last executing test programs: 1m10.331004291s ago: executing program 2 (id=1816): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) listen(r5, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000140000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 1m10.180192695s ago: executing program 2 (id=1819): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='\'{\xc9@e(${\x00', 0x80202, &(0x7f0000000040)={@_ha_fsid={[0x9, 0x9]}, {0x9, 0xd, 0x1, 0xc595}}, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x2}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x10b080, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f00000001c0)={0x0, 'dvmrp1\x00', {0x1}, 0x5}) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000300)={r0, &(0x7f0000000200)='\x00', 0x4000, &(0x7f0000000240)={@align=0x9, {0x1, 0x6, 0xbf00000, 0x9}}, 0x81, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0x9}) close$fd_v4l2_buffer(r2) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000340)=0x6, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@textreal={0x8, &(0x7f0000000380)="0fae9b5537660f3a158349ca0064260f01c40f009f0300f3aff00fb12266b99902000066b80060000066ba000000000f300f01c3640f20516536f30fc776c7", 0x3f}], 0x1, 0x44, &(0x7f0000000400), 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000440), 0x121202, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000480)={0x6, [0x50c, 0xf, 0x5, 0x4, 0x1ff, 0x6]}, &(0x7f00000004c0)=0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000500)=[@in6={0xa, 0x4e24, 0x4f, @private0, 0x7}, @in6={0xa, 0x4e21, 0x95c6000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x78e3}], 0x38) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01864c2, &(0x7f0000000540)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01864c2, &(0x7f0000000580)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01864c2, &(0x7f0000000600)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01864c2, &(0x7f0000000680)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r0, 0xc01064c4, &(0x7f0000000700)={&(0x7f00000006c0)=[r4, r5, r6, r7, 0x0, r8, r9], 0x7}) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000740)={'team0\x00'}) r10 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000780), 0x88080, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r10, 0x80046402, &(0x7f00000007c0)=0x4) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, &(0x7f0000000800)={{0x9, 0xb}, {0xf9, 0x4}, 0x4}) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000840), &(0x7f0000000880)=0x4) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000008c0)={[0x9, 0xb07, 0xe11, 0x6, 0x1, 0x6, 0x3, 0x100, 0x80, 0x7, 0x6, 0x4, 0x50000000, 0x4, 0x6, 0xe627], 0x26000, 0x10000}) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000980)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000bc0)={0x0, 0x1000, "ff52e310c1cdfc540f8e061222f7fc055011764fd1a6b620f0c10a8b1d7cf4745ad0404e9aa473e193d20409a34222a2346900b9ddfae827d26e051183578322132f95cd013c9c7d1249a38dc715938331d55d81591a6b68fd5d8014dd499bb070944d98d72248c6a6dec80d2c859e45bd8cd4460b59903484feba8958aa70451fdccff404e4906980579c01915787ad87cf6b46583f6c72bf34f1ca06e59a7543fe8795093e37f3e9b4b7adfa4d115fb969b5a25c5ccc0f4a473a96edcec2680bf85393d2bdeec02212d5ffd1b2b008440196193cdb1c80f40f05711a9a236164c483de96ca9ca852f25f02f37fe7e5f0b6a6103e78423c1098f771ebe31f2577e68f7bc4ccfb3f8b27412f40ed7990b6d60f32a82a8d85a3c47e34923f3c643d634b24fa50c99520a47ab5ab8960337aecd02e044a44c500882dd5aad43b9b083bd5e2421c09fe62424cd55496501cc9b0a788246e16da45cd80d8b69d8f3f5670cd45eea4ab9f6f760741252ec96f37bfe3f7b9f1755ce859e1302b37374d1524bf87fd5947859c43a7ed2a75fd5a04bd16a3107266bd0f1aa98c90d2f6a4a902c61ae905bd0a21d3cfe0fc567444f291d6d39768c054d36e9754ee00e1e8c1ad4c0ef5c3c4b958625feef57da8198d61224e04b730e2dc420372fb2674443d6c2804d62feb4f7da91936b6ae8e633dfb4e026cbb5f7e833bae4abc701586db88f222eb1ad2008a843d4fa16e45a438a6e0df9888b0009f47b83da5147b706f2941f6ba1b9a457a88cd4a00b65be9d200a398692b9a9525a4c073159b660b3cffafaaa1e74852bf7fbcb57e0552949b9d6d5fc9016adc1ba7f8ab21be3f4f6fadc1695520c225694cdfa3d0b2a3df51cdbf9eeca5c59b60790125be1aa3243f780e7d9b2cd2092eed6285734dda6cb615de9c81e68019f3a1542b45ad9810899a8b17e0acef7906b3a871a12456287a07842035556dbb67a1e7ac2a9806e5d93f2aaef5e02f67339c7cc4d98d459f7595f3586886f749b713ecb89966c2c7f55c5526329520b139794394ca83d4fb13a9b2804442a1aa846f74201c5024d262c5915741a3af49333be8a998cecfcff0902b4e7fb82a1c48c51a2b1e64d6519c8c39b29c8649d21274468af0551cbf7105437ed2d79c8e557ff9e8e52418bfae56df3a6306d3ed8885a6b3f2fc8156c1e210ed23e32459ebb7f1a8989e2bc97a2b19312cc440f5045cd739999a4ff5267fdf6994e3a666eae78072e20c17e0439cf1b9eeb53ae540db2fadaf1e4d1d1010a612c8e0f2d3915cc20d5aaee9e2a88bf820b98be5e25c3f76a8c295ca61c13022af85f6873446878c5e0e3163ac98474c72c4e0f4dc326fe20ddaf4073ea5bc37e39f6b3c17c115cca8fc10da5ac3341df1b1af0b948c5e01162e96c0c7850b006699995330cbe306d467c0287efed9c39b86014cc27e534f707691951663389828bf02f883b8ca90d7a979b6917c3c9f20124371837fa8b410a8c77d63b2bfda3e69cd68261515e742b164995a2b990919adbe2619376eb5b097748756bbfc584bf6c384572837d0632408835cdfb404fc08f5e3afdd28079216dd4364705b0bb2badcc5df3cbd997d4d140bbe1e677599852e2920efb73280293df6eae0e7355be5894a608a004f444915298a1dc0ba47fa1132b2524e114113ac42858016ebc1212368008a55eb976701e53a0e829a78d0481cf081262a5c11b111b57958e63818897b55563495a1277d1946b7b33ad21072746b04249a40f6d67d9170a1d19ed732c9fe35e18a46c4c6a749611023e013881359e47454a8f8bde9a28582faf8f0f3bdb46465ff7a087c766e568ee68e09ef692b1f348f6964ef182b27709507a60a8c29966b604d766a8f73c008e50dd48a7fa29f59aab1c68560ad03de1a4e5b4f69aa88ac8ed100bb46ea1b4c549aeea50cb79311e06831f4d773ed0a0384b532122c75f85326f6ec2ee0f0aa0da73803afd75483488ad26ad37cc462e5487121bc7f9fe9a017a541fda540c0229961b976d2e630b44241ca6ceb6c2eaddd2b1f6a1d6a43f6a9df3e76bdb09a48178661186c5d618e8432b6f60bb9eeec2e5b77af06d701980c69289254516b12d4ee526fbb3085e144c0759b29575dc603b3034505c7c732f4eedfb9251d69c18a2abc14253dac8a4cdc8f28687a84c0a8d79abd5ae170d263d95c6a82ead2f5bed8e5d0ef234772da6f10bb1c2b8d7286f945062b40ecdc8b7a3f49dc60446147b7b19e198898828fe43731147fc16f7ea627bb4b85a62d1272ee035e87c77aa04fa811e7fed81c056295d1aa23b375149de729c48223e889e2e88553b08c2a16c727b591d42909fbed7450e19fcae97775a129c4ec3bc5f9ee6cc4ff16ce7b9306973af4ed5599378b2d97b9a1990b185de6109f09b794d94ac4264ba0712ab6d30fcf484671d60d8722a2e718bb4c02f44b415529f6dedb993d7515732f87725c85979ebe0982c14a6012733c87c6f75d38b3f9bc7fca2a5ae9ffb8e911a5c014e5b59854d80845a13164393b082ae3ae92bd9e7b2944f14dc1ca37eb14fc91f1f48a3e800bcde415ea12e4dad00b0d48543a2723b8e89a58885672cf666082f86db00b4fdb2cd362f7d0ba7e32e3397980afd4fb12de46568b809325a2a28207b9819fbfd94e26cf5c9189e081bf6a940d5c754dfe532582d90428380a427e03061348f9128d4d79fb14acc44594d12054504cfc357780667ce711ea84d7bd01f543c91d96ed8c7f4e19c8dd301cd6e26f42c3a07c2699f3d117b206f533fabe6a9da4b1e920c5cd22371455a4f5e0e8e53b44419997cdf9b602939126638506a32295d87180b1466dba39775978f893180437875f212703480553335e2128b0d40b992a71c10bf4c6d56ce697efd1e07e031fdb4b82e78317ee14d48320b145c6ff1a0009ae76a844cd8425d8425808a1fb62401818370da73f644feda5f95fb7106aac05fca80ff3b2aed0956913853e7378d281cf1ab21b1ded2340bc0df68da6ed81855fbad67ef4fa17e64b7a1dc4136210923c27833ade7c5cd540984f65fd7fbcc0d8c2353df530b5aa903bc40a325434d69d078cc3d874f0258d4c83bf6ed9e47ec45bb7989166d25a037ee4bc40c9704aa8607b83ada18f57d06b7ef456409bbd82892fc57c3a667c0ad0e1e72e20c79a7302ad5376e8a080babd079e760f6d4b9585414a98a15d7b9dd92630670fd19e6b6f1d0b6cd007f3ec7e90ce0df28c2097ac549a01a7ec3e777e0ec1731550be4b0cd01b1175de114dc2e0afc64991b2580a0a26fe07d0208615fd861c2811dfe547b41d5a40b3ad4a9edd9f3fb96cc2da63971f1a7beb16e4023213b1cdea772f56920fab9cc076567df93bd6c851dac6704b175459f64e236aa0b32c2117c577ac7ca1b6e00f14773c6ea703946ddd765212951eb94c67e388ec8a8c2138a55a314a8cafc496152d89a97515812f61a9ffff5c7d56a7d45e06cd329369ebc3c51ae6382bb60874dc0a38655cffa2be7178bc0c0d8d224fc26479db6aa33feee3046234edb444a8fa0dd7f430283254e7ecfdc2003a2d3551db1258eb7344e4cbfc01295b832635399fce6afa85a6bf2beabe37d34a0023cacfedd391ad6fb3ba8a7e6c4d079d203936e8ac6524ff7084182e082f661ad4f136a81cf307e3297f51c10dba902d33a58cb9201cf59a92902bb46e56d2992ba6deb7e2d7c7198deaddab9c734dda0d3f95d63eacdb3eac83231d677b9233af4736fbfc5ab213d3c24a883a2b28dd170069319fce2d2bc53c20f14a25dbb8516d7fdd690a43ad861483f952f96ea6f1614240fcf43926354e6a24fc3b805aff28b3c71cede702ff7c5c1b1c4aa19763e15494732015ef4a7e9c99db33439c53eef9cf4cc86c91dfe6f5b29a89696362e712ca765a276317b018415864a25fd5e4bf17094964ffcf5c73b0d637f15fba81d59a8131d0f209408394938f2ddd2ab41d5b0e336ad04e1fa66d6bd963a1d18f49c344142d6af13cea50faa7b483a7f01a1d17cc2dbe7273326ca4f0d0e7d492f9d41f2c615279aec19c59af180bca0cccbc212fee940502ae36213f5ec586aa37acc4d463e8b0393f78ad435f8c528b4d564a53fd9989b8533f2edd5aa3817228e5c246eb646bdecd718641fc49632cfdf04ec7df0c100cf03d4c8ad98803f04b1f1d23760687e9aca313cee5858bf49355f1cadfb0558ce079d099fbf6b07d21ee9de43ec2c96fc773707640efbbce8108c09537da67f7fa3d4fbb425714905da1d3e036490831f98ad153d5d146ead49c569792ccbe48fba5f11dfbb88c5e8d342c8b78c6a8cf5bd02d2cdec5bec14e072eeb1d93b82427bbc04998a2ba35ed83b70ed62941c7dbb37af9fbb2643608242ee8531c4df59f1e3daeeb5c7eb4c80f4e40fe81a55f71f46dde1e0539b0a552c09271461e75b0eaf7dcd64d4469db36b6a6d5adbff0c0e60a6b40818f55980a3e714317a33ab8abc5b5e07fc58973f9bb6e526e1da2e75b6e95f72e95b71a45d9ca2a15e4bd9fda2b176e2feff0e61d0c4362719c3cc15f941e24042fe1a72df6e53c03f16595481661a9f2c420cbd102cc098c3379a947f563ccab3ee6791e4850f8128413f8029f995358ef240020d6edc1fd1687e944622b7493c4936ec6ab178ebc5e8b2b4b843ffac732892bd1918fbdc81a286df8e07177fbe13f26aa21148d774205ea781bcfc342a71355c22843da681154bd02ee03e6ec91b305394b23a0b60f367a763ce45c5e9a76007f7e554c6bcd6636f883e00dc1413eccd258b23fcedd190f472b5e3ed9870e4a268390847a86a20a437925ba000262c5e96a207624cd655e2cbf6d0d1210d919dd1f6cdc34548d8ab25279398870e0a78bc5e92dc5e14f0f8c4c3e7cccc08f8c3a713b1da3c3a559f88a4323393cbbac074cfbd767744b72e29ff2e4abaf668d6c015acdec3d30dd428c75edfb7e127615250066924586b8d7254f064d1d67cc3b6534b563f052857f449be2b785ed144fe8b6fad20a07c535cf3bb477840fb38cea211d15a50a2f3f196ac585bbc6df1c9b713f1354fba13e91dc682778032dc48f60d657e70a785aee5cbf7f10281b1658601e41600c920cbe315afa7cee55d81a826da8e809c14bca12b5a3496e13571611220ab4c90c28157f989a20ce72f85dd178e89d39ea3d740924fc9ad6167911a1233c9ead5dcb8d12c87435efe67df84049b7eba818d825bb20714819fd47c573882a29f4acc8613ed6b83c38f0f5cbc46ad32552447c6a6a44b57c65e14ccce3813b19738f51d5609168a317f263ad22a9965834317c4edf7374014771ccde44727027f5dba2f86df5b284f10b3284776e84352ce2266c1c7e9c0538aca6058f499921902cb196b2cbd1a86b0a21924a28960ecb675954f440e3582c3caa7126250f7b3b5345a0c25c89a58798e2e9a4fd728cfd4397a15e87a70df121761487725b6bdf0c17f442b4aea31149f204195d34c84a51f53832c51f8eebb501efa83ecb341354458bc4d9e82c743fa4e6d4d93d3321c1ed9a8c7a79d94679940dea48bbed88b1050c374bcb10f0983fbcec0935915caf4cce73fe59283a2932a199f759ee661f54bd8219bae849987b9c12de559060ec2fa86f0017f6080a49a80a9248ec34996fdaa943cbc4c78c65dc515d07dd24b70977906094cb68015c84234676fcb661f1ea5cf1844d1a249138bb79c6feb1a82e1c31f565922c7dd11bb13c4fd445b82e65e8e9"}) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000001c00)={0xcc, 0x0, 0x1}) 1m10.070491365s ago: executing program 2 (id=1820): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (fail_nth: 5) 1m9.743331576s ago: executing program 2 (id=1821): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e20}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a8584c, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c00018006000600894f00"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1m9.515832142s ago: executing program 2 (id=1823): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1m8.275737048s ago: executing program 2 (id=1841): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xe9) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0xc400, 0x0) mount$overlay(0x600000000000000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1m7.833211412s ago: executing program 32 (id=1841): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xe9) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0xc400, 0x0) mount$overlay(0x600000000000000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 6.935609205s ago: executing program 3 (id=2197): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0xfffffffe}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x4020aeb2, &(0x7f0000000740)={0x0, 0xfffffff, @ioapic={0x200000, 0x400000, 0x9b, 0x8001, 0x0, [{0x92, 0x81, 0xd5, '\x00', 0x2}, {0x3, 0x86, 0xe0, '\x00', 0x4}, {0x0, 0x9b, 0x2d}, {0x1, 0x2, 0x3, '\x00', 0x8}, {0x57, 0x3, 0xd, '\x00', 0x20}, {0x4, 0x7, 0xfb, '\x00', 0x3}, {0x7, 0x8, 0x7b, '\x00', 0x7}, {0x5, 0x5b, 0x4, '\x00', 0x9}, {0xa, 0x5, 0xfe, '\x00', 0x1}, {0xb, 0xff, 0x0, '\x00', 0x5}, {0x81, 0x7f, 0x3, '\x00', 0x6}, {0x6, 0x7, 0x40, '\x00', 0x1}, {0x5, 0x6, 0x9, '\x00', 0x3}, {0x80, 0xb, 0x99, '\x00', 0xb}, {0xa, 0x10, 0x68, '\x00', 0xc}, {0x4, 0x2, 0x7, '\x00', 0x5d}, {0x1, 0x2, 0x6, '\x00', 0x3}, {0x1, 0x40, 0xf, '\x00', 0x1}, {0x7, 0x6, 0xfb, '\x00', 0xff}, {0xf, 0x0, 0x3, '\x00', 0xc}, {0x8, 0x9b, 0x8, '\x00', 0xfd}, {0x3, 0x6, 0x7, '\x00', 0x1}, {0x4, 0xb9, 0x6, '\x00', 0x1}, {0x3, 0x7, 0xf, '\x00', 0xac}]}}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001940)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.218386461s ago: executing program 3 (id=2202): syz_usb_connect(0x2, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x200, 0x63, 0xba, 0xc6, 0x10, 0xfe9, 0xdb71, 0xfe8c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x69, 0x6, 0x40, 0x8, "", [{{0x9, 0x4, 0xa2, 0x1, 0x0, 0x60, 0x55, 0xd, 0x79}}]}}]}}, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r2, 0x29, 0xcf, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r1, 0x0, 0x2) fchdir(r3) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0x9362, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) syz_usb_connect$uac1(0x0, 0xb5, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x48, 0xd8c, 0x78, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x3, 0x1, 0x9, 0xa0, 0xa0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xa94, 0x1e}, [@extension_unit={0xd, 0x24, 0x8, 0x6, 0xc4f, 0x40, "bf9cb4a5791a"}, @selector_unit={0x7, 0x24, 0x5, 0x1, 0xb, "0639"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2, 0x7f, 0xf3, 0xfe}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0xffff, 0x5, 0x1}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2, 0xc, 0xf, 0x8}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x5, 0x3, 0x8, 0x36, "c4ae"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3d7, 0x81, 0x0, 0xc5, {0x7, 0x25, 0x1, 0xc, 0x2d, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xff, 0x40, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xb8, 0x8, 0x2e, {0x7, 0x25, 0x1, 0x4, 0x1d, 0x4}}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x7, 0x1, 0xa, 0x8, 0x7}, 0x10, &(0x7f0000000100)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x7, 0x5, 0x6, 0x23}]}, 0x8, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x424}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1009}}, {0x5e, &(0x7f0000000200)=@string={0x5e, 0x3, "bab68f0ebb6fdf3e43c401c647faf97ed98b584e6ed4d67edffc67982cb5af29d0d5955a7079b99f17b522296e61cf1d664ef590ac55dc93f5b3212d6247feb855b42357abcd546376f801e9636e9a2920da444052b505417f2eec67"}}, {0x9b, &(0x7f0000000280)=@string={0x9b, 0x3, "1e0a891d7a2843b04b7366a16780ce79558f1cfb856a7e2e5ba69357eec973d07b582c770f1a1737145793a44e59d5e5b18f9b06ae8854e3d2f4603d7ffc92107a9f9811c3c0199358cd79c50b72cb6933b64d6ccfc15b97d04a4dee13c2f324b015764c65f58aa28312c180509f5cc85692cf0d936655690e8e30507375df878b4e84f59a501a38adcd5bb39d7f4b4860c534aa25860d6ecc"}}, {0x71, &(0x7f0000000340)=@string={0x71, 0x3, "6bd367e438974ba17815c90dff7f5c7a27aaf6a62b5a88b39c76ffca3b8357ae1bec7e056770450a997e744d983c9104fad62b3730d6cad2b4475f1d528e499c8a8dcdf6554e567e70ec3f0a3c3944d78ccb7f01840d4b946813216a039ff21206234e3a91aaecdbc7f44c63a1b93f"}}, {0x86, &(0x7f00000003c0)=@string={0x86, 0x3, "435df150c614d9b47defc1b1f8fb39ba26e0aada892e9e274deccddaa3ccb43161bf2c7587484ced1daf4bb84d483c8b269aeda429390334958d9af771b99b124565366a17087263c70fe2439d9ddb20d3e00a31ec4e213e10e8a2b9bff6b4eccff2fdbba8a4848e72ec98e46010918a330747918f89409b028347a74f2048b1a635e57e"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x43f}}]}) 6.107934067s ago: executing program 1 (id=2203): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/state\x00', 0x6, 0x0) write$FUSE_CREATE_OPEN(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc4c85513, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES32=r1], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 6.079600382s ago: executing program 1 (id=2205): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x7, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40040c0}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC], 0x23c}}, 0x0) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) (async) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="12000000180001002bbd7000fbdbdf251d"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4044800) (async) close(r2) close(0x3) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) (async) sendmsg$inet_sctp(r4, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000000)='M', 0x1}], 0x1}, 0x1) (async, rerun: 64) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000100)=[{0x6, 0x9, 0x8, 0x2a}]}, 0x10) (rerun: 64) r5 = dup(r4) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1000000000000, 0x0, 0x2, 0x8}}, 0x20) ioctl$RTC_PIE_OFF(r5, 0x7006) (async) syz_usb_connect$uac2(0x3, 0x98, &(0x7f0000000580)=ANY=[@ANYBLOB="12010003000000401e040030400001020301090286000301003003080b00020109200609040000000101200009240102000626000311240500000000000000000200010000000c240304"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) 4.647687004s ago: executing program 3 (id=2207): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000002400)={0x20, 0xe, 0x1, "02"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.434283713s ago: executing program 0 (id=2211): syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="1b1b", @ANYRES16=r1]) 2.958060374s ago: executing program 1 (id=2212): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e23, @empty}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x4a, {0x2, 0x0, @rand_addr=0x64010101}, 'lo\x00'}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01c30000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 2.718560953s ago: executing program 1 (id=2213): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x5) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept$alg(r3, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000600), 0xfec8) recvmmsg(r4, &(0x7f0000000640)=[{{0x0, 0xfffffffffffffc62, &(0x7f0000000500), 0x1}, 0x80000000}], 0x1, 0xcb, 0x0) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='personality\x00') read$FUSE(r2, &(0x7f00000019c0)={0x2020}, 0x2020) mkdirat(r5, &(0x7f0000000040)='./file1\x00', 0x4) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) r6 = socket$nl_generic(0x10, 0x3, 0x10) memfd_create(&(0x7f0000000300)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\\x9fTb\xe1\xf5\x04p=\xb6X\xdf\x101Y\x12\xc4>b\xf0\xa0\xf9\xe1\x91\x13!y\xc2E\xdb\xe6\xa8u\xd3\x8d\r\x8b\x87\x00\x18\x9b\xa4i[P\xa2\xf7\xa7\x9eo_\xba\xd0\xaa9\x9b\xea\xef\n\x91\xc4\x86a]\x8c\x15\xf6\x16\x1f\xb7#\xcc.