last executing test programs: 2m26.378458858s ago: executing program 3 (id=133): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) setresuid(0xee01, 0x0, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) prlimit64(r1, 0x3, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000002400)={0x20, 0xe, 0x2, "02cf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ecm(0x4, 0x16f, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x15d, 0x1, 0x1, 0x8, 0x170, 0x81, "", [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x2, 0x6, 0x0, 0x7, {{0x9, 0x24, 0x6, 0x0, 0x0, "7f6b3cfe"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0xeb, 0x2, 0x8}, [@mdlm_detail={0x104, 0x24, 0x13, 0x10, "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"}, @acm={0x4, 0x24, 0x2, 0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0xcc, 0x8}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0x20, 0xa}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf, 0x7a, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x6, 0x5}}}}}]}}]}}, &(0x7f0000000a00)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x110, 0x5, 0xc, 0x4, 0x20, 0x1}, 0x5, &(0x7f0000000280)={0x5, 0xf, 0x5}, 0x7, [{0xd6, &(0x7f0000000380)=@string={0xd6, 0x3, "9e0fcfbb4ffb2fd27bc9d88063874dd7f76df5d8855e161f2bda26dea2ddec35d3ac1225b4de38e28c1b09799a2eabf3bd8eddfcc0c63d7bac684d1350ad1fadc9be294707eddb36251a3cd11e2e2d2e4fb070ffa01f9a878ca378e732473da5f7a82ede48ff546c35d0a016be3ad5a0ed245b5923715bcb13bb4c44e625071381399a632daa8e8b20e921761f812c7539af11859a1a2f1a59ee0aa602d3cae130f6418e0e5339192c306acb8613ace6c49598bd8f9899f76bc33ba8a1daa28a8756f7eb2811573044789ecfb2b324eba2ac967f"}}, {0xab, &(0x7f0000000640)=@string={0xab, 0x3, "cb4e177e307579e474b6ede7390eca1d94c8f07e6bcbc8b73d66da0ab6240fe1aeebf20cb3c3c0d65fbb7a880df6e34f659535d79411db261c9c44136aa4fc26fbac3fa0f44e2312aabd978684fcfc039ac62723f93ecc0051afdf74caa0cec05dae5e040e7bbd50ee7e3428682bb154eac90d414a56d2ff3800505a373640781abb7bacd27a434c723a7526cffe3dd4f8c50763c56d848577421157efe227f63add30bf2e7deab4ad"}}, {0xff, &(0x7f0000000700)=@string={0xff, 0x3, "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"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x415}}, {0xb4, &(0x7f0000000880)=@string={0xb4, 0x3, "3b7892a95622ae16208f4538c30bbfd6f5f842494e63e853961881385531b9ad70f82f046e229f63ef5a37a78b9f6e7608cf897a4f581d9a345b134dddcd6d37900f0067db5b537cf4646f3677bdf37f64217223224945f178a735a40832f65acab2f7acc5e9668236b364bf63b8ae4b4b20e40538b026f20a270d296a3d772d547a3de9f6a48b8bfde5fd37ac846e917bbe766c3009cbdeb057d30929b4554f7b74992dff2ba6472b38329c2134affcba9a"}}, {0x51, &(0x7f0000000940)=@string={0x51, 0x3, "625b1be5fe6bc5ee7f7bad61df61892b9087da44acbc1d8b25c2b81365876e52869ef14ad2735c4ea26b127f1307baf08630adb5903b13511dbd1d6fd8d144cf39f3c3df22fa61241cfc92e07711c1"}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x801}}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={@mcast2={0xff, 0x5}, @ipv4={'\x00', '\xff\xff', @broadcast}, @remote, 0x0, 0x0, 0x0, 0x100, 0x0, 0x23f, r4}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000300)={0x20, 0x11, 0x2, "d385"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000580)={0x0, 0x16, 0x2, "f610"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000600)={0x34, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 2m22.271415265s ago: executing program 3 (id=145): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x17e5}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x4080) r1 = gettid() rt_sigqueueinfo(r1, 0x21, &(0x7f0000002d00)={0x0, 0xfffffffe, 0xfffffffb}) writev(0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80c00) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)="f78d9ca58f06ff48ec680e835e75dd8f93283cb0a2dcaaa4b234ff4b0f3df4f6acb709814f10551e1dafebdc2eb668fb61299fde349f6369835385ad6f01175108ebc6e7784a273fe398c930c8d00fb927c0608d5e6bc7d2d936c4e22e695bb609509db551befe43ae11201ee2e35db88e746a2e4403ee5d9c82d3be5e660e1749d3852264f9de270b6843f9f1e08ea5a0b08dae159c4aa0897fbafc98", 0x9d}, {0x0}], 0x2}], 0x1, 0x150) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x6, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b032200e0ff25a60200475400f6a13bb1000000080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r5) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 2m22.071537657s ago: executing program 3 (id=146): r0 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000040)={0x20004c00, 0x3447504d, 0x140, 0xf4, 0x7, @discrete={0x5, 0x9}}) 2m21.866970931s ago: executing program 3 (id=147): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000280)={0x54, r1, 0x607, 0x70bd29, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x97}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x24044880}, 0x40000) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000140), &(0x7f0000000180), 0x2, 0x3) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000340)) mount$bind(0x0, &(0x7f0000001740)='./file0\x00', 0x0, 0x80000, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="02c8000c000800d80c070704000b7b0700"], 0x11) 2m21.694203587s ago: executing program 3 (id=149): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x800, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0285628, &(0x7f00000000c0)) ioctl$TCFLSH(r0, 0x400455c8, 0x400000009) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r2, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x0, 0x0}) 2m20.576426048s ago: executing program 3 (id=153): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000080)) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) userfaultfd(0x80001) userfaultfd(0x80001) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000000080), 0x2) r1 = socket(0x2, 0x3, 0x6) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYBLOB='\a'], 0x0) 2m20.369011399s ago: executing program 32 (id=153): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000080)) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) userfaultfd(0x80001) userfaultfd(0x80001) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000000080), 0x2) r1 = socket(0x2, 0x3, 0x6) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYBLOB='\a'], 0x0) 7.405071678s ago: executing program 4 (id=638): pipe(&(0x7f0000000140)) io_setup(0x1, &(0x7f0000000200)) fsopen(&(0x7f0000000240)='xfs\x00', 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x1) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="120100003a982a08cd0ca310a223010203010902120001000000000904"], 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000c00)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="5bdb", 0x2}], 0x1, 0x0, 0x0, 0x4002}], 0x1, 0x24004850) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="400a06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f00000003c0)={0x20, 0x4, 0xaa, {0xaa, 0xe, "cfcfb8510b30c6d4f9c0e9fc6a06e61c8310983fece8923ae9ebc2ea626744cc41e7031ecdc3270c99092374bdb729130f31782d47d5fe616a0648c2bee0c094abeadd804908948f40037245c768d5f50d13ed59a00e75ab93c76a50dbe09b35b7f49bbd3a7c3e0f6ffca4e80d88bf28ac07c0b7f944cf19bf173dcabaf5bb588e861042938a62c1f6ffab211f63efa119308954c60546fd7d186d5698483c5147786b6ee115ca91"}}, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x408}}, &(0x7f0000000540)={0x0, 0xf, 0x55, {0x5, 0xf, 0x55, 0x4, [@ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0x9, 0x0, 0x1ff, [0xc000, 0xff000f]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "91f4a3ef80ab82b50f30a449f70fee24"}, @ss_container_id={0x14, 0x10, 0x4, 0xfe, "4823f141a3a6fa9e169b66a40ec06078"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "c8ca20dcef29c7ae4271ddfc2aafd2db"}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x4, 0xfc, 0x5, "6b997351", "aff0993f"}}, &(0x7f0000000600)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x2, 0x4, 0x8, 0x3f, 0x7, 0x3}}}, &(0x7f0000000b40)={0x84, &(0x7f00000006c0)={0x20, 0x11, 0x29, "dc69bef92c0731465786c653224ec765bcf2088034ea45353cc68f66c7ab5dee6a0ab77ba61e40da9a"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x3}}, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0x120, 0x80}}, &(0x7f0000000800)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000840)={0x40, 0x9, 0x1, 0x6}, &(0x7f00000008c0)={0x40, 0xb, 0x2, 'Mk'}, &(0x7f0000000900)={0x40, 0xf, 0x2, 0x1000}, &(0x7f0000000940)={0x40, 0x13, 0x6, @link_local}, &(0x7f0000000980)={0x40, 0x17, 0x6, @random="5a6b6db4478a"}, &(0x7f0000000a00)={0x40, 0x19, 0x2, "01b3"}, &(0x7f0000000a40)={0x40, 0x1a, 0x2, 0xc4}, &(0x7f0000000a80)={0x40, 0x1c, 0x1, 0xb}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0x1c}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) 6.2907483s ago: executing program 1 (id=649): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc018aec0, &(0x7f0000000000)={0x8, 0xffffffffffffffff, 0x1}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r0) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, r6, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x80, r8, 0x801, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xa6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x400}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x23ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x404c000}, 0x8000) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x1ec, r8, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x144, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x63, 0x3, "d8af1b291d86c599f741149b3e465e22e5f97e1b164a82079ed5c7906e3d4d03a9e702ca3b2ca0451c1bf9c2d4bb64a0e2550aeeafd7027f3799d8df629fdf97fa85e41110392b82e30c1cc1cf47f2854bbc8472eb28c943ad151d1e3e9f28"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_NODE_ID={0x6d, 0x3, "b4fea7adafa045175423d735092759e0a8ce320a3bd53f61406370404c5065530e71ec7f2164d0efa8e508b4ca983910e14958b5ee86e6b9385e880bbee5227c935752ccaae73f34584bf42277af7928aecf8468deb11f6a966859d9ab9d26cbce8b69074ee6961bcb"}, @TIPC_NLA_NODE_ID={0x5a, 0x3, "20ed910fa86a162217febf9fc7b4817fe86bbe2d5eb7851e77f8160fe5208ebb5d0e142a3221c3756ea6c433cc2ea8dd80e1dfba374b56e7bf820bba0e6caf9fe425b04f1041ea0b381792c61d75d397c0e8bf8ec9e4"}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x55b}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6f9b17f3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x10}, 0x40004055) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000857f460e2004001a0038081d004231a0e69ee517d34460bc06000000a705251e6182949a3651f65e84c9f4f4938037e70e450900000000000000000000da6ab0018008c377", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) socket$kcm(0x2, 0x8, 0x2) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x14, r11, 0x301, 0xfffffffe, 0x0, {0x2b}}, 0x14}}, 0x0) write$char_usb(r3, &(0x7f0000000900)="72976963c8943ca653105cafae1d2b3917706050acead5b00f360a5a36f45947a2c9bec89d8a642c62fe7f5aba03fdc244e1afb5dcbb7137112e453c75817c", 0x3f) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, r11, 0x20, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x880}, 0x84) r12 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r12, &(0x7f0000000380)={0x1d, r13, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) sendmsg$can_j1939(r12, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x3}}, 0x18, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x48044}, 0x0) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r0) sendmsg$NL80211_CMD_ADD_TX_TS(r7, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="00012dbd7000fddbdf256900000088000300eac872975c26000000000000ba3e38", @ANYRES32=r4, @ANYBLOB="0c00990053e9ac35600000000500d30005000000"], 0x30}, 0x1, 0x0, 0x0, 0x844}, 0x4044810) recvmsg$kcm(r9, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2) 5.785593744s ago: executing program 1 (id=650): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="210f00000000fedbdf252000000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x48010}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) (fail_nth: 10) 5.619436286s ago: executing program 1 (id=651): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000200)={0x0, 0x27, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00c00e080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) close(r0) 5.356135821s ago: executing program 1 (id=652): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0x30, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.353362373s ago: executing program 2 (id=653): r0 = fsopen(&(0x7f0000000180)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x400, 0x4, 0x0, 0x10000, 0x8, 0x8}) ioctl$BLKROSET(r2, 0x125d, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000100)={0xd}, 0x1) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001740)='/sys/kernel/vmcoreinfo', 0x103000, 0xe6) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000100)={'dummy0\x00', @ifru_ivalue=0x3}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r6 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4800) r7 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000012c0)={{{@in6=@mcast1, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0xffff, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x1, 0x204}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@private=0xa010101, 0x0, 0x33}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x1c}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r8 = socket(0x10, 0x3, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/resume', 0x88102, 0x1a) write$binfmt_script(r9, 0x0, 0x0) write(r8, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) read$dsp(r4, &(0x7f0000001780)=""/17, 0x11) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000040)={0xed}, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f00000000c0), 0x1) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x101000, 0x188) 5.025680709s ago: executing program 0 (id=654): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x40050) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="40274000000005edaeffffffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="2000000076001f4ca3bd7000fbdbdf25080000000000000008000100", @ANYRES32=r2], 0x20}], 0x1, 0x0, 0x0, 0x2400c814}, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000180)={0x40, 0x21, 0x6f, {0x6f, 0x11, "467fbf0ae04dfcb11e7acdae9c9b6b5720793343189704b6edc343517908ac203afccc48a80605a5d72a6f7fbdd922daa33c2efaff7367e5bdcc02373e816539a49122aa8e2f3f0c4d644cc54ddfc794be23436b73d95faf337ef788b89309a9b5e142ca3fb4c810c59b7f0c91"}}, &(0x7f0000000200)={0x0, 0x3, 0x60, @string={0x60, 0x3, "7efc13f905b44e1f6aef906c4d910106f719ea795f1b96fbdfb2a55c94ee4fe7fef7a7dad6f3f4ecf06c2e5f4e8b378fed085c68217d4aaf99b5cd95b6df83f8b977113eae9e897daeb1934c23a53e0ec4eefa7ca4ef8f6bd927fa58ab22"}}, &(0x7f00000000c0)=ANY=[@ANYBLOB="000f21000000050f2100030b10010082000bb80400fc0710020c0705000a105ca74f6b3a9541f5e703020200360b0300"], &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x18, 0x6, 0x8, '0xffffffffffffffff}) getsockopt$inet6_buf(r4, 0x29, 0x2f, &(0x7f0000000ac0)=""/211, &(0x7f0000000bc0)=0xd3) ioctl$MON_IOCQ_URB_LEN(r3, 0x9201) syz_open_dev$evdev(&(0x7f0000000c00), 0x3, 0x2000) 4.925669055s ago: executing program 2 (id=655): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "16"}]}, 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r6, 0x4018aebd, &(0x7f0000000280)) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000005000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="05005b"], 0x24}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) 4.755766764s ago: executing program 2 (id=656): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002200)=ANY=[@ANYBLOB="e012000010000100000ab52ed1671515cc0100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16=0x0], 0x12e0}}, 0x20040001) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'macvlan1\x00'}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'erspan0\x00', &(0x7f00000006c0)={'syztnl1\x00', 0x0, 0x8000, 0x20, 0x7, 0x7fff, {{0x2b, 0x4, 0x1, 0x3, 0xac, 0x65, 0xfffd, 0x8, 0x29, 0x0, @broadcast, @private=0xa010100, {[@generic={0x86, 0xd, "8ca5538437de43f21a1ba8"}, @timestamp={0x44, 0x14, 0x45, 0x0, 0x2, [0x1, 0x0, 0x1000, 0x2]}, @rr={0x7, 0x27, 0x9e, [@broadcast, @rand_addr=0x64010102, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x2c}, @broadcast, @multicast2, @local, @local, @broadcast]}, @rr={0x7, 0x27, 0x8a, [@private=0xa010101, @remote, @broadcast, @multicast2, @remote, @multicast1, @multicast1, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0x17, 0x95, [@broadcast, @empty, @multicast1, @private=0xa010101, @remote]}, @noop, @rr={0x7, 0x7, 