178957][ T5908] usb 5-1: can't read configurations, error -22 [ 309.331361][ T5908] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 309.357217][ T5908] usb 5-1: Using ep0 maxpacket: 32 [ 309.358812][ T5908] usb 5-1: no configurations [ 309.358827][ T5908] usb 5-1: can't read configurations, error -22 [ 309.370467][ T5908] usb usb5-port1: unable to enumerate USB device [ 317.149069][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.149157][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.594012][ T8288] batadv0: entered promiscuous mode [ 326.595442][ T8288] bond0: entered promiscuous mode [ 326.595458][ T8288] bond_slave_0: entered promiscuous mode [ 326.595650][ T8288] bond_slave_1: entered promiscuous mode [ 326.597106][ T8288] debugfs: 'hsr1' already exists in 'hsr' [ 326.597129][ T8288] Cannot create hsr debugfs directory [ 326.597340][ T8288] hsr1: entered allmulticast mode [ 326.597353][ T8288] batadv0: entered allmulticast mode [ 326.597368][ T8288] bond0: entered allmulticast mode [ 326.597379][ T8288] bond_slave_0: entered allmulticast mode [ 326.597394][ T8288] bond_slave_1: entered allmulticast mode [ 326.597906][ T8288] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 326.962874][ T8288] netlink: 'syz.3.787': attribute type 2 has an invalid length. [ 326.962931][ T8288] netlink: 36 bytes leftover after parsing attributes in process `syz.3.787'. [ 327.016524][ T8292] 9p: Bad value for 'rfdno' [ 327.363916][ T8309] netlink: 'syz.4.792': attribute type 2 has an invalid length. [ 327.363969][ T8309] netlink: 36 bytes leftover after parsing attributes in process `syz.4.792'. [ 327.770222][ T8315] 9p: Bad value for 'rfdno' [ 329.959942][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 330.109875][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 330.113447][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.113476][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.113519][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 330.113703][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.171210][ T10] usb 1-1: config 0 descriptor?? [ 330.249549][ T10] hub 1-1:0.0: USB hub found [ 330.448069][ T10] hub 1-1:0.0: 1 port detected [ 332.776494][ T10] hub 1-1:0.0: activate --> -90 [ 333.445392][ T10] usb 1-1-port1: cannot disable (err = -71) [ 333.489575][ T5908] usb 1-1: USB disconnect, device number 9 [ 333.549987][ T1457] usb 1-1: Failed to suspend device, error -71 [ 334.690378][ T5908] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 334.841464][ T5908] usb 3-1: Using ep0 maxpacket: 32 [ 335.755590][ T5908] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 335.755619][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.780314][ T5908] usb 3-1: config 0 descriptor?? [ 335.997160][ T5908] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 336.014025][ T5908] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 336.015718][ T5908] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 336.015766][ T5908] usb 3-1: media controller created [ 336.057772][ T5908] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 336.195602][ T8411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.195995][ T8411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.216105][ T5908] DVB: Unable to find symbol dib7000p_attach() [ 336.216118][ T5908] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 336.339974][ T5908] rc_core: IR keymap rc-dib0700-rc5 not found [ 336.339994][ T5908] Registered IR keymap rc-empty [ 336.341408][ T5908] dvb-usb: could not initialize remote control. [ 336.341419][ T5908] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 336.348463][ T5908] usb 3-1: USB disconnect, device number 11 [ 336.446232][ T5908] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 337.336775][ T8457] netlink: 'syz.4.849': attribute type 2 has an invalid length. [ 337.336831][ T8457] netlink: 36 bytes leftover after parsing attributes in process `syz.4.849'. [ 337.391942][ T8465] 9p: Bad value for 'rfdno' [ 342.814227][ T8513] netlink: 'syz.3.867': attribute type 2 has an invalid length. [ 342.814284][ T8513] netlink: 36 bytes leftover after parsing attributes in process `syz.3.867'. [ 344.714750][ T8521] netlink: 20 bytes leftover after parsing attributes in process `syz.1.871'. [ 345.674283][ T8521] nbd: socks must be embedded in a SOCK_ITEM attr [ 346.642283][ T5802] udevd[5802]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 346.710434][ T8560] netlink: 260 bytes leftover after parsing attributes in process `syz.0.881'. [ 349.503214][ T809] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 349.729886][ T809] usb 3-1: Using ep0 maxpacket: 32 [ 349.732373][ T809] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 349.732398][ T809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.077312][ T809] usb 3-1: config 0 descriptor?? [ 350.330552][ T809] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 350.358672][ T809] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 350.372896][ T809] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 350.372950][ T809] usb 3-1: media controller created [ 350.418904][ T809] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 350.797200][ T8593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.797789][ T8593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.480165][ T809] DVB: Unable to find symbol dib7000p_attach() [ 351.480210][ T809] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 351.651650][ T809] rc_core: IR keymap rc-dib0700-rc5 not found [ 351.651676][ T809] Registered IR keymap rc-empty [ 351.652197][ T809] dvb-usb: could not initialize remote control. [ 351.652211][ T809] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 351.696073][ T5908] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 352.525535][ T809] usb 3-1: USB disconnect, device number 12 [ 352.556231][ T5908] usb 2-1: Using ep0 maxpacket: 32 [ 352.558969][ T5908] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 352.559053][ T5908] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 352.559074][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.606256][ T5908] usb 2-1: config 0 descriptor?? [ 352.617012][ T809] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 356.183845][ T5870] usb 2-1: USB disconnect, device number 14 [ 359.940171][ T36] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 360.089972][ T36] usb 2-1: Using ep0 maxpacket: 32 [ 360.097827][ T36] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 360.097938][ T36] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 360.097987][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.217647][ T36] usb 2-1: config 0 descriptor?? [ 362.873131][ T5799] usb 2-1: USB disconnect, device number 15 [ 377.938238][ T8819] netlink: 260 bytes leftover after parsing attributes in process `syz.2.966'. [ 378.605349][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.605416][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.150248][ T5996] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 380.568644][ T5996] usb 1-1: Using ep0 maxpacket: 32 [ 380.578217][ T5996] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 380.578244][ T5996] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.114059][ T5996] usb 1-1: config 0 descriptor?? [ 381.723618][ T5996] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 381.975898][ T8844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.014322][ T8844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.017574][ T5996] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 382.058426][ T5996] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 382.059418][ T5996] usb 1-1: media controller created [ 383.584305][ T5996] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 384.439375][ T8869] siw: device registration error -23 [ 384.454731][ T5996] DVB: Unable to find symbol dib7000p_attach() [ 384.454740][ T5996] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 385.250850][ T5996] rc_core: IR keymap rc-dib0700-rc5 not found [ 385.250871][ T5996] Registered IR keymap rc-empty [ 385.251150][ T5996] dvb-usb: could not initialize remote control. [ 385.251158][ T5996] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 385.291684][ T5996] usb 1-1: USB disconnect, device number 10 [ 385.295054][ T8873] netlink: 136 bytes leftover after parsing attributes in process `syz.0.983'. [ 385.454738][ T5996] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 385.700100][ T5799] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 385.778230][ T8893] netlink: 'syz.3.991': attribute type 2 has an invalid length. [ 385.778359][ T8893] netlink: 36 bytes leftover after parsing attributes in process `syz.3.991'. [ 385.846743][ T8894] 9p: Bad value for 'rfdno' [ 385.871091][ T5799] usb 3-1: Using ep0 maxpacket: 32 [ 385.929948][ T5996] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 386.439207][ T5799] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 386.439242][ T5799] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.481217][ T5799] usb 3-1: config 0 descriptor?? [ 386.579872][ T5996] usb 1-1: Using ep0 maxpacket: 32 [ 386.586838][ T5996] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 386.586860][ T5996] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 386.586893][ T5996] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 