last executing test programs: 7.698167384s ago: executing program 0 (id=1940): syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x80045430, &(0x7f0000000080)={0x8, 0x9, 0x7fff, 0x7, 0x5, "3eccd200"}) 7.65889083s ago: executing program 0 (id=1941): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x527c01) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@multicast1, 0x4e23, 0x0, 0x0, 0x8000, 0xa}, {0xff, 0x0, 0xffff}, {0x0, 0x5}}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0x8c}}]}, 0xc4}}, 0x4894) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0xfffffffc}, 0x1c) getsockopt$inet6_mreq(r2, 0x29, 0x1, 0x0, &(0x7f0000002f00)) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000140)=0x2000003) ioctl$USBDEVFS_RESET(r0, 0x5514) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000040)) 7.210419884s ago: executing program 0 (id=1943): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xae642, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a0001002abd7000000000000a"], 0x78}], 0x1, 0x0, 0x0, 0x24400}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000008280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000820}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32], 0x100, 0x40004010}}], 0x2, 0x8048) openat$mice(0xffffffffffffff9c, &(0x7f0000001680), 0x42) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r0, 0x0) preadv2(r0, &(0x7f0000000180)=[{&(0x7f0000003240)=""/4096, 0x1000}], 0x1, 0x2000, 0x1000000, 0x1f) socket$unix(0x1, 0x2, 0x0) 6.671567524s ago: executing program 0 (id=1948): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRESHEX=r0], 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f0000000040)=',&##\'.-\\%^$$#)-\x00') syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) r3 = memfd_create(&(0x7f00000001c0)='\x02A\xbbL\xeb\xbd]\x9c\x9aU\x9c\xcbb\xcc\xfa0\xf5JoeN\x8c\x86\xfa\xb3\x0e&\xfe\xa8NF\x96\t\x01\xceJ\xc3\x8f+\xe8\xa7v\x80\xfaj\xfe\x11\x0e\xed6\x00\x00\x00\x00\x00\x00\f\xd7\xe7\xdb?\xf3\xd9\xa3\xd6a\x1a\xfch}7K\xca\x90KA\x02\xd6\x94\xf0S\xcc\xd0\x14\x8c\xb3!\xa8\xeajy@\xa0\xdc~\xea\xfd\xfb\x12\x88Xa\x16\xcb\xe4\x03\x1e\xac\xf2\xe9\xf1<', 0x3) socket$inet6_icmp(0xa, 0x2, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r7 = openat$incfs(r5, &(0x7f00000000c0)='.log\x00', 0x100, 0xb) write$tun(r6, &(0x7f0000000480)=ANY=[@ANYRESHEX=r5, @ANYRESOCT=r7, @ANYRES32=r3], 0xfdef) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12015002000000086a05ba00050000000000000024000101098e3a0904000c0203010309092107000c0122670209f3d864f3f35affd70c0ab6ba8fd217f2b838e91e57a4fde4ad88b080022151854de5f7b4e5f3830505b68efa817ab4a3a7dc3a840e939a409c806061d6aa36d87a4c405cf13b35d71d61c314fe5811e4d1c88cd1083680d668b5cb583d2b8508ce77b17965593e5c41cb55f5ce28fc71288f6bf1fd6b1f87d7d851c9d97362fd82f5ea709a74fa9686ba072d04"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008002e"], 0x1c}], 0x1}, 0x4008004) bind$bt_hci(r8, &(0x7f0000000180)={0x1f, 0x3, 0x3}, 0x6) write(r8, &(0x7f0000000000)="380000000100", 0x6) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) r10 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r11 = openat$binfmt(0xffffffffffffff9c, r10, 0x42, 0x1ff) close(r11) 5.916753344s ago: executing program 2 (id=1953): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060088470000100007007f0000017f00000184004000140002"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 5.758516077s ago: executing program 2 (id=1954): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200000000100905"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_usb_connect(0x3, 0x3d, &(0x7f0000000180)=ANY=[@ANYBLOB="12015002e1f36a087205feca07440102030109022b000101099005090408070224d86c0509058000000408040609051103000200041c0705c1", @ANYRES8, @ANYRESDEC], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) r2 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x80000000}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000041000710fefffffffeffffff017c0000040042800c00018006000600802a00001400028010001480060006"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0x2404c004) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000004) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, 0x0) getsockopt$packet_buf(r5, 0x107, 0x16, &(0x7f00000000c0)=""/181, &(0x7f0000000180)=0xb5) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$TCSETS(r4, 0x40384708, &(0x7f0000000080)={0x8, 0x9, 0x7fff, 0x7, 0x8, "3eccd200000000004000"}) 3.696675522s ago: executing program 2 (id=1963): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000000000000003379"], 0x40) (async) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000140)={'veth1\x00', 0x7fff, 0x1}) (async) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f00000000c0)={0x81, 0x0, 0x1}) (async) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8429000b4e230f00000000a2bc5603ca00000f7f89004e002050da742dac0000000101ff05020003000200000000000100000000005839", 0x48}], 0x1) (async) syz_usb_connect(0x2, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="d996d965f2b982ef17b6d268e8d0bbb3458aee38f4d404559e9efa971aeae083557851b198491f46283341c3fb0b839d5fc59d95682f12acc78fefed4be9b8a06a00cb256dac6cb9f5704040cccc33f3e2b9f997fabd2c700630ef7da9b768cb687205b90c9a6b9efb58572611923e05bab85052665a9c500f38c45a57b328da9d5d86353a"], 0x0) 3.50549106s ago: executing program 0 (id=1964): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000000040)) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0xc) 3.284108718s ago: executing program 1 (id=1966): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x18, r1, 0x1, 0x0, &(0x7f0000000140)=[{0xfffffffffffffffe, 0xffffffffffffffff}]}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x2, r1}) (fail_nth: 14) 2.726195807s ago: executing program 1 (id=1968): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff0000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0xa000000, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@flat=@weak_handle, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/10, 0xa, 0x0, 0x13}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 2.673058959s ago: executing program 1 (id=1969): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x9}}, 0x10) (async) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @remote}, 0x10) (async) r2 = accept$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) (async) mount(&(0x7f00000002c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000380)='./proc\x00', &(0x7f00000003c0)='binfmt_misc\x00', 0x2200000, &(0x7f0000000440)=',\x00') (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000140)={r3, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r6, 0x6, 0x25, 0x0, &(0x7f0000000000)=0x41) (async) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000180)={0x1, 0x0, [{0x40000098, 0x0, 0x4000000006}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) write(r4, &(0x7f0000000400)='ba', 0x2) (async) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f00006ad000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000200)="4b0fc768022e2e46858b7ebffb0c48b866000000000000000f23d80f21f835800000300f23f8b9800000c00f3235008000000f300fc7ac5400600000450f01c50fc7be009000003666410f3881270f015f572666660f79ff", 0x58}], 0x1, 0x7c, &(0x7f00000002c0), 0x0) (async) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000193000/0x2000)=nil, 0x2000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r9, 0x3ba0, &(0x7f0000000300)={0x48}) 2.635051096s ago: executing program 3 (id=1970): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f0000000540)={0x1, 0x401, 0x2d, 0x1, 0x201, 0xe6b, 0x38000000, 0x4, 0x0, 0x81, 0x3, 0x1}) 2.464847523s ago: executing program 3 (id=1971): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setns(0xc9, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000080)=0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="c4000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000100000000a002000870000", @ANYRES32=0x0, @ANYRES8, @ANYBLOB="001000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000000000000000000000fbffffffffffffff0000000000000000000000000000000000000000000000020400000000000000000000000000004000000000000000000a00100001"], 0xc4}}, 0x2c000010) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000140001000000000004000000e000000200000000000000000000000000000000000000000000000000000000000000000fff00000a00200000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00@'], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x987a3a9f32358a4c) 2.361209725s ago: executing program 3 (id=1972): ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x80000, 0x0, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mount(0x0, 0x0, &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r8, 0x0, 0x0) setfsgid(r8) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) r9 = fcntl$dupfd(r5, 0x0, r6) ioctl$TCFLSH(r9, 0x400455c8, 0x2) ioctl$TIOCSETD(r9, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)=0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000134000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000440)="c4e1916c3f0f08642e660f73fdd50fc71a66baf80cb84bdcd185ef66bafc0cb000eeb912020000b81f320000ba000000000f30b805000000b9920000000f01d9650fc72e66b8dd008ee0640f0f9e000000809a", 0x53}], 0x1, 0x5c, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.277439453s ago: executing program 1 (id=1973): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x56040, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x1e, 0x2}}) recvmmsg(r1, &(0x7f00000040c0)=[{{&(0x7f00000000c0)=@isdn, 0x80, &(0x7f0000001240)=[{&(0x7f0000000140)=""/236, 0xec}, {&(0x7f0000000240)=""/4096, 0x1000}], 0x2, &(0x7f0000001280)=""/55, 0x37}, 0x8}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000012c0)=""/178, 0xb2}, {&(0x7f0000001380)=""/103, 0x67}, {&(0x7f0000001400)=""/52, 0x34}, {&(0x7f0000001440)=""/86, 0x56}, {&(0x7f00000014c0)=""/160, 0xa0}], 0x5, &(0x7f0000001600)=""/202, 0xca}, 0x1}, {{&(0x7f0000001700)=@pptp, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001780)=""/2, 0x2}, {&(0x7f00000017c0)=""/176, 0xb0}, {&(0x7f0000001880)=""/65, 0x41}, {&(0x7f0000001900)}, {&(0x7f0000001940)=""/132, 0x84}, {&(0x7f0000001a00)=""/86, 0x56}, {&(0x7f0000001a80)=""/157, 0x9d}, {&(0x7f0000001b40)=""/189, 0xbd}, {&(0x7f0000001c00)=""/184, 0xb8}, {&(0x7f0000001cc0)=""/33, 0x21}], 0xa, &(0x7f0000001dc0)=""/203, 0xcb}}, {{&(0x7f0000001ec0)=@qipcrtr, 0x80, &(0x7f0000003080)=[{&(0x7f0000001f40)=""/4096, 0x1000}, {&(0x7f0000002f40)=""/7, 0x7}, {&(0x7f0000002f80)=""/10, 0xa}, {&(0x7f0000002fc0)=""/166, 0xa6}], 0x4, &(0x7f00000030c0)=""/4096, 0x1000}, 0x8}], 0x4, 0x1, &(0x7f00000041c0)={0x77359400}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000004200)={0x0, 0x3, 0x2, [0x9, 0x1ff]}, &(0x7f0000004240)=0xc) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000004280)={r2, 0xffff, 0x6, 0x3d95}, &(0x7f00000042c0)=0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000004340), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000004400)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000043c0)={&(0x7f0000004380)={0x28, r3, 0x100, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7f}]}, 0x28}, 0x1, 0x0, 0x0, 0x8010}, 0x2) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$BTRFS_IOC_DEFRAG(r4, 0x50009402, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000004500)={'ip6_vti0\x00', &(0x7f0000004480)={'syztnl2\x00', 0x0, 0x29, 0x4, 0xfd, 0x8, 0x21, @remote, @dev={0xfe, 0x80, '\x00', 0x26}, 0x80, 0x10, 0x2, 0x22}}) sendmsg$nl_route_sched_retired(r5, &(0x7f0000005400)={&(0x7f0000004440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000053c0)={&(0x7f0000004540)=@deltclass={0xe50, 0x29, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4, 0xe}, {0xfff1, 0xe}, {0x4}}, [@c_cbq={{0x8}, {0x460, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x160000, 0x23c1311d, 0xd, 0x7, 0xffffffff, 0x5, 0x4, 0x7f, 0x8e, 0x7b, 0x7, 0xffffffff, 0x7fff, 0x5, 0x7, 0x4, 0x200, 0x1, 0x100, 0x5, 0x9, 0x7, 0xffff22a5, 0x3, 0x8, 0x8, 0x10, 0x6, 0x7, 0xd, 0x3, 0x2, 0x1, 0x2, 0x6, 0x316f, 0x1, 0x9, 0x1f, 0x1, 0x6, 0x8, 0xfffffffa, 0xe743, 0x4, 0x4, 0x5, 0x5, 0x3ff, 0x9, 0x3, 0x1, 0x5, 0xa0, 0x81, 0x2, 0xeba, 0x1, 0x10001, 0x5, 0x6553e9d1, 0x2, 0xf, 0x1, 0x6, 0xffff9f19, 0xfffffff8, 0x8, 0x9, 0x3ff, 0x4, 0x8, 0xffffffff, 0x1, 0x1, 0x3, 0x2546, 0x9, 0x10, 0x8, 0x7, 0x8, 0x69, 0x7fffffff, 0x7fffffff, 0x7, 0x2, 0x7, 0x40, 0x100, 0x8, 0x3, 0x4, 0x1, 0x9, 0xb, 0x3ff, 0x7, 0x1ff, 0x2, 0x8, 0x9, 0x9, 0x4, 0x0, 0x3b46, 0x7fffffff, 0x0, 0xfff, 0x1, 0x9, 0xb, 0x0, 0x2, 0x6, 0x4, 0xfffffff5, 0x1, 0x6, 0x10, 0x40000000, 0x2, 0x7, 0x6, 0xffffffff, 0x10000, 0x1, 0x5, 0x2, 0xfffffffc, 0xc00, 0x0, 0x2, 0x5, 0xfffffff7, 0x8, 0xfffeffff, 0x7, 0x3, 0x5, 0x5, 0x10000, 0x2, 0x4, 0x9, 0x7fff, 0x0, 0x2, 0x3, 0x8, 0x80000000, 0x7f, 0x72, 0x7, 0x6, 0x3, 0x7, 0x2, 0x8, 0x80000001, 0x5, 0x101, 0x1, 0xa6a3, 0x8000, 0x101, 0x1e60882f, 0x521, 0xffff, 0x6, 0x1ff, 0xe, 0x71, 0xffff, 0x1e2, 0x3, 0x4c5, 0x3, 0x0, 0x1, 0x2, 0xf, 0x7, 0x0, 0x5c8, 0x1, 0x3, 0x8, 0xef, 0x4573ea80, 0x7, 0x8, 0x1000, 0x3, 0x4, 0x8, 0xd5, 0xf, 0x8e3e, 0x20f, 0x0, 0x3, 0x8fd, 0x9, 0x3e4, 0x81b6, 0x0, 0x7fffffff, 0x6, 0x0, 0x4, 0x7f, 0x0, 0x0, 0x7f, 0x5, 0x8001, 0xe, 0x8, 0x8c1, 0x6, 0x8, 0x6, 0xa25, 0x3ff, 0x3, 0xd, 0x0, 0x9, 0xa4, 0x3, 0x8212, 0xfffffff9, 0xddc, 0x4, 0x20000000, 0x80, 0x5, 0xc, 0x5, 0x4, 0xb, 0x0, 0x800, 0xa5, 0x2, 0x9, 0x1, 0x7, 0x69030e35, 0x4e7, 0x0, 0x0, 0x3, 0xd5b, 0x7fff]}, @TCA_CBQ_RATE={0x10, 0x5, {0x7, 0x1, 0xff01, 0x1, 0x39, 0x1}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x34, 0x3, 0x8, 0x10, 0x0, 0xe, 0x200, 0x5}}, @TCA_CBQ_RATE={0x10, 0x5, {0x3, 0x2, 0xffc0, 0x4, 0x800, 0x101}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x4, 0x7, 0x0, 0xe, 0x9, 0x950}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x0, 0x6, 0x9, 0x0, 0x7, 0x6}}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x0, 0x9, 0x2, 0x1, 0x10001, 0x4, 0xde2, 0x80000000, 0xfffff800, 0x177, 0xaa, 0x2, 0x8001, 0x4, 0x42, 0x60000, 0x6, 0xd, 0x80, 0x2, 0x7, 0x2, 0xfffffc00, 0xc, 0xa, 0x81, 0x10000000, 0x4, 0x2, 0x4, 0x8, 0x40, 0xffff8001, 0x6, 0x100e, 0x96d, 0x0, 0x6b, 0x4, 0x81, 0x8, 0x7, 0x10001, 0x80, 0x6, 0xff, 0x9, 0x94, 0x6, 0x6, 0x80b, 0x8, 0x7, 0xf61, 0x2, 0x6, 0xe0a, 0xd805, 0x5, 0x3, 0xb, 0x7, 0xffff8001, 0x0, 0xffffffff, 0x0, 0x8, 0x5, 0xa, 0xf0b4, 0x0, 0x3, 0x7f, 0x1000, 0x4, 0x401, 0x3ff, 0xf, 0x9e, 0x2, 0x3, 0x1390, 0x4, 0x80000000, 0x1ff, 0x10, 0x1, 0x401, 0x0, 0x9, 0xd78, 0x3, 0xadb, 0xfb, 0x9, 0xfffffffc, 0x1, 0x6, 0x0, 0xf, 0x7, 0xd, 0xfff, 0x4, 0x101, 0xffff, 0x8000, 0x8, 0x4, 0x7, 0x4, 0x7, 0x400, 0x4, 0x6, 0x8, 0x4d35, 0x43, 0x6, 0x6, 0x9704, 0x4, 0x8, 0x4, 0x5, 0x1, 0xd64, 0xa, 0x8, 0xd98, 0x1, 0x4, 0xef84, 0x6, 0x400, 0x6, 0x80000000, 0x36f, 0xf6, 0xf, 0x2, 0xcd, 0x0, 0x3, 0x1, 0x5, 0x7, 0x100, 0xf775, 0x2, 0x27, 0x5a, 0xa, 0x5, 0x9, 0x4bc058ea, 0x1, 0x4000000, 0x8001, 0x7f, 0xfffffff9, 0x0, 0x6, 0xffff, 0x8, 0x4, 0x200, 0x3, 0x4, 0x10, 0x38, 0x9, 0x1a96, 0x1, 0x3, 0x151b, 0x3, 0x1, 0x3, 0x3, 0x6, 0x4, 0x9ec7, 0x5, 0x2, 0x10, 0x7ff, 0x553, 0x8, 0x53017809, 0x650, 0x8, 0x9, 0x3, 0x7, 0x8, 0x2, 0x1ff, 0x4, 0x7f, 0x800, 0xffffffa9, 0x0, 0x6, 0x5, 0x5, 0x9888, 0xf5, 0x9, 0xcc02, 0xffffffff, 0x4, 0x6c000000, 0x3, 0x4, 0x444, 0x5, 0xa, 0x2, 0x0, 0x9, 0x2, 0x8, 0x7, 0xd, 0xf6, 0x0, 0x1ff, 0x5b, 0x8, 0x7, 0x101, 0x10, 0x8001, 0x0, 0xfffffffd, 0x3, 0x800, 0xf0, 0xfffffff5, 0xc6f, 0x2, 0x7fff, 0xd, 0xdf56, 0x982, 0x6ad0f878, 0xcdaf, 0x5, 0x5, 0x0, 0x4f0, 0x5, 0x400, 0x9, 0x81]}]}}, @c_atm={{0x8}, {0x4}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x9}}}, @c_cbq={{0x8}, {0x450, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x10, 0x2, 0x4, 0x80, 0x16d, 0x80000000, 0x9, 0x2}}, @TCA_CBQ_RATE={0x10, 0x5, {0xd2, 0x0, 0x8, 0x8, 0x4, 0x40}}, @TCA_CBQ_RATE={0x10, 0x5, {0x9, 0x1, 0x3, 0x43, 0x8}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xe, 0x9}, 0x12, 0x9}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x57b, 0x2, 0x2, 0xfffffff9, 0x800, 0x4, 0x401, 0x8, 0x10, 0x8, 0x9, 0x7, 0x5, 0x40, 0x6, 0xfffffffa, 0x4662, 0x4, 0x0, 0x8, 0x8, 0x0, 0x1, 0x4, 0x4dd, 0x80000001, 0x8, 0x400, 0x2, 0x9, 0x6, 0x0, 0x0, 0x80, 0x9, 0x10001, 0x5, 0xffff7fff, 0x2273, 0xf55e, 0x7, 0x8, 0x1, 0x1, 0x2, 0x1, 0x0, 0x2, 0x8, 0x4, 0x4b6, 0x80000000, 0x9, 0x4, 0x9, 0x101, 0x7, 0x7, 0x80000001, 0x4, 0xfffffff9, 0x4, 0x266, 0x0, 0x3, 0x382, 0x72, 0x4, 0x9, 0x4, 0x10001, 0x9, 0x5a, 0x80, 0x7, 0x8000, 0x401, 0x2, 0x5, 0x5, 0x0, 0x1, 0xc0, 0x9, 0x401, 0x200, 0x2, 0x5, 0x9, 0x101, 0x26, 0x6, 0x7fffffff, 0x6, 0x1, 0x3, 0xffc0, 0x7, 0x4, 0x5, 0x7, 0x6, 0x3, 0x1f100, 0x7, 0x54d, 0x9, 0x2, 0x5, 0x8001, 0x2, 0xfffffff3, 0x101, 0x6, 0x4, 0x7f, 0x8, 0x0, 0x10000, 0xf, 0x80000001, 0x0, 0x9, 0x1, 0xd, 0x1, 0x6, 0x9, 0x9, 0x8, 0x7, 0x7f, 0x1, 0x0, 0x6, 0x1, 0x6, 0xbc, 0x0, 0x7, 0x7fff, 0x3, 0x0, 0x80000000, 0x8, 0x7, 0x2, 0x99cb, 0x55e, 0x7, 0x7, 0x3, 0xc1, 0xa, 0x5, 0x200, 0x2, 0x2, 0x4, 0x7, 0xe0000000, 0x5, 0x700000, 0x6, 0x2, 0x80000001, 0x9, 0x5, 0x2, 0x6, 0x3, 0x775e, 0x0, 0x3, 0x2, 0x0, 0x4, 0x4, 0x7, 0x7, 0xfd, 0x0, 0x30000000, 0xf1e1, 0x9631, 0x2e, 0xd7, 0x200, 0xfffffffb, 0x4, 0x6, 0x3, 0x4, 0x7, 0xffff6d8b, 0x8000, 0x3, 0x9, 0xb8, 0x5, 0x3, 0x5, 0xcd4, 0x4, 0x6, 0x1, 0x1ff, 0xce, 0x5, 0xaa3, 0xc98c, 0x568, 0x80000, 0x5, 0x1, 0x2, 0x9, 0x3d81, 0xb, 0x3, 0x0, 0x4, 0x10000, 0x9, 0xb4d, 0xffffffff, 0x2, 0x5, 0x0, 0xd, 0x68a, 0x8, 0x7ff, 0x0, 0x6, 0x81, 0x28000, 0x9, 0x6, 0x7ff, 0xd, 0x5, 0xc8c8, 0x101, 0x918, 0x6, 0x8, 0x6eba, 0x7, 0x800, 0x2, 0x0, 0x80000000, 0x251bc3cb, 0x7, 0xfffffbff]}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x6}}}, @c_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x11, 0x3, 0x1b, 0x3, 0x3, 0x80000000, 0x4, 0x2}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x1}}}, @c_cbq={{0x8}, {0x14, 0x2, [@TCA_CBQ_WRROPT={0x10, 0x2, {0xd, 0x5, 0x4, 0x0, 0x99, 0x7}}]}}, @c_atm={{0x8}, {0xc0, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0x10, 0x8}}, @TCA_ATM_HDR={0x20, 0x3, "4cb9cc0e5b81fd06c3bf0bd8688912e93a6d8ace0419cc90a2e0188e"}, @TCA_ATM_FD={0x8, 0x1, r0}, @TCA_ATM_EXCESS={0x8, 0x4, {0x1, 0xfff1}}, @TCA_ATM_EXCESS={0x8, 0x4, {0xffe0, 0x3}}, @TCA_ATM_EXCESS={0x8, 0x4, {0xfff1, 0xd}}, @TCA_ATM_HDR={0x35, 0x3, "af2f7032b929cc839b33336de4c266979dc7a85c677195a93a5485dd9d63d2fe227d13e57c7cdfeba4c9bb40ef1d4db5e5"}, @TCA_ATM_FD={0x8, 0x1, r0}, @TCA_ATM_HDR={0x32, 0x3, "2e7a1ef285bbb4de40ce49b09cdae3ba7ed3ff111e24bd1ff91352219f2183a9009e6852d89a32b491a5fcd1fd51"}]}}]}, 0xe50}, 0x1, 0x0, 0x0, 0x4004800}, 0x0) recvfrom(r1, &(0x7f0000005440)=""/205, 0xcd, 0x0, &(0x7f0000005540)=@qipcrtr={0x2a, 0x2}, 0x80) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000055c0)={r2, 0x11}, &(0x7f0000005600)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000005640)={r7, 0x5d81, 0x6, [0x9, 0x0, 0xa000, 0x7, 0x0, 0x3d7]}, 0x14) r8 = fcntl$dupfd(r5, 0x406, r4) ioctl$BTRFS_IOC_BALANCE_CTL(r8, 0x40049421, 0x1) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000005680)) r9 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000005700)={0x5, &(0x7f00000056c0)=[{0x7937, 0x8, 0x0, 0x3}, {0xf801, 0x80, 0x5, 0x8}, {0x8d3d, 0x8, 0x9, 0x4}, {0x1, 0x8, 0xa, 0x3}, {0x401, 0x4, 0x15, 0x657}]}, 0x10) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f00000059c0)={&(0x7f0000005740)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000005980)={&(0x7f0000005780)={0x1c8, 0x7, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x11c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x16}]}}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x30}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x34}]}}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x1c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8}]}}}, {0x54, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0xfffffffd}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_TYPE={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x38, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_LIMIT_TYPE={0x8}]}}}]}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6003}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x89}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x6}]}, @NFTA_RULE_USERDATA={0x64, 0x7, 0x1, 0x0, "c4860acff7e7c9fe2a558df19220d8d1147b2446dde0c9f0dcfea43551153a29a960344140fdadc1ff64d61c622dd87c513194950b044ec995930b6f84b2b8043fb82f2e8b955f0a527e96696434892d220736bc7cae0eeff4669b5f7517404a"}]}, 