\xec\xe5\x9a\xb5\xde\xbd\x1e\x15\x9b\xefk\xec\xd3 \x8b\x86\x90@\b\x03\xfd\xb1r\x17@TI\x1e\x91\t\xc3\xf1\xa8\xed\xd0\x9b+\x80=\xb7U\xe1Ty\xe7\x06\a\xdb\f\b\xf9\xbfh\x9d\xe5\x10\x8a\xbe\x19\xde\x13\xa5\xd5\xb6&}Q\xf3\xb6\xe9!\xef\xcctp\\\xdf\xacJO\xd9bD\xb3\xdd\xb8\x82\"\xa4\xe2\f\x1c^\'G\xf1?\x88\xe7\x1ev\x103(\xcd\aD\x1f-Yb`\xd0}\x10\xd6d\xa7\xc7\xe1\x1ah\xa5\x00g&\x81\x1f\x8d\x98R7M\x91@yK\xf9\xe7$J\\L\x87?\xc1\x95\xdd\xacud\x15~\xa2\xd40\xaa\x8cr>\xe5\xd4\xf4\xfc', 0xa) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="00f52bd8", @ANYRES16=r4, @ANYBLOB="010000795fdbcbc3db830ad0b2a0eca7d966c7aa8eba613cec6bf2d45b03e997102ede8d4600000008000300", @ANYRES32=r7, @ANYRES32=r7], 0x2c}}, 0x808) stat(&(0x7f0000000000)='./file1\x00', &(0x7f0000000540)) r8 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000003000000400001802c00040014000100020000007f00000100000000000000001400020002000000e000000200000000000000000d0001"], 0x54}}, 0x0) ioctl$VIDIOC_S_CROP(r8, 0x4014563c, &(0x7f0000000040)={0x9, {0xf8001004, 0x9, 0x6, 0x80b}}) 2.716820438s ago: executing program 0 (id=2214): file_setattr(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x80020849, 0x3, 0x1, 0x2, 0xffffff01}, 0x20, 0x100) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) (async) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000200)={'filter\x00', 0x0, 0x0, 0x0, [0xf, 0x8, 0x5, 0x7, 0xffffffffffffffff, 0x8001], 0x6, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}]}, 0xd8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) (async) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f00004c9000/0x3000)=nil, 0x3000, 0x8000, 0x0, 0x20, 0x2) (async) syz_clone3(&(0x7f000000ad40)={0x42810000, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000000)={0x0, 0xfffffff7, 0x84a8, 0x515f3157, 0x4, "78e1141009fd93233bce43f20613281f43d01f"}) (async) write$UHID_INPUT(r4, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) (async) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) (async) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) (async) sendto$packet(r2, &(0x7f0000000140)="330320000a0014000b007e752f555f2a0c9fe67025c1d97bfbf719143baa111f1f858ce632f470421974491df1c66de7bde38026da459996ffce57c388399807", 0x40, 0x40008c1, &(0x7f00000000c0)={0x11, 0xc, r1, 0x1, 0x60}, 0x14) 2.323834874s ago: executing program 1 (id=2216): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000440)={0x2c, 0x0, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xf2}, &(0x7f00000003c0)={0xc0, 0x5, 0x2, "2db2"}, &(0x7f0000000400)={0x40, 0x5, 0x2, "25a2"}}) 2.323642128s ago: executing program 0 (id=2217): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)) chdir(&(0x7f0000000000)='./bus\x00') r0 = open(&(0x7f0000000000)='./file1\x00', 0x80242, 0x8) sendfile(r0, r0, &(0x7f0000000080), 0x4d9b6eaf) 2.208302434s ago: executing program 0 (id=2218): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000005c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0xfff0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@handle={0x73682a85, 0xa, 0x1}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_binder={0x77622a85, 0xb, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 2.008205628s ago: executing program 0 (id=2221): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x1000000, {0x7}}}, 0x70}}, 0x0) 1.921720491s ago: executing program 0 (id=2222): syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="1b1b", @ANYRES16=r1]) 1.678021977s ago: executing program 4 (id=2223): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000280)={0x10007, 0x2, 0x0, "8eb8a828e53b07f1dd00d87a41bfeae7800400b159fb933948000026098d68d9"}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000e, 0x5d032, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) socket$nl_generic(0x10, 0x3, 0x10) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000280)={0x10007, 0x2, 0x0, "8eb8a828e53b07f1dd00d87a41bfeae7800400b159fb933948000026098d68d9"}) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000e, 0x5d032, 0xffffffffffffffff, 0x0) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) userfaultfd(0x80801) (async) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) (async) 1.370973116s ago: executing program 3 (id=2224): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x28, r2, 0x20, 0x70bd27, 0x25dfdc03, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x25}}}}}, 0x28}, 0x1, 0x0, 0x4102, 0x20000090}, 0x40000041) 1.240170329s ago: executing program 3 (id=2225): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0xa, 0x801, 0x84) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) listen(r2, 0xfffffffd) r4 = socket$inet(0xa, 0x801, 0x84) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x8) listen(r4, 0x1) r6 = socket$netlink(0x10, 0x3, 0x4) listen(r1, 0x8200002) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r6) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000300200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 1.060510062s ago: executing program 4 (id=2226): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000000)='./bus\x00') r0 = open(&(0x7f0000000000)='./file1\x00', 0x80242, 0x8) sendfile(r0, r0, &(0x7f0000000080), 0x4d9b6eaf) 1.051009633s ago: executing program 1 (id=2227): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000019140), r0) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000019140), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) (async) r4 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r5, 0x29, 0x11, &(0x7f00000000c0)=0x8001, 0x4) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f906, 0x0, '\x00', @p_u32=0x0}}) (async) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f906, 0x0, '\x00', @p_u32=0x0}}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310300000000f3ffffff0800000008000300", @ANYRES32=r2, @ANYBLOB="08000600", @ANYRES32=r3], 0x24}}, 0x0) r7 = syz_usb_connect(0x5, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf", @ANYRES64=r6, @ANYRES64=r3, @ANYRES32], 0x0) execveat$binfmt(0xffffffffffffffff, 0x0, &(0x7f00000002c0)={[&(0x7f0000000180)=',\x00', &(0x7f00000001c0)='batadv_slave_0\x00', &(0x7f0000000200)='/dev/radio#\x00', &(0x7f0000000240)='(\x00']}, &(0x7f0000000480)={[&(0x7f0000000300)='.*##+}\x00', &(0x7f0000000340)='\xef+\x00', &(0x7f0000000380)='/dev/radio#\x00', &(0x7f00000003c0)='batadv_slave_0\x00', &(0x7f0000000400)='/dev/radio#\x00', &(0x7f0000000440)='/dev/radio#\x00']}, 0x400) syz_usb_control_io$hid(r7, 0x0, 0x0) (async) syz_usb_control_io$hid(r7, 0x0, 0x0) 835.678907ms ago: executing program 4 (id=2228): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000000)='./bus\x00') r0 = open(&(0x7f0000000000)='./file1\x00', 0x80242, 0x8) sendfile(r0, r0, &(0x7f0000000080), 0x4d9b6eaf) 796.795336ms ago: executing program 4 (id=2229): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006012000001282f00fe88a43de1a400001100000000027d01ff0200000000000000000000000000010000883e"], 0xfdef) 247.522039ms ago: executing program 3 (id=2230): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f00000016c0)={0x9, {"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", 0x1000}}, 0x1006) syz_usb_connect(0x3, 0x466, &(0x7f0000000680)=ANY=[@ANYBLOB="120101028ddfb240490b4f06fdd4010203010902540402fa0680070904"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x1a, &(0x7f0000000040)=@string={0x1a, 0x3, "1ec2bed72f3b71678a67d9dd0a8e8444b035250f0a5e4a50"}}, {0x98, &(0x7f0000000080)=@string={0x98, 0x3, "b4d4016dd521f640e789aec0a2334da3d3be4126d089a937c2987f32f634afc257f29844d4b4b3d01d7acce450e90dd88b66ee912c865e3df8bae1e64e3cb1857561f573112f35af2d0b6b9aa561be741915151392bfd07a9c5e863f349e96fcdc11d40e6221b7dea3d950e3c5ab3dd25567de099e64ca4dc2a9aa9ffc02f775cbe71e1f6d29eb416e98fe3e95f90ac4943036156e5d"}}, {0x8a, &(0x7f0000000140)=@string={0x8a, 0x3, "a7c2934d533d61d46a8ac274a3a6c0290f268ca9596c9cb89f19c8faf861371d4bec7167e2f76209e9334c6829dd71485c26e8b651206aebe959369f49d4cc222a299ec24429a5459d691dc55f1eccafe951aa018289dcaa099b6ac3c14e845c16d59a75c58496d643dafdcc1948f7c6523558de236e7ddc56b587e453a87dd070ea79cd5db6a824"}}, {0x3e, &(0x7f0000000200)=@string={0x3e, 0x3, "5d529a7153e0b0b88333b87a53ccb4a35f633ffd78d829d29c24f48a1e77d28e7f4b538bb82aee0037dcac78c1ad623f41ab27fc7f26d9720318a204"}}]}) 120.167474ms ago: executing program 4 (id=2231): setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6150e74b6293bdbcb8031c3f9b81d62ac4f278741d19960340af55947b8314f1711d75b2d7bc93edf3f8e3f036ab9d7a0e040cabbe983e16fe359947761a6d6f6113db3e85ebd04339ad83557e5624905a1a353e68cc3a342e6daea607d31a7fabf24970d1ece1f4b3f0e9e5475133ad7a6df59a80"], 0x24, 0x1) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0) 0s ago: executing program 4 (id=2232): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000002400)={0x20, 0xe, 0x1, "02"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): oduct=c630, bcdDevice=b6.ac [ 393.972833][ T5340] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.972856][ T5340] usb 1-1: Product: syz [ 393.972872][ T5340] usb 1-1: Manufacturer: syz [ 393.972888][ T5340] usb 1-1: SerialNumber: syz [ 393.986959][ T5340] usb 1-1: config 0 descriptor?? [ 394.050922][ T5340] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 394.370716][ T5616] usb 4-1: ucan: failed to retrieve device info [ 394.371151][ T5616] usb 4-1: ucan: probe failed; try to update the device firmware [ 394.421230][ T5616] usb 4-1: USB disconnect, device number 94 [ 395.294531][T10522] netlink: ct family unspecified [ 395.294567][T10522] openvswitch: netlink: Actions may not be safe on all matching packets [ 395.388512][ T5777] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71 [ 395.388874][ T5777] asix 2-1:0.188: probe with driver asix failed with error -71 [ 395.422476][ T5777] usb 2-1: USB disconnect, device number 87 [ 395.509010][ T5340] usb 1-1: USB disconnect, device number 96 [ 395.600808][ T820] usb 3-1: USB disconnect, device number 86 [ 395.707136][ T5754] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 395.732919][T10530] binder: BINDER_SET_CONTEXT_MGR already set [ 395.732935][T10530] binder: 10529:10530 ioctl 4018620d 200000000100 returned -16 [ 395.736015][T10530] binder: BINDER_SET_CONTEXT_MGR already set [ 395.736028][T10530] binder: 10529:10530 ioctl 4018620d 200000004a80 returned -16 [ 395.836689][ T5754] usb 4-1: device descriptor read/64, error -71 [ 396.087143][ T5754] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 396.116496][ T5682] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 396.226703][ T5754] usb 4-1: device descriptor read/64, error -71 [ 396.268843][ T5682] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 396.268879][ T5682] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 396.268912][ T5682] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 396.271761][ T5682] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 396.271791][ T5682] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.271814][ T5682] usb 3-1: Product: syz [ 396.271836][ T5682] usb 3-1: Manufacturer: syz [ 396.271848][ T5682] usb 3-1: SerialNumber: syz [ 396.278197][ T5682] usb 3-1: config 0 descriptor?? [ 396.354522][T10534] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 396.354732][T10534] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 396.372752][ T5682] usb 3-1: ucan: probing device on interface #0 [ 396.387505][ T5754] usb usb4-port1: attempt power cycle [ 396.476536][ T5616] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 396.476737][ T5777] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 396.626525][ T5777] usb 2-1: Using ep0 maxpacket: 8 [ 396.626720][ T5616] usb 1-1: Using ep0 maxpacket: 32 [ 396.629633][ T5777] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 396.629692][ T5777] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 396.629855][ T5777] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.630253][ T5616] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 396.630279][ T5616] usb 1-1: config 0 has no interface number 0 [ 396.630329][ T5616] usb 1-1: config 0 interface 188 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 396.630356][ T5616] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 396.634319][ T5616] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 396.634348][ T5616] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.634372][ T5616] usb 1-1: Product: syz [ 396.634389][ T5616] usb 1-1: Manufacturer: syz [ 396.634406][ T5616] usb 1-1: SerialNumber: syz [ 396.667725][ T5777] usb 2-1: config 0 descriptor?? [ 396.757067][ T5616] usb 1-1: config 0 descriptor?? [ 396.764840][ T5682] usb 3-1: ucan: failed to retrieve device info [ 396.764861][ T5682] usb 3-1: ucan: probe failed; try to update the device firmware [ 396.794230][ T5777] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 396.808935][ T5754] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 396.840995][ T5682] usb 3-1: USB disconnect, device number 87 [ 396.842399][ T5616] asix 1-1:0.188: probe with driver asix failed with error -22 [ 396.842493][ T5754] usb 4-1: device descriptor read/8, error -71 [ 397.077505][ T5754] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 397.098180][ T5754] usb 4-1: device descriptor read/8, error -71 [ 397.209269][ T5754] usb usb4-port1: unable to enumerate USB device [ 397.405917][T10547] netlink: 'syz.2.1788': attribute type 4 has an invalid length. [ 397.415997][T10547] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1788'. [ 397.676568][ T821] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 397.834627][ T821] usb 3-1: config 0 has an invalid interface number: 107 but max is 0 [ 397.834660][ T821] usb 3-1: config 0 has no interface number 0 [ 397.834737][ T821] usb 3-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 397.834758][ T821] usb 3-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 397.876649][ T821] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 397.876679][ T821] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 397.876738][ T821] usb 3-1: Product: syz [ 397.876749][ T821] usb 3-1: Manufacturer: syz [ 397.876760][ T821] usb 3-1: SerialNumber: syz [ 397.920433][ T821] usb 3-1: config 0 descriptor?? [ 397.961280][ T821] keyspan 3-1:0.107: Keyspan 4 port adapter converter detected [ 397.961669][ T821] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 81 [ 398.001805][ T821] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 1 [ 398.005162][ T821] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 398.027681][ T821] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 2 [ 398.030934][ T821] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 398.051772][ T821] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 4 [ 398.054954][ T821] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 398.080640][ T821] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 6 [ 398.083697][ T821] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 398.152999][ T821] usb 3-1: USB disconnect, device number 88 [ 398.254555][ T821] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 398.282887][ T5777] gspca_vc032x: reg_w err -71 [ 398.282983][ T5777] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 398.318160][ T5777] usb 2-1: USB disconnect, device number 88 [ 398.334695][ T821] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 398.350965][ T821] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 398.376154][ T821] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 398.385927][ T821] keyspan 3-1:0.107: device disconnected [ 398.897123][T10565] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1795'. [ 398.897149][T10565] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 399.019463][T10569] binder: BINDER_SET_CONTEXT_MGR already set [ 399.019475][T10569] binder: 10568:10569 ioctl 4018620d 200000000100 returned -16 [ 399.021992][T10569] binder: BINDER_SET_CONTEXT_MGR already set [ 399.022004][T10569] binder: 10568:10569 ioctl 4018620d 200000004a80 returned -16 [ 399.116724][ T821] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 399.231166][ T5754] usb 1-1: USB disconnect, device number 97 [ 399.267245][ T821] usb 3-1: Using ep0 maxpacket: 32 [ 399.272172][ T821] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 399.272201][ T821] usb 3-1: config 0 has no interface number 0 [ 399.274648][ T821] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 399.274681][ T821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.274697][ T821] usb 3-1: Product: syz [ 399.274708][ T821] usb 3-1: Manufacturer: syz [ 399.274720][ T821] usb 3-1: SerialNumber: syz [ 399.322096][ T821] usb 3-1: config 0 descriptor?? [ 399.344121][ T821] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 399.444770][T10576] IPv4: Oversized IP packet from 127.202.26.0 [ 399.464842][ T5616] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 399.598429][ T821] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 399.620087][ T5616] usb 2-1: Using ep0 maxpacket: 32 [ 399.631102][ T5616] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 399.631148][ T5616] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 399.636150][ T5616] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 399.636182][ T5616] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.636203][ T5616] usb 2-1: Product: syz [ 399.636219][ T5616] usb 2-1: Manufacturer: syz [ 399.636291][ T5616] usb 2-1: SerialNumber: syz [ 399.736150][ T821] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 399.746421][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 7 [ 399.763854][ T5616] usb 2-1: config 0 descriptor?? [ 399.816520][ T5754] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 399.950614][T10581] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1802'. [ 399.955712][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 399.970906][ T821] usb 3-1: USB disconnect, device number 89 [ 399.994764][ T5616] snd-usb-6fire 2-1:0.0: unknown device firmware state received from device: [ 399.994786][ T5616] c3 01 2c 2e 0c c7 fd f9 [ 399.994909][ T5616] snd-usb-6fire 2-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 399.995680][T10581] 0ªî{X¹¦: renamed from gretap0 [ 400.010396][ T5754] usb 4-1: no configurations [ 400.010409][ T5754] usb 4-1: can't read configurations, error -22 [ 400.061729][ T821] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 400.083864][T10581] 0ªî{X¹¦: left promiscuous mode [ 400.083892][T10581] 0ªî{X¹¦: entered allmulticast mode [ 400.084180][ T821] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 400.093830][ T821] quatech2 3-1:0.51: device disconnected [ 400.150978][T10581] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 400.186559][ T5754] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 400.315875][T10585] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1804'. [ 400.315894][T10585] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 400.368307][ T5754] usb 4-1: no configurations [ 400.368329][ T5754] usb 4-1: can't read configurations, error -22 [ 400.368747][ T5754] usb usb4-port1: attempt power cycle [ 400.443752][T10588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 400.707863][ T5754] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 400.747703][ T5754] usb 4-1: no configurations [ 400.747725][ T5754] usb 4-1: can't read configurations, error -22 [ 400.876658][ T5754] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 400.908586][ T5754] usb 4-1: no configurations [ 400.908608][ T5754] usb 4-1: can't read configurations, error -22 [ 400.908985][ T5754] usb usb4-port1: unable to enumerate USB device [ 401.152434][T10607] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1811'. [ 401.152492][T10607] openvswitch: netlink: Missing key (keys=40, expected=80) [ 401.429793][T10614] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1813'. [ 401.429820][T10614] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 401.721451][T10626] FAULT_INJECTION: forcing a failure. [ 401.721451][T10626] name failslab, interval 1, probability 0, space 0, times 0 [ 401.721491][T10626] CPU: 1 UID: 0 PID: 10626 Comm: syz.2.1820 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 401.721523][T10626] Tainted: [L]=SOFTLOCKUP [ 401.721531][T10626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 401.721545][T10626] Call Trace: [ 401.721554][T10626] [ 401.721564][T10626] dump_stack_lvl+0xe8/0x150 [ 401.721622][T10626] should_fail_ex+0x46b/0x600 [ 401.721665][T10626] should_failslab+0xa8/0x100 [ 401.721692][T10626] kmem_cache_alloc_noprof+0x87/0x680 [ 401.721729][T10626] ? skb_clone+0x212/0x3a0 [ 401.721770][T10626] skb_clone+0x212/0x3a0 [ 401.721808][T10626] __netlink_deliver_tap+0x424/0x8b0 [ 401.721856][T10626] ? netlink_deliver_tap+0x2e/0x1b0 [ 401.721892][T10626] netlink_deliver_tap+0x19c/0x1b0 [ 401.721926][T10626] netlink_unicast+0x754/0x920 [ 401.721966][T10626] netlink_sendmsg+0x813/0xb40 [ 401.722009][T10626] ? __pfx_netlink_sendmsg+0x10/0x10 [ 401.722046][T10626] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 401.722079][T10626] ? aa_sock_msg_perm+0x122/0x200 [ 401.722104][T10626] ? __pfx_netlink_sendmsg+0x10/0x10 [ 401.722136][T10626] sock_sendmsg_nosec+0x112/0x150 [ 401.722165][T10626] ____sys_sendmsg+0x55c/0x870 [ 401.722207][T10626] ? __pfx_____sys_sendmsg+0x10/0x10 [ 401.722250][T10626] ? import_iovec+0x73/0xa0 [ 401.722282][T10626] ___sys_sendmsg+0x2a5/0x360 [ 401.722316][T10626] ? __lock_acquire+0x6b5/0x2cf0 [ 401.722363][T10626] ? __pfx____sys_sendmsg+0x10/0x10 [ 401.722437][T10626] ? __fget_files+0x2a/0x420 [ 401.722471][T10626] ? __fget_files+0x3a6/0x420 [ 401.722515][T10626] __x64_sys_sendmsg+0x1c3/0x2a0 [ 401.722553][T10626] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 401.722610][T10626] ? __pfx_ksys_write+0x10/0x10 [ 401.722643][T10626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.722669][T10626] do_syscall_64+0x15f/0xf80 [ 401.722704][T10626] ? trace_irq_disable+0x3b/0x140 [ 401.722736][T10626] ? clear_bhb_loop+0x40/0x90 [ 401.722765][T10626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.722790][T10626] RIP: 0033:0x7ff29cd7cdd9 [ 401.722812][T10626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.722832][T10626] RSP: 002b:00007ff29afd6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 401.722856][T10626] RAX: ffffffffffffffda RBX: 00007ff29cff5fa0 RCX: 00007ff29cd7cdd9 [ 401.722874][T10626] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 401.722891][T10626] RBP: 00007ff29afd6090 R08: 0000000000000000 R09: 0000000000000000 [ 401.722906][T10626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.722921][T10626] R13: 00007ff29cff6038 R14: 00007ff29cff5fa0 R15: 00007ffd00aec8b8 [ 401.722957][T10626] [ 401.723050][T10626] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1820'. [ 401.723100][T10626] openvswitch: netlink: Missing key (keys=40, expected=100) [ 402.144884][ T5754] usb 2-1: USB disconnect, device number 89 [ 402.196228][T10630] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1821'. [ 402.197840][T10630] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 402.343625][T10635] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1824'. [ 402.989568][T10655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1832'. [ 402.989605][T10655] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1832'. [ 403.165071][T10662] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1835'. [ 403.207229][T10665] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1834'. [ 403.618454][ T5340] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 403.778394][ T5340] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.778424][ T5340] usb 1-1: config 0 has no interfaces? [ 403.778455][ T5340] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 403.778481][ T5340] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.785285][ T5340] usb 1-1: config 0 descriptor?? [ 403.994167][ T84] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.128292][T10679] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3631422956 (14525691824 ns) > initial count (6624962964 ns). Using initial count to start timer. [ 404.530155][ T5622] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 404.563422][ T5622] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 404.603583][ T5622] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 404.621967][ T5622] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 404.627670][ T5622] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 404.776272][ T84] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.168229][ T5340] usb 4-1: new full-speed USB device number 103 using dummy_hcd [ 405.222119][ T84] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.306562][ T5340] usb 4-1: device descriptor read/64, error -71 [ 405.548735][ T5340] usb 4-1: new full-speed USB device number 104 using dummy_hcd [ 405.575957][ T84] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.616665][ T5616] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 405.688304][ T5340] usb 4-1: device descriptor read/64, error -71 [ 405.766579][ T5616] usb 2-1: Using ep0 maxpacket: 32 [ 405.769018][ T5616] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 405.769047][ T5616] usb 2-1: config 0 has no interface number 0 [ 405.772067][ T5616] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 405.772094][ T5616] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.772114][ T5616] usb 2-1: Product: syz [ 405.772128][ T5616] usb 2-1: Manufacturer: syz [ 405.772141][ T5616] usb 2-1: SerialNumber: syz [ 405.815546][ T5340] usb usb4-port1: attempt power cycle [ 405.836874][ T5616] usb 2-1: config 0 descriptor?? [ 405.844243][ T5616] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 406.089790][ T5616] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 406.149441][ T5616] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 406.196548][ T5340] usb 4-1: new full-speed USB device number 105 using dummy_hcd [ 406.218288][ T5340] usb 4-1: device descriptor read/8, error -71 [ 406.411357][ T5682] usb 1-1: USB disconnect, device number 98 [ 406.477156][ T5340] usb 4-1: new full-speed USB device number 106 using dummy_hcd [ 406.486879][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 406.507047][ T5340] usb 4-1: device descriptor read/8, error -71 [ 406.516603][ T821] usb 2-1: USB disconnect, device number 90 [ 406.548567][ T821] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 406.613877][T10706] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1850'. [ 406.621236][ T5340] usb usb4-port1: unable to enumerate USB device [ 406.639424][ T821] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 406.640288][ T821] quatech2 2-1:0.51: device disconnected [ 406.806692][ T5615] Bluetooth: hci1: command tx timeout [ 407.106585][ T5340] usb 1-1: new full-speed USB device number 99 using dummy_hcd [ 407.108805][T10714] openvswitch: netlink: Actions may not be safe on all matching packets [ 407.219531][T10718] binder: BINDER_SET_CONTEXT_MGR already set [ 407.219543][T10718] binder: 10717:10718 ioctl 4018620d 200000000100 returned -16 [ 407.221931][T10718] binder: BINDER_SET_CONTEXT_MGR already set [ 407.221941][T10718] binder: 10717:10718 ioctl 4018620d 200000004a80 returned -16 [ 407.263302][ T5340] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 407.263355][ T5340] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 407.263373][ T5340] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 407.264566][ T5340] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 407.264593][ T5340] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 407.264609][ T5340] usb 1-1: SerialNumber: syz [ 407.375621][T10720] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1855'. [ 407.376735][T10721] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1855'. [ 407.533982][T10710] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1851'. [ 407.596254][ T5340] usb 1-1: USB disconnect, device number 99 [ 407.611079][ T84] bridge_slave_1: left allmulticast mode [ 407.611222][ T84] bridge_slave_1: left promiscuous mode [ 407.642594][ T84] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.729162][ T5682] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 407.740608][ T84] bridge_slave_0: left allmulticast mode [ 407.740645][ T84] bridge_slave_0: left promiscuous mode [ 407.740939][ T84] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.909281][ T5682] usb 2-1: Using ep0 maxpacket: 8 [ 407.921767][ T5682] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid maxpacket 776, setting to 64 [ 407.921850][ T5682] usb 2-1: config 0 interface 0 has no altsetting 0 [ 407.945054][ T5682] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 407.945085][ T5682] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.945101][ T5682] usb 2-1: Product: syz [ 407.945112][ T5682] usb 2-1: Manufacturer: syz [ 407.945125][ T5682] usb 2-1: SerialNumber: syz [ 407.986410][ T5682] usb 2-1: config 0 descriptor?? [ 408.014933][ T5682] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 408.213465][ T5682] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 408.231034][ T5682] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 408.399812][ T5340] usb 2-1: USB disconnect, device number 91 [ 408.444267][T10732] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 408.735960][T10736] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1861'. [ 408.736005][T10736] openvswitch: netlink: Missing key (keys=40, expected=100) [ 408.839930][T10738] netlink: ct family unspecified [ 408.839954][T10738] openvswitch: netlink: Actions may not be safe on all matching packets [ 408.895929][ T5615] Bluetooth: hci1: command tx timeout [ 409.154368][T10749] FAULT_INJECTION: forcing a failure. [ 409.154368][T10749] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 409.154409][T10749] CPU: 1 UID: 0 PID: 10749 Comm: syz.0.1866 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 409.154439][T10749] Tainted: [L]=SOFTLOCKUP [ 409.154448][T10749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 409.154463][T10749] Call Trace: [ 409.154471][T10749] [ 409.154482][T10749] dump_stack_lvl+0xe8/0x150 [ 409.154516][T10749] should_fail_ex+0x46b/0x600 [ 409.154558][T10749] _copy_from_iter+0x1d3/0x1670 [ 409.154595][T10749] ? trace_kmem_cache_alloc+0x29/0xe0 [ 409.154629][T10749] ? __alloc_skb+0x27d/0x7d0 [ 409.154659][T10749] ? __pfx__copy_from_iter+0x10/0x10 [ 409.154681][T10749] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 409.154717][T10749] ? __alloc_skb+0x27d/0x7d0 [ 409.154752][T10749] ? netlink_sendmsg+0x650/0xb40 [ 409.154783][T10749] ? skb_put+0x11b/0x210 [ 409.154817][T10749] netlink_sendmsg+0x6c0/0xb40 [ 409.154859][T10749] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.154893][T10749] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 409.154926][T10749] ? aa_sock_msg_perm+0x122/0x200 [ 409.154950][T10749] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.154982][T10749] sock_sendmsg_nosec+0x112/0x150 [ 409.155011][T10749] ____sys_sendmsg+0x55c/0x870 [ 409.155050][T10749] ? __pfx_____sys_sendmsg+0x10/0x10 [ 409.155102][T10749] ? import_iovec+0x73/0xa0 [ 409.155132][T10749] ___sys_sendmsg+0x2a5/0x360 [ 409.155165][T10749] ? __lock_acquire+0x6b5/0x2cf0 [ 409.155203][T10749] ? __pfx____sys_sendmsg+0x10/0x10 [ 409.155272][T10749] ? __fget_files+0x2a/0x420 [ 409.155304][T10749] ? __fget_files+0x3a6/0x420 [ 409.155347][T10749] __x64_sys_sendmsg+0x1c3/0x2a0 [ 409.155385][T10749] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 409.155430][T10749] ? __pfx_ksys_write+0x10/0x10 [ 409.155462][T10749] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.155488][T10749] do_syscall_64+0x15f/0xf80 [ 409.155523][T10749] ? clear_bhb_loop+0x40/0x90 [ 409.155551][T10749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.155575][T10749] RIP: 0033:0x7f627181cdd9 [ 409.155596][T10749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.155616][T10749] RSP: 002b:00007f626fa76028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 409.155641][T10749] RAX: ffffffffffffffda RBX: 00007f6271a95fa0 RCX: 00007f627181cdd9 [ 409.155658][T10749] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 409.155674][T10749] RBP: 00007f626fa76090 R08: 0000000000000000 R09: 0000000000000000 [ 409.155688][T10749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.155702][T10749] R13: 00007f6271a96038 R14: 00007f6271a95fa0 R15: 00007ffc68f99738 [ 409.155737][T10749] [ 409.766557][ T5340] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 409.827771][ T84] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 409.887325][ T84] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 409.916602][ T5340] usb 1-1: Using ep0 maxpacket: 32 [ 409.918499][ T5340] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 409.918525][ T5340] usb 1-1: config 0 has no interface number 0 [ 409.918570][ T5340] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 409.920971][ T5340] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 409.921004][ T5340] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.921019][ T5340] usb 1-1: Product: syz [ 409.921035][ T5340] usb 1-1: Manufacturer: syz [ 409.921046][ T5340] usb 1-1: SerialNumber: syz [ 409.925837][ T5340] usb 1-1: config 0 descriptor?? [ 409.933786][T10752] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 410.040842][ T84] bond0 (unregistering): Released all slaves [ 410.164402][T10752] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 410.295972][T10743] syzkaller1: entered promiscuous mode [ 410.296001][T10743] syzkaller1: entered allmulticast mode [ 410.713388][T10760] FAULT_INJECTION: forcing a failure. [ 410.713388][T10760] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 410.713491][T10760] CPU: 0 UID: 0 PID: 10760 Comm: syz.3.1871 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 410.713515][T10760] Tainted: [L]=SOFTLOCKUP [ 410.713522][T10760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 410.713533][T10760] Call Trace: [ 410.713540][T10760] [ 410.713547][T10760] dump_stack_lvl+0xe8/0x150 [ 410.713574][T10760] should_fail_ex+0x46b/0x600 [ 410.713609][T10760] _copy_from_user+0x2d/0xb0 [ 410.713630][T10760] input_event_from_user+0xb1/0x290 [ 410.713651][T10760] ? __pfx_input_event_from_user+0x10/0x10 [ 410.713675][T10760] ? rt_spin_unlock+0x160/0x200 [ 410.713716][T10760] evdev_write+0x2ca/0x4c0 [ 410.713734][T10760] ? __lock_acquire+0x6b5/0x2cf0 [ 410.713762][T10760] ? __pfx_evdev_write+0x10/0x10 [ 410.713785][T10760] ? rw_verify_area+0x25b/0x4e0 [ 410.713811][T10760] ? __pfx_evdev_write+0x10/0x10 [ 410.713830][T10760] vfs_write+0x2a3/0xba0 [ 410.713852][T10760] ? __pfx_vfs_write+0x10/0x10 [ 410.713870][T10760] ? __fget_files+0x2a/0x420 [ 410.713895][T10760] ? __fget_files+0x2a/0x420 [ 410.713917][T10760] ? __fget_files+0x3a6/0x420 [ 410.713940][T10760] ? __fget_files+0x2a/0x420 [ 410.713968][T10760] ksys_write+0x156/0x270 [ 410.713987][T10760] ? __pfx_ksys_write+0x10/0x10 [ 410.714009][T10760] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.714027][T10760] do_syscall_64+0x15f/0xf80 [ 410.714051][T10760] ? trace_irq_disable+0x3b/0x140 [ 410.714073][T10760] ? clear_bhb_loop+0x40/0x90 [ 410.714094][T10760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.714111][T10760] RIP: 0033:0x7f40be10cdd9 [ 410.714126][T10760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.714141][T10760] RSP: 002b:00007f40bc366028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 410.714159][T10760] RAX: ffffffffffffffda RBX: 00007f40be385fa0 RCX: 00007f40be10cdd9 [ 410.714171][T10760] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 410.714189][T10760] RBP: 00007f40bc366090 R08: 0000000000000000 R09: 0000000000000000 [ 410.714199][T10760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 410.714209][T10760] R13: 00007f40be386038 R14: 00007f40be385fa0 R15: 00007ffd905bc218 [ 410.714234][T10760] [ 410.969188][ T5615] Bluetooth: hci1: command tx timeout [ 411.062319][ T84] tipc: Left network mode [ 411.466595][ T820] usb 4-1: new full-speed USB device number 107 using dummy_hcd [ 411.640144][ T820] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 411.640264][ T820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.640290][ T820] usb 4-1: Product: syz [ 411.640307][ T820] usb 4-1: Manufacturer: syz [ 411.640318][ T820] usb 4-1: SerialNumber: syz [ 411.700258][ T820] usb 4-1: config 0 descriptor?? [ 411.716984][ T820] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 412.259734][ T820] usb 4-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 412.450244][ T820] usb 4-1: USB disconnect, device number 107 [ 412.453241][ T5615] block nbd1: Receive control failed (result -32) [ 412.538231][ T820] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 412.541225][ T820] visor 4-1:0.0: device disconnected [ 412.737195][ T5340] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71 [ 412.737491][ T5340] asix 1-1:0.188: probe with driver asix failed with error -71 [ 412.760580][ T5340] usb 1-1: USB disconnect, device number 100 [ 412.992304][T10683] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.992552][T10683] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.992803][T10683] bridge_slave_0: entered allmulticast mode [ 413.019429][T10780] nbd: must specify a size in bytes for the device [ 413.024076][T10683] bridge_slave_0: entered promiscuous mode [ 413.056588][ T5615] Bluetooth: hci1: command tx timeout [ 413.061738][T10683] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.062080][T10683] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.062394][T10683] bridge_slave_1: entered allmulticast mode [ 413.085132][T10683] bridge_slave_1: entered promiscuous mode [ 413.231260][T10787] openvswitch: netlink: Message has 4 unknown bytes. [ 413.231298][T10787] openvswitch: netlink: Actions may not be safe on all matching packets [ 413.304751][T10789] binder: BINDER_SET_CONTEXT_MGR already set [ 413.304774][T10789] binder: 10788:10789 ioctl 4018620d 200000000100 returned -16 [ 413.339797][T10789] binder: BINDER_SET_CONTEXT_MGR already set [ 413.339814][T10789] binder: 10788:10789 ioctl 4018620d 200000004a80 returned -16 [ 413.639778][T10683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.721403][T10683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.996616][ T5777] usb 4-1: new full-speed USB device number 108 using dummy_hcd [ 414.035627][ T84] hsr_slave_0: left promiscuous mode [ 414.067518][ T84] hsr_slave_1: left promiscuous mode [ 414.069292][ T84] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 414.069399][ T84] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 414.108598][ T84] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 414.108629][ T84] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 414.164300][ T5777] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 414.164331][ T5777] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 414.165536][ T5777] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 414.165566][ T5777] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 414.165590][ T5777] usb 4-1: SerialNumber: syz [ 414.243043][ T5777] usb 4-1: 0:2 : does not exist [ 414.243130][ T5777] usb 4-1: unit 236 not found! [ 414.425717][ T5777] usb 4-1: USB disconnect, device number 108 [ 414.683179][ T84] veth1_macvtap: left promiscuous mode [ 414.683492][ T84] veth0_macvtap: left promiscuous mode [ 414.683833][ T84] veth1_vlan: left promiscuous mode [ 414.684237][ T84] veth0_vlan: left promiscuous mode [ 414.946583][ T820] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 415.101159][ T820] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 415.101224][ T820] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 415.101244][ T820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.175079][T10834] binder: BINDER_SET_CONTEXT_MGR already set [ 415.175110][T10834] binder: 10833:10834 ioctl 4018620d 200000000100 returned -16 [ 415.193707][ T820] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 415.202319][T10834] binder: BINDER_SET_CONTEXT_MGR already set [ 415.202334][T10834] binder: 10833:10834 ioctl 4018620d 200000004a80 returned -16 [ 415.858083][ T84] team0 (unregistering): Port device team_slave_1 removed [ 415.917127][ T84] team0 (unregistering): Port device team_slave_0 removed [ 416.250601][ T820] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 416.250627][ T820] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 416.526981][ T5269] 8021q: adding VLAN 0 to HW filter on device eth1 [ 416.559168][ T820] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 416.559194][ T820] stv0680 1-1:4.0: last error: 0, command = 0x0 [ 416.587571][ T820] usb 1-1: USB disconnect, device number 101 [ 416.601050][T10839] syzkaller1: entered allmulticast mode [ 416.634484][T10683] team0: Port device team_slave_0 added [ 416.669814][T10683] team0: Port device team_slave_1 added [ 416.776856][T10844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1894'. [ 416.785900][T10683] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.785920][T10683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.785952][T10683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.844704][T10683] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.844723][T10683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.844763][T10683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.075255][T10683] hsr_slave_0: entered promiscuous mode [ 417.084056][T10683] hsr_slave_1: entered promiscuous mode [ 417.086114][T10683] debugfs: 'hsr0' already exists in 'hsr' [ 417.086140][T10683] Cannot create hsr debugfs directory [ 417.421404][T10854] openvswitch: netlink: Actions may not be safe on all matching packets [ 417.647237][ T5777] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 417.770303][T10867] netlink: 'syz.1.1902': attribute type 10 has an invalid length. [ 417.770327][T10867] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1902'. [ 417.828711][ T5777] usb 4-1: Using ep0 maxpacket: 8 [ 417.850098][ T5777] usb 4-1: config 7 has an invalid interface number: 117 but max is 2 [ 417.850131][ T5777] usb 4-1: config 7 has an invalid interface number: 91 but max is 2 [ 417.850229][ T5777] usb 4-1: config 7 has an invalid interface number: 166 but max is 2 [ 417.850256][ T5777] usb 4-1: config 7 has no interface number 0 [ 417.850275][ T5777] usb 4-1: config 7 has no interface number 1 [ 417.850293][ T5777] usb 4-1: config 7 has no interface number 2 [ 417.850388][ T5777] usb 4-1: config 7 interface 117 altsetting 240 endpoint 0x3 has invalid maxpacket 2039, setting to 1024 [ 417.850439][ T5777] usb 4-1: config 7 interface 91 altsetting 1 bulk endpoint 0x4 has invalid maxpacket 8 [ 417.850467][ T5777] usb 4-1: config 7 interface 91 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 417.850495][ T5777] usb 4-1: config 7 interface 91 altsetting 1 has a duplicate endpoint with address 0xF, skipping [ 417.850533][ T5777] usb 4-1: config 7 interface 166 altsetting 203 has a duplicate endpoint with address 0x8, skipping [ 417.850559][ T5777] usb 4-1: config 7 interface 166 altsetting 203 has a duplicate endpoint with address 0x1, skipping [ 417.850585][ T5777] usb 4-1: config 7 interface 166 altsetting 203 has a duplicate endpoint with address 0x7, skipping [ 417.850610][ T5777] usb 4-1: config 7 interface 166 altsetting 203 has a duplicate endpoint with address 0x7, skipping [ 417.850637][ T5777] usb 4-1: config 7 interface 166 altsetting 203 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 417.850668][ T5777] usb 4-1: config 7 interface 166 altsetting 203 bulk endpoint 0x5 has invalid maxpacket 64 [ 417.850697][ T5777] usb 4-1: config 7 interface 117 has no altsetting 0 [ 417.850718][ T5777] usb 4-1: config 7 interface 91 has no altsetting 0 [ 417.850738][ T5777] usb 4-1: config 7 interface 166 has no altsetting 0 [ 417.853614][ T5777] usb 4-1: Dual-Role OTG device on HNP port [ 417.853976][ T5777] usb 4-1: New USB device found, idVendor=056e, idProduct=4002, bcdDevice=aa.e1 [ 417.854007][ T5777] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.854030][ T5777] usb 4-1: Product: syz [ 417.854046][ T5777] usb 4-1: Manufacturer: syz [ 417.854063][ T5777] usb 4-1: SerialNumber: syz [ 417.896465][ T5616] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 418.046505][ T5616] usb 1-1: Using ep0 maxpacket: 32 [ 418.077504][ T5616] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 418.077537][ T5616] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.136113][ T5616] usb 1-1: config 0 descriptor?? [ 418.253210][ T5616] as10x_usb: device has been detected [ 418.288140][ T5616] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 418.363751][ T5777] pegasus 4-1:7.117: Missing or invalid endpoints [ 418.448222][ T5616] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 418.579105][T10855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.579644][T10855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.732379][ T5777] pegasus 4-1:7.91: Missing or invalid endpoints [ 418.790362][ T5777] pegasus 4-1:7.166: Missing or invalid endpoints [ 418.861311][ T5616] as10x_usb: error during firmware upload part1 [ 418.862028][ T5616] Registered device nBox DVB-T Dongle [ 418.873411][ T5616] usb 1-1: USB disconnect, device number 102 [ 419.084084][ T5616] Unregistered device nBox DVB-T Dongle [ 419.097082][ T5616] as10x_usb: device has been disconnected [ 419.581040][ T5269] 8021q: adding VLAN 0 to HW filter on device eth2 [ 419.593415][ T84] IPVS: stop unused estimator thread 0... [ 420.284951][T10901] openvswitch: netlink: Actions may not be safe on all matching packets [ 420.705070][T10911] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1910'. [ 420.705119][T10911] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 421.068443][T10683] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 421.184558][T10683] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 421.198292][T10683] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 421.298715][T10683] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 421.303635][T10683] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 421.425359][T10683] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 421.439880][T10683] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 421.491910][T10927] openvswitch: netlink: Actions may not be safe on all matching packets [ 421.582074][T10683] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 421.897045][ T5340] usb 4-1: USB disconnect, device number 109 [ 422.070668][ T5269] 8021q: adding VLAN 0 to HW filter on device eth3 [ 422.337693][ T5616] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 422.497295][ T5616] usb 1-1: unable to get BOS descriptor or descriptor too short [ 422.502118][ T5616] usb 1-1: config 1 interface 0 altsetting 12 endpoint 0x2 has an invalid bInterval 250, changing to 11 [ 422.502163][ T5616] usb 1-1: config 1 interface 0 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 422.502196][ T5616] usb 1-1: config 1 interface 0 has no altsetting 0 [ 422.549550][ T5616] usb 1-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.40 [ 422.549585][ T5616] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.549607][ T5616] usb 1-1: Product: syz [ 422.549624][ T5616] usb 1-1: Manufacturer: syz [ 422.549641][ T5616] usb 1-1: SerialNumber: syz [ 422.632956][T10957] MTD: Attempt to mount non-MTD device "./file0" [ 422.666520][T10683] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.761127][T10947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.762260][T10947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.762907][T10962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.763589][T10962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.838055][ T5616] usbhid 1-1:1.0: can't add hid device: -71 [ 422.838193][ T5616] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 422.852254][T10957] ./file0: Can't open blockdev [ 422.898189][ T5616] usb 1-1: USB disconnect, device number 103 [ 422.991299][T10957] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1922'. [ 423.059207][T10683] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.164821][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.165170][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.206239][ T1194] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.207863][ T1194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.347786][ T5754] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 423.553919][ T5754] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.553948][ T5754] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 423.553987][ T5754] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 423.554013][ T5754] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.611549][ T5754] usb 4-1: config 0 descriptor?? [ 423.851421][ T5269] 8021q: adding VLAN 0 to HW filter on device eth4 [ 424.406525][ T5754] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 424.485532][T10683] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.546744][ T5754] usb 1-1: device descriptor read/64, error -71 [ 424.800413][ T5754] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 424.946588][ T5754] usb 1-1: device descriptor read/64, error -71 [ 425.027368][ T5616] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 425.047076][ T5754] usb usb1-port1: attempt power cycle [ 425.088181][T10683] veth0_vlan: entered promiscuous mode [ 425.119731][T10683] veth1_vlan: entered promiscuous mode [ 425.189931][ T5616] usb 2-1: unable to get BOS descriptor or descriptor too short [ 425.191127][ T5616] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 425.193527][ T5616] usb 2-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 425.193556][ T5616] usb 2-1: New USB device strings: Mfr=1, Product=35, SerialNumber=3 [ 425.193582][ T5616] usb 2-1: Product: syz [ 425.193594][ T5616] usb 2-1: Manufacturer: syz [ 425.193605][ T5616] usb 2-1: SerialNumber: syz [ 425.330089][T10683] veth0_macvtap: entered promiscuous mode [ 425.384560][T10683] veth1_macvtap: entered promiscuous mode [ 425.426600][ T5754] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 425.448559][ T5754] usb 1-1: device descriptor read/8, error -71 [ 425.484601][ T5616] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 425.484677][ T5616] usb 2-1: MIDIStreaming interface descriptor not found [ 425.512794][T10683] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 425.568953][T10683] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 425.661366][ T4874] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.662902][ T4874] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.662952][ T4874] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.663011][ T4874] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.723964][ T5754] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 425.739190][ T5754] usb 1-1: device descriptor read/8, error -71 [ 425.775164][ T5616] usb 2-1: USB disconnect, device number 92 [ 425.860324][ T5754] usb usb1-port1: unable to enumerate USB device [ 426.049078][ T6118] udevd[6118]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 426.263505][ T5777] usb 4-1: USB disconnect, device number 110 [ 426.905572][T11028] FAULT_INJECTION: forcing a failure. [ 426.905572][T11028] name failslab, interval 1, probability 0, space 0, times 0 [ 426.905610][T11028] CPU: 0 UID: 0 PID: 11028 Comm: syz.3.1936 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 426.905634][T11028] Tainted: [L]=SOFTLOCKUP [ 426.905640][T11028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 426.905653][T11028] Call Trace: [ 426.905662][T11028] [ 426.905670][T11028] dump_stack_lvl+0xe8/0x150 [ 426.905696][T11028] should_fail_ex+0x46b/0x600 [ 426.905727][T11028] should_failslab+0xa8/0x100 [ 426.905746][T11028] __kmalloc_noprof+0xdf/0x7b0 [ 426.905785][T11028] ? tomoyo_encode+0x28b/0x550 [ 426.905807][T11028] tomoyo_encode+0x28b/0x550 [ 426.905846][T11028] tomoyo_realpath_from_path+0x58d/0x5d0 [ 426.905866][T11028] ? tomoyo_domain+0xd7/0x130 [ 426.905888][T11028] ? tomoyo_path_number_perm+0x219/0x630 [ 426.905913][T11028] tomoyo_path_number_perm+0x246/0x630 [ 426.905940][T11028] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 426.905964][T11028] ? __lock_acquire+0x6b5/0x2cf0 [ 426.905991][T11028] ? do_raw_spin_lock+0x12b/0x2f0 [ 426.906035][T11028] ? __fget_files+0x2a/0x420 [ 426.906060][T11028] ? __fget_files+0x2a/0x420 [ 426.906083][T11028] ? __fget_files+0x3a6/0x420 [ 426.906105][T11028] ? __fget_files+0x2a/0x420 [ 426.906131][T11028] security_file_ioctl+0xc3/0x2a0 [ 426.906155][T11028] __se_sys_ioctl+0x47/0x170 [ 426.906173][T11028] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.906191][T11028] do_syscall_64+0x15f/0xf80 [ 426.906215][T11028] ? trace_irq_disable+0x3b/0x140 [ 426.906237][T11028] ? clear_bhb_loop+0x40/0x90 [ 426.906257][T11028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.906273][T11028] RIP: 0033:0x7f40be10cdd9 [ 426.906289][T11028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 426.906303][T11028] RSP: 002b:00007f40bc366028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 426.906322][T11028] RAX: ffffffffffffffda RBX: 00007f40be385fa0 RCX: 00007f40be10cdd9 [ 426.906367][T11028] RDX: 0000200000000380 RSI: 000000004008ae89 RDI: 0000000000000005 [ 426.906382][T11028] RBP: 00007f40bc366090 R08: 0000000000000000 R09: 0000000000000000 [ 426.906395][T11028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.906410][T11028] R13: 00007f40be386038 R14: 00007f40be385fa0 R15: 00007ffd905bc218 [ 426.906443][T11028] [ 426.906813][T11028] ERROR: Out of memory at tomoyo_realpath_from_path. [ 427.303376][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.303398][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.539919][ T84] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.539960][ T84] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.731844][T11037] binder: BINDER_SET_CONTEXT_MGR already set [ 427.731861][T11037] binder: 11036:11037 ioctl 4018620d 200000000100 returned -16 [ 427.734700][T11037] binder: BINDER_SET_CONTEXT_MGR already set [ 427.734713][T11037] binder: 11036:11037 ioctl 4018620d 200000004a80 returned -16 [ 428.016803][ T5754] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 428.182108][ T5754] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 428.182138][ T5754] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 428.182187][ T5754] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 428.182214][ T5754] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.204167][ T5754] usb 1-1: config 0 descriptor?? [ 428.345838][T11056] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1949'. [ 428.356516][ T5777] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 428.510797][ T5777] usb 5-1: Using ep0 maxpacket: 32 [ 428.523238][ T5777] usb 5-1: unable to get BOS descriptor or descriptor too short [ 428.535296][ T5777] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7 [ 428.551596][ T5777] usb 5-1: New USB device found, idVendor=041e, idProduct=3237, bcdDevice= 0.40 [ 428.551629][ T5777] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.551653][ T5777] usb 5-1: Product: syz [ 428.551670][ T5777] usb 5-1: Manufacturer: syz [ 428.551695][ T5777] usb 