386.586964][ T5996] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.650040][ T5996] usb 1-1: config 0 descriptor?? [ 386.687242][ T5799] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 386.772711][ T5799] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 386.772837][ T5799] dib0700: firmware download failed at 7 with -22 [ 389.654701][ T5907] usb 3-1: USB disconnect, device number 13 [ 390.020741][ T5870] usb 1-1: USB disconnect, device number 11 [ 392.152238][ T8946] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1009'. [ 392.577641][ T8946] nbd: socks must be embedded in a SOCK_ITEM attr [ 393.523005][ T5870] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 393.669916][ T5870] usb 4-1: Using ep0 maxpacket: 32 [ 393.695735][ T5870] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 393.695805][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.858104][ T5870] usb 4-1: config 0 descriptor?? [ 394.217287][ T5870] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 394.320643][ T5870] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 394.320815][ T5870] dib0700: firmware download failed at 7 with -22 [ 395.817551][ T8864] udevd[8864]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 396.303149][ T5907] usb 4-1: USB disconnect, device number 9 [ 396.434031][ T8864] udevd[8864]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 396.471961][ T8976] siw: device registration error -23 [ 396.645952][ T8976] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1018'. [ 398.620496][ T5907] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 398.789909][ T5907] usb 3-1: Using ep0 maxpacket: 32 [ 398.818811][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.818871][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.818907][ T5907] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 398.818926][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.815268][ T5907] usb 3-1: config 0 descriptor?? [ 400.105082][ T5907] hub 3-1:0.0: USB hub found [ 400.418293][ T5907] hub 3-1:0.0: 1 port detected [ 401.382675][ T9019] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1033'. [ 401.421232][ T5907] hub 3-1:0.0: activate --> -90 [ 401.424006][ T13] usb 3-1: Failed to suspend device, error -71 [ 401.428094][ T5799] usb 3-1: USB disconnect, device number 14 [ 403.942542][ T9051] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1044'. [ 404.245938][ T9059] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1047'. [ 404.719911][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 404.869980][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 404.872545][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.872573][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.872607][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 404.872626][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.943129][ T10] usb 4-1: config 0 descriptor?? [ 404.970522][ T10] hub 4-1:0.0: USB hub found [ 405.185252][ T10] hub 4-1:0.0: 1 port detected [ 405.812982][ T10] hub 4-1:0.0: activate --> -90 [ 406.216983][ T10] usb 4-1-port1: cannot disable (err = -71) [ 406.217494][ T10] usb 4-1: USB disconnect, device number 10 [ 406.217664][ T78] usb 4-1: Failed to suspend device, error -19 [ 407.319179][ T9094] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1061'. [ 409.788402][ T9119] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1067'. [ 412.611629][ T9126] netlink: 'syz.3.1070': attribute type 2 has an invalid length. [ 412.615033][ T9126] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1070'. [ 412.667003][ T9127] 9p: Bad value for 'rfdno' [ 413.459580][ T8864] udevd[8864]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 413.519610][ T8864] udevd[8864]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 413.694770][ T9146] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1075'. [ 420.260079][ T9183] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1089'. [ 420.560051][ T5870] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 420.709965][ T5870] usb 4-1: Using ep0 maxpacket: 32 [ 420.712551][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.712578][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.712612][ T5870] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 420.712632][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.772770][ T5870] usb 4-1: config 0 descriptor?? [ 420.778325][ T5870] hub 4-1:0.0: USB hub found [ 420.983943][ T5870] hub 4-1:0.0: 1 port detected [ 421.476219][ T9216] 9p: Bad value for 'wfdno' [ 421.600956][ T5870] hub 4-1:0.0: activate --> -90 [ 421.739855][ T5799] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 421.889863][ T5799] usb 2-1: Using ep0 maxpacket: 16 [ 421.892802][ T5799] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 421.892825][ T5799] usb 2-1: config 0 has no interface number 0 [ 421.892865][ T5799] usb 2-1: config 0 interface 106 altsetting 7 has an endpoint descriptor with address 0x95, changing to 0x85 [ 421.892887][ T5799] usb 2-1: config 0 interface 106 altsetting 7 bulk endpoint 0x85 has invalid maxpacket 16 [ 421.892907][ T5799] usb 2-1: config 0 interface 106 altsetting 7 bulk endpoint 0xA has invalid maxpacket 1023 [ 421.892928][ T5799] usb 2-1: config 0 interface 106 has no altsetting 0 [ 421.895969][ T5799] usb 2-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=a3.1e [ 421.895993][ T5799] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.896011][ T5799] usb 2-1: Product: syz [ 421.896023][ T5799] usb 2-1: Manufacturer: syz [ 421.896036][ T5799] usb 2-1: SerialNumber: syz [ 421.921805][ T5799] usb 2-1: config 0 descriptor?? [ 421.923152][ T9216] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 421.923337][ T9216] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 422.005404][ T5870] usb 4-1-port1: cannot disable (err = -71) [ 422.027702][ T5907] usb 4-1: USB disconnect, device number 11 [ 422.027989][ T12] usb 4-1: Failed to suspend device, error -19 [ 422.131186][ T9216] vivid-003: disconnect [ 422.142148][ T9215] vivid-003: reconnect [ 422.147831][ C1] usb 2-1: NFC: Urb failure (status -71) [ 422.148813][ C1] usb 2-1: NFC: Urb failure (status -71) [ 422.152288][ T5799] usb 2-1: NFC: Unable to get FW version [ 422.154234][ T5799] pn533_usb 2-1:0.106: probe with driver pn533_usb failed with error -71 [ 422.204209][ T5799] usb 2-1: USB disconnect, device number 16 [ 422.942234][ T9243] siw: device registration error -23 [ 423.009418][ T9243] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1113'. [ 423.298163][ T9257] overlayfs: missing 'lowerdir' [ 423.353041][ T9261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1118'. [ 425.764138][ T9329] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1149'. [ 425.900362][ T9329] nbd: socks must be embedded in a SOCK_ITEM attr [ 426.243006][ T8864] udevd[8864]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 430.279907][ T5907] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 430.439829][ T5907] usb 3-1: Using ep0 maxpacket: 32 [ 430.442835][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.442863][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.442908][ T5907] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 430.442928][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.447889][ T5907] usb 3-1: config 0 descriptor?? [ 430.452527][ T5907] hub 3-1:0.0: USB hub found [ 430.654393][ T5907] hub 3-1:0.0: 1 port detected [ 430.804453][ T9449] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1202'. [ 430.897978][ T9453] siw: device registration error -23 [ 431.071656][ T9449] nbd: socks must be embedded in a SOCK_ITEM attr [ 431.086062][ T9453] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1205'. [ 431.263832][ T5870] hub 3-1:0.0: activate --> -90 [ 431.385601][ T9473] overlayfs: missing 'lowerdir' [ 431.437700][ T9475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1210'. [ 431.480032][ T8864] udevd[8864]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 431.670500][ T993] usb 3-1: USB disconnect, device number 15 [ 433.061398][ T9515] batadv0: entered promiscuous mode [ 433.072654][ T9515] bond0: entered promiscuous mode [ 433.072669][ T9515] bond_slave_0: entered promiscuous mode [ 433.072803][ T9515] bond_slave_1: entered promiscuous mode [ 433.074209][ T9515] debugfs: 'hsr1' already exists in 'hsr' [ 433.074232][ T9515] Cannot create hsr debugfs directory [ 433.074445][ T9515] hsr1: entered allmulticast mode [ 433.074458][ T9515] batadv0: entered allmulticast mode [ 433.074472][ T9515] bond0: entered allmulticast mode [ 433.074484][ T9515] bond_slave_0: entered allmulticast mode [ 433.074499][ T9515] bond_slave_1: entered allmulticast mode [ 433.111518][ T9521] netlink: 'syz.2.1230': attribute type 2 has an invalid length. [ 433.111582][ T9521] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1230'. [ 433.111866][ T9515] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 433.193620][ T9515] 9p: Bad value for 'rfdno' [ 434.799672][ T9540] netlink: 'syz.2.1235': attribute type 2 has an invalid length. [ 434.799816][ T9540] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1235'. [ 434.980583][ T9546] 9p: Bad value for 'rfdno' [ 435.730480][ T9562] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1244'. [ 436.099030][ T9576] overlayfs: missing 'lowerdir' [ 436.121696][ T9576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1251'. [ 436.731015][ T9597] netlink: 'syz.2.1252': attribute type 2 has an invalid length. [ 436.732338][ T9597] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1252'. [ 436.876024][ T9598] 9p: Bad value for 'rfdno' [ 438.347902][ T9623] overlayfs: missing 'lowerdir' [ 438.390987][ T9623] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1268'. [ 440.429660][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.438063][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.658826][ T9666] overlayfs: missing 'lowerdir' [ 440.668986][ T9665] siw: device registration error -23 [ 440.703773][ T9666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1285'. [ 440.790070][ T9665] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1286'. [ 441.925958][ T9701] overlayfs: missing 'lowerdir' [ 441.950929][ T9701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1300'. [ 442.710048][ T5908] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 442.942732][ T5908] usb 4-1: Using ep0 maxpacket: 32 [ 442.945102][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.945128][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 442.945170][ T5908] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 442.945189][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.964020][ T5908] usb 4-1: config 0 descriptor?? [ 442.967935][ T5908] hub 4-1:0.0: USB hub found [ 443.184903][ T5908] hub 4-1:0.0: 1 port detected [ 443.581994][ T9732] overlayfs: missing 'lowerdir' [ 443.621287][ T9732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1313'. [ 443.798031][ T5908] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 443.809283][ T10] usb 4-1: USB disconnect, device number 12 [ 443.867138][ T9738] batadv0: entered promiscuous mode [ 443.881532][ T9741] netlink: 'syz.1.1314': attribute type 2 has an invalid length. [ 443.881597][ T9741] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1314'. [ 443.892774][ T9738] bond0: entered promiscuous mode [ 443.892794][ T9738] bond_slave_0: entered promiscuous mode [ 443.892995][ T9738] bond_slave_1: entered promiscuous mode [ 443.926013][ T9738] debugfs: 'hsr1' already exists in 'hsr' [ 443.926040][ T9738] Cannot create hsr debugfs directory [ 443.926263][ T9738] hsr1: entered allmulticast mode [ 443.926277][ T9738] batadv0: entered allmulticast mode [ 443.926293][ T9738] bond0: entered allmulticast mode [ 443.926303][ T9738] bond_slave_0: entered allmulticast mode [ 443.926318][ T9738] bond_slave_1: entered allmulticast mode [ 443.926854][ T9738] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 444.022921][ T9738] 9p: Bad value for 'rfdno' [ 445.541575][ T9789] FAULT_INJECTION: forcing a failure. [ 445.541575][ T9789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 445.541628][ T9789] CPU: 1 UID: 0 PID: 9789 Comm: syz.4.1337 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 445.541652][ T9789] Tainted: [L]=SOFTLOCKUP [ 445.541658][ T9789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 445.541678][ T9789] Call Trace: [ 445.541685][ T9789] [ 445.541693][ T9789] dump_stack_lvl+0xe8/0x150 [ 445.541816][ T9789] should_fail_ex+0x46b/0x600 [ 445.541938][ T9789] _copy_from_user+0x2d/0xb0 [ 445.542008][ T9789] ucma_write+0x166/0x2f0 [ 445.542117][ T9789] ? __pfx_ucma_write+0x10/0x10 [ 445.542168][ T9789] ? rw_verify_area+0x25b/0x4e0 [ 445.542245][ T9789] vfs_writev+0x4c6/0x9a0 [ 445.542289][ T9789] ? __pfx_ucma_write+0x10/0x10 [ 445.542311][ T9789] ? __pfx_vfs_writev+0x10/0x10 [ 445.542341][ T9789] ? __fget_files+0x2a/0x420 [ 445.542396][ T9789] ? __fget_files+0x3a6/0x420 [ 445.542414][ T9789] ? __fget_files+0x2a/0x420 [ 445.542440][ T9789] do_writev+0x15a/0x2e0 [ 445.542461][ T9789] ? __pfx_do_writev+0x10/0x10 [ 445.542483][ T9789] ? __secure_computing+0xe1/0x2a0 [ 445.542511][ T9789] do_syscall_64+0x14d/0xf80 [ 445.542587][ T9789] ? trace_irq_disable+0x3b/0x150 [ 445.542612][ T9789] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.542648][ T9789] ? clear_bhb_loop+0x40/0x90 [ 445.542668][ T9789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.542685][ T9789] RIP: 0033:0x7faa5209c799 [ 445.542736][ T9789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.542750][ T9789] RSP: 002b:00007faa502f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 445.542775][ T9789] RAX: ffffffffffffffda RBX: 00007faa52315fa0 RCX: 00007faa5209c799 [ 445.542787][ T9789] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 000000000000000c [ 445.542798][ T9789] RBP: 00007faa502f6090 R08: 0000000000000000 R09: 0000000000000000 [ 445.542809][ T9789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.542819][ T9789] R13: 00007faa52316038 R14: 00007faa52315fa0 R15: 00007fffcbfd6908 [ 445.542849][ T9789] [ 448.147013][ T9836] FAULT_INJECTION: forcing a failure. [ 448.147013][ T9836] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 448.147070][ T9836] CPU: 1 UID: 0 PID: 9836 Comm: syz.4.1353 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 448.147095][ T9836] Tainted: [L]=SOFTLOCKUP [ 448.147101][ T9836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 448.147111][ T9836] Call Trace: [ 448.147119][ T9836] [ 448.147127][ T9836] dump_stack_lvl+0xe8/0x150 [ 448.147158][ T9836] should_fail_ex+0x46b/0x600 [ 448.147185][ T9836] _copy_to_user+0x31/0xb0 [ 448.147211][ T9836] simple_read_from_buffer+0xe1/0x170 [ 448.147341][ T9836] proc_fail_nth_read+0x1be/0x230 [ 448.147408][ T9836] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 448.147427][ T9836] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 448.147448][ T9836] ? vfs_read+0x1f7/0xa80 [ 448.147472][ T9836] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 448.147494][ T9836] vfs_read+0x212/0xa80 [ 448.147525][ T9836] ? __pfx_vfs_read+0x10/0x10 [ 448.147550][ T9836] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 448.147638][ T9836] ? lockdep_hardirqs_on+0x7a/0x110 [ 448.147695][ T9836] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 448.147718][ T9836] ? mutex_lock_nested+0x152/0x1d0 [ 448.147738][ T9836] ? fdget_pos+0x252/0x320 [ 448.147766][ T9836] ksys_read+0x156/0x270 [ 448.147792][ T9836] ? __pfx_ksys_read+0x10/0x10 [ 448.147825][ T9836] do_syscall_64+0x14d/0xf80 [ 448.147842][ T9836] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.147860][ T9836] ? clear_bhb_loop+0x40/0x90 [ 448.147882][ T9836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.147900][ T9836] RIP: 0033:0x7faa5205cfce [ 448.147917][ T9836] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 448.147932][ T9836] RSP: 002b:00007faa502b3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 448.147951][ T9836] RAX: ffffffffffffffda RBX: 00007faa502b46c0 RCX: 00007faa5205cfce [ 448.147964][ T9836] RDX: 000000000000000f RSI: 00007faa502b40a0 RDI: 0000000000000007 [ 448.147975][ T9836] RBP: 00007faa502b4090 R08: 0000000000000000 R09: 0000000000000000 [ 448.147985][ T9836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.147996][ T9836] R13: 00007faa52316218 R14: 00007faa52316180 R15: 00007fffcbfd6908 [ 448.148025][ T9836] [ 448.970702][ T9850] FAULT_INJECTION: forcing a failure. [ 448.970702][ T9850] name failslab, interval 1, probability 0, space 0, times 1 [ 448.970738][ T9850] CPU: 1 UID: 0 PID: 9850 Comm: syz.0.1361 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 448.970762][ T9850] Tainted: [L]=SOFTLOCKUP [ 448.970768][ T9850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 448.970778][ T9850] Call Trace: [ 448.970785][ T9850] [ 448.970793][ T9850] dump_stack_lvl+0xe8/0x150 [ 448.970823][ T9850] should_fail_ex+0x46b/0x600 [ 448.970852][ T9850] should_failslab+0xa8/0x100 [ 448.970939][ T9850] __kmalloc_noprof+0xdf/0x7b0 [ 448.971021][ T9850] ? bit_cursor+0xec1/0x1f10 [ 448.971088][ T9850] bit_cursor+0xec1/0x1f10 [ 448.971112][ T9850] ? __lock_acquire+0x6b5/0x2cf0 [ 448.971164][ T9850] ? __pfx_bit_cursor+0x10/0x10 [ 448.971191][ T9850] ? get_color+0x2b8/0x4b0 [ 448.971242][ T9850] ? fbcon_cursor+0x4ce/0x700 [ 448.971270][ T9850] con_write+0x23d/0x2e0 [ 448.971346][ T9850] n_tty_write+0x617/0x12b0 [ 448.971420][ T9850] ? __pfx_n_tty_write+0x10/0x10 [ 448.971437][ T9850] ? __pfx_woken_wake_function+0x10/0x10 [ 448.971457][ T9850] ? rcu_is_watching+0x15/0xb0 [ 448.971483][ T9850] ? __pfx_n_tty_write+0x10/0x10 [ 448.971501][ T9850] file_tty_write+0x562/0xa30 [ 448.971556][ T9850] vfs_write+0x629/0xba0 [ 448.971589][ T9850] ? __pfx_vfs_write+0x10/0x10 [ 448.971621][ T9850] ? __fget_files+0x2a/0x420 [ 448.971648][ T9850] ksys_write+0x156/0x270 [ 448.971672][ T9850] ? __pfx_ksys_write+0x10/0x10 [ 448.971705][ T9850] do_syscall_64+0x14d/0xf80 [ 448.971722][ T9850] ? trace_irq_disable+0x3b/0x150 [ 448.971740][ T9850] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.971757][ T9850] ? clear_bhb_loop+0x40/0x90 [ 448.971778][ T9850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.971794][ T9850] RIP: 0033:0x7fe5a3c1c799 [ 448.971811][ T9850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 448.971825][ T9850] RSP: 002b:00007fe5a1e6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 448.971842][ T9850] RAX: ffffffffffffffda RBX: 00007fe5a3e95fa0 RCX: 00007fe5a3c1c799 [ 448.971854][ T9850] RDX: 0000000000001006 RSI: 0000200000000000 RDI: 0000000000000004 [ 448.971864][ T9850] RBP: 00007fe5a1e6e090 R08: 0000000000000000 R09: 0000000000000000 [ 448.971873][ T9850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.971882][ T9850] R13: 00007fe5a3e96038 R14: 00007fe5a3e95fa0 R15: 00007ffda6809208 [ 448.971910][ T9850] [ 449.319931][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 449.324464][ T9859] netlink: 'syz.1.1365': attribute type 2 has an invalid length. [ 449.324516][ T9859] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1365'. [ 449.346120][ T9859] 9p: Bad value for 'rfdno' [ 449.927615][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 449.927671][ T10] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 449.927691][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.953366][ T10] usb 4-1: config 0 descriptor?? [ 449.964325][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 450.356548][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 450.358228][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 450.359136][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 450.360048][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 450.360933][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 450.361802][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 450.362473][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 450.363330][ T10] pwc: recv_control_msg error -32 req 02 val 2100 [ 450.364175][ T10] pwc: recv_control_msg error -32 req 04 val 1500 [ 450.616633][ T9849] vxcan1: tx drop: invalid da for name 0xffffffffffffffff [ 450.630447][ T9849] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.1362'. [ 450.845874][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 450.846330][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 450.846928][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 450.847376][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 450.848027][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 450.848473][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 450.874264][ T10] pwc: Registered as video103. [ 450.883123][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input24 [ 450.910442][ T10] usb 4-1: USB disconnect, device number 13 [ 453.270968][ T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 453.298762][ T9934] FAULT_INJECTION: forcing a failure. [ 453.298762][ T9934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 453.298796][ T9934] CPU: 0 UID: 0 PID: 9934 Comm: syz.3.1396 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 453.298820][ T9934] Tainted: [L]=SOFTLOCKUP [ 453.298826][ T9934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 453.298865][ T9934] Call Trace: [ 453.298872][ T9934] [ 453.298880][ T9934] dump_stack_lvl+0xe8/0x150 [ 453.298911][ T9934] should_fail_ex+0x46b/0x600 [ 453.298938][ T9934] _copy_from_user+0x2d/0xb0 [ 453.298964][ T9934] ___sys_sendmsg+0x1c6/0x360 [ 453.299107][ T9934] ? __pfx____sys_sendmsg+0x10/0x10 [ 453.299179][ T9934] ? __fget_files+0x2a/0x420 [ 453.299200][ T9934] ? __fget_files+0x3a6/0x420 [ 453.299227][ T9934] __x64_sys_sendmsg+0x1c3/0x2a0 [ 453.299246][ T9934] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 453.299271][ T9934] ? __pfx_ksys_write+0x10/0x10 [ 453.299310][ T9934] do_syscall_64+0x14d/0xf80 [ 453.299327][ T9934] ? trace_irq_disable+0x3b/0x150 [ 453.299369][ T9934] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.299401][ T9934] ? clear_bhb_loop+0x40/0x90 [ 453.299424][ T9934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.299456][ T9934] RIP: 0033:0x7f286e73c799 [ 453.299473][ T9934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.299487][ T9934] RSP: 002b:00007f286c996028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 453.299506][ T9934] RAX: ffffffffffffffda RBX: 00007f286e9b5fa0 RCX: 00007f286e73c799 [ 453.299519][ T9934] RDX: 0000000004000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 453.299530][ T9934] RBP: 00007f286c996090 R08: 0000000000000000 R09: 0000000000000000 [ 453.299541][ T9934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.299552][ T9934] R13: 00007f286e9b6038 R14: 00007f286e9b5fa0 R15: 00007ffd32e8dc38 [ 453.299581][ T9934] [ 453.419868][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 453.421721][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.421748][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.421782][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 453.421803][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.446945][ T10] usb 2-1: config 0 descriptor?? [ 453.452726][ T10] hub 2-1:0.0: USB hub found [ 453.669975][ T10] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 453.713908][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 453.714112][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 453.773911][ T10] usb 2-1: USB disconnect, device number 17 [ 471.579515][ T9951] overlayfs: missing 'lowerdir' [ 471.823494][ T9960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1403'. [ 474.099520][ T9979] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1413'. [ 474.312592][ T9990] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 474.437605][ T9979] nbd: socks must be embedded in a SOCK_ITEM attr [ 475.180931][ T9956] udevd[9956]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 475.291031][T10010] overlayfs: missing 'lowerdir' [ 475.336738][T10010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1423'. [ 476.865409][T10030] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1432'. [ 476.993691][T10039] 9p: Bad value for 'wfdno' [ 477.909822][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 478.069879][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 478.072051][ T10] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 478.072076][ T10] usb 4-1: config 0 has no interface number 0 [ 478.072116][ T10] usb 4-1: config 0 interface 106 altsetting 7 has an endpoint descriptor with address 0x95, changing to 0x85 [ 478.072141][ T10] usb 4-1: config 0 interface 106 altsetting 7 bulk endpoint 0x85 has invalid maxpacket 16 [ 478.072162][ T10] usb 4-1: config 0 interface 106 altsetting 7 bulk endpoint 0xA has invalid maxpacket 1023 [ 478.072182][ T10] usb 4-1: config 0 interface 106 has no altsetting 0 [ 478.074637][ T10] usb 4-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=a3.1e [ 478.074663][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.074681][ T10] usb 4-1: Product: syz [ 478.074693][ T10] usb 4-1: Manufacturer: syz [ 478.074721][ T10] usb 4-1: SerialNumber: syz [ 478.184643][ T10] usb 4-1: config 0 descriptor?? [ 478.185425][T10039] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 478.185547][T10039] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 478.394188][T10039] vivid-002: disconnect [ 478.398787][ C0] usb 4-1: NFC: Urb failure (status -71) [ 478.399118][ C0] usb 4-1: NFC: Urb failure (status -71) [ 478.416034][ T10] usb 4-1: NFC: Unable to get FW version [ 478.428371][ T10] pn533_usb 4-1:0.106: probe with driver pn533_usb failed with error -71 [ 478.437940][T10038] vivid-002: reconnect [ 478.456846][ T10] usb 4-1: USB disconnect, device number 14 [ 481.913371][T10175] overlayfs: missing 'lowerdir' [ 481.935323][T10175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1501'. [ 483.142509][T10214] overlayfs: missing 'lowerdir' [ 483.198601][T10218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1517'. [ 485.432290][T10261] FAULT_INJECTION: forcing a failure. [ 485.432290][T10261] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 485.432324][T10261] CPU: 0 UID: 0 PID: 10261 Comm: syz.1.1533 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 485.432348][T10261] Tainted: [L]=SOFTLOCKUP [ 485.432354][T10261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 485.432364][T10261] Call Trace: [ 485.432371][T10261] [ 485.432379][T10261] dump_stack_lvl+0xe8/0x150 [ 485.432408][T10261] should_fail_ex+0x46b/0x600 [ 485.432436][T10261] _copy_to_user+0x31/0xb0 [ 485.432462][T10261] simple_read_from_buffer+0xe1/0x170 [ 485.432489][T10261] proc_fail_nth_read+0x1be/0x230 [ 485.432513][T10261] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 485.432536][T10261] ? rw_verify_area+0x2ac/0x4e0 [ 485.432559][T10261] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 485.432580][T10261] vfs_read+0x212/0xa80 [ 485.432611][T10261] ? __pfx_vfs_read+0x10/0x10 [ 485.432636][T10261] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 485.432662][T10261] ? lockdep_hardirqs_on+0x7a/0x110 [ 485.432686][T10261] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 485.432709][T10261] ? mutex_lock_nested+0x152/0x1d0 [ 485.432728][T10261] ? fdget_pos+0x252/0x320 [ 485.432757][T10261] ksys_read+0x156/0x270 [ 485.432782][T10261] ? __pfx_ksys_read+0x10/0x10 [ 485.432810][T10261] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 485.432962][T10261] do_syscall_64+0x14d/0xf80 [ 485.432978][T10261] ? trace_irq_disable+0x3b/0x150 [ 485.432998][T10261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.433016][T10261] ? clear_bhb_loop+0x40/0x90 [ 485.433037][T10261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.433054][T10261] RIP: 0033:0x7f34b370cfce [ 485.433071][T10261] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 485.433086][T10261] RSP: 002b:00007f34b199dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 485.433105][T10261] RAX: ffffffffffffffda RBX: 00007f34b199e6c0 RCX: 00007f34b370cfce [ 485.433118][T10261] RDX: 000000000000000f RSI: 00007f34b199e0a0 RDI: 