0x1c8}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000005a00), &(0x7f0000005a40)=0x4) setsockopt$bt_BT_SNDMTU(r8, 0x112, 0xc, &(0x7f0000005a80)=0x7ff, 0x2) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r10, 0x84, 0x1, &(0x7f0000005ac0)={r7, 0x4, 0x6, 0x7, 0x8, 0x3c}, &(0x7f0000005b00)=0x14) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000005b40)=0x7, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000005bc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f0000006f00)={&(0x7f0000005b80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000006ec0)={&(0x7f0000005c00)={0x12ac, 0x0, 0xe, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IE={0xc, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xc, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x62, 0xfc, "6633301dceb2d76d836a6789c231351d10dc61870ae672b58fbe84cfd44182ead50abc9ed64fd89de6ea7c18cf83ab0b9e3cae04c01f0fec5289958f40b6e84ffd6285cc4af7ad9c1741981989c1c257a47e055ed56d3bffe0eadb653b6f"}, @NL80211_ATTR_FILS_ERP_RRK={0x11, 0xfc, "c5247fd4eb576b99fa582e9915"}, @NL80211_ATTR_FILS_ERP_RRK={0x14, 0xfc, "5e69562e188de412937ba85a9669c202"}], @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xb6, 0xfa, "cb4ea64cd79e19f7a09b9cd2c451c0910168469f1707946e1ce4502cd2a5ecb58b8b22f2314022b9c143ce37b7428321fbcbf8688e173eb8ea69f86f78f21fb3cfcb1e3c8790e30bb63f5f312601dd933851bb326cfc23072cb665d79c305b72282ae7ba27fd0ce63c0c883efb547d754930d1071c5552851d0fc4ac5f9d2559611ef50722ed9239e13d7b523088ec86c20ea2fc3a591e6196fc6d9f4ebfb140261f261ff7c780af0dde27e729d9cee88228"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x5, 0xf9, "82"}, @NL80211_ATTR_FILS_ERP_REALM={0x4d, 0xfa, "f3be82143ed08ab0ddcba3d6f823db3f59c009b28e8bf77472bb5d98e95430d564c12d5e9258d8282f672e0e17287a9d49eac84e58124e96aa085ef55a28c539b6002ec5bc6daf96bc"}, @NL80211_ATTR_FILS_ERP_REALM={0x45, 0xfa, "58e6a903b581879f839fd5947cc863aa68c215e11b1b0d47d8b8293c527e39bbfc3fa2a6f49382d9da2d05a5a0a86782c18ebee04a886397580773eb925e1171ce"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x4}, @NL80211_ATTR_FILS_ERP_RRK={0x8b, 0xfc, "60dc29b615cda9344bd0f60dcfba833ea5482a88f9a18554b331713090b37a294d5b0bd6caa73c472a98ca3e91a2b1bd4f61b82c4f72d03a35e27a523665794be0fb074ffda23e610784abf5912beead2b09a60cdd63c2f23a53274e48ba8e311a0acbfc36bf9779722e5fda2b1621d50b1c34af27ee9fe2f0a7f83448322d992959f950352290"}, @NL80211_ATTR_FILS_ERP_REALM={0x1004, 0xfa, "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"}]]}, 0x12ac}, 0x1, 0x0, 0x0, 0x4881}, 0x4000010) sendmsg$TIPC_NL_LINK_GET(r9, &(0x7f0000007280)={&(0x7f0000006f40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000007240)={&(0x7f0000006f80)={0x2b8, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x13c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x77, 0x3, "1f360b7cee4572d22ca4496adea8e603035bf4b0b7e13d1edef8c7b739ab7808482eaf83a603060faf1ca2a496c9358ec31416904210d09864183a57daf2b5cf8491d10746602f7f1831b8812c08728f2b4982b06817842df763b0e9808defd4535d2c2a43ae1f666bcebf98948244f1dec714"}, @TIPC_NLA_NODE_ID={0x57, 0x3, "b7faa062df17ec97a1532cffc4c5d2850ae79a40e1c251e676bbdacb28acfc10fa9cab69e4fb0a919fd37656667fe9e8109493019fbb22dd9b5d9b2098b38d0185cc02eec5d57b5078636a4af453e14eb80edb"}, @TIPC_NLA_NODE_ID={0x56, 0x3, "ee4c8cf208ba111b965342e59e2bab7da6087676513ad3d646f4cf156837e4154264d30ad4925aff52ca205430990438fa13ead91ceb49cc2194822900697f2634195ffca470b01880ec36132164747b164b"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x378}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x81}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NODE={0x14c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "a734862adefc27314bc6c768e453e2613b7fca7137dadfe2ebe44de807489161eb0d"}}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "03d233c0f1a2d51e444ea410e60393fae903fc483eb84e3e668455a2c6"}}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "d65db1113b12627cf3276e050f353876639a35c3e2f52218d8e844987d"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f9800}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "0eb583f32d719ad8dfb07ca18caed51d3bdb60be32852f426a726f9e186a6612"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x805}, 0x40011) 2.010255506s ago: executing program 1 (id=1974): r0 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x103000) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x9, 0x6, 0x4d, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", '\x00\x00`\x00', '\x00', ["2408000ce61c0000c6cb00", "bed0f3d6ce7a5f7389827f04", "d409343c60abd64f2fdc9ddf", "fc43009f621000"]}) 1.963147902s ago: executing program 1 (id=1975): r0 = syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="12010102000000400c200b1040000102030109026000030103a0020904000000010100000a240102000a000201020904010000010200000904010101010200000905010910000206000725010c0040000904020000010201010200000905820900020303100725010c08ff030000000000005d0a17d0cf765f6b8f6a010c57924e234b27e9a7bfb147f06f15d90efcb5c15864aded1010658d2faa4089a030a11da1c0bc7acf4578505d0a639d283ae28a8a49a9c6c8ed51c66d28da4deadd4708749c884088c7ec204ffe00468455c85af3a2d8672ad962b24ad69ec151656910ed829a5c81f6f5b64767c02d0a87ca2d3e703a244cfd4cbc5921206ccba9b5cb4f3cb98453791dfc3b8c1ad084e56de4f5172e490898d66589eda41e346731c394ebb0ce201b7c5ccaf132949c15b857933c20ff7e33723b3a41f651bc6385cdd6606b94ef7071582f43869fde414698d5e9288d9d29d3405f"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x4c}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="2081fe4681"], 0x0, 0x0, 0x0, 0x0}) setns(0xc9, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x10f) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b00"], 0x88) 1.946787425s ago: executing program 0 (id=1976): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000300)={0x0, 0x8000}, &(0x7f0000000380)=0x8) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}}}, 0x48) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x25cd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x402, 0xbbf, 0x4a732f64, 0x1, 0x1c0, 0xd, 0x0, 0x2a3, 0x4, 0x1, 0x2, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x80000091, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x0, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x40, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x4, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x80004, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x43b, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xffffeffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x6, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x7, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x10010, 0x101, 0xdd81, 0x2, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x7, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0x9, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0xd, 0xfffffff7, 0x8, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26e, 0x6, 0xc, 0x4, 0xfffffff9, 0x9, 0x5d9, 0x463f, 0x4, 0xb0, 0x6, 0x6, 0x14000, 0x1, 0x9]}, 0x45c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0xac}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x4, 0x6, 0x7, 0x4, 0x5, 0x4, 0x8], 0xf000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000240)={'veth1_to_batadv\x00', &(0x7f0000000300)=@ethtool_perm_addr={0x4b}}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r11, 0x701, 0x70bd2d, 0x25dfdbff}, 0x14}}, 0x10044880) pread64(r0, &(0x7f00000001c0)=""/73, 0x49, 0x40000000020fff5) syz_usb_connect$uac1(0x5, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000001082058d004000010203010902600003010300050904000000010100000a240100000a0002010209040100000102001509040101010102000009050109080002fc0a072501000306000904020000010200000904000401bf08"], 0x0) 1.730241351s ago: executing program 3 (id=1977): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x6, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000004}, 0x44840) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000680)={0x4c, r1, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xe}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x2c9}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 1.683544996s ago: executing program 3 (id=1978): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/class/devcoredump/disabled\x00', 0x2, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) signalfd(r1, &(0x7f00000002c0)={[0x8]}, 0x8) writev(r0, &(0x7f0000000600)=[{&(0x7f00000003c0)="d1d78e91f4c700f0373ca1300dc1e201fb8c62da16858f8f91d494bbcec4b3dadc32878a77712d3cd58e83bf70dd0d0a46e322f21632a512d106d562cc5c29e165e0cdbad5a80d1a2eeebe2169c810a088d80c1cf64bc160ef0e8518dcfb7fcc958e588d44d75750fde5f1a7af7b45ef0608090c0e73a6b6ab8ec32f79c153d3a557914e923fab1cb480613fc7", 0x8d}], 0x1) 1.581959425s ago: executing program 3 (id=1979): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000040), 0x2, 0xc0000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)) r3 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01864c2, &(0x7f0000000100)={0x0, 0x1, r2}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r5, 0x8971, &(0x7f0000000380)={'veth0\x00', @ifru_flags=0x2000}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x2000c045}, 0x24000004) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f00000000c0)={r4, 0x0, 0x4, 0x9}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) syz_open_dev$sg(&(0x7f00000001c0), 0xaf8c, 0x109100) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) 550.255476ms ago: executing program 2 (id=1980): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0xb00, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 428.470675ms ago: executing program 2 (id=1981): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) (async) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80001) ioctl$CEC_G_MODE(r1, 0x80046108, &(0x7f0000000080)) (async) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000180)={{&(0x7f00005cb000/0x4000)=nil, 0x4000}, 0x1}) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) fdatasync(r2) (async) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000040)={0x80, 0x6, 0x302, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 2 (id=1982): socket$kcm(0x10, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) writev(r0, &(0x7f0000002040)=[{&(0x7f0000001c80)='\t\'', 0x2}], 0x1) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_connect$midi(0x1, 0x7c, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x582, 0xc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6a, 0x1, 0x1, 0x8, 0x80, 0x40, "", {{{0x9, 0x4, 0x0, 0x0, 0x3, 0x1, 0x3, 0x0, 0x9, [@midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x4, 0xe0}, @midi_out_jack={0x9, 0x24, 0x3, 0x2, 0x5, 0x1, [{0x1, 0xb6}], 0x59}, @ms_header={0x7, 0x24, 0x1, 0x401, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x4, 0x3}], [{{0x9, 0x5, 0x0, 0x0, 0x200, 0x6, 0x4, 0x7, {0x6, 0x25, 0x1, 0x2, "dc5c"}}}, {{0x9, 0x5, 0x9, 0x2, 0x40, 0xb, 0x7, 0x7b, {0x13, 0x25, 0x1, 0xf, "3bb59f988bbadd895df86dae113efe"}}}, {{0x9, 0x5, 0xe, 0x10, 0x10, 0x2, 0x8, 0x7, {0x8, 0x25, 0x1, 0x4, "4ee2de06"}}}]}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x2, 0xff, 0x64, 0x8, 0x7}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x8, [{0x85, &(0x7f0000000680)=@string={0x85, 0x3, "96de09e284b30df4495fb0b6228e0f8d59f01a8fe17816e6320ad8fcbbad21a0c6013682f45b31220d1d199918ffdb887af54648c231e90e1dfe5c1b7f733ec48c4e460c2bc80fc9ef2cee71080f10ccadc85a4d2eaefa2d6dc488ed73452d434dcf9c7c38fb03eee636960d51d7a0cc410dc7f9f5f963d5ab0ccfe046e9b5782b759c"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x429}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x408}}, {0x3a, &(0x7f0000000300)=@string={0x3a, 0x3, "70d303be35902f196b78a7bfdb2e6325e1d1ead40c6059a327390dd3339eafe46069b5ea064f9af29439528dbe6f56bfe6a2ed791a3d243f"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x41b}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x816}}, {0xde, &(0x7f0000000500)=@string={0xde, 0x3, "a7142a601c6b3a9d07779dab70d40d56a05f8f10113ae1e4b813d2ae9447b5cba5f443c2a1cc8a89ac708ae3544ed9a3b8dd0f2944ca9f1fb8efd9ff606fdcae9ad45af1cef57a9a0a6fbf246a13c4dfadfcfe0a5e54b6bad380112a2dcc14d268c7e577747cc15e9ea3b3c6cb00468ef593b1977661ee5962e52422b880c4c608c4a58ec10689ae0b6a1f1c6633d65ea66657faae15b546cfa98bff79cd83594f1956509343ec7ab91b600188e4e648b2859e24353d3a604c8b1568406cd4065892b3e88c8fd43a1a47aacdcd67c4fad7f8c5112df91d20039ecf91"}}]}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000780)={0x14, &(0x7f0000000040)={0x0, 0x2, 0x30, {0x30, 0x9, "235807846d27dfc1571260a0e51c139acb1e2bf4ed9350932ce3db7e62b2a1edb7a3eef9b6234adace416daf59fb"}}, &(0x7f0000000740)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000a00)={0x44, &(0x7f00000007c0)={0x40, 0x31, 0x6f, "f28a9bab2e3e80b16a84bc6432b75976fce907e8e563b9a77566c8b417265673e94be26a9b9f4317492aa36527f592cdc3ea2034fa591fd5c2616dfdde8c98f6ad265bdaaa2d690456accdfefa82b4c58fca8f39ddfc8476cc8d541b022161b8dec97285b381cdb00e8118167bb468"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0xf7}, &(0x7f00000008c0)={0x20, 0x80, 0x1c, {0x3, 0x674d, 0x99, 0x7ff, 0x1ff, 0x5, 0xc, 0x8, 0xb, 0x8, 0x7, 0xbee6}}, &(0x7f0000000900)={0x20, 0x85, 0x4, 0x8}, &(0x7f0000000940)={0x20, 0x83, 0x2}, &(0x7f0000000980)={0x20, 0x87, 0x2, 0x7}, &(0x7f00000009c0)={0x20, 0x89, 0x2}}) kernel console output (not intermixed with test programs): igh-speed USB device number 99 using dummy_hcd [ 480.984747][ T1245] usb 4-1: Using ep0 maxpacket: 16 [ 480.988090][ T1245] usb 4-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config [ 480.988192][ T1245] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 480.988238][ T1245] usb 4-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 480.988264][ T1245] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.061195][ T1245] usb 4-1: config 0 descriptor?? [ 481.327279][T10637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.332511][T10637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.434811][ T37] gspca_zc3xx: i2c_w status error f2 [ 481.441375][T10652] openvswitch: netlink: Multiple metadata blocks provided [ 481.632057][T10656] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1569'. [ 481.632321][T10656] block nbd0: Unsupported socket: should be TCP or UNIX. [ 481.639973][ T37] gspca_zc3xx: reg_w_i err -71 [ 481.716245][ T5793] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 481.885344][ T5793] usb 2-1: Using ep0 maxpacket: 16 [ 481.890471][ T5793] usb 2-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 481.890538][ T5793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.890553][ T5793] usb 2-1: Product: syz [ 481.890564][ T5793] usb 2-1: Manufacturer: syz [ 481.890575][ T5793] usb 2-1: SerialNumber: syz [ 481.918225][ T1245] usb 4-1: string descriptor 0 read error: -71 [ 481.948050][ T5793] usb 2-1: config 0 descriptor?? [ 481.954891][ T1245] usb 4-1: USB disconnect, device number 99 [ 481.996032][ T5793] gspca_main: spca508-2.14.0 probing 041e:4018 [ 482.161027][ T5793] gspca_spca508: reg_read err -32 [ 482.161646][ T5793] gspca_spca508: reg_read err -32 [ 482.162273][ T5793] gspca_spca508: reg_read err -32 [ 482.259315][ T37] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 482.259504][ T37] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 482.307921][ T37] usb 1-1: USB disconnect, device number 93 [ 482.368621][ T5793] gspca_spca508: reg_read err -71 [ 482.370843][ T5793] gspca_spca508: reg write: error -71 [ 482.370939][ T5793] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 482.407846][ T5793] usb 2-1: USB disconnect, device number 85 [ 482.748212][ T38] kauditd_printk_skb: 53 callbacks suppressed [ 482.748234][ T38] audit: type=1326 audit(1785387807.814:195): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10674 comm="syz.0.1580" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f19bed1de99 code=0x0 [ 483.075397][ T5793] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 483.227740][ T5793] usb 4-1: unable to get BOS descriptor or descriptor too short [ 483.229589][ T5793] usb 4-1: config 64 has an invalid interface number: 44 but max is 0 [ 483.229613][ T5793] usb 4-1: config 64 has no interface number 0 [ 483.229647][ T5793] usb 4-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 483.229667][ T5793] usb 4-1: config 64 interface 44 has no altsetting 0 [ 483.232812][ T5793] usb 4-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 483.232846][ T5793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.232861][ T5793] usb 4-1: Product: syz [ 483.232872][ T5793] usb 4-1: Manufacturer: syz [ 483.232884][ T5793] usb 4-1: SerialNumber: syz [ 483.444701][ T5831] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 483.561130][ T5793] iowarrior 4-1:64.44: no interrupt-out endpoint found [ 483.585535][ T5793] usb 4-1: USB disconnect, device number 100 [ 483.614153][ T5831] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 483.614249][ T5831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.614274][ T5831] usb 2-1: Product: syz [ 483.614285][ T5831] usb 2-1: Manufacturer: syz [ 483.614297][ T5831] usb 2-1: SerialNumber: syz [ 483.975202][ T5831] rtl8150 2-1:1.0: couldn't reset the device [ 483.975603][ T5831] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 484.012453][ T5831] usb 2-1: USB disconnect, device number 86 [ 484.136008][T10693] input: syz1 as /devices/virtual/input/input20 [ 484.767774][T10701] IPVS: Scheduler module ip_vs_sip not found [ 485.095675][ T32] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 485.255074][ T32] usb 4-1: Using ep0 maxpacket: 16 [ 485.262077][ T32] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 485.262111][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.262131][ T32] usb 4-1: Product: syz [ 485.262147][ T32] usb 4-1: Manufacturer: syz [ 485.262163][ T32] usb 4-1: SerialNumber: syz [ 485.309334][ T32] usb 4-1: config 0 descriptor?? [ 485.335045][ T32] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 485.337696][ T32] usb 4-1: Detected FT-X [ 485.503269][T10711] openvswitch: netlink: Duplicate key (type 6). [ 485.529911][ T32] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 485.532149][ T32] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 485.532716][ T32] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 485.561885][ T32] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 485.618259][ T32] usb 4-1: USB disconnect, device number 101 [ 485.631338][T10711] fuse: fd is not a fuse device [ 485.641377][ T32] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 485.643796][ T32] ftdi_sio 4-1:0.0: device disconnected [ 486.160934][ T5831] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 486.346958][ T5831] usb 1-1: Using ep0 maxpacket: 16 [ 486.350918][ T5831] usb 1-1: unable to get BOS descriptor or descriptor too short [ 486.370100][ T5831] usb 1-1: config 1 has an invalid interface number: 34 but max is 0 [ 486.370131][ T5831] usb 1-1: config 1 has no interface number 0 [ 486.370184][ T5831] usb 1-1: config 1 interface 34 altsetting 93 endpoint 0x83 has invalid wMaxPacketSize 0 [ 486.370211][ T5831] usb 1-1: config 1 interface 34 altsetting 93 bulk endpoint 0x83 has invalid maxpacket 0 [ 486.370239][ T5831] usb 1-1: config 1 interface 34 has no altsetting 0 [ 486.373946][ T5831] usb 1-1: New USB device found, idVendor=04c5, idProduct=1079, bcdDevice=37.f3 [ 486.373982][ T5831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.374005][ T5831] usb 1-1: Product: syz [ 486.374022][ T5831] usb 1-1: Manufacturer: syz [ 486.374037][ T5831] usb 1-1: SerialNumber: syz [ 486.722475][T10717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.740547][T10717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.858735][ T5831] usb 1-1: USB disconnect, device number 94 [ 486.927578][T10737] overlayfs: failed to clone upperpath [ 486.997958][T10739] syzkaller1: entered promiscuous mode [ 486.997986][T10739] syzkaller1: entered allmulticast mode [ 487.754888][ T32] usb 1-1: new full-speed USB device number 95 using dummy_hcd [ 487.835090][ T37] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 487.894776][ T32] usb 1-1: device descriptor read/64, error -71 [ 487.994711][ T37] usb 2-1: Using ep0 