last executing test programs: 1m45.234337592s ago: executing program 0 (id=1): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) pipe2(&(0x7f0000002340)={0xffffffffffffffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000002f00090073cc72e16accbe0a040000002a0011"], 0x40}, 0x1, 0x0, 0x0, 0x42804}, 0x0) fcntl$getflags(r3, 0x408) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) landlock_create_ruleset(&(0x7f0000000200)={0x2832, 0x1, 0x2, 0x0, 0x6, 0x3}, 0x37, 0x0) setsockopt$inet_tcp_buf(r6, 0x6, 0x8, &(0x7f0000000040)="11a3a309", 0x4) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r5, @ANYBLOB="05003901"], 0x44}}, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 1m44.705809214s ago: executing program 0 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)="04080076657273696f6e00020500000004080070726f66696c6500070504002f2f6f00040600666c616773000702000300000200000000020000000008020000000002000000000200000000020000000008", 0x52) 1m44.506102849s ago: executing program 0 (id=10): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r3, 0x4188aec6, &(0x7f0000003e00)={0x1, [{0x3, 0x8, 0x4, &(0x7f00000004c0)='.'}, {0x3, 0x0, 0x4, 0x0}, {0x3, 0x0, 0x8001, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x3, 0x0, 0x10001, 0x0}, {0x2, 0x0, 0xdd, 0x0}, {0x1, 0x0, 0x10001, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x5, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x400, 0x0}, {0x3, 0x0, 0x0, 0x0}, {0x3, 0x0, 0x80000001, 0x0}, {0x1, 0x0, 0x2a358830, 0x0}, {0x1, 0x0, 0x200, 0x0}, {0x1, 0x0, 0x70, 0x0}]}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r1) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000280)={0x6, 0x7fffffff, 0x0, 'queue0\x00', 0x8000000}) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) getsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @multicast2}, &(0x7f0000000200)=0xc) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x4c}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x68}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x1c, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="08ac0f00"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="90945505bc6d8587ad9b1a77f6e1f63befce074057abd23773fbce34b1109cfdb9a2e1acc41a1690831d001f19aa14a27fe7ef3b325bb146b04d1ab16950081a048d1eee6f8a09fc37d6deea34dab085298f6f81c42f4899fed17c4b23cc5678816aec67c781b2b8bd745a8c47d0e079efa87e104fae56b0789b90d5fbf66da1eb96372ad2e2e074bc6e98b99facf5dfcbb4b360c92c87eb96edc028220eab4c2767f07959df42364fca860e90e2433488253e13b28f48794bd5068f55", 0xbd, 0x4, &(0x7f0000000180)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r10 = socket$kcm(0x21, 0x0, 0xa) sendmsg$kcm(r10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x28}, 0xfc40) 1m43.12897121s ago: executing program 0 (id=14): syz_usb_connect(0x2, 0xb3, &(0x7f0000000200)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000280)={{0x2, 0x4e24, @empty}, {0x306, @local}, 0xe, {0x2, 0x4e22, @empty}, 'batadv0\x00'}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r3 = syz_open_procfs(0x0, &(0x7f0000000fc0)='net/packet\x00') pread64(r3, &(0x7f0000000100)=""/211, 0xd3, 0x2000000040000003) syz_usb_connect$uac3(0x3, 0x80, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1a86, 0x752d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x6, 0x1b0, 0x40, {0x8, 0xb, 0x4, 0x1, 0x1, 0x21, 0x30, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xf8, 0x9, 0x14, {0xa, 0x25, 0x25, 0xe1, 0x2, 0x8000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x1, 0x63, 0x6, {0xa, 0x25, 0x25, 0x80, 0xa}}}}}}}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f00000000c0)={0x1, 0x0, 0x3}) 1m41.104378816s ago: executing program 0 (id=20): add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x110, 0xfffffffffffffffd) 1m40.470326636s ago: executing program 32 (id=20): add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x110, 0xfffffffffffffffd) 14.299660976s ago: executing program 4 (id=333): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) tkill(r0, 0x8) ptrace(0x4208, r0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$peekuser(0x3, r1, 0x200) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000300)=0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xf, r3, 0x8, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f0000000380)=0xc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f00000004c0)={0x204010100, &(0x7f0000000040), &(0x7f0000000180), &(0x7f00000001c0), {0x23}, &(0x7f0000000200)=""/83, 0x53, &(0x7f0000000280)=""/115, &(0x7f0000000440)=[r0, r1, r2, r3, r4, r5, r6], 0x7, {r7}}, 0x58) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r8, &(0x7f0000000140)='add 1', 0x5) 13.782490818s ago: executing program 4 (id=335): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080)=[{{0x4, 0x1}, {0x3, 0x1, 0x1}}], 0x8) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) syz_fuse_handle_req(r1, &(0x7f0000001a80)="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", 0x2000, &(0x7f0000007240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13.047257229s ago: executing program 4 (id=338): socket$can_j1939(0x1d, 0x2, 0x7) gettid() setns(0xc9, 0x0) r0 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f0000000000)={0x2, &(0x7f0000000180)=[{0x22, '\x00', @data=0x2000a, 0x9}, {0x26, '\x00', @st={0x4, [{0x2, @svalue=0x6}, {0x3, @svalue=0xd5f}, {0x2, @svalue=0x820c}, {0x2, @svalue=0x9}]}, 0x1c}]}) 11.169432866s ago: executing program 3 (id=347): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x48, r0, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP40={0x9}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20044001}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, &(0x7f0000000080)=0x6, 0x4) socket$netlink(0x10, 0x3, 0x4) socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1a5042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x38011, r4, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r5, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0xc4, 0x3000, 0x0, 0x9) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x2000008, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) inotify_init1(0x800) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r6], 0x3c}, 0x1, 0x0, 0x0, 0xc881}, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff406d04000900000102030109021b0001010080fa0904"], 0x0) 10.163385254s ago: executing program 1 (id=350): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_DQEVENT(r2, 0x80885659, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="24010000040801010000000000000000010000054400048008000b40000000d20800084000000b3d080005400000000608000140000000ca08000940ffff4a8b08000140000000020800054000000003080008400000000654000480080001400000004408000140000055bf0800014000000401080001400000007f080001400000000f080001400000000108000140000000080800014000000200080001400000000108000140ffff341444000480080006400000003a080004400000000808000a4000007fff080007400000008108000a400000000808000340000003ff0800024000000006080002400000000e34000480080002400001000008000240367ca0da080002400000000708000140000070c5080002400000a60e080001400000000d522cf35a429707775d1dbb270e8a6720cad8849f652b25ec1705e9d0b68dde6e7230603a8641208fc660686844bc6dd055"], 0x124}, 0x1, 0x0, 0x0, 0xc8810}, 0x200008c0) 8.897613558s ago: executing program 2 (id=353): quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f00000001c0)=@filename='./file0\x00', 0x0, &(0x7f0000000200)) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102842, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000000140)={0x2, 0x0, [{0x1, 0x3f8, 0x4, 0x0, 0x49, 0x4, 0x4}, {0xa, 0x4, 0x1, 0x400, 0x0, 0x5, 0x5}]}) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050401000000000000000a0000000900010073797a300000000040000000120a050402000000000000000a0000000900010073797a30000000000900020073797a310000000008000300000000050c000480080001000000000114000000110001"], 0x88}}, 0x0) 8.811238587s ago: executing program 3 (id=354): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) dup(r1) write$tun(r0, &(0x7f0000000280)={@void, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x0, 0x0, 0x20}}, {@ipv4={0x8100, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x4000, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @multicast1}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x2, 0x1, 0x0, 0x4, 0x100}}}}}}}}, 0x36) 8.538530001s ago: executing program 1 (id=355): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r2, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000140)={{0x3, 0x1, 0x3}}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000000c0)={0x6, 0xffff81a4, 0x40, 0x0, 0xf}) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000040)=@l={0x92, 0x2, 0xe0, 0x4, 0x1, 0x4, 0x1800}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) file_setattr(r6, 0x0, &(0x7f0000000080)={0x50c8, 0x1, 0x2, 0xc5, 0x57519bea}, 0x18, 0x1000) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000006740)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2404c845) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/oss_mixer\x00', 0x4000, 0x0) r8 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r8, &(0x7f0000000800)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x2, 0x3a, 'tracefs\x00', 0x3a, 'tracefs\x00\x9d\x11]b(_\xa4~\xa8\a\x00\x00\x00\x00\x00\x00\x00\xadIU\xc3\xbctt;\xa0H-1\x11\"\xa7Q\xc5J\xb0\"q\xbf\xf2\x025\xbf9\xf7k\x05\x8f_\xc2\xe4\\\",\t\x88\xe0*p\b\x00;\x0f^?U\xd6\xb9\xbb\a\xa2\xd8\xbf\x1cvX\n\xb1e\xf5V\x9b\xb7\xb7\xcf\xb1\x16\xe0\xc0\xdb\xef\xeb\xfde\x82\xa8@\xab\x957K\x1e7Q\x84B\x03\x95\xbb\x8f\x14\xae\xf5\x02\x961Q\xdb\xcbZ\xf1\x84\x0e\xd1\x93\x9c\x10,\xd9\xb9\x17)j\x0f\xf2\x8c\x95\xa4\xde\xd2\xa3\xcc\xba,a5\xf0\xda\x86\xb1\xbd\xb9\x13u\xe0/\xbb\xe7\xdf\xce9\xbf\xdb\xe9vG\x18\xcf>\xb50\xc16\xe45\x86\"=\x1f\xf4G\xed\xc4\xf7\xa4\x94\xb4%a\xae\x1e\xf6\xb0\xe51`\x86\xc9\xc8\x17\xc0\x88\xa6sa\xd3\x7fRoz\x0e\x9ad\x98\x00\x00\x00\x00\xc6\x06f\v[\xe3:c\x84e`\xaeO\xe4\xfb\xea\xe5O\v 0\xd5\xaf\x904q|\xe6\n\x91G\xce\xbbO\x18\xd9\x00\x042C\xb9\x8c\xe7\x13\xc7\xe0J\x06|cn\xcd\x9dZ\x9cN\xe1\xe95]\x05\xeavp \xe5\x8a\x9b\xb6\x9c\x8ag\xd2\xf8/\x03\x00!\x0e\xcc\x89\xb3q\x80s)\xeb\x06\xa4;\x88\xa4\xe6\x8e\xf7\x9a\xd1\xdco\xb5\b\x16d\xdd\xed{r8E\xf4\x7f\xe0\x9d\x11\x9fj\x87}\xbe><2\b\xff9\xc36\x17\x99~\xc3D\xe3\xe5\xd4\x98\xa4\xdeO\xea\xa1\x11\xfb\xc6\x95\xacV\xd3T\xa9\xfaP\xb7+\x0f\xd5\x12J7(G\xb84\xb6\xc2\xcb\xbf\xee\xe94\xe3F\xe6\xfe\xaf\xe2\xd2\xa2\x0e\x15\x9cRs$\x9b\x92\x99;jQY\x88EuF\x8b\xd9AA\xb1\xdf\xc0\x1c\xc1d5\xfa\x13 F\xefCF\x85\xffBT\x02#a\xfd\xd7\xf7\xc1\x99\x8e\x8c\x1c}\xcf\xa5V-\x97/H\xe4\xa3l\x9ej\x1b\v\xbeRn\xfc\nz<_NrY\xc1u-3H\x0e\x00\x00\x00\x00\x00\x00\x00.\x03\xe0\x06L\xb5\xc0d\x83G\xb1\x17\xa8\x1f_\xb9\xa0\xa9\xf0\xe7s\xe6?\xac\x12\xaeTG\xbcM\xc8o`\xae\xf1\xfb\x01o\x83p\x0f\x05\x84S\xa3\xa5\xca0\xba\xd0\xe7\xd8\xca\xcc\x82}\xa6\xd0\xbb\xb4\x13\xaa\x80\xb3\f\xa6\xcd\xe8\x95', 0x3a, './file1'}, 0x261) fcntl$setflags(r7, 0x2, 0x1) accept4(r0, 0x0, 0x0, 0x80800) 8.36546574s ago: executing program 2 (id=356): mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f00000004c0)='hpfs\x00', 0xc4, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0xb7, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45}}]}}, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) r1 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x755, 0x2626, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x110, 0x2c, "", [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x8000, 0x2, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x240, 0x0, 0x5e, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x9, 0x0, 0x8}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000880)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0022180000004bad04100906ff0139679300e7406f000000000000000002"], 0x0}, 0x0) syz_usb_connect$printer(0x4, 0x0, 0x0, 0x0) timerfd_create(0x0, 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_usb_disconnect(r2) write$char_usb(r3, &(0x7f0000001300)='7', 0x1) mknod$loop(&(0x7f0000000040)='./cgroup\x00', 0x2, 0x1) 7.92392413s ago: executing program 1 (id=357): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) r2 = semget$private(0x0, 0x2, 0x5a7) semctl$SETVAL(r2, 0x4, 0x10, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x2, &(0x7f0000000280)=ANY=[@ANYRES64]) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000200)={0xfffa, [0x0, 0xfffffffc], 0x4}, 0x10) 7.68505855s ago: executing program 3 (id=358): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async, rerun: 32) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) (rerun: 32) write$cgroup_pid(r0, &(0x7f0000000c40), 0x12) (async) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) (async, rerun: 32) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r0, @ANYRES16=r1, @ANYRES8, @ANYRES32=r3, @ANYBLOB="0a000600ffffffffffff00000600120007000000040013000600b500b70200000500130102121700"], 0x44}}, 0x4800) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000100)={0x3, 0x70000, 0x9, 0xffffffffffffffff, 0x9}) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) (async, rerun: 32) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) alarm(0x1) (async) alarm(0xdcb6) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="11000000320001002abd7000fcdbdf25210000800800cb00ac1e0001"], 0x1c}], 0x1}, 0x0) (async, rerun: 64) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x206804, 0x80) (rerun: 64) getdents64(r7, 0x0, 0x0) (async, rerun: 64) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async, rerun: 64) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz1\x00', 0x200002, 0x0) (async) r9 = socket$pptp(0x18, 0x1, 0x2) getsockname(r9, 0x0, &(0x7f0000000480)) (async) r10 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000340), 0xffffffffffffffff) (async) sendmsg$IPSET_CMD_RENAME(r10, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="84000000050601030000000000000000020000040900020b865e6d7861d1907e09380073797a310000000005000100070000000900030773797a30000000000900020073797a3000000000030073797a30000000000900020073797a32000000000900030073797a30000000000900030073797a3200000000050001000700326087078f6cb972256ad2134c48e45762aed142363152cdaf47f20243a9c18e2f250c0f54af1952b5beb6f476ef9c3245d44d63a600"/196], 0x84}, 0x1, 0x0, 0x0, 0xd4}, 0x4000890) 4.980621175s ago: executing program 2 (id=359): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r0}) bind$alg(r1, &(0x7f0000000440)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) (async) r2 = socket$l2tp6(0xa, 0x2, 0x73) (async, rerun: 64) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) (async, rerun: 64) r4 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000380)=0xffffffff, 0x4) (async) bind$inet(r4, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) (async) ppoll(&(0x7f00000000c0)=[{r1, 0x40}, {r0, 0x408}, {r1}, {r2, 0x1700}, {r3, 0x1011}, {r4, 0x3a0}, {r2, 0x2208}], 0x7, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180)={[0x8]}, 0x8) (async) sendmsg$inet6(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0xa, 0x4e24, 0x1000, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="2000000000000000290000000400000037012c00050000000401"], 0x20}, 0x800) 4.461936327s ago: executing program 4 (id=360): r0 = socket$kcm(0x21, 0x2, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000300)=ANY=[@ANYBLOB="0300000000000000060000000000000003"]) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x40, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x28}, 0xfc40) 4.322051783s ago: executing program 2 (id=361): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x168) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e25, 0x31e, @dev={0xfe, 0x80, '\x00', 0xb}, 0x4}, 0x1c) shutdown(r0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0x16}}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') getsockopt$bt_hci(r1, 0x0, 0x1, &(0x7f0000000000)=""/35, &(0x7f0000000040)=0x23) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) 4.155848971s ago: executing program 3 (id=362): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x48, r0, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP40={0x9}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20044001}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, &(0x7f0000000080)=0x6, 0x4) socket$netlink(0x10, 0x3, 0x4) socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1a5042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x38011, r4, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r5, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0xc4, 0x3000, 0x0, 0x9) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x2000008, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) inotify_init1(0x800) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r6], 0x3c}, 0x1, 0x0, 0x0, 0xc881}, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff406d04000900000102030109021b0001010080fa0904"], 0x0) 3.344870931s ago: executing program 2 (id=363): syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902130001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0xae00) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000400900020073797a310000000008000a40fffffffc7c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000505403804c0000804800018044000100e089ea412dafcf90e9293a46905a3edd7d8ea77b32eaa33f361badd2cab639b20a88ddbea93e909aaf30c4c602383f991b5e91dbc4a00c4798e1b8f26e00b8a8140000001100010000000000000000000100000a"], 0xe0}}, 0x40) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000040)={&(0x7f0000000300)=[{0x1, 0x801, 0x0, 0x0}], 0x1}) 3.325481018s ago: executing program 1 (id=364): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x168) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) (fail_nth: 10) 2.53532223s ago: executing program 4 (id=365): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) (rerun: 32) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000400)=ANY=[@ANYRES32], 0x4b) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000480)={0xcc, r1, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_HEAD={0x65, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1}, @device_a, @device_b, @initial, {0x3, 0xce}, @value=@ver_80211n={0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0x1, @random=0x5, 0xa070, @val, @val, @val={0x3, 0x1, 0xb7}, @val={0x4, 0x6, {0x5, 0xd, 0x1, 0xe}}, @val={0x6, 0x2, 0x1}, @val={0x5, 0x3, {0x5, 0x88, 0xe}}, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4, {0x0, 0x3, 0xc}}, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0xff, 0x2, 0x39, 0x200}}, [{0xdd, 0x6, "064d1b901fec"}]}}, @NL80211_ATTR_IE_ASSOC_RESP={0x31, 0x80, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x6, 0xb9, 0xd}}, @mesh_config={0x71, 0x7, {0x2, 0x1, 0x0, 0x0, 0x2, 0xa}}, @random_vendor={0xdd, 0x1c, "235460d0ec0bb003611f5dc8ac00b66cf9484527296a2054c8f621f6"}]}, @NL80211_ATTR_IE_PROBE_RESP={0x13, 0x7f, [@gcr_ga={0xbd, 0x6, @broadcast}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @perr={0x84, 0x2, {0x5}}]}]}, 0xcc}}, 0x10) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904"], 0x0) 2.335141618s ago: executing program 1 (id=366): add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x110, 0xfffffffffffffffd) 1.845474737s ago: executing program 1 (id=367): close(0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x2000f745) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setns(0xc9, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="210326bd7000fddbdf2501"], 0x1c}}, 0x50) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4140aecd, &(0x7f0000000600)={0x8, 0x0, [{0x870, 0x0, 0x9}, {0xa74, 0x0, 0x6}, {0xa53, 0x0, 0x40}, {0xb12, 0x0, 0x8}, {0xb01, 0x0, 0x24994071}, {0xbbb, 0x0, 0x2}, {0x40000020, 0x0, 0x1}, {0x92f, 0x0, 0x2}]}) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}, @NFTA_SET_ELEM_KEY_END={0x10, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, "f81f3fe70a58a077"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x100}}, 0x0) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='fuseblk\x00', 0x200013, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000480)={0x8, 0x0, [{0x40000001, 0x10001, 0x9, 0x0, 0x8, 0xc00, 0x5}, {0xb, 0x70b, 0x0, 0x1000, 0xffff, 0x9, 0x2e58}, {0x80000019, 0x6, 0x0, 0x3, 0x7, 0x3d, 0x9}, {0x80000001, 0x5fa2, 0x4, 0x73e, 0x5, 0x5, 0x7fff}, {0x6, 0x3, 0x4, 0x6, 0x7, 0xfffffffe, 0x3}, {0x1, 0x1000, 0x4, 0x0, 0xc80, 0x0, 0x10001}, {0xa, 0xfffffffa, 0x0, 0x78381a0a, 0xffffff6d, 0x8001, 0x77}, {0x40000000, 0x3, 0x2, 0x7, 0xf17a, 0x78008000, 0x7fffffff}]}) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000000)='./debug\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/x86/topo/domains\x00', 0x0, 0x0) read(r7, &(0x7f0000000400)=""/100, 0x64) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) syz_usb_control_io$sierra_net(r9, 0x0, 0x0) syz_usb_control_io$lan78xx(r9, 0x0, 0x0) r10 = dup(r8) syz_usb_control_io$uac3(r9, 0x0, 0x0) write$UHID_INPUT(r10, &(0x7f0000001a00)={0xf, {"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", 0x1000}}, 0x1006) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='none\x00', &(0x7f0000000040)='zonefs\x00', 0x0, 0x0) 1.69303427s ago: executing program 3 (id=368): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x1a, 0x713, 0x0, 0x25dfdbff, {{@in6=@remote, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in=@local, 0x4d2, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x38}, {0x5, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x100, 0x1}, {}, 0x70bd2c, 0x3505, 0xa, 0x4, 0x0, 0x54}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r2, 0x3}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@sg0, &(0x7f0000000340)='./dev\x00', &(0x7f0000000380)='anon_inodefs\x00', 0x40000, &(0x7f00000003c0)='\x00') mount(&(0x7f00000000c0)=@sg0, &(0x7f0000000140)='./mnt\x00', &(0x7f00000002c0)='fusectl\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) modify_ldt$write(0x1, &(0x7f0000000400)={0x826, 0x100000, 0x4000, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10) chdir(&(0x7f0000000280)='./file0\x00') llistxattr(&(0x7f0000000440)='./mnt\x00', &(0x7f0000000480)=""/13, 0xd) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x1, 0x1, 0x3b6c, 0x733d, 0x0, {0x0, @in6={{0xa, 0x4e1d, 0x208, @mcast1, 0x8}}, 0x4000651e, 0x2, 0x451e77f3, 0x9, 0x100}}, &(0x7f0000000240)=0xb0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000000206010100000000000000000100ffff14000780080012000100000508000b400000cd200500010006000000050005000a00000005000400010000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x60}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0xc8, 0x60, 0x107, 0x70ad2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xae, 0x3, 0x0, 0x1, [@generic="60e5f7bd77313787d18123c61fbae61b990ad821fb6a3dc0d8ed8958cf34d88572ba7bbc73ebf3cfe30d4f198fbf147dc5283cbd5be5d39fa5c4000899044e9c83d6471e099288369a6c931bb504d5619bb65d28173c20b424a29d0837524e425b29f1e720fd8b01fb2eb5b6d677b731e7cc16aa12c492cb5d6afb98a3a952369c4c6af80cfb659c550d028d433f55536890384f1d5595a3387c1a414735584c64fe66246eb36d718ffc"]}]}, 0xc8}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={r5, @in6={{0xa, 0x0, 0x9, @private2}}, 0x400, 0x0, 0x0, 0x100, 0xa0, 0xfffffffd}, &(0x7f0000000000)=0x9c) 80.402529ms ago: executing program 2 (id=369): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'vlan1\x00', &(0x7f0000000400)=@ethtool_sfeatures={0x3b, 0x2, [{0xc, 0x63}, {0x12, 0x73}]}}) 80.072899ms ago: executing program 4 (id=370): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000280)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = epoll_create1(0x0) r2 = socket$unix(0x1, 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0xa002803f}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x1402, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0xc040) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000240)={&(0x7f0000000140)=[{0x3f43, 0x11, 0x0, 0x0}], 0x1}) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000280)=ANY=[], 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) epoll_create1(0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0xa002803f}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x1402, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0xc040) (async) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000240)={&(0x7f0000000140)=[{0x3f43, 0x11, 0x0, 0x0}], 0x1}) (async) 0s ago: executing program 3 (id=371): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x11, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg(r2, &(0x7f0000000640)={&(0x7f0000000540)=@ll={0x11, 0x18, r3, 0x1, 0x4, 0x6, @broadcast}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="4ba72c4cfd81685544f46c3f0800", 0xe}, {&(0x7f0000000440)="4987a034977f549ecf1100000000050000000000", 0x14}], 0x2, 0x0, 0x0, 0x11000000}, 0x20008014) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000200)={0xfffa, [0x0, 0xfffffffc], 0x4}, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x80, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x44040}, 0x4000000) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480ef42b", 0x4e}], 0x1, 0x0, 0x0, 0xc9e}, 0x400c0c0) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r7, 0x84, 0x80, 0x0, &(0x7f0000000000)) recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}, 0x101}], 0x1, 0x40002042, 0x0) kernel console output (not intermixed with test programs): 0x0 [ 106.953856][ T25] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 106.953878][ T25] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 106.953901][ T25] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 106.982503][ T25] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 107.051822][ T987] usb usb2-port1: attempt power cycle [ 107.150104][ T4945] usb 4-1: USB disconnect, device number 9 [ 107.370032][ T6233] binder: Unknown parameter 'mask' [ 107.374236][ T6233] Zero length message leads to an empty skb [ 107.395973][ T987] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 107.423481][ T987] usb 2-1: device descriptor read/8, error -71 [ 107.666096][ T987] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 107.686695][ T987] usb 2-1: device descriptor read/8, error -71 [ 107.796387][ T987] usb usb2-port1: unable to enumerate USB device [ 107.805494][ T6239] syzkaller1: entered promiscuous mode [ 107.805513][ T6239] syzkaller1: entered allmulticast mode [ 108.073525][ T6242] FAULT_INJECTION: forcing a failure. [ 108.073525][ T6242] name failslab, interval 1, probability 0, space 0, times 0 [ 108.073562][ T6242] CPU: 0 UID: 0 PID: 6242 Comm: syz.4.114 Tainted: G L syzkaller #0 PREEMPT(full) [ 108.073591][ T6242] Tainted: [L]=SOFTLOCKUP [ 108.073599][ T6242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 108.073611][ T6242] Call Trace: [ 108.073620][ T6242] [ 108.073630][ T6242] dump_stack_lvl+0xe8/0x150 [ 108.073663][ T6242] should_fail_ex+0x3eb/0x540 [ 108.073704][ T6242] should_failslab+0xa8/0x100 [ 108.073730][ T6242] __kmalloc_noprof+0xf9/0x710 [ 108.073758][ T6242] ? kmem_cache_alloc_lru_noprof+0x14e/0x5f0 [ 108.073786][ T6242] ? __d_alloc+0xc9/0x6f0 [ 108.073811][ T6242] ? __d_alloc+0xc9/0x6f0 [ 108.073844][ T6242] __d_alloc+0xc9/0x6f0 [ 108.073878][ T6242] d_alloc_parallel+0xde/0x16b0 [ 108.073916][ T6242] ? lock_acquire+0x115/0x350 [ 108.073958][ T6242] ? __pfx_d_alloc_parallel+0x10/0x10 [ 108.073985][ T6242] ? lock_acquire+0x115/0x350 [ 108.074032][ T6242] __lookup_slow+0x82/0x2f0 [ 108.074064][ T6242] lookup_slow+0x53/0x70 [ 108.074092][ T6242] lookup_one_positive_unlocked+0x26/0xb0 [ 108.074122][ T6242] ovl_lookup_index+0x277/0x7b0 [ 108.074160][ T6242] ? __pfx_ovl_lookup_index+0x10/0x10 [ 108.074182][ T6242] ? ovl_lookup+0xa6d/0x1c80 [ 108.074211][ T6242] ovl_lookup+0x141f/0x1c80 [ 108.074274][ T6242] ? __pfx_ovl_lookup+0x10/0x10 [ 108.074299][ T6242] ? __pfx_d_alloc_parallel+0x10/0x10 [ 108.074327][ T6242] ? lock_acquire+0x115/0x350 [ 108.074374][ T6242] __lookup_slow+0x1fb/0x2f0 [ 108.074406][ T6242] lookup_slow+0x53/0x70 [ 108.074434][ T6242] path_lookupat+0x3f5/0x8c0 [ 108.074476][ T6242] filename_lookup+0x265/0x5d0 [ 108.074508][ T6242] ? __pfx_filename_lookup+0x10/0x10 [ 108.074563][ T6242] ? strncpy_from_user+0x150/0x2c0 [ 108.074590][ T6242] ? do_getname+0x151/0x250 [ 108.074617][ T6242] ksys_truncate+0xbb/0x1c0 [ 108.074646][ T6242] ? __pfx_ksys_truncate+0x10/0x10 [ 108.074682][ T6242] ? __pfx_ksys_write+0x10/0x10 [ 108.074721][ T6242] __x64_sys_truncate+0x5b/0x70 [ 108.074750][ T6242] do_syscall_64+0x166/0x520 [ 108.074770][ T6242] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.074791][ T6242] ? clear_bhb_loop+0x70/0xc0 [ 108.074818][ T6242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.074839][ T6242] RIP: 0033:0x7f320099e159 [ 108.074860][ T6242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.074877][ T6242] RSP: 002b:00007f3201813028 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 108.074900][ T6242] RAX: ffffffffffffffda RBX: 00007f3200c25fa0 RCX: 00007f320099e159 [ 108.074916][ T6242] RDX: 0000000000000000 RSI: 00000000000000e2 RDI: 0000200000000140 [ 108.074930][ T6242] RBP: 00007f3201813090 R08: 0000000000000000 R09: 0000000000000000 [ 108.074942][ T6242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.074955][ T6242] R13: 00007f3200c26038 R14: 00007f3200c25fa0 R15: 00007ffc4490b4d8 [ 108.074990][ T6242] [ 108.082224][ T6242] overlayfs: failed inode index lookup (ino=146, key=00fb21000109821af47ba6408382c0905f3484bcdc27d3fda99200000000000000, err=-12); [ 108.082224][ T6242] overlayfs: mount with '-o index=off' to disable inodes index. [ 108.546850][ T5767] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 108.680476][ T5767] usb 4-1: device descriptor read/64, error -71 [ 108.748587][ T1217] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 108.869886][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 108.870231][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 108.870448][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 108.870652][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 108.870866][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 108.871208][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 108.871442][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 108.871648][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 108.871859][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 108.872063][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 109.035892][ T5706] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 109.214347][ T5767] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 109.228982][ T5706] usb 3-1: Using ep0 maxpacket: 8 [ 109.230318][ T5706] usb 3-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 1.00 [ 109.231883][ T5706] usb 3-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 109.231934][ T5706] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 109.231977][ T5706] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.782247][ T5767] usb 4-1: device descriptor read/64, error -71 [ 109.834465][ T5706] usb 3-1: string descriptor 0 read error: -71 [ 109.848457][ T5706] mdc800 3-1:1.0: probe fails -> wrong Interface [ 109.878013][ T5706] usb 3-1: USB disconnect, device number 6 [ 110.012442][ T5767] usb usb4-port1: attempt power cycle [ 110.506549][ T1217] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 110.977355][ T6299] syzkaller1: entered promiscuous mode [ 110.977400][ T6299] syzkaller1: entered allmulticast mode [ 111.058777][ T5767] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 111.175563][ T5767] usb 4-1: device descriptor read/8, error -71 [ 111.380584][ T1217] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 111.441262][ T41] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 111.474158][ T41] (NULL device *): queue 0 connect admin queue failed (-111). [ 111.474194][ T41] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 111.474212][ T41] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 111.504723][ T6300] nvme nvme0: NVME-FC{0}: new ctrl: NQN "n", hostnqn: nqn.2014-08.org.nvmexpress:uuid:70ad4a83-5b9a-4d27-a1bd-906cfae4ea13 [ 111.506185][ T1217] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.506223][ T1217] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.506244][ T1217] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 111.506284][ T1217] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.850770][ T1217] usb 5-1: config 0 descriptor?? [ 111.934438][ T5767] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 112.172406][ T5767] usb 4-1: device not accepting address 13, error -71 [ 112.184985][ T5767] usb usb4-port1: unable to enumerate USB device [ 112.399111][ T1217] hid_parser_main: 5 callbacks suppressed [ 112.399141][ T1217] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 112.399176][ T1217] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 112.399201][ T1217] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 112.399226][ T1217] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 112.399251][ T1217] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 112.399276][ T1217] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 112.399301][ T1217] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 112.399336][ T1217] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 112.399361][ T1217] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 112.399386][ T1217] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 112.550204][ T1217] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 113.086843][ T1217] usb 5-1: USB disconnect, device number 4 [ 113.203564][ T6313] tipc: Started in network mode [ 113.203588][ T6313] tipc: Node identity 4, cluster identity 4711 [ 113.203600][ T6313] tipc: Node number set to 4 [ 113.507516][ T3286] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 113.530995][ T3286] (NULL device *): queue 0 connect admin queue failed (-111). [ 113.531028][ T3286] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 113.531047][ T3286] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 113.876832][ C0] net_ratelimit: 8450 callbacks suppressed [ 113.876855][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 