0000000000000004 [ 485.433130][T10261] RBP: 00007f34b199e090 R08: 0000000000000000 R09: 0000000000000000 [ 485.433141][T10261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.433151][T10261] R13: 00007f34b39c6038 R14: 00007f34b39c5fa0 R15: 00007ffd84e8b9e8 [ 485.433180][T10261] [ 486.800650][T10310] libceph: resolve '96.' (ret=-3): failed [ 487.188157][T10323] 9p: Bad value for 'wfdno' [ 487.889909][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 488.039844][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 488.043030][ T10] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 488.043057][ T10] usb 2-1: config 0 has no interface number 0 [ 488.043117][ T10] usb 2-1: config 0 interface 106 altsetting 7 has an endpoint descriptor with address 0x95, changing to 0x85 [ 488.043142][ T10] usb 2-1: config 0 interface 106 altsetting 7 bulk endpoint 0x85 has invalid maxpacket 16 [ 488.043164][ T10] usb 2-1: config 0 interface 106 altsetting 7 bulk endpoint 0xA has invalid maxpacket 1023 [ 488.043186][ T10] usb 2-1: config 0 interface 106 has no altsetting 0 [ 488.048743][ T10] usb 2-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=a3.1e [ 488.048769][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.048786][ T10] usb 2-1: Product: syz [ 488.048798][ T10] usb 2-1: Manufacturer: syz [ 488.048818][ T10] usb 2-1: SerialNumber: syz [ 488.155005][ T10] usb 2-1: config 0 descriptor?? [ 488.156870][T10323] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 488.157368][T10323] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 488.374143][T10323] vivid-003: disconnect [ 488.388316][ C0] usb 2-1: NFC: Urb failure (status -71) [ 488.406813][T10321] vivid-003: reconnect [ 488.408657][ C0] usb 2-1: NFC: Urb failure (status -71) [ 488.422402][ T10] usb 2-1: NFC: Unable to get FW version [ 488.425437][ T10] pn533_usb 2-1:0.106: probe with driver pn533_usb failed with error -71 [ 488.467035][ T10] usb 2-1: USB disconnect, device number 18 [ 490.318607][T10390] 9p: Bad value for 'wfdno' [ 490.522778][T10396] FAULT_INJECTION: forcing a failure. [ 490.522778][T10396] name failslab, interval 1, probability 0, space 0, times 0 [ 490.522836][T10396] CPU: 0 UID: 0 PID: 10396 Comm: syz.0.1590 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 490.522862][T10396] Tainted: [L]=SOFTLOCKUP [ 490.522868][T10396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 490.522880][T10396] Call Trace: [ 490.522887][T10396] [ 490.522895][T10396] dump_stack_lvl+0xe8/0x150 [ 490.522925][T10396] should_fail_ex+0x46b/0x600 [ 490.522953][T10396] should_failslab+0xa8/0x100 [ 490.522973][T10396] kmem_cache_alloc_noprof+0x87/0x680 [ 490.522998][T10396] ? rcu_is_watching+0x15/0xb0 [ 490.523017][T10396] ? security_file_alloc+0x34/0x310 [ 490.523150][T10396] security_file_alloc+0x34/0x310 [ 490.523170][T10396] init_file+0x96/0x2d0 [ 490.523193][T10396] alloc_empty_file+0x6e/0x1d0 [ 490.523214][T10396] path_openat+0x11b/0x38a0 [ 490.523296][T10396] ? finish_task_switch+0x240/0x920 [ 490.523316][T10396] ? lockdep_hardirqs_on+0x7a/0x110 [ 490.523350][T10396] ? rcu_is_watching+0x15/0xb0 [ 490.523370][T10396] ? trace_sched_exit_tp+0x3a/0x150 [ 490.523390][T10396] ? __schedule+0x1569/0x5240 [ 490.523414][T10396] ? rtlock_slowlock_locked+0xfb/0x3c80 [ 490.523444][T10396] ? __pfx_path_openat+0x10/0x10 [ 490.523468][T10396] ? __lock_acquire+0x6b5/0x2cf0 [ 490.523497][T10396] ? do_raw_spin_lock+0x12b/0x2f0 [ 490.523528][T10396] do_file_open+0x23e/0x4a0 [ 490.523550][T10396] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 490.523578][T10396] ? __pfx_do_file_open+0x10/0x10 [ 490.523599][T10396] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 490.523641][T10396] ? alloc_fd+0x64e/0x6c0 [ 490.523671][T10396] do_sys_openat2+0x113/0x200 [ 490.523692][T10396] ? __pfx___schedule+0x10/0x10 [ 490.523714][T10396] ? __pfx_do_sys_openat2+0x10/0x10 [ 490.523738][T10396] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 490.523765][T10396] __x64_sys_openat+0x138/0x170 [ 490.523790][T10396] do_syscall_64+0x14d/0xf80 [ 490.523806][T10396] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.523824][T10396] ? clear_bhb_loop+0x40/0x90 [ 490.523845][T10396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.523862][T10396] RIP: 0033:0x7fe5a3c1c799 [ 490.523880][T10396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.523894][T10396] RSP: 002b:00007fe5a1e2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 490.523914][T10396] RAX: ffffffffffffffda RBX: 00007fe5a3e96180 RCX: 00007fe5a3c1c799 [ 490.523927][T10396] RDX: 0000000000000002 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 490.523940][T10396] RBP: 00007fe5a1e2c090 R08: 0000000000000000 R09: 0000000000000000 [ 490.523951][T10396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.523962][T10396] R13: 00007fe5a3e96218 R14: 00007fe5a3e96180 R15: 00007ffda6809208 [ 490.523990][T10396] [ 490.970313][ T5870] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 491.215515][T10395] FAULT_INJECTION: forcing a failure. [ 491.215515][T10395] name failslab, interval 1, probability 0, space 0, times 0 [ 491.215549][T10395] CPU: 0 UID: 0 PID: 10395 Comm: syz.2.1594 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 491.215573][T10395] Tainted: [L]=SOFTLOCKUP [ 491.215579][T10395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 491.215590][T10395] Call Trace: [ 491.215597][T10395] [ 491.215604][T10395] dump_stack_lvl+0xe8/0x150 [ 491.215634][T10395] should_fail_ex+0x46b/0x600 [ 491.215660][T10395] should_failslab+0xa8/0x100 [ 491.215680][T10395] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 491.215705][T10395] ? __alloc_skb+0x1d0/0x7d0 [ 491.215811][T10395] ? lockdep_hardirqs_on+0x7a/0x110 [ 491.215841][T10395] __alloc_skb+0x1d0/0x7d0 [ 491.215867][T10395] netlink_sendmsg+0x5d4/0xb40 [ 491.215974][T10395] ? __pfx_netlink_sendmsg+0x10/0x10 [ 491.215998][T10395] ? unwind_get_return_address+0x4d/0x90 [ 491.216031][T10395] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 491.216107][T10395] ____sys_sendmsg+0x94c/0x9c0 [ 491.216131][T10395] ? __pfx_____sys_sendmsg+0x10/0x10 [ 491.216158][T10395] ? import_iovec+0x73/0xa0 [ 491.216224][T10395] ___sys_sendmsg+0x2a5/0x360 [ 491.216247][T10395] ? __pfx____sys_sendmsg+0x10/0x10 [ 491.216298][T10395] ? __fget_files+0x2a/0x420 [ 491.216318][T10395] ? __fget_files+0x3a6/0x420 [ 491.216348][T10395] __x64_sys_sendmsg+0x1c3/0x2a0 [ 491.216375][T10395] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 491.216402][T10395] ? __pfx_ksys_write+0x10/0x10 [ 491.216436][T10395] do_syscall_64+0x14d/0xf80 [ 491.216452][T10395] ? trace_irq_disable+0x3b/0x150 [ 491.216471][T10395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.216489][T10395] ? clear_bhb_loop+0x40/0x90 [ 491.216511][T10395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.216529][T10395] RIP: 0033:0x7f024b62c799 [ 491.216546][T10395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 491.216561][T10395] RSP: 002b:00007f0249886028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 491.216581][T10395] RAX: ffffffffffffffda RBX: 00007f024b8a5fa0 RCX: 00007f024b62c799 [ 491.216594][T10395] RDX: 0000000000044004 RSI: 0000200000000400 RDI: 0000000000000003 [ 491.216606][T10395] RBP: 00007f0249886090 R08: 0000000000000000 R09: 0000000000000000 [ 491.216617][T10395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.216628][T10395] R13: 00007f024b8a6038 R14: 00007f024b8a5fa0 R15: 00007ffd24bbe158 [ 491.216656][T10395] [ 491.484616][ T5870] usb 2-1: Using ep0 maxpacket: 16 [ 491.507978][ T5870] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 491.508005][ T5870] usb 2-1: config 0 has no interface number 0 [ 491.508041][ T5870] usb 2-1: config 0 interface 106 altsetting 7 has an endpoint descriptor with address 0x95, changing to 0x85 [ 491.508064][ T5870] usb 2-1: config 0 interface 106 altsetting 7 bulk endpoint 0x85 has invalid maxpacket 16 [ 491.508087][ T5870] usb 2-1: config 0 interface 106 altsetting 7 bulk endpoint 0xA has invalid maxpacket 1023 [ 491.508107][ T5870] usb 2-1: config 0 interface 106 has no altsetting 0 [ 491.567612][ T5870] usb 2-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=a3.1e [ 491.567655][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.567691][ T5870] usb 2-1: Product: syz [ 491.567716][ T5870] usb 2-1: Manufacturer: syz [ 491.567742][ T5870] usb 2-1: SerialNumber: syz [ 491.630851][ T5870] usb 2-1: config 0 descriptor?? [ 491.651786][T10390] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 491.696107][T10390] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 492.159230][T10390] vivid-003: disconnect [ 492.196207][ C0] usb 2-1: NFC: Urb failure (status -71) [ 492.198835][T10389] vivid-003: reconnect [ 492.199205][ C0] usb 2-1: NFC: Urb failure (status -71) [ 492.203259][ T5870] usb 2-1: NFC: Unable to get FW version [ 492.217748][ T5870] pn533_usb 2-1:0.106: probe with driver pn533_usb failed with error -71 [ 492.313845][ T5870] usb 2-1: USB disconnect, device number 19 [ 493.358982][T10465] ======================================================= [ 493.358982][T10465] WARNING: The mand mount option has been deprecated and [ 493.358982][T10465] and is ignored by this kernel. Remove the mand [ 493.358982][T10465] option from the mount to silence this warning. [ 493.358982][T10465] ======================================================= [ 