maxpacket: 16 [ 488.005461][ T37] usb 2-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 488.005500][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.005523][ T37] usb 2-1: Product: syz [ 488.005539][ T37] usb 2-1: Manufacturer: syz [ 488.005557][ T37] usb 2-1: SerialNumber: syz [ 488.013110][ T37] usb 2-1: config 0 descriptor?? [ 488.058809][ T37] gspca_main: spca508-2.14.0 probing 041e:4018 [ 488.120171][T10763] raw_sendmsg: syz.2.1614 forgot to set AF_INET. Fix it! [ 488.152645][ T32] usb 1-1: new full-speed USB device number 96 using dummy_hcd [ 488.235173][T10767] fuse: fd is not a fuse device [ 488.266380][ T37] gspca_spca508: reg_read err -32 [ 488.267029][ T37] gspca_spca508: reg_read err -32 [ 488.267668][ T37] gspca_spca508: reg_read err -32 [ 488.285135][ T37] gspca_spca508: reg_read err -32 [ 488.285563][ T37] gspca_spca508: reg_read err -71 [ 488.291760][ T37] gspca_spca508: reg write: error -71 [ 488.291866][ T37] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 488.297953][ T32] usb 1-1: device descriptor read/64, error -71 [ 488.365167][ T37] usb 2-1: USB disconnect, device number 87 [ 488.407623][ T32] usb usb1-port1: attempt power cycle [ 488.749547][ T32] usb 1-1: new full-speed USB device number 97 using dummy_hcd [ 488.828897][ T32] usb 1-1: device descriptor read/8, error -71 [ 489.037241][T10777] netlink: 'syz.1.1617': attribute type 5 has an invalid length. [ 489.084718][ T32] usb 1-1: new full-speed USB device number 98 using dummy_hcd [ 489.105790][ T32] usb 1-1: device descriptor read/8, error -71 [ 489.215056][ T32] usb usb1-port1: unable to enumerate USB device [ 489.701577][T10792] fuse: fd is not a fuse device [ 490.374788][ T32] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 490.525089][ T32] usb 4-1: Using ep0 maxpacket: 16 [ 490.540933][ T32] usb 4-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 490.540966][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.540988][ T32] usb 4-1: Product: syz [ 490.541021][ T32] usb 4-1: Manufacturer: syz [ 490.541038][ T32] usb 4-1: SerialNumber: syz [ 490.584720][ T32] usb 4-1: config 0 descriptor?? [ 490.609444][T10806] fuse: fd is not a fuse device [ 490.609546][ T32] gspca_main: spca508-2.14.0 probing 041e:4018 [ 490.783602][T10810] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 490.812110][ T32] gspca_spca508: reg_read err -32 [ 490.812802][ T32] gspca_spca508: reg_read err -32 [ 490.813520][ T32] gspca_spca508: reg_read err -32 [ 490.814123][ T32] gspca_spca508: reg_read err -32 [ 490.814359][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 490.814457][ T32] gspca_spca508: reg_read err -32 [ 490.815249][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 490.817234][ T32] gspca_spca508: reg write: error -32 [ 490.817470][ T32] spca508 4-1:0.0: probe with driver spca508 failed with error -32 [ 490.868864][ T32] usb 4-1: USB disconnect, device number 102 [ 490.875212][ T9] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 491.029047][ T9] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 491.029085][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.274136][T10814] binder: BINDER_SET_CONTEXT_MGR already set [ 491.274154][T10814] binder: 10813:10814 ioctl 4018620d 0 returned -16 [ 491.584709][ T32] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 491.671045][ T9] usb 1-1: Firmware: major: 0, minor: 100, hardware type: ATUSB (0) [ 491.745857][ T32] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 491.745893][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 491.745916][ T32] usb 2-1: Product: syz [ 491.745930][ T32] usb 2-1: Manufacturer: syz [ 491.745944][ T32] usb 2-1: SerialNumber: syz [ 491.765842][ T32] usb 2-1: config 0 descriptor?? [ 491.817438][ T32] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 491.857398][ T32] dvb-usb: bulk message failed: -22 (2/0) [ 491.865808][ T32] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 491.867618][ T32] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 491.867713][ T32] usb 2-1: media controller created [ 491.899354][T10807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.901123][T10807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.953418][ T32] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 492.013629][T10816] batadv_slave_0: entered promiscuous mode [ 492.020940][ T32] dvb-usb: bulk message failed: -22 (1/0) [ 492.125065][ T32] DVB: Unable to find symbol mt352_attach() [ 492.125708][ T32] dvb-usb: bulk message failed: -22 (5/0) [ 492.125735][ T32] zl10353_read_register: readreg error (reg=127, ret==-121) [ 492.125786][ T32] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 492.129369][T10807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.183731][T10807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.200691][T10807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.203584][T10807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.246341][ T9] usb 1-1: failed to fetch extended address, random address set [ 492.274794][T10815] batadv_slave_0: left promiscuous mode [ 492.335515][ T32] rc_core: IR keymap rc-dvico-mce not found [ 492.335538][ T32] Registered IR keymap rc-empty [ 492.337766][ T32] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 492.375468][ T32] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input21 [ 492.426756][ T32] dvb-usb: schedule remote query interval to 100 msecs. [ 492.426781][ T32] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 492.486431][ T32] usb 2-1: USB disconnect, device number 88 [ 492.517809][ T9] usb 1-1: USB disconnect, device number 99 [ 492.944358][ T32] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 493.231189][T10831] binder: 10830:10831 unknown command 0 [ 493.231214][T10831] binder: 10830:10831 ioctl c0306201 2000000001c0 returned -22 [ 494.650917][T10868] 9p: Unknown access argument 18446744073709551615: -34 [ 494.824670][ T10] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 494.994640][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 495.003954][ T10] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 495.003991][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.036800][ T10] usb 4-1: config 0 descriptor?? [ 495.056099][ T10] gspca_main: sunplus-2.14.0 probing 041e:400b [ 495.574216][ T10] gspca_sunplus: reg_w_riv err -110 [ 495.574371][ T10] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 496.181523][ T10] usb 4-1: USB disconnect, device number 103 [ 496.592039][T10913] tipc: Started in network mode [ 496.592090][T10913] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 496.592154][T10913] tipc: Enabling of bearer rejected, failed to enable media [ 496.745456][ T32] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 496.899600][ T32] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 496.899646][ T32] usb 2-1: can't read configurations, error -61 [ 497.024718][ T32] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 497.180789][ T32] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 497.180838][ T32] usb 2-1: can't read configurations, error -61 [ 497.181231][ T32] usb usb2-port1: attempt power cycle [ 497.519588][T10932] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 497.536219][ T32] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 497.561834][ T32] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 497.561878][ T32] usb 2-1: can't read configurations, error -61 [ 497.627921][T10927] FAULT_INJECTION: forcing a failure. [ 497.627921][T10927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 497.627965][T10927] CPU: 1 UID: 0 PID: 10927 Comm: syz.0.1657 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 497.627999][T10927] Tainted: [L]=SOFTLOCKUP [ 497.628004][T10927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 497.628014][T10927] Call Trace: [ 497.628020][T10927] [ 497.628027][T10927] dump_stack_lvl+0xe8/0x150 [ 497.628053][T10927] should_fail_ex+0x467/0x600 [ 497.628077][T10927] _copy_from_user+0x2d/0xb0 [ 497.628092][T10927] __ia32_sys_rt_sigreturn+0x362/0x8c0 [ 497.628117][T10927] ? rt_spin_unlock+0x163/0x200 [ 497.628142][T10927] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 497.628181][T10927] ? rcu_is_watching+0x15/0xb0 [ 497.628208][T10927] do_syscall_64+0x17b/0x530 [ 497.628224][T10927] ? irqentry_exit+0x10f/0x8f0 [ 497.628238][T10927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.628261][T10927] ? clear_bhb_loop+0x40/0x90 [ 497.628280][T10927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.628296][T10927] RIP: 0033:0x7f19becbf219 [ 497.628311][T10927] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 497.628324][T10927] RSP: 002b:00007f19bcf75a80 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 497.628342][T10927] RAX: ffffffffffffffda RBX: 00007f19befa5fa0 RCX: 00007f19becbf219 [ 497.628353][T10927] RDX: 00007f19bcf75a80 RSI: 00007f19bcf75bb0 RDI: 0000000000000011 [ 497.628364][T10927] RBP: 00007f19bcf76090 R08: 0000000000000000 R09: 0000000000000000 [ 497.628374][T10927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.628384][T10927] R13: 00007f19befa6038 R14: 00007f19befa5fa0 R15: 00007ffe950d9c38 [ 497.628407][T10927] [ 497.712836][ T32] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 497.842074][ T32] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 497.842115][ T32] usb 2-1: can't read configurations, error -61 [ 497.842543][ T32] usb usb2-port1: unable to enumerate USB device [ 497.874824][ T10] usb 4-1: new low-speed USB device number 104 using dummy_hcd [ 498.004874][ T10] usb 4-1: device descriptor read/64, error -71 [ 498.194892][ T9] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 498.244712][ T10] usb 4-1: new low-speed USB device number 105 using dummy_hcd [ 498.344747][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 498.348635][ T9] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 498.348749][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 498.348767][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 498.348786][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 498.348804][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 498.348836][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 498.348852][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.377142][ T10] usb 4-1: device descriptor read/64, error -71 [ 498.485510][ T10] usb usb4-port1: attempt power cycle [ 498.628160][ T9] usb 1-1: usb_control_msg returned -32 [ 498.628215][ T9] usbtmc 1-1:16.0: can't read capabilities [ 498.824726][ T10] usb 4-1: new low-speed USB device number 106 using dummy_hcd [ 498.845395][ T10] usb 4-1: device descriptor read/8, error -71 [ 498.905019][T10936] bond0: entered promiscuous mode [ 498.905045][T10936] : entered promiscuous mode [ 498.905453][T10936] bond_slave_1: entered promiscuous mode [ 498.905662][T10936] batadv_slave_1: entered promiscuous mode [ 499.096953][ T10] usb 4-1: new low-speed USB device number 107 using dummy_hcd [ 499.117823][ T10] usb 4-1: device descriptor read/8, error -71 [ 499.226520][ T10] usb usb4-port1: unable to enumerate USB device [ 499.348858][T10948] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 499.543773][ T9] usb 1-1: USB disconnect, device number 100 [ 500.213752][T10963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1670'. [ 500.484223][T10963] block nbd0: NBD_DISCONNECT [ 500.822721][T10977] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1675'. [ 500.822764][T10977] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 500.881495][T10975] overlay: Bad value for 'redirect_dir' [ 500.905178][T10975] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 501.054716][ T37] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 501.207887][ T37] usb 4-1: Using ep0 maxpacket: 8 [ 501.209968][ T37] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 501.210025][ T37] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 501.210045][ T37] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 501.210064][ T37] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 501.210085][ T37] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 501.210103][ T37] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 501.213126][ T37] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 501.213150][ T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.213164][ T37] usb 4-1: Product: syz [ 501.213174][ T37] usb 4-1: Manufacturer: syz [ 501.213185][ T37] usb 4-1: SerialNumber: syz [ 501.330740][ T37] usb 4-1: config 0 descriptor?? [ 501.334168][T10979] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 501.777925][T10993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.797465][T10993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.800779][T10979] netlink: 'syz.3.1676': attribute type 10 has an invalid length. [ 501.828828][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.838350][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.744912][ T37] rc_core: IR keymap rc-snapstream-firefly not found [ 502.744937][ T37] Registered IR keymap rc-empty [ 502.749062][ T37] rc rc0: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 502.782827][ T37] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input22 [ 503.420423][ T37] input: syz syz mouse as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input23 [ 503.977811][ T37] usb 4-1: USB disconnect, device number 108 [ 503.977902][ C1] ati_remote 4-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 504.095585][T11036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1697'. [ 504.139323][ T4943] ati_remote 4-1:0.0: ati_remote_open: usb_submit_urb failed! [ 504.157681][T11032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 504.806895][ T32] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 504.924789][ T37] usb 4-1: new full-speed USB device number 109 using dummy_hcd [ 504.964780][ T32] usb 1-1: Using ep0 maxpacket: 8 [ 504.970624][ T32] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 504.971349][ T32] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 504.971422][ T32] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 504.971499][ T32] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 504.971575][ T32] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 504.971656][ T32] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 504.971681][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.082316][ T37] usb 4-1: config 128 has an invalid interface number: 5 but max is 1 [ 505.082351][ T37] usb 4-1: config 128 has an invalid interface number: 5 but max is 1 [ 505.082375][ T37] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 2 [ 505.082477][ T37] usb 4-1: config 128 has no interface number 0 [ 505.082519][ T37] usb 4-1: config 128 interface 5 has no altsetting 0 [ 505.082543][ T37] usb 4-1: config 128 interface 5 has no altsetting 1 [ 505.177631][ T37] usb 4-1: New USB device found, idVendor=1b80, idProduct=e1cc, bcdDevice=26.cb [ 505.177731][ T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.177755][ T37] usb 4-1: Product: syz [ 505.177772][ T37] usb 4-1: Manufacturer: syz [ 505.177789][ T37] usb 4-1: SerialNumber: syz [ 505.293576][T11054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.303944][T11054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.323136][ T32] usb 1-1: usb_control_msg returned -32 [ 505.323199][ T32] usbtmc 1-1:16.0: can't read capabilities [ 505.349893][T11059] tmpfs: Bad value for 'nr_inodes' [ 505.679056][T11064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.681992][T11064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.729088][T11064] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 505.733376][ T32] usb 1-1: USB disconnect, device number 101 [ 506.029120][ T37] usb 4-1: USB disconnect, device number 109 [ 506.248220][T11073] netlink: 'syz.2.1706': attribute type 4 has an invalid length. [ 506.383156][T11078] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 506.451688][ T37] usb 4-1: new full-speed USB device number 110 using dummy_hcd [ 506.602921][ T37] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 506.602954][ T37] usb 4-1: New USB device strings: Mfr=246, Product=1, SerialNumber=3 [ 506.602982][ T37] usb 4-1: Product: syz [ 506.602996][ T37] usb 4-1: Manufacturer: syz [ 506.603007][ T37] usb 4-1: SerialNumber: syz [ 506.806674][ T32] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 506.968415][ T32] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 506.968489][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.412762][T11090] fuse: fd is not a fuse device [ 507.957678][T11098] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 508.064217][T11100] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1716'. [ 508.122490][T11100] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1716'. [ 508.386982][T11108] netlink: 'syz.1.1718': attribute type 4 has an invalid length. [ 508.387084][T11108] netlink: 'syz.1.1718': attribute type 1 has an invalid length. [ 508.521885][T11108] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 508.567732][ T32] usb 1-1: Firmware version (0.0) predates our first public release. [ 508.567780][ T32] usb 1-1: Please update to version 0.2 or newer [ 508.984352][ T32] usb 1-1: USB disconnect, device number 102 [ 509.353670][ T37] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 509.434463][ T37] usb 4-1: unit 4 not found! [ 509.527547][T11125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1723'. [ 510.241204][T11135] overlayfs: failed to clone upperpath [ 510.428492][ T37] usb 4-1: USB disconnect, device number 110 [ 510.475817][ T9] IPVS: starting estimator thread 0... [ 510.600056][T11142] IPVS: using max 11 ests per chain, 26400 per kthread [ 510.620460][ T6200] udevd[6200]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 510.764329][T11148] tipc: Enabling of bearer rejected, failed to enable media [ 510.912081][T11150] FAULT_INJECTION: forcing a failure. [ 510.912081][T11150] name failslab, interval 1, probability 0, space 0, times 0 [ 510.912123][T11150] CPU: 1 UID: 0 PID: 11150 Comm: syz.0.1734 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 510.912153][T11150] Tainted: [L]=SOFTLOCKUP [ 510.912161][T11150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 510.912174][T11150] Call Trace: [ 510.912182][T11150] [ 510.912192][T11150] dump_stack_lvl+0xe8/0x150 [ 510.912228][T11150] should_fail_ex+0x467/0x600 [ 510.912264][T11150] should_failslab+0xa8/0x100 [ 510.912289][T11150] __kmalloc_cache_noprof+0xa1/0x670 [ 510.912324][T11150] ? vhost_iotlb_add_range_ctx+0x1a8/0x6b0 [ 510.912350][T11150] ? vhost_iotlb_add_range_ctx+0x1a8/0x6b0 [ 510.912385][T11150] vhost_iotlb_add_range_ctx+0x1a8/0x6b0 [ 510.912418][T11150] vhost_chr_write_iter+0x92d/0xaf0 [ 510.912463][T11150] ? __pfx_vhost_chr_write_iter+0x10/0x10 [ 510.912503][T11150] ? security_file_permission+0x68/0x220 [ 510.912540][T11150] vfs_write+0x61e/0xbb0 [ 510.912575][T11150] ? __pfx_vfs_write+0x10/0x10 [ 510.912615][T11150] ? __fget_files+0x2a/0x420 [ 510.912649][T11150] ksys_write+0x156/0x270 [ 510.912679][T11150] ? __pfx_ksys_write+0x10/0x10 [ 510.912717][T11150] do_syscall_64+0x17b/0x530 [ 510.912740][T11150] ? irqentry_exit+0x10f/0x8f0 [ 510.912761][T11150] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.912786][T11150] ? clear_bhb_loop+0x40/0x90 [ 510.912814][T11150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.912837][T11150] RIP: 0033:0x7f19bed1de99 [ 510.912857][T11150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.912876][T11150] RSP: 002b:00007f19bcf76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 510.912900][T11150] RAX: ffffffffffffffda RBX: 00007f19befa5fa0 RCX: 00007f19bed1de99 [ 510.912917][T11150] RDX: 00000000fffffeca RSI: 0000200000000380 RDI: 0000000000000003 [ 510.912932][T11150] RBP: 00007f19bcf76090 R08: 0000000000000000 R09: 0000000000000000 [ 510.912946][T11150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.912960][T11150] R13: 00007f19befa6038 R14: 00007f19befa5fa0 R15: 00007ffe950d9c38 [ 510.912996][T11150] [ 511.454754][ T32] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 511.504830][ T10] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 511.604781][ T32] usb 4-1: Using ep0 maxpacket: 8 [ 511.607298][ T32] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 511.607335][ T32] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 511.607454][ T32] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 511.607488][ T32] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 511.607531][ T32] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 511.607557][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.693789][ T32] hub 4-1:1.0: bad descriptor, ignoring hub [ 511.693832][ T32] hub 4-1:1.0: probe with driver hub failed with error -5 [ 511.702269][ T32] cdc_wdm 4-1:1.0: skipping garbage [ 511.702293][ T32] cdc_wdm 4-1:1.0: skipping garbage [ 511.704712][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 511.737172][ T10] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 511.737203][ T10] usb 2-1: config 0 has no interface number 0 [ 511.737254][ T10] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 511.737287][ T10] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 511.737313][ T10] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 511.737672][ T10] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 511.737729][ T10] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 511.737754][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.756159][ T32] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 511.756871][ T32] cdc_wdm 4-1:1.0: Unknown control protocol [ 511.859269][ T10] usb 2-1: config 0 descriptor?? [ 511.947259][ T10] ldusb 2-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 512.494728][ T32] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 512.644804][ T32] usb 1-1: Using ep0 maxpacket: 8 [ 512.666108][ T32] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 512.669502][ T32] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 512.669536][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.669559][ T32] usb 1-1: Product: syz [ 512.669574][ T32] usb 1-1: Manufacturer: syz [ 512.669629][ T32] usb 1-1: SerialNumber: syz [ 512.716614][ T32] usb 1-1: config 0 descriptor?? [ 512.738005][ T32] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 512.998932][T11174] FAULT_INJECTION: forcing a failure. [ 512.998932][T11174] name failslab, interval 1, probability 0, space 0, times 0 [ 512.998975][T11174] CPU: 0 UID: 0 PID: 11174 Comm: syz.3.1741 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 512.999007][T11174] Tainted: [L]=SOFTLOCKUP [ 512.999014][T11174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 512.999028][T11174] Call Trace: [ 512.999036][T11174] [ 512.999045][T11174] dump_stack_lvl+0xe8/0x150 [ 512.999086][T11174] should_fail_ex+0x467/0x600 [ 512.999122][T11174] should_failslab+0xa8/0x100 [ 512.999152][T11174] __kmalloc_noprof+0xfb/0x790 [ 512.999190][T11174] ? tomoyo_encode+0x2ad/0x570 [ 512.999221][T11174] ? tomoyo_encode+0x2ad/0x570 [ 512.999265][T11174] tomoyo_encode+0x2ad/0x570 [ 512.999302][T11174] tomoyo_realpath_from_path+0x5fa/0x640 [ 512.999348][T11174] ? tomoyo_path_number_perm+0x219/0x5f0 [ 512.999377][T11174] tomoyo_path_number_perm+0x246/0x5f0 [ 512.999405][T11174] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 512.999450][T11174] ? do_raw_spin_lock+0x12b/0x2f0 [ 512.999518][T11174] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 512.999546][T11174] ? lockdep_hardirqs_on+0x7a/0x110 [ 512.999584][T11174] ? __fget_files+0x2a/0x420 [ 512.999609][T11174] ? __fget_files+0x3a8/0x420 [ 512.999632][T11174] ? __fget_files+0x2a/0x420 [ 512.999671][T11174] security_file_ioctl+0xb9/0x260 [ 512.999701][T11174] __se_sys_ioctl+0x47/0x170 [ 512.999738][T11174] do_syscall_64+0x17b/0x530 [ 512.999760][T11174] ? irqentry_exit+0x10f/0x8f0 [ 512.999778][T11174] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.999806][T11174] ? clear_bhb_loop+0x40/0x90 [ 512.999859][T11174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.999883][T11174] RIP: 0033:0x7f29869cde99 [ 512.999902][T11174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 512.999935][T11174] RSP: 002b:00007f2984c26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 512.999960][T11174] RAX: ffffffffffffffda RBX: 00007f2986c55fa0 RCX: 00007f29869cde99 [ 512.999981][T11174] RDX: 0000200000000300 RSI: 0000000040045731 RDI: 0000000000000004 [ 512.999996][T11174] RBP: 00007f2984c26090 R08: 0000000000000000 R09: 0000000000000000 [ 513.000008][T11174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 513.000047][T11174] R13: 00007f2986c56038 R14: 00007f2986c55fa0 R15: 00007ffe57a4ba88 [ 513.000083][T11174] [ 513.000192][T11174] ERROR: Out of memory at tomoyo_realpath_from_path. [ 513.325724][T11172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.326858][T11172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.950494][ T32] gspca_zc3xx: i2c_w status error f2 [ 515.152892][ T32] gspca_zc3xx: reg_w_i err -71 [ 515.764724][ T32] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 515.764833][ T32] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 515.779593][ T32] usb 1-1: USB disconnect, device number 103 [ 516.148432][T11156] usb 4-1: reset high-speed USB device number 111 using dummy_hcd [ 516.198889][T11156] usb 4-1: device reset changed ep0 maxpacket size! [ 516.254811][ T37] usb 4-1: USB disconnect, device number 111 [ 516.305792][T11156] cdc_wdm 4-1:1.0: Error autopm - -16 [ 516.375280][ T5793] usb 2-1: USB disconnect, device number 93 [ 516.422849][ T5793] ldusb 2-1:0.55: LD USB Device #1 now disconnected [ 516.459533][ T37] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 516.516338][T11206] ubi0: attaching mtd0 [ 516.558927][T11206] ubi0 error: ubi_attach_mtd_dev: bad VID header (63) or data offsets (127) [ 516.625212][ T37] usb 4-1: Using ep0 maxpacket: 32 [ 516.640968][ T37] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 516.640998][ T37] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 516.649307][ T37] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 516.649402][ T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.649471][ T37] usb 4-1: Product: syz [ 516.649519][ T37] usb 4-1: Manufacturer: syz [ 516.649605][ T37] usb 4-1: SerialNumber: syz [ 516.721910][ T37] usb 4-1: config 0 descriptor?? [ 517.274362][T11224] vxcan0: tx address claim with different name [ 517.368508][T11227] tipc: Enabling of bearer rejected, failed to enable media [ 517.543015][ T32] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 517.701502][ T32] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 517.701537][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.701561][ T32] usb 2-1: Product: syz [ 517.701572][ T32] usb 2-1: Manufacturer: syz [ 517.701583][ T32] usb 2-1: SerialNumber: syz [ 518.019831][T11237] sg_write: data in/out 418268/96 bytes for SCSI command 0x0-- guessing data in; [ 518.019831][T11237] program syz.0.1762 not setting count and/or reply_len properly [ 518.177974][ T32] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 518.178039][ T32] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 518.674659][ T10] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 518.835864][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 518.875074][ T10] usb 1-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 518.875109][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 518.875133][ T10] usb 1-1: Product: syz [ 518.875148][ T10] usb 1-1: Manufacturer: syz [ 518.875162][ T10] usb 1-1: SerialNumber: syz [ 518.933596][ T10] usb 1-1: config 0 descriptor?? [ 519.048479][ T10] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 519.331872][ T10] gspca_sn9c2028: read1 error 0 [ 519.347092][T11250] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1767'. [ 519.347180][T11250] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1767'. [ 519.410835][ T5793] usb 4-1: USB disconnect, device number 112 [ 519.532218][T11241] ALSA: mixer_oss: invalid OSS volume '' [ 519.533494][ T10] gspca_sn9c2028: read1 error -71 [ 519.534171][ T10] gspca_sn9c2028: read1 error -71 [ 519.534272][ T10] sn9c2028 1-1:0.0: probe with driver sn9c2028 failed with error -71 [ 519.563866][ T10] usb 1-1: USB disconnect, device number 104 [ 519.636629][T11250] hfs: unable to load iocharset "io#harset" [ 520.014721][ T5793] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 520.164794][ T5793] usb 4-1: Using ep0 maxpacket: 8 [ 520.168971][ T5793] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 520.187463][ T5793] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 520.187555][ T5793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.187578][ T5793] usb 4-1: Product: syz [ 520.187594][ T5793] usb 4-1: Manufacturer: syz [ 520.187609][ T5793] usb 4-1: SerialNumber: syz [ 520.239519][ T5793] usb 4-1: config 0 descriptor?? [ 520.267644][ T5793] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 520.520503][ T32] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000084. ret = -EPROTO [ 520.520998][ T32] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 520.521023][ T32] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 520.593546][ T32] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 520.632951][ T32] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 520.650185][T11257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.652838][T11257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.680290][ T32] usb 2-1: USB disconnect, device number 94 [ 521.704697][ T32] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 521.854661][ T32] usb 2-1: Using ep0 maxpacket: 16 [ 521.865380][ T32] usb 2-1: config 0 interface 0 has no altsetting 0 [ 521.865490][ T32] usb 2-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 521.865523][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.872306][ T32] usb 2-1: config 0 descriptor?? [ 522.318710][ T5793] gspca_zc3xx: i2c_w status error f2 [ 522.348833][ T32] samsung 0003:0419:0600.0027: ignoring exceeding usage max [ 522.519030][ T5793] gspca_zc3xx: reg_w_i err -71 [ 522.548964][ T32] samsung 0003:0419:0600.0027: hidraw0: USB HID v0.81 Device [HID 0419:0600] on usb-dummy_hcd.1-1/input0 [ 522.558228][ T32] usb 2-1: USB disconnect, device number 95 [ 522.679774][T11283] fido_id[11283]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 522.784835][ T10] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 522.934974][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 522.962865][ T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 522.962905][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.962926][ T10] usb 1-1: Product: syz [ 522.962942][ T10] usb 1-1: Manufacturer: syz [ 522.962958][ T10] usb 1-1: SerialNumber: syz [ 523.002336][ T10] usb 1-1: config 0 descriptor?? [ 523.134728][ T5793] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 523.134858][ T5793] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 523.138519][ T5793] usb 4-1: USB disconnect, device number 113 [ 523.221136][T11282] openvswitch: netlink: IP tunnel dst address not specified [ 523.225593][ T10] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 523.319543][T11288] FAULT_INJECTION: forcing a failure. [ 523.319543][T11288] name failslab, interval 1, probability 0, space 0, times 0 [ 523.319590][T11288] CPU: 1 UID: 0 PID: 11288 Comm: syz.1.1780 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 523.319625][T11288] Tainted: [L]=SOFTLOCKUP [ 523.319634][T11288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 523.319651][T11288] Call Trace: [ 523.319661][T11288] [ 523.319673][T11288] dump_stack_lvl+0xe8/0x150 [ 523.319720][T11288] should_fail_ex+0x467/0x600 [ 523.319766][T11288] should_failslab+0xa8/0x100 [ 523.319796][T11288] __kmalloc_noprof+0xfb/0x790 [ 523.319833][T11288] ? tomoyo_init_log+0x1aaf/0x1fa0 [ 523.319871][T11288] ? tomoyo_init_log+0x1aaf/0x1fa0 [ 523.319928][T11288] tomoyo_init_log+0x1aaf/0x1fa0 [ 523.319997][T11288] ? __pfx_tomoyo_init_log+0x10/0x10 [ 523.320037][T11288] ? tomoyo_profile+0x11/0x50 [ 523.320073][T11288] ? tomoyo_domain_quota_is_ok+0x422/0x570 [ 523.320112][T11288] tomoyo_supervisor+0x35f/0x1560 [ 523.320170][T11288] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 523.320212][T11288] ? kasan_quarantine_put+0xbb/0x1f0 [ 523.320249][T11288] ? lockdep_hardirqs_on+0x7a/0x110 [ 523.320299][T11288] ? tomoyo_check_path2_acl+0x148/0x260 [ 523.320338][T11288] ? tomoyo_check_acl+0x386/0x400 [ 523.320370][T11288] ? __pfx_tomoyo_check_path2_acl+0x10/0x10 [ 523.320409][T11288] tomoyo_path2_perm+0x567/0x760 [ 523.320445][T11288] ? tomoyo_path2_perm+0x299/0x760 [ 523.320482][T11288] ? __pfx_tomoyo_path2_perm+0x10/0x10 [ 523.320520][T11288] ? __asan_memset+0x22/0x50 [ 523.320595][T11288] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 523.320639][T11288] tomoyo_path_rename+0x14e/0x1b0 [ 523.320670][T11288] ? __pfx_tomoyo_path_rename+0x10/0x10 [ 523.320714][T11288] security_path_rename+0x23e/0x410 [ 523.320759][T11288] filename_renameat2+0x4ba/0x9b0 [ 523.320817][T11288] ? __pfx_filename_renameat2+0x10/0x10 [ 523.320868][T11288] ? strncpy_from_user+0x150/0x2c0 [ 523.320913][T11288] ? getname_long+0xbc/0x130 [ 523.320942][T11288] ? do_getname+0x151/0x250 [ 523.320987][T11288] __se_sys_rename+0x55/0x2c0 [ 523.321016][T11288] do_syscall_64+0x17b/0x530 [ 523.321042][T11288] ? irqentry_exit+0x10f/0x8f0 [ 523.321066][T11288] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.321094][T11288] ? clear_bhb_loop+0x40/0x90 [ 523.321133][T11288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.321161][T11288] RIP: 0033:0x7f83d76dde99 [ 523.321181][T11288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 523.321199][T11288] RSP: 002b:00007f83d5936028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 523.321221][T11288] RAX: ffffffffffffffda RBX: 00007f83d7965fa0 RCX: 00007f83d76dde99 [ 523.321237][T11288] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000200000000180 [ 523.321258][T11288] RBP: 00007f83d5936090 R08: 0000000000000000 R09: 0000000000000000 [ 523.321271][T11288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 523.321283][T11288] R13: 00007f83d7966038 R14: 00007f83d7965fa0 R15: 00007fffb6413cc8 [ 523.321315][T11288] [ 523.688186][ T10] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 524.288582][ T10] usb 4-1: new full-speed USB device number 114 using dummy_hcd [ 524.376610][T11308] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 524.447826][ T10] usb 4-1: config index 0 descriptor too short (expected 2075, got 27) [ 524.447858][ T10] usb 4-1: config 0 has an invalid interface number: 200 but max is 0 [ 524.447883][ T10] usb 4-1: config 0 has no interface number 0 [ 524.447932][ T10] usb 4-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid maxpacket 12408, setting to 64 [ 524.447962][ T10] usb 4-1: config 0 interface 200 has no altsetting 0 [ 524.451534][ T10] usb 4-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 524.451558][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.451573][ T10] usb 4-1: Product: syz [ 524.451585][ T10] usb 4-1: Manufacturer: syz [ 524.451596][ T10] usb 4-1: SerialNumber: syz [ 524.492904][ T10] usb 4-1: config 0 descriptor?? [ 524.768913][T11302] netdevsim netdevsim3 e´×´â×: renamed from netdevsim0 (while UP) [ 524.831719][ T10] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.200/input/input24 [ 524.859095][ T10] usb 4-1: USB disconnect, device number 114 [ 524.874689][ T9] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 525.044713][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 525.047076][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 525.050683][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 525.050779][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.050829][ T9] usb 2-1: Product: syz [ 525.050872][ T9] usb 2-1: Manufacturer: syz [ 525.050916][ T9] usb 2-1: SerialNumber: syz [ 525.098482][ T9] usb 2-1: config 0 descriptor?? [ 525.128508][ T9] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 525.301158][ T10] usb 1-1: USB disconnect, device number 105 [ 525.522548][T11312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.536067][T11312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.319349][T11345] netlink: 'syz.3.1801': attribute type 10 has an invalid length. [ 526.319417][T11345] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1801'. [ 526.768669][T11345] team0: Port device geneve1 added [ 526.842179][T11350] netlink: 'syz.2.1802': attribute type 4 has an invalid length. [ 526.905061][T11353] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.1803'. [ 526.905108][T11353] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 527.192964][ T9] gspca_zc3xx: i2c_w status error f2 [ 527.398592][ T9] gspca_zc3xx: reg_w_i err -71 [ 528.024634][ T9] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 528.024738][ T9] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 528.030055][ T9] usb 2-1: USB disconnect, device number 96 [ 528.126103][ T5701] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 528.283142][ T5701] usb 4-1: Using ep0 maxpacket: 32 [ 528.338946][ T5701] usb 4-1: config 2 has an invalid interface number: 88 but max is 0 [ 528.338980][ T5701] usb 4-1: config 2 has no interface number 0 [ 528.339033][ T5701] usb 4-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 528.339071][ T5701] usb 4-1: config 2 interface 88 has no altsetting 0 [ 528.431586][ T5701] usb 4-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 528.431618][ T5701] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 528.431638][ T5701] usb 4-1: Product: syz [ 528.431654][ T5701] usb 4-1: Manufacturer: syz [ 528.431669][ T5701] usb 4-1: SerialNumber: syz [ 528.585967][T11366] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 528.833219][T11366] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 528.912137][T11379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.914011][T11379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.129649][ T5701] asix 4-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 529.130021][ T5701] asix 4-1:2.88: probe with driver asix failed with error -71 [ 529.192195][ T5701] usb 4-1: USB disconnect, device number 115 [ 530.225243][T11381] netlink: 'syz.2.1812': attribute type 19 has an invalid length. [ 531.422410][T11387] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 532.360044][T11397] fuse: fd is not a fuse device [ 532.574790][ T5701] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 532.724793][ T5701] usb 4-1: Using ep0 maxpacket: 16 [ 532.730258][ T5701] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 532.730306][ T5701] usb 4-1: config 0 has no interfaces? [ 532.757272][ T5701] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 532.757306][ T5701] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.757434][ T5701] usb 4-1: Product: syz [ 532.757459][ T5701] usb 4-1: Manufacturer: syz [ 532.757479][ T5701] usb 4-1: SerialNumber: syz [ 532.785027][ T5831] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 532.828900][ T5701] usb 4-1: config 0 descriptor?? [ 532.994653][ T5831] usb 1-1: Using ep0 maxpacket: 8 [ 532.997091][ T5831] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 533.000629][ T5831] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 533.000673][ T5831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.000701][ T5831] usb 1-1: Product: syz [ 533.000712][ T5831] usb 1-1: Manufacturer: syz [ 533.000723][ T5831] usb 1-1: SerialNumber: syz [ 533.027138][ T5831] usb 1-1: config 0 descriptor?? [ 533.062950][ T5701] usb 4-1: USB disconnect, device number 116 [ 533.083939][T11392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 533.121252][ T5831] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 533.478720][T11401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.479365][T11401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.575330][T11412] netlink: 'syz.2.1822': attribute type 4 has an invalid length. [ 533.626436][T11409] netlink: 'syz.2.1822': attribute type 4 has an invalid length. [ 533.816172][ T10] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 533.966457][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 533.968669][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 533.968754][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 533.971440][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 