5-1: SerialNumber: syz [ 428.803129][T11048] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1945'. [ 428.890615][ T821] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 428.919349][ T5777] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 428.935967][ T5777] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 428.988446][ T5777] usb 5-1: USB disconnect, device number 2 [ 428.996125][T11067] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3631422956 (14525691824 ns) > initial count (6624962964 ns). Using initial count to start timer. [ 429.036909][ T821] usb 2-1: Using ep0 maxpacket: 16 [ 429.042297][ T821] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 429.071665][ T821] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 429.071700][ T821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.071732][ T821] usb 2-1: Product: syz [ 429.071750][ T821] usb 2-1: Manufacturer: syz [ 429.071767][ T821] usb 2-1: SerialNumber: syz [ 429.109004][ T821] usb 2-1: config 0 descriptor?? [ 429.213658][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 429.318582][ T821] usb 2-1: USB disconnect, device number 93 [ 429.461803][T11071] 9p: Bad value for 'wfdno' [ 429.888562][T11088] netlink: 'syz.1.1962': attribute type 10 has an invalid length. [ 429.917486][T11088] veth1_macvtap: left promiscuous mode [ 430.047459][ T5777] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 430.218605][ T5777] usb 4-1: Using ep0 maxpacket: 32 [ 430.221479][ T5777] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 430.221508][ T5777] usb 4-1: config 0 has no interface number 0 [ 430.221558][ T5777] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 430.251616][ T5777] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 430.251700][ T5777] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.251768][ T5777] usb 4-1: Product: syz [ 430.251822][ T5777] usb 4-1: Manufacturer: syz [ 430.251868][ T5777] usb 4-1: SerialNumber: syz [ 430.296657][ T5777] usb 4-1: config 0 descriptor?? [ 430.297812][T11082] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 430.508741][T11082] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 430.630254][T11104] usb usb8: check_ctrlrecip: process 11104 (syz.4.1969) requesting ep 01 but needs 81 [ 430.711016][ T5777] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 430.711227][ T5777] asix 4-1:0.188: probe with driver asix failed with error -61 [ 430.763224][ T5340] usb 1-1: USB disconnect, device number 108 [ 430.888093][ T5754] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 430.916697][ T821] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 431.016769][ T5754] usb 5-1: device descriptor read/64, error -71 [ 431.047608][ T821] usb 2-1: device descriptor read/64, error -71 [ 431.186595][ T5340] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 431.276598][ T5754] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 431.286638][ T821] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 431.347432][ T5340] usb 1-1: Using ep0 maxpacket: 32 [ 431.351099][ T5340] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 431.351124][ T5340] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 431.351145][ T5340] usb 1-1: config 0 interface 0 has no altsetting 0 [ 431.393282][ T5340] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 431.393306][ T5340] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.393322][ T5340] usb 1-1: Product: syz [ 431.393334][ T5340] usb 1-1: Manufacturer: syz [ 431.393345][ T5340] usb 1-1: SerialNumber: syz [ 431.409457][ T5754] usb 5-1: device descriptor read/64, error -71 [ 431.440926][ T5340] usb 1-1: config 0 descriptor?? [ 431.451638][ T821] usb 2-1: device descriptor read/64, error -71 [ 431.529391][ T5754] usb usb5-port1: attempt power cycle [ 431.559169][ T821] usb usb2-port1: attempt power cycle [ 431.844530][ T5340] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 431.910945][ T821] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 431.922276][ T5754] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 431.944928][ T5754] usb 5-1: device descriptor read/8, error -71 [ 431.967675][ T821] usb 2-1: device descriptor read/8, error -71 [ 432.177443][ T5754] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 432.201764][ T5754] usb 5-1: device descriptor read/8, error -71 [ 432.203149][T11111] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1972'. [ 432.203189][T11111] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1972'. [ 432.203207][T11111] netlink: 'syz.0.1972': attribute type 5 has an invalid length. [ 432.203223][T11111] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1972'. [ 432.206623][ T821] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 432.233489][ T821] usb 2-1: device descriptor read/8, error -71 [ 432.295343][ T5780] usb 1-1: USB disconnect, device number 109 [ 432.320920][ T5754] usb usb5-port1: unable to enumerate USB device [ 432.339520][ T821] usb usb2-port1: unable to enumerate USB device [ 433.635200][T11164] IPv4: Oversized IP packet from 127.202.26.0 [ 433.822639][T11173] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 433.822669][T11173] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 433.839647][T11173] vhci_hcd vhci_hcd.0: Device attached [ 433.861013][T11174] vhci_hcd: cannot find the pending unlink 8 [ 433.865978][T11174] vhci_hcd: connection closed [ 433.866264][ T56] vhci_hcd vhci_hcd.1: stop threads [ 433.866292][ T56] vhci_hcd vhci_hcd.1: release socket [ 433.933881][ T56] vhci_hcd vhci_hcd.1: disconnect device [ 434.029464][ T5780] usb 4-1: USB disconnect, device number 111 [ 434.098695][T11181] FAULT_INJECTION: forcing a failure. [ 434.098695][T11181] name failslab, interval 1, probability 0, space 0, times 0 [ 434.098734][T11181] CPU: 0 UID: 0 PID: 11181 Comm: syz.4.1981 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 434.098766][T11181] Tainted: [L]=SOFTLOCKUP [ 434.098775][T11181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 434.098789][T11181] Call Trace: [ 434.098798][T11181] [ 434.098808][T11181] dump_stack_lvl+0xe8/0x150 [ 434.098842][T11181] should_fail_ex+0x46b/0x600 [ 434.098887][T11181] should_failslab+0xa8/0x100 [ 434.098913][T11181] __kmalloc_noprof+0xdf/0x7b0 [ 434.098936][T11181] ? video_usercopy+0x1b1/0x1450 [ 434.098965][T11181] video_usercopy+0x1b1/0x1450 [ 434.098995][T11181] ? __pfx___video_do_ioctl+0x10/0x10 [ 434.099021][T11181] ? __pfx_video_usercopy+0x10/0x10 [ 434.099055][T11181] ? __fget_files+0x2a/0x420 [ 434.099092][T11181] ? __fget_files+0x2a/0x420 [ 434.099124][T11181] ? __fget_files+0x3a6/0x420 [ 434.099161][T11181] v4l2_ioctl+0x190/0x1e0 [ 434.099199][T11181] ? __pfx_v4l2_ioctl+0x10/0x10 [ 434.099236][T11181] __se_sys_ioctl+0xff/0x170 [ 434.099261][T11181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.099287][T11181] do_syscall_64+0x15f/0xf80 [ 434.099329][T11181] ? trace_irq_disable+0x3b/0x140 [ 434.099359][T11181] ? clear_bhb_loop+0x40/0x90 [ 434.099388][T11181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.099413][T11181] RIP: 0033:0x7f6af6e7cdd9 [ 434.099434][T11181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.099455][T11181] RSP: 002b:00007f6af50d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 434.099484][T11181] RAX: ffffffffffffffda RBX: 00007f6af70f5fa0 RCX: 00007f6af6e7cdd9 [ 434.099507][T11181] RDX: 0000200000000380 RSI: 00000000c0845657 RDI: 0000000000000003 [ 434.099524][T11181] RBP: 00007f6af50d6090 R08: 0000000000000000 R09: 0000000000000000 [ 434.099539][T11181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.099554][T11181] R13: 00007f6af70f6038 R14: 00007f6af70f5fa0 R15: 00007ffe9b6536f8 [ 434.099589][T11181] [ 434.663790][T11199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1987'. [ 434.663822][T11199] FAULT_INJECTION: forcing a failure. [ 434.663822][T11199] name failslab, interval 1, probability 0, space 0, times 0 [ 434.663854][T11199] CPU: 0 UID: 0 PID: 11199 Comm: syz.0.1987 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 434.663885][T11199] Tainted: [L]=SOFTLOCKUP [ 434.663893][T11199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 434.663908][T11199] Call Trace: [ 434.663916][T11199] [ 434.663927][T11199] dump_stack_lvl+0xe8/0x150 [ 434.663959][T11199] should_fail_ex+0x46b/0x600 [ 434.664002][T11199] should_failslab+0xa8/0x100 [ 434.664028][T11199] __kmalloc_node_track_caller_noprof+0xe2/0x7e0 [ 434.664053][T11199] ? __parse_flow_nlattrs+0x3e7/0x5d0 [ 434.664086][T11199] ? ovs_nla_get_match+0x3b1/0x1810 [ 434.664123][T11199] kmemdup_noprof+0x2b/0x70 [ 434.664157][T11199] ovs_nla_get_match+0x3b1/0x1810 [ 434.664189][T11199] ? panic_on_this_cpu+0x32/0x40 [ 434.664235][T11199] ? __pfx_ovs_nla_get_match+0x10/0x10 [ 434.664299][T11199] ? __pfx_desc_update_last_finalized+0x10/0x10 [ 434.664328][T11199] ? __asan_memset+0x22/0x50 [ 434.664364][T11199] ovs_nla_init_match_and_action+0x1d0/0x3a0 [ 434.664395][T11199] ? unwind_next_frame+0xa6/0x2550 [ 434.664440][T11199] ? __pfx_ovs_nla_init_match_and_action+0x10/0x10 [ 434.664534][T11199] ? _printk+0xdd/0x130 [ 434.664559][T11199] ? ovs_nla_get_ufid+0x129/0x200 [ 434.664595][T11199] ovs_flow_cmd_set+0x2cf/0x8d0 [ 434.664636][T11199] ? __pfx_ovs_flow_cmd_set+0x10/0x10 [ 434.664715][T11199] ? trace_kmalloc+0x2a/0xf0 [ 434.664742][T11199] ? __nla_parse+0x40/0x60 [ 434.664774][T11199] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 434.664800][T11199] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 434.664834][T11199] genl_family_rcv_msg_doit+0x22a/0x330 [ 434.664868][T11199] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 434.664908][T11199] ? bpf_lsm_capable+0x9/0x20 [ 434.664941][T11199] ? security_capable+0x7e/0x2c0 [ 434.664985][T11199] genl_rcv_msg+0x61c/0x7a0 [ 434.665017][T11199] ? __pfx_genl_rcv_msg+0x10/0x10 [ 434.665040][T11199] ? ref_tracker_free+0x673/0x820 [ 434.665064][T11199] ? __pfx_ovs_flow_cmd_set+0x10/0x10 [ 434.665097][T11199] ? ____sys_sendmsg+0x55c/0x870 [ 434.665128][T11199] ? ___sys_sendmsg+0x2a5/0x360 [ 434.665160][T11199] ? __x64_sys_sendmsg+0x1c3/0x2a0 [ 434.665193][T11199] ? do_syscall_64+0x15f/0xf80 [ 434.665226][T11199] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.665268][T11199] netlink_rcv_skb+0x232/0x4b0 [ 434.665302][T11199] ? __pfx_genl_rcv_msg+0x10/0x10 [ 434.665328][T11199] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 434.665373][T11199] ? netlink_deliver_tap+0x2e/0x1b0 [ 434.665405][T11199] ? netlink_deliver_tap+0x2e/0x1b0 [ 434.665441][T11199] genl_rcv+0x28/0x40 [ 434.665463][T11199] netlink_unicast+0x780/0x920 [ 434.665513][T11199] netlink_sendmsg+0x813/0xb40 [ 434.665558][T11199] ? __pfx_netlink_sendmsg+0x10/0x10 [ 434.665594][T11199] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 434.665628][T11199] ? aa_sock_msg_perm+0x122/0x200 [ 434.665653][T11199] ? __pfx_netlink_sendmsg+0x10/0x10 [ 434.665685][T11199] sock_sendmsg_nosec+0x112/0x150 [ 434.665715][T11199] ____sys_sendmsg+0x55c/0x870 [ 434.665757][T11199] ? __pfx_____sys_sendmsg+0x10/0x10 [ 434.665802][T11199] ? import_iovec+0x73/0xa0 [ 434.665833][T11199] ___sys_sendmsg+0x2a5/0x360 [ 434.665868][T11199] ? __lock_acquire+0x6b5/0x2cf0 [ 434.665907][T11199] ? __pfx____sys_sendmsg+0x10/0x10 [ 434.665977][T11199] ? __fget_files+0x2a/0x420 [ 434.666008][T11199] ? __fget_files+0x3a6/0x420 [ 434.666052][T11199] __x64_sys_sendmsg+0x1c3/0x2a0 [ 434.666090][T11199] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 434.666135][T11199] ? __pfx_ksys_write+0x10/0x10 [ 434.666169][T11199] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.666195][T11199] do_syscall_64+0x15f/0xf80 [ 434.666228][T11199] ? trace_irq_disable+0x3b/0x140 [ 434.666258][T11199] ? clear_bhb_loop+0x40/0x90 [ 434.666286][T11199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.666316][T11199] RIP: 0033:0x7f627181cdd9 [ 434.666337][T11199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.666358][T11199] RSP: 002b:00007f626fa76028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 434.666383][T11199] RAX: ffffffffffffffda RBX: 00007f6271a95fa0 RCX: 00007f627181cdd9 [ 434.666401][T11199] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 434.666416][T11199] RBP: 00007f626fa76090 R08: 0000000000000000 R09: 0000000000000000 [ 434.666431][T11199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.666445][T11199] R13: 00007f6271a96038 R14: 00007f6271a95fa0 R15: 00007ffc68f99738 [ 434.666482][T11199] [ 435.469856][ T5616] usb 1-1: new low-speed USB device number 110 using dummy_hcd [ 435.530107][T11216] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1993'. [ 435.530167][T11216] openvswitch: netlink: Missing key (keys=40, expected=100) [ 435.633475][ T5616] usb 1-1: config 3 has an invalid interface number: 230 but max is 0 [ 435.633515][ T5616] usb 1-1: config 3 has no interface number 0 [ 435.633563][ T5616] usb 1-1: config 3 interface 230 altsetting 4 endpoint 0xD is Bulk; changing to Interrupt [ 435.633589][ T5616] usb 1-1: config 3 interface 230 has no altsetting 0 [ 435.667750][ T5616] usb 1-1: string descriptor 0 read error: -22 [ 435.667911][ T5616] usb 1-1: New USB device found, idVendor=199e, idProduct=8002, bcdDevice=bb.31 [ 435.667938][ T5616] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.707986][T11204] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 435.715350][ T5616] uvcvideo 1-1:3.230: Found UVC 0.00 device (199e:8002) [ 435.715386][ T5616] uvcvideo 1-1:3.230: No valid video chain found. [ 435.915571][ T5754] usb 1-1: USB disconnect, device number 110 [ 435.949846][T11230] binder: BINDER_SET_CONTEXT_MGR already set [ 435.949864][T11230] binder: 11229:11230 ioctl 4018620d 200000000100 returned -16 [ 435.994473][T11230] binder: BINDER_SET_CONTEXT_MGR already set [ 435.994491][T11230] binder: 11229:11230 ioctl 4018620d 200000004a80 returned -16 [ 436.061153][T11223] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1996'. [ 436.061213][T11223] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1996'. [ 436.387901][ T821] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 436.536603][ T821] usb 5-1: Using ep0 maxpacket: 8 [ 436.544070][ T821] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 436.544105][ T821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.544128][ T821] usb 5-1: Product: syz [ 436.544154][ T821] usb 5-1: Manufacturer: syz [ 436.544171][ T821] usb 5-1: SerialNumber: syz [ 436.604925][ T821] usb 5-1: config 0 descriptor?? [ 436.821791][ T821] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 436.916646][ T5780] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 437.070701][ T5780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.070742][ T5780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.070784][ T5780] usb 2-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 437.070812][ T5780] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.085818][ T5780] usb 2-1: config 0 descriptor?? [ 437.225624][ T821] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 437.296101][ T821] usb 5-1: USB disconnect, device number 7 [ 437.551198][ T5780] playstation 0003:054C:0BA0.000C: unknown main item tag 0x0 [ 437.551241][ T5780] playstation 0003:054C:0BA0.000C: unknown main item tag 0x0 [ 437.551270][ T5780] playstation 0003:054C:0BA0.000C: unknown main item tag 0x0 [ 437.551299][ T5780] playstation 0003:054C:0BA0.000C: unknown main item tag 0x0 [ 437.551327][ T5780] playstation 0003:054C:0BA0.000C: unknown main item tag 0x0 [ 437.551355][ T5780] playstation 0003:054C:0BA0.000C: unknown main item tag 0x0 [ 437.551385][ T5780] playstation 0003:054C:0BA0.000C: unknown main item tag 0x0 [ 437.703934][ T5780] playstation 0003:054C:0BA0.000C: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.1-1/input0 [ 437.775329][ T5780] playstation 0003:054C:0BA0.000C: Invalid byte count transferred, expected 16 got 0 [ 437.775361][ T5780] playstation 0003:054C:0BA0.000C: Failed to retrieve DualShock4 pairing info: -22 [ 437.775416][ T5780] playstation 0003:054C:0BA0.000C: Failed to get MAC address from DualShock4 [ 437.775438][ T5780] playstation 0003:054C:0BA0.000C: Failed to create dualshock4. [ 438.042471][T11249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.043105][T11249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.044944][ T5780] playstation 0003:054C:0BA0.000C: probe with driver playstation failed with error -22 [ 438.124654][ T5780] usb 2-1: USB disconnect, device number 98 [ 438.426034][T11294] overlayfs: failed to resolve './file0': -2 [ 438.508605][ T5616] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 439.045577][ C0] [drm:vkms_crtc_handle_vblank_timeout] *ERROR* vkms failure on handling vblank [ 439.298698][T11319] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2017'. [ 439.299335][T11324] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2017'. [ 439.541341][T11338] overlayfs: failed to resolve './file0': -2 [ 439.935553][T11351] syzkaller1: entered promiscuous mode [ 440.180802][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.180921][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.241056][T11366] binder: BINDER_SET_CONTEXT_MGR already set [ 440.241072][T11366] binder: 11364:11366 ioctl 4018620d 200000000100 returned -16 [ 440.244068][T11366] binder: BINDER_SET_CONTEXT_MGR already set [ 440.244081][T11366] binder: 11364:11366 ioctl 4018620d 200000004a80 returned -16 [ 440.276830][ T37] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 440.310137][T11368] overlayfs: failed to resolve './file0': -2 [ 440.426522][ T37] usb 5-1: Using ep0 maxpacket: 16 [ 440.430384][ T37] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 440.440706][ T37] usb 5-1: New USB device found, idVendor=0e41, idProduct=3061, bcdDevice= 0.40 [ 440.440739][ T37] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.440763][ T37] usb 5-1: Product: syz [ 440.440777][ T37] usb 5-1: Manufacturer: syz [ 440.440792][ T37] usb 5-1: SerialNumber: syz [ 440.561003][T11373] FAULT_INJECTION: forcing a failure. [ 440.561003][T11373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 440.561037][T11373] CPU: 0 UID: 0 PID: 11373 Comm: syz.3.2036 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 440.561064][T11373] Tainted: [L]=SOFTLOCKUP [ 440.561071][T11373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 440.561083][T11373] Call Trace: [ 440.561091][T11373] [ 440.561099][T11373] dump_stack_lvl+0xe8/0x150 [ 440.561129][T11373] should_fail_ex+0x46b/0x600 [ 440.561167][T11373] _copy_from_user+0x2d/0xb0 [ 440.561192][T11373] msr_io+0xab/0x8b0 [ 440.561219][T11373] ? kvm_arch_vcpu_ioctl+0x734/0x2ff0 [ 440.561246][T11373] ? __pfx_do_set_msr+0x10/0x10 [ 