493.823651][T10483] netlink: 'syz.4.1633': attribute type 2 has an invalid length. [ 493.823709][T10483] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1633'. [ 493.851306][T10483] 9p: Bad value for 'rfdno' [ 494.029868][ T9] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 494.160318][ T9] usb 2-1: device descriptor read/64, error -71 [ 494.399847][ T9] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 494.445159][T10524] FAULT_INJECTION: forcing a failure. [ 494.445159][T10524] name failslab, interval 1, probability 0, space 0, times 0 [ 494.445194][T10524] CPU: 1 UID: 0 PID: 10524 Comm: syz.0.1654 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 494.445218][T10524] Tainted: [L]=SOFTLOCKUP [ 494.445224][T10524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 494.445235][T10524] Call Trace: [ 494.445242][T10524] [ 494.445250][T10524] dump_stack_lvl+0xe8/0x150 [ 494.445280][T10524] should_fail_ex+0x46b/0x600 [ 494.445307][T10524] should_failslab+0xa8/0x100 [ 494.445328][T10524] __kmalloc_noprof+0xdf/0x7b0 [ 494.445351][T10524] ? kfree+0x4d/0x6c0 [ 494.445371][T10524] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 494.445525][T10524] tomoyo_realpath_from_path+0xe3/0x5d0 [ 494.445559][T10524] ? tomoyo_path_number_perm+0x219/0x630 [ 494.445638][T10524] tomoyo_path_number_perm+0x246/0x630 [ 494.445666][T10524] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 494.445693][T10524] ? __lock_acquire+0x6b5/0x2cf0 [ 494.445746][T10524] ? __fget_files+0x2a/0x420 [ 494.445770][T10524] ? __fget_files+0x2a/0x420 [ 494.445789][T10524] ? __fget_files+0x3a6/0x420 [ 494.445808][T10524] ? __fget_files+0x2a/0x420 [ 494.445833][T10524] security_file_ioctl+0xc3/0x2a0 [ 494.445854][T10524] __se_sys_ioctl+0x47/0x170 [ 494.445915][T10524] do_syscall_64+0x14d/0xf80 [ 494.445932][T10524] ? trace_irq_disable+0x3b/0x150 [ 494.445952][T10524] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.445970][T10524] ? clear_bhb_loop+0x40/0x90 [ 494.445992][T10524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.446009][T10524] RIP: 0033:0x7fe5a3c1c799 [ 494.446026][T10524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 494.446042][T10524] RSP: 002b:00007fe5a1e6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 494.446061][T10524] RAX: ffffffffffffffda RBX: 00007fe5a3e95fa0 RCX: 00007fe5a3c1c799 [ 494.446073][T10524] RDX: 0000200000000340 RSI: 0000000000000720 RDI: 0000000000000003 [ 494.446083][T10524] RBP: 00007fe5a1e6e090 R08: 0000000000000000 R09: 0000000000000000 [ 494.446094][T10524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.446104][T10524] R13: 00007fe5a3e96038 R14: 00007fe5a3e95fa0 R15: 00007ffda6809208 [ 494.446134][T10524] [ 494.446261][T10524] ERROR: Out of memory at tomoyo_realpath_from_path. [ 494.529852][ T9] usb 2-1: device descriptor read/64, error -71 [ 494.640375][ T9] usb usb2-port1: attempt power cycle [ 494.979998][ T9] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 495.010272][ T9] usb 2-1: device descriptor read/8, error -71 [ 495.300211][ T9] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 495.320570][ T9] usb 2-1: device descriptor read/8, error -71 [ 495.447175][ T9] usb usb2-port1: unable to enumerate USB device [ 498.667610][T10609] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.668444][T10609] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.977287][T10609] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 500.981236][T10609] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 501.465963][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.466030][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.219764][ T1508] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.375141][T10684] capability: warning: `syz.3.1721' uses deprecated v2 capabilities in a way that may be insecure [ 502.425600][T10682] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1722'. [ 502.448154][T10650] bridge0: entered promiscuous mode [ 502.460455][T10650] bridge0: port 3(vlan2) entered blocking state [ 502.460526][T10650] bridge0: port 3(vlan2) entered disabled state [ 502.460632][T10650] vlan2: entered allmulticast mode [ 502.460641][T10650] bridge0: entered allmulticast mode [ 502.502494][T10686] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1722'. [ 502.513800][T10650] vlan2: left allmulticast mode [ 502.513815][T10650] bridge0: left allmulticast mode [ 502.621252][T10650] bridge0: left promiscuous mode [ 502.907731][ T1508] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.912512][ T1508] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.921928][ T1508] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.408440][T10729] tipc: Enabling of bearer rejected, failed to enable media [ 506.919900][ T5870] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 507.069838][ T5870] usb 5-1: Using ep0 maxpacket: 16 [ 507.071984][ T5870] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 507.072013][ T5870] usb 5-1: config 0 interface 0 has no altsetting 0 [ 507.074313][ T5870] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 507.074337][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.074355][ T5870] usb 5-1: Product: syz [ 507.074367][ T5870] usb 5-1: Manufacturer: syz [ 507.074379][ T5870] usb 5-1: SerialNumber: syz [ 507.143523][ T5870] usb 5-1: config 0 descriptor?? [ 507.289844][ T5907] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 508.449803][ T5907] usb 4-1: Using ep0 maxpacket: 32 [ 508.455427][ T5907] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 508.455454][ T5907] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 508.455472][ T5907] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 508.455492][ T5907] usb 4-1: config 1 has no interface number 0 [ 508.455584][ T5907] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 508.455608][ T5907] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 508.455646][ T5907] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 508.455715][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.668440][ T5907] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 508.772853][ T5870] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input25 [ 508.861176][ T5907] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 509.189944][ T5870] rc_core: IR keymap rc-imon-pad not found [ 509.189964][ T5870] Registered IR keymap rc-empty [ 509.194739][ T5870] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 509.194761][ T5870] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 509.291701][ T5870] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 509.335887][ T5870] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input26 [ 509.360999][ T5870] imon 5-1:0.0: iMON device (15c2:0041, intf0) on usb<5:19> initialized [ 509.478349][ T5870] usb 4-1: USB disconnect, device number 15 [ 509.502958][ T5870] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 509.781460][ C0] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 509.805384][ T5870] usb 5-1: USB disconnect, device number 19 [ 510.060437][ T9956] udevd[9956]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 510.217088][T10809] input: syz1 as /devices/virtual/input/input27 [ 510.806634][T10798] 9pnet_fd: p9_fd_create_tcp (10798): problem connecting socket to 127.0.0.1 [ 510.874313][T10821] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1782'. [ 513.123872][T10848] syz.4.1793 (10848): drop_caches: 2 [ 516.411628][T10889] can: request_module (can-proto-0) failed. [ 517.234680][T10931] No control pipe specified [ 519.219842][ T5907] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 519.374724][ T5907] usb 4-1: unable to get BOS descriptor or descriptor too short [ 519.375329][ T5907] usb 4-1: not running at top speed; connect to a high speed hub [ 519.376267][ T5907] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 519.378014][ T5907] usb 4-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40 [ 519.378028][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.378038][ T5907] usb 4-1: Product: syz [ 519.378045][ T5907] usb 4-1: Manufacturer: syz [ 519.378052][ T5907] usb 4-1: SerialNumber: syz [ 519.622513][ T5907] usb 4-1: 1:1 : format type 0 is detected, processed as PCM [ 519.622565][ T5907] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 519.627003][ T5907] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 519.630837][ T5907] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 519.654086][ T5907] usb 4-1: 1:1 : format type 0 is detected, processed as PCM [ 519.654111][ T5907] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 519.656230][ T5907] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 519.656754][ T5907] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 519.696061][ T5907] usb 4-1: 1:1 : format type 0 is detected, processed as PCM [ 519.696079][ T5907] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 519.697980][ T5907] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 519.772015][T10977] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1845'. [ 519.905843][ T5907] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 519.924969][ T5907] usb 4-1: USB disconnect, device number 16 [ 519.996592][T10238] udevd[10238]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 520.997032][T11011] syzkaller0: entered promiscuous mode [ 522.524625][T11056] loop1: detected capacity