533.971520][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.971536][ T10] usb 2-1: Product: syz [ 533.971548][ T10] usb 2-1: Manufacturer: syz [ 533.971559][ T10] usb 2-1: SerialNumber: syz [ 534.058876][ T10] usb 2-1: config 0 descriptor?? [ 534.087698][ T10] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 534.088072][ T10] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 534.687043][ T10] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 534.688241][ T10] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 534.890539][ T10] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 534.890603][ T10] em28xx 2-1:0.0: No AC97 audio processor [ 534.927736][ T10] usb 2-1: USB disconnect, device number 97 [ 534.930432][ T10] em28xx 2-1:0.0: Disconnecting em28xx [ 534.984904][ T37] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 535.049970][ T10] em28xx: Freeing device [ 535.124814][ T5831] gspca_zc3xx: i2c_w status error f2 [ 535.134759][ T37] usb 4-1: Using ep0 maxpacket: 32 [ 535.146204][ T37] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 535.146238][ T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.146261][ T37] usb 4-1: Product: syz [ 535.146278][ T37] usb 4-1: Manufacturer: syz [ 535.146295][ T37] usb 4-1: SerialNumber: syz [ 535.152557][ T37] usb 4-1: config 0 descriptor?? [ 535.219142][ T37] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 535.327194][ T5831] gspca_zc3xx: reg_w_i err -71 [ 535.596234][T11431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 535.598424][T11431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 535.601367][T11431] new mount options do not match the existing superblock, will be ignored [ 535.663165][ T37] gspca_ov534_9: reg_w failed -71 [ 535.774824][ T9] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 535.954743][ T5831] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 535.954852][ T5831] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 536.018723][ T5831] usb 1-1: USB disconnect, device number 106 [ 536.023072][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 536.023108][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.023124][ T9] usb 2-1: Product: syz [ 536.023135][ T9] usb 2-1: Manufacturer: syz [ 536.023146][ T9] usb 2-1: SerialNumber: syz [ 536.062829][ T37] gspca_ov534_9: Unknown sensor 0000 [ 536.062928][ T37] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 536.167942][ T37] usb 4-1: USB disconnect, device number 117 [ 536.496019][T11450] netlink: 'syz.2.1839': attribute type 1 has an invalid length. [ 536.514865][ T5831] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 536.628258][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 536.628325][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 536.655753][T11452] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4252604744 (544333407232 ns) > initial count (412347679616 ns). Using initial count to start timer. [ 536.687043][ T5831] usb 1-1: Using ep0 maxpacket: 32 [ 536.689647][ T5831] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 536.689678][ T5831] usb 1-1: config 0 has no interface number 0 [ 536.689786][ T5831] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 536.689804][ T5831] usb 1-1: config 0 interface 1 has no altsetting 0 [ 536.692675][ T5831] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 536.692698][ T5831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.692714][ T5831] usb 1-1: Product: syz [ 536.692732][ T5831] usb 1-1: Manufacturer: syz [ 536.692938][ T5831] usb 1-1: SerialNumber: syz [ 536.774352][ T5831] usb 1-1: config 0 descriptor?? [ 537.013636][ T5831] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 537.070121][ T5831] cx231xx 1-1:0.1: Failed to read PCB config [ 537.071606][ T5831] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 537.101562][ T5831] usb 1-1: USB disconnect, device number 107 [ 537.544704][ T5831] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 537.644761][ T10] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 537.724750][ T5831] usb 1-1: Using ep0 maxpacket: 32 [ 537.734355][ T5831] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 537.734377][ T5831] usb 1-1: config 0 has no interface number 0 [ 537.734410][ T5831] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 537.734427][ T5831] usb 1-1: config 0 interface 1 has no altsetting 0 [ 537.772268][ T5831] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 537.772296][ T5831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.772313][ T5831] usb 1-1: Product: syz [ 537.772326][ T5831] usb 1-1: Manufacturer: syz [ 537.772338][ T5831] usb 1-1: SerialNumber: syz [ 537.818771][ T5831] usb 1-1: config 0 descriptor?? [ 537.847825][ T10] usb 4-1: config 1 has an invalid descriptor of length 15, skipping remainder of the config [ 537.848086][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 3845, setting to 1024 [ 537.848134][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 537.848177][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 537.906268][ T10] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 537.906293][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.906308][ T10] usb 4-1: Product: syz [ 537.906518][ T10] usb 4-1: Manufacturer: syz [ 537.906530][ T10] usb 4-1: SerialNumber: syz [ 537.963499][T11456] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 537.977447][ T10] usbserial_generic 4-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 537.977466][ T10] usbserial_generic 4-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 537.977709][ T10] usbserial_generic 4-1:1.0: generic converter detected [ 538.070825][ T5831] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 538.101484][ T5831] cx231xx 1-1:0.1: bad scenario!!!!! [ 538.101484][ T5831] config_info=0 [ 538.101504][ T5831] cx231xx 1-1:0.1: Failed to read PCB config [ 538.136041][ T10] usb 4-1: generic converter now attached to ttyUSB0 [ 538.292206][ T10] usb 4-1: USB disconnect, device number 118 [ 538.450650][ T10] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 538.453142][ T10] usbserial_generic 4-1:1.0: device disconnected [ 538.494953][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000080. ret = -EPROTO [ 538.494997][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 538.495819][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 538.542753][ T9] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 538.571238][ T9] usb 2-1: USB disconnect, device number 98 [ 539.091992][T11468] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 539.318830][T11470] fuse: fd is not a fuse device [ 539.346881][ T5831] usb 1-1: USB disconnect, device number 108 [ 539.367896][ T9] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 539.500542][ T10] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 539.534071][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 539.534133][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 539.534162][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 539.534189][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 539.534215][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 539.534241][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 539.534267][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 539.534294][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 539.534320][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 539.534346][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 539.534371][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 539.534397][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 539.534424][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 64 [ 539.534449][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 539.644608][ T9] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 539.644643][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.644665][ T9] usb 2-1: Product: syz [ 539.644699][ T9] usb 2-1: Manufacturer: syz [ 539.644807][ T9] usb 2-1: SerialNumber: syz [ 539.725596][T11468] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 539.725783][T11468] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 539.725959][T11468] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 539.726134][T11468] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 539.726379][T11468] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 539.726553][T11468] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 539.726708][T11468] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 539.726870][T11468] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 539.727044][T11468] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 539.727203][T11468] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 539.727378][T11468] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 539.727527][T11468] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 539.773948][ T9] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 539.803506][ T9] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 7 [ 539.816258][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 539.837037][ T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 539.837144][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 539.870452][ T10] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 539.870488][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.870509][ T10] usb 4-1: Product: syz [ 539.870531][ T10] usb 4-1: Manufacturer: syz [ 539.870547][ T10] usb 4-1: SerialNumber: syz [ 539.923009][ T10] usb 4-1: config 0 descriptor?? [ 539.994760][ T9] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 540.000100][ T9] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 540.137449][ T9] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 540.169174][T11468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.169997][T11468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.376432][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 540.380643][ T9] usb 2-1: USB disconnect, device number 99 [ 540.639221][ T9] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 540.684051][ T10] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input25 [ 540.749761][ T9] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 540.751575][ T9] keyspan 2-1:1.0: device disconnected [ 540.788002][ T5743] udevd[5743]: setting mode of /dev/bus/usb/002/099 to 020664 failed: No such file or directory [ 540.788109][ T5743] udevd[5743]: setting owner of /dev/bus/usb/002/099 to uid=0, gid=0 failed: No such file or directory [ 540.976888][ T10] imon:send_packet: packet tx failed (-71) [ 540.995159][ T10] imon 4-1:0.0: panel buttons/knobs setup failed [ 541.131571][ T10] rc_core: IR keymap rc-imon-pad not found [ 541.131595][ T10] Registered IR keymap rc-empty [ 541.131679][ T10] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 541.131698][ T10] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 541.133522][ T10] imon:send_packet: packet tx failed (-71) [ 541.178684][ T10] imon 4-1:0.0: remote input dev register failed [ 541.178807][ T10] imon 4-1:0.0: imon_init_intf0: rc device setup failed [ 541.509343][ T10] imon 4-1:0.0: unable to initialize intf0, err 0 [ 541.509370][ T10] imon:imon_probe: failed to initialize context! [ 541.509385][ T10] imon 4-1:0.0: unable to register, err -19 [ 541.523052][ T10] usb 4-1: USB disconnect, device number 119 [ 541.974686][ T10] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 542.164671][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 542.168742][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 542.171224][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 542.171255][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.171277][ T10] usb 4-1: Product: syz [ 542.171298][ T10] usb 4-1: Manufacturer: syz [ 542.171317][ T10] usb 4-1: SerialNumber: syz [ 542.181826][ T10] usb 4-1: config 0 descriptor?? [ 542.262955][ T10] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 542.394736][ T32] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 542.445012][T11476] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 542.575774][ T32] usb 2-1: Using ep0 maxpacket: 32 [ 542.617445][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.617492][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 542.617541][ T32] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 542.617567][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.676643][ T32] usb 2-1: config 0 descriptor?? [ 542.698177][ T32] hub 2-1:0.0: USB hub found [ 542.716964][T11504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.724174][T11504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.851999][T11515] fuse: fd is not a fuse device [ 542.934143][T11513] 9pnet_fd: Insufficient options for proto=fd [ 542.942572][ T32] hub 2-1:0.0: 1 port detected [ 543.885757][ T32] hub 2-1:0.0: activate --> -90 [ 543.996141][ T5831] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 544.042075][T11532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.043237][T11532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.223737][ T5831] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 544.223838][ T5831] usb 1-1: config 0 interface 0 has no altsetting 0 [ 544.223879][ T5831] usb 1-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 544.223897][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.277459][ T5831] usb 1-1: config 0 descriptor?? [ 544.278700][T11526] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 544.474414][ T10] gspca_zc3xx: i2c_w status error f2 [ 544.501537][T11526] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1860'. [ 544.501574][T11526] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1860'. [ 544.676351][ T10] gspca_zc3xx: reg_w_i err -71 [ 544.792554][T11526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.797578][T11526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.818085][ T5831] hid (null): unknown global tag 0xe [ 544.865682][ T32] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 544.872989][ T9] usb 2-1: USB disconnect, device number 100 [ 544.899754][ T403] usb 2-1: Failed to suspend device, error -19 [ 544.959427][ T5831] razer 0003:1532:010D.0028: unknown main item tag 0x0 [ 544.959456][ T5831] razer 0003:1532:010D.0028: unknown main item tag 0x0 [ 544.959482][ T5831] razer 0003:1532:010D.0028: unknown main item tag 0x0 [ 544.959501][ T5831] razer 0003:1532:010D.0028: unknown main item tag 0x0 [ 544.959520][ T5831] razer 0003:1532:010D.0028: unknown main item tag 0x0 [ 544.959539][ T5831] razer 0003:1532:010D.0028: unknown main item tag 0x0 [ 544.959559][ T5831] razer 0003:1532:010D.0028: unknown main item tag 0x0 [ 544.959577][ T5831] razer 0003:1532:010D.0028: unknown main item tag 0x0 [ 544.959596][ T5831] razer 0003:1532:010D.0028: unknown main item tag 0x0 [ 544.959615][ T5831] razer 0003:1532:010D.0028: unknown main item tag 0x0 [ 544.960318][ T5831] razer 0003:1532:010D.0028: unexpected long global item [ 544.963945][ T5831] razer 0003:1532:010D.0028: probe with driver razer failed with error -22 [ 545.141522][ T5831] usb 1-1: USB disconnect, device number 109 [ 545.294644][ T10] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 545.294751][ T10] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 545.334806][ T10] usb 4-1: USB disconnect, device number 120 [ 545.766662][T11550] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 546.084984][ T32] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 546.237299][ T32] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 546.237339][ T32] usb 1-1: config 0 interface 0 has no altsetting 0 [ 546.237377][ T32] usb 1-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.1e [ 546.237403][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.290317][ T32] usb 1-1: config 0 descriptor?? [ 546.292264][T11552] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 546.504021][T11562] can: request_module (can-proto-0) failed. [ 546.704757][ T5793] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 546.715307][ T32] hid (null): invalid report_size 4709 [ 546.715451][ T32] hid (null): report_id 604620521 is invalid [ 546.727739][ T32] hid (null): global environment stack underflow [ 546.727808][ T32] hid (null): unknown global tag 0xc [ 546.734806][ T10] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 546.761078][ T32] razer 0003:1532:010D.0029: invalid report_size 4709 [ 546.761108][ T32] razer 0003:1532:010D.0029: item 0 2 1 7 parsing failed [ 546.762357][ T32] razer 0003:1532:010D.0029: probe with driver razer failed with error -22 [ 546.864797][ T5793] usb 4-1: Using ep0 maxpacket: 8 [ 546.868820][ T5793] usb 4-1: config 0 has an invalid interface number: 97 but max is 12 [ 546.868852][ T5793] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 546.868876][ T5793] usb 4-1: config 0 has no interface number 0 [ 546.868910][ T5793] usb 4-1: too many endpoints for config 0 interface 97 altsetting 97: 97, using maximum allowed: 30 [ 546.868951][ T5793] usb 4-1: config 0 interface 97 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 546.868996][ T5793] usb 4-1: config 0 interface 97 has no altsetting 0 [ 546.872264][ T5793] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 546.872301][ T5793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.872317][ T5793] usb 4-1: Product: syz [ 546.872328][ T5793] usb 4-1: Manufacturer: syz [ 546.872354][ T5793] usb 4-1: SerialNumber: syz [ 546.902634][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 546.926032][ T32] usb 1-1: USB disconnect, device number 110 [ 546.985667][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 546.989234][ T10] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 129, changing to 7 [ 547.014224][ T10] usb 2-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 547.014260][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.014282][ T10] usb 2-1: Product: syz [ 547.014298][ T10] usb 2-1: Manufacturer: syz [ 547.014320][ T10] usb 2-1: SerialNumber: syz [ 547.055552][ T5793] usb 4-1: config 0 descriptor?? [ 547.335196][ T5793] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 547.336854][ T5793] gspca_zc3xx: reg_w_i err -71 [ 547.366536][T11563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.367428][T11563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.397541][ T10] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 547.413947][ T10] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 547.480996][ T10] usb 2-1: USB disconnect, device number 101 [ 547.537170][ T6199] udevd[6199]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 547.625732][T11570] netlink: 'syz.0.1872': attribute type 4 has an invalid length. [ 547.634367][T11570] netlink: 'syz.0.1872': attribute type 4 has an invalid length. [ 547.924692][ T5793] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 547.924801][ T5793] gspca_zc3xx 4-1:0.97: probe with driver gspca_zc3xx failed with error -71 [ 547.950003][ T5793] usb 4-1: USB disconnect, device number 121 [ 548.245189][ T37] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 548.374760][ T37] usb 2-1: device descriptor read/64, error -71 [ 548.566381][ T5793] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 548.637199][ T37] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 548.738916][ T5793] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 548.738955][ T5793] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 548.738996][ T5793] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 548.739022][ T5793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.784872][ T37] usb 2-1: device descriptor read/64, error -71 [ 548.801658][ T5793] usb 1-1: config 0 descriptor?? [ 548.898288][ T37] usb usb2-port1: attempt power cycle [ 549.268203][ T60] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 549.330872][ T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 549.354970][ T60] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 549.382409][ T5793] hid-thrustmaster 0003:044F:B65D.002A: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0 [ 549.394295][ T37] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 549.438286][ T5793] hid-thrustmaster 0003:044F:B65D.002A: Wrong number of