440.561272][T11373] ? kvm_arch_vcpu_ioctl+0x734/0x2ff0 [ 440.561297][T11373] ? __pfx_msr_io+0x10/0x10 [ 440.561321][T11373] ? __srcu_check_read_flavor+0x10b/0x250 [ 440.561352][T11373] kvm_arch_vcpu_ioctl+0x76e/0x2ff0 [ 440.561379][T11373] ? kvm_arch_vcpu_ioctl+0x734/0x2ff0 [ 440.561404][T11373] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 440.561429][T11373] ? unwind_next_frame+0xa6/0x2550 [ 440.561461][T11373] ? is_bpf_text_address+0x26/0x2b0 [ 440.561498][T11373] ? is_bpf_text_address+0x26/0x2b0 [ 440.561529][T11373] ? is_bpf_text_address+0x292/0x2b0 [ 440.561555][T11373] ? is_bpf_text_address+0x26/0x2b0 [ 440.561600][T11373] ? kernel_text_address+0xa5/0xe0 [ 440.561619][T11373] ? __kernel_text_address+0xd/0x30 [ 440.561636][T11373] ? unwind_get_return_address+0x4d/0x90 [ 440.561664][T11373] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 440.561690][T11373] ? arch_stack_walk+0xfb/0x150 [ 440.561727][T11373] ? stack_trace_save+0xa9/0x100 [ 440.561751][T11373] ? __pfx_stack_trace_save+0x10/0x10 [ 440.561773][T11373] ? kasan_save_free_info+0x46/0x50 [ 440.561801][T11373] ? stack_depot_save_flags+0x33/0x810 [ 440.561824][T11373] ? kasan_save_track+0x4f/0x80 [ 440.561863][T11373] ? kasan_save_track+0x3e/0x80 [ 440.561894][T11373] ? kasan_save_free_info+0x46/0x50 [ 440.561921][T11373] ? __kasan_slab_free+0x5c/0x80 [ 440.561956][T11373] ? kfree+0x1c5/0x6c0 [ 440.561986][T11373] ? tomoyo_path_number_perm+0x501/0x630 [ 440.562024][T11373] ? security_file_ioctl+0xc3/0x2a0 [ 440.562055][T11373] ? __se_sys_ioctl+0x47/0x170 [ 440.562078][T11373] ? do_syscall_64+0x15f/0xf80 [ 440.562118][T11373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.562164][T11373] ? __lock_acquire+0x6b5/0x2cf0 [ 440.562241][T11373] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 440.562279][T11373] ? lockdep_hardirqs_on+0x7a/0x110 [ 440.562314][T11373] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 440.562350][T11373] ? _mutex_lock_killable+0x152/0x1d0 [ 440.562384][T11373] ? kvm_vcpu_ioctl+0x283/0xfe0 [ 440.562424][T11373] kvm_vcpu_ioctl+0x7e7/0xfe0 [ 440.562470][T11373] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 440.562529][T11373] ? __fget_files+0x2a/0x420 [ 440.562567][T11373] ? __fget_files+0x2a/0x420 [ 440.562600][T11373] ? __fget_files+0x3a6/0x420 [ 440.562633][T11373] ? __fget_files+0x2a/0x420 [ 440.562670][T11373] ? bpf_lsm_file_ioctl+0x9/0x20 [ 440.562702][T11373] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 440.562739][T11373] __se_sys_ioctl+0xff/0x170 [ 440.562766][T11373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.562793][T11373] do_syscall_64+0x15f/0xf80 [ 440.562833][T11373] ? trace_irq_disable+0x3b/0x140 [ 440.562865][T11373] ? clear_bhb_loop+0x40/0x90 [ 440.562895][T11373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.562921][T11373] RIP: 0033:0x7f40be10cdd9 [ 440.562944][T11373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.562964][T11373] RSP: 002b:00007f40bc366028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 440.562989][T11373] RAX: ffffffffffffffda RBX: 00007f40be385fa0 RCX: 00007f40be10cdd9 [ 440.563007][T11373] RDX: 0000200000000380 RSI: 000000004008ae89 RDI: 0000000000000005 [ 440.563022][T11373] RBP: 00007f40bc366090 R08: 0000000000000000 R09: 0000000000000000 [ 440.563036][T11373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.563052][T11373] R13: 00007f40be386038 R14: 00007f40be385fa0 R15: 00007ffd905bc218 [ 440.563087][T11373] [ 440.799119][T11357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.800555][T11357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.017835][T11357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.018450][T11357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.216270][T11357] dvmrp1: entered allmulticast mode [ 441.258249][ T37] usb 5-1: cannot find UAC_HEADER [ 441.498742][ T37] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 441.647009][ T37] usb 5-1: USB disconnect, device number 9 [ 441.707958][ T5604] udevd[5604]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 441.991087][T11406] overlayfs: failed to resolve './file1': -2 [ 442.964320][T11440] FAULT_INJECTION: forcing a failure. [ 442.964320][T11440] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 442.964363][T11440] CPU: 0 UID: 0 PID: 11440 Comm: syz.1.2052 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 442.964397][T11440] Tainted: [L]=SOFTLOCKUP [ 442.964406][T11440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 442.964421][T11440] Call Trace: [ 442.964431][T11440] [ 442.964441][T11440] dump_stack_lvl+0xe8/0x150 [ 442.964477][T11440] should_fail_ex+0x46b/0x600 [ 442.964521][T11440] _copy_from_user+0x2d/0xb0 [ 442.964551][T11440] input_event_from_user+0xb1/0x290 [ 442.964582][T11440] ? __pfx_input_event_from_user+0x10/0x10 [ 442.964617][T11440] ? rt_spin_unlock+0x160/0x200 [ 442.964649][T11440] evdev_write+0x2ca/0x4c0 [ 442.964675][T11440] ? __lock_acquire+0x6b5/0x2cf0 [ 442.964715][T11440] ? __pfx_evdev_write+0x10/0x10 [ 442.964750][T11440] ? rw_verify_area+0x25b/0x4e0 [ 442.964787][T11440] ? __pfx_evdev_write+0x10/0x10 [ 442.964815][T11440] vfs_write+0x2a3/0xba0 [ 442.964848][T11440] ? __pfx_vfs_write+0x10/0x10 [ 442.964873][T11440] ? __fget_files+0x2a/0x420 [ 442.964910][T11440] ? __fget_files+0x2a/0x420 [ 442.964950][T11440] ? __fget_files+0x3a6/0x420 [ 442.964981][T11440] ? __fget_files+0x2a/0x420 [ 442.965024][T11440] ksys_write+0x156/0x270 [ 442.965051][T11440] ? __pfx_ksys_write+0x10/0x10 [ 442.965084][T11440] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.965111][T11440] do_syscall_64+0x15f/0xf80 [ 442.965145][T11440] ? trace_irq_disable+0x3b/0x140 [ 442.965176][T11440] ? clear_bhb_loop+0x40/0x90 [ 442.965207][T11440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.965231][T11440] RIP: 0033:0x7fc24fb7cdd9 [ 442.965252][T11440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.965271][T11440] RSP: 002b:00007fc24ddce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 442.965295][T11440] RAX: ffffffffffffffda RBX: 00007fc24fdf5fa0 RCX: 00007fc24fb7cdd9 [ 442.965313][T11440] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 442.965328][T11440] RBP: 00007fc24ddce090 R08: 0000000000000000 R09: 0000000000000000 [ 442.965344][T11440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 442.965356][T11440] R13: 00007fc24fdf6038 R14: 00007fc24fdf5fa0 R15: 00007ffdaaf53e18 [ 442.965393][T11440] [ 443.326600][ T37] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 443.359435][T11449] overlayfs: failed to resolve './file1': -2 [ 443.479735][ T37] usb 5-1: unable to get BOS descriptor or descriptor too short [ 443.481513][ T37] usb 5-1: not running at top speed; connect to a high speed hub [ 443.483321][ T37] usb 5-1: config 1 has an invalid interface number: 28 but max is 0 [ 443.483350][ T37] usb 5-1: config 1 has no interface number 0 [ 443.483384][ T37] usb 5-1: config 1 interface 28 has no altsetting 0 [ 443.531584][ T37] usb 5-1: New USB device found, idVendor=045b, idProduct=0212, bcdDevice=88.53 [ 443.531619][ T37] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.531654][ T37] usb 5-1: Product: syz [ 443.531671][ T37] usb 5-1: Manufacturer: syz [ 443.531689][ T37] usb 5-1: SerialNumber: syz [ 443.633463][ T5780] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 443.756560][ T5780] usb 1-1: device descriptor read/64, error -71 [ 443.855492][T11441] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 443.884076][T11441] netlink: 'syz.4.2051': attribute type 11 has an invalid length. [ 443.884101][T11441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2051'. [ 443.999331][ T5780] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 444.156496][ T5780] usb 1-1: device descriptor read/64, error -71 [ 444.267203][ T5780] usb usb1-port1: attempt power cycle [ 444.515334][T11484] netlink: 'syz.3.2062': attribute type 1 has an invalid length. [ 444.627263][ T5780] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 444.710898][ T5780] usb 1-1: device descriptor read/8, error -71 [ 444.945071][ T37] upd78f0730 5-1:1.28: upd78f0730 converter detected [ 444.965981][ T37] usb 5-1: upd78f0730 converter now attached to ttyUSB0 [ 444.996545][ T5780] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 445.018876][ T5780] usb 1-1: device descriptor read/8, error -71 [ 445.019504][ T37] usb 5-1: USB disconnect, device number 10 [ 445.045510][ T37] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 445.046289][ T37] upd78f0730 5-1:1.28: device disconnected [ 445.079265][T11493] overlayfs: failed to resolve './file1': -2 [ 445.140485][ T5780] usb usb1-port1: unable to enumerate USB device [ 445.279627][T11498] netlink: 'syz.1.2067': attribute type 10 has an invalid length. [ 445.445953][T11503] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2069'. [ 445.445982][T11503] openvswitch: netlink: Message has 8 unknown bytes. [ 445.626620][ T5780] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 445.712390][T11517] overlayfs: failed to resolve './file1': -2 [ 445.778173][ T5780] usb 5-1: Using ep0 maxpacket: 16 [ 445.780851][ T5780] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 445.780880][ T5780] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 445.788137][ T5780] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 445.788238][ T5780] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.788296][ T5780] usb 5-1: Product: syz [ 445.788339][ T5780] usb 5-1: Manufacturer: syz [ 445.788391][ T5780] usb 5-1: SerialNumber: syz [ 445.879893][T11519] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2075'. [ 445.898184][ T5780] usb 5-1: 0:2 : does not exist [ 446.079994][T11500] program syz.4.2068 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 446.266764][ T5682] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 446.349153][ T5780] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 446.436989][ T37] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 446.446830][ T5682] usb 2-1: Using ep0 maxpacket: 32 [ 446.460545][ T5682] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 446.460579][ T5682] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 446.460606][ T5682] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 446.460623][ T5682] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 446.460644][ T5682] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 446.460670][ T5682] usb 2-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 446.562606][ T5682] usb 2-1: New USB device found, idVendor=0499, idProduct=5007, bcdDevice= 0.40 [ 446.562629][ T5682] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.562645][ T5682] usb 2-1: Product: syz [ 446.562656][ T5682] usb 2-1: Manufacturer: syz [ 446.562667][ T5682] usb 2-1: SerialNumber: syz [ 446.626533][ T37] usb 4-1: Using ep0 maxpacket: 32 [ 446.630391][ T37] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 446.630420][ T37] usb 4-1: config 0 has no interface number 0 [ 446.650794][ T37] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 446.650827][ T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.650851][ T37] usb 4-1: Product: syz [ 446.650868][ T37] usb 4-1: Manufacturer: syz [ 446.650885][ T37] usb 4-1: SerialNumber: syz [ 446.703736][ T5780] usb 5-1: USB disconnect, device number 11 [ 446.744412][ T37] usb 4-1: config 0 descriptor?? [ 446.787165][ T37] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 446.865265][ T5682] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 446.986859][ T37] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 447.045058][ T5604] udevd[5604]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 447.108717][ T37] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 447.159184][ T5682] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 447.160948][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 7 [ 447.229628][ T5682] usb 2-1: USB disconnect, device number 99 [ 447.356554][ T5604] udevd[5604]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 447.363285][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 447.371594][ T5780] usb 4-1: USB disconnect, device number 112 [ 447.456585][ T5780] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 447.462573][ T5780] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 447.493456][ T5780] quatech2 4-1:0.51: device disconnected [ 447.583040][T11543] overlayfs: failed to resolve './file1': -2 [ 447.672425][T11545] (syz.1.2085,11545,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 447.672450][T11545] (syz.1.2085,11545,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 447.672466][T11545] (syz.1.2085,11545,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 447.672482][T11545] (syz.1.2085,11545,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 447.737490][ T5340] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 447.887957][ T5340] usb 1-1: device descriptor read/64, error -71 [ 448.083526][T11555] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2090'. [ 448.100213][T11556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2089'. [ 448.128140][T11556] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2089'. [ 448.136551][ T5340] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 448.254843][T11558] binder: BINDER_SET_CONTEXT_MGR already set [ 448.254855][T11558] binder: 11557:11558 ioctl 4018620d 200000000100 returned -16 [ 448.272101][T11558] binder: BINDER_SET_CONTEXT_MGR already set [ 448.272116][T11558] binder: 11557:11558 ioctl 4018620d 200000004a80 returned -16 [ 448.296719][ T5340] usb 1-1: device descriptor read/64, error -71 [ 448.407030][ T5340] usb usb1-port1: attempt power cycle [ 448.428095][ T821] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 448.511129][T11562] overlayfs: failed to resolve './file1': -2 [ 448.578577][ T821] usb 2-1: device descriptor read/64, error -71 [ 448.756710][ T5340] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 448.782915][ T5340] usb 1-1: device descriptor read/8, error -71 [ 448.817356][ T821] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 448.956566][ T821] usb 2-1: device descriptor read/64, error -71 [ 448.956593][ T5780] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 449.029622][ T5340] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 449.057449][ T5340] usb 1-1: device descriptor read/8, error -71 [ 449.069657][ T821] usb usb2-port1: attempt power cycle [ 449.116606][ T5780] usb 4-1: Using ep0 maxpacket: 32 [ 449.125038][ T5780] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 449.125069][ T5780] usb 4-1: config 0 has no interface number 0 [ 449.159252][ T5780] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 449.159285][ T5780] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.159309][ T5780] usb 4-1: Product: syz [ 449.159325][ T5780] usb 4-1: Manufacturer: syz [ 449.159343][ T5780] usb 4-1: SerialNumber: syz [ 449.193618][ T5340] usb usb1-port1: unable to enumerate USB device [ 449.204699][ T5780] usb 4-1: config 0 descriptor?? [ 449.286525][ T5777] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 449.431365][T11566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.432040][T11566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.436496][ T821] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 449.437025][ T5777] usb 5-1: Using ep0 maxpacket: 32 [ 449.485146][ T821] usb 2-1: device descriptor read/8, error -71 [ 449.492579][ T5777] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 449.492639][ T5777] usb 5-1: config 0 has no interface number 0 [ 449.495578][T11566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.524967][ T5777] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 449.525001][ T5777] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.525024][ T5777] usb 5-1: Product: syz [ 449.525040][ T5777] usb 5-1: Manufacturer: syz [ 449.525057][ T5777] usb 5-1: SerialNumber: syz [ 449.550017][T11566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.588966][ T5777] usb 5-1: config 0 descriptor?? [ 449.612741][ T5777] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 449.716637][ T821] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 449.738141][ T821] usb 2-1: device descriptor read/8, error -71 [ 449.762602][ T5780] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 449.762637][ T5780] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 449.849907][ T821] usb usb2-port1: unable to enumerate USB device [ 449.872319][ T5777] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 449.953747][ T5777] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 450.000499][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 7 [ 450.207817][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 450.219814][ T5340] usb 5-1: USB disconnect, device number 12 [ 450.254978][ T5340] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 450.290529][ T5340] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 450.293995][ T5340] quatech2 5-1:0.51: device disconnected [ 450.448080][ T5780] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 450.448397][ T5780] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 450.484478][ T5780] usb 4-1: USB disconnect, device number 113 [ 450.962576][T11574] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2099'. [ 451.089169][T11576] netlink: 'syz.4.2100': attribute type 3 has an invalid length. [ 451.089193][T11576] netlink: 'syz.4.2100': attribute type 1 has an invalid length. [ 451.089209][T11576] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2100'. [ 451.189174][T11580] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2101'. [ 451.189202][T11580] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 451.326546][ T5777] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 451.331317][T11583] overlayfs: failed to resolve './file0': -2 [ 451.479209][ T5777] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.479244][ T5777] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.479293][ T5777] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 451.479318][ T5777] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.514627][ T5777] usb 5-1: config 0 descriptor?? [ 451.972500][ T5777] arvo 0003:1E7D:30D4.000D: item fetching failed at offset 3/7 [ 451.973332][ T5777] arvo 0003:1E7D:30D4.000D: parse failed [ 451.973413][ T5777] arvo 0003:1E7D:30D4.000D: probe with driver arvo failed with error -22 [ 452.126700][ T5340] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 452.174437][ T5777] usb 5-1: USB disconnect, device number 13 [ 452.257985][T11601] FAULT_INJECTION: forcing a failure. [ 452.257985][T11601] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 