change from 0 to 4 [ 522.537508][T10238] Dev loop1: unable to read RDB block 4 [ 522.537551][T10238] loop1: unable to read partition table [ 522.537778][T10238] loop1: partition table beyond EOD, truncated [ 522.570008][T11056] Dev loop1: unable to read RDB block 4 [ 522.570053][T11056] loop1: unable to read partition table [ 522.570261][T11056] loop1: partition table beyond EOD, truncated [ 522.570294][T11056] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 523.016230][T11070] team0: Port device syz_tun added [ 523.219989][ T5870] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 523.401384][ T5870] usb 5-1: config 0 has an invalid interface number: 32 but max is 1 [ 523.401411][ T5870] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.401428][ T5870] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 523.401447][ T5870] usb 5-1: config 0 has no interface number 0 [ 523.401485][ T5870] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 523.401504][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.437148][ T5870] usb 5-1: config 0 descriptor?? [ 523.526154][ T5870] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 523.526230][ T5870] dvb-usb: bulk message failed: -22 (3/0) [ 523.566816][ T5870] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 523.573080][ T5870] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 523.573134][ T5870] usb 5-1: media controller created [ 523.591367][ T5870] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 523.679494][ T5870] dvb-usb: bulk message failed: -22 (6/0) [ 523.679573][ T5870] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 523.721971][ T5870] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input28 [ 523.760460][T11099] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 523.841787][ T5870] dvb-usb: schedule remote query interval to 150 msecs. [ 523.841804][ T5870] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 523.880855][T11075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.881133][T11075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.002615][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 524.002649][ T10] dvb-usb: error while querying for an remote control event. [ 524.159921][ T5907] dvb-usb: bulk message failed: -22 (1/0) [ 524.159951][ T5907] dvb-usb: error while querying for an remote control event. [ 524.319859][ T5907] dvb-usb: bulk message failed: -22 (1/0) [ 524.319885][ T5907] dvb-usb: error while querying for an remote control event. [ 524.481373][ T5907] dvb-usb: bulk message failed: -22 (1/0) [ 524.481404][ T5907] dvb-usb: error while querying for an remote control event. [ 524.640235][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 524.640260][ T9] dvb-usb: error while querying for an remote control event. [ 524.799830][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 524.799861][ T9] dvb-usb: error while querying for an remote control event. [ 524.963405][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 524.963446][ T9] dvb-usb: error while querying for an remote control event. [ 525.121539][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 525.121569][ T9] dvb-usb: error while querying for an remote control event. [ 525.279846][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 525.279876][ T9] dvb-usb: error while querying for an remote control event. [ 525.450153][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 525.453310][ T9] dvb-usb: error while querying for an remote control event. [ 525.787950][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 525.787981][ T9] dvb-usb: error while querying for an remote control event. [ 525.821733][T11141] vlan2: entered promiscuous mode [ 525.821747][T11141] syz_tun: entered promiscuous mode [ 525.939884][ T5907] dvb-usb: bulk message failed: -22 (1/0) [ 525.939917][ T5907] dvb-usb: error while querying for an remote control event. [ 525.970505][ T5907] usb 5-1: USB disconnect, device number 20 [ 526.269259][ T5907] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 529.208367][T11182] mkiss: ax0: crc mode is auto. [ 531.589868][T11233] netlink: 'syz.4.1965': attribute type 10 has an invalid length. [ 531.589889][T11233] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1965'. [ 531.789315][T11246] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 531.959817][ T5799] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 532.112084][ T5799] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 532.114912][ T5799] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 532.114939][ T5799] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 532.114963][ T5799] usb 5-1: Product: syz [ 532.114975][ T5799] usb 5-1: Manufacturer: syz [ 532.114988][ T5799] usb 5-1: SerialNumber: syz [ 532.681529][ T5799] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 533.039837][ T5907] usb 5-1: USB disconnect, device number 21 [ 533.070553][ T5907] usblp0: removed [ 536.845138][T11307] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 536.845164][T11307] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 536.875819][T11307] vhci_hcd vhci_hcd.0: Device attached [ 536.877565][T11316] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(14) [ 536.877589][T11316] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 536.879128][T11316] vhci_hcd vhci_hcd.0: Device attached [ 536.923802][T11307] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(13) [ 536.923829][T11307] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 536.923878][T11307] vhci_hcd vhci_hcd.0: Device attached [ 536.954856][T11307] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(17) [ 536.954882][T11307] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 536.954939][T11307] vhci_hcd vhci_hcd.0: Device attached [ 536.957017][T11307] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 536.983111][T11307] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 537.025790][T11307] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(23) [ 537.025807][T11307] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 537.025849][T11307] vhci_hcd vhci_hcd.0: Device attached [ 537.042575][T11307] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 537.139955][T11323] vhci_hcd: connection closed [ 537.142801][T11321] vhci_hcd: connection closed [ 537.147127][ T41] vhci_hcd vhci_hcd.4: stop threads [ 537.147977][ T41] vhci_hcd vhci_hcd.4: release socket [ 537.169891][ T5907] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 537.188283][T11319] vhci_hcd: connection closed [ 537.188919][T11310] vhci_hcd: connection reset by peer [ 537.210486][T11317] vhci_hcd: connection closed [ 537.237567][ T41] vhci_hcd vhci_hcd.4: disconnect device [ 537.240398][ T41] vhci_hcd vhci_hcd.4: stop threads [ 537.240422][ T41] vhci_hcd vhci_hcd.4: release socket [ 537.249934][ T41] vhci_hcd vhci_hcd.4: disconnect device [ 537.290188][ T41] vhci_hcd vhci_hcd.4: stop threads [ 537.290213][ T41] vhci_hcd vhci_hcd.4: release socket [ 537.290301][ T41] vhci_hcd vhci_hcd.4: disconnect device [ 537.293704][ T41] vhci_hcd vhci_hcd.4: stop threads [ 537.293723][ T41] vhci_hcd vhci_hcd.4: release socket [ 537.293799][ T41] vhci_hcd vhci_hcd.4: disconnect device [ 537.298573][ T41] vhci_hcd vhci_hcd.4: stop threads [ 537.298585][ T41] vhci_hcd vhci_hcd.4: release socket [ 537.298725][ T41] vhci_hcd vhci_hcd.4: disconnect device [ 541.047617][T11350] syz.4.2011 (11350) used greatest stack depth: 17536 bytes left [ 542.298954][ T5907] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 543.698179][T11437] mkiss: ax0: crc mode is auto. [ 544.181517][T11461] syzkaller0: entered promiscuous mode [ 544.209822][ T5996] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 544.379797][ T5996] usb 2-1: Using ep0 maxpacket: 8 [ 544.385415][ T5996] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 544.385440][ T5996] usb 2-1: config 0 has no interface number 0 [ 544.385483][ T5996] usb 2-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 544.385531][ T5996] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 544.385552][ T5996] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.395660][ T5996] usb 2-1: config 0 descriptor?? [ 544.403283][ T5996] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 544.618492][ T5996] usb 2-1: USB disconnect, device number 24 [ 546.055535][ T5870] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 546.176614][T11539] input: syz1 as /devices/virtual/input/input29 [ 546.212915][ T5870] usb 2-1: Using ep0 maxpacket: 16 [ 546.215188][ T5870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.215215][ T5870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 546.215251][ T5870] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 546.215271][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.291159][ T5870] usb 2-1: config 0 descriptor?? [ 546.618020][ T5813] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 547.007113][ T5813] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 547.043835][ T5813] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 547.111648][ T5870] kye 0003:0458:5016.0002: control desc unexpectedly large [ 547.201533][ T5813] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 547.203420][ T5870] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5016.0002/input/input30 [ 547.208791][ T5813] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 