0xf, [@multicast1]}, @generic={0x94, 0x6, "16fc39a0"}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_netdev_private(r1, 0x89f3, &(0x7f0000000d00)="e58d79520f111a3415ad63abb627c5d16504020d39d2af537b28e74d2671d14ae4e0ec1c92bb86a493b8b50b5b2d3867e8b44a9efbdd5ceb0379810a2c07d782a10ace12d20db94cb1fa85070af039039a81d7f3d57ca8ba6177c90a1332377bd194ddc4d022e6fd99c096c453dfcb25cd1279b10dcfeeadb9a917bf14dbe0999317ab0dcd185c56ad63617a73ab02c4d9c2796724426865a262408bdfc6ea6c43cc45b20587bf1baf9080de7214b50bc276b54675d41cdac43afb754352ae20bdd1f50d5e3de5baa7c2ed9e1e139ff6639cbb054fde9143120746a5ef4f1cc5cb349b01b2371303d463109800fb7efcad") ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x4, 0x81, 0x5, 0x4, 0x29, @local, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x0, 0x40000000, 0x9}}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'geneve0\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000440)="18349ff0707314657eaa8c2904dd1d1d86dd", 0x30, 0x200000c1, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xff}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000480)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000600)={'sit0\x00', 0x0, 0x7, 0x20, 0x10000, 0x9, {{0x20, 0x4, 0x2, 0x38, 0x80, 0x65, 0x0, 0x4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x80, 0x0}, @local, {[@rr={0x7, 0x1f, 0x3c, [@empty, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @loopback, @loopback]}, @end, @cipso={0x86, 0x2e, 0xffffffffffffffff, [{0x7, 0xd, "d648f8a03ef6ce7827e440"}, {0x0, 0xa, "9cdb18d63fb0a870"}, {0x0, 0x2}, {0x2, 0x8, "7a8de360f631"}, {0x2, 0x7, "bc02ef8d42"}]}, @lsrr={0x83, 0x1b, 0x51, [@private=0xa010101, @multicast1, @local, @multicast2, @multicast2, @rand_addr=0x64010101]}]}}}}}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="05002abd7000fddbdf2501000000580008805400002024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff2c00098028000080060001000a0000001400020000000000000003000000000000000001050003002000000008000100", @ANYRES32=r8], 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x40) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r9, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r9, 0x5412, &(0x7f00000000c0)=0xf9) 4.160789087s ago: executing program 4 (id=657): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) syz_usb_connect$midi(0x0, 0x41, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x7fd, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f, 0x1, 0x1, 0x18, 0x10, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x6, [], [{{0x9, 0x5, 0x8e, 0xb, 0x200, 0xf, 0xd7, 0x2, {0x14, 0x25, 0x1, 0x10, "3b8cbb8907a6d539fd113a22119f7f9b"}}}]}}}}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="210f00000000fedbdf252000000008000300", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x48010}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) socket(0xa, 0x3, 0xff) r2 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000000c0)={'a', ' *:* ', 'm\x00'}, 0x8) 3.148980493s ago: executing program 2 (id=658): r0 = socket(0x2, 0x2, 0x1) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) setreuid(0xee01, 0xee01) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, 0x0) (async) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) (async) syz_usb_control_io$printer(r1, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) 2.279568841s ago: executing program 1 (id=659): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) write$nci(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) fcntl$setsig(r0, 0xa, 0x21) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r7, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}, 0x1, 0x0, 0x0, 0x40010}, 0x4004090) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r5, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x30}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x10}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x17}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40440c0}, 0x8040) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) 1.884399416s ago: executing program 0 (id=660): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBENT(r3, 0x4b46, &(0x7f0000000000)={0xf0, 0x80, 0x3}) write$tun(r0, &(0x7f00000018c0)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x38, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x3a}], @pkt_toobig={0x2, 0x0, 0x0, 0x800, {0xf, 0x6, '*zc', 0x3ff, 0x6c, 0x1, @loopback, @loopback}}}}}}, 0x6e) 1.565224998s ago: executing program 0 (id=661): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="80", 0x1}], 0x1}}], 0x1, 0x8000) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r1, 0x40086683, &(0x7f00000000c0)) shutdown(r0, 0x2) 1.499838914s ago: executing program 1 (id=662): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x8000000, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230675f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x144) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) umount2(&(0x7f00000010c0)='./file0/file0\x00', 0x8) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX, @ANYRESDEC=0x0]) syz_usb_connect$cdc_ecm(0x2, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109025100010100000309040000ff02020000052406000005240000000d240f010000000000000000000424130505240102080424130009058103200000000009058202200000000009050302"], 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000086a82, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r5, 0x3554000) write$P9_RLERROR(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="89"], 0x3d) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x10) fadvise64(r5, 0x85f5, 0x4000000005, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$snddsp(r6, &(0x7f0000000000)=""/72, 0x48) 1.464774356s ago: executing program 0 (id=663): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="000200001000130726bd70000000000000000000000000000000ffffe0000002ac14141b0000000000000000000000004e23000100000003020000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x200}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000040), 0x1, 0x101000) r4 = syz_open_dev$vivid(&(0x7f0000000280), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f00000004c0)={0x1, 0x0, {0x101, 0x0, 0x3006, 0x3, 0x6, 0x2, 0x3, 0x4}}) r5 = syz_open_dev$dri(0x0, 0x1, 0x0) gettid() timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(r6, 0x236bd4336e4642df, &(0x7f0000000300)={{0x77359400}, {0x0, 0xe4c}}, 0x0) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x44880) r7 = dup2(r2, r3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r7) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r9, {0x2, 0x4e27, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r10 = socket$pppl2tp(0x18, 0x1, 0x1) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000b80), 0x2, 0x0) write$vga_arbiter(r11, 0x0, 0xa) connect$pppl2tp(r10, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r12, 0x40047438, &(0x7f00000002c0)=0x1) recvmsg$can_raw(r7, &(0x7f0000000a80)={&(0x7f0000000540)=@llc, 0x80, &(0x7f00000009c0)=[{&(0x7f00000005c0)=""/180, 0xb4}, {&(0x7f0000000680)=""/3, 0x3}, {&(0x7f00000006c0)=""/102, 0x66}, {&(0x7f0000000780)=""/88, 0x58}, {&(0x7f0000000800)=""/183, 0xb7}, {&(0x7f00000008c0)=""/201, 0xc9}], 0x6, &(0x7f0000000a40)=""/16, 0x10}, 0x2020) ioctl$PPPIOCGIDLE32(r12, 0x8008743f, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000740)=0xe) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r5, 0x4048587b, &(0x7f0000000440)={{r8, &(0x7f0000000100)='/dev/adsp1\x00', 0x40001, &(0x7f0000000140)={@align=0x9, {0x6, 0x3, 0x80, 0x2}}, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0x5}, 0x1, &(0x7f0000000400)=[{0x1, 0xfffffff9, &(0x7f0000000240)='/dev/adsp1\x00', &(0x7f0000000380)="f8853204dd03b3f54b33ca621cc884f83c216d420f6e03ddf58ff6d4a280ebc05edd19e45bf42c65cf5677e98eb7a9cefb918c423ac8324409094910c34fcd93f5d1ab8ab24c6146ac9a92d16c6d5ccf25d6194317a31f4b7ea8182f73a45ec405", 0x61, 0x38}]}) ioctl$TIOCSTI(r13, 0x5412, &(0x7f0000000340)=0x40) 1.388412208s ago: executing program 0 (id=664): r0 = socket$kcm(0x10, 0x7, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000040)=0xcea, 0x4) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181b230000000000100000010e61e0e0027000f00000000800200121f", 0x2e}], 0x1, 0x0, 0xffffffb0}, 0x0) 1.25573288s ago: executing program 0 (id=665): pipe(&(0x7f0000000140)) io_setup(0x1, &(0x7f0000000200)) fsopen(&(0x7f0000000240)='xfs\x00', 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x1) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="120100003a982a08cd0ca310a223010203010902120001000000000904"], 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000c00)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="5bdb", 0x2}], 0x1, 0x0, 0x0, 0x4002}], 0x1, 0x24004850) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="400a06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f00000003c0)={0x20, 0x4, 0xaa, {0xaa, 0xe, "cfcfb8510b30c6d4f9c0e9fc6a06e61c8310983fece8923ae9ebc2ea626744cc41e7031ecdc3270c99092374bdb729130f31782d47d5fe616a0648c2bee0c094abeadd804908948f40037245c768d5f50d13ed59a00e75ab93c76a50dbe09b35b7f49bbd3a7c3e0f6ffca4e80d88bf28ac07c0b7f944cf19bf173dcabaf5bb588e861042938a62c1f6ffab211f63efa119308954c60546fd7d186d5698483c5147786b6ee115ca91"}}, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x408}}, &(0x7f0000000540)={0x0, 0xf, 0x55, {0x5, 0xf, 0x55, 0x4, [@ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0x9, 0x0, 0x1ff, [0xc000, 0xff000f]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "91f4a3ef80ab82b50f30a449f70fee24"}, @ss_container_id={0x14, 0x10, 0x4, 0xfe, "4823f141a3a6fa9e169b66a40ec06078"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "c8ca20dcef29c7ae4271ddfc2aafd2db"}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x4, 0xfc, 0x5, "6b997351", "aff0993f"}}, &(0x7f0000000600)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x2, 0x4, 0x8, 0x3f, 0x7, 0x3}}}, &(0x7f0000000b40)={0x84, &(0x7f00000006c0)={0x20, 0x11, 0x29, "dc69bef92c0731465786c653224ec765bcf2088034ea45353cc68f66c7ab5dee6a0ab77ba61e40da9a"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x3}}, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0x120, 0x80}}, &(0x7f0000000800)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000840)={0x40, 0x9, 0x1, 0x6}, &(0x7f00000008c0)={0x40, 0xb, 0x2, 'Mk'}, &(0x7f0000000900)={0x40, 0xf, 0x2, 0x1000}, &(0x7f0000000940)={0x40, 0x13, 0x6, @link_local}, &(0x7f0000000980)={0x40, 0x17, 0x6, @random="5a6b6db4478a"}, &(0x7f0000000a00)={0x40, 0x19, 0x2, "01b3"}, &(0x7f0000000a40)={0x40, 0x1a, 0x2, 0xc4}, &(0x7f0000000a80)={0x40, 0x1c, 0x1, 0xb}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0x1c}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) 1.100270335s ago: executing program 4 (id=666): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (fail_nth: 10) write$nci(r0, &(0x7f0000000000)=@NCI_OP_RF_DISCOVER_SELECT_RSP={0x1, 0x1, 0x2, 0x4, 0x1, 0x1}, 0x4) 881.476931ms ago: executing program 4 (id=667): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x5, @mcast2, 0x80000000}}, 0x24) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r2, 0x0, 0x7, &(0x7f0000000040)=0x2, 0x4) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x24008880) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r4, 0x8008ae9d, &(0x7f0000000040)) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x2400c440) 703.903157ms ago: executing program 4 (id=668): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x51) socketpair(0x18, 0x1, 0x8, &(0x7f0000000080)) 585.345375ms ago: executing program 4 (id=669): syz_usb_connect(0x0, 0x5d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414003824d0062413"], 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0xa140, 0x0) r1 = syz_open_dev$vivid(&(0x7f00000000c0), 0x1, 0x2) syz_usb_connect$uac1(0x3, 0xfb, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x2a39, 0x3fa0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe9, 0x3, 0x1, 0x5, 0x120, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1000, 0x41}, [@mixer_unit={0x6, 0x24, 0x4, 0x6, 0x2, "fd"}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x7f1, 0x5, 0x6, 0x4}, @feature_unit={0xb, 0x24, 0x6, 0x5, 0x2, 0x2, [0x5, 0x1], 0xa}, @extension_unit={0x8, 0x24, 0x8, 0x4, 0x2, 0x7f, 'x'}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x402, 0x4, 0x7, 0x7, 0x9, 0xf8}, @mixer_unit={0x9, 0x24, 0x4, 0x1, 0x6, "3eb0e511"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x6a, 0x2, 0x63, 0x5}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4e, 0x9, 0x5, 0x2, 0xaa}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7f, 0x6, 0x8, {0x7, 0x25, 0x1, 0xc, 0xe, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0xd4, 0xce, 0x7, 0xa}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5d, 0x7, 0x3, 0xfe, 0xd7}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x2, 0x2, 0x5, "b4556e6b28"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x3, 0x32, 0x8}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0xf8c5, 0x9, 0xff, "d5890f"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1, 0xe000, 0xb, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xd, 0x1, 0x7, {0x7, 0x25, 0x1, 0x0, 0x81, 0x2}}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0x1, 0x6, 0x0, 0x10}, 0x5, &(0x7f0000000280)={0x5, 0xf, 0x5}, 0x8, [{0x9f, &(0x7f00000002c0)=@string={0x9f, 0x3, "2acb402744dd49e8bcb6950fb1796c3a0b06724cc9a4933d2de8d2f6cf3dbd3163488e0c58f49b15963a6f8352b1741239aac828674a54670882aa5f1d22b0ad48b27f03a886f4b0f8fa63963f03948d09a72afbafed8e1dc5adeed5cc4e602189ca39bde89b44590fb03e9b52020c2d787a17555c296be35de3ff6ef21b3b289976a138472ea2d4516d5e45866a481e4ed9df5ef6599c1453c3bda576"}}, {0xa4, &(0x7f0000000380)=@string={0xa4, 0x3, "2dcbf96ad8ebf26b15e1fae3b77722f56663ce4ea8bd215793410f6dbf540b175fbceb627f5e0fc5f35a27b1ca03c1514aed30b560d207d9702806a2cd3eb51c9f2253c5b217e2d9c9949c05202652280af1529f62dcb6f53691829f08a0a14e2a914a8b628656016c813ac5ceefe567396e5c01b0602df5d3de9ad804811d07d76743af8b06ba61d638646eee67022b0ac09d5b5f7963fdf40a50ec41d4404b79be"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x449}}, {0xcd, &(0x7f0000000480)=@string={0xcd, 0x3, "f30df51ca12e6316d2f4a9b7c987a04cbecf3b78677887d3163f2ca21a5f550779ce5bfa08f1caa9bb3d8448895683b1b4159ddcc342b9768106685d13be9049e1bda1da60beb5b788d190d88aa6887a429717ba4e6b0673bb41d5ac827370019c994fad9bb3ea708581de4e964ed30734557b13dcd9b67baae15f0be8b07a96cd211844ca0c4db59b9ccce5c6e10d6df8a3dfd10505877b1ee49b4ef4fa0f2660397f9691f1e0c8aded6be96eb5fe0a88caf8979a488e683b29939e0c167284509b7c6124bf1e5cea4971"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x405}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x4c0a}}, {0xc, &(0x7f0000000600)=@string={0xc, 0x3, "6b5b934a705c69172c4e"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x440a}}]}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x100000000}}, './file0\x00'}) 103.110088ms ago: executing program 2 (id=670): syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x11) 0s ago: executing program 2 (id=671): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010101, 0x15, 0x3, 'sh\x00', 0x2e, 0x5, 0x72}, 0x2c) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (fail_nth: 10) kernel console output (not intermixed with test programs): 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 177.124243][ T5722] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 177.141003][ T5722] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 177.141032][ T5722] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.141050][ T5722] usb 5-1: Product: syz [ 177.141063][ T5722] usb 5-1: Manufacturer: syz [ 177.141075][ T5722] usb 5-1: SerialNumber: syz [ 177.177136][ T5722] usb 5-1: config 0 descriptor?? [ 177.197133][ T5722] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 177.197155][ T5722] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 177.322222][ T6468] usb 3-1: Using ep0 maxpacket: 8 [ 177.326763][ T6468] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 177.326788][ T6468] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.326847][ T6468] usb 3-1: Product: syz [ 177.326856][ T6468] usb 3-1: Manufacturer: syz [ 177.326864][ T6468] usb 3-1: SerialNumber: syz [ 177.334353][ T6468] usb 3-1: config 0 descriptor?? [ 177.504904][ T5721] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 177.509052][ T5722] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 177.509875][ T5722] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 177.518571][ T5722] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 177.518648][ T5722] em28xx 5-1:0.0: No AC97 audio processor [ 177.586378][ T6468] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 177.591134][ T5722] usb 5-1: USB disconnect, device number 5 [ 177.609399][ T5722] em28xx 5-1:0.0: Disconnecting em28xx [ 177.660609][ T5721] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 177.660639][ T5721] usb 2-1: config 1 has no interface number 0 [ 177.660686][ T5721] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 177.660713][ T5721] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 177.660739][ T5721] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.722297][ T5721] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 177.722330][ T5721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.722351][ T5721] usb 2-1: Product: syz [ 177.722365][ T5721] usb 2-1: Manufacturer: syz [ 177.722379][ T5721] usb 2-1: SerialNumber: syz [ 177.786715][ T6732] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 177.949919][ T6743] netlink: 14 bytes leftover after parsing attributes in process `syz.4.257'. [ 178.016373][ T6732] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 178.220945][ T5722] em28xx 5-1:0.0: Freeing device [ 178.232405][ T5721] usb 2-1: Incompatible driver and firmware versions [ 178.319985][ T5721] usb 2-1: USB disconnect, device number 25 [ 178.513448][ T6743] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.593389][ T6743] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.635156][ T6743] bond0 (unregistering): Released all slaves [ 179.082402][ T5721] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 179.242392][ T5721] usb 5-1: Using ep0 maxpacket: 32 [ 179.247327][ T5721] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 179.247356][ T5721] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.247367][ T5721] usb 5-1: Product: syz [ 179.247375][ T5721] usb 5-1: Manufacturer: syz [ 179.247383][ T5721] usb 5-1: SerialNumber: syz [ 179.251924][ T5721] usb 5-1: config 0 descriptor?? [ 179.422754][ T6468] usb write operation failed. (-71) [ 179.430704][ T6468] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 179.431303][ T6468] dvbdev: DVB: registering new adapter (Terratec H7) [ 179.431341][ T6468] usb 3-1: media controller created [ 179.431776][ T6468] usb read operation failed. (-71) [ 179.442338][ T6468] usb write operation failed. (-71) [ 179.480702][ T6468] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 179.498255][ T6468] usb 3-1: USB disconnect, device number 23 [ 179.507018][ T5721] airspy 5-1:0.0: Board ID: 00 [ 179.507041][ T5721] airspy 5-1:0.0: Firmware version: [ 181.167838][ T60] Bluetooth: hci2: Dropping invalid advertising data [ 181.167859][ T60] Bluetooth: hci2: Dropping invalid advertising data [ 181.167927][ T60] Bluetooth: hci2: Malformed LE Event: 0x02 [ 181.353604][ T5721] airspy 5-1:0.0: usb_control_msg() failed -110 request 0f [ 181.482460][ T32] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 181.623817][ T32] usb 2-1: device descriptor read/64, error -71 [ 181.718455][ T5721] airspy 5-1:0.0: Registered as swradio24 [ 181.718478][ T5721] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 181.872579][ T32] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 181.949271][ T6807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.961392][ T6807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.024656][ T32] usb 2-1: device descriptor read/64, error -71 [ 182.133650][ T32] usb usb2-port1: attempt power cycle [ 182.239902][ T6818] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 182.475501][ T32] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 182.494018][ T32] usb 2-1: device descriptor read/8, error -71 [ 182.726428][ T6824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.727123][ T6824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.735866][ T32] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 182.773611][ T32] usb 2-1: device descriptor read/8, error -71 [ 182.790931][ T6824] syz_tun: entered allmulticast mode [ 182.894137][ T32] usb usb2-port1: unable to enumerate USB device [ 183.146991][ T6824] syz_tun (unregistering): left allmulticast mode [ 183.271491][ T32] usb 5-1: USB disconnect, device number 6 [ 183.433526][ T6838] sg_write: process 182 (4) changed security contexts after opening file descriptor, this is not allowed. [ 183.572252][ T5778] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 183.787769][ T5778] usb 3-1: unable to get BOS descriptor or descriptor too short [ 183.787866][ T5778] usb 3-1: too many configurations: 54, using maximum allowed: 8 [ 183.817554][ T5778] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 183.817596][ T5778] usb 3-1: can't read configurations, error -61 [ 183.945848][ T5778] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 184.113608][ T5778] usb 3-1: unable to get BOS descriptor or descriptor too short [ 184.113704][ T5778] usb 3-1: too many configurations: 54, using maximum allowed: 8 [ 184.139558][ T5778] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 184.139619][ T5778] usb 3-1: can't read configurations, error -61 [ 184.140884][ T5778] usb usb3-port1: attempt power cycle [ 184.482348][ T5778] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 184.505954][ T5778] usb 3-1: unable to get BOS descriptor or descriptor too short [ 184.506084][ T5778] usb 3-1: too many configurations: 54, using maximum allowed: 8 [ 184.508001][ T5778] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 184.508039][ T5778] usb 3-1: can't read configurations, error -61 [ 184.581182][ T6853] FAULT_INJECTION: forcing a failure. [ 184.581182][ T6853] name failslab, interval 1, probability 0, space 0, times 0 [ 184.581208][ T6853] CPU: 0 UID: 0 PID: 6853 Comm: syz.1.285 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 184.581232][ T6853] Tainted: [L]=SOFTLOCKUP [ 184.581237][ T6853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 184.581244][ T6853] Call Trace: [ 184.581249][ T6853] [ 184.581254][ T6853] dump_stack_lvl+0xe8/0x150 [ 184.581274][ T6853] should_fail_ex+0x46b/0x600 [ 184.581293][ T6853] should_failslab+0xa8/0x100 [ 184.581310][ T6853] kmem_cache_alloc_noprof+0x87/0x680 [ 184.581323][ T6853] ? rcu_is_watching+0x15/0xb0 [ 184.581334][ T6853] ? security_file_alloc+0x34/0x310 [ 184.581349][ T6853] security_file_alloc+0x34/0x310 [ 184.581362][ T6853] init_file+0x96/0x2d0 [ 184.581374][ T6853] alloc_empty_file+0x74/0x1d0 [ 184.581387][ T6853] alloc_file_pseudo+0x155/0x240 [ 184.581404][ T6853] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 184.581417][ T6853] ? rcu_is_watching+0x15/0xb0 [ 184.581428][ T6853] ? hugetlbfs_get_inode+0x432/0x650 [ 184.581448][ T6853] hugetlb_file_setup+0x3f0/0x630 [ 184.581465][ T6853] ksys_mmap_pgoff+0x22e/0x720 [ 184.581479][ T6853] ? __x64_sys_mmap+0x7f/0x140 [ 184.581506][ T6853] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.581520][ T6853] do_syscall_64+0x15f/0xf80 [ 184.581534][ T6853] ? trace_irq_disable+0x3b/0x140 [ 184.581550][ T6853] ? clear_bhb_loop+0x40/0x90 [ 184.581566][ T6853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.581578][ T6853] RIP: 0033:0x7f7727a4cdd9 [ 184.581590][ T6853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.581599][ T6853] RSP: 002b:00007f7725ca6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 184.581614][ T6853] RAX: ffffffffffffffda RBX: 00007f7727cc5fa0 RCX: 00007f7727a4cdd9 [ 184.581622][ T6853] RDX: 0000000002000000 RSI: 0000000000003000 RDI: 0000200000f25000 [ 184.581630][ T6853] RBP: 00007f7725ca6090 R08: ffffffffffffffff R09: 0000000080000000 [ 184.581638][ T6853] R10: 000000000006e073 R11: 0000000000000246 R12: 0000000000000001 [ 184.581645][ T6853] R13: 00007f7727cc6038 R14: 00007f7727cc5fa0 R15: 00007fffe5e809e8 [ 184.581662][ T6853] [ 184.642261][ T6468] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 184.648303][ T5778] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 184.666397][ T5778] usb 3-1: unable to get BOS descriptor or descriptor too short [ 184.666495][ T5778] usb 3-1: too many configurations: 54, using maximum allowed: 8 [ 184.672285][ T5778] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 184.672320][ T5778] usb 3-1: can't read configurations, error -61 [ 184.673032][ T5778] usb usb3-port1: unable to enumerate USB device [ 185.044204][ T6468] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.044240][ T6468] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 185.044274][ T6468] usb 5-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 185.044288][ T6468] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.049408][ T6468] usb 5-1: config 0 descriptor?? [ 185.458555][ T6850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.487232][ T6850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.530575][ T6468] sony 0003:054C:0374.0004: unknown main item tag 0x0 [ 185.530613][ T6468] sony 0003:054C:0374.0004: unknown main item tag 0x4 [ 185.530695][ T6468] sony 0003:054C:0374.0004: unknown main item tag 0x0 [ 185.530722][ T6468] sony 0003:054C:0374.0004: unknown main item tag 0x0 [ 185.530748][ T6468] sony 0003:054C:0374.0004: unknown main item tag 0x0 [ 185.530774][ T6468] sony 0003:054C:0374.0004: unknown main item tag 0x2 [ 185.530801][ T6468] sony 0003:054C:0374.0004: unknown main item tag 0x0 [ 185.530838][ T6468] sony 0003:054C:0374.0004: unknown main item tag 0x0 [ 185.530864][ T6468] sony 0003:054C:0374.0004: unknown main item tag 0x0 [ 185.530892][ T6468] sony 0003:054C:0374.0004: unknown main item tag 0x0 [ 185.530940][ T6468] sony 0003:054C:0374.0004: item fetching failed at offset 40/41 [ 185.531926][ T6468] sony 0003:054C:0374.0004: parse failed [ 185.532046][ T6468] sony 0003:054C:0374.0004: probe with driver sony failed with error -22 [ 185.655909][ T6863] syzkaller1: entered promiscuous mode [ 185.655927][ T6863] syzkaller1: entered allmulticast mode [ 185.658317][ T6863] FAULT_INJECTION: forcing a failure. [ 185.658317][ T6863] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.658352][ T6863] CPU: 0 UID: 0 PID: 6863 Comm: syz.1.287 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 185.658378][ T6863] Tainted: [L]=SOFTLOCKUP [ 185.658384][ T6863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 185.658397][ T6863] Call Trace: [ 185.658405][ T6863] [ 185.658413][ T6863] dump_stack_lvl+0xe8/0x150 [ 185.658442][ T6863] should_fail_ex+0x46b/0x600 [ 185.658472][ T6863] _copy_from_iter+0x1d3/0x1670 [ 185.658505][ T6863] ? __lock_acquire+0x6b5/0x2d10 [ 185.658535][ T6863] ? __pfx__copy_from_iter+0x10/0x10 [ 185.658584][ T6863] tun_get_user+0x6c6/0x4400 [ 185.658609][ T6863] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 185.658624][ T6863] ? rt_mutex_slowunlock+0x410/0x8b0 [ 185.658636][ T6863] ? reacquire_held_locks+0x104/0x190 [ 185.658647][ T6863] ? rt_spin_lock+0x1e0/0x400 [ 185.658661][ T6863] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 185.658674][ T6863] ? __pfx_tun_get_user+0x10/0x10 [ 185.658685][ T6863] ? rt_spin_unlock+0x14f/0x200 [ 185.658699][ T6863] ? rt_spin_unlock+0x160/0x200 [ 185.658712][ T6863] ? save_netdev_trace_buffer+0x4ba/0x5f0 [ 185.658733][ T6863] ? ref_tracker_alloc+0x332/0x4a0 [ 185.658746][ T6863] ? tun_get+0x157/0x2f0 [ 185.658757][ T6863] ? vfs_write+0x629/0xba0 [ 185.658769][ T6863] ? ksys_write+0x156/0x270 [ 185.658783][ T6863] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 185.658800][ T6863] ? tun_get+0x1c/0x2f0 [ 185.658818][ T6863] ? tun_get+0x1c/0x2f0 [ 185.658830][ T6863] ? tun_get+0x1c/0x2f0 [ 185.658849][ T6863] tun_chr_write_iter+0x119/0x210 [ 185.658863][ T6863] vfs_write+0x629/0xba0 [ 185.658882][ T6863] ? __pfx_vfs_write+0x10/0x10 [ 185.658901][ T6863] ? __fget_files+0x2a/0x420 [ 185.658918][ T6863] ksys_write+0x156/0x270 [ 185.658933][ T6863] ? __pfx_ksys_write+0x10/0x10 [ 185.658952][ T6863] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.658965][ T6863] do_syscall_64+0x15f/0xf80 [ 185.658978][ T6863] ? trace_irq_disable+0x3b/0x140 [ 185.658993][ T6863] ? clear_bhb_loop+0x40/0x90 [ 185.659008][ T6863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.659020][ T6863] RIP: 0033:0x7f7727a4cdd9 [ 185.659032][ T6863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.659043][ T6863] RSP: 002b:00007f7725ca6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 185.659057][ T6863] RAX: ffffffffffffffda RBX: 00007f7727cc5fa0 RCX: 00007f7727a4cdd9 [ 185.659066][ T6863] RDX: 000000000000fdef RSI: 0000200000002ec0 RDI: 0000000000000003 [ 185.659073][ T6863] RBP: 00007f7725ca6090 R08: 0000000000000000 R09: 0000000000000000 [ 185.659080][ T6863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.659087][ T6863] R13: 00007f7727cc6038 R14: 00007f7727cc5fa0 R15: 00007fffe5e809e8 [ 185.659105][ T6863] [ 186.010018][ T6865] netlink: 156 bytes leftover after parsing attributes in process `syz.1.288'. [ 186.181524][ T6871] syzkaller1: entered promiscuous mode [ 186.181561][ T6871] syzkaller1: entered allmulticast mode [ 186.421372][ T6876] FAULT_INJECTION: forcing a failure. [ 186.421372][ T6876] name failslab, interval 1, probability 0, space 0, times 0 [ 186.421399][ T6876] CPU: 1 UID: 0 PID: 6876 Comm: syz.2.290 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 186.421416][ T6876] Tainted: [L]=SOFTLOCKUP [ 186.421421][ T6876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 186.421428][ T6876] Call Trace: [ 186.421432][ T6876] [ 186.421437][ T6876] dump_stack_lvl+0xe8/0x150 [ 186.421458][ T6876] should_fail_ex+0x46b/0x600 [ 186.421477][ T6876] should_failslab+0xa8/0x100 [ 186.421514][ T6876] __kmalloc_noprof+0xdf/0x7b0 [ 186.421529][ T6876] ? tomoyo_encode+0x28b/0x550 [ 186.421547][ T6876] tomoyo_encode+0x28b/0x550 [ 186.421566][ T6876] tomoyo_realpath_from_path+0x58d/0x5d0 [ 186.421582][ T6876] ? tomoyo_domain+0xd7/0x130 [ 186.421601][ T6876] ? tomoyo_path_number_perm+0x219/0x630 [ 186.421615][ T6876] tomoyo_path_number_perm+0x246/0x630 [ 186.421632][ T6876] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 186.421648][ T6876] ? __lock_acquire+0x6b5/0x2d10 [ 186.421666][ T6876] ? do_raw_spin_lock+0x12b/0x2f0 [ 186.421697][ T6876] ? __fget_files+0x2a/0x420 [ 186.421711][ T6876] ? __fget_files+0x2a/0x420 [ 186.421722][ T6876] ? __fget_files+0x3a6/0x420 [ 186.421733][ T6876] ? __fget_files+0x2a/0x420 [ 186.421749][ T6876] security_file_ioctl+0xc3/0x2a0 [ 186.421764][ T6876] __se_sys_ioctl+0x47/0x170 [ 186.421779][ T6876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.421792][ T6876] do_syscall_64+0x15f/0xf80 [ 186.421807][ T6876] ? trace_irq_disable+0x3b/0x140 [ 186.421822][ T6876] ? clear_bhb_loop+0x40/0x90 [ 186.421837][ T6876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.421848][ T6876] RIP: 0033:0x7ff6c0cccdd9 [ 186.421861][ T6876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.421871][ T6876] RSP: 002b:00007ff6beefd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 186.421885][ T6876] RAX: ffffffffffffffda RBX: 00007ff6c0f46090 RCX: 00007ff6c0cccdd9 [ 186.421894][ T6876] RDX: 0000200000000140 RSI: 00000000000089f1 RDI: 0000000000000003 [ 186.421901][ T6876] RBP: 00007ff6beefd090 R08: 0000000000000000 R09: 0000000000000000 [ 186.421909][ T6876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.421916][ T6876] R13: 00007ff6c0f46128 R14: 00007ff6c0f46090 R15: 00007ffd864e31e8 [ 186.421933][ T6876] [ 186.421945][ T6876] ERROR: Out of memory at tomoyo_realpath_from_path. [ 186.890575][ T6885] syzkaller1: entered promiscuous mode [ 186.890608][ T6885] syzkaller1: entered allmulticast mode [ 187.192500][ T32] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 187.356279][ T32] usb 3-1: unable to get BOS descriptor or descriptor too short [ 187.356871][ T32] usb 3-1: not running at top speed; connect to a high speed hub [ 187.358346][ T32] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 187.358371][ T32] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 187.358425][ T32] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 4 [ 187.470292][ T32] usb 3-1: string descriptor 0 read error: -22 [ 187.470459][ T32] usb 3-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 187.470484][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.127632][ T5721] usb 3-1: USB disconnect, device number 28 [ 188.265840][ T6468] usb 5-1: USB disconnect, device number 7 [ 188.535359][ T6916] syzkaller1: entered promiscuous mode [ 188.535387][ T6916] syzkaller1: entered allmulticast mode [ 188.580004][ T60] Bluetooth: Frame is too long (len 233, expected