113.876957][ T6339] nfsd: Unknown parameter 'usrquota' [ 113.877198][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 113.877612][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 113.878082][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:87:e4:59:23:03, vlan:0) [ 113.879441][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 113.879775][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 113.880178][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 113.880642][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:87:e4:59:23:03, vlan:0) [ 113.883377][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 113.883702][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 114.840786][ T6361] FAULT_INJECTION: forcing a failure. [ 114.840786][ T6361] name failslab, interval 1, probability 0, space 0, times 0 [ 114.840826][ T6361] CPU: 1 UID: 0 PID: 6361 Comm: syz.1.136 Tainted: G L syzkaller #0 PREEMPT(full) [ 114.840856][ T6361] Tainted: [L]=SOFTLOCKUP [ 114.840864][ T6361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 114.840877][ T6361] Call Trace: [ 114.840885][ T6361] [ 114.840895][ T6361] dump_stack_lvl+0xe8/0x150 [ 114.840931][ T6361] should_fail_ex+0x3eb/0x540 [ 114.840962][ T6361] should_failslab+0xa8/0x100 [ 114.840988][ T6361] __kmalloc_cache_noprof+0x9e/0x600 [ 114.841020][ T6361] ? __kmalloc_cache_noprof+0x148/0x600 [ 114.841049][ T6361] ? landlock_restrict_sibling_threads+0x676/0x11f0 [ 114.841075][ T6361] ? landlock_restrict_sibling_threads+0x676/0x11f0 [ 114.841110][ T6361] landlock_restrict_sibling_threads+0x676/0x11f0 [ 114.841148][ T6361] ? landlock_restrict_sibling_threads+0x2bb/0x11f0 [ 114.841179][ T6361] ? __pfx_landlock_restrict_sibling_threads+0x10/0x10 [ 114.841239][ T6361] ? bpf_lsm_cred_prepare+0x9/0x20 [ 114.841267][ T6361] ? security_prepare_creds+0x101/0x360 [ 114.841293][ T6361] ? prepare_creds+0x591/0x820 [ 114.841329][ T6361] __se_sys_landlock_restrict_self+0x5f6/0xd40 [ 114.841372][ T6361] do_syscall_64+0x166/0x520 [ 114.841392][ T6361] ? trace_irq_disable+0x3b/0x140 [ 114.841422][ T6361] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.841443][ T6361] ? clear_bhb_loop+0x70/0xc0 [ 114.841470][ T6361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.841491][ T6361] RIP: 0033:0x7f3e0939e159 [ 114.841512][ T6361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.841530][ T6361] RSP: 002b:00007f3e0a231028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 114.841555][ T6361] RAX: ffffffffffffffda RBX: 00007f3e09626180 RCX: 00007f3e0939e159 [ 114.841571][ T6361] RDX: 0000000000000000 RSI: 000000000000000c RDI: ffffffffffffffff [ 114.841585][ T6361] RBP: 00007f3e0943506b R08: 0000000000000000 R09: 0000000000000000 [ 114.841599][ T6361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.841611][ T6361] R13: 00007f3e09626218 R14: 00007f3e09626180 R15: 00007fffccc8fa18 [ 114.841647][ T6361] [ 115.591870][ T83] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 115.593981][ T83] (NULL device *): queue 0 connect admin queue failed (-111). [ 115.594009][ T83] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 115.594028][ T83] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 115.943515][ T6376] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.12800.0), cmd(9) [ 116.668442][ T6390] syzkaller1: entered promiscuous mode [ 116.668469][ T6390] syzkaller1: entered allmulticast mode [ 117.010792][ T6393] overlayfs: overlapping lowerdir path [ 117.070524][ T6399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.145'. [ 117.366704][ T6399] ovs-dp0: entered promiscuous mode [ 117.666085][ T12] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 117.669466][ T12] (NULL device *): queue 0 connect admin queue failed (-111). [ 117.669498][ T12] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 117.669517][ T12] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 118.266118][ T4945] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 118.396907][ T987] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 118.420075][ T4945] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 118.421683][ T4945] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 118.421711][ T4945] usb 2-1: config 0 has no interface number 0 [ 118.421757][ T4945] usb 2-1: config 0 interface 41 has no altsetting 0 [ 118.537876][ T4945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.537906][ T4945] usb 2-1: Product: syz [ 118.537921][ T4945] usb 2-1: Manufacturer: syz [ 118.537936][ T4945] usb 2-1: SerialNumber: syz [ 118.569863][ T987] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 118.572480][ T987] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.572514][ T987] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.572536][ T987] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 118.572579][ T987] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.641249][ T5706] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 118.680326][ T4945] usb 2-1: config 0 descriptor?? [ 118.700048][ T987] usb 5-1: config 0 descriptor?? [ 118.796961][ T5706] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 118.799641][ T5706] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.799672][ T5706] usb 4-1: config 0 has no interfaces? [ 118.805074][ T5706] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.805102][ T5706] usb 4-1: Product: syz [ 118.805154][ T5706] usb 4-1: Manufacturer: syz [ 118.805170][ T5706] usb 4-1: SerialNumber: syz [ 118.882710][ T5706] usb 4-1: config 0 descriptor?? [ 118.885994][ C0] net_ratelimit: 7261 callbacks suppressed [ 118.886014][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:87:e4:59:23:03, vlan:0) [ 118.888618][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 118.888923][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 118.889278][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 118.889738][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:87:e4:59:23:03, vlan:0) [ 118.890933][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 118.891250][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 118.891651][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 118.892117][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:87:e4:59:23:03, vlan:0) [ 118.893468][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 119.182039][ T25] usb 4-1: USB disconnect, device number 14 [ 119.300015][ T987] usbhid 5-1:0.0: can't add hid device: -71 [ 119.300169][ T987] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 119.342521][ T987] usb 5-1: USB disconnect, device number 5 [ 119.749770][ T45] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 119.752544][ T45] (NULL device *): queue 0 connect admin queue failed (-111). [ 119.752574][ T45] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 119.752593][ T45] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 120.237811][ T4945] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 120.244423][ T4945] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 120.318533][ T4945] usb 2-1: USB disconnect, device number 11 [ 120.635908][ T987] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 120.786542][ T987] usb 4-1: Using ep0 maxpacket: 32 [ 120.791587][ T987] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 120.819954][ T987] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.845996][ T987] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.846025][ T987] usb 4-1: Product: syz [ 120.846041][ T987] usb 4-1: Manufacturer: syz [ 120.846056][ T987] usb 4-1: SerialNumber: syz [ 120.887570][ T987] usb 4-1: config 0 descriptor?? [ 120.919430][ T987] quatech2 4-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 121.227406][ T987] usb 4-1: qt2_setup_urbs - submit read urb failed -8 [ 121.227685][ T987] quatech2 4-1:0.0: probe with driver quatech2 failed with error -8 [ 121.435397][ T4945] usb 4-1: USB disconnect, device number 15 [ 121.617009][ T987] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 121.699682][ T6467] process 'syz.4.158' launched '/dev/fd/11' with NULL argv: empty string added [ 121.783294][ T987] usb 2-1: unable to get BOS descriptor or descriptor too short [ 121.783352][ T987] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 121.816794][ T987] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 121.816823][ T987] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 121.838109][ T286] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 121.849700][ T286] (NULL device *): queue 0 connect admin queue failed (-111). [ 121.849768][ T286] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 121.849788][ T286] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 121.905473][ T987] usb 2-1: string descriptor 0 read error: -22 [ 121.905635][ T987] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.133357][ T987] usb 2-1: 0:1 : does not exist [ 122.133475][ T987] usb 2-1: BAAD SPEAKER p_chmask mismatch [ 122.848665][ T6478] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 122.905302][ T6478] 9pnet_fd: p9_fd_create_tcp (6478): problem connecting socket to 127.0.0.1 [ 123.111889][ T6479] 9pnet_fd: p9_fd_create_tcp (6479): problem connecting socket to 127.0.0.1 [ 123.145789][ C0] sched: DL replenish lagged too much [ 123.226734][ T5706] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 123.268372][ T987] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 123.357032][ T5706] usb 4-1: device descriptor read/64, error -71 [ 123.596085][ T5706] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 123.726343][ T5706] usb 4-1: device descriptor read/64, error -71 [ 123.837485][ T5706] usb usb4-port1: attempt power cycle [ 123.897004][ C0] net_ratelimit: 7963 callbacks suppressed [ 123.897030][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 123.897367][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 123.897799][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 123.898248][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:87:e4:59:23:03, vlan:0) [ 123.899559][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 123.899899][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 123.900317][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 123.900698][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:87:e4:59:23:03, vlan:0) [ 123.902041][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 123.902385][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 123.927779][ T45] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 124.024675][ T45] (NULL device *): queue 0 connect admin queue failed (-111). [ 124.024708][ T45] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 124.024727][ T45] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 124.327512][ T5706] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 124.350041][ T5706] usb 4-1: device descriptor read/8, error -71 [ 124.484708][ T25] usb 2-1: USB disconnect, device number 12 [ 124.586646][ T5706] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 124.609686][ T5706] usb 4-1: device descriptor read/8, error -71 [ 124.625897][ T4945] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 124.716932][ T5706] usb usb4-port1: unable to enumerate USB device [ 124.780380][ T4945] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 124.783111][ T4945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.783144][ T4945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.783167][ T4945] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 124.783211][ T4945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.860500][ T4945] usb 3-1: config 0 descriptor?? [ 125.198427][ T5706] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 125.326503][ T4945] usbhid 3-1:0.0: can't add hid device: -71 [ 125.326616][ T4945] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 125.384706][ T4945] usb 3-1: USB disconnect, device number 7 [ 125.399825][ T5706] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 125.400920][ T5706] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.451088][ T5706] usb 5-1: config 0 descriptor?? [ 125.476881][ T5706] cp210x 5-1:0.0: cp210x converter detected [ 125.929193][ T6505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.952520][ T6505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.068701][ T12] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 126.072625][ T12] (NULL device *): queue 0 connect admin queue failed (-111). [ 126.072657][ T12] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 126.072676][ T12] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 126.146051][ T5706] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 126.255705][ T5706] usb 5-1: cp210x converter now attached to ttyUSB0 [ 126.500738][ T4945] usb 5-1: USB disconnect, device number 6 [ 126.575212][ T4945] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 126.615916][ T5706] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 126.769331][ T5706] usb 3-1: New USB device found, idVendor=056a, idProduct=5012, bcdDevice= 0.00 [ 126.771983][ T5706] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 126.772016][ T5706] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.772055][ T5706] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.824466][ T5706] usb 3-1: config 0 descriptor?? [ 127.117804][ T25] usb 4-1: new low-speed USB device number 20 using dummy_hcd [ 127.248118][ T25] usb 4-1: device descriptor read/64, error -71 [ 127.340750][ T5706] hid_parser_main: 5 callbacks suppressed [ 127.340779][ T5706] wacom 0003:056A:5012.0006: unknown main item tag 0x0 [ 127.340809][ T5706] wacom 0003:056A:5012.0006: unknown main item tag 0x0 [ 127.340836][ T5706] wacom 0003:056A:5012.0006: unknown main item tag 0x0 [ 127.340860][ T5706] wacom 0003:056A:5012.0006: unknown main item tag 0x0 [ 127.340886][ T5706] wacom 0003:056A:5012.0006: unknown main item tag 0x0 [ 127.340910][ T5706] wacom 0003:056A:5012.0006: unknown main item tag 0x0 [ 127.340936][ T5706] wacom 0003:056A:5012.0006: unknown main item tag 0x0 [ 127.340960][ T5706] wacom 0003:056A:5012.0006: unknown main item tag 0x0 [ 127.340985][ T5706] wacom 0003:056A:5012.0006: unknown main item tag 0x0 [ 127.341010][ T5706] wacom 0003:056A:5012.0006: unknown main item tag 0x0 [ 127.456272][ T5706] wacom 0003:056A:5012.0006: reserved main item tag 0xd [ 127.500886][ T6526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.503936][ T6526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.535937][ T25] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 127.544684][ T5706] usb 3-1: USB disconnect, device number 8 [ 127.749602][ T25] usb 4-1: device descriptor read/64, error -71 [ 127.856251][ T25] usb usb4-port1: attempt power cycle [ 128.150894][ T1268] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 128.151154][ T1268] (NULL device *): queue 0 connect admin queue failed (-111). [ 128.151179][ T1268] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 128.151197][ T1268] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 128.197183][ T25] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 128.219044][ T25] usb 4-1: device descriptor read/8, error -71 [ 128.457104][ T25] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 128.488033][ T25] usb 4-1: device descriptor read/8, error -71 [ 128.572300][ T4945] cp210x 5-1:0.0: device disconnected [ 128.596223][ T25] usb usb4-port1: unable to enumerate USB device [ 128.906651][ C0] net_ratelimit: 8777 callbacks suppressed [ 128.906677][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 128.907094][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:87:e4:59:23:03, vlan:0) [ 128.907545][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 128.908939][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 128.909274][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 128.910670][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:87:e4:59:23:03, vlan:0) [ 128.911013][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 128.911437][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 128.911885][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 128.912301][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:87:e4:59:23:03, vlan:0) [ 129.623142][ T4945] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 129.675960][ T25] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 129.828308][ T25] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 129.834522][ T4945] usb 3-1: unable to get BOS descriptor or descriptor too short [ 129.834580][ T4945] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 129.834806][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.834894][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.834917][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 129.834960][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.926990][ T4945] usb 3-1: config 114 has an invalid interface number: 240 but max is 0 [ 129.927023][ T4945] usb 3-1: config 114 has no interface number 0 [ 129.927068][ T4945] usb 3-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 