547.282476][ T5870] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5016.0002/input/input31 [ 547.511002][ T5870] kye 0003:0458:5016.0002: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.1-1/input0 [ 547.809826][ T5996] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 548.393382][ C0] kye 0003:0458:5016.0002: usb_submit_urb(ctrl) failed: -1 [ 549.300151][ T5813] Bluetooth: hci5: command tx timeout [ 550.775569][ T5996] usb 5-1: unable to get BOS descriptor or descriptor too short [ 550.776616][ T5996] usb 5-1: no configurations [ 550.776629][ T5996] usb 5-1: can't read configurations, error -22 [ 550.984585][ T9] usb 2-1: USB disconnect, device number 25 [ 551.095593][T11615] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 551.379800][ T5813] Bluetooth: hci5: command tx timeout [ 552.877764][T11626] binder: 11619:11626 ioctl c0306201 0 returned -14 [ 553.381215][ T37] audit: type=1800 audit(1774270541.316:17): pid=11644 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.2139" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 553.472115][ T5813] Bluetooth: hci5: command tx timeout [ 553.808197][T11653] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 553.808197][T11653] program syz.4.2141 not setting count and/or reply_len properly [ 555.551620][ T5813] Bluetooth: hci5: command tx timeout [ 559.206378][ T5118] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 559.219105][ T5118] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 559.220733][ T5118] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 559.221816][ T5118] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 559.222772][ T5118] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 560.449835][ T5907] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 560.606313][ T5907] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 560.606342][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.606361][ T5907] usb 2-1: Product: syz [ 560.606373][ T5907] usb 2-1: Manufacturer: syz [ 560.606386][ T5907] usb 2-1: SerialNumber: syz [ 560.671021][ T5907] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 560.865603][ T5870] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 561.299557][ T5996] usb 2-1: USB disconnect, device number 26 [ 561.307841][ T5118] Bluetooth: hci0: command tx timeout [ 561.843587][T11791] ------------[ cut here ]------------ [ 561.843601][T11791] kcov->t != t [ 561.843615][T11791] WARNING: kernel/kcov.c:483 at kcov_task_exit+0xf5/0x160, CPU#1: syz.1.2203/11791 [ 561.843660][T11791] Modules linked in: [ 561.843681][T11791] CPU: 1 UID: 0 PID: 11791 Comm: syz.1.2203 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 561.843709][T11791] Tainted: [L]=SOFTLOCKUP [ 561.843716][T11791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 561.843727][T11791] RIP: 0010:kcov_task_exit+0xf5/0x160 [ 561.843749][T11791] Code: 10 00 00 48 8b bb 90 00 00 00 e8 16 5b 54 00 48 89 df 5b 41 5e 41 5f e9 d9 32 5a 00 7c 1c 5b 41 5e 41 5f e9 8d 91 62 09 cc 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 eb 2a 61 09 48 89 df be 03 00 [ 561.843766][T11791] RSP: 0018:ffffc9001d687d20 EFLAGS: 00010283 [ 561.843782][T11791] RAX: c9f22bb5ee885000 RBX: ffff88803598e200 RCX: 0000000000000000 [ 561.843795][T11791] RDX: 000000009c6ac396 RSI: ffffffff8ba671e0 RDI: 00000000ffffffff [ 561.843807][T11791] RBP: ffffc9001d687e78 R08: ffffffff8b25a1d0 R09: ffffffff8ddcba80 [ 561.843820][T11791] R10: dffffc0000000000 R11: fffffbfff1ed4bb7 R12: dffffc0000000000 [ 561.843833][T11791] R13: 0000000000000000 R14: ffff88803598e208 R15: ffff88803aa39e80 [ 561.843846][T11791] FS: 0000555593d77500(0000) GS:ffff888126439000(0000) knlGS:0000000000000000 [ 561.843862][T11791] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 561.843883][T11791] CR2: 00007f024c3d56b8 CR3: 000000002c778000 CR4: 00000000003526f0 [ 561.843899][T11791] Call Trace: [ 561.843905][T11791] [ 561.843916][T11791] do_exit+0x150/0x23c0 [ 561.843936][T11791] ? lockdep_hardirqs_on+0x7a/0x110 [ 561.843967][T11791] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 561.843997][T11791] ? reacquire_held_locks+0x104/0x190 [ 561.844018][T11791] ? rt_spin_lock+0x1e0/0x400 [ 561.844039][T11791] ? __pfx_do_exit+0x10/0x10 [ 561.844058][T11791] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 561.844090][T11791] ? rt_spin_unlock+0x160/0x200 [ 561.844114][T11791] do_group_exit+0x21b/0x2d0 [ 561.844139][T11791] __x64_sys_exit_group+0x3f/0x40 [ 561.844158][T11791] x64_sys_call+0x221a/0x2240 [ 561.844176][T11791] do_syscall_64+0x14d/0xf80 [ 561.844193][T11791] ? trace_irq_disable+0x3b/0x150 [ 561.844213][T11791] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.844233][T11791] ? clear_bhb_loop+0x40/0x90 [ 561.844255][T11791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.844272][T11791] RIP: 0033:0x7f34b374c799 [ 561.844290][T11791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 561.844306][T11791] RSP: 002b:00007ffd84e8bd28 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 561.844324][T11791] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f34b374c799 [ 561.844338][T11791] RDX: 00007f34b29a1000 RSI: 0000000000000000 RDI: 0000000000000000 [ 561.844350][T11791] RBP: 00007ffd84e8bd8c R08: 0000000000000000 R09: 00000000000927c0 [ 561.844362][T11791] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000016c [ 561.844389][T11791] R13: 00000000000927c0 R14: 0000000000088a9b R15: 00007ffd84e8bde0 [ 561.844418][T11791] [ 561.844437][T11791] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 561.844455][T11791] CPU: 1 UID: 0 PID: 11791 Comm: syz.1.2203 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 561.844480][T11791] Tainted: [L]=SOFTLOCKUP [ 561.844487][T11791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 561.844498][T11791] Call Trace: [ 561.844506][T11791] [ 561.844513][T11791] vpanic+0x56c/0xa60 [ 561.844565][T11791] ? __pfx__printk+0x10/0x10 [ 561.844586][T11791] ? __pfx_vpanic+0x10/0x10 [ 561.844609][T11791] ? is_bpf_text_address+0x292/0x2b0 [ 561.844634][T11791] ? is_bpf_text_address+0x26/0x2b0 [ 561.844666][T11791] panic+0xc5/0xd0 [ 561.844689][T11791] ? __pfx_panic+0x10/0x10 [ 561.844730][T11791] __warn+0x315/0x4f0 [ 561.844753][T11791] ? kcov_task_exit+0xf5/0x160 [ 561.844774][T11791] ? kcov_task_exit+0xf5/0x160 [ 561.844795][T11791] __report_bug+0x29a/0x540 [ 561.844916][T11791] ? kcov_task_exit+0xf5/0x160 [ 561.844938][T11791] ? __pfx___report_bug+0x10/0x10 [ 561.844966][T11791] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 561.844992][T11791] ? do_raw_spin_lock+0x12b/0x2f0 [ 561.845023][T11791] ? kcov_task_exit+0xf5/0x160 [ 561.845044][T11791] report_bug+0x16a/0x220 [ 561.845069][T11791] ? kcov_task_exit+0xf5/0x160 [ 561.845088][T11791] ? kcov_task_exit+0xf7/0x160 [ 561.845107][T11791] handle_bug+0x9c/0x200 [ 561.845128][T11791] exc_invalid_op+0x1a/0x50 [ 561.845148][T11791] asm_exc_invalid_op+0x1a/0x20 [ 561.845163][T11791] RIP: 0010:kcov_task_exit+0xf5/0x160 [ 561.845182][T11791] Code: 10 00 00 48 8b bb 90 00 00 00 e8 16 5b 54 00 48 89 df 5b 41 5e 41 5f e9 d9 32 5a 00 7c 1c 5b 41 5e 41 5f e9 8d 91 62 09 cc 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 eb 2a 61 09 48 89 df be 03 00 [ 561.845197][T11791] RSP: 0018:ffffc9001d687d20 EFLAGS: 00010283 [ 561.845213][T11791] RAX: c9f22bb5ee885000 RBX: ffff88803598e200 RCX: 0000000000000000 [ 561.845227][T11791] RDX: 000000009c6ac396 RSI: ffffffff8ba671e0 RDI: 00000000ffffffff [ 561.845241][T11791] RBP: ffffc9001d687e78 R08: ffffffff8b25a1d0 R09: ffffffff8ddcba80 [ 561.845256][T11791] R10: dffffc0000000000 R11: fffffbfff1ed4bb7 R12: dffffc0000000000 [ 561.845270][T11791] R13: 0000000000000000 R14: ffff88803598e208 R15: ffff88803aa39e80 [ 561.845290][T11791] ? rt_spin_lock+0x1e0/0x400 [ 561.845320][T11791] do_exit+0x150/0x23c0 [ 561.845339][T11791] ? lockdep_hardirqs_on+0x7a/0x110 [ 561.845363][T11791] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 561.845389][T11791] ? reacquire_held_locks+0x104/0x190 [ 561.845405][T11791] ? rt_spin_lock+0x1e0/0x400 [ 561.845420][T11791] ? __pfx_do_exit+0x10/0x10 [ 561.845433][T11791] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 561.845455][T11791] ? rt_spin_unlock+0x160/0x200 [ 561.845473][T11791] do_group_exit+0x21b/0x2d0 [ 561.845490][T11791] __x64_sys_exit_group+0x3f/0x40 [ 561.845504][T11791] x64_sys_call+0x221a/0x2240 [ 561.845517][T11791] do_syscall_64+0x14d/0xf80 [ 561.845529][T11791] ? trace_irq_disable+0x3b/0x150 [ 561.845543][T11791] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.845556][T11791] ? clear_bhb_loop+0x40/0x90 [ 561.845572][T11791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.845585][T11791] RIP: 0033:0x7f34b374c799 [ 561.845597][T11791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 561.845608][T11791] RSP: 002b:00007ffd84e8bd28 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 561.845621][T11791] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f34b374c799 [ 561.845630][T11791] RDX: 00007f34b29a1000 RSI: 0000000000000000 RDI: 0000000000000000 [ 561.845639][T11791] RBP: 00007ffd84e8bd8c R08: 0000000000000000 R09: 00000000000927c0 [ 561.845647][T11791] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000016c [ 561.845656][T11791] R13: 00000000000927c0 R14: 0000000000088a9b R15: 00007ffd84e8bde0 [ 561.845677][T11791] [ 561.845822][T11791] Kernel Offset: disabled