len 4) [ 188.581022][ T38] audit: type=1326 audit(1777904622.445:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6915 comm="syz.4.302" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e24dcdd9 code=0x7ff00000 [ 188.581079][ T38] audit: type=1326 audit(1777904622.445:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6915 comm="syz.4.302" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e24dcdd9 code=0x7ff00000 [ 188.581126][ T38] audit: type=1326 audit(1777904622.445:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6915 comm="syz.4.302" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e24dcdd9 code=0x7ff00000 [ 188.581175][ T38] audit: type=1326 audit(1777904622.445:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6915 comm="syz.4.302" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e24dcdd9 code=0x7ff00000 [ 188.581222][ T38] audit: type=1326 audit(1777904622.445:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6915 comm="syz.4.302" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e24dcdd9 code=0x7ff00000 [ 188.581267][ T38] audit: type=1326 audit(1777904622.445:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6915 comm="syz.4.302" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e24dcdd9 code=0x7ff00000 [ 188.581323][ T38] audit: type=1326 audit(1777904622.445:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6915 comm="syz.4.302" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e24dcdd9 code=0x7ff00000 [ 188.581369][ T38] audit: type=1326 audit(1777904622.445:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6915 comm="syz.4.302" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e24dcdd9 code=0x7ff00000 [ 188.581424][ T38] audit: type=1326 audit(1777904622.445:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6915 comm="syz.4.302" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e24dcdd9 code=0x7ff00000 [ 188.581504][ T38] audit: type=1326 audit(1777904622.445:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6915 comm="syz.4.302" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e24dcdd9 code=0x7ff00000 [ 188.723841][ T5721] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 188.872241][ T5721] usb 3-1: Using ep0 maxpacket: 16 [ 188.875177][ T5721] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.875204][ T5721] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 188.877544][ T5721] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 188.877566][ T5721] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.877578][ T5721] usb 3-1: Product: syz [ 188.877586][ T5721] usb 3-1: Manufacturer: syz [ 188.877594][ T5721] usb 3-1: SerialNumber: syz [ 188.961238][ T5721] usb 3-1: 0:2 : does not exist [ 189.169728][ T5721] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 189.318187][ T5721] usb 3-1: USB disconnect, device number 29 [ 189.418965][ T5800] udevd[5800]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 190.113501][ T6925] FAULT_INJECTION: forcing a failure. [ 190.113501][ T6925] name failslab, interval 1, probability 0, space 0, times 0 [ 190.113542][ T6925] CPU: 0 UID: 0 PID: 6925 Comm: syz.2.305 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 190.113570][ T6925] Tainted: [L]=SOFTLOCKUP [ 190.113577][ T6925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 190.113588][ T6925] Call Trace: [ 190.113596][ T6925] [ 190.113605][ T6925] dump_stack_lvl+0xe8/0x150 [ 190.113637][ T6925] should_fail_ex+0x46b/0x600 [ 190.113669][ T6925] should_failslab+0xa8/0x100 [ 190.113697][ T6925] __kmalloc_noprof+0xdf/0x7b0 [ 190.113733][ T6925] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 190.113773][ T6925] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 190.113824][ T6925] genl_family_rcv_msg_doit+0xd9/0x330 [ 190.113856][ T6925] ? __asan_memcpy+0x40/0x70 [ 190.113881][ T6925] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 190.113922][ T6925] ? apparmor_capable+0x126/0x170 [ 190.113956][ T6925] ? bpf_lsm_capable+0x9/0x20 [ 190.113977][ T6925] ? security_capable+0x7e/0x2c0 [ 190.114010][ T6925] genl_rcv_msg+0x61c/0x7a0 [ 190.114055][ T6925] ? __pfx_genl_rcv_msg+0x10/0x10 [ 190.114085][ T6925] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 190.114109][ T6925] ? __pfx_nl802154_set_llsec_params+0x10/0x10 [ 190.114135][ T6925] ? __pfx_nl802154_post_doit+0x10/0x10 [ 190.114176][ T6925] netlink_rcv_skb+0x232/0x4b0 [ 190.114205][ T6925] ? __pfx_genl_rcv_msg+0x10/0x10 [ 190.114237][ T6925] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 190.114278][ T6925] ? netlink_deliver_tap+0x2e/0x1b0 [ 190.114304][ T6925] ? netlink_deliver_tap+0x2e/0x1b0 [ 190.114335][ T6925] genl_rcv+0x28/0x40 [ 190.114364][ T6925] netlink_unicast+0x780/0x920 [ 190.114400][ T6925] netlink_sendmsg+0x813/0xb40 [ 190.114436][ T6925] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.114478][ T6925] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 190.114513][ T6925] ? aa_sock_msg_perm+0x122/0x200 [ 190.114540][ T6925] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.114565][ T6925] sock_sendmsg_nosec+0x112/0x150 [ 190.114599][ T6925] ____sys_sendmsg+0x55c/0x870 [ 190.114634][ T6925] ? __pfx_____sys_sendmsg+0x10/0x10 [ 190.114674][ T6925] ? import_iovec+0x73/0xa0 [ 190.114708][ T6925] ___sys_sendmsg+0x2a5/0x360 [ 190.114734][ T6925] ? __lock_acquire+0x6b5/0x2d10 [ 190.114767][ T6925] ? __pfx____sys_sendmsg+0x10/0x10 [ 190.114833][ T6925] ? __fget_files+0x2a/0x420 [ 190.114853][ T6925] ? __fget_files+0x3a6/0x420 [ 190.114885][ T6925] __x64_sys_sendmsg+0x1c3/0x2a0 [ 190.114916][ T6925] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 190.114954][ T6925] ? __pfx_ksys_write+0x10/0x10 [ 190.114992][ T6925] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.115016][ T6925] do_syscall_64+0x15f/0xf80 [ 190.115043][ T6925] ? trace_irq_disable+0x3b/0x140 [ 190.115071][ T6925] ? clear_bhb_loop+0x40/0x90 [ 190.115098][ T6925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.115119][ T6925] RIP: 0033:0x7ff6c0cccdd9 [ 190.115140][ T6925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.115158][ T6925] RSP: 002b:00007ff6bef1e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 190.115181][ T6925] RAX: ffffffffffffffda RBX: 00007ff6c0f45fa0 RCX: 00007ff6c0cccdd9 [ 190.115197][ T6925] RDX: 0000000000040880 RSI: 0000200000000380 RDI: 0000000000000004 [ 190.115211][ T6925] RBP: 00007ff6bef1e090 R08: 0000000000000000 R09: 0000000000000000 [ 190.115223][ T6925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.115235][ T6925] R13: 00007ff6c0f46038 R14: 00007ff6c0f45fa0 R15: 00007ffd864e31e8 [ 190.115270][ T6925] [ 190.831962][ T6934] syz_tun: entered allmulticast mode [ 192.060411][ T6948] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 192.301702][ T6953] netlink: 'syz.4.316': attribute type 5 has an invalid length. [ 192.301726][ T6953] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.316'. [ 192.568502][ T6957] netlink: 'syz.4.318': attribute type 10 has an invalid length. [ 192.568518][ T6957] netlink: 40 bytes leftover after parsing attributes in process `syz.4.318'. [ 192.568727][ T6957] team0: entered promiscuous mode [ 192.568746][ T6957] team_slave_0: entered promiscuous mode [ 192.568989][ T6957] team_slave_1: entered promiscuous mode [ 192.569311][ T6957] team0: entered allmulticast mode [ 192.569327][ T6957] team_slave_0: entered allmulticast mode [ 192.569351][ T6957] team_slave_1: entered allmulticast mode [ 192.570443][ T6957] bridge0: port 3(team0) entered blocking state [ 192.570860][ T6957] bridge0: port 3(team0) entered disabled state [ 192.581864][ T6957] bridge0: port 3(team0) entered blocking state [ 192.582041][ T6957] bridge0: port 3(team0) entered forwarding state [ 192.929237][ T6969] FAULT_INJECTION: forcing a failure. [ 192.929237][ T6969] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.929277][ T6969] CPU: 1 UID: 0 PID: 6969 Comm: syz.4.322 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 192.929305][ T6969] Tainted: [L]=SOFTLOCKUP [ 192.929312][ T6969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 192.929324][ T6969] Call Trace: [ 192.929332][ T6969] [ 192.929341][ T6969] dump_stack_lvl+0xe8/0x150 [ 192.929373][ T6969] should_fail_ex+0x46b/0x600 [ 192.929406][ T6969] _copy_from_user+0x2d/0xb0 [ 192.929436][ T6969] ___sys_sendmsg+0x1c6/0x360 [ 192.929474][ T6969] ? __lock_acquire+0x6b5/0x2d10 [ 192.929509][ T6969] ? __pfx____sys_sendmsg+0x10/0x10 [ 192.929572][ T6969] ? __fget_files+0x2a/0x420 [ 192.929593][ T6969] ? __fget_files+0x3a6/0x420 [ 192.929625][ T6969] __x64_sys_sendmsg+0x1c3/0x2a0 [ 192.929655][ T6969] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 192.929693][ T6969] ? __pfx_ksys_write+0x10/0x10 [ 192.929726][ T6969] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.929750][ T6969] do_syscall_64+0x15f/0xf80 [ 192.929776][ T6969] ? trace_irq_disable+0x3b/0x140 [ 192.929803][ T6969] ? clear_bhb_loop+0x40/0x90 [ 192.929826][ T6969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.929846][ T6969] RIP: 0033:0x7fd7e24dcdd9 [ 192.929866][ T6969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.929883][ T6969] RSP: 002b:00007fd7e0736028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 192.929906][ T6969] RAX: ffffffffffffffda RBX: 00007fd7e2755fa0 RCX: 00007fd7e24dcdd9 [ 192.929922][ T6969] RDX: 0000000000000814 RSI: 0000200000000180 RDI: 0000000000000003 [ 192.929935][ T6969] RBP: 00007fd7e0736090 R08: 0000000000000000 R09: 0000000000000000 [ 192.929948][ T6969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.929960][ T6969] R13: 00007fd7e2756038 R14: 00007fd7e2755fa0 R15: 00007ffe89dd44a8 [ 192.929993][ T6969] [ 192.952965][ T10] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 193.112207][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 193.127693][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 193.127730][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.127748][ T10] usb 3-1: Product: syz [ 193.127760][ T10] usb 3-1: Manufacturer: syz [ 193.127773][ T10] usb 3-1: SerialNumber: syz [ 193.146765][ T10] usb 3-1: config 0 descriptor?? [ 193.254460][ T5778] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 193.353749][ T10] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 193.430609][ T5778] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 193.430633][ T5778] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 193.430649][ T5778] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 29949, setting to 64 [ 193.430666][ T5778] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 193.430682][ T5778] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 193.431851][ T5778] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 193.431879][ T5778] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 193.431936][ T5778] usb 2-1: SerialNumber: syz [ 193.478677][ T6971] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 193.478832][ T6971] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 193.497274][ T5778] rndis_host 2-1:1.0: missing RNDIS status endpoint [ 193.689335][ T6971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.689989][ T6971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.724960][ T5602] usb 2-1: USB disconnect, device number 31 [ 194.257270][ T6980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.326'. [ 194.257444][ T6980] FAULT_INJECTION: forcing a failure. [ 194.257444][ T6980] name failslab, interval 1, probability 0, space 0, times 0 [ 194.257473][ T6980] CPU: 1 UID: 0 PID: 6980 Comm: syz.1.326 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 194.257490][ T6980] Tainted: [L]=SOFTLOCKUP [ 194.257495][ T6980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 194.257502][ T6980] Call Trace: [ 194.257507][ T6980] [ 194.257512][ T6980] dump_stack_lvl+0xe8/0x150 [ 194.257530][ T6980] should_fail_ex+0x46b/0x600 [ 194.257548][ T6980] should_failslab+0xa8/0x100 [ 194.257564][ T6980] kmem_cache_alloc_noprof+0x87/0x680 [ 194.257578][ T6980] ? skb_clone+0x212/0x3a0 [ 194.257597][ T6980] skb_clone+0x212/0x3a0 [ 194.257613][ T6980] __netlink_deliver_tap+0x424/0x8b0 [ 194.257634][ T6980] ? netlink_deliver_tap+0x2e/0x1b0 [ 194.257649][ T6980] netlink_deliver_tap+0x19c/0x1b0 [ 194.257664][ T6980] netlink_sendskb+0x68/0x140 [ 194.257678][ T6980] netlink_rcv_skb+0x2b6/0x4b0 [ 194.257692][ T6980] ? __pfx_genl_rcv_msg+0x10/0x10 [ 194.257713][ T6980] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 194.257735][ T6980] ? netlink_deliver_tap+0x2e/0x1b0 [ 194.257748][ T6980] ? netlink_deliver_tap+0x2e/0x1b0 [ 194.257764][ T6980] genl_rcv+0x28/0x40 [ 194.257793][ T6980] netlink_unicast+0x780/0x920 [ 194.257828][ T6980] netlink_sendmsg+0x813/0xb40 [ 194.257862][ T6980] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.257888][ T6980] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 194.257920][ T6980] ? aa_sock_msg_perm+0x122/0x200 [ 194.257936][ T6980] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.257950][ T6980] sock_sendmsg_nosec+0x112/0x150 [ 194.257975][ T6980] ____sys_sendmsg+0x55c/0x870 [ 194.257994][ T6980] ? __pfx_____sys_sendmsg+0x10/0x10 [ 194.258015][ T6980] ? import_iovec+0x73/0xa0 [ 194.258034][ T6980] ___sys_sendmsg+0x2a5/0x360 [ 194.258048][ T6980] ? __lock_acquire+0x6b5/0x2d10 [ 194.258067][ T6980] ? __pfx____sys_sendmsg+0x10/0x10 [ 194.258104][ T6980] ? __fget_files+0x2a/0x420 [ 194.258115][ T6980] ? __fget_files+0x3a6/0x420 [ 194.258133][ T6980] __x64_sys_sendmsg+0x1c3/0x2a0 [ 194.258150][ T6980] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 194.258171][ T6980] ? __pfx_ksys_write+0x10/0x10 [ 194.258191][ T6980] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.258204][ T6980] do_syscall_64+0x15f/0xf80 [ 194.258219][ T6980] ? trace_irq_disable+0x3b/0x140 [ 194.258234][ T6980] ? clear_bhb_loop+0x40/0x90 [ 194.258249][ T6980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.258261][ T6980] RIP: 0033:0x7f7727a4cdd9 [ 194.258273][ T6980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.258283][ T6980] RSP: 002b:00007f7725ca6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.258297][ T6980] RAX: ffffffffffffffda RBX: 00007f7727cc5fa0 RCX: 00007f7727a4cdd9 [ 194.258306][ T6980] RDX: 000000000000c044 RSI: 0000200000000080 RDI: 0000000000000003 [ 194.258314][ T6980] RBP: 00007f7725ca6090 R08: 0000000000000000 R09: 0000000000000000 [ 194.258320][ T6980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.258328][ T6980] R13: 00007f7727cc6038 R14: 00007f7727cc5fa0 R15: 00007fffe5e809e8 [ 194.258346][ T6980] [ 194.443167][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.443264][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.630222][ T6984] netlink: 'syz.4.328': attribute type 4 has an invalid length. [ 194.630243][ T6984] netlink: 'syz.4.328': attribute type 6 has an invalid length. [ 194.630256][ T6984] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.328'. [ 194.705446][ T6986] netlink: 36 bytes leftover after parsing attributes in process `syz.1.329'. [ 194.811049][ T6988] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 194.872297][ T5721] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 195.022357][ T5721] usb 5-1: Using ep0 maxpacket: 16 [ 195.025269][ T5721] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 228, changing to 11 [ 195.025316][ T5721] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 195.025337][ T5721] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.078651][ T5721] usb 5-1: config 0 descriptor?? [ 195.142470][ T5722] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 195.222814][ T10] usb write operation failed. (-71) [ 195.233272][ T10] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 195.234454][ T10] dvbdev: DVB: registering new adapter (Terratec H7) [ 195.234560][ T10] usb 3-1: media controller created [ 195.235077][ T10] usb read operation failed. (-71) [ 195.235624][ T10] usb write operation failed. (-71) [ 195.280909][ T10] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 195.292283][ T5722] usb 2-1: Using ep0 maxpacket: 32 [ 195.309520][ T5722] usb 2-1: unable to get BOS descriptor or descriptor too short [ 195.314004][ T5722] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 195.320554][ T10] usb 3-1: USB disconnect, device number 30 [ 195.348591][ T5722] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 195.348624][ T5722] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.348644][ T5722] usb 2-1: Product: syz [ 195.348659][ T5722] usb 2-1: Manufacturer: syz [ 195.348674][ T5722] usb 2-1: SerialNumber: syz [ 195.511992][ T5721] mcp2221 0003:04D8:00DD.0005: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 195.634158][ T5722] usb 2-1: Cannot retrieve CPort count: 0 [ 195.634213][ T5722] usb 2-1: Cannot retrieve CPort count: -5 [ 195.634250][ T5722] es2_ap_driver 2-1:7.0: probe with driver es2_ap_driver failed with error -5 [ 195.850607][ T10] usb 2-1: USB disconnect, device number 32 [ 196.023881][ T32] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 196.054204][ T6468] usb 5-1: USB disconnect, device number 8 [ 196.202319][ T32] usb 3-1: Using ep0 maxpacket: 8 [ 196.217159][ T32] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 196.217219][ T32] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 196.217244][ T32] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 196.217266][ T32] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 196.217305][ T32] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 196.217326][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.267151][ T32] usbtmc 3-1:16.0: bulk endpoints not found [ 196.663494][ T32] usb 2-1: new low-speed USB device number 33 using dummy_hcd [ 196.820657][ T7005] FAULT_INJECTION: forcing a failure. [ 196.820657][ T7005] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.820686][ T7005] CPU: 1 UID: 0 PID: 7005 Comm: syz.2.333 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 196.820704][ T7005] Tainted: [L]=SOFTLOCKUP [ 196.820708][ T7005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 196.820715][ T7005] Call Trace: [ 196.820720][ T7005] [ 196.820726][ T7005] dump_stack_lvl+0xe8/0x150 [ 196.820748][ T7005] should_fail_ex+0x46b/0x600 [ 196.820767][ T7005] _copy_to_user+0x31/0xb0 [ 196.820784][ T7005] simple_read_from_buffer+0xe1/0x170 [ 196.820801][ T7005] proc_fail_nth_read+0x1be/0x230 [ 196.820816][ T7005] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 196.820830][ T7005] ? rw_verify_area+0x2ac/0x4e0 [ 196.820844][ T7005] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 196.820864][ T7005] vfs_read+0x212/0xa80 [ 196.820882][ T7005] ? __pfx_vfs_read+0x10/0x10 [ 196.820898][ T7005] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 196.820914][ T7005] ? lockdep_hardirqs_on+0x7a/0x110 [ 196.820929][ T7005] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 196.820943][ T7005] ? mutex_lock_nested+0x152/0x1d0 [ 196.820955][ T7005] ? fdget_pos+0x252/0x320 [ 196.820973][ T7005] ksys_read+0x156/0x270 [ 196.820988][ T7005] ? __pfx_ksys_read+0x10/0x10 [ 196.821007][ T7005] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.821020][ T7005] do_syscall_64+0x15f/0xf80 [ 196.821034][ T7005] ? trace_irq_disable+0x3b/0x140 [ 196.821049][ T7005] ? clear_bhb_loop+0x40/0x90 [ 196.821063][ T7005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.821075][ T7005] RIP: 0033:0x7ff6c0c8d60e [ 196.821088][ T7005] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 196.821098][ T7005] RSP: 002b:00007ff6beefcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 196.821112][ T7005] RAX: ffffffffffffffda RBX: 00007ff6beefd6c0 RCX: 00007ff6c0c8d60e [ 196.821121][ T7005] RDX: 000000000000000f RSI: 00007ff6beefd0a0 RDI: 0000000000000004 [ 196.821128][ T7005] RBP: 00007ff6beefd090 R08: 0000000000000000 R09: 0000000000000000 [ 196.821135][ T7005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.821142][ T7005] R13: 00007ff6c0f46128 R14: 00007ff6c0f46090 R15: 00007ffd864e31e8 [ 196.821160][ T7005] [ 196.832301][ T32] usb 2-1: Invalid ep0 maxpacket: 64 [ 196.972397][ T32] usb 2-1: new low-speed USB device number 34 using dummy_hcd [ 197.083467][ T5721] usb 3-1: USB disconnect, device number 31 [ 197.122229][ T32] usb 2-1: Invalid ep0 maxpacket: 64 [ 197.122870][ T32] usb usb2-port1: attempt power cycle [ 197.482287][ T5721] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 197.502913][ T32] usb 2-1: new low-speed USB device number 35 using dummy_hcd [ 197.525511][ T32] usb 2-1: Invalid ep0 maxpacket: 64 [ 197.652298][ T5721] usb 3-1: Using ep0 maxpacket: 8 [ 197.655510][ T5721] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 197.655569][ T5721] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 197.655585][ T5721] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 197.655599][ T5721] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 197.655624][ T5721] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 197.655637][ T5721] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.667604][ T32] usb 2-1: new low-speed USB device number 36 using dummy_hcd [ 197.671974][ T5721] usbtmc 3-1:16.0: bulk endpoints not found [ 197.695974][ T32] usb 2-1: Invalid ep0 maxpacket: 64 [ 197.711635][ T32] usb usb2-port1: unable to enumerate USB device [ 197.822380][ T10] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 197.975493][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 197.976068][ T10] usb 5-1: not running at top speed; connect to a high speed hub [ 197.977365][ T10] usb 5-1: config 202 has an invalid interface number: 95 but max is 2 [ 197.977388][ T10] usb 5-1: config 202 has an invalid interface number: 185 but max is 2 [ 197.977408][ T10] usb 5-1: config 202 has no interface number 1 [ 197.977423][ T10] usb 5-1: config 202 has no interface number 2 [ 197.977490][ T10] usb 5-1: config 202 interface 0 altsetting 4 endpoint 0x8D has invalid maxpacket 1023, setting to 64 [ 197.977529][ T10] usb 5-1: config 202 interface 185 altsetting 223 has a duplicate endpoint with address 0x7, skipping [ 197.977552][ T10] usb 5-1: config 202 interface 0 has no altsetting 0 [ 197.977570][ T10] usb 5-1: config 202 interface 95 has no altsetting 0 [ 197.977587][ T10] usb 5-1: config 202 interface 185 has no altsetting 0 [ 197.981839][ T10] usb 5-1: New USB device found, idVendor=1199, idProduct=9002, bcdDevice=1e.60 [ 197.981861][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.981874][ T10] usb 5-1: Product: 뙯뽨䋟뫇帛늊寶๯ₑ(雛Ѣ妬㣶鷸̼厑ᩐ莆Ⰷॎ讍蛇챊浶泑쩓뽋괌 [ 197.981885][ T10] usb 5-1: Manufacturer: 楧盧쨧⚜﮲䔴ෟ׈趹Öَ桮욺ٍ㹇ᤨ뫟氣렶銠珦粁ら박ℌ䋰㎋吣铥瀁㵔ᮬ릲㈮Ń㗊馩폲믆耠晡꫙ [ 197.981896][ T10] usb 5-1: SerialNumber: Ǫ秦傫䂺⃩퍣쇘勁⺳ׇ뵼먗ꐊ侱욀鐻棵納墿䜋燠鋊呩ᮏᆢ亝븛죍챻צּ뫥龂쮜⼜᧥茒闖봾൑镔ኍⱨ抁﵋睹嫮ꯧ㲛྾㏱᭦䡸泿᷾笃汅횤籞᩠它쏠췒൙縋隒୓销䜅㊳낭龼盝予㧢ꋾ諀焑⌍頖럝๧놊谪ꆑ㩏ꚻ厲푱㈴驩繅흿褠⁨ᦵ [ 198.041828][ T7011] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 198.182220][ T7013] tls_set_device_offload_rx: netdev not found [ 198.295457][ T7017] binder: BINDER_SET_CONTEXT_MGR already set [ 198.295470][ T7017] binder: 7006:7017 ioctl 4018620d 200000004a80 returned -16 [ 198.330016][ T10] usb 5-1: USB disconnect, device number 9 [ 199.092452][ T37] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 199.262329][ T37] usb 5-1: Using ep0 maxpacket: 8 [ 199.283589][ T37] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 199.283622][ T37] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.283642][ T37] usb 5-1: Product: syz [ 199.283657][ T37] usb 5-1: Manufacturer: syz [ 199.283672][ T37] usb 5-1: SerialNumber: syz [ 199.326216][ T37] usb 5-1: config 0 descriptor?? [ 199.530526][ T37] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 199.739124][ T7032] fuse: Bad value for 'fd' [ 199.982961][ T5602] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 200.132545][ T5602] usb 2-1: Using ep0 maxpacket: 32 [ 200.136251][ T5602] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.136287][ T5602] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.136327][ T5602] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 200.136352][ T5602] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.149228][ T5602] usb 2-1: config 0 descriptor?? [ 200.226026][ T32] usb 3-1: USB disconnect, device number 32 [ 200.599932][ T5602] hid_parser_main: 2 callbacks suppressed [ 200.599958][ T5602] ft260 0003:0403:6030.0006: unknown main item tag 0x0 [ 200.599989][ T5602] ft260 0003:0403:6030.0006: unknown main item tag 0x0 [ 200.682640][ T32] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 200.863887][ T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 200.863925][ T32] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 200.863969][ T32] usb 3-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 200.863993][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.889172][ T32] usb 3-1: config 0 descriptor?? [ 201.379713][ T6468] hid-generic 0006:0004:0009.0007: unknown main item tag 0x0 [ 201.379755][ T6468] hid-generic 0006:0004:0009.0007: unknown main item tag 0x0 [ 201.379783][ T6468] hid-generic 0006:0004:0009.0007: unknown main item tag 0x0 [ 201.379809][ T6468] hid-generic 0006:0004:0009.0007: unknown main item tag 0x0 [ 201.379835][ T6468] hid-generic 0006:0004:0009.0007: unknown main item tag 0x0 [ 201.379861][ T6468] hid-generic 0006:0004:0009.0007: unknown main item tag 0x0 [ 201.379887][ T6468] hid-generic 0006:0004:0009.0007: unknown main item tag 0x0 [ 201.379912][ T6468] hid-generic 0006:0004:0009.0007: unknown main item tag 0x0 [ 201.392312][ T37] usb write operation failed. (-71) [ 201.452371][ T37] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 201.454745][ T37] dvbdev: DVB: registering new adapter (Terratec H7) [ 201.463169][ T37] usb 5-1: media controller created [ 201.467166][ T37] usb read operation failed. (-71) [ 201.467730][ T37] usb write operation failed. (-71) [ 201.488036][ T32] itetech 0003:258A:6A88.0008: hidraw0: USB HID v1.01 Device [HID 258a:6a88] on usb-dummy_hcd.2-1/input0 [ 201.561993][ T60] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 201.601028][ T60] Bluetooth: hci3: Injecting HCI hardware error event [ 201.610767][ T60] Bluetooth: hci3: hardware error 0x00 [ 201.633455][ T37] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 201.711937][ T32] usb 3-1: USB disconnect, device number 33 [ 201.738065][ T37] usb 5-1: USB disconnect, device number 10 [ 202.469371][ T6468] hid-generic 0006:0004:0009.0007: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 202.902776][ T5602] ft260 0003:0403:6030.0006: failed to retrieve chip version [ 202.903306][ T5602] ft260 0003:0403:6030.0006: probe with driver ft260 failed with error -71 [ 202.952981][ T5602] usb 2-1: USB disconnect, device number 37 [ 203.401434][ T7073] netlink: 80 bytes leftover after parsing attributes in process `syz.2.357'. [ 203.489010][ T5602] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 203.646335][ T5602] usb 5-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x2C, changing to 0xC [ 203.646372][ T5602] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 203.646398][ T5602] usb 5-1: config 0 interface 0 has no altsetting 0 [ 203.650093][ T5602] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 203.650125][ T5602] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 203.650139][ T5602] usb 5-1: Product: syz [ 203.650147][ T5602] usb 5-1: Manufacturer: syz [ 203.650155][ T5602] usb 5-1: SerialNumber: syz [ 203.676607][ T5602] usb 5-1: config 0 descriptor?? [ 203.717012][ T5602] usb 5-1: selecting invalid altsetting 0 [ 203.802239][ T5721] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 203.925166][ T7065] overlay: ./file0 is not a directory [ 203.925528][ T7064] overlay: ./file0 is not a directory [ 203.952768][ T5721] usb 3-1: Using ep0 maxpacket: 8 [ 203.983871][ T5721] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 203.983900][ T5721] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.983912][ T5721] usb 3-1: Product: syz [ 203.983921][ T5721] usb 3-1: Manufacturer: syz [ 203.983929][ T5721] usb 3-1: SerialNumber: syz [ 204.004999][ T5721] usb 3-1: config 0 descriptor?? [ 204.031229][ T7065] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 204.065430][ T5602] usb 5-1: USB disconnect, device number 11 [ 204.236232][ T5721] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 204.272325][ T60] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 204.687531][ T7087] Bluetooth: hci2: invalid len left 7, exp >= 199 [ 204.700833][ T7087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.362'. [ 204.958929][ T7091] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 205.287896][ T7099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.366'. [ 205.532234][ T5602] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 205.662346][ T5602] usb 5-1: device descriptor read/64, error -71 [ 205.902346][ T5602] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 206.032656][ T5602] usb 5-1: device descriptor read/64, error -71 [ 206.042977][ T5721] usb write operation failed. (-71) [ 206.047423][ T5721] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 206.048844][ T5721] dvbdev: DVB: registering new adapter (Terratec H7) [ 206.048896][ T5721] usb 3-1: media controller created [ 206.049363][ T5721] usb read operation failed. (-71) [ 206.049845][ T5721] usb write operation failed. (-71) [ 206.057151][ T5721] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 206.075984][ T5721] usb 3-1: USB disconnect, device number 34 [ 206.145181][ T5602] usb usb5-port1: attempt power cycle [ 206.259184][ T7105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.315693][ T7110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.318692][ T7105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.485660][ T5602] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 206.506145][ T5602] usb 5-1: device descriptor read/8, error -71 [ 206.542319][ T5721] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 206.627655][ T7116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.373'. [ 206.692324][ T5721] usb 2-1: Using ep0 maxpacket: 32 [ 206.695780][ T5721] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 206.695826][ T5721] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 206.695855][ T5721] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 206.695871][ T5721] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 206.695887][ T5721] usb 2-1: config 0 interface 0 has no altsetting 0 [ 206.698728][ T5721] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 206.698747][ T5721] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 206.698760][ T5721] usb 2-1: Product: syz [ 206.698769][ T5721] usb 2-1: Manufacturer: syz [ 206.698777][ T5721] usb 2-1: SerialNumber: syz [ 206.703515][ T5721] usb 2-1: config 0 descriptor?? [ 206.726598][ T5721] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 206.736521][ T5721] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 206.742629][ T5602] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 206.763165][ T5602] usb 5-1: device descriptor read/8, error -71 [ 206.879843][ T5602] usb usb5-port1: unable to enumerate USB device [ 206.988070][ T32] usb 2-1: USB disconnect, device number 38 [ 207.020312][ T32] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 207.056021][ T7122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.375'. [ 207.105521][ T7124] FAULT_INJECTION: forcing a failure. [ 207.105521][ T7124] name failslab, interval 1, probability 0, space 0, times 0 [ 207.105547][ T7124] CPU: 1 UID: 0 PID: 7124 Comm: syz.0.376 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 207.105564][ T7124] Tainted: [L]=SOFTLOCKUP [ 207.105568][ T7124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 207.105575][ T7124] Call Trace: [ 207.105580][ T7124] [ 207.105585][ T7124] dump_stack_lvl+0xe8/0x150 [ 207.105603][ T7124] should_fail_ex+0x46b/0x600 [ 207.105624][ T7124] should_failslab+0xa8/0x100 [ 207.105642][ T7124] __kvmalloc_node_noprof+0x170/0x8e0 [ 207.105658][ T7124] ? rhashtable_init_noprof+0x536/0xad0 [ 207.105673][ T7124] ? rhashtable_init_noprof+0x135/0xad0 [ 207.105690][ T7124] rhashtable_init_noprof+0x536/0xad0 [ 207.105709][ T7124] rhltable_init_noprof+0x1e/0x60 [ 207.105725][ T7124] nf_tables_newtable+0x68f/0x1910 [ 207.105752][ T7124] nfnetlink_rcv+0x1247/0x27b0 [ 207.105784][ T7124] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 207.105806][ T7124] ? __pfx_save_netdev_trace_buffer+0x10/0x10 [ 207.105822][ T7124] ? ref_tracker_free+0x673/0x820 [ 207.105852][ T7124] ? __netlink_deliver_tap+0x866/0x8b0 [ 207.105872][ T7124] ? netlink_deliver_tap+0x2e/0x1b0 [ 207.105886][ T7124] ? netlink_deliver_tap+0x2e/0x1b0 [ 207.105903][ T7124] netlink_unicast+0x780/0x920 [ 207.105921][ T7124] netlink_sendmsg+0x813/0xb40 [ 207.105940][ T7124] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.105956][ T7124] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 207.105975][ T7124] ? aa_sock_msg_perm+0x122/0x200 [ 207.105991][ T7124] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.106004][ T7124] sock_sendmsg_nosec+0x112/0x150 [ 207.106023][ T7124] ____sys_sendmsg+0x55c/0x870 [ 