129.927093][ T4945] usb 3-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 129.927119][ T4945] usb 3-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 129.927144][ T4945] usb 3-1: config 114 interface 240 has no altsetting 0 [ 129.935293][ T25] usb 2-1: config 0 descriptor?? [ 129.980892][ T4945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.980952][ T4945] usb 3-1: Product: syz [ 129.980967][ T4945] usb 3-1: Manufacturer: syz [ 129.980982][ T4945] usb 3-1: SerialNumber: syz [ 130.076601][ T6568] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 130.078161][ T6568] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 130.226032][ T1283] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 130.256818][ T1283] (NULL device *): queue 0 connect admin queue failed (-111). [ 130.256886][ T1283] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 130.256906][ T1283] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 130.436940][ T5706] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 130.566051][ T5706] usb 5-1: device descriptor read/64, error -71 [ 130.587789][ T25] usbhid 2-1:0.0: can't add hid device: -71 [ 130.587929][ T25] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 130.636371][ T25] usb 2-1: USB disconnect, device number 13 [ 130.807713][ T5706] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 130.823840][ T5619] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 130.937461][ T5706] usb 5-1: device descriptor read/64, error -71 [ 130.968787][ T5619] usb 4-1: device descriptor read/64, error -71 [ 131.030087][ T4945] ir_usb 3-1:114.240: IR Dongle converter detected [ 131.032543][ T4945] usb 3-1: IRDA class descriptor not found, device not bound [ 131.052425][ T5706] usb usb5-port1: attempt power cycle [ 131.079721][ T4945] usb 3-1: USB disconnect, device number 9 [ 131.205968][ T5619] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 131.338719][ T5619] usb 4-1: device descriptor read/64, error -71 [ 131.385976][ T5706] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 131.418931][ T5706] usb 5-1: device descriptor read/8, error -71 [ 131.447324][ T5619] usb usb4-port1: attempt power cycle [ 131.657028][ T5706] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 131.682395][ T5706] usb 5-1: device descriptor read/8, error -71 [ 131.735877][ T4945] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 131.787490][ T5706] usb usb5-port1: unable to enumerate USB device [ 131.836324][ T5619] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 131.861665][ T5619] usb 4-1: device descriptor read/8, error -71 [ 131.889753][ T4945] usb 2-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00 [ 131.895244][ T4945] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 131.895274][ T4945] usb 2-1: config 0 has no interface number 0 [ 131.895318][ T4945] usb 2-1: config 0 interface 8 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 131.895346][ T4945] usb 2-1: config 0 interface 8 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.895370][ T4945] usb 2-1: config 0 interface 8 has no altsetting 0 [ 131.895405][ T4945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.977004][ T4945] usb 2-1: config 0 descriptor?? [ 132.095985][ T5619] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 132.121389][ T5619] usb 4-1: device descriptor read/8, error -71 [ 132.227873][ T5619] usb usb4-port1: unable to enumerate USB device [ 132.307088][ T59] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 132.307346][ T59] (NULL device *): queue 0 connect admin queue failed (-111). [ 132.307370][ T59] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 132.307388][ T59] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 132.405260][ T4945] uclogic 0003:5543:0045.0007: interface is invalid, ignoring [ 132.476041][ T5706] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 132.602210][ T6586] syz_tun: entered allmulticast mode [ 132.604352][ T6586] syz_tun: left allmulticast mode [ 132.637948][ T5706] usb 3-1: Using ep0 maxpacket: 16 [ 132.639714][ T5706] usb 3-1: New USB device found, idVendor=045e, idProduct=076c, bcdDevice= 0.40 [ 132.643738][ T5706] usb 3-1: config 1 interface 0 has no altsetting 0 [ 132.678329][ T5706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.678360][ T5706] usb 3-1: Product: 答舱鞡譃᪮䗭䖌⠭䚷秳ꋞ槛䇚귱拷㗋覗䱋쓐뉿㫇蠆琤ꗏ䲟ᚯ﷽얣짾䓑⿌鶿ﰡｾ㩘ڇ帠Űᔪᝏ཮㔉ꐏ㼃蛠綫➬攠柌ꏫ庢铨楟㲞蓵矻钊쌨鼝ٝ鱓踬Თﯽ [ 132.678385][ T5706] usb 3-1: Manufacturer: ힽ팵ḍΉ뱞觓⡝媦ꍒ瞚凚蠧馐讟䬴┑䑰馟뭬仴傰㜪珊㪤拀㞟鳲㬊謬庛釜媙얺鶣螟ꝲ轺ꊞ黴嫳滢뱍抉鮏玮ኳꉒⱅ짫뛥㱏䔗뵍侎柝ࣘ䒰⧡雽➀暒௽乍ଁ㨜漾맱크❥溘⵴ꋀ薾쟩䪒榙Ҷ찎ᅊ髠撟鴤Თ㵐疆ꏾꜷ괸쨿뷎ㇲ詓괡ٝű캶⊖ﷴ量ꃡ䴆힓 [ 132.678417][ T5706] usb 3-1: SerialNumber: 鶎乯櫄蠱㼘ආ聴졖橒줁躞瑷⬰엵ങ踚飴㦔ࡳ챂뢵쫆壮爐中ܪ毊㘮愮㰌䩘蝰鴗ㆀꞏ⌭妗鏜蘸렆膖そ듣艝렯ꔙ奙鞬䲲ᡙ黦軅 [ 132.813567][ T6586] netlink: 136 bytes leftover after parsing attributes in process `syz.1.180'. [ 132.874446][ T6586] device-mapper: ioctl: only supply one of name or uuid, cmd(7) [ 132.909460][ T4945] usb 2-1: USB disconnect, device number 14 [ 133.256481][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.256570][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.286564][ T5706] usbhid 3-1:1.0: can't add hid device: -71 [ 133.286680][ T5706] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 133.337117][ T5706] usb 3-1: USB disconnect, device number 10 [ 133.915855][ C0] net_ratelimit: 8057 callbacks suppressed [ 133.915878][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 133.916249][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 133.917728][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:87:e4:59:23:03, vlan:0) [ 133.918095][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 133.918502][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 133.919013][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 133.919392][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:87:e4:59:23:03, vlan:0) [ 133.919719][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 133.921177][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 133.921506][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 134.115024][ T6606] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.183'. [ 134.389066][ T83] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 134.409366][ T83] (NULL device *): queue 0 connect admin queue failed (-111). [ 134.409398][ T83] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 134.409417][ T83] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 135.604522][ T6633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.189'. [ 135.622805][ T6633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.189'. [ 136.467320][ T59] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 136.489947][ T59] (NULL device *): queue 0 connect admin queue failed (-111). [ 136.489980][ T59] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 136.489999][ T59] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 136.727649][ T5706] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 136.901091][ T5706] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 136.905063][ T5706] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.905122][ T5706] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.980292][ T5706] usb 3-1: config 0 descriptor?? [ 137.232908][ T5706] usb 3-1: USB disconnect, device number 11 [ 137.779561][ T5706] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 137.948342][ T5706] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 137.953884][ T5706] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.953943][ T5706] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.025904][ T5706] usb 3-1: config 0 descriptor?? [ 138.084049][ T5706] aiptek 3-1:0.0: interface has no int in endpoints, but must have minimum 1 [ 138.171743][ T6659] FAULT_INJECTION: forcing a failure. [ 138.171743][ T6659] name failslab, interval 1, probability 0, space 0, times 0 [ 138.171779][ T6659] CPU: 1 UID: 0 PID: 6659 Comm: syz.1.195 Tainted: G L syzkaller #0 PREEMPT(full) [ 138.171820][ T6659] Tainted: [L]=SOFTLOCKUP [ 138.171828][ T6659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 138.171841][ T6659] Call Trace: [ 138.171850][ T6659] [ 138.171859][ T6659] dump_stack_lvl+0xe8/0x150 [ 138.171894][ T6659] should_fail_ex+0x3eb/0x540 [ 138.171924][ T6659] should_failslab+0xa8/0x100 [ 138.171950][ T6659] __kmalloc_noprof+0xf9/0x710 [ 138.171981][ T6659] ? sk_prot_alloc+0xe7/0x210 [ 138.172003][ T6659] ? sk_prot_alloc+0xe7/0x210 [ 138.172027][ T6659] ? security_inode_alloc+0x39/0x310 [ 138.172057][ T6659] sk_prot_alloc+0xe7/0x210 [ 138.172087][ T6659] ? sk_alloc+0x27/0x390 [ 138.172111][ T6659] sk_alloc+0x3a/0x390 [ 138.172137][ T6659] bt_sock_alloc+0x3b/0x330 [ 138.172174][ T6659] hci_sock_create+0xa3/0x1c0 [ 138.172203][ T6659] bt_sock_create+0x163/0x240 [ 138.172227][ T6659] __sock_create+0x4b5/0xac0 [ 138.172267][ T6659] __sys_socket+0xd6/0x1b0 [ 138.172300][ T6659] __x64_sys_socket+0x7a/0x90 [ 138.172330][ T6659] do_syscall_64+0x166/0x520 [ 138.172351][ T6659] ? trace_irq_disable+0x3b/0x140 [ 138.172388][ T6659] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.172411][ T6659] ? clear_bhb_loop+0x70/0xc0 [ 138.172438][ T6659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.172460][ T6659] RIP: 0033:0x7f3e0939e159 [ 138.172482][ T6659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.172500][ T6659] RSP: 002b:00007f3e0a272fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 138.172526][ T6659] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00007f3e0939e159 [ 138.172541][ T6659] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 000000000000001f [ 138.172553][ T6659] RBP: 00007f3e0943506b R08: 0000000000000000 R09: 0000000000000000 [ 138.172566][ T6659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.172579][ T6659] R13: 00007f3e09626038 R14: 00007f3e09625fa0 R15: 00007fffccc8fa18 [ 138.172615][ T6659] [ 138.481091][ T5706] usb 3-1: USB disconnect, device number 12 [ 138.553891][ T45] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 138.577615][ T45] (NULL device *): queue 0 connect admin queue failed (-111). [ 138.577647][ T45] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 138.577666][ T45] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 138.925835][ C0] net_ratelimit: 7996 callbacks suppressed [ 138.925859][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:87:e4:59:23:03, vlan:0) [ 138.926245][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 138.928545][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 138.928907][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 138.930389][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:87:e4:59:23:03, vlan:0) [ 138.930716][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 138.931163][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 138.931626][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 138.932018][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:87:e4:59:23:03, vlan:0) [ 138.932355][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 139.607710][ T5619] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 139.757763][ T5619] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 139.762603][ T5619] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 139.762633][ T5619] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 139.762657][ T5619] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 139.858219][ T5619] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 139.858251][ T5619] usb 5-1: Product: syz [ 139.858266][ T5619] usb 5-1: Manufacturer: syz [ 139.858280][ T5619] usb 5-1: SerialNumber: syz [ 140.095523][ T6677] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input8 [ 140.233035][ T5619] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 140.432394][ T6671] gfs2: gfs2 mount does not exist [ 140.518083][ T5619] usb 5-1: USB disconnect, device number 11 [ 140.593042][ T5619] usblp0: removed [ 140.630369][ T3286] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 140.631236][ T3286] (NULL device *): queue 0 connect admin queue failed (-111). [ 140.631262][ T3286] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 140.631281][ T3286] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 141.297800][ T6690] netlink: 32 bytes leftover after parsing attributes in process `syz.2.201'. [ 141.485075][ T6702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.202'. [ 141.815874][ T4945] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 141.966873][ T4945] usb 2-1: Using ep0 maxpacket: 8 [ 141.970124][ T4945] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03 [ 141.972918][ T4945] usb 2-1: config index 0 descriptor too short (expected 52723, got 18) [ 141.972945][ T4945] usb 2-1: config 143 has too many interfaces: 193, using maximum allowed: 32 [ 141.972965][ T4945] usb 2-1: config 143 has an invalid descriptor of length 26, skipping remainder of the config [ 141.972985][ T4945] usb 2-1: config 143 has 0 interfaces, different from the descriptor's value: 193 [ 142.048957][ T4945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.048988][ T4945] usb 2-1: Product: syz [ 142.049003][ T4945] usb 2-1: Manufacturer: syz [ 142.049019][ T4945] usb 2-1: SerialNumber: syz [ 142.706241][ T83] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 142.707577][ T83] (NULL device *): queue 0 connect admin queue failed (-111). [ 142.707635][ T83] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 142.707655][ T83] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 143.057964][ T4945] usb 2-1: USB disconnect, device number 15 [ 143.516557][ T31] audit: type=1800 audit(1790234921.193:5): pid=6713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.205" name="file0" dev="overlay" ino=275 res=0 errno=0 [ 143.895334][ T6716] FAULT_INJECTION: forcing a failure. [ 143.895334][ T6716] name failslab, interval 1, probability 0, space 0, times 0 [ 143.895372][ T6716] CPU: 1 UID: 0 PID: 6716 Comm: syz.4.206 Tainted: G L syzkaller #0 PREEMPT(full) [ 143.895402][ T6716] Tainted: [L]=SOFTLOCKUP [ 143.895411][ T6716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 143.895424][ T6716] Call Trace: [ 143.895432][ T6716] [ 143.895441][ T6716] dump_stack_lvl+0xe8/0x150 [ 143.895477][ T6716] should_fail_ex+0x3eb/0x540 [ 143.895507][ T6716] should_failslab+0xa8/0x100 [ 143.895534][ T6716] __kmalloc_noprof+0xf9/0x710 [ 143.895566][ T6716] ? sk_prot_alloc+0xe7/0x210 [ 143.895587][ T6716] ? sk_prot_alloc+0xe7/0x210 [ 143.895609][ T6716] ? security_inode_alloc+0x39/0x310 [ 143.895640][ T6716] sk_prot_alloc+0xe7/0x210 [ 143.895670][ T6716] ? sk_alloc+0x27/0x390 [ 143.895694][ T6716] sk_alloc+0x3a/0x390 [ 143.895721][ T6716] bt_sock_alloc+0x3b/0x330 [ 143.895759][ T6716] hci_sock_create+0xa3/0x1c0 [ 143.895785][ T6716] bt_sock_create+0x163/0x240 [ 143.895809][ T6716] __sock_create+0x4b5/0xac0 [ 143.895848][ T6716] __sys_socket+0xd6/0x1b0 [ 143.895882][ T6716] __x64_sys_socket+0x7a/0x90 [ 143.895913][ T6716] do_syscall_64+0x166/0x520 [ 143.895935][ T6716] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.895957][ T6716] ? clear_bhb_loop+0x70/0xc0 [ 143.895984][ T6716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.896005][ T6716] RIP: 0033:0x7f320099e159 [ 143.896026][ T6716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.896043][ T6716] RSP: 002b:00007f3201812fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 143.896067][ T6716] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00007f320099e159 [ 143.896083][ T6716] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 000000000000001f [ 143.896096][ T6716] RBP: 00007f3200a3506b R08: 0000000000000000 R09: 0000000000000000 [ 143.896109][ T6716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.896122][ T6716] R13: 00007f3200c26038 R14: 00007f3200c25fa0 R15: 00007ffc4490b4d8 [ 143.896156][ T6716] [ 143.938855][ C0] net_ratelimit: 7002 callbacks suppressed [ 143.938874][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:87:e4:59:23:03, vlan:0) [ 143.939149][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 143.939478][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 143.939846][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 143.940217][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:87:e4:59:23:03, vlan:0) [ 143.940486][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 143.941697][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 143.942015][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 143.943137][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:87:e4:59:23:03, vlan:0) [ 143.943422][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 144.212136][ T5619] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 144.212390][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 144.427024][ T5619] usb 2-1: device descriptor read/64, error -32 [ 144.666309][ T5619] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 144.786093][ T1283] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 144.786279][ T1283] (NULL device *): queue 0 connect admin queue failed (-111). [ 144.786301][ T1283] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 144.786320][ T1283] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 144.844189][ T5619] usb 2-1: Using ep0 maxpacket: 16 [ 144.858471][ T5619] usb 2-1: unable to get BOS descriptor or descriptor too short [ 144.858527][ T5619] usb 2-1: New USB device found, idVendor=1546, idProduct=1104, bcdDevice=b6.0d [ 144.859824][ T5619] usb 2-1: config 3 has an invalid interface number: 71 but max is 0 [ 144.859849][ T5619] usb 2-1: config 3 has no interface number 0 [ 144.859894][ T5619] usb 2-1: config 3 interface 71 has no altsetting 0 [ 144.863050][ T5619] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.863076][ T5619] usb 2-1: Product: ⇾儧Ꮝ侳㏐ퟹﰠ꾶篥ￊ탏꨺鞬녊➡济檈豵쵡엇컬ॱ⼒곛圢⧎⮙纤뷕鑻ബ옓ꜳ修젫䲂鿵ꚏ솑ꮉ凪턃僌ܭ謹ঃ嬘ꖶ煥ጂ周瞌Ӌ㑤ꊑꞘ쪾燎ٙ쌵䁜椚䃉Рᖒ蝤갵仒㞿噺䒃螿擩祇富㣩鉺㶜⇀ࢹ䕴⺻꜡瀚塥뀇깓萶ῌ矉諦⃹虇蒬盐銚根ୌ暦ࢳ琮긭 [ 144.863108][ T5619] usb 2-1: Manufacturer:   [ 144.863123][ T5619] usb 2-1: SerialNumber: а [ 145.027476][ T6724] Bluetooth: MGMT ver 1.23 [ 145.256764][ T5619] cdc_ether 2-1:3.71: invalid descriptor buffer length [ 145.256791][ T5619] usb 2-1: No union descriptors [ 145.303448][ T5619] usb 2-1: USB disconnect, device number 17 [ 145.386444][ T6730] netlink: 260 bytes leftover after parsing attributes in process `syz.3.211'. [ 145.488530][ T6733] device-mapper: ioctl: Empty message received. [ 145.551979][ T6735] syzkaller1: entered promiscuous mode [ 145.552005][ T6735] syzkaller1: entered allmulticast mode [ 145.587837][ T4945] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 145.770961][ T4945] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 145.775482][ T4945] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.775552][ T4945] usb 5-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 145.775579][ T4945] usb 5-1: config 1 interface 0 has no altsetting 0 [ 145.811152][ T4945] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 145.811182][ T4945] usb 5-1: SerialNumber: syz [ 145.882221][ T4945] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 146.867913][ T1268] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 146.868084][ T1268] (NULL device *): queue 0 connect admin queue failed (-111). [ 146.868107][ T1268] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 146.868125][ T1268] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 147.308341][ T6756] FAULT_INJECTION: forcing a failure. [ 147.308341][ T6756] name failslab, interval 1, probability 0, space 0, times 0 [ 147.308376][ T6756] CPU: 1 UID: 0 PID: 6756 Comm: syz.3.217 Tainted: G L syzkaller #0 PREEMPT(full) [ 147.308406][ T6756] Tainted: [L]=SOFTLOCKUP [ 147.308414][ T6756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 147.308427][ T6756] Call Trace: [ 147.308436][ T6756] [ 147.308446][ T6756] dump_stack_lvl+0xe8/0x150 [ 147.308479][ T6756] should_fail_ex+0x3eb/0x540 [ 147.308508][ T6756] should_failslab+0xa8/0x100 [ 147.308533][ T6756] __kmalloc_noprof+0xf9/0x710 [ 147.308563][ T6756] ? security_sk_alloc+0x52/0x360 [ 147.308592][ T6756] ? security_sk_alloc+0x52/0x360 [ 147.308627][ T6756] security_sk_alloc+0x52/0x360 [ 147.308660][ T6756] sk_prot_alloc+0x101/0x210 [ 147.308681][ T6756] ? sk_alloc+0x27/0x390 [ 147.308706][ T6756] sk_alloc+0x3a/0x390 [ 147.308730][ T6756] bt_sock_alloc+0x3b/0x330 [ 147.308762][ T6756] hci_sock_create+0xa3/0x1c0 [ 147.308788][ T6756] bt_sock_create+0x163/0x240 [ 147.308811][ T6756] __sock_create+0x4b5/0xac0 [ 147.308854][ T6756] __sys_socket+0xd6/0x1b0 [ 147.308886][ T6756] __x64_sys_socket+0x7a/0x90 [ 147.308917][ T6756] do_syscall_64+0x166/0x520 [ 147.308938][ T6756] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.308960][ T6756] ? clear_bhb_loop+0x70/0xc0 [ 147.308987][ T6756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.309008][ T6756] RIP: 0033:0x7efd4699e159 [ 147.309029][ T6756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.309047][ T6756] RSP: 002b:00007efd478c1fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 147.309083][ T6756] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00007efd4699e159 [ 147.309097][ T6756] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 000000000000001f [ 147.309110][ T6756] RBP: 00007efd46a3506b R08: 0000000000000000 R09: 0000000000000000 [ 147.309123][ T6756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.309136][ T6756] R13: 00007efd46c26128 R14: 00007efd46c26090 R15: 00007fff34735058 [ 147.309171][ T6756] [ 147.630591][ T4945] usb 5-1: USB disconnect, device number 12 [ 147.763260][ T6755] syz.2.218 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 148.886332][ T5619] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 148.946026][ T1268] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 148.946297][ T1268] (NULL device *): queue 0 connect admin queue failed (-111). [ 148.946322][ T1268] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 148.946343][ T1268] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 148.946572][ C0] net_ratelimit: 7596 callbacks suppressed [ 148.946589][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 148.946972][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 148.948748][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:87:e4:59:23:03, vlan:0) [ 148.949169][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 148.949645][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 148.950203][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 148.950670][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:87:e4:59:23:03, vlan:0) [ 148.951042][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 148.952686][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 148.953063][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 149.076508][ T5619] usb 3-1: Using ep0 maxpacket: 16 [ 149.117431][ T5619] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 149.167261][ T5619] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.167293][ T5619] usb 3-1: Product: syz [ 149.167307][ T5619] usb 3-1: Manufacturer: syz [ 149.167322][ T5619] usb 3-1: SerialNumber: syz [ 149.172027][ T5619] usb 3-1: config 0 descriptor?? [ 149.215702][ T5619] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 149.404158][ T6765] syz.4.221 (6765): attempted to duplicate a private mapping with mremap. This is not supported. [ 149.551436][ T6767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.581961][ T6767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.810465][ T5619] usb 3-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 150.002586][ T5706] usb 3-1: USB disconnect, device number 13 [ 150.054598][ T5706] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 150.055212][ T5706] visor 3-1:0.0: device disconnected [ 150.099452][ T5619] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 150.102020][ T6775] netlink: 'syz.1.225': attribute type 4 has an invalid length. [ 150.252691][ T5619] usb 5-1: not running at top speed; connect to a high speed hub [ 150.252732][ T5619] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 150.281727][ T5619] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.281811][ T5619] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.355493][ T5619] uvcvideo 5-1:1.0: Found UVC 1.00 device (046d:0825) [ 150.825649][ T6787] FAULT_INJECTION: forcing a failure. [ 150.825649][ T6787] name failslab, interval 1, probability 0, space 0, times 0 [ 150.825729][ T6787] CPU: 1 UID: 0 PID: 6787 Comm: syz.3.227 Tainted: G L syzkaller #0 PREEMPT(full) [ 150.825762][ T6787] Tainted: [L]=SOFTLOCKUP [ 150.825770][ T6787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 150.825783][ T6787] Call Trace: [ 150.825793][ T6787] [ 150.825803][ T6787] dump_stack_lvl+0xe8/0x150 [ 150.825839][ T6787] should_fail_ex+0x3eb/0x540 [ 150.825871][ T6787] should_failslab+0xa8/0x100 [ 150.825898][ T6787] __kmalloc_noprof+0xf9/0x710 [ 150.825930][ T6787] ? security_sk_alloc+0x52/0x360 [ 150.825960][ T6787] ? security_sk_alloc+0x52/0x360 [ 150.825997][ T6787] security_sk_alloc+0x52/0x360 [ 150.826031][ T6787] sk_prot_alloc+0x101/0x210 [ 150.826054][ T6787] ? sk_alloc+0x27/0x390 [ 150.826077][ T6787] sk_alloc+0x3a/0x390 [ 150.826104][ T6787] bt_sock_alloc+0x3b/0x330 [ 150.826140][ T6787] hci_sock_create+0xa3/0x1c0 [ 150.826169][ T6787] bt_sock_create+0x163/0x240 [ 150.826193][ T6787] __sock_create+0x4b5/0xac0 [ 150.826232][ T6787] __sys_socket+0xd6/0x1b0 [ 150.826267][ T6787] __x64_sys_socket+0x7a/0x90 [ 150.826300][ T6787] do_syscall_64+0x166/0x520 [ 150.826320][ T6787] ? trace_irq_disable+0x3b/0x140 [ 150.826350][ T6787] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.826372][ T6787] ? clear_bhb_loop+0x70/0xc0 [ 150.826399][ T6787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.826421][ T6787] RIP: 0033:0x7efd4699e159 [ 150.826443][ T6787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.826462][ T6787] RSP: 002b:00007efd478c1fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 150.826487][ T6787] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00007efd4699e159 [ 150.826503][ T6787] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 000000000000001f [ 150.826517][ T6787] RBP: 00007efd46a3506b R08: 0000000000000000 R09: 0000000000000000 [ 150.826531][ T6787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.826544][ T6787] R13: 00007efd46c26128 R14: 00007efd46c26090 R15: 00007fff34735058 [ 150.826588][ T6787] [ 151.027613][ T3286] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 151.027893][ T3286] (NULL device *): queue 0 connect admin queue failed (-111). [ 151.027919][ T3286] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 151.027937][ T3286] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 151.201046][ T31] audit: type=1800 audit(1790234928.933:6): pid=6790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.228" name="file0" dev="overlay" ino=361 res=0 errno=0 [ 151.475926][ T5706] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 151.629599][ T5706] usb 4-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice= 0.00 [ 151.648430][ T5706] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.674147][ T5706] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.674188][ T5706] usb 4-1: Product: syz [ 151.674451][ T5706] usb 4-1: Manufacturer: syz [ 151.674471][ T5706] usb 4-1: SerialNumber: syz [ 151.725442][ T6796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.739787][ T6796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.773001][ T5706] gspca_main: spca500-2.14.0 probing 046d:0900 [ 151.815018][ T6795] rust_binder: 6794:6795 failed copying remainder into alloc: EFAULT [ 151.815257][ T6795] rust_binder: Failure in copy_transaction_data: EFAULT [ 151.815293][ T6795] rust_binder: 6794:6795 transaction call to 6794:0 failed EFAULT, code 0 size 120-24 [ 151.876201][ T5720] rust_binder: 6794: undelivered TRANSACTION_ERROR: 29201 [ 151.877127][ T6795] syz.1.229 (6795) used greatest stack depth: 11936 bytes left [ 151.954658][ T5706] gspca_spca500: reg write: error -71 [ 151.965666][ T5706] gspca_spca500: reg write: error -71 [ 151.971888][ T5706] gspca_spca500: reg write: error -71 [ 151.980560][ T5706] gspca_spca500: reg write: error -71 [ 151.983494][ T5706] gspca_spca500: reg write: error -71 [ 151.983946][ T5706] gspca_spca500: reg write: error -71 [ 151.984507][ T5706] gspca_spca500: reg write: error -71 [ 151.997400][ T5706] gspca_spca500: reg write: error -71 [ 152.021104][ T5706] gspca_spca500: reg write: error -71 [ 152.022286][ T5706] gspca_spca500: reg write: error -71 [ 152.023348][ T5706] gspca_spca500: reg write: error -71 [ 152.023787][ T5706] gspca_spca500: reg write: error -71 [ 152.024483][ T5706] gspca_spca500: reg write: error -71 [ 152.045945][ T5706] gspca_spca500: reg write: error -71 [ 152.128251][ T5706] usb 4-1: USB disconnect, device number 28 [ 152.323538][ T5619] uvcvideo 5-1:1.1: Failed to set UVC probe control : -71 (exp. 26). [ 152.337881][ T5619] uvcvideo 5-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 152.337950][ T5619] uvcvideo 5-1:1.1: Failed to initialize the device (-71). [ 152.371991][ T5619] uvcvideo 5-1:1.0: probe with driver uvcvideo failed with error -71 [ 152.402882][ T5619] usb 5-1: USB disconnect, device number 13 [ 152.824151][ T6804] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 152.901463][ T6805] netlink: 24 bytes leftover after parsing attributes in process `syz.2.231'. [ 153.109600][ T286] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 153.114991][ T286] (NULL device *): queue 0 connect admin queue failed (-111). [ 153.115023][ T286] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 153.115043][ T286] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 153.955821][ C0] net_ratelimit: 7898 callbacks suppressed [ 153.955845][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 153.956335][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 153.956731][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:87:e4:59:23:03, vlan:0) [ 153.957113][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 153.958589][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 153.958929][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 153.960387][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:87:e4:59:23:03, vlan:0) [ 153.960738][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 153.961222][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 153.961699][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 154.886323][ T6841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.243'. [ 154.886356][ T6841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.243'. [ 155.186439][ T83] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 155.191483][ T83] (NULL device *): queue 0 connect admin queue failed (-111). [ 155.191518][ T83] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 155.191539][ T83] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 155.212044][ T31] audit: type=1800 audit(1790234932.943:7): pid=6849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.246" name="(" dev="sda1" ino=2046 res=0 errno=0 [ 156.799877][ T5619] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 156.966884][ T5619] usb 4-1: Using ep0 maxpacket: 16 [ 156.986076][ T5619] usb 4-1: device descriptor read/all, error -61 [ 157.115921][ T5619] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 157.140217][ T6887] FAULT_INJECTION: forcing a failure. [ 157.140217][ T6887] name fail_futex, interval 1, probability 0, space 0, times 0 [ 157.140256][ T6887] CPU: 1 UID: 0 PID: 6887 Comm: syz.1.258 Tainted: G L syzkaller #0 PREEMPT(full) [ 157.140287][ T6887] Tainted: [L]=SOFTLOCKUP [ 157.140295][ T6887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 157.140308][ T6887] Call Trace: [ 157.140317][ T6887] [ 157.140327][ T6887] dump_stack_lvl+0xe8/0x150 [ 157.140362][ T6887] should_fail_ex+0x3eb/0x540 [ 157.140392][ T6887] get_futex_key+0x1b4/0x1580 [ 157.140424][ T6887] ? ipv6_set_mcast_msfilter+0x268/0x310 [ 157.140448][ T6887] ? do_ipv6_setsockopt+0x1342/0x3180 [ 157.140469][ T6887] ? ipv6_setsockopt+0x59/0x170 [ 157.140515][ T6887] ? __pfx_get_futex_key+0x10/0x10 [ 157.140551][ T6887] ? __lock_acquire+0x747/0x2de0 [ 157.140589][ T6887] futex_wait_setup+0x4a/0x590 [ 157.140621][ T6887] ? __futex_wait+0xdb/0x470 [ 157.140654][ T6887] __futex_wait+0x175/0x470 [ 157.140680][ T6887] ? release_sock+0x2f/0x260 [ 157.140719][ T6887] ? __pfx___futex_wait+0x10/0x10 [ 157.140759][ T6887] ? __pfx_futex_wake_mark+0x10/0x10 [ 157.140793][ T6887] ? futex_hash+0x4e/0x2b0 [ 157.140826][ T6887] ? futex_hash+0x4e/0x2b0 [ 157.140856][ T6887] ? futex_hash+0x275/0x2b0 [ 157.140895][ T6887] futex_wait+0x121/0x390 [ 157.140926][ T6887] ? __pfx_futex_wait+0x10/0x10 [ 157.140974][ T6887] do_futex+0x3e7/0x4e0 [ 157.140995][ T6887] ? __asan_memcpy+0x40/0x70 [ 157.141029][ T6887] ? __pfx_do_futex+0x10/0x10 [ 157.141067][ T6887] __se_sys_futex+0x3a8/0x450 [ 157.141098][ T6887] ? __pfx___se_sys_futex+0x10/0x10 [ 157.141131][ T6887] ? __x64_sys_futex+0x21/0xf0 [ 157.141159][ T6887] do_syscall_64+0x166/0x520 [ 157.141180][ T6887] ? trace_irq_disable+0x3b/0x140 [ 157.141209][ T6887] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.141230][ T6887] ? clear_bhb_loop+0x70/0xc0 [ 157.141256][ T6887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.141278][ T6887] RIP: 0033:0x7f3e0939e159 [ 157.141300][ T6887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.141319][ T6887] RSP: 002b:00007f3e0a2730e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 157.141344][ T6887] RAX: ffffffffffffffda RBX: 00007f3e09625fa8 RCX: 00007f3e0939e159 [ 157.141360][ T6887] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3e09625fa8 [ 157.141375][ T6887] RBP: 00007f3e09625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 157.141388][ T6887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.141400][ T6887] R13: 00007f3e09626038 R14: 00007fffccc8f930 R15: 00007fffccc8fa18 [ 157.141434][ T6887] [ 157.270981][ T83] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 157.319618][ T5619] usb 4-1: device descriptor read/64, error -71 [ 157.319713][ T83] (NULL device *): queue 0 connect admin queue failed (-111). [ 157.319740][ T83] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 157.319759][ T83] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 157.432663][ T5619] usb usb4-port1: attempt power cycle [ 157.835863][ T5619] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 157.857682][ T5706] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 157.880154][ T5619] usb 4-1: device descriptor read/8, error -71 [ 158.019841][ T5706] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 158.021372][ T5706] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.021415][ T5706] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 158.021487][ T5706] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.035871][ T4945] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 158.073788][ T5706] usb 3-1: config 0 descriptor?? [ 158.114704][ T5706] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 158.124076][ T5619] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 158.136981][ T5619] usb 4-1: device descriptor read/8, error -71 [ 158.237211][ T4945] usb 2-1: not running at top speed; connect to a high speed hub [ 158.237254][ T4945] usb 2-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 158.239986][ T4945] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 158.240019][ T4945] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 158.244432][ T4945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.244460][ T4945] usb 2-1: Product: syz [ 158.244476][ T4945] usb 2-1: Manufacturer: syz [ 158.244491][ T4945] usb 2-1: SerialNumber: syz [ 158.277043][ T5619] usb usb4-port1: unable to enumerate USB device [ 158.367470][ T4945] oti6858 2-1:1.0: oti6858 converter detected [ 158.384285][ T4945] usb 2-1: oti6858 converter now attached to ttyUSB0 [ 158.645270][ T6895] oti6858 ttyUSB0: oti6858_open(): usb_submit_urb() failed with error -90 [ 158.847636][ T5619] usb 2-1: USB disconnect, device number 18 [ 158.884264][ T5619] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 158.940595][ T5619] oti6858 2-1:1.0: device disconnected [ 158.965877][ C0] net_ratelimit: 8201 callbacks suppressed [ 158.965900][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 158.966305][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:87:e4:59:23:03, vlan:0) [ 158.966649][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 158.968083][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 158.968422][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 158.968830][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 158.969726][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 158.970181][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 158.971054][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:87:e4:59:23:03, vlan:0) [ 158.971401][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 159.347055][ T3286] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 159.349717][ T3286] (NULL device *): queue 0 connect admin queue failed (-111). [ 159.349747][ T3286] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 159.349767][ T3286] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 160.226689][ T5720] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 160.398786][ T5720] usb 4-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 160.400266][ T5720] usb 4-1: config 0 interface 0 altsetting 72 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 160.400411][ T5720] usb 4-1: config 0 interface 0 altsetting 72 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 160.400441][ T5720] usb 4-1: config 0 interface 0 has no altsetting 0 [ 160.400477][ T5720] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.405336][ T5720] usb 4-1: config 0 descriptor?? [ 160.471696][ T6916] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 160.648634][ T5619] usb 3-1: USB disconnect, device number 14 [ 160.730317][ T5720] usbhid 4-1:0.0: can't add hid device: -71 [ 160.730435][ T5720] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 160.759360][ T5720] usb 4-1: USB disconnect, device number 33 [ 161.177357][ T31] audit: type=1400 audit(1790234938.913:8): apparmor="STATUS" operation="profile_load" profile="unconfined" name=222F6F pid=6931 comm="syz.1.273" [ 161.399765][ T6936] netlink: 'syz.2.275': attribute type 10 has an invalid length. [ 161.400086][ T6936] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.402038][ T6936] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.430404][ T45] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 161.430607][ T45] (NULL device *): queue 0 connect admin queue failed (-111). [ 161.430631][ T45] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 161.430650][ T45] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 161.500834][ T6936] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.500979][ T6936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.501305][ T6936] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.501479][ T6936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.554647][ T6936] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 161.606924][ T5706] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 161.737415][ T5706] usb 2-1: device descriptor read/64, error -71 [ 161.976761][ T5706] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 162.105913][ T5706] usb 2-1: device descriptor read/64, error -71 [ 162.217626][ T5706] usb usb2-port1: attempt power cycle [ 162.560160][ T5706] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 162.580506][ T5706] usb 2-1: device descriptor read/8, error -71 [ 162.665392][ T6963] Can't find a SQUASHFS superblock on nullb0 [ 162.816033][ T5706] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 162.836535][ T5706] usb 2-1: device descriptor read/8, error -71 [ 162.956863][ T5706] usb usb2-port1: unable to enumerate USB device [ 163.505994][ T59] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 163.506266][ T59] (NULL device *): queue 0 connect admin queue failed (-111). [ 163.506291][ T59] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 163.506309][ T59] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 163.834151][ T6986] netlink: 'syz.2.286': attribute type 29 has an invalid length. [ 163.854946][ T6986] netlink: 60 bytes leftover after parsing attributes in process `syz.2.286'. [ 163.871013][ T6986] netlink: 60 bytes leftover after parsing attributes in process `syz.2.286'. [ 163.976073][ C0] net_ratelimit: 8487 callbacks suppressed [ 163.976097][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 163.976424][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 163.976823][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 163.977695][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 163.978167][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 163.978544][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:87:e4:59:23:03, vlan:0) [ 163.979392][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:87:e4:59:23:03, vlan:0) [ 163.979735][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 163.980153][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 163.980785][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.139883][ T6986] netlink: 'syz.2.286': attribute type 29 has an invalid length. [ 164.632642][ T6995] dvmrp12: entered allmulticast mode [ 164.921652][ T7003] nftables ruleset with unbound chain [ 165.546816][ T4945] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 165.586405][ T1268] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 165.589590][ T1268] (NULL device *): queue 0 connect admin queue failed (-111). [ 165.589620][ T1268] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 165.589640][ T1268] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 165.748618][ T4945] usb 2-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 165.754569][ T4945] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.754604][ T4945] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 165.754631][ T4945] usb 2-1: config 0 interface 0 has no altsetting 0 [ 165.754667][ T4945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.836927][ T4945] usb 2-1: config 0 descriptor?? [ 165.910718][ T7018] netlink: 40 bytes leftover after parsing attributes in process `syz.4.297'. [ 166.062079][ T7020] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 166.105417][ T7021] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 166.105616][ T7021] block device autoloading is deprecated and will be removed. [ 166.162564][ T7022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.175592][ T7022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.252654][ T7020] md: invalid raid superblock magic on ram1 [ 166.252678][ T7020] md: ram1 does not have a valid v0.0 superblock, not importing! [ 166.252829][ T7020] md: md_import_device returned -22 [ 166.772155][ T7026] FAULT_INJECTION: forcing a failure. [ 166.772155][ T7026] name failslab, interval 1, probability 0, space 0, times 0 [ 166.772194][ T7026] CPU: 1 UID: 0 PID: 7026 Comm: syz.2.300 Tainted: G L syzkaller #0 PREEMPT(full) [ 166.772224][ T7026] Tainted: [L]=SOFTLOCKUP [ 166.772233][ T7026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 166.772247][ T7026] Call Trace: [ 166.772256][ T7026] [ 166.772270][ T7026] dump_stack_lvl+0xe8/0x150 [ 166.772306][ T7026] should_fail_ex+0x3eb/0x540 [ 166.772336][ T7026] should_failslab+0xa8/0x100 [ 166.772362][ T7026] __kmalloc_noprof+0xf9/0x710 [ 166.772391][ T7026] ? rcu_is_watching+0x16/0xb0 [ 166.772415][ T7026] ? tomoyo_realpath_from_path+0xef/0x640 [ 166.772442][ T7026] ? tomoyo_realpath_from_path+0xef/0x640 [ 166.772477][ T7026] tomoyo_realpath_from_path+0xef/0x640 [ 166.772515][ T7026] ? tomoyo_path_number_perm+0x219/0x5f0 [ 166.772540][ T7026] tomoyo_path_number_perm+0x246/0x5f0 [ 166.772567][ T7026] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 166.772588][ T7026] ? __lock_acquire+0x747/0x2de0 [ 166.772636][ T7026] ? hook_file_ioctl+0x1f2/0x600 [ 166.772658][ T7026] ? call_rcu+0x64d/0x8b0 [ 166.772702][ T7026] ? __fget_files+0x2a/0x420 [ 166.772733][ T7026] ? __fget_files+0x2a/0x420 [ 166.772757][ T7026] ? __fget_files+0x3a2/0x420 [ 166.772783][ T7026] ? __fget_files+0x2a/0x420 [ 166.772814][ T7026] security_file_ioctl+0xc3/0x2a0 [ 166.772859][ T7026] __se_sys_ioctl+0x47/0x170 [ 166.772894][ T7026] do_syscall_64+0x166/0x520 [ 166.772917][ T7026] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.772940][ T7026] ? clear_bhb_loop+0x70/0xc0 [ 166.772968][ T7026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.772990][ T7026] RIP: 0033:0x7fcceb99e159 [ 166.773012][ T7026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.773031][ T7026] RSP: 002b:00007fccec79c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 166.773057][ T7026] RAX: ffffffffffffffda RBX: 00007fccebc25fa0 RCX: 00007fcceb99e159 [ 166.773073][ T7026] RDX: 0000200000000080 RSI: 0000000000008933 RDI: 000000000000000d [ 166.773088][ T7026] RBP: 00007fcceba3506b R08: 0000000000000000 R09: 0000000000000000 [ 166.773101][ T7026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.773114][ T7026] R13: 00007fccebc26038 R14: 00007fccebc25fa0 R15: 00007ffdc9548758 [ 166.773151][ T7026] [ 166.801142][ T7026] ERROR: Out of memory at tomoyo_realpath_from_path. [ 167.350883][ T5720] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 167.497346][ T5720] usb 3-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice= 0.00 [ 167.499232][ T5720] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.505257][ T5720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.505322][ T5720] usb 3-1: Product: syz [ 167.505338][ T5720] usb 3-1: Manufacturer: syz [ 167.505353][ T5720] usb 3-1: SerialNumber: syz [ 167.592769][ T5720] gspca_main: spca500-2.14.0 probing 046d:0900 [ 167.668590][ T286] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 167.673898][ T286] (NULL device *): queue 0 connect admin queue failed (-111). [ 167.673967][ T286] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 167.673987][ T286] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 167.790568][ T5720] gspca_spca500: reg write: error -71 [ 167.839097][ T5720] gspca_spca500: reg write: error -71 [ 167.839592][ T5720] gspca_spca500: reg write: error -71 [ 167.840758][ T5720] gspca_spca500: reg write: error -71 [ 167.841203][ T5720] gspca_spca500: reg write: error -71 [ 167.841775][ T5720] gspca_spca500: reg write: error -71 [ 167.842878][ T5720] gspca_spca500: reg write: error -71 [ 167.843333][ T5720] gspca_spca500: reg write: error -71 [ 167.843806][ T5720] gspca_spca500: reg write: error -71 [ 167.844782][ T5720] gspca_spca500: reg write: error -71 [ 167.845663][ T5720] gspca_spca500: reg write: error -71 [ 167.891080][ T5720] gspca_spca500: reg write: error -71 [ 167.908667][ T5720] gspca_spca500: reg write: error -71 [ 167.921913][ T5720] gspca_spca500: reg write: error -71 [ 167.964736][ T83] IPVS: starting estimator thread 0... [ 167.965638][ T5720] usb 3-1: USB disconnect, device number 15 [ 168.066426][ T7033] IPVS: using max 24 ests per chain, 57600 per kthread [ 168.373237][ T4945] sony 0003:054C:0268.0008: failed to retrieve feature report 0xf2 with the Sixaxis MAC address [ 168.436515][ T4945] sony 0003:054C:0268.0008: hiddev0,hidraw0: USB HID v80.00 Joystick [HID 054c:0268] on usb-dummy_hcd.1-1/input0 [ 168.436553][ T4945] sony 0003:054C:0268.0008: failed to claim input [ 168.585134][ T4945] usb 2-1: USB disconnect, device number 23 [ 168.915301][ T7038] fido_id[7038]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 168.986020][ C0] net_ratelimit: 8367 callbacks suppressed [ 168.986045][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 168.986460][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 168.987351][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.987820][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.988219][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:87:e4:59:23:03, vlan:0) [ 168.989126][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:87:e4:59:23:03, vlan:0) [ 168.989458][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.989861][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.990322][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.990723][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:87:e4:59:23:03, vlan:0) [ 169.295956][ T4945] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 169.450586][ T4945] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 169.452190][ T4945] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.452247][ T4945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.512352][ T4945] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 169.512629][ T4945] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 81 [ 169.512707][ T4945] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 1 [ 169.525631][ T4945] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 169.563649][ T4945] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 169.580851][ T4945] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 169.615123][ T4945] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 169.615228][ T4945] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 169.679266][ T4945] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 169.745895][ T45] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 169.749746][ T45] (NULL device *): queue 0 connect admin queue failed (-111). [ 169.749778][ T45] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 169.749798][ T45] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 170.314705][ T5720] usb 3-1: USB disconnect, device number 16 [ 170.350570][ T5720] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 170.415640][ T5720] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 170.431721][ T5720] keyspan 3-1:1.0: device disconnected [ 170.575872][ T4945] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 170.675208][ T7062] netlink: 8 bytes leftover after parsing attributes in process `syz.3.312'. [ 170.738306][ T4945] usb 5-1: unable to get BOS descriptor or descriptor too short [ 170.738372][ T4945] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db98, bcdDevice=d1.34 [ 170.740014][ T4945] usb 5-1: config 100 has an invalid interface number: 117 but max is 0 [ 170.740041][ T4945] usb 5-1: config 100 has no interface number 0 [ 170.740073][ T4945] usb 5-1: config 100 interface 117 has no altsetting 0 [ 170.796114][ T4945] usb 5-1: string descriptor 0 read error: -22 [ 170.796277][ T4945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.800416][ T7063] ovs-dp0: left promiscuous mode [ 170.865236][ T4945] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)' in warm state. [ 170.865586][ T4945] dvb-usb: bulk message failed: -22 (2/0) [ 170.915009][ T4945] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 170.928001][ T4945] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)) [ 170.928066][ T4945] usb 5-1: media controller created [ 171.034942][ T4945] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 171.091426][ T7060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.111691][ T7060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.291828][ T4945] cxusb: set interface failed [ 171.291850][ T4945] dvb-usb: bulk message failed: -22 (1/0) [ 171.291868][ T4945] dvb-usb: bulk message failed: -22 (3/0) [ 171.291888][ T4945] usb 5-1: bluebird_gpio_write failed. [ 171.324461][ T4945] dvb-usb: bulk message failed: -22 (3/0) [ 171.324493][ T4945] usb 5-1: bluebird_gpio_write failed. [ 171.360163][ T7067] warning: `syz.1.314' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 171.582695][ T7068] FAULT_INJECTION: forcing a failure. [ 171.582695][ T7068] name fail_futex, interval 1, probability 0, space 0, times 0 [ 171.582735][ T7068] CPU: 1 UID: 0 PID: 7068 Comm: syz.2.313 Tainted: G L syzkaller #0 PREEMPT(full) [ 171.582767][ T7068] Tainted: [L]=SOFTLOCKUP [ 171.582775][ T7068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 171.582789][ T7068] Call Trace: [ 171.582799][ T7068] [ 171.582808][ T7068] dump_stack_lvl+0xe8/0x150 [ 171.582844][ T7068] should_fail_ex+0x3eb/0x540 [ 171.582873][ T7068] get_futex_key+0x1b4/0x1580 [ 171.582911][ T7068] ? kasan_save_stack+0x4d/0x60 [ 171.582946][ T7068] ? call_rcu+0xee/0x8b0 [ 171.582967][ T7068] ? fput_close_sync+0x11f/0x240 [ 171.582990][ T7068] ? __x64_sys_close+0x7e/0x110 [ 171.583018][ T7068] ? __pfx_get_futex_key+0x10/0x10 [ 171.583065][ T7068] futex_wake+0x119/0x5f0 [ 171.583099][ T7068] ? __pfx_futex_wake+0x10/0x10 [ 171.583143][ T7068] do_futex+0x458/0x4e0 [ 171.583165][ T7068] ? call_rcu+0x64d/0x8b0 [ 171.583193][ T7068] ? __pfx_do_futex+0x10/0x10 [ 171.583226][ T7068] __se_sys_futex+0x3a8/0x450 [ 171.583255][ T7068] ? fput_close_sync+0x11f/0x240 [ 171.583286][ T7068] ? __pfx___se_sys_futex+0x10/0x10 [ 171.583317][ T7068] ? __x64_sys_futex+0x21/0xf0 [ 171.583345][ T7068] do_syscall_64+0x166/0x520 [ 171.583375][ T7068] ? trace_irq_disable+0x3b/0x140 [ 171.583405][ T7068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.583428][ T7068] ? clear_bhb_loop+0x70/0xc0 [ 171.583454][ T7068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.583476][ T7068] RIP: 0033:0x7fcceb99e159 [ 171.583498][ T7068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.583516][ T7068] RSP: 002b:00007fccec79c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 171.583542][ T7068] RAX: ffffffffffffffda RBX: 00007fccebc25fa8 RCX: 00007fcceb99e159 [ 171.583558][ T7068] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fccebc25fac [ 171.583573][ T7068] RBP: 00007fccebc25fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 171.583588][ T7068] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000000 [ 171.583602][ T7068] R13: 00007fccebc26038 R14: 00007ffdc9548670 R15: 00007ffdc9548758 [ 171.583637][ T7068] [ 171.847949][ T83] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 171.875257][ T83] (NULL device *): queue 0 connect admin queue failed (-111). [ 171.875293][ T83] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 171.875313][ T83] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 171.975275][ T4945] DVB: Unable to find symbol dib7000p_attach() [ 171.975295][ T4945] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)' [ 172.148813][ T5720] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 172.306104][ T4945] rc_core: IR keymap rc-dvico-mce not found [ 172.306127][ T4945] Registered IR keymap rc-empty [ 172.314594][ T4945] rc rc0: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 172.357442][ T5720] usb 3-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice= 0.00 [ 172.384055][ T5720] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.404480][ T4945] input: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input10 [ 172.424851][ T5720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.424881][ T5720] usb 3-1: Product: syz [ 172.424898][ T5720] usb 3-1: Manufacturer: syz [ 172.424913][ T5720] usb 3-1: SerialNumber: syz [ 172.484264][ T4945] dvb-usb: schedule remote query interval to 100 msecs. [ 172.484292][ T4945] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) successfully initialized and connected. [ 172.526224][ T4945] usb 5-1: USB disconnect, device number 14 [ 172.585680][ T5720] gspca_main: spca500-2.14.0 probing 046d:0900 [ 172.739861][ T5720] gspca_spca500: reg write: error -71 [ 172.744203][ T5720] gspca_spca500: reg write: error -71 [ 172.757394][ T5720] gspca_spca500: reg write: error -71 [ 172.765929][ T5720] gspca_spca500: reg write: error -71 [ 172.769450][ T5720] gspca_spca500: reg write: error -71 [ 172.773981][ T5720] gspca_spca500: reg write: error -71 [ 172.774368][ T5720] gspca_spca500: reg write: error -71 [ 172.775315][ T5720] gspca_spca500: reg write: error -71 [ 172.801156][ T5720] gspca_spca500: reg write: error -71 [ 172.821933][ T5720] gspca_spca500: reg write: error -71 [ 172.834315][ T5720] gspca_spca500: reg write: error -71 [ 172.844242][ T5720] gspca_spca500: reg write: error -71 [ 172.845003][ T5720] gspca_spca500: reg write: error -71 [ 172.859652][ T5720] gspca_spca500: reg write: error -71 [ 172.966204][ T5720] usb 3-1: USB disconnect, device number 17 [ 173.003147][ T31] audit: type=1400 audit(1790234950.733:9): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/" pid=7083 comm="syz.4.319" [ 173.276363][ T4945] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 4 ( successfully deinitialized and disconnected. [ 173.746764][ T31] audit: type=1400 audit(1790234951.483:10): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="/" pid=7093 comm="syz.1.322" name="/" offset=53 [ 173.906228][ T3286] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 173.907360][ T3286] (NULL device *): queue 0 connect admin queue failed (-111). [ 173.907387][ T3286] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 173.907406][ T3286] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 173.997285][ C0] net_ratelimit: 8341 callbacks suppressed [ 173.997310][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.997650][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 173.998061][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 173.998936][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.999424][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.999849][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:87:e4:59:23:03, vlan:0) [ 174.000723][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:87:e4:59:23:03, vlan:0) [ 174.001067][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 174.001459][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 174.001937][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.701908][ T7131] FAULT_INJECTION: forcing a failure. [ 175.701908][ T7131] name fail_futex, interval 1, probability 0, space 0, times 0 [ 175.701948][ T7131] CPU: 1 UID: 0 PID: 7131 Comm: syz.3.329 Tainted: G L syzkaller #0 PREEMPT(full) [ 175.701979][ T7131] Tainted: [L]=SOFTLOCKUP [ 175.701987][ T7131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 175.702001][ T7131] Call Trace: [ 175.702009][ T7131] [ 175.702019][ T7131] dump_stack_lvl+0xe8/0x150 [ 175.702055][ T7131] should_fail_ex+0x3eb/0x540 [ 175.702085][ T7131] get_futex_key+0x1b4/0x1580 [ 175.702118][ T7131] ? __lock_acquire+0x747/0x2de0 [ 175.702161][ T7131] ? __pfx_get_futex_key+0x10/0x10 [ 175.702201][ T7131] ? update_se+0x90/0x1020 [ 175.702232][ T7131] futex_wait_setup+0x4a/0x590 [ 175.702277][ T7131] ? __futex_wait+0xdb/0x470 [ 175.702310][ T7131] __futex_wait+0x175/0x470 [ 175.702342][ T7131] ? update_protect_slice+0x128/0x210 [ 175.702379][ T7131] ? __pfx___futex_wait+0x10/0x10 [ 175.702412][ T7131] ? __pfx_futex_wake_mark+0x10/0x10 [ 175.702446][ T7131] ? try_to_wake_up+0x8c5/0x14d0 [ 175.702481][ T7131] futex_wait+0x121/0x390 [ 175.702512][ T7131] ? __pfx_futex_wait+0x10/0x10 [ 175.702561][ T7131] do_futex+0x3e7/0x4e0 [ 175.702582][ T7131] ? call_rcu+0x64d/0x8b0 [ 175.702609][ T7131] ? __pfx_do_futex+0x10/0x10 [ 175.702642][ T7131] __se_sys_futex+0x3a8/0x450 [ 175.702673][ T7131] ? __pfx___se_sys_futex+0x10/0x10 [ 175.702697][ T7131] ? rcu_is_watching+0x16/0xb0 [ 175.702725][ T7131] ? __x64_sys_futex+0x21/0xf0 [ 175.702753][ T7131] do_syscall_64+0x166/0x520 [ 175.702772][ T7131] ? trace_irq_disable+0x3b/0x140 [ 175.702801][ T7131] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.702824][ T7131] ? clear_bhb_loop+0x70/0xc0 [ 175.702850][ T7131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.702872][ T7131] RIP: 0033:0x7efd4699e159 [ 175.702894][ T7131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.702913][ T7131] RSP: 002b:00007efd478c20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 175.702937][ T7131] RAX: ffffffffffffffda RBX: 00007efd46c26098 RCX: 00007efd4699e159 [ 175.702954][ T7131] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007efd46c26098 [ 175.702968][ T7131] RBP: 00007efd46c26090 R08: 0000000000000000 R09: 0000000000000000 [ 175.702982][ T7131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.702994][ T7131] R13: 00007efd46c26128 R14: 00007fff34734f70 R15: 00007fff34735058 [ 175.703028][ T7131] [ 175.986206][ T83] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 175.987878][ T83] (NULL device *): queue 0 connect admin queue failed (-111). [ 175.987905][ T83] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 175.987925][ T83] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 176.275865][ T4945] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 176.315230][ T7137] netlink: 28 bytes leftover after parsing attributes in process `syz.2.332'. [ 176.426559][ T4945] usb 4-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice= 0.00 [ 176.427862][ T4945] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.431906][ T4945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.431936][ T4945] usb 4-1: Product: syz [ 176.431951][ T4945] usb 4-1: Manufacturer: syz [ 176.431965][ T4945] usb 4-1: SerialNumber: syz [ 176.500542][ T4945] gspca_main: spca500-2.14.0 probing 046d:0900 [ 176.702159][ T4945] gspca_spca500: reg write: error -71 [ 176.702943][ T4945] gspca_spca500: reg write: error -71 [ 176.703311][ T4945] gspca_spca500: reg write: error -71 [ 176.703695][ T4945] gspca_spca500: reg write: error -71 [ 176.705702][ T4945] gspca_spca500: reg write: error -71 [ 176.739876][ T4945] gspca_spca500: reg write: error -71 [ 176.749587][ T4945] gspca_spca500: reg write: error -71 [ 176.752839][ T4945] gspca_spca500: reg write: error -71 [ 176.754195][ T4945] gspca_spca500: reg write: error -71 [ 176.774313][ T4945] gspca_spca500: reg write: error -71 [ 176.782740][ T4945] gspca_spca500: reg write: error -71 [ 176.783531][ T4945] gspca_spca500: reg write: error -71 [ 176.785339][ T4945] gspca_spca500: reg write: error -71 [ 176.802692][ T4945] gspca_spca500: reg write: error -71 [ 176.826376][ T4945] usb 4-1: USB disconnect, device number 34 [ 178.069903][ T83] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 178.074082][ T83] (NULL device *): queue 0 connect admin queue failed (-111). [ 178.074113][ T83] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 178.074132][ T83] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 178.918810][ T7169] netlink: 96 bytes leftover after parsing attributes in process `syz.2.343'. [ 179.006230][ C0] net_ratelimit: 7826 callbacks suppressed [ 179.006256][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.006621][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 179.007052][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 179.008010][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.008498][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.008929][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:87:e4:59:23:03, vlan:0) [ 179.009910][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:87:e4:59:23:03, vlan:0) [ 179.010263][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.010683][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.011181][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.145998][ T1268] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 180.151451][ T1268] (NULL device *): queue 0 connect admin queue failed (-111). [ 180.151484][ T1268] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 180.151504][ T1268] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 180.167722][ T4945] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 180.229519][ T7186] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(2130706436.16777215.0), cmd(9) [ 180.449368][ T4945] usb 4-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice= 0.00 [ 180.451887][ T4945] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 180.454607][ T4945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.454633][ T4945] usb 4-1: Product: syz [ 180.454648][ T4945] usb 4-1: Manufacturer: syz [ 180.454663][ T4945] usb 4-1: SerialNumber: syz [ 180.675444][ T4945] gspca_main: spca500-2.14.0 probing 046d:0900 [ 180.867793][ T4945] gspca_spca500: reg write: error -71 [ 180.872600][ T4945] gspca_spca500: reg write: error -71 [ 180.874412][ T4945] gspca_spca500: reg write: error -71 [ 180.887017][ T4945] gspca_spca500: reg write: error -71 [ 180.910662][ T4945] gspca_spca500: reg write: error -71 [ 180.913537][ T4945] gspca_spca500: reg write: error -71 [ 180.922493][ T4945] gspca_spca500: reg write: error -71 [ 180.939187][ T4945] gspca_spca500: reg write: error -71 [ 180.944921][ T4945] gspca_spca500: reg write: error -71 [ 180.945477][ T4945] gspca_spca500: reg write: error -71 [ 180.968838][ T4945] gspca_spca500: reg write: error -71 [ 180.996607][ T4945] gspca_spca500: reg write: error -71 [ 180.997108][ T4945] gspca_spca500: reg write: error -71 [ 180.997538][ T4945] gspca_spca500: reg write: error -71 [ 181.024804][ T4945] usb 4-1: USB disconnect, device number 35 [ 182.228021][ T286] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 182.228201][ T286] (NULL device *): queue 0 connect admin queue failed (-111). [ 182.228225][ T286] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 182.228245][ T286] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 182.428942][ T7204] hpfs: hpfs_map_sector(): read error [ 182.689702][ T5720] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 182.840117][ T5720] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 182.855557][ T5720] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 182.855623][ T5720] usb 3-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 182.921725][ T5720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.921758][ T5720] usb 3-1: Product: syz [ 182.921772][ T5720] usb 3-1: Manufacturer: syz [ 182.921787][ T5720] usb 3-1: SerialNumber: syz [ 183.361996][ T4945] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 183.587258][ T5622] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 183.642732][ T7204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.643483][ T7204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.844752][ T5706] usb 3-1: USB disconnect, device number 18 [ 184.015791][ C0] net_ratelimit: 7512 callbacks suppressed [ 184.015816][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:87:e4:59:23:03, vlan:0) [ 184.016212][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 184.018720][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.019103][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 184.019612][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 184.020701][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.021234][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.021757][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:87:e4:59:23:03, vlan:0) [ 184.022780][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:87:e4:59:23:03, vlan:0) [ 184.023176][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.248194][ T7211] overlayfs: overlapping lowerdir path [ 184.258828][ T5622] usb 2-1: Using ep0 maxpacket: 16 [ 184.300933][ T5622] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 184.316582][ T286] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 184.316791][ T286] (NULL device *): queue 0 connect admin queue failed (-111). [ 184.316816][ T286] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 184.316835][ T286] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 184.419206][ T5622] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 184.419245][ T5622] usb 2-1: config 0 interface 0 has no altsetting 0 [ 184.474403][ T4945] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 184.474661][ T4945] ath9k_htc: Failed to initialize the device [ 184.518523][ T5706] usb 3-1: ath9k_htc: USB layer deinitialized [ 184.547272][ T7210] overlayfs: overlapping lowerdir path [ 184.593534][ T5622] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.593566][ T5622] usb 2-1: Product: syz [ 184.593583][ T5622] usb 2-1: Manufacturer: syz [ 184.593598][ T5622] usb 2-1: SerialNumber: syz [ 184.733986][ T5622] usb 2-1: config 0 descriptor?? [ 184.915839][ T5706] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 185.067448][ T5706] usb 3-1: Using ep0 maxpacket: 32 [ 185.069810][ T5706] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 1.08 [ 185.071018][ T5706] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 185.071074][ T5706] usb 3-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 185.125827][ T5706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.125861][ T5706] usb 3-1: Product: syz [ 185.125878][ T5706] usb 3-1: Manufacturer: syz [ 185.125893][ T5706] usb 3-1: SerialNumber: syz [ 185.402107][ T5622] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input11 [ 185.504720][ T5706] usb 3-1: can't set config #1, error -71 [ 185.569471][ T5706] usb 3-1: USB disconnect, device number 19 [ 186.060690][ T5622] rc_core: IR keymap rc-imon-pad not found [ 186.060712][ T5622] Registered IR keymap rc-empty [ 186.060803][ T5622] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 186.060822][ T5622] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 186.161789][ T5622] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 186.184883][ T5622] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input12 [ 186.314207][ T5622] imon 2-1:0.0: iMON device (15c2:0041, intf0) on usb<2:24> initialized [ 186.386241][ T1283] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 186.388311][ T1283] (NULL device *): queue 0 connect admin queue failed (-111). [ 186.388341][ T1283] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 186.388361][ T1283] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 186.456326][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 186.521229][ T5622] usb 2-1: USB disconnect, device number 24 [ 187.055909][ T5619] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 187.214255][ T5619] usb 4-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice= 0.00 [ 187.227143][ T5619] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.235930][ T5619] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.235994][ T5619] usb 4-1: Product: syz [ 187.236010][ T5619] usb 4-1: Manufacturer: syz [ 187.236053][ T5619] usb 4-1: SerialNumber: syz [ 187.311200][ T5619] gspca_main: spca500-2.14.0 probing 046d:0900 [ 187.505563][ T5619] gspca_spca500: reg write: error -71 [ 187.512898][ T5619] gspca_spca500: reg write: error -71 [ 187.514827][ T5619] gspca_spca500: reg write: error -71 [ 187.527664][ T5619] gspca_spca500: reg write: error -71 [ 187.532275][ T5619] gspca_spca500: reg write: error -71 [ 187.588499][ T5619] gspca_spca500: reg write: error -71 [ 187.592430][ T5619] gspca_spca500: reg write: error -71 [ 187.592825][ T5619] gspca_spca500: reg write: error -71 [ 187.594851][ T5619] gspca_spca500: reg write: error -71 [ 187.596037][ T7246] FAULT_INJECTION: forcing a failure. [ 187.596037][ T7246] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 187.596070][ T7246] CPU: 1 UID: 0 PID: 7246 Comm: syz.1.364 Tainted: G L syzkaller #0 PREEMPT(full) [ 187.596098][ T7246] Tainted: [L]=SOFTLOCKUP [ 187.596106][ T7246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 187.596128][ T7246] Call Trace: [ 187.596137][ T7246] [ 187.596146][ T7246] dump_stack_lvl+0xe8/0x150 [ 187.596179][ T7246] should_fail_ex+0x3eb/0x540 [ 187.596209][ T7246] _copy_from_user+0x2d/0xb0 [ 187.596238][ T7246] kstrtouint_from_user+0xd6/0x180 [ 187.596265][ T7246] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 187.596296][ T7246] ? lock_acquire+0x115/0x350 [ 187.596332][ T7246] proc_fail_nth_write+0x8e/0x210 [ 187.596363][ T7246] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 187.596403][ T7246] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 187.596432][ T7246] vfs_write+0x296/0xba0 [ 187.596471][ T7246] ? __pfx_vfs_write+0x10/0x10 [ 187.596502][ T7246] ? __fget_files+0x2a/0x420 [ 187.596538][ T7246] ? __fget_files+0x3a2/0x420 [ 187.596562][ T7246] ? __fget_files+0x2a/0x420 [ 187.596598][ T7246] ksys_write+0x150/0x270 [ 187.596629][ T7246] ? __pfx_ksys_write+0x10/0x10 [ 187.596670][ T7246] do_syscall_64+0x166/0x520 [ 187.596690][ T7246] ? trace_irq_disable+0x3b/0x140 [ 187.596717][ T7246] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.596738][ T7246] ? clear_bhb_loop+0x70/0xc0 [ 187.596764][ T7246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.596785][ T7246] RIP: 0033:0x7f3e0935e98e [ 187.596804][ T7246] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 187.596822][ T7246] RSP: 002b:00007f3e0a251fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 187.596847][ T7246] RAX: ffffffffffffffda RBX: 00007f3e0a2526c0 RCX: 00007f3e0935e98e [ 187.596863][ T7246] RDX: 0000000000000001 RSI: 00007f3e0a2520a0 RDI: 0000000000000003 [ 187.596876][ T7246] RBP: 00007f3e0a252090 R08: 0000000000000000 R09: 0000000000000000 [ 187.596889][ T7246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 187.596902][ T7246] R13: 00007f3e09626128 R14: 00007f3e09626090 R15: 00007fffccc8fa18 [ 187.596937][ T7246] [ 187.638320][ T5619] gspca_spca500: reg write: error -71 [ 187.654187][ T5619] gspca_spca500: reg write: error -71 [ 187.676461][ T5619] gspca_spca500: reg write: error -71 [ 187.686386][ T5619] gspca_spca500: reg write: error -71 [ 187.748926][ T5619] gspca_spca500: reg write: error -71 [ 187.975146][ T5619] usb 4-1: USB disconnect, device number 36 [ 188.285932][ T4945] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 188.437234][ T4945] usb 3-1: Using ep0 maxpacket: 32 [ 188.438488][ T4945] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 188.466650][ T1283] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 188.467301][ T4945] usb 3-1: config index 0 descriptor too short (expected 19, got 18) [ 188.496993][ T1283] (NULL device *): queue 0 connect admin queue failed (-111). [ 188.497038][ T1283] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 188.497098][ T1283] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 188.534951][ T4945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.534982][ T4945] usb 3-1: Product: syz [ 188.534997][ T4945] usb 3-1: Manufacturer: syz [ 188.535013][ T4945] usb 3-1: SerialNumber: syz [ 188.572290][ T4945] usb 3-1: config 0 descriptor?? [ 188.603280][ T4945] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 188.603339][ T4945] dvb-usb: bulk message failed: -22 (2/0) [ 188.658809][ T4945] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 188.661592][ T4945] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 188.661660][ T4945] usb 3-1: media controller created [ 188.686647][ T5619] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 188.768676][ T4945] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 188.835923][ T5619] usb 5-1: Using ep0 maxpacket: 16 [ 188.856276][ T5619] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 188.857551][ T5619] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.860481][ T5619] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.860506][ T5619] usb 5-1: Product: syz [ 188.860521][ T5619] usb 5-1: Manufacturer: syz [ 188.860536][ T5619] usb 5-1: SerialNumber: syz [ 188.956513][ T7248] netlink: 80 bytes leftover after parsing attributes in process `syz.2.363'. [ 189.018985][ T7259] dvb-usb: bulk message failed: -22 (4/0) [ 189.019011][ T7259] cxusb: i2c read failed [ 189.026626][ C0] net_ratelimit: 6982 callbacks suppressed [ 189.026650][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:87:e4:59:23:03, vlan:0) [ 189.027020][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.027489][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.027983][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.028361][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:82:87:e4:59:23:03, vlan:0) [ 189.028676][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 189.030733][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.031104][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 189.031488][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 189.032300][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.189797][ T7258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.367'. [ 189.227895][ T4945] usb 3-1: selecting invalid altsetting 7 [ 189.227921][ T4945] cxusb: set interface failed [ 189.234006][ T4945] dvb-usb: bulk message failed: -22 (1/0) [ 189.259531][ T5619] usb 5-1: config 0 descriptor?? [ 189.265214][ T5619] sr9700 5-1:0.0: probe with driver sr9700 failed with error -22 [ 189.456996][ T5706] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 189.462089][ T4945] DVB: Unable to find symbol lgdt330x_attach() [ 189.462107][ T4945] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 189.496975][ T5619] usb 5-1: USB disconnect, device number 15 [ 189.606073][ T5706] usb 2-1: Using ep0 maxpacket: 16 [ 189.608452][ T5706] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 189.610995][ T5706] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 189.611022][ T5706] usb 2-1: config 0 has no interface number 0 [ 189.659267][ T5706] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 189.659298][ T5706] usb 2-1: Product: syz [ 189.659313][ T5706] usb 2-1: SerialNumber: syz [ 189.722383][ T5706] usb 2-1: config 0 descriptor?? [ 189.734144][ T5706] cm109 2-1:0.8: invalid payload size 9, expected 4 [ 189.772547][ T5706] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input14 [ 189.917161][ T4945] rc_core: IR keymap rc-dvico-portable not found [ 189.917182][ T4945] Registered IR keymap rc-empty [ 189.948191][ T4945] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 189.973090][ T4945] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input13 [ 190.003995][ T4945] dvb-usb: schedule remote query interval to 100 msecs. [ 190.004022][ T4945] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 190.032687][ T4945] usb 3-1: USB disconnect, device number 20 [ 190.467739][ T4945] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 190.553721][ T1283] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 190.578263][ T1283] (NULL device *): queue 0 connect admin queue failed (-111). [ 190.578297][ T1283] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 190.578317][ T1283] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 190.818661][ T7275] netlink: 14 bytes leftover after parsing attributes in process `syz.3.371'. [ 190.864476][ T286] Bluetooth: hci4: Frame reassembly failed (-84) [ 190.907443][ T5619] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 191.038214][ T5619] usb 5-1: device descriptor read/64, error -71 [ 191.084756][ C1] cm109 2-1:0.8: cm109_urb_irq_callback: urb status -71 [ 191.084804][ C1] ------------[ cut here ]------------ [ 191.084815][ C1] URB ffff88801d70e500 submitted while active [ 191.084830][ C1] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x79/0x18b0, CPU#1: ksoftirqd/1/24 [ 191.113421][ C1] Modules linked in: [ 191.117361][ C1] CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 191.128159][ C1] Tainted: [L]=SOFTLOCKUP [ 191.132506][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 191.142591][ C1] RIP: 0010:usb_submit_urb+0x7c/0x18b0 [ 191.148102][ C1] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 69 02 be fa 49 83 3e 00 74 40 e8 3e d9 4d fa 48 8d 3d f7 3d 2f 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 23 d9 4d fa eb 05 e8 1c d9 [ 191.167830][ C1] RSP: 0018:ffffc900001e77b8 EFLAGS: 00010083 [ 191.173939][ C1] RAX: ffffffff877a2bb2 RBX: ffff88801d70e500 RCX: 0000000000040000 [ 191.181949][ C1] RDX: ffffc90002272000 RSI: ffff88801d70e500 RDI: ffffffff90a969b0 [ 191.189973][ C1] RBP: dffffc0000000000 R08: 0000000000000100 R09: 0000000000000004 [ 191.197989][ C1] R10: dffffc0000000000 R11: fffff5200003cef4 R12: ffff8880357d7848 [ 191.206015][ C1] R13: ffff8880357d7830 R14: ffff88801d70e508 R15: 0000000000000820 [ 191.214033][ C1] FS: 0000000000000000(0000) GS:ffff88812495b000(0000) knlGS:0000000000000000 [ 191.223090][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 191.229713][ C1] CR2: 00007fff59299fc8 CR3: 000000005b26a000 CR4: 00000000003526f0 [ 191.237751][ C1] Call Trace: [ 191.241069][ C1] [ 191.244116][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 191.249980][ C1] cm109_urb_irq_callback+0x6fb/0xca0 [ 191.255422][ C1] __usb_hcd_giveback_urb+0x378/0x540 [ 191.260926][ C1] dummy_timer+0xa91/0x4cf0 [ 191.265493][ C1] ? __lock_acquire+0x747/0x2de0 [ 191.270492][ C1] ? __lock_acquire+0x747/0x2de0 [ 191.275489][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 191.280908][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 191.285929][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 191.291807][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 191.296802][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 191.302071][ C1] hrtimer_run_softirq+0x1e3/0x2e0 [ 191.307234][ C1] handle_softirqs+0x226/0x860 [ 191.312045][ C1] ? schedule+0x90/0x2b0 [ 191.316331][ C1] ? run_ksoftirqd+0x36/0x60 [ 191.320971][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 191.326036][ C1] run_ksoftirqd+0x36/0x60 [ 191.330494][ C1] smpboot_thread_fn+0x565/0xa70 [ 191.335647][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 191.340813][ C1] kthread+0x38b/0x480 [ 191.344942][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 191.350453][ C1] ? __pfx_kthread+0x10/0x10 [ 191.355096][ C1] ret_from_fork+0x514/0xb70 [ 191.359737][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 191.364890][ C1] ? __switch_to+0xc89/0x1420 [ 191.369612][ C1] ? __pfx_kthread+0x10/0x10 [ 191.374253][ C1] ret_from_fork_asm+0x1a/0x30 [ 191.379087][ C1] [ 191.382133][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 191.389444][ C1] CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 191.400246][ C1] Tainted: [L]=SOFTLOCKUP [ 191.404598][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 191.414686][ C1] Call Trace: [ 191.417994][ C1] [ 191.420962][ C1] vpanic+0x56d/0xa70 [ 191.424995][ C1] ? __pfx__printk+0x10/0x10 [ 191.429626][ C1] ? __pfx_vpanic+0x10/0x10 [ 191.434173][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 191.439498][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 191.444749][ C1] panic+0xc5/0xd0 [ 191.448517][ C1] ? __pfx_panic+0x10/0x10 [ 191.453001][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 191.457988][ C1] __warn+0x315/0x4c0 [ 191.462010][ C1] ? usb_submit_urb+0x79/0x18b0 [ 191.466903][ C1] ? usb_submit_urb+0x79/0x18b0 [ 191.471809][ C1] __report_bug+0x276/0x570 [ 191.476365][ C1] ? usb_submit_urb+0x79/0x18b0 [ 191.481263][ C1] ? __pfx___report_bug+0x10/0x10 [ 191.486347][ C1] ? __lock_acquire+0x747/0x2de0 [ 191.491335][ C1] report_bug_entry+0x19b/0x290 [ 191.496238][ C1] ? usb_submit_urb+0x7c/0x18b0 [ 191.501125][ C1] ? usb_submit_urb+0x81/0x18b0 [ 191.506012][ C1] handle_bug+0xce/0x200 [ 191.510298][ C1] exc_invalid_op+0x1a/0x50 [ 191.514834][ C1] asm_exc_invalid_op+0x1a/0x20 [ 191.519808][ C1] RIP: 0010:usb_submit_urb+0x7c/0x18b0 [ 191.525313][ C1] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 69 02 be fa 49 83 3e 00 74 40 e8 3e d9 4d fa 48 8d 3d f7 3d 2f 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 23 d9 4d fa eb 05 e8 1c d9 [ 191.545045][ C1] RSP: 0018:ffffc900001e77b8 EFLAGS: 00010083 [ 191.551164][ C1] RAX: ffffffff877a2bb2 RBX: ffff88801d70e500 RCX: 0000000000040000 [ 191.559176][ C1] RDX: ffffc90002272000 RSI: ffff88801d70e500 RDI: ffffffff90a969b0 [ 191.567182][ C1] RBP: dffffc0000000000 R08: 0000000000000100 R09: 0000000000000004 [ 191.575190][ C1] R10: dffffc0000000000 R11: fffff5200003cef4 R12: ffff8880357d7848 [ 191.583192][ C1] R13: ffff8880357d7830 R14: ffff88801d70e508 R15: 0000000000000820 [ 191.591214][ C1] ? usb_submit_urb+0x72/0x18b0 [ 191.596128][ C1] ? usb_submit_urb+0x72/0x18b0 [ 191.601195][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 191.607144][ C1] cm109_urb_irq_callback+0x6fb/0xca0 [ 191.612656][ C1] __usb_hcd_giveback_urb+0x378/0x540 [ 191.618079][ C1] dummy_timer+0xa91/0x4cf0 [ 191.622723][ C1] ? __lock_acquire+0x747/0x2de0 [ 191.627726][ C1] ? __lock_acquire+0x747/0x2de0 [ 191.632892][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 191.638340][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 191.643334][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 191.649225][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 191.654212][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 191.659475][ C1] hrtimer_run_softirq+0x1e3/0x2e0 [ 191.664636][ C1] handle_softirqs+0x226/0x860 [ 191.669446][ C1] ? schedule+0x90/0x2b0 [ 191.673741][ C1] ? run_ksoftirqd+0x36/0x60 [ 191.678384][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 191.683530][ C1] run_ksoftirqd+0x36/0x60 [ 191.688075][ C1] smpboot_thread_fn+0x565/0xa70 [ 191.693064][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 191.698143][ C1] kthread+0x38b/0x480 [ 191.702269][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 191.707773][ C1] ? __pfx_kthread+0x10/0x10 [ 191.712406][ C1] ret_from_fork+0x514/0xb70 [ 191.717126][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 191.722294][ C1] ? __switch_to+0xc89/0x1420 [ 191.727012][ C1] ? __pfx_kthread+0x10/0x10 [ 191.731675][ C1] ret_from_fork_asm+0x1a/0x30 [ 191.736498][ C1] [ 191.739827][ C1] Kernel Offset: disabled [ 191.744170][ C1] Rebooting in 86400 seconds..