452.258032][T11601] CPU: 1 UID: 0 PID: 11601 Comm: syz.1.2109 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 452.258063][T11601] Tainted: [L]=SOFTLOCKUP [ 452.258072][T11601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 452.258086][T11601] Call Trace: [ 452.258096][T11601] [ 452.258106][T11601] dump_stack_lvl+0xe8/0x150 [ 452.258142][T11601] should_fail_ex+0x46b/0x600 [ 452.258186][T11601] _copy_from_user+0x2d/0xb0 [ 452.258215][T11601] video_usercopy+0x36f/0x1450 [ 452.258247][T11601] ? __pfx___video_do_ioctl+0x10/0x10 [ 452.258274][T11601] ? __pfx_video_usercopy+0x10/0x10 [ 452.258308][T11601] ? __fget_files+0x2a/0x420 [ 452.258344][T11601] ? __fget_files+0x2a/0x420 [ 452.258375][T11601] ? __fget_files+0x3a6/0x420 [ 452.258412][T11601] v4l2_ioctl+0x190/0x1e0 [ 452.258449][T11601] ? __pfx_v4l2_ioctl+0x10/0x10 [ 452.258484][T11601] __se_sys_ioctl+0xff/0x170 [ 452.258509][T11601] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.258535][T11601] do_syscall_64+0x15f/0xf80 [ 452.258569][T11601] ? trace_irq_disable+0x3b/0x140 [ 452.258604][T11601] ? clear_bhb_loop+0x40/0x90 [ 452.258634][T11601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.258658][T11601] RIP: 0033:0x7fc24fb7cdd9 [ 452.258679][T11601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 452.258700][T11601] RSP: 002b:00007fc24ddce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 452.258725][T11601] RAX: ffffffffffffffda RBX: 00007fc24fdf5fa0 RCX: 00007fc24fb7cdd9 [ 452.258742][T11601] RDX: 0000200000000380 RSI: 00000000c0845657 RDI: 0000000000000003 [ 452.258758][T11601] RBP: 00007fc24ddce090 R08: 0000000000000000 R09: 0000000000000000 [ 452.258774][T11601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 452.258788][T11601] R13: 00007fc24fdf6038 R14: 00007fc24fdf5fa0 R15: 00007ffdaaf53e18 [ 452.258822][T11601] [ 452.306157][ T5340] usb 4-1: Using ep0 maxpacket: 32 [ 452.428918][ T5340] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 452.428965][ T5340] usb 4-1: config 0 has no interface number 0 [ 452.501388][ T5340] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 452.501416][ T5340] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.501436][ T5340] usb 4-1: Product: syz [ 452.501452][ T5340] usb 4-1: Manufacturer: syz [ 452.501467][ T5340] usb 4-1: SerialNumber: syz [ 452.556841][ T5340] usb 4-1: config 0 descriptor?? [ 452.581064][ T5340] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 452.706692][ T5780] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 452.801483][ T5340] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 452.832366][ T5340] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 452.876510][ T5780] usb 1-1: Using ep0 maxpacket: 16 [ 452.891999][ T5780] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.892464][ T5780] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.892509][ T5780] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 452.892534][ T5780] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.962542][ T5780] usb 1-1: config 0 descriptor?? [ 452.973554][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 7 [ 453.174482][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 453.175261][ T5777] usb 4-1: USB disconnect, device number 114 [ 453.224077][ T5777] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 453.254655][ T5777] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 453.259488][ T5777] quatech2 4-1:0.51: device disconnected [ 453.496171][T11617] overlayfs: failed to resolve './file0': -2 [ 453.614257][ T5780] usb 1-1: string descriptor 0 read error: -71 [ 453.643509][ T5780] usb 1-1: Max retries (5) exceeded reading string descriptor 200 [ 453.643601][ T5780] letsketch 0003:6161:4D15.000E: probe with driver letsketch failed with error -32 [ 453.679253][ T5780] usb 1-1: USB disconnect, device number 119 [ 453.766133][T11619] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2114'. [ 453.766160][T11619] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 454.295537][T11633] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2120'. [ 454.415834][T11638] overlayfs: failed to resolve './file0': -2 [ 454.520890][T11643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2124'. [ 454.520935][T11643] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2124'. [ 454.546971][ T5616] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 454.679191][ T5616] usb 5-1: device descriptor read/64, error -71 [ 454.928233][ T5616] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 454.960858][T11649] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2126'. [ 454.960928][T11649] openvswitch: netlink: Missing key (keys=40, expected=100) [ 454.964945][T11651] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2125'. [ 455.076595][ T5616] usb 5-1: device descriptor read/64, error -71 [ 455.187957][ T5616] usb usb5-port1: attempt power cycle [ 455.528930][ T5616] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 455.548669][ T5616] usb 5-1: device descriptor read/8, error -71 [ 455.573689][T11665] overlayfs: failed to resolve './file0': -2 [ 455.786627][ T5616] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 455.807389][ T5616] usb 5-1: device descriptor read/8, error -71 [ 455.917014][ T5616] usb usb5-port1: unable to enumerate USB device [ 456.013212][T11672] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2135'. [ 456.446732][T11679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2138'. [ 456.799122][T11689] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.2142'. [ 456.816731][ T5780] usb 1-1: new full-speed USB device number 120 using dummy_hcd [ 456.969386][ T5780] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 456.969425][ T5780] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.969466][ T5780] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 456.969493][ T5780] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.018349][ T5780] usb 1-1: config 0 descriptor?? [ 457.047547][T11693] overlayfs: failed to resolve './file0': -2 [ 457.506637][ T5616] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 457.536540][ T5780] isku 0003:1E7D:319C.000F: unknown main item tag 0x0 [ 457.536578][ T5780] isku 0003:1E7D:319C.000F: unknown global tag 0xc [ 457.536597][ T5780] isku 0003:1E7D:319C.000F: item 0 1 1 12 parsing failed [ 457.539222][ T5780] isku 0003:1E7D:319C.000F: parse failed [ 457.539300][ T5780] isku 0003:1E7D:319C.000F: probe with driver isku failed with error -22 [ 457.541190][ T5682] IPVS: starting estimator thread 0... [ 457.637523][T11701] IPVS: using max 7 ests per chain, 16800 per kthread [ 457.657471][ T5616] usb 4-1: Using ep0 maxpacket: 32 [ 457.665948][ T5616] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 457.665977][ T5616] usb 4-1: config 0 has no interface number 0 [ 457.666034][ T5616] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 457.708442][ T5780] usb 1-1: USB disconnect, device number 120 [ 457.727839][ T5616] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 457.727868][ T5616] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.727887][ T5616] usb 4-1: Product: syz [ 457.727901][ T5616] usb 4-1: Manufacturer: syz [ 457.727915][ T5616] usb 4-1: SerialNumber: syz [ 457.778800][ T5616] usb 4-1: config 0 descriptor?? [ 457.797712][T11695] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 457.841773][T11703] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2148'. [ 458.089469][T11695] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 458.297402][ T5616] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 458.297686][ T5616] asix 4-1:0.188: probe with driver asix failed with error -61 [ 458.384203][T11713] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2151'. [ 458.384248][T11713] openvswitch: netlink: Actions may not be safe on all matching packets [ 458.777414][T11723] overlayfs: failed to resolve './file0': -2 [ 458.875980][T11728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2156'. [ 459.128745][ T5780] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 459.276634][ T821] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 459.281511][ T5780] usb 2-1: unable to get BOS descriptor or descriptor too short [ 459.283515][ T5780] usb 2-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 459.283544][ T5780] usb 2-1: config 66 has 1 interface, different from the descriptor's value: 2 [ 459.283597][ T5780] usb 2-1: config 66 interface 0 altsetting 16 endpoint 0x7 has invalid wMaxPacketSize 0 [ 459.283786][ T5780] usb 2-1: config 66 interface 0 has no altsetting 0 [ 459.303663][ T5780] usb 2-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 459.303697][ T5780] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.303720][ T5780] usb 2-1: Product: syz [ 459.303739][ T5780] usb 2-1: Manufacturer: syz [ 459.303755][ T5780] usb 2-1: SerialNumber: syz [ 459.429996][ T821] usb 1-1: Using ep0 maxpacket: 8 [ 459.432672][ T821] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 459.456023][ T821] usb 1-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 459.456060][ T821] usb 1-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 459.456085][ T821] usb 1-1: Product: syz [ 459.456102][ T821] usb 1-1: Manufacturer: syz [ 459.456118][ T821] usb 1-1: SerialNumber: syz [ 459.563636][T11737] netlink: 'syz.4.2160': attribute type 10 has an invalid length. [ 459.563661][T11737] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2160'. [ 459.619171][ T821] usb 1-1: config 0 descriptor?? [ 459.624677][ T5780] ati_remote2 2-1:66.0: ati_remote2_probe(): need 2 interfaces, found 1 [ 459.654352][ T821] imon_raw 1-1:0.0: IR endpoint missing [ 459.685529][ T5780] usb 2-1: USB disconnect, device number 104 [ 459.835077][ T5340] usb 1-1: USB disconnect, device number 121 [ 460.281736][T11750] sctp: [Deprecated]: syz.4.2163 (pid 11750) Use of int in maxseg socket option. [ 460.281736][T11750] Use struct sctp_assoc_value instead [ 460.282313][T11750] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2163'. [ 460.283908][T11750] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2163'. [ 460.369336][ T821] usb 4-1: USB disconnect, device number 115 [ 460.439149][T11752] overlayfs: failed to resolve './file1': -2 [ 460.490685][T11753] syzkaller1: entered promiscuous mode [ 460.490715][T11753] syzkaller1: entered allmulticast mode [ 460.678435][T11759] overlay: filesystem on ./file0 not supported [ 461.191325][T11767] overlayfs: missing 'lowerdir' [ 461.364547][T11769] FAULT_INJECTION: forcing a failure. [ 461.364547][T11769] name failslab, interval 1, probability 0, space 0, times 0 [ 461.364576][T11769] CPU: 1 UID: 0 PID: 11769 Comm: syz.3.2171 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 461.364599][T11769] Tainted: [L]=SOFTLOCKUP [ 461.364605][T11769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 461.364616][T11769] Call Trace: [ 461.364622][T11769] [ 461.364629][T11769] dump_stack_lvl+0xe8/0x150 [ 461.364653][T11769] should_fail_ex+0x46b/0x600 [ 461.364686][T11769] should_failslab+0xa8/0x100 [ 461.364705][T11769] __kmalloc_node_track_caller_noprof+0xe2/0x7e0 [ 461.364724][T11769] ? __parse_flow_nlattrs+0x3e7/0x5d0 [ 461.364747][T11769] ? ovs_nla_get_match+0x3b1/0x1810 [ 461.364775][T11769] kmemdup_noprof+0x2b/0x70 [ 461.364799][T11769] ovs_nla_get_match+0x3b1/0x1810 [ 461.364833][T11769] ? __pfx_ovs_nla_get_match+0x10/0x10 [ 461.364875][T11769] ? __lock_acquire+0x6b5/0x2cf0 [ 461.364905][T11769] ? __asan_memset+0x22/0x50 [ 461.364930][T11769] ovs_nla_init_match_and_action+0x1d0/0x3a0 [ 461.364953][T11769] ? unwind_next_frame+0xa6/0x2550 [ 461.364980][T11769] ? __pfx_ovs_nla_init_match_and_action+0x10/0x10 [ 461.365043][T11769] ? stack_trace_save+0xa9/0x100 [ 461.365066][T11769] ? ovs_nla_get_ufid+0x129/0x200 [ 461.365092][T11769] ovs_flow_cmd_set+0x2cf/0x8d0 [ 461.365120][T11769] ? __pfx_ovs_flow_cmd_set+0x10/0x10 [ 461.365179][T11769] ? trace_kmalloc+0x2a/0xf0 [ 461.365200][T11769] ? __nla_parse+0x40/0x60 [ 461.365223][T11769] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 461.365260][T11769] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 461.365290][T11769] genl_family_rcv_msg_doit+0x22a/0x330 [ 461.365313][T11769] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 461.365340][T11769] ? bpf_lsm_capable+0x9/0x20 [ 461.365365][T11769] ? security_capable+0x7e/0x2c0 [ 461.365397][T11769] genl_rcv_msg+0x61c/0x7a0 [ 461.365420][T11769] ? __pfx_genl_rcv_msg+0x10/0x10 [ 461.365443][T11769] ? ref_tracker_free+0x673/0x820 [ 461.365460][T11769] ? __pfx_ovs_flow_cmd_set+0x10/0x10 [ 461.365484][T11769] ? ____sys_sendmsg+0x55c/0x870 [ 461.365507][T11769] ? ___sys_sendmsg+0x2a5/0x360 [ 461.365529][T11769] ? __x64_sys_sendmsg+0x1c3/0x2a0 [ 461.365552][T11769] ? do_syscall_64+0x15f/0xf80 [ 461.365577][T11769] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.365601][T11769] netlink_rcv_skb+0x232/0x4b0 [ 461.365624][T11769] ? __pfx_genl_rcv_msg+0x10/0x10 [ 461.365642][T11769] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 461.365674][T11769] ? netlink_deliver_tap+0x2e/0x1b0 [ 461.365698][T11769] ? netlink_deliver_tap+0x2e/0x1b0 [ 461.365724][T11769] genl_rcv+0x28/0x40 [ 461.365739][T11769] netlink_unicast+0x780/0x920 [ 461.365767][T11769] netlink_sendmsg+0x813/0xb40 [ 461.365796][T11769] ? __pfx_netlink_sendmsg+0x10/0x10 [ 461.365821][T11769] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 461.365844][T11769] ? aa_sock_msg_perm+0x122/0x200 [ 461.365861][T11769] ? __pfx_netlink_sendmsg+0x10/0x10 [ 461.365884][T11769] sock_sendmsg_nosec+0x112/0x150 [ 461.365904][T11769] ____sys_sendmsg+0x55c/0x870 [ 461.365932][T11769] ? __pfx_____sys_sendmsg+0x10/0x10 [ 461.365964][T11769] ? import_iovec+0x73/0xa0 [ 461.365986][T11769] ___sys_sendmsg+0x2a5/0x360 [ 461.366011][T11769] ? __lock_acquire+0x6b5/0x2cf0 [ 461.366038][T11769] ? __pfx____sys_sendmsg+0x10/0x10 [ 461.366088][T11769] ? __fget_files+0x2a/0x420 [ 461.366110][T11769] ? __fget_files+0x3a6/0x420 [ 461.366141][T11769] __x64_sys_sendmsg+0x1c3/0x2a0 [ 461.366167][T11769] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 461.366199][T11769] ? __pfx_ksys_write+0x10/0x10 [ 461.366221][T11769] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.366239][T11769] do_syscall_64+0x15f/0xf80 [ 461.366262][T11769] ? trace_irq_disable+0x3b/0x140 [ 461.366284][T11769] ? clear_bhb_loop+0x40/0x90 [ 461.366304][T11769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.366347][T11769] RIP: 0033:0x7f40be10cdd9 [ 461.366368][T11769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 461.366388][T11769] RSP: 002b:00007f40bc366028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 461.366412][T11769] RAX: ffffffffffffffda RBX: 00007f40be385fa0 RCX: 00007f40be10cdd9 [ 461.366438][T11769] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 461.366458][T11769] RBP: 00007f40bc366090 R08: 0000000000000000 R09: 0000000000000000 [ 461.366469][T11769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.366478][T11769] R13: 00007f40be386038 R14: 00007f40be385fa0 R15: 00007ffd905bc218 [ 461.366503][T11769] [ 461.865179][T11771] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2172'. [ 461.959084][T11773] QAT: Stopping all acceleration devices. [ 462.115453][T11778] overlayfs: failed to resolve './file1': -2 [ 462.196541][ T821] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 462.236559][ T5340] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 462.282424][T11785] FAULT_INJECTION: forcing a failure. [ 462.282424][T11785] name failslab, interval 1, probability 0, space 0, times 0 [ 462.282464][T11785] CPU: 1 UID: 0 PID: 11785 Comm: syz.1.2178 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 462.282496][T11785] Tainted: [L]=SOFTLOCKUP [ 462.282505][T11785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 462.282520][T11785] Call Trace: [ 462.282530][T11785] [ 462.282541][T11785] dump_stack_lvl+0xe8/0x150 [ 462.282576][T11785] should_fail_ex+0x46b/0x600 [ 462.282617][T11785] should_failslab+0xa8/0x100 [ 462.282645][T11785] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 462.282685][T11785] ? __alloc_skb+0x1d0/0x7d0 [ 462.282713][T11785] ? lockdep_hardirqs_on+0x7a/0x110 [ 462.282753][T11785] __alloc_skb+0x1d0/0x7d0 [ 462.282788][T11785] netlink_sendmsg+0x5d4/0xb40 [ 462.282832][T11785] ? __pfx_netlink_sendmsg+0x10/0x10 [ 462.282866][T11785] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 462.282898][T11785] ? aa_sock_msg_perm+0x122/0x200 [ 462.282922][T11785] ? __pfx_netlink_sendmsg+0x10/0x10 [ 462.282953][T11785] sock_sendmsg_nosec+0x112/0x150 [ 462.282983][T11785] ____sys_sendmsg+0x55c/0x870 [ 462.283025][T11785] ? __pfx_____sys_sendmsg+0x10/0x10 [ 462.283070][T11785] ? import_iovec+0x73/0xa0 [ 462.283102][T11785] ___sys_sendmsg+0x2a5/0x360 [ 462.283136][T11785] ? __lock_acquire+0x6b5/0x2cf0 [ 462.283177][T11785] ? __pfx____sys_sendmsg+0x10/0x10 [ 462.283248][T11785] ? __fget_files+0x2a/0x420 [ 462.283281][T11785] ? __fget_files+0x3a6/0x420 [ 462.283332][T11785] __x64_sys_sendmsg+0x1c3/0x2a0 [ 462.283370][T11785] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 462.283416][T11785] ? __pfx_ksys_write+0x10/0x10 [ 462.283448][T11785] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.283474][T11785] do_syscall_64+0x15f/0xf80 [ 462.283507][T11785] ? trace_irq_disable+0x3b/0x140 [ 462.283539][T11785] ? clear_bhb_loop+0x40/0x90 [ 462.283568][T11785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.283593][T11785] RIP: 0033:0x7fc24fb7cdd9 [ 462.283614][T11785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.283649][T11785] RSP: 002b:00007fc24ddce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 462.283673][T11785] RAX: ffffffffffffffda RBX: 00007fc24fdf5fa0 RCX: 00007fc24fb7cdd9 [ 462.283690][T11785] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 462.283705][T11785] RBP: 00007fc24ddce090 R08: 0000000000000000 R09: 0000000000000000 [ 462.283720][T11785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.283734][T11785] R13: 00007fc24fdf6038 R14: 00007fc24fdf5fa0 R15: 00007ffdaaf53e18 [ 462.283769][T11785] [ 462.360593][T11784] overlayfs: missing 'lowerdir' [ 462.390505][ T5340] usb 5-1: Using ep0 maxpacket: 32 [ 462.425025][ T5340] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 462.425104][ T5340] usb 5-1: config 0 has no interface number 0 [ 462.425263][ T5340] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 462.473018][ T821] usb 1-1: Using ep0 maxpacket: 16 [ 462.536127][ T5340] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 462.536163][ T5340] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.536216][ T5340] usb 5-1: Product: syz [ 462.536260][ T5340] usb 5-1: Manufacturer: syz [ 462.536286][ T5340] usb 5-1: SerialNumber: syz [ 462.551009][ T821] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7 [ 462.551060][ T821] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 95, changing to 7 [ 462.617186][ T5340] usb 5-1: config 0 descriptor?? [ 462.635700][ T821] usb 1-1: New USB device found, idVendor=194f, idProduct=010c, bcdDevice= 0.40 [ 462.635734][ T821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.635758][ T821] usb 1-1: Product: syz [ 462.635775][ T821] usb 1-1: Manufacturer: syz [ 462.635792][ T821] usb 1-1: SerialNumber: syz [ 462.664035][T11775] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 462.984193][T11775] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 463.193824][ T5340] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 463.194111][ T5340] asix 5-1:0.188: probe with driver asix failed with error -61 [ 463.223368][ T821] usb 1-1: incorrect wMaxPacketSize 0x3ff for BADD profile [ 463.344962][ T821] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 463.373672][ T821] usb 1-1: USB disconnect, device number 122 [ 463.435702][ T5604] udevd[5604]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 463.759866][T11798] syzkaller1: entered promiscuous mode [ 463.759886][T11798] syzkaller1: entered allmulticast mode [ 463.761065][T11800] overlayfs: failed to resolve './file1': -2 [ 463.889895][T11802] openvswitch: netlink: Actions may not be safe on all matching packets [ 464.002807][T11806] overlayfs: missing 'lowerdir' [ 464.227629][T11812] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2191'. [ 464.503027][ T5682] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 464.649545][ T5682] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 464.649581][ T5682] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.654927][ T5682] usb 2-1: config 0 descriptor?? [ 464.714408][T11823] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2196'. [ 464.913054][ T5682] usb 2-1: Cannot read MAC address [ 464.913327][ T5682] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 464.938016][ T5682] usb 2-1: USB disconnect, device number 105 [ 465.005230][ T5616] usb 5-1: USB disconnect, device number 18 [ 465.098978][T11830] overlayfs: missing 'lowerdir' [ 465.503578][T11841] netlink: 'syz.1.2201': attribute type 10 has an invalid length. [ 465.606997][ T5616] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 465.736957][ T5616] usb 1-1: device descriptor read/64, error -71 [ 465.847745][ T5340] usb 4-1: new full-speed USB device number 116 using dummy_hcd [ 465.976561][ T5616] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 465.996729][ T5754] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 465.999157][ T5340] usb 4-1: not running at top speed; connect to a high speed hub [ 466.000428][ T5340] usb 4-1: config 105 has an invalid interface number: 162 but max is 0 [ 466.000456][ T5340] usb 4-1: config 105 has no interface number 0 [ 466.000498][ T5340] usb 4-1: config 105 interface 162 has no altsetting 0 [ 466.002896][ T5340] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db71, bcdDevice=fe.8c [ 466.002926][ T5340] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.002949][ T5340] usb 4-1: Product: syz [ 466.002967][ T5340] usb 4-1: Manufacturer: syz [ 466.002984][ T5340] usb 4-1: SerialNumber: syz [ 466.046602][ T5682] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 466.136524][ T5616] usb 1-1: device descriptor read/64, error -71 [ 466.172086][ T5754] usb 5-1: config 0 has an invalid interface number: 116 but max is 0 [ 466.172120][ T5754] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 466.172181][ T5754] usb 5-1: config 0 has no interface number 0 [ 466.174883][ T5754] usb 5-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 466.174905][ T5754] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.174965][ T5754] usb 5-1: Product: syz [ 466.174977][ T5754] usb 5-1: Manufacturer: syz [ 466.174989][ T5754] usb 5-1: SerialNumber: syz [ 466.214966][ T5754] usb 5-1: config 0 descriptor?? [ 466.245399][ T5682] usb 2-1: unable to get BOS descriptor or descriptor too short [ 466.255432][ T5616] usb usb1-port1: attempt power cycle [ 466.262276][ T5682] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 466.262304][ T5682] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 466.332462][ T5682] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 466.332532][ T5682] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.332548][ T5682] usb 2-1: Product: syz [ 466.332560][ T5682] usb 2-1: Manufacturer: syz [ 466.332571][ T5682] usb 2-1: SerialNumber: syz [ 466.335949][ T5754] usb-storage 5-1:0.116: USB Mass Storage device detected [ 466.454647][T11843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.455272][T11843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.512561][ T5682] usb 2-1: 0:1 : does not exist [ 466.544735][ T5754] usb-storage 5-1:0.116: device ignored [ 466.572341][ T5340] dvb-usb: found a 'DViCO FusionHDTV DVB-T NANO2 w/o firmware' in warm state. [ 466.572393][ T5340] usb 4-1: setting power ON [ 466.572409][ T5340] dvb-usb: bulk message failed: -22 (2/0) [ 466.600041][ T5616] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 466.621708][ T5616] usb 1-1: device descriptor read/8, error -71 [ 466.703796][ T5340] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 466.709994][ T5754] usb 5-1: USB disconnect, device number 19 [ 466.754334][ T5340] dvb-usb: DViCO FusionHDTV DVB-T NANO2 w/o firmware error while loading driver (-19) [ 466.758966][ T5340] dvb_usb_cxusb 4-1:105.162: probe with driver dvb_usb_cxusb failed with error -22 [ 466.794188][ T5340] usb 4-1: USB disconnect, device number 116 [ 466.876573][ T5616] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 466.897578][ T5616] usb 1-1: device descriptor read/8, error -71 [ 467.007482][ T5616] usb usb1-port1: unable to enumerate USB device [ 467.180026][ T38] audit: type=1400 audit(1777363061.121:13): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name="{&#\" pid=11856 comm="syz.4.2206" [ 467.391697][T11862] overlayfs: missing 'lowerdir' [ 467.466798][ T5340] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 467.627537][ T5340] usb 4-1: Using ep0 maxpacket: 32 [ 467.629818][ T5340] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 467.629847][ T5340] usb 4-1: config 0 has no interface number 0 [ 467.629891][ T5340] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 467.632369][ T5340] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 467.632403][ T5340] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.632429][ T5340] usb 4-1: Product: syz [ 467.632441][ T5340] usb 4-1: Manufacturer: syz [ 467.632452][ T5340] usb 4-1: SerialNumber: syz [ 467.699409][ T5340] usb 4-1: config 0 descriptor?? [ 467.700549][T11860] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 467.846651][ T821] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 467.912487][T11860] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 467.997951][ T821] usb 5-1: Using ep0 maxpacket: 16 [ 468.000569][ T821] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 468.000625][ T821] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 468.000657][ T821] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 468.000680][ T821] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 468.000704][ T821] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 468.002446][ T821] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 468.002476][ T821] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 468.002497][ T821] usb 5-1: Manufacturer: syz [ 468.026129][ T821] usb 5-1: config 0 descriptor?? [ 468.119965][ T5340] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 468.120292][ T5340] asix 4-1:0.188: probe with driver asix failed with error -61 [ 468.356472][ T821] rc_core: IR keymap rc-hauppauge not found [ 468.356492][ T821] Registered IR keymap rc-empty [ 468.356626][ T821] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 468.376598][ T821] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 468.399069][ T821] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 468.403069][ T821] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input25 [ 468.412674][ T821] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 468.431847][ T821] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 468.456568][ T821] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 468.476625][ T821] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 468.496530][ T821] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 468.516745][ T821] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 468.539196][ T821] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 468.556974][ T821] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 468.576886][ T821] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 468.596849][ T821] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 468.616556][ T821] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 468.640526][ T821] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 468.640555][ T821] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 468.787323][ T5340] usb 2-1: USB disconnect, device number 106 [ 468.948407][T11873] netlink: 'syz.1.2212': attribute type 4 has an invalid length. [ 469.527280][T11885] overlayfs: missing 'lowerdir' [ 469.767222][ T821] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 469.939192][ T821] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 469.939269][ T821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.968384][ T821] usb 2-1: config 0 descriptor?? [ 470.149685][ T5754] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 470.222403][ T821] usb 2-1: Cannot read MAC address [ 470.225647][ T821] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 470.276532][ T5754] usb 1-1: device descriptor read/64, error -71 [ 470.308087][ T821] usb 2-1: USB disconnect, device number 107 [ 470.390600][ T5616] usb 4-1: USB disconnect, device number 117 [ 470.517949][ T5754] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 470.648095][ T5754] usb 1-1: device descriptor read/64, error -71 [ 470.756862][ T5754] usb usb1-port1: attempt power cycle [ 470.837431][T11911] overlayfs: missing 'lowerdir' [ 471.088974][T11915] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:1100:0000:0002:7d01 with DS=0x1 [ 471.109451][ T5616] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 471.127259][ T5754] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 471.147936][ T5754] usb 1-1: device descriptor read/8, error -71 [ 471.256552][ T5616] usb 2-1: Using ep0 maxpacket: 16 [ 471.259725][ T5616] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 471.259756][ T5616] usb 2-1: config 0 has no interface number 0 [ 471.259874][ T5616] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 471.261842][ T5616] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 471.261873][ T5616] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 471.261953][ T5616] usb 2-1: Product: syz [ 471.261965][ T5616] usb 2-1: SerialNumber: syz [ 471.331210][ T5616] usb 2-1: config 0 descriptor?? [ 471.358818][ T5616] cm109 2-1:0.8: invalid payload size 40, expected 4 [ 471.384572][ T5616] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input26 [ 471.399782][ T5754] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 471.433635][ T5754] usb 1-1: device descriptor read/8, error -71 [ 471.547412][ T5754] usb usb1-port1: unable to enumerate USB device [ 471.850826][T11922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.851637][T11922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.954357][ C1] cm109 2-1:0.8: cm109_urb_irq_callback: urb status -71 [ 471.954428][ C1] ------------[ cut here ]------------ [ 471.954439][ C1] URB ffff88802af1f900 submitted while active [ 471.954459][ C1] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x7b/0x18b0, CPU#1: ktimers/1/30 [ 471.954510][ C1] Modules linked in: [ 471.954535][ C1] CPU: 1 UID: 0 PID: 30 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 471.954573][ C1] Tainted: [L]=SOFTLOCKUP [ 471.954584][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 471.954602][ C1] RIP: 0010:usb_submit_urb+0x7e/0x18b0 [ 471.954634][ C1] Code: 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 07 0a 65 fb 49 83 3e 00 74 40 e8 cc 8d fb fa 48 8d 3d 05 7a ef 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 b1 8d fb fa eb 05 e8 aa 8d [ 471.954658][ C1] RSP: 0018:ffffc90000a4f7a0 EFLAGS: 00010283 [ 471.954683][ C1] RAX: ffffffff86c95754 RBX: ffff88802af1f900 RCX: 0000000000040000 [ 471.954704][ C1] RDX: ffffc90002cf4000 RSI: ffff88802af1f900 RDI: ffffffff8fb8d160 [ 471.954725][ C1] RBP: 000000000000000f R08: 0000000000000000 R09: 0000000000000100 [ 471.954742][ C1] R10: dffffc0000000000 R11: fffffbfff1f58a5f R12: 0000000000000820 [ 471.954761][ C1] R13: ffff88803c9f33c4 R14: ffff88802af1f908 R15: dffffc0000000000 [ 471.954782][ C1] FS: 0000000000000000(0000) GS:ffff888125dde000(0000) knlGS:0000000000000000 [ 471.954804][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 471.954822][ C1] CR2: 00007f6af6eca4c0 CR3: 000000003c9b4000 CR4: 00000000003526f0 [ 471.954845][ C1] Call Trace: [ 471.954856][ C1] [ 471.954869][ C1] ? __pfx_rt_spin_lock+0x10/0x10 [ 471.954909][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 471.954951][ C1] ? ___ratelimit+0x58c/0x8d0 [ 471.954996][ C1] cm109_urb_irq_callback+0x6db/0xc80 [ 471.955034][ C1] __usb_hcd_giveback_urb+0x3b3/0x5e0 [ 471.955083][ C1] dummy_timer+0x8a9/0x47d0 [ 471.955139][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 471.955183][ C1] ? __perf_event_task_sched_in+0xf2/0x1800 [ 471.955232][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 471.955284][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 471.955326][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 471.955370][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 471.955409][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 471.955451][ C1] __hrtimer_run_queues+0x405/0xb10 [ 471.955503][ C1] hrtimer_run_softirq+0x18f/0x260 [ 471.955541][ C1] handle_softirqs+0x1de/0x6d0 [ 471.955584][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 471.955617][ C1] run_ktimerd+0x69/0x100 [ 471.955653][ C1] smpboot_thread_fn+0x541/0xa50 [ 471.955692][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 471.955738][ C1] kthread+0x388/0x470 [ 471.955776][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 471.955808][ C1] ? __pfx_kthread+0x10/0x10 [ 471.955848][ C1] ret_from_fork+0x514/0xb70 [ 471.955892][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 471.955925][ C1] ? __switch_to+0xc79/0x1410 [ 471.955955][ C1] ? __pfx_kthread+0x10/0x10 [ 471.955997][ C1] ret_from_fork_asm+0x1a/0x30 [ 471.956052][ C1] [ 471.956074][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 471.956098][ C1] CPU: 1 UID: 0 PID: 30 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 471.956134][ C1] Tainted: [L]=SOFTLOCKUP [ 471.956145][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 471.956161][ C1] Call Trace: [ 471.956173][ C1] [ 471.956184][ C1] vpanic+0x56c/0xa60 [ 471.956224][ C1] ? __pfx__printk+0x10/0x10 [ 471.956253][ C1] ? __pfx_vpanic+0x10/0x10 [ 471.956290][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 471.956333][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 471.956381][ C1] panic+0xc5/0xd0 [ 471.956418][ C1] ? __pfx_panic+0x10/0x10 [ 471.956468][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 471.956511][ C1] __warn+0x315/0x4c0 [ 471.956547][ C1] ? usb_submit_urb+0x7b/0x18b0 [ 471.956578][ C1] ? usb_submit_urb+0x7b/0x18b0 [ 471.956609][ C1] __report_bug+0x29a/0x540 [ 471.956647][ C1] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 471.956689][ C1] ? usb_submit_urb+0x7b/0x18b0 [ 471.956718][ C1] ? __pfx___report_bug+0x10/0x10 [ 471.956766][ C1] ? dev_printk_emit+0xee/0x140 [ 471.956806][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 471.956853][ C1] report_bug_entry+0x19a/0x290 [ 471.956903][ C1] ? usb_submit_urb+0x7e/0x18b0 [ 471.956931][ C1] ? usb_submit_urb+0x83/0x18b0 [ 471.956959][ C1] handle_bug+0xce/0x200 [ 471.956986][ C1] exc_invalid_op+0x1a/0x50 [ 471.957013][ C1] asm_exc_invalid_op+0x1a/0x20 [ 471.957039][ C1] RIP: 0010:usb_submit_urb+0x7e/0x18b0 [ 471.957070][ C1] Code: 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 07 0a 65 fb 49 83 3e 00 74 40 e8 cc 8d fb fa 48 8d 3d 05 7a ef 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 b1 8d fb fa eb 05 e8 aa 8d [ 471.957094][ C1] RSP: 0018:ffffc90000a4f7a0 EFLAGS: 00010283 [ 471.957118][ C1] RAX: ffffffff86c95754 RBX: ffff88802af1f900 RCX: 0000000000040000 [ 471.957139][ C1] RDX: ffffc90002cf4000 RSI: ffff88802af1f900 RDI: ffffffff8fb8d160 [ 471.957160][ C1] RBP: 000000000000000f R08: 0000000000000000 R09: 0000000000000100 [ 471.957177][ C1] R10: dffffc0000000000 R11: fffffbfff1f58a5f R12: 0000000000000820 [ 471.957197][ C1] R13: ffff88803c9f33c4 R14: ffff88802af1f908 R15: dffffc0000000000 [ 471.957227][ C1] ? usb_submit_urb+0x74/0x18b0 [ 471.957266][ C1] ? __pfx_rt_spin_lock+0x10/0x10 [ 471.957296][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 471.957336][ C1] ? ___ratelimit+0x58c/0x8d0 [ 471.957380][ C1] cm109_urb_irq_callback+0x6db/0xc80 [ 471.957418][ C1] __usb_hcd_giveback_urb+0x3b3/0x5e0 [ 471.957467][ C1] dummy_timer+0x8a9/0x47d0 [ 471.957522][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 471.957568][ C1] ? __perf_event_task_sched_in+0xf2/0x1800 [ 471.957617][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 471.957670][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 471.957717][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 471.957763][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 471.957804][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 471.957847][ C1] __hrtimer_run_queues+0x405/0xb10 [ 471.957908][ C1] hrtimer_run_softirq+0x18f/0x260 [ 471.957945][ C1] handle_softirqs+0x1de/0x6d0 [ 471.957987][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 471.958021][ C1] run_ktimerd+0x69/0x100 [ 471.958055][ C1] smpboot_thread_fn+0x541/0xa50 [ 471.958092][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 471.958134][ C1] kthread+0x388/0x470 [ 471.958173][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 471.958207][ C1] ? __pfx_kthread+0x10/0x10 [ 471.958246][ C1] ret_from_fork+0x514/0xb70 [ 471.958282][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 471.958315][ C1] ? __switch_to+0xc79/0x1410 [ 471.958345][ C1] ? __pfx_kthread+0x10/0x10 [ 471.958385][ C1] ret_from_fork_asm+0x1a/0x30 [ 471.958441][ C1] [ 471.959056][ C1] Kernel Offset: disabled