207.106041][ T7124] ? __pfx_____sys_sendmsg+0x10/0x10 [ 207.106061][ T7124] ? import_iovec+0x73/0xa0 [ 207.106079][ T7124] ___sys_sendmsg+0x2a5/0x360 [ 207.106093][ T7124] ? __lock_acquire+0x6b5/0x2d10 [ 207.106112][ T7124] ? __pfx____sys_sendmsg+0x10/0x10 [ 207.106146][ T7124] ? __fget_files+0x2a/0x420 [ 207.106158][ T7124] ? __fget_files+0x3a6/0x420 [ 207.106175][ T7124] __x64_sys_sendmsg+0x1c3/0x2a0 [ 207.106192][ T7124] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 207.106212][ T7124] ? __pfx_ksys_write+0x10/0x10 [ 207.106231][ T7124] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.106244][ T7124] do_syscall_64+0x15f/0xf80 [ 207.106258][ T7124] ? trace_irq_disable+0x3b/0x140 [ 207.106273][ T7124] ? clear_bhb_loop+0x40/0x90 [ 207.106288][ T7124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.106299][ T7124] RIP: 0033:0x7f0b870dcdd9 [ 207.106311][ T7124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.106327][ T7124] RSP: 002b:00007f0b8532e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.106349][ T7124] RAX: ffffffffffffffda RBX: 00007f0b87355fa0 RCX: 00007f0b870dcdd9 [ 207.106364][ T7124] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 207.106388][ T7124] RBP: 00007f0b8532e090 R08: 0000000000000000 R09: 0000000000000000 [ 207.106401][ T7124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.106413][ T7124] R13: 00007f0b87356038 R14: 00007f0b87355fa0 R15: 00007ffc6f48f6a8 [ 207.106444][ T7124] [ 207.852225][ T32] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 207.892325][ T5602] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 208.017065][ T32] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 208.017099][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.017120][ T32] usb 3-1: Product: syz [ 208.017131][ T32] usb 3-1: Manufacturer: syz [ 208.017140][ T32] usb 3-1: SerialNumber: syz [ 208.042334][ T5602] usb 2-1: Using ep0 maxpacket: 8 [ 208.070576][ T32] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 208.086535][ T5602] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 208.086576][ T5602] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.086596][ T5602] usb 2-1: Product: syz [ 208.086610][ T5602] usb 2-1: Manufacturer: syz [ 208.086624][ T5602] usb 2-1: SerialNumber: syz [ 208.149292][ T5602] usb 2-1: config 0 descriptor?? [ 208.150524][ T37] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 208.364471][ C1] usb 3-1: ath9k_htc: invalid pkt_len (ffba) [ 208.380270][ T5602] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 208.399761][ T7135] vivid-000: ================= START STATUS ================= [ 208.399780][ T7135] vivid-000: Test Pattern: 75% Colorbar [ 208.399802][ T7135] vivid-000: Fill Percentage of Frame: 100 [ 208.399820][ T7135] vivid-000: Horizontal Movement: No Movement [ 208.401693][ T7135] vivid-000: Vertical Movement: No Movement [ 208.401714][ T7135] vivid-000: OSD Text Mode: All [ 208.401733][ T7135] vivid-000: Show Border: false [ 208.401752][ T7135] vivid-000: Show Square: false [ 208.401769][ T7135] vivid-000: Sensor Flipped Horizontally: false [ 208.401845][ T7135] vivid-000: Sensor Flipped Vertically: false [ 208.401864][ T7135] vivid-000: Insert SAV Code in Image: false [ 208.401883][ T7135] vivid-000: Insert EAV Code in Image: false [ 208.401902][ T7135] vivid-000: Insert Video Guard Band: false [ 208.401919][ T7135] vivid-000: Reduced Framerate: false [ 208.401936][ T7135] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 208.402002][ T7135] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 208.402071][ T7135] vivid-000: Enable Capture Cropping: true [ 208.447326][ T7135] vivid-000: Enable Capture Composing: true [ 208.447346][ T7135] vivid-000: Enable Capture Scaler: true [ 208.447595][ T7135] vivid-000: Timestamp Source: End of Frame [ 208.447616][ T7135] vivid-000: Colorspace: sRGB [ 208.447633][ T7135] vivid-000: Transfer Function: Default [ 208.447652][ T7135] vivid-000: Y'CbCr Encoding: Default [ 208.447671][ T7135] vivid-000: HSV Encoding: Hue 0-179 [ 208.448314][ T7135] vivid-000: Quantization: Default [ 208.448333][ T7135] vivid-000: Apply Alpha To Red Only: false [ 208.448429][ T7135] vivid-000: Standard Aspect Ratio: 4x3 [ 208.448449][ T7135] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 208.448470][ T7135] vivid-000: DV Timings: 640x480p59 inactive [ 208.448491][ T7135] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 208.448508][ T7135] vivid-000: Maximum EDID Blocks: 2 [ 208.463386][ T7135] vivid-000: Limited RGB Range (16-235): false [ 208.463410][ T7135] vivid-000: Rx RGB Quantization Range: Automatic [ 208.463428][ T7135] vivid-000: Power Present: 0x00000001 [ 208.463448][ T7135] tpg source WxH: 320x180 (Y'CbCr) [ 208.465151][ T7135] tpg field: 1 [ 208.465161][ T7135] tpg crop: (0,0)/320x180 [ 208.465175][ T7135] tpg compose: (0,0)/320x180 [ 208.465189][ T7135] tpg colorspace: 8 [ 208.465197][ T7135] tpg transfer function: 0/2 [ 208.465207][ T7135] tpg Y'CbCr encoding: 0/1 [ 208.465217][ T7135] tpg quantization: 0/2 [ 208.465227][ T7135] tpg RGB range: 0/2 [ 208.465237][ T7135] vivid-000: ================== END STATUS ================== [ 208.728132][ T5778] usb 3-1: USB disconnect, device number 35 [ 209.312356][ T37] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 209.312565][ T37] ath9k_htc: Failed to initialize the device [ 209.314467][ T5778] usb 3-1: ath9k_htc: USB layer deinitialized [ 209.799184][ T7151] IPVS: dh: FWM 3 0x00000003 - no destination available [ 210.563998][ T37] IPVS: starting estimator thread 0... [ 210.694932][ T7153] IPVS: using max 7 ests per chain, 16800 per kthread [ 210.839538][ T7157] program syz.4.388 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 210.992683][ T5602] usb write operation failed. (-71) [ 211.018250][ T5602] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 211.018995][ T5602] dvbdev: DVB: registering new adapter (Terratec H7) [ 211.019052][ T5602] usb 2-1: media controller created [ 211.020522][ T5602] usb read operation failed. (-71) [ 211.020979][ T5602] usb write operation failed. (-71) [ 211.085388][ T5602] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 211.102348][ T5602] usb 2-1: USB disconnect, device number 39 [ 211.289148][ T7170] fuse: Unknown parameter 'group_i5H00000000000000000000' [ 211.616024][ T7181] lo: entered promiscuous mode [ 211.892284][ T6468] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 211.962265][ T5721] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 212.049560][ T6468] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.049590][ T6468] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 212.076613][ T6468] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 212.076638][ T6468] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 212.076649][ T6468] usb 5-1: SerialNumber: syz [ 212.112365][ T5721] usb 2-1: Using ep0 maxpacket: 32 [ 212.121221][ T5721] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 212.121268][ T5721] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 212.121327][ T5721] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 212.121354][ T5721] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 212.121381][ T5721] usb 2-1: config 0 interface 0 has no altsetting 0 [ 212.191650][ T5721] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 212.191672][ T5721] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 212.191684][ T5721] usb 2-1: Product: syz [ 212.191694][ T5721] usb 2-1: Manufacturer: syz [ 212.191708][ T5721] usb 2-1: SerialNumber: syz [ 212.229359][ T5721] usb 2-1: config 0 descriptor?? [ 212.252514][ T5721] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 212.273244][ T5721] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 212.362856][ T6468] usb 5-1: 0:2 : does not exist [ 212.459290][ T6468] usb 5-1: USB disconnect, device number 16 [ 212.509540][ T5778] usb 2-1: USB disconnect, device number 40 [ 212.526286][ T5778] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 212.592257][ T60] Bluetooth: hci0: command 0x0406 tx timeout [ 212.592538][ T60] Bluetooth: hci2: command 0x0406 tx timeout [ 212.592569][ T60] Bluetooth: hci1: command 0x0406 tx timeout [ 212.646408][ T7179] lo: left promiscuous mode [ 212.661155][ T5800] udevd[5800]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 213.203817][ T7217] capability: warning: `syz.1.398' uses deprecated v2 capabilities in a way that may be insecure [ 213.204586][ T7217] program syz.1.398 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 213.535940][ T7203] orangefs_mount: mount request failed with -4 [ 213.702277][ T5778] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 213.832395][ T5778] usb 5-1: device descriptor read/64, error -71 [ 214.073355][ T5778] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 214.232250][ T5778] usb 5-1: device descriptor read/64, error -71 [ 214.342850][ T5778] usb usb5-port1: attempt power cycle [ 214.682305][ T5778] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 214.704948][ T5778] usb 5-1: device descriptor read/8, error -71 [ 214.942305][ T5778] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 214.964517][ T5778] usb 5-1: device descriptor read/8, error -71 [ 215.076988][ T5778] usb usb5-port1: unable to enumerate USB device [ 216.435013][ T5618] Bluetooth: hci1: ACL packet too small [ 217.447749][ T7311] netlink: 'syz.1.413': attribute type 4 has an invalid length. [ 217.447765][ T7311] netlink: 152 bytes leftover after parsing attributes in process `syz.1.413'. [ 217.527023][ T7311] .`: renamed from bond0 (while UP) [ 217.626334][ T7314] netlink: 60 bytes leftover after parsing attributes in process `syz.4.414'. [ 217.662782][ T7314] netlink: 60 bytes leftover after parsing attributes in process `syz.4.414'. [ 217.699128][ T7316] netlink: 'syz.0.415': attribute type 10 has an invalid length. [ 217.724549][ T7316] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.729832][ T7316] bond0: (slave team0): Enslaving as an active interface with an up link [ 217.837687][ T7318] PM: Enabling pm_trace changes system date and time during resume. [ 217.837687][ T7318] PM: Correct system time has to be restored manually after resume. [ 218.050158][ T7328] TCP: TCP_TX_DELAY enabled [ 218.122237][ T6468] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 218.144393][ T7330] netlink: 12 bytes leftover after parsing attributes in process `syz.2.420'. [ 218.233533][ T5721] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 218.272891][ T6468] usb 5-1: Using ep0 maxpacket: 8 [ 218.274844][ T6468] usb 5-1: unable to get BOS descriptor or descriptor too short [ 218.275776][ T6468] usb 5-1: config 117 has an invalid interface number: 163 but max is 0 [ 218.275791][ T6468] usb 5-1: config 117 has no interface number 0 [ 218.275809][ T6468] usb 5-1: config 117 interface 163 has no altsetting 0 [ 218.277815][ T6468] usb 5-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=5d.24 [ 218.277831][ T6468] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.277842][ T6468] usb 5-1: Product: syz [ 218.277850][ T6468] usb 5-1: Manufacturer: syz [ 218.277859][ T6468] usb 5-1: SerialNumber: syz [ 218.405967][ T5721] usb 2-1: Using ep0 maxpacket: 8 [ 218.433392][ T5721] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 218.433427][ T5721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.433448][ T5721] usb 2-1: Product: syz [ 218.433462][ T5721] usb 2-1: Manufacturer: syz [ 218.433476][ T5721] usb 2-1: SerialNumber: syz [ 218.446376][ T5721] usb 2-1: config 0 descriptor?? [ 218.685785][ T5721] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 219.339075][ T7318] IPv4: Oversized IP packet from 127.202.26.0 [ 219.348183][ T5778] usb 5-1: USB disconnect, device number 21 [ 219.369563][ T5778] f81534a_ctrl 5-1:117.163: failed to enable ports: -19 [ 219.400280][ T6468] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 219.532715][ T6468] usb 3-1: device descriptor read/64, error -71 [ 219.772264][ T6468] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 219.902353][ T6468] usb 3-1: device descriptor read/64, error -71 [ 220.014359][ T6468] usb usb3-port1: attempt power cycle [ 220.375299][ T7341] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 220.412400][ T6468] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 220.436679][ T6468] usb 3-1: device descriptor read/8, error -71 [ 220.519994][ T5721] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 220.520343][ T5721] dvbdev: DVB: registering new adapter (Terratec H7) [ 220.520379][ T5721] usb 2-1: media controller created [ 220.694479][ T6468] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 220.697539][ T7344] netlink: 'syz.4.425': attribute type 2 has an invalid length. [ 220.697562][ T7344] netlink: 'syz.4.425': attribute type 2 has an invalid length. [ 220.706150][ T5721] usb read operation failed. (-71) [ 220.725943][ T6468] usb 3-1: device descriptor read/8, error -71 [ 220.746951][ T5721] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 220.761992][ T5721] usb 2-1: USB disconnect, device number 41 [ 220.835324][ T6468] usb usb3-port1: unable to enumerate USB device [ 221.087793][ T5778] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 221.123445][ T7350] 9p: Bad value for 'wfdno' [ 221.242323][ T5778] usb 5-1: Using ep0 maxpacket: 8 [ 221.247691][ T5778] usb 5-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 221.247725][ T5778] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 221.247740][ T5778] usb 5-1: Product: syz [ 221.247748][ T5778] usb 5-1: Manufacturer: syz [ 221.247756][ T5778] usb 5-1: SerialNumber: syz [ 221.289757][ T5778] usb 5-1: config 0 descriptor?? [ 221.301017][ T5778] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 221.696348][ T5778] gspca_sn9c2028: read1 error -71 [ 221.696878][ T5778] gspca_sn9c2028: read1 error -71 [ 221.696974][ T5778] sn9c2028 5-1:0.0: probe with driver sn9c2028 failed with error -71 [ 221.708276][ T5778] usb 5-1: USB disconnect, device number 22 [ 222.249249][ T7359] netlink: 60 bytes leftover after parsing attributes in process `syz.2.431'. [ 222.887705][ T7378] netlink: 12 bytes leftover after parsing attributes in process ` [ 222.887705][ T7378]  !'