endpoints? [ 549.438827][ T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 549.469964][ T37] usb 2-1: device descriptor read/8, error -71 [ 549.470862][ T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 549.782705][ T37] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 549.846276][ T37] usb 2-1: device descriptor read/8, error -71 [ 549.937390][ C1] hid-thrustmaster 0003:044F:B65D.002A: Unknown packet type 0x2c9f, unable to proceed further with wheel init [ 549.959286][ T37] usb usb2-port1: unable to enumerate USB device [ 550.210343][ T9] usb 1-1: USB disconnect, device number 111 [ 550.330497][T11603] Invalid logical block size (2304) [ 550.736352][T11608] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 551.354670][ T10] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 551.504616][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 551.512558][ T10] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 250, changing to 11 [ 551.512596][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 551.512633][ T10] usb 4-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 551.512659][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.554628][ T9] usb 2-1: new full-speed USB device number 106 using dummy_hcd [ 551.561706][ T10] usb 4-1: config 0 descriptor?? [ 551.726717][ T9] usb 2-1: too many configurations: 195, using maximum allowed: 8 [ 551.747986][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 551.748089][ T9] usb 2-1: can't read configurations, error -61 [ 551.896711][ T4907] Bluetooth: hci4: command tx timeout [ 551.932520][ T9] usb 2-1: new full-speed USB device number 107 using dummy_hcd [ 552.040935][ T10] hid_parser_main: 186 callbacks suppressed [ 552.040963][ T10] sigmamicro 0003:1C4F:0059.002B: unknown main item tag 0x0 [ 552.041059][ T10] sigmamicro 0003:1C4F:0059.002B: unknown main item tag 0x4 [ 552.109928][ T9] usb 2-1: too many configurations: 195, using maximum allowed: 8 [ 552.128942][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 552.128982][ T9] usb 2-1: can't read configurations, error -61 [ 552.129397][ T9] usb usb2-port1: attempt power cycle [ 552.209548][ T10] sigmamicro 0003:1C4F:0059.002B: hidraw0: USB HID v0.04 Device [HID 1c4f:0059] on usb-dummy_hcd.3-1/input0 [ 552.253184][T11613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.266880][T11613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.273547][ T5701] usb 4-1: USB disconnect, device number 122 [ 552.481883][T11625] fido_id[11625]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 552.575063][ T9] usb 2-1: new full-speed USB device number 108 using dummy_hcd [ 552.608527][ T9] usb 2-1: too many configurations: 195, using maximum allowed: 8 [ 552.614381][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 552.614428][ T9] usb 2-1: can't read configurations, error -61 [ 552.774659][ T9] usb 2-1: new full-speed USB device number 109 using dummy_hcd [ 552.861066][ T9] usb 2-1: too many configurations: 195, using maximum allowed: 8 [ 552.888311][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 552.888355][ T9] usb 2-1: can't read configurations, error -61 [ 552.911688][ T9] usb usb2-port1: unable to enumerate USB device [ 553.210998][T11593] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.211384][T11593] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.211603][T11593] bridge_slave_0: entered allmulticast mode [ 553.247550][T11593] bridge_slave_0: entered promiscuous mode [ 553.432804][ T9] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 553.492347][ T9] hid-generic 0000:0000:0000.002C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 553.895457][T11593] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.897127][T11593] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.897461][T11593] bridge_slave_1: entered allmulticast mode [ 553.902447][T11593] bridge_slave_1: entered promiscuous mode [ 553.984711][ T4907] Bluetooth: hci4: command tx timeout [ 554.028022][T11593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 554.048147][T11593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 554.263886][ T9] libceph: connect (1)[c::]:6789 error -101 [ 554.264111][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 554.293873][ T9] libceph: connect (1)[c::]:6789 error -101 [ 554.294073][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 554.432969][T11593] team0: Port device team_slave_0 added [ 554.449811][T11593] team0: Port device team_slave_1 added [ 554.556152][ T9] libceph: connect (1)[c::]:6789 error -101 [ 554.556432][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 554.557655][T11593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 554.557672][T11593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 554.557704][T11593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 554.562588][T11593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 554.562601][T11593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 554.562624][T11593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 554.749974][T11593] hsr_slave_0: entered promiscuous mode [ 554.751881][T11593] hsr_slave_1: entered promiscuous mode [ 554.753473][T11593] debugfs: 'hsr0' already exists in 'hsr' [ 554.753502][T11593] Cannot create hsr debugfs directory [ 554.942372][T11640] ceph: No mds server is up or the cluster is laggy [ 555.025909][T11654] FAULT_INJECTION: forcing a failure. [ 555.025909][T11654] name failslab, interval 1, probability 0, space 0, times 0 [ 555.025954][T11654] CPU: 1 UID: 0 PID: 11654 Comm: syz.1.1892 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 555.025984][T11654] Tainted: [L]=SOFTLOCKUP [ 555.025993][T11654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 555.026006][T11654] Call Trace: [ 555.026015][T11654] [ 555.026025][T11654] dump_stack_lvl+0xe8/0x150 [ 555.026061][T11654] should_fail_ex+0x467/0x600 [ 555.026096][T11654] should_failslab+0xa8/0x100 [ 555.026120][T11654] kmem_cache_alloc_node_noprof+0xac/0x660 [ 555.026155][T11654] ? __alloc_skb+0x1d7/0x7a0 [ 555.026182][T11654] ? __alloc_skb+0x1d7/0x7a0 [ 555.026218][T11654] __alloc_skb+0x1d7/0x7a0 [ 555.026253][T11654] netlink_ack+0x136/0xb30 [ 555.026292][T11654] ? __kmalloc_cache_noprof+0x3cd/0x670 [ 555.026324][T11654] ? nfnetlink_rcv+0x102a/0x28d0 [ 555.026362][T11654] nfnetlink_rcv+0x2613/0x28d0 [ 555.026427][T11654] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 555.026474][T11654] ? __pfx_save_netdev_trace_buffer+0x10/0x10 [ 555.026498][T11654] ? ref_tracker_free+0x668/0x820 [ 555.026553][T11654] ? skb_clone+0x246/0x3a0 [ 555.026600][T11654] ? __netlink_deliver_tap+0x838/0x880 [ 555.026657][T11654] ? netlink_deliver_tap+0x2e/0x1b0 [ 555.026691][T11654] ? netlink_deliver_tap+0x2e/0x1b0 [ 555.026732][T11654] netlink_unicast+0x7f5/0x990 [ 555.026773][T11654] netlink_sendmsg+0x813/0xb40 [ 555.026819][T11654] ? __pfx_netlink_sendmsg+0x10/0x10 [ 555.026861][T11654] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 555.026898][T11654] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 555.026932][T11654] ? arch_stack_walk+0xfb/0x150 [ 555.026978][T11654] ? __pfx_netlink_sendmsg+0x10/0x10 [ 555.027011][T11654] sock_sendmsg_nosec+0x13a/0x180 [ 555.027039][T11654] ____sys_sendmsg+0x565/0x870 [ 555.027082][T11654] ? __pfx_____sys_sendmsg+0x10/0x10 [ 555.027122][T11654] ? import_iovec+0x73/0xa0 [ 555.027161][T11654] ___sys_sendmsg+0x2a5/0x360 [ 555.027194][T11654] ? __lock_acquire+0x6df/0x2e40 [ 555.027220][T11654] ? __pfx____sys_sendmsg+0x10/0x10 [ 555.027288][T11654] ? __fget_files+0x2a/0x420 [ 555.027307][T11654] ? __fget_files+0x3a8/0x420 [ 555.027335][T11654] __x64_sys_sendmsg+0x1b7/0x290 [ 555.027367][T11654] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 555.027413][T11654] do_syscall_64+0x17b/0x530 [ 555.027434][T11654] ? irqentry_exit+0x10f/0x8f0 [ 555.027453][T11654] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.027473][T11654] ? clear_bhb_loop+0x40/0x90 [ 555.027497][T11654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.027517][T11654] RIP: 0033:0x7f83d76dde99 [ 555.027565][T11654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 555.027584][T11654] RSP: 002b:00007f83d5936028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 555.027605][T11654] RAX: ffffffffffffffda RBX: 00007f83d7965fa0 RCX: 00007f83d76dde99 [ 555.027628][T11654] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 555.027641][T11654] RBP: 00007f83d5936090 R08: 0000000000000000 R09: 0000000000000000 [ 555.027654][T11654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 555.027666][T11654] R13: 00007f83d7966038 R14: 00007f83d7965fa0 R15: 00007fffb6413cc8 [ 555.027696][T11654] [ 555.263884][ T9] libceph: connect (1)[c::]:6789 error -101 [ 555.264441][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 556.054628][ T4907] Bluetooth: hci4: command tx timeout [ 556.378694][ T5604] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 556.408907][ T5604] hid-generic 0000:0000:0000.002D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 557.260693][T11680] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1897'. [ 557.260722][T11680] openvswitch: netlink: Flow key attr not present in new flow. [ 557.379451][T11682] FAULT_INJECTION: forcing a failure. [ 557.379451][T11682] name failslab, interval 1, probability 0, space 0, times 0 [ 557.379493][T11682] CPU: 1 UID: 0 PID: 11682 Comm: syz.1.1898 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 557.379523][T11682] Tainted: [L]=SOFTLOCKUP [ 557.379532][T11682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 557.379546][T11682] Call Trace: [ 557.379555][T11682] [ 557.379565][T11682] dump_stack_lvl+0xe8/0x150 [ 557.379601][T11682] should_fail_ex+0x467/0x600 [ 557.379634][T11682] ? __d_alloc+0x37/0x6f0 [ 557.379658][T11682] should_failslab+0xa8/0x100 [ 557.379677][T11682] kmem_cache_alloc_lru_noprof+0xa2/0x670 [ 557.379706][T11682] ? __d_alloc+0x37/0x6f0 [ 557.379731][T11682] __d_alloc+0x37/0x6f0 [ 557.379755][T11682] d_alloc_parallel+0xde/0x16c0 [ 557.379784][T11682] ? lock_acquire+0x115/0x350 [ 557.379816][T11682] ? lock_acquire+0x115/0x350 [ 557.379846][T11682] ? __pfx_d_alloc_parallel+0x10/0x10 [ 557.379883][T11682] ? down_read+0x156/0x200 [ 557.379903][T11682] ? __pfx_down_read+0x10/0x10 [ 557.379924][T11682] __lookup_slow+0x82/0x2f0 [ 557.379949][T11682] lookup_slow+0x53/0x70 [ 557.379969][T11682] ovl_lookup_single+0x323/0xe90 [ 557.380006][T11682] ? __pfx_ovl_lookup_single+0x10/0x10 [ 557.380038][T11682] ? rcu_is_watching+0x15/0xb0 [ 557.380062][T11682] ovl_lookup_layer+0x377/0x440 [ 557.380090][T11682] ? ovl_lookup+0x762/0x1c90 [ 557.380120][T11682] ovl_lookup+0x9ae/0x1c90 [ 557.380176][T11682] ? __pfx_ovl_lookup+0x10/0x10 [ 557.380202][T11682] ? __d_lookup+0x66/0x790 [ 557.380225][T11682] ? __pfx_d_alloc_parallel+0x10/0x10 [ 557.380248][T11682] ? d_lookup+0x1f/0xc0 [ 557.380272][T11682] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 557.380299][T11682] path_openat+0x112d/0x3850 [ 557.380358][T11682] do_file_open+0x23e/0x4a0 [ 557.380380][T11682] ? lockdep_hardirqs_on+0x7a/0x110 [ 557.380403][T11682] ? __pfx_do_file_open+0x10/0x10 [ 557.380459][T11682] ? alloc_fd+0x654/0x6d0 [ 557.380487][T11682] do_sys_openat2+0x115/0x200 [ 557.380522][T11682] ? __pfx_do_sys_openat2+0x10/0x10 [ 557.380556][T11682] ? ksys_write+0x248/0x270 [ 557.380582][T11682] ? __pfx_ksys_write+0x10/0x10 [ 557.380605][T11682] __x64_sys_openat+0x138/0x170 [ 557.380638][T11682] do_syscall_64+0x17b/0x530 [ 557.380657][T11682] ? irqentry_exit+0x10f/0x8f0 [ 557.380674][T11682] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.380693][T11682] ? clear_bhb_loop+0x40/0x90 [ 557.380733][T11682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.380751][T11682] RIP: 0033:0x7f83d76dde99 [ 557.380777][T11682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 557.380793][T11682] RSP: 002b:00007f83d5936028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 557.380813][T11682] RAX: ffffffffffffffda RBX: 00007f83d7965fa0 RCX: 00007f83d76dde99 [ 557.380826][T11682] RDX: 0000000000000800 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 557.380844][T11682] RBP: 00007f83d5936090 R08: 0000000000000000 R09: 0000000000000000 [ 557.380855][T11682] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 557.380866][T11682] R13: 00007f83d7966038 R14: 00007f83d7965fa0 R15: 00007fffb6413cc8 [ 557.380895][T11682] [ 557.880127][T11593] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.997247][T11686] FAULT_INJECTION: forcing a failure. [ 557.997247][T11686] name failslab, interval 1, probability 0, space 0, times 0 [ 557.997286][T11686] CPU: 1 UID: 0 PID: 11686 Comm: syz.1.1899 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 557.997318][T11686] Tainted: [L]=SOFTLOCKUP [ 557.997337][T11686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 557.997350][T11686] Call Trace: [ 557.997360][T11686] [ 557.997370][T11686] dump_stack_lvl+0xe8/0x150 [ 557.997402][T11686] should_fail_ex+0x467/0x600 [ 557.997435][T11686] should_failslab+0xa8/0x100 [ 557.997459][T11686] kmem_cache_alloc_node_noprof+0xac/0x660 [ 557.997490][T11686] ? __alloc_skb+0x1d7/0x7a0 [ 557.997517][T11686] ? __alloc_skb+0x1d7/0x7a0 [ 557.997553][T11686] __alloc_skb+0x1d7/0x7a0 [ 557.997587][T11686] netlink_ack+0x136/0xb30 [ 557.997618][T11686] ? __kmalloc_cache_noprof+0x3cd/0x670 [ 557.997646][T11686] ? nfnetlink_rcv+0x102a/0x28d0 [ 557.997677][T11686] nfnetlink_rcv+0x2613/0x28d0 [ 557.997734][T11686] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 557.997772][T11686] ? __pfx_save_netdev_trace_buffer+0x10/0x10 [ 557.997791][T11686] ? ref_tracker_free+0x668/0x820 [ 557.997838][T11686] ? skb_clone+0x246/0x3a0 [ 557.997876][T11686] ? __netlink_deliver_tap+0x838/0x880 [ 557.997914][T11686] ? netlink_deliver_tap+0x2e/0x1b0 [ 557.997945][T11686] ? netlink_deliver_tap+0x2e/0x1b0 [ 557.997982][T11686] netlink_unicast+0x7f5/0x990 [ 557.998019][T11686] netlink_sendmsg+0x813/0xb40 [ 557.998057][T11686] ? __pfx_netlink_sendmsg+0x10/0x10 [ 557.998089][T11686] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 557.998125][T11686] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 557.998157][T11686] ? arch_stack_walk+0xfb/0x150 [ 557.998192][T11686] ? __pfx_netlink_sendmsg+0x10/0x10 [ 557.998221][T11686] sock_sendmsg_nosec+0x13a/0x180 [ 557.998244][T11686] ____sys_sendmsg+0x565/0x870 [ 557.998281][T11686] ? __pfx_____sys_sendmsg+0x10/0x10 [ 557.998318][T11686] ? import_iovec+0x73/0xa0 [ 557.998363][T11686] ___sys_sendmsg+0x2a5/0x360 [ 557.998392][T11686] ? __lock_acquire+0x6df/0x2e40 [ 557.998416][T11686] ? __pfx____sys_sendmsg+0x10/0x10 [ 557.998478][T11686] ? __fget_files+0x2a/0x420 [ 557.998498][T11686] ? __fget_files+0x3a8/0x420 [ 557.998529][T11686] __x64_sys_sendmsg+0x1b7/0x290 [ 557.998563][T11686] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 557.998610][T11686] do_syscall_64+0x17b/0x530 [ 557.998632][T11686] ? irqentry_exit+0x10f/0x8f0 [ 557.998649][T11686] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.998669][T11686] ? clear_bhb_loop+0x40/0x90 [ 557.998691][T11686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.998709][T11686] RIP: 0033:0x7f83d76dde99 [ 557.998727][T11686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 557.998744][T11686] RSP: 002b:00007f83d5936028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 557.998764][T11686] RAX: ffffffffffffffda RBX: 00007f83d7965fa0 RCX: 00007f83d76dde99 [ 557.998778][T11686] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 557.998790][T11686] RBP: 00007f83d5936090 R08: 0000000000000000 R09: 0000000000000000 [ 557.998802][T11686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 557.998814][T11686] R13: 00007f83d7966038 R14: 00007f83d7965fa0 R15: 00007fffb6413cc8 [ 557.998844][T11686] [ 558.134711][ T4907] Bluetooth: hci4: command tx timeout [ 558.779767][T11593] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.788577][ T9] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 558.957836][ T9] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 558.957872][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.325859][T11593] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.413678][ T32] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 559.477122][ T32] hid-generic 0000:0000:0000.002E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 560.014163][ T9] usb 2-1: non-Atmel transceiver xxxx00d0 [ 560.217310][ T9] usb 2-1: Firmware version (0.0) predates our first public release. [ 560.217340][ T9] usb 2-1: Please update to version 0.2 or newer [ 560.222181][ T9] usb 2-1: atusb_probe: initialization failed, error = -19 [ 560.276054][ T9] usb 2-1: USB disconnect, device number 110 [ 560.418020][T11593] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.444738][ T32] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 560.594740][ T32] usb 1-1: Using ep0 maxpacket: 8 [ 560.597309][ T32] usb 1-1: unable to get BOS descriptor or descriptor too short [ 560.598609][ T32] usb 1-1: config 2 has an invalid interface number: 24 but max is 0 [ 560.598637][ T32] usb 1-1: config 2 has no interface number 0 [ 560.598676][ T32] usb 1-1: config 2 interface 24 has no altsetting 0 [ 560.603699][ T32] usb 1-1: string descriptor 0 read error: -22 [ 560.603853][ T32] usb 1-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=c7.3b [ 560.603880][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.701645][ T32] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 560.701792][ T32] command write [95] error -22 [ 561.063844][ T5701] usb 1-1: USB disconnect, device number 112 [ 561.404810][T11711] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1909'. [ 561.525242][T11593] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 561.590453][T11593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 561.591773][T11593] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 561.652078][T11593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 561.653711][T11593] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 561.742814][T11593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 561.764302][T11593] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 561.869360][T11718] netlink: 'syz.0.1910': attribute type 1 has an invalid length. [ 561.869377][T11718] netlink: 'syz.0.1910': attribute type 2 has an invalid length. [ 561.939998][T11593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 562.248433][T11593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 562.310878][T11593] 8021q: adding VLAN 0 to HW filter on device team0 [ 562.340847][ T403] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.341109][ T403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 562.403922][ T3274] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.404052][ T3274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 562.573692][T11728] Invalid logical block size (16384) [ 562.753892][ T9] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 562.777766][ T9] hid-generic 0000:0000:0000.002F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 562.915336][ T5604] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 563.113894][ T5604] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 563.113929][ T5604] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 563.113951][ T5604] usb 1-1: Product: syz [ 563.113968][ T5604] usb 1-1: SerialNumber: syz [ 563.189781][ T5604] usb 1-1: config 0 descriptor?? [ 563.265528][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.265680][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.451741][ T5604] hso 1-1:0.0: Failed to find BULK eps [ 563.995336][T11745] FAULT_INJECTION: forcing a failure. [ 563.995336][T11745] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 563.995392][T11745] CPU: 0 UID: 0 PID: 11745 Comm: syz.1.1915 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 563.995423][T11745] Tainted: [L]=SOFTLOCKUP [ 563.995431][T11745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 563.995446][T11745] Call Trace: [ 563.995454][T11745] [ 563.995465][T11745] dump_stack_lvl+0xe8/0x150 [ 563.995500][T11745] should_fail_ex+0x467/0x600 [ 563.995538][T11745] _copy_to_user+0x31/0xb0 [ 563.995562][T11745] simple_read_from_buffer+0xe1/0x170 [ 563.995592][T11745] proc_fail_nth_read+0x1be/0x230 [ 563.995619][T11745] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 563.995646][T11745] ? rw_verify_area+0x250/0x4d0 [ 563.995673][T11745] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 563.995697][T11745] vfs_read+0x219/0xa90 [ 563.995731][T11745] ? __pfx_vfs_read+0x10/0x10 [ 563.995759][T11745] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 563.995783][T11745] ? lockdep_hardirqs_on+0x7a/0x110 [ 563.995806][T11745] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 563.995828][T11745] ? mutex_lock_nested+0x152/0x1d0 [ 563.995858][T11745] ? fdget_pos+0x252/0x320 [ 563.995891][T11745] ksys_read+0x156/0x270 [ 563.995919][T11745] ? __pfx_ksys_read+0x10/0x10 [ 563.995957][T11745] do_syscall_64+0x17b/0x530 [ 563.995980][T11745] ? irqentry_exit+0x10f/0x8f0 [ 563.996001][T11745] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.996024][T11745] ? clear_bhb_loop+0x40/0x90 [ 563.996053][T11745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.996074][T11745] RIP: 0033:0x7f83d769e6ce [ 563.996095][T11745] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 563.996116][T11745] RSP: 002b:00007f83d5935fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 563.996139][T11745] RAX: ffffffffffffffda RBX: 00007f83d59366c0 RCX: 00007f83d769e6ce [ 563.996157][T11745] RDX: 000000000000000f RSI: 00007f83d59360a0 RDI: 0000000000000006 [ 563.996171][T11745] RBP: 00007f83d5936090 R08: 0000000000000000 R09: 0000000000000000 [ 563.996186][T11745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 563.996199][T11745] R13: 00007f83d7966038 R14: 00007f83d7965fa0 R15: 00007fffb6413cc8 [ 563.996233][T11745] [ 564.600422][T11748] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 564.675439][T11593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 564.971305][T11593] veth0_vlan: entered promiscuous mode [ 565.019911][T11593] veth1_vlan: entered promiscuous mode [ 565.134688][ T32] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 565.154348][T11593] veth0_macvtap: entered promiscuous mode [ 565.204656][ T5604] usb 4-1: new full-speed USB device number 123 using dummy_hcd [ 565.230229][T11593] veth1_macvtap: entered promiscuous mode [ 565.284921][ T32] usb 2-1: Using ep0 maxpacket: 32 [ 565.287105][ T32] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 565.287131][ T32] usb 2-1: config 0 has no interface number 0 [ 565.306877][ T32] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 565.306912][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.306934][ T32] usb 2-1: Product: syz [ 565.306950][ T32] usb 2-1: Manufacturer: syz [ 565.306966][ T32] usb 2-1: SerialNumber: syz [ 565.355029][T11593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 565.416122][ T32] usb 2-1: config 0 descriptor?? [ 565.431839][ T32] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 565.431950][ T32] usb 2-1: selecting invalid altsetting 1 [ 565.431970][ T32] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 565.467503][ T32] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 565.468044][ T32] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 565.468103][ T32] usb 2-1: media controller created [ 565.503004][ T5604] usb 4-1: config 0 has too many interfaces: 34, using maximum allowed: 32 [ 565.503035][ T5604] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 34 [ 565.503075][ T5604] usb 4-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 565.503118][ T5604] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 565.503145][ T5604] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 565.503174][ T5604] usb 4-1: config 0 interface 0 has no altsetting 0 [ 565.503221][ T5604] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0a1a, bcdDevice= 0.00 [ 565.503247][ T5604] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.589654][ T5831] usb 1-1: USB disconnect, device number 113 [ 565.638775][ T32] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 565.642740][ T5604] usb 4-1: config 0 descriptor?? [ 565.643741][T11761] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 566.038714][T11593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 566.082834][ T5604] hid-corsair-void 0003:1B1C:0A1A.0030: unknown main item tag 0x0 [ 566.082876][ T5604] hid-corsair-void 0003:1B1C:0A1A.0030: unknown main item tag 0x0 [ 566.082909][ T5604] hid-corsair-void 0003:1B1C:0A1A.0030: unknown main item tag 0x0 [ 566.082929][ T5604] hid-corsair-void 0003:1B1C:0A1A.0030: unknown main item tag 0x0 [ 566.082964][ T5604] hid-corsair-void 0003:1B1C:0A1A.0030: unknown main item tag 0x0 [ 566.082993][ T5604] hid-corsair-void 0003:1B1C:0A1A.0030: unknown main item tag 0x0 [ 566.083023][ T5604] hid-corsair-void 0003:1B1C:0A1A.0030: unknown main item tag 0x0 [ 566.100887][ T5604] hid-corsair-void 0003:1B1C:0A1A.0030: unknown main item tag 0x0 [ 566.100949][ T5604] hid-corsair-void 0003:1B1C:0A1A.0030: unknown main item tag 0x0 [ 566.101027][ T5604] hid-corsair-void 0003:1B1C:0A1A.0030: unknown main item tag 0x0 [ 566.289815][ T5604] hid-corsair-void 0003:1B1C:0A1A.0030: hidraw0: USB HID v0.01 Device [HID 1b1c:0a1a] on usb-dummy_hcd.3-1/input0 [ 566.345205][T11044] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.453004][T11044] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.458121][T11044] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.481631][T11044] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.901524][ T37] usb 4-1: USB disconnect, device number 123 [ 566.902056][ T10] hid-corsair-void 0003:1B1C:0A1A.0030: failed to request firmware (reason: -71) [ 566.913311][ T5604] hid-corsair-void 0003:1B1C:0A1A.0030: failed to request battery (reason: -71) [ 566.914668][ T9] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 567.146482][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 567.172308][ T9] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 567.172337][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 567.194701][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 567.194746][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 567.194769][ T9] usb 1-1: SerialNumber: syz [ 567.375596][ T9] usb 1-1: 0:2 : does not exist [ 568.040856][ T9] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 568.098658][ T9] usb 1-1: 5:0: failed to get current value for ch 2 (-22) [ 568.134046][ T32] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 568.163748][ T9] usb 1-1: 5:0: failed to get current value for ch 3 (-22) [ 568.279339][ T9] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 568.455914][ T9] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 568.455945][ T9] usb 1-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 568.455965][ T9] usb 1-1: [5] FU [Feature 5 Playback Volume] ch = 3, val = 0/1/1 [ 568.546512][ T9] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 568.546542][ T9] usb 1-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 568.546560][ T9] usb 1-1: [5] FU [Feature 5 Playback Volume] ch = 1, val = 0/1/1 [ 568.629435][ T9] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 568.669257][ T9] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 568.708405][ T9] usb 1-1: 5:0: cannot get min/max values for control 4 (id 5) [ 568.737142][ T9] usb 1-1: 5:0: cannot get min/max values for control 4 (id 5) [ 568.760719][ T32] usb 2-1: USB disconnect, device number 111 [ 568.765865][ T9] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 568.938163][ T5674] hid-generic 0000:0000:0000.0031: hidraw0: HID v0.00 Device [syz1] on syz0 [ 569.012437][ T9] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 569.108152][ T9] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 569.189074][ T9] usb 1-1: 5:0: failed to get current value for ch 2 (-22) [ 569.229947][ T9] usb 1-1: 5:0: failed to get current value for ch 3 (-22) [ 569.348405][ T9] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 569.420956][ T9] usb 1-1: 5:0: cannot get min/max values for control 8 (id 5) [ 569.532459][ T9] usb 1-1: 5:0: cannot get min/max values for control 8 (id 5) [ 569.863894][ T9] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 569.992006][ T9] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 570.102638][ T9] usb 1-1: USB disconnect, device number 114 [ 570.212063][ T38] audit: type=1326 audit(1785387895.277:196): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11790 comm="syz.3.1926" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f29869cde99 code=0x0 [ 570.283282][T11044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.283304][T11044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.548507][T11793] loop3: detected capacity change from 0 to 7 [ 570.740313][T11793] Dev loop3: unable to read RDB block 7 [ 570.740360][T11793] loop3: unable to read partition table [ 570.740693][T11793] loop3: partition table beyond EOD, truncated [ 570.740751][T11793] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 570.977951][T11799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1928'. [ 571.009568][T11790] Flush: task=syz.3.1926[11790] dev=loop3 state=2 [ 571.018753][T11044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 571.018775][T11044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 571.127894][T11790] Teardown: task=syz.3.1926[11790] dev=loop3 state=2 [ 571.184781][ T5701] usb 2-1: new full-speed USB device number 112 using dummy_hcd [ 571.224731][ T9] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 571.337159][ T5701] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 571.337197][ T5701] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 571.337245][ T5701] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 571.337271][ T5701] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.392170][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 571.400880][ T5701] usb 2-1: config 0 descriptor?? [ 571.440883][ T5701] uvcvideo 2-1:0.0: Found UVC 0.00 device (10c4:ea90) [ 571.440991][ T5701] uvcvideo 2-1:0.0: No valid video chain found. [ 571.489516][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 571.489549][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.489570][ T9] usb 1-1: Product: syz [ 571.489587][ T9] usb 1-1: Manufacturer: syz [ 571.489604][ T9] usb 1-1: SerialNumber: syz [ 571.498340][ T9] usb 1-1: config 0 descriptor?? [ 571.623799][ T5674] usb 2-1: USB disconnect, device number 112 [ 571.792937][ T9] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 571.973511][T11805] syzkaller1: entered promiscuous mode [ 571.973608][T11805] syzkaller1: entered allmulticast mode [ 572.047648][T11809] netlink: 'syz.2.1930': attribute type 1 has an invalid length. [ 572.047689][T11809] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 572.504721][T11772] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 572.600339][T11813] kvm: pic: non byte write [ 572.677534][T11772] usb 2-1: Using ep0 maxpacket: 32 [ 572.679792][T11772] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 572.679869][T11772] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 572.679900][T11772] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 572.679917][T11772] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.737410][T11772] usb 2-1: config 0 descriptor?? [ 572.756837][T11772] hub 2-1:0.0: bad descriptor, ignoring hub [ 572.756879][T11772] hub 2-1:0.0: probe with driver hub failed with error -5 [ 572.764339][T11772] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 573.054634][ T5674] usb 3-1: new low-speed USB device number 57 using dummy_hcd [ 573.184662][ T5674] usb 3-1: device descriptor read/64, error -71 [ 573.306082][T11772] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 573.434117][ T5674] usb 3-1: new low-speed USB device number 58 using dummy_hcd [ 573.472863][ T9] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 573.485347][T11772] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 573.485409][T11772] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 573.485436][T11772] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.494352][ T9] usb 1-1: USB disconnect, device number 115 [ 573.541957][T11772] usb 4-1: config 0 descriptor?? [ 573.599739][T11772] pwc: Askey VC010 type 2 USB webcam detected. [ 573.604674][ T5674] usb 3-1: device descriptor read/64, error -71 [ 573.715321][ T5674] usb usb3-port1: attempt power cycle [ 573.768748][T11772] pwc: recv_control_msg error -32 req 02 val 2b00 [ 573.769721][T11772] pwc: recv_control_msg error -32 req 02 val 2700 [ 573.913820][ T5701] hid_parser_main: 31 callbacks suppressed [ 573.913849][ T5701] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 573.966955][ T5701] hid-generic 0000:0000:0000.0032: hidraw0: HID v0.00 Device [syz1] on syz0 [ 574.094848][ T5674] usb 3-1: new low-speed USB device number 59 using dummy_hcd [ 574.117926][ T5674] usb 3-1: device descriptor read/8, error -71 [ 574.324462][T11827] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 574.354694][ T5674] usb 3-1: new low-speed USB device number 60 using dummy_hcd [ 574.398299][ T5674] usb 3-1: device descriptor read/8, error -71 [ 574.505507][ T5674] usb usb3-port1: unable to enumerate USB device [ 574.687032][T11831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.716652][T11831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.786758][T11832] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1937'. [ 574.824769][T11831] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1937'. [ 575.416404][ T5793] usb 2-1: USB disconnect, device number 113 [ 575.918100][ T5793] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 575.984905][ T5793] hid-generic 0000:0000:0000.0033: hidraw0: HID v0.00 Device [syz1] on syz0 [ 576.594659][ T5793] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 576.724785][ T5793] usb 1-1: device descriptor read/64, error -71 [ 576.936814][T11877] openvswitch: netlink: Missing key (keys=c0, expected=200000) [ 576.965000][ T5793] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 577.096645][ T5793] usb 1-1: device descriptor read/64, error -71 [ 577.205072][ T5793] usb usb1-port1: attempt power cycle [ 577.321623][ T60] Bluetooth: hci0: unexpected event for opcode 0x0809 [ 577.322288][ T60] Bluetooth: hci0: unexpected event for opcode 0x0809 [ 577.425600][ T5604] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 577.554708][ T5793] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 577.576990][ T5793] usb 1-1: device descriptor read/8, error -71 [ 577.584956][ T5604] usb 3-1: Using ep0 maxpacket: 8 [ 577.595283][ T5604] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 577.595391][ T5604] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 577.595421][ T5604] usb 3-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 577.595450][ T5604] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 577.595703][ T5604] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 577.595733][ T5604] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 577.595783][ T5604] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 577.596034][ T5604] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.816495][ T5793] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 577.836075][ T5793] usb 1-1: device descriptor read/8, error -71 [ 577.913037][ T5604] usb 3-1: GET_CAPABILITIES returned 0 [ 577.913191][ T5604] usbtmc 3-1:16.0: can't read capabilities [ 577.950105][ T5793] usb usb1-port1: unable to enumerate USB device [ 578.082515][T11902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.114325][T11902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.131773][ T38] audit: type=1326 audit(1785387903.197:197): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11882 comm="syz.2.1954" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d6a96de99 code=0x7ffc0000 [ 578.132234][ T38] audit: type=1326 audit(1785387903.197:198): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11882 comm="syz.2.1954" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d6a96de99 code=0x7ffc0000 [ 578.132543][ T38] audit: type=1326 audit(1785387903.197:199): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11882 comm="syz.2.1954" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6d6a92e6ce code=0x7ffc0000 [ 578.134024][ T38] audit: type=1326 audit(1785387903.197:200): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11882 comm="syz.2.1954" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6d6a96db2b code=0x7ffc0000 [ 578.235296][ T38] audit: type=1326 audit(1785387903.197:201): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11882 comm="syz.2.1954" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6d6a96db2b code=0x7ffc0000 [ 578.260689][T11883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.271117][T11883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.273030][ T38] audit: type=1326 audit(1785387903.337:202): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11882 comm="syz.2.1954" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d6a96de99 code=0x7ffc0000 [ 578.275221][ T38] audit: type=1326 audit(1785387903.347:203): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11882 comm="syz.2.1954" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d6a96de99 code=0x7ffc0000 [ 578.286348][ T38] audit: type=1326 audit(1785387903.357:204): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11882 comm="syz.2.1954" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f6d6a96de99 code=0x7ffc0000 [ 578.287327][ T38] audit: type=1326 audit(1785387903.357:205): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11882 comm="syz.2.1954" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d6a96de99 code=0x7ffc0000 [ 578.288527][ T38] audit: type=1326 audit(1785387903.357:206): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11882 comm="syz.2.1954" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f6d6a96de99 code=0x7ffc0000 [ 578.426623][T11883] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 578.477400][ T5793] usb 3-1: USB disconnect, device number 61 [ 578.705337][T11906] openvswitch: netlink: Flow key attr not present in new flow. [ 578.785647][T11772] pwc: recv_control_msg error -110 req 02 val 2c00 [ 578.786190][T11772] pwc: recv_control_msg error -32 req 04 val 1000 [ 578.787938][T11772] pwc: recv_control_msg error -32 req 04 val 1300 [ 578.788468][T11772] pwc: recv_control_msg error -32 req 04 val 1400 [ 578.788952][T11772] pwc: recv_control_msg error -32 req 02 val 2000 [ 578.789455][T11772] pwc: recv_control_msg error -32 req 02 val 2100 [ 578.791213][T11772] pwc: recv_control_msg error -32 req 04 val 1500 [ 578.792523][T11772] pwc: recv_control_msg error -32 req 02 val 2500 [ 578.793035][T11772] pwc: recv_control_msg error -32 req 02 val 2400 [ 578.793540][T11772] pwc: recv_control_msg error -32 req 02 val 2600 [ 578.794023][T11772] pwc: recv_control_msg error -32 req 02 val 2900 [ 578.804095][T11772] pwc: recv_control_msg error -32 req 02 val 2800 [ 578.853175][T11772] pwc: recv_control_msg error -32 req 04 val 1100 [ 578.888270][T11772] pwc: recv_control_msg error -32 req 04 val 1200 [ 578.906145][T11772] pwc: Registered as video103. [ 578.921847][T11772] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input27 [ 579.416698][ T37] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 579.423285][ T37] hid-generic 0000:0000:0000.0034: hidraw0: HID v0.00 Device [syz1] on syz0 [ 579.425025][ T5793] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 579.575458][ T5793] usb 3-1: device descriptor read/64, error -71 [ 579.604247][T11922] FAULT_INJECTION: forcing a failure. [ 579.604247][T11922] name failslab, interval 1, probability 0, space 0, times 0 [ 579.604287][T11922] CPU: 0 UID: 0 PID: 11922 Comm: syz.1.1966 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 579.604318][T11922] Tainted: [L]=SOFTLOCKUP [ 579.604327][T11922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 579.604342][T11922] Call Trace: [ 579.604352][T11922] [ 579.604362][T11922] dump_stack_lvl+0xe8/0x150 [ 579.604397][T11922] should_fail_ex+0x467/0x600 [ 579.604432][T11922] should_failslab+0xa8/0x100 [ 579.604457][T11922] __kmalloc_cache_noprof+0xa1/0x670 [ 579.604494][T11922] ? kobject_uevent_env+0x28c/0x9e0 [ 579.604524][T11922] ? kobject_uevent_env+0x28c/0x9e0 [ 579.604572][T11922] kobject_uevent_env+0x28c/0x9e0 [ 579.604610][T11922] swnode_register+0x4f2/0x590 [ 579.604639][T11922] fwnode_create_software_node+0x194/0x1f0 [ 579.604668][T11922] device_create_managed_software_node+0xce/0x1f0 [ 579.604697][T11922] iommufd_test+0x35e3/0x5fd0 [ 579.604739][T11922] ? __lock_acquire+0x6df/0x2e40 [ 579.604760][T11922] ? __pfx_iommufd_test+0x10/0x10 [ 579.604797][T11922] ? kasan_quarantine_put+0xbb/0x1f0 [ 579.604839][T11922] ? tomoyo_path_number_perm+0x219/0x5f0 [ 579.604875][T11922] ? lock_acquire+0x115/0x350 [ 579.604935][T11922] iommufd_fops_ioctl+0x468/0x600 [ 579.604966][T11922] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 579.605004][T11922] ? __fget_files+0x3a8/0x420 [ 579.605028][T11922] ? __fget_files+0x2a/0x420 [ 579.605055][T11922] ? bpf_lsm_file_ioctl+0x9/0x20 [ 579.605091][T11922] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 579.605114][T11922] __se_sys_ioctl+0xff/0x170 [ 579.605146][T11922] do_syscall_64+0x17b/0x530 [ 579.605170][T11922] ? irqentry_exit+0x10f/0x8f0 [ 579.605192][T11922] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.605215][T11922] ? clear_bhb_loop+0x40/0x90 [ 579.605244][T11922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.605268][T11922] RIP: 0033:0x7f83d76dde99 [ 579.605289][T11922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 579.605310][T11922] RSP: 002b:00007f83d5936028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 579.605350][T11922] RAX: ffffffffffffffda RBX: 00007f83d7965fa0 RCX: 00007f83d76dde99 [ 579.605368][T11922] RDX: 00002000000001c0 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 579.605383][T11922] RBP: 00007f83d5936090 R08: 0000000000000000 R09: 0000000000000000 [ 579.605398][T11922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 579.605412][T11922] R13: 00007f83d7966038 R14: 00007f83d7965fa0 R15: 00007fffb6413cc8 [ 579.605447][T11922] [ 579.727352][T11922] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 580.066131][T11924] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 580.094786][ T5793] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 580.169775][T11928] geneve0: entered promiscuous mode [ 580.225898][ T5793] usb 3-1: device descriptor read/64, error -71 [ 580.336057][ T5793] usb usb3-port1: attempt power cycle [ 580.394358][T11936] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1971'. [ 580.424277][T11936] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1971'. [ 580.496747][T11929] geneve0: left promiscuous mode [ 580.679581][ T5793] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 580.713800][ T5793] usb 3-1: device descriptor read/8, error -71 [ 580.945548][ T5793] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 580.965636][ T5793] usb 3-1: device descriptor read/8, error -71 [ 581.083278][ T5793] usb usb3-port1: unable to enumerate USB device [ 581.205118][T11772] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 581.357691][T11772] usb 2-1: unable to get BOS descriptor or descriptor too short [ 581.367907][T11772] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 581.372665][T11772] usb 2-1: string descriptor 0 read error: -22 [ 581.372791][T11772] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 581.372810][T11772] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.425023][ T5793] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 581.574634][ T5793] usb 1-1: Using ep0 maxpacket: 16 [ 581.577221][ T5793] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 581.577326][ T5793] usb 1-1: config 1 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 581.577358][ T5793] usb 1-1: config 1 interface 0 has no altsetting 1 [ 581.580699][ T5793] usb 1-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40 [ 581.580732][ T5793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.580756][ T5793] usb 1-1: Product: syz [ 581.580773][ T5793] usb 1-1: Manufacturer: syz [ 581.580790][ T5793] usb 1-1: SerialNumber: syz [ 582.484045][ T5793] snd-ua101 1-1:1.1: sample format descriptor not found [ 582.484089][ T5793] snd-ua101 1-1:1.0: invalid bNumEndpoints [ 582.796455][ T5793] usb 1-1: USB disconnect, device number 120 [ 583.494704][ T60] Bluetooth: hci0: command 0x0c1a tx timeout [ 583.494928][T11956] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 584.283238][T11956] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 584.283393][T11956] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 584.284130][T11956] ================================================================== [ 584.284142][T11956] BUG: KASAN: slab-use-after-free in rt_spin_lock+0x83/0x400 [ 584.284172][T11956] Read of size 1 at addr ffff88802ae747e8 by task syz.3.1979/11956 [ 584.284186][T11956] [ 584.284198][T11956] CPU: 1 UID: 0 PID: 11956 Comm: syz.3.1979 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 584.284221][T11956] Tainted: [L]=SOFTLOCKUP [ 584.284228][T11956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 584.284239][T11956] Call Trace: [ 584.284247][T11956] [ 584.284254][T11956] dump_stack_lvl+0xe8/0x150 [ 584.284277][T11956] print_address_description+0x55/0x1e0 [ 584.284334][T11956] ? rt_spin_lock+0x83/0x400 [ 584.284363][T11956] print_report+0x58/0x70 [ 584.284394][T11956] kasan_report+0x117/0x150 [ 584.284417][T11956] ? rt_spin_lock+0x83/0x400 [ 584.284451][T11956] __kasan_check_byte+0x2a/0x40 [ 584.284494][T11956] lock_acquire+0x7d/0x350 [ 584.284559][T11956] ? lock_acquire+0x115/0x350 [ 584.284587][T11956] rt_spin_lock+0x83/0x400 [ 584.284608][T11956] ? bt_accept_unlink+0x7d/0x2f0 [ 584.284625][T11956] ? __pfx_rt_spin_lock+0x10/0x10 [ 584.284646][T11956] ? rcu_is_watching+0x15/0xb0 [ 584.284664][T11956] ? __local_bh_disable_ip+0x3c/0x420 [ 584.284683][T11956] ? bt_accept_unlink+0x61/0x2f0 [ 584.284700][T11956] bt_accept_unlink+0x7d/0x2f0 [ 584.284716][T11956] ? bt_accept_unlink+0x61/0x2f0 [ 584.284733][T11956] l2cap_sock_teardown_cb+0x17e/0x490 [ 584.284760][T11956] l2cap_chan_del+0x98/0x600 [ 584.284786][T11956] l2cap_conn_del+0x2f2/0x520 [ 584.284810][T11956] l2cap_connect_cfm+0x12b/0x1620 [ 584.284835][T11956] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 584.284856][T11956] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 584.284872][T11956] ? lockdep_hardirqs_on+0x7a/0x110 [ 584.284887][T11956] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 584.284903][T11956] ? mutex_lock_nested+0x152/0x1d0 [ 584.284942][T11956] ? hci_conn_failed+0x149/0x320 [ 584.284961][T11956] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 584.284988][T11956] hci_conn_failed+0x1b2/0x320 [ 584.285010][T11956] ? hci_abort_conn_sync+0xa7b/0x1190 [ 584.285030][T11956] hci_abort_conn_sync+0xdd0/0x1190 [ 584.285053][T11956] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 584.285072][T11956] ? hci_disconnect_all_sync+0x2e/0x350 [ 584.285096][T11956] ? hci_disconnect_all_sync+0x2e/0x350 [ 584.285117][T11956] ? hci_disconnect_all_sync+0x2e/0x350 [ 584.285138][T11956] hci_disconnect_all_sync+0x1b5/0x350 [ 584.285161][T11956] hci_suspend_sync+0x40f/0xca0 [ 584.285184][T11956] ? __pfx_hci_suspend_sync+0x10/0x10 [ 584.285205][T11956] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 584.285221][T11956] ? lockdep_hardirqs_on+0x7a/0x110 [ 584.285236][T11956] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 584.285251][T11956] ? mutex_lock_nested+0x152/0x1d0 [ 584.285272][T11956] ? hci_suspend_dev+0x286/0x530 [ 584.285288][T11956] hci_suspend_dev+0x28e/0x530 [ 584.285302][T11956] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 584.285318][T11956] ? __pfx_hci_suspend_dev+0x10/0x10 [ 584.285337][T11956] hci_suspend_notifier+0xf2/0x2f0 [ 584.285354][T11956] notifier_call_chain+0x1a5/0x3d0 [ 584.285378][T11956] blocking_notifier_call_chain_robust+0x85/0x100 [ 584.285403][T11956] pm_notifier_call_chain_robust+0x2c/0x60 [ 584.285431][T11956] snapshot_open+0x1a2/0x290 [ 584.285473][T11956] ? __pfx_snapshot_open+0x10/0x10 [ 584.285495][T11956] misc_open+0x2de/0x350 [ 584.285536][T11956] chrdev_open+0x4dc/0x600 [ 584.285572][T11956] ? __pfx_chrdev_open+0x10/0x10 [ 584.285610][T11956] ? __pfx_chrdev_open+0x10/0x10 [ 584.285632][T11956] do_dentry_open+0x849/0x1420 [ 584.285661][T11956] vfs_open+0x3b/0x350 [ 584.285684][T11956] ? path_openat+0x2e4d/0x3850 [ 584.285705][T11956] path_openat+0x2e64/0x3850 [ 584.285728][T11956] ? __kasan_slab_alloc+0x6c/0x80 [ 584.285752][T11956] ? do_sys_openat2+0xcc/0x200 [ 584.285776][T11956] ? __x64_sys_openat+0x138/0x170 [ 584.285807][T11956] ? do_syscall_64+0x17b/0x530 [ 584.285831][T11956] do_file_open+0x23e/0x4a0 [ 584.285850][T11956] ? lockdep_hardirqs_on+0x7a/0x110 [ 584.285867][T11956] ? __pfx_do_file_open+0x10/0x10 [ 584.285901][T11956] ? alloc_fd+0x654/0x6d0 [ 584.285919][T11956] do_sys_openat2+0x115/0x200 [ 584.285946][T11956] ? __pfx_do_sys_openat2+0x10/0x10 [ 584.285972][T11956] ? __fget_files+0x3a8/0x420 [ 584.285987][T11956] ? __pfx___se_sys_futex+0x10/0x10 [ 584.286011][T11956] __x64_sys_openat+0x138/0x170 [ 584.286038][T11956] do_syscall_64+0x17b/0x530 [ 584.286054][T11956] ? irqentry_exit+0x10f/0x8f0 [ 584.286069][T11956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.286085][T11956] ? clear_bhb_loop+0x40/0x90 [ 584.286103][T11956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.286120][T11956] RIP: 0033:0x7f29869cde99 [ 584.286136][T11956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 584.286150][T11956] RSP: 002b:00007f2984c26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 584.286168][T11956] RAX: ffffffffffffffda RBX: 00007f2986c55fa0 RCX: 00007f29869cde99 [ 584.286181][T11956] RDX: 0000000000000400 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 584.286193][T11956] RBP: 00007f2986a63eaf R08: 0000000000000000 R09: 0000000000000000 [ 584.286203][T11956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 584.286214][T11956] R13: 00007f2986c56038 R14: 00007f2986c55fa0 R15: 00007ffe57a4ba88 [ 584.286232][T11956] [ 584.286239][T11956] [ 584.286250][T11956] Allocated by task 48: [ 584.286260][T11956] kasan_save_track+0x3e/0x80 [ 584.286283][T11956] __kasan_kmalloc+0x93/0xb0 [ 584.286306][T11956] __kmalloc_node_track_caller_noprof+0x566/0x7b0 [ 584.286331][T11956] __alloc_skb+0x2bd/0x7a0 [ 584.286351][T11956] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 584.286376][T11956] process_one_work+0xaaf/0x1480 [ 584.286390][T11956] worker_thread+0xb05/0x10d0 [ 584.286406][T11956] kthread+0x388/0x470 [ 584.286425][T11956] ret_from_fork+0x514/0xb70 [ 584.286447][T11956] ret_from_fork_asm+0x1a/0x30 [ 584.286468][T11956] [ 584.286472][T11956] Freed by task 48: [ 584.286479][T11956] kasan_save_track+0x3e/0x80 [ 584.286500][T11956] kasan_save_free_info+0x40/0x50 [ 584.286525][T11956] __kasan_slab_free+0x5c/0x80 [ 584.286547][T11956] kfree+0x1c5/0x6c0 [ 584.286566][T11956] skb_release_data+0x85e/0xab0 [ 584.286588][T11956] __kfree_skb+0x5d/0x210 [ 584.286631][T11956] nsim_dev_trap_report_work+0x879/0xcb0 [ 584.286664][T11956] process_one_work+0xaaf/0x1480 [ 584.286684][T11956] worker_thread+0xb05/0x10d0 [ 584.286707][T11956] kthread+0x388/0x470 [ 584.286735][T11956] ret_from_fork+0x514/0xb70 [ 584.286768][T11956] ret_from_fork_asm+0x1a/0x30 [ 584.286789][T11956] [ 584.286793][T11956] The buggy address belongs to the object at ffff88802ae74000 [ 584.286793][T11956] which belongs to the cache kmalloc-4k of size 4096 [ 584.286808][T11956] The buggy address is located 2024 bytes inside of [ 584.286808][T11956] freed 4096-byte region [ffff88802ae74000, ffff88802ae75000) [ 584.286825][T11956] [ 584.286830][T11956] The buggy address belongs to the physical page: [ 584.286844][T11956] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2ae70 [ 584.286859][T11956] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 584.286873][T11956] flags: 0x80000000000040(head|node=0|zone=1) [ 584.286890][T11956] page_type: f5(slab) [ 584.286909][T11956] raw: 0080000000000040 ffff88813fe3c140 dead000000000100 dead000000000122 [ 584.286924][T11956] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 584.286940][T11956] head: 0080000000000040 ffff88813fe3c140 dead000000000100 dead000000000122 [ 584.286955][T11956] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 584.286970][T11956] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 584.286984][T11956] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 584.286993][T11956] page dumped because: kasan: bad access detected [ 584.287006][T11956] page_owner tracks the page as allocated [ 584.287013][T11956] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 15110912119 [ 584.287040][T11956] post_alloc_hook+0x1f9/0x250 [ 584.287061][T11956] get_page_from_freelist+0x264c/0x26c0 [ 584.287086][T11956] __alloc_frozen_pages_noprof+0x222/0x5b0 [ 584.287112][T11956] allocate_slab+0x7c/0x5e0 [ 584.287128][T11956] refill_objects+0x2d8/0x350 [ 584.287145][T11956] __pcs_replace_empty_main+0x330/0x690 [ 584.287161][T11956] __kmalloc_cache_noprof+0x467/0x670 [ 584.287184][T11956] kobject_uevent_env+0x28c/0x9e0 [ 584.287204][T11956] device_add+0x544/0xb80 [ 584.287219][T11956] platform_device_add+0x4bd/0x860 [ 584.287233][T11956] dummy_hcd_init+0x667/0xd00 [ 584.287250][T11956] do_one_initcall+0x250/0x870 [ 584.287269][T11956] do_initcall_level+0x10a/0x1a0 [ 584.287315][T11956] do_initcalls+0x59/0xa0 [ 584.287332][T11956] kernel_init_freeable+0x29d/0x3e0 [ 584.287350][T11956] kernel_init+0x22/0x1d0 [ 584.287368][T11956] page last free pid 102 tgid 102 ts 15016723432 stack trace: [ 584.287380][T11956] free_pages_prepare+0x9c0/0xac0 [ 584.287400][T11956] __free_contig_range_common+0x174/0x340 [ 584.287417][T11956] free_pages_bulk+0x48/0x120 [ 584.287440][T11956] vfree+0x26f/0x510 [ 584.287458][T11956] delayed_vfree_work+0x55/0x80 [ 584.287480][T11956] process_one_work+0xaaf/0x1480 [ 584.287494][T11956] worker_thread+0xb05/0x10d0 [ 584.287516][T11956] kthread+0x388/0x470 [ 584.287536][T11956] ret_from_fork+0x514/0xb70 [ 584.287556][T11956] ret_from_fork_asm+0x1a/0x30 [ 584.287581][T11956] [ 584.287585][T11956] Memory state around the buggy address: [ 584.287594][T11956] ffff88802ae74680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 584.287605][T11956] ffff88802ae74700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 584.287616][T11956] >ffff88802ae74780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 584.287624][T11956] ^ [ 584.287634][T11956] ffff88802ae74800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 584.287645][T11956] ffff88802ae74880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 584.287653][T11956] ================================================================== [ 584.309451][T11956] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 584.309488][T11956] CPU: 1 UID: 0 PID: 11956 Comm: syz.3.1979 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 584.309614][T11956] Tainted: [L]=SOFTLOCKUP [ 584.309644][T11956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 584.309707][T11956] Call Trace: [ 584.309730][T11956] [ 584.309753][T11956] vpanic+0x56c/0xa60 [ 584.309838][T11956] ? __pfx_vpanic+0x10/0x10 [ 584.309901][T11956] ? __pfx___schedule+0x10/0x10 [ 584.310012][T11956] panic+0xc5/0xd0 [ 584.310068][T11956] ? __pfx_panic+0x10/0x10 [ 584.310132][T11956] ? preempt_schedule_thunk+0x16/0x40 [ 584.310200][T11956] ? rt_spin_lock+0x83/0x400 [ 584.310277][T11956] check_panic_on_warn+0x89/0xb0 [ 584.310370][T11956] ? rt_spin_lock+0x83/0x400 [ 584.310431][T11956] end_report+0x73/0x170 [ 584.310494][T11956] ? rt_spin_lock+0x83/0x400 [ 584.310579][T11956] kasan_report+0x128/0x150 [ 584.310635][T11956] ? rt_spin_lock+0x83/0x400 [ 584.310727][T11956] __kasan_check_byte+0x2a/0x40 [ 584.310832][T11956] lock_acquire+0x7d/0x350 [ 584.310941][T11956] ? lock_acquire+0x115/0x350 [ 584.311070][T11956] rt_spin_lock+0x83/0x400 [ 584.311147][T11956] ? bt_accept_unlink+0x7d/0x2f0 [ 584.311214][T11956] ? __pfx_rt_spin_lock+0x10/0x10 [ 584.311298][T11956] ? rcu_is_watching+0x15/0xb0 [ 584.311363][T11956] ? __local_bh_disable_ip+0x3c/0x420 [ 584.311428][T11956] ? bt_accept_unlink+0x61/0x2f0 [ 584.311493][T11956] bt_accept_unlink+0x7d/0x2f0 [ 584.311573][T11956] ? bt_accept_unlink+0x61/0x2f0 [ 584.311631][T11956] l2cap_sock_teardown_cb+0x17e/0x490 [ 584.311735][T11956] l2cap_chan_del+0x98/0x600 [ 584.311833][T11956] l2cap_conn_del+0x2f2/0x520 [ 584.311927][T11956] l2cap_connect_cfm+0x12b/0x1620 [ 584.312009][T11956] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 584.312033][T11956] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 584.312052][T11956] ? lockdep_hardirqs_on+0x7a/0x110 [ 584.312072][T11956] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 584.312117][T11956] ? mutex_lock_nested+0x152/0x1d0 [ 584.312194][T11956] ? hci_conn_failed+0x149/0x320 [ 584.312269][T11956] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 584.312374][T11956] hci_conn_failed+0x1b2/0x320 [ 584.312462][T11956] ? hci_abort_conn_sync+0xa7b/0x1190 [ 584.312548][T11956] hci_abort_conn_sync+0xdd0/0x1190 [ 584.312633][T11956] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 584.312708][T11956] ? hci_disconnect_all_sync+0x2e/0x350 [ 584.312794][T11956] ? hci_disconnect_all_sync+0x2e/0x350 [ 584.312873][T11956] ? hci_disconnect_all_sync+0x2e/0x350 [ 584.312958][T11956] hci_disconnect_all_sync+0x1b5/0x350 [ 584.313031][T11956] hci_suspend_sync+0x40f/0xca0 [ 584.313119][T11956] ? __pfx_hci_suspend_sync+0x10/0x10 [ 584.313197][T11956] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 584.313260][T11956] ? lockdep_hardirqs_on+0x7a/0x110 [ 584.313316][T11956] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 584.313365][T11956] ? mutex_lock_nested+0x152/0x1d0 [ 584.313436][T11956] ? hci_suspend_dev+0x286/0x530 [ 584.313538][T11956] hci_suspend_dev+0x28e/0x530 [ 584.313592][T11956] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 584.313657][T11956] ? __pfx_hci_suspend_dev+0x10/0x10 [ 584.313732][T11956] hci_suspend_notifier+0xf2/0x2f0 [ 584.313818][T11956] notifier_call_chain+0x1a5/0x3d0 [ 584.313914][T11956] blocking_notifier_call_chain_robust+0x85/0x100 [ 584.314003][T11956] pm_notifier_call_chain_robust+0x2c/0x60 [ 584.314104][T11956] snapshot_open+0x1a2/0x290 [ 584.314169][T11956] ? __pfx_snapshot_open+0x10/0x10 [ 584.314233][T11956] misc_open+0x2de/0x350 [ 584.314322][T11956] chrdev_open+0x4dc/0x600 [ 584.314404][T11956] ? __pfx_chrdev_open+0x10/0x10 [ 584.314480][T11956] ? __pfx_chrdev_open+0x10/0x10 [ 584.314518][T11956] do_dentry_open+0x849/0x1420 [ 584.314557][T11956] vfs_open+0x3b/0x350 [ 584.314588][T11956] ? path_openat+0x2e4d/0x3850 [ 584.314647][T11956] path_openat+0x2e64/0x3850 [ 584.314739][T11956] ? __kasan_slab_alloc+0x6c/0x80 [ 584.314835][T11956] ? do_sys_openat2+0xcc/0x200 [ 584.314982][T11956] ? __x64_sys_openat+0x138/0x170 [ 584.315156][T11956] ? do_syscall_64+0x17b/0x530 [ 584.315244][T11956] do_file_open+0x23e/0x4a0 [ 584.315319][T11956] ? lockdep_hardirqs_on+0x7a/0x110 [ 584.315384][T11956] ? __pfx_do_file_open+0x10/0x10 [ 584.315455][T11956] ? alloc_fd+0x654/0x6d0 [ 584.315480][T11956] do_sys_openat2+0x115/0x200 [ 584.315523][T11956] ? __pfx_do_sys_openat2+0x10/0x10 [ 584.315561][T11956] ? __fget_files+0x3a8/0x420 [ 584.315584][T11956] ? __pfx___se_sys_futex+0x10/0x10 [ 584.315614][T11956] __x64_sys_openat+0x138/0x170 [ 584.315652][T11956] do_syscall_64+0x17b/0x530 [ 584.315673][T11956] ? irqentry_exit+0x10f/0x8f0 [ 584.315694][T11956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.315717][T11956] ? clear_bhb_loop+0x40/0x90 [ 584.315744][T11956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.315769][T11956] RIP: 0033:0x7f29869cde99 [ 584.315794][T11956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 584.315811][T11956] RSP: 002b:00007f2984c26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 584.315829][T11956] RAX: ffffffffffffffda RBX: 00007f2986c55fa0 RCX: 00007f29869cde99 [ 584.315842][T11956] RDX: 0000000000000400 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 584.315854][T11956] RBP: 00007f2986a63eaf R08: 0000000000000000 R09: 0000000000000000 [ 584.315864][T11956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 584.315875][T11956] R13: 00007f2986c56038 R14: 00007f2986c55fa0 R15: 00007ffe57a4ba88 [ 584.315894][T11956] [ 584.316543][T11956] Kernel Offset: disabled