. [ 222.983515][ T6468] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 223.142376][ T37] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 223.154491][ T6468] usb 3-1: Using ep0 maxpacket: 8 [ 223.166678][ T6468] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 223.166705][ T6468] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.166717][ T6468] usb 3-1: Product: syz [ 223.166725][ T6468] usb 3-1: Manufacturer: syz [ 223.166734][ T6468] usb 3-1: SerialNumber: syz [ 223.170691][ T6468] usb 3-1: config 0 descriptor?? [ 223.222647][ T4942] usb 2-1: new low-speed USB device number 42 using dummy_hcd [ 223.302255][ T37] usb 5-1: Using ep0 maxpacket: 32 [ 223.310390][ T37] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 223.310540][ T37] usb 5-1: config 0 has no interface number 0 [ 223.330177][ T37] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 223.330256][ T37] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.330274][ T37] usb 5-1: Product: syz [ 223.330288][ T37] usb 5-1: Manufacturer: syz [ 223.330302][ T37] usb 5-1: SerialNumber: syz [ 223.341625][ T37] usb 5-1: config 0 descriptor?? [ 223.379977][ T4942] usb 2-1: device descriptor read/64, error -71 [ 223.389270][ T6468] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 223.400672][ T37] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 223.574849][ T37] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 223.584336][ T37] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 223.632684][ T4942] usb 2-1: new low-speed USB device number 43 using dummy_hcd [ 223.782227][ T4942] usb 2-1: device descriptor read/64, error -71 [ 223.919022][ T4942] usb usb2-port1: attempt power cycle [ 223.977592][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 223.989293][ T5749] usb 5-1: USB disconnect, device number 23 [ 224.012635][ T5749] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 224.021572][ T5749] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 224.058103][ T5749] quatech2 5-1:0.51: device disconnected [ 224.302307][ T4942] usb 2-1: new low-speed USB device number 44 using dummy_hcd [ 224.332864][ T4942] usb 2-1: device descriptor read/8, error -71 [ 224.565421][ T7384] FAULT_INJECTION: forcing a failure. [ 224.565421][ T7384] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.565447][ T7384] CPU: 1 UID: 0 PID: 7384 Comm: syz.4.442 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 224.565465][ T7384] Tainted: [L]=SOFTLOCKUP [ 224.565469][ T7384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 224.565478][ T7384] Call Trace: [ 224.565484][ T7384] [ 224.565489][ T7384] dump_stack_lvl+0xe8/0x150 [ 224.565510][ T7384] should_fail_ex+0x46b/0x600 [ 224.565529][ T7384] _copy_to_user+0x31/0xb0 [ 224.565546][ T7384] simple_read_from_buffer+0xe1/0x170 [ 224.565563][ T7384] proc_fail_nth_read+0x1be/0x230 [ 224.565577][ T7384] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 224.565592][ T7384] ? rw_verify_area+0x2ac/0x4e0 [ 224.565606][ T7384] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 224.565620][ T7384] vfs_read+0x212/0xa80 [ 224.565638][ T7384] ? __pfx_vfs_read+0x10/0x10 [ 224.565653][ T7384] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 224.565670][ T7384] ? lockdep_hardirqs_on+0x7a/0x110 [ 224.565685][ T7384] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 224.565700][ T7384] ? mutex_lock_nested+0x152/0x1d0 [ 224.565711][ T7384] ? fdget_pos+0x252/0x320 [ 224.565728][ T7384] ksys_read+0x156/0x270 [ 224.565744][ T7384] ? __pfx_ksys_read+0x10/0x10 [ 224.565757][ T7384] ? __pfx_v4l2_ioctl+0x10/0x10 [ 224.565776][ T7384] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.565789][ T7384] do_syscall_64+0x15f/0xf80 [ 224.565804][ T7384] ? trace_irq_disable+0x3b/0x140 [ 224.565819][ T7384] ? clear_bhb_loop+0x40/0x90 [ 224.565834][ T7384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.565846][ T7384] RIP: 0033:0x7fd7e249d60e [ 224.565858][ T7384] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 224.565868][ T7384] RSP: 002b:00007fd7e0735fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 224.565883][ T7384] RAX: ffffffffffffffda RBX: 00007fd7e07366c0 RCX: 00007fd7e249d60e [ 224.565891][ T7384] RDX: 000000000000000f RSI: 00007fd7e07360a0 RDI: 0000000000000004 [ 224.565899][ T7384] RBP: 00007fd7e0736090 R08: 0000000000000000 R09: 0000000000000000 [ 224.565906][ T7384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.565913][ T7384] R13: 00007fd7e2756038 R14: 00007fd7e2755fa0 R15: 00007ffe89dd44a8 [ 224.565931][ T7384] [ 224.576216][ T4942] usb 2-1: new low-speed USB device number 45 using dummy_hcd [ 224.593097][ T4942] usb 2-1: device descriptor read/8, error -71 [ 224.705018][ T4942] usb usb2-port1: unable to enumerate USB device [ 224.793625][ T7388] Cannot find set identified by id 0 to match [ 225.169097][ T7395] netlink: 56 bytes leftover after parsing attributes in process `syz.4.446'. [ 225.204198][ T7395] netlink: 56 bytes leftover after parsing attributes in process `syz.4.446'. [ 225.204812][ T7395] netlink: 56 bytes leftover after parsing attributes in process `syz.4.446'. [ 225.271219][ T6468] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 225.282773][ T6468] dvbdev: DVB: registering new adapter (Terratec H7) [ 225.282845][ T6468] usb 3-1: media controller created [ 225.462276][ T6468] usb read operation failed. (-71) [ 225.513399][ T6468] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 225.533858][ T6468] usb 3-1: USB disconnect, device number 40 [ 225.751354][ T7404] FAULT_INJECTION: forcing a failure. [ 225.751354][ T7404] name failslab, interval 1, probability 0, space 0, times 0 [ 225.751392][ T7404] CPU: 0 UID: 0 PID: 7404 Comm: syz.4.449 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 225.751422][ T7404] Tainted: [L]=SOFTLOCKUP [ 225.751430][ T7404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 225.751442][ T7404] Call Trace: [ 225.751450][ T7404] [ 225.751458][ T7404] dump_stack_lvl+0xe8/0x150 [ 225.751491][ T7404] should_fail_ex+0x46b/0x600 [ 225.751523][ T7404] should_failslab+0xa8/0x100 [ 225.751552][ T7404] kmem_cache_alloc_noprof+0x87/0x680 [ 225.751572][ T7404] ? alloc_empty_file+0x5b/0x1d0 [ 225.751586][ T7404] alloc_empty_file+0x5b/0x1d0 [ 225.751598][ T7404] alloc_file_pseudo+0x155/0x240 [ 225.751612][ T7404] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 225.751631][ T7404] anon_inode_getfile+0xc5/0x1a0 [ 225.751648][ T7404] iommufd_test+0x4cf/0x6160 [ 225.751668][ T7404] ? __lock_acquire+0x6b5/0x2d10 [ 225.751684][ T7404] ? __pfx_iommufd_test+0x10/0x10 [ 225.751703][ T7404] ? tomoyo_path_number_perm+0x219/0x630 [ 225.751717][ T7404] ? tomoyo_path_number_perm+0x219/0x630 [ 225.751733][ T7404] ? __might_fault+0xaf/0x130 [ 225.751747][ T7404] ? __might_fault+0xaf/0x130 [ 225.751772][ T7404] iommufd_fops_ioctl+0x4b8/0x5d0 [ 225.751790][ T7404] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 225.751809][ T7404] ? __fget_files+0x2a/0x420 [ 225.751824][ T7404] ? __fget_files+0x2a/0x420 [ 225.751838][ T7404] ? bpf_lsm_file_ioctl+0x9/0x20 [ 225.751855][ T7404] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 225.751871][ T7404] __se_sys_ioctl+0xff/0x170 [ 225.751886][ T7404] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.751899][ T7404] do_syscall_64+0x15f/0xf80 [ 225.751914][ T7404] ? trace_irq_disable+0x3b/0x140 [ 225.751930][ T7404] ? clear_bhb_loop+0x40/0x90 [ 225.751944][ T7404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.751956][ T7404] RIP: 0033:0x7fd7e24dcdd9 [ 225.751968][ T7404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.751978][ T7404] RSP: 002b:00007fd7e0736028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 225.751992][ T7404] RAX: ffffffffffffffda RBX: 00007fd7e2755fa0 RCX: 00007fd7e24dcdd9 [ 225.752001][ T7404] RDX: 0000200000000140 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 225.752009][ T7404] RBP: 00007fd7e0736090 R08: 0000000000000000 R09: 0000000000000000 [ 225.752016][ T7404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.752023][ T7404] R13: 00007fd7e2756038 R14: 00007fd7e2755fa0 R15: 00007ffe89dd44a8 [ 225.752040][ T7404] [ 226.142338][ T5749] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 226.210995][ T7412] FAULT_INJECTION: forcing a failure. [ 226.210995][ T7412] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.211037][ T7412] CPU: 0 UID: 0 PID: 7412 Comm: syz.1.452 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 226.211065][ T7412] Tainted: [L]=SOFTLOCKUP [ 226.211073][ T7412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 226.211085][ T7412] Call Trace: [ 226.211092][ T7412] [ 226.211101][ T7412] dump_stack_lvl+0xe8/0x150 [ 226.211133][ T7412] should_fail_ex+0x46b/0x600 [ 226.211154][ T7412] _copy_to_user+0x31/0xb0 [ 226.211172][ T7412] drm_ioctl+0x6e0/0xb80 [ 226.211187][ T7412] ? __pfx_drm_wait_vblank_ioctl+0x10/0x10 [ 226.211206][ T7412] ? __pfx_drm_ioctl+0x10/0x10 [ 226.211228][ T7412] ? __fget_files+0x2a/0x420 [ 226.211243][ T7412] ? bpf_lsm_file_ioctl+0x9/0x20 [ 226.211261][ T7412] ? __pfx_drm_ioctl+0x10/0x10 [ 226.211272][ T7412] __se_sys_ioctl+0xff/0x170 [ 226.211287][ T7412] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.211301][ T7412] do_syscall_64+0x15f/0xf80 [ 226.211316][ T7412] ? trace_irq_disable+0x3b/0x140 [ 226.211331][ T7412] ? clear_bhb_loop+0x40/0x90 [ 226.211345][ T7412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.211363][ T7412] RIP: 0033:0x7f7727a4cdd9 [ 226.211381][ T7412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.211398][ T7412] RSP: 002b:00007f7725ca6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 226.211421][ T7412] RAX: ffffffffffffffda RBX: 00007f7727cc5fa0 RCX: 00007f7727a4cdd9 [ 226.211436][ T7412] RDX: 00002000000001c0 RSI: 00000000c018643a RDI: 0000000000000003 [ 226.211448][ T7412] RBP: 00007f7725ca6090 R08: 0000000000000000 R09: 0000000000000000 [ 226.211459][ T7412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.211482][ T7412] R13: 00007f7727cc6038 R14: 00007f7727cc5fa0 R15: 00007fffe5e809e8 [ 226.211505][ T7412] [ 226.300255][ T5749] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 226.300285][ T5749] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.300303][ T5749] usb 5-1: Product: syz [ 226.300316][ T5749] usb 5-1: Manufacturer: syz [ 226.300329][ T5749] usb 5-1: SerialNumber: syz [ 226.330826][ T7414] overlayfs: missing 'lowerdir' [ 226.338255][ T5749] usb 5-1: config 0 descriptor?? [ 226.347283][ T5749] ch341 5-1:0.0: ch341-uart converter detected [ 226.545160][ T7406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.547172][ T7406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.562248][ T6468] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 226.604681][ T5749] usb 5-1: failed to receive control message: -71 [ 226.604719][ T5749] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 226.617958][ T5749] usb 5-1: USB disconnect, device number 24 [ 226.629923][ T5749] ch341 5-1:0.0: device disconnected [ 226.722330][ T6468] usb 3-1: Using ep0 maxpacket: 32 [ 226.726774][ T6468] usb 3-1: config 0 has an invalid interface number: 127 but max is 2 [ 226.726804][ T6468] usb 3-1: config 0 has an invalid interface number: 116 but max is 2 [ 226.726825][ T6468] usb 3-1: config 0 has no interface number 0 [ 226.726842][ T6468] usb 3-1: config 0 has no interface number 2 [ 226.726932][ T6468] usb 3-1: config 0 interface 127 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 226.726958][ T6468] usb 3-1: config 0 interface 127 altsetting 9 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 226.727003][ T6468] usb 3-1: config 0 interface 116 altsetting 255 has a duplicate endpoint with address 0x8, skipping [ 226.727042][ T6468] usb 3-1: config 0 interface 1 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 226.727067][ T6468] usb 3-1: config 0 interface 1 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0 [ 226.727091][ T6468] usb 3-1: config 0 interface 1 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 226.727115][ T6468] usb 3-1: config 0 interface 1 altsetting 1 has an endpoint descriptor with address 0x11, changing to 0x1 [ 226.727141][ T6468] usb 3-1: config 0 interface 127 has no altsetting 0 [ 226.727159][ T6468] usb 3-1: config 0 interface 116 has no altsetting 0 [ 226.727178][ T6468] usb 3-1: config 0 interface 1 has no altsetting 0 [ 226.729828][ T6468] usb 3-1: New USB device found, idVendor=1430, idProduct=85aa, bcdDevice=19.b1 [ 226.729856][ T6468] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.729877][ T6468] usb 3-1: Product: syz [ 226.729891][ T6468] usb 3-1: Manufacturer: ࡠ [ 226.729906][ T6468] usb 3-1: SerialNumber: syz [ 226.900018][ T6468] usb 3-1: config 0 descriptor?? [ 227.782293][ T4942] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 227.948691][ T4942] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.948712][ T4942] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 227.950997][ T4942] usb 5-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 227.951025][ T4942] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.951089][ T4942] usb 5-1: Product: syz [ 227.951098][ T4942] usb 5-1: Manufacturer: syz [ 227.951106][ T4942] usb 5-1: SerialNumber: syz [ 227.965009][ T5778] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 228.071994][ T6468] uvcvideo 3-1:0.116: Found UVC 0.00 device syz (1430:85aa) [ 228.072052][ T6468] uvcvideo 3-1:0.116: No valid video chain found. [ 228.107446][ T6468] usb 3-1: USB disconnect, device number 41 [ 228.140271][ T5778] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.140301][ T5778] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 228.157364][ T5778] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 228.157396][ T5778] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 228.157415][ T5778] usb 2-1: SerialNumber: syz [ 228.471357][ T5778] usb 2-1: 0:2 : does not exist [ 228.471454][ T5778] usb 2-1: unit 48 not found! [ 228.474238][ T7434] overlayfs: missing 'workdir' [ 228.545978][ T5778] usb 2-1: USB disconnect, device number 46 [ 228.671738][ T4942] usb 5-1: 0:1 : does not exist [ 228.671832][ T4942] usb 5-1: unit 0 not found! [ 228.705931][ T5800] udevd[5800]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 228.779807][ T4942] usb 5-1: USB disconnect, device number 25 [ 228.849654][ T5800] udevd[5800]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 229.163417][ T5778] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 229.280843][ T7443] random: crng reseeded on system resumption [ 229.332841][ T5778] usb 3-1: Using ep0 maxpacket: 8 [ 229.337967][ T5778] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 229.337999][ T5778] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.338020][ T5778] usb 3-1: Product: syz [ 229.338035][ T5778] usb 3-1: Manufacturer: syz [ 229.338049][ T5778] usb 3-1: SerialNumber: syz [ 229.376721][ T5778] usb 3-1: config 0 descriptor?? [ 229.600185][ T5778] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 229.802745][ T7450] syz.4.466 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 229.932303][ T5749] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 230.072294][ T4942] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 230.084045][ T5749] usb 2-1: Using ep0 maxpacket: 32 [ 230.096005][ T5749] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.098340][ T5749] usb 2-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice= 0.40 [ 230.098357][ T5749] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.098369][ T5749] usb 2-1: Product: syz [ 230.098377][ T5749] usb 2-1: Manufacturer: syz [ 230.098385][ T5749] usb 2-1: SerialNumber: syz [ 230.232234][ T4942] usb 5-1: Using ep0 maxpacket: 16 [ 230.247678][ T4942] usb 5-1: unable to get BOS descriptor or descriptor too short [ 230.249091][ T4942] usb 5-1: config 12 has an invalid interface number: 34 but max is 0 [ 230.249116][ T4942] usb 5-1: config 12 has no interface number 0 [ 230.249150][ T4942] usb 5-1: config 12 interface 34 has no altsetting 0 [ 230.251794][ T4942] usb 5-1: New USB device found, idVendor=0565, idProduct=0002, bcdDevice=5b.dc [ 230.251822][ T4942] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.251841][ T4942] usb 5-1: Product: syz [ 230.251856][ T4942] usb 5-1: Manufacturer: syz [ 230.251870][ T4942] usb 5-1: SerialNumber: syz [ 230.561766][ T4942] kaweth 5-1:12.34: couldn't find required endpoints [ 230.588776][ T4942] usb 5-1: USB disconnect, device number 26 [ 231.290406][ T7456] FAULT_INJECTION: forcing a failure. [ 231.290406][ T7456] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.290441][ T7456] CPU: 0 UID: 0 PID: 7456 Comm: syz.4.468 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 231.290464][ T7456] Tainted: [L]=SOFTLOCKUP [ 231.290469][ T7456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 231.290476][ T7456] Call Trace: [ 231.290481][ T7456] [ 231.290487][ T7456] dump_stack_lvl+0xe8/0x150 [ 231.290509][ T7456] should_fail_ex+0x46b/0x600 [ 231.290528][ T7456] _copy_from_user+0x2d/0xb0 [ 231.290546][ T7456] kstrtouint_from_user+0xd6/0x180 [ 231.290562][ T7456] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 231.290586][ T7456] proc_fail_nth_write+0x8e/0x210 [ 231.290600][ T7456] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 231.290616][ T7456] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 231.290630][ T7456] vfs_write+0x2a3/0xba0 [ 231.290650][ T7456] ? __pfx_vfs_write+0x10/0x10 [ 231.290666][ T7456] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 231.290683][ T7456] ? lockdep_hardirqs_on+0x7a/0x110 [ 231.290699][ T7456] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 231.290714][ T7456] ? mutex_lock_nested+0x152/0x1d0 [ 231.290725][ T7456] ? fdget_pos+0x252/0x320 [ 231.290743][ T7456] ksys_write+0x156/0x270 [ 231.290759][ T7456] ? __pfx_ksys_write+0x10/0x10 [ 231.290778][ T7456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.290792][ T7456] do_syscall_64+0x15f/0xf80 [ 231.290808][ T7456] ? clear_bhb_loop+0x40/0x90 [ 231.290823][ T7456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.290834][ T7456] RIP: 0033:0x7fd7e249d60e [ 231.290847][ T7456] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 231.290857][ T7456] RSP: 002b:00007fd7e0735fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 231.290870][ T7456] RAX: ffffffffffffffda RBX: 00007fd7e07366c0 RCX: 00007fd7e249d60e [ 231.290879][ T7456] RDX: 0000000000000001 RSI: 00007fd7e07360a0 RDI: 0000000000000005 [ 231.290886][ T7456] RBP: 00007fd7e0736090 R08: 0000000000000000 R09: 0000000000000000 [ 231.290894][ T7456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.290901][ T7456] R13: 00007fd7e2756038 R14: 00007fd7e2755fa0 R15: 00007ffe89dd44a8 [ 231.290919][ T7456] [ 231.499501][ T5778] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 231.501765][ T5778] dvbdev: DVB: registering new adapter (Terratec H7) [ 231.502044][ T5778] usb 3-1: media controller created [ 231.631580][ T5778] usb read operation failed. (-71) [ 231.706708][ T5778] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 231.741397][ T5778] usb 3-1: USB disconnect, device number 42 [ 232.052302][ T5721] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 232.182330][ T5721] usb 5-1: device descriptor read/64, error -71 [ 232.341032][ T7463] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 232.432532][ T5721] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 232.562359][ T5721] usb 5-1: device descriptor read/64, error -71 [ 232.679802][ T5721] usb usb5-port1: attempt power cycle [ 232.780488][ T5749] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input8 [ 232.851689][ T4964] bcm5974 2-1:1.0: could not read from device [ 232.909465][ T5749] usb 2-1: USB disconnect, device number 47 [ 233.032670][ T5721] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 233.053729][ T5721] usb 5-1: device descriptor read/8, error -71 [ 233.295730][ T5721] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 233.327568][ T5721] usb 5-1: device descriptor read/8, error -71 [ 233.441379][ T5721] usb usb5-port1: unable to enumerate USB device [ 233.507496][ T7483] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 233.517878][ T7483] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 233.518263][ T7483] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 233.518640][ T7483] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 233.526357][ T7483] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 233.526686][ T7483] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 233.526868][ T7483] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 233.527057][ T7483] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 233.527234][ T7483] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 233.527435][ T7483] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 233.926083][ T7491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.478'. [ 234.204078][ T7490] netlink: 132 bytes leftover after parsing attributes in process `syz.0.478'. [ 234.252252][ T5721] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 234.309095][ T7496] netlink: 20 bytes leftover after parsing attributes in process `syz.1.480'. [ 234.402291][ T5721] usb 3-1: Using ep0 maxpacket: 8 [ 234.428445][ T5721] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 234.428479][ T5721] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.428499][ T5721] usb 3-1: Product: syz [ 234.428512][ T5721] usb 3-1: Manufacturer: syz [ 234.428521][ T5721] usb 3-1: SerialNumber: syz [ 234.442896][ T5721] usb 3-1: config 0 descriptor?? [ 234.537041][ T7500] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 234.701240][ T5721] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 234.782280][ T4942] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 234.942320][ T4942] usb 2-1: Using ep0 maxpacket: 8 [ 234.947262][ T4942] usb 2-1: config 215 has an invalid descriptor of length 194, skipping remainder of the config [ 234.947291][ T4942] usb 2-1: config 215 has 0 interfaces, different from the descriptor's value: 3 [ 234.981548][ T4942] usb 2-1: New USB device found, idVendor=0e41, idProduct=4247, bcdDevice= 0.40 [ 234.981581][ T4942] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.981602][ T4942] usb 2-1: Product: syz [ 234.981616][ T4942] usb 2-1: Manufacturer: syz [ 234.981631][ T4942] usb 2-1: SerialNumber: syz [ 235.312458][ T4942] usb 2-1: USB disconnect, device number 48 [ 236.557698][ T7522] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 237.018774][ T5721] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 237.019438][ T5721] dvbdev: DVB: registering new adapter (Terratec H7) [ 237.019488][ T5721] usb 3-1: media controller created [ 237.056694][ T5721] usb read operation failed. (-71) [ 237.077879][ T5721] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 237.096293][ T5721] usb 3-1: USB disconnect, device number 43 [ 237.584109][ T7534] input: syz0 as /devices/virtual/input/input9 [ 237.661865][ T7536] netlink: 12 bytes leftover after parsing attributes in process `syz.1.491'. [ 237.898791][ T7540] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 238.327744][ T7545] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 238.475369][ T5618] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 239.632237][ T37] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 239.802332][ T37] usb 3-1: Using ep0 maxpacket: 8 [ 239.809649][ T37] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 239.809670][ T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.809682][ T37] usb 3-1: Product: syz [ 239.809690][ T37] usb 3-1: Manufacturer: syz [ 239.809698][ T37] usb 3-1: SerialNumber: syz [ 239.818586][ T37] usb 3-1: config 0 descriptor?? [ 240.073234][ T37] usb read operation failed. (-32) [ 240.481994][ T37] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 240.490944][ T37] usb 3-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 240.490971][ T37] usb 3-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 241.560558][ T7578] sock: sock_set_timeout: `syz.0.507' (pid 7578) tries to set negative timeout [ 242.062352][ T5749] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 242.133245][ T5618] Bluetooth: hci0: unexpected event for opcode 0x1009 [ 242.212319][ T5749] usb 5-1: Using ep0 maxpacket: 16 [ 242.223816][ T5749] usb 5-1: config 5 has an invalid interface number: 168 but max is 0 [ 242.223848][ T5749] usb 5-1: config 5 has no interface number 0 [ 242.223898][ T5749] usb 5-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 242.223927][ T5749] usb 5-1: config 5 interface 168 altsetting 7 bulk endpoint 0x8B has invalid maxpacket 1024 [ 242.223952][ T5749] usb 5-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0x23, changing to 0x3 [ 242.223978][ T5749] usb 5-1: config 5 interface 168 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 8 [ 242.224002][ T5749] usb 5-1: config 5 interface 168 has no altsetting 0 [ 242.226916][ T5749] usb 5-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58 [ 242.226948][ T5749] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.226969][ T5749] usb 5-1: Product: syz [ 242.226984][ T5749] usb 5-1: Manufacturer: syz [ 242.226998][ T5749] usb 5-1: SerialNumber: syz [ 242.268843][ T7582] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 242.268965][ T7582] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 242.448462][ T7594] netlink: 'syz.1.510': attribute type 10 has an invalid length. [ 242.449205][ T7594] veth1_virt_wifi: entered promiscuous mode [ 242.724391][ C0] usb 5-1: NFC: Urb failure (status -71) [ 242.725677][ C0] usb 5-1: NFC: Urb failure (status -71) [ 242.740284][ T5749] usb 5-1: NFC: Unable to get FW version [ 242.790059][ T5749] pn533_usb 5-1:5.168: probe with driver pn533_usb failed with error -71 [ 242.813028][ T5618] Bluetooth: hci2: unexpected event for opcode 0x200b [ 242.816647][ T5749] usb 5-1: USB disconnect, device number 31 [ 243.300028][ T7606] netlink: 'syz.4.514': attribute type 21 has an invalid length. [ 243.300093][ T7606] netlink: 132 bytes leftover after parsing attributes in process `syz.4.514'. [ 243.330685][ T7606] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 243.438586][ T7608] Bluetooth: MGMT ver 1.23 [ 244.162295][ T5620] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 244.342222][ T5620] usb 2-1: Using ep0 maxpacket: 8 [ 244.349394][ T5620] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 244.349426][ T5620] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 244.349451][ T5620] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 244.349475][ T5620] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 244.349521][ T5620] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 244.349544][ T5620] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.655561][ T5620] usb 2-1: usb_control_msg returned -32 [ 244.655618][ T5620] usbtmc 2-1:16.0: can't read capabilities [ 244.689278][ T7614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.689952][ T7614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.726030][ T7614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.726495][ T7614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.777000][ T5602] usb 2-1: USB disconnect, device number 49 [ 244.882254][ T5778] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 245.032248][ T5778] usb 5-1: Using ep0 maxpacket: 8 [ 245.039058][ T5778] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 245.039091][ T5778] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.039112][ T5778] usb 5-1: Product: syz [ 245.039137][ T5778] usb 5-1: Manufacturer: syz [ 245.039151][ T5778] usb 5-1: SerialNumber: syz [ 245.050535][ T5778] usb 5-1: config 0 descriptor?? [ 245.256584][ T5778] usb read operation failed. (-32) [ 245.691508][ T5778] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 246.083510][ T5602] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 246.232215][ T5602] usb 2-1: Using ep0 maxpacket: 32 [ 246.236576][ T5602] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 246.244620][ T5602] usb 2-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 246.244648][ T5602] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.244666][ T5602] usb 2-1: Product: syz [ 246.244679][ T5602] usb 2-1: Manufacturer: syz [ 246.244691][ T5602] usb 2-1: SerialNumber: syz [ 246.499166][ T5602] usb 2-1: selecting invalid altsetting 1 [ 246.700014][ T5602] LME2510(C): Firmware Status: 1a 03 34 00 32 00 [ 246.700098][ T5602] dvb_usb_lmedm04 2-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 246.905606][ T5620] usb 2-1: USB disconnect, device number 50 [ 247.080890][ T5618] Bluetooth: hci2: unexpected event for opcode 0x1009 [ 248.871631][ T7661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.533'. [ 249.012342][ T5721] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 249.167907][ T5721] usb 2-1: unable to get BOS descriptor or descriptor too short [ 249.191624][ T5721] usb 2-1: New USB device found, idVendor=08e4, idProduct=0163, bcdDevice= 0.40 [ 249.191658][ T5721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.191679][ T5721] usb 2-1: Product: syz [ 249.191693][ T5721] usb 2-1: Manufacturer: ␉ [ 249.191708][ T5721] usb 2-1: SerialNumber: syz [ 249.435285][ T5721] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 249.449534][ T5721] usb 2-1: unit 2 not found! [ 249.449551][ T5721] usb 2-1: unit 0 not found! [ 249.520576][ T5721] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 249.534651][ T5721] usb 2-1: USB disconnect, device number 51 [ 249.576464][ T5791] udevd[5791]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 250.263418][ T5602] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 250.400326][ T5618] Bluetooth: hci0: unexpected event for opcode 0x1009 [ 250.414808][ T5602] usb 2-1: Using ep0 maxpacket: 8 [ 250.419894][ T5602] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 250.419926][ T5602] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.419946][ T5602] usb 2-1: Product: syz [ 250.419959][ T5602] usb 2-1: Manufacturer: syz [ 250.419973][ T5602] usb 2-1: SerialNumber: syz [ 250.427309][ T5602] usb 2-1: config 0 descriptor?? [ 250.653017][ T5602] usb read operation failed. (-32) [ 251.055846][ T5602] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 251.466218][ T7683] overlay: Unknown parameter '/' [ 255.870544][ T7724] overlay: Unknown parameter 'smackfsfloor' [ 255.885422][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.885538][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.322793][ T5618] Bluetooth: hci0: unexpected event for opcode 0x1009 [ 259.726009][ T7759] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 262.163080][ T7811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.575'. [ 262.249821][ T7816] netlink: 40 bytes leftover after parsing attributes in process `syz.0.577'. [ 262.278644][ T7816] netlink: 40 bytes leftover after parsing attributes in process `syz.0.577'. [ 264.758672][ T7838] FAULT_INJECTION: forcing a failure. [ 264.758672][ T7838] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.758711][ T7838] CPU: 1 UID: 0 PID: 7838 Comm: syz.2.583 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 264.758741][ T7838] Tainted: [L]=SOFTLOCKUP [ 264.758748][ T7838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 264.758760][ T7838] Call Trace: [ 264.758768][ T7838] [ 264.758777][ T7838] dump_stack_lvl+0xe8/0x150 [ 264.758809][ T7838] should_fail_ex+0x46b/0x600 [ 264.758851][ T7838] _copy_from_user+0x2d/0xb0 [ 264.758881][ T7838] dma_buf_ioctl+0x16b/0x8d0 [ 264.758912][ T7838] ? __pfx_dma_buf_ioctl+0x10/0x10 [ 264.758951][ T7838] ? __fget_files+0x2a/0x420 [ 264.758975][ T7838] ? __fget_files+0x2a/0x420 [ 264.758995][ T7838] ? __fget_files+0x3a6/0x420 [ 264.759014][ T7838] ? __fget_files+0x2a/0x420 [ 264.759038][ T7838] ? bpf_lsm_file_ioctl+0x9/0x20 [ 264.759078][ T7838] ? __pfx_dma_buf_ioctl+0x10/0x10 [ 264.759106][ T7838] __se_sys_ioctl+0xff/0x170 [ 264.759132][ T7838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.759156][ T7838] do_syscall_64+0x15f/0xf80 [ 264.759183][ T7838] ? trace_irq_disable+0x3b/0x140 [ 264.759207][ T7838] ? clear_bhb_loop+0x40/0x90 [ 264.759233][ T7838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.759253][ T7838] RIP: 0033:0x7ff6c0cccdd9 [ 264.759273][ T7838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.759290][ T7838] RSP: 002b:00007ff6bef1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 264.759313][ T7838] RAX: ffffffffffffffda RBX: 00007ff6c0f45fa0 RCX: 00007ff6c0cccdd9 [ 264.759328][ T7838] RDX: 0000200000000300 RSI: 0000000040086200 RDI: 0000000000000005 [ 264.759342][ T7838] RBP: 00007ff6bef1e090 R08: 0000000000000000 R09: 0000000000000000 [ 264.759354][ T7838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.759366][ T7838] R13: 00007ff6c0f46038 R14: 00007ff6c0f45fa0 R15: 00007ffd864e31e8 [ 264.759399][ T7838] [ 265.500045][ T7855] FAULT_INJECTION: forcing a failure. [ 265.500045][ T7855] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.500071][ T7855] CPU: 0 UID: 0 PID: 7855 Comm: syz.1.591 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 265.500089][ T7855] Tainted: [L]=SOFTLOCKUP [ 265.500093][ T7855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 265.500100][ T7855] Call Trace: [ 265.500106][ T7855] [ 265.500111][ T7855] dump_stack_lvl+0xe8/0x150 [ 265.500131][ T7855] should_fail_ex+0x46b/0x600 [ 265.500150][ T7855] _copy_to_user+0x31/0xb0 [ 265.500168][ T7855] simple_read_from_buffer+0xe1/0x170 [ 265.500184][ T7855] proc_fail_nth_read+0x1be/0x230 [ 265.500199][ T7855] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 265.500214][ T7855] ? rw_verify_area+0x2ac/0x4e0 [ 265.500235][ T7855] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 265.500249][ T7855] vfs_read+0x212/0xa80 [ 265.500267][ T7855] ? __pfx_vfs_read+0x10/0x10 [ 265.500283][ T7855] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 265.500299][ T7855] ? lockdep_hardirqs_on+0x7a/0x110 [ 265.500314][ T7855] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 265.500329][ T7855] ? mutex_lock_nested+0x152/0x1d0 [ 265.500341][ T7855] ? fdget_pos+0x252/0x320 [ 265.500358][ T7855] ksys_read+0x156/0x270 [ 265.500373][ T7855] ? __pfx_ksys_read+0x10/0x10 [ 265.500391][ T7855] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.500404][ T7855] do_syscall_64+0x15f/0xf80 [ 265.500419][ T7855] ? trace_irq_disable+0x3b/0x140 [ 265.500434][ T7855] ? clear_bhb_loop+0x40/0x90 [ 265.500448][ T7855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.500460][ T7855] RIP: 0033:0x7f7727a0d60e [ 265.500472][ T7855] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 265.500483][ T7855] RSP: 002b:00007f7725ca5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 265.500497][ T7855] RAX: ffffffffffffffda RBX: 00007f7725ca66c0 RCX: 00007f7727a0d60e [ 265.500506][ T7855] RDX: 000000000000000f RSI: 00007f7725ca60a0 RDI: 0000000000000006 [ 265.500513][ T7855] RBP: 00007f7725ca6090 R08: 0000000000000000 R09: 0000000000000000 [ 265.500520][ T7855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.500527][ T7855] R13: 00007f7727cc6038 R14: 00007f7727cc5fa0 R15: 00007fffe5e809e8 [ 265.500545][ T7855] [ 266.460288][ T7868] netlink: 'syz.1.595': attribute type 11 has an invalid length. [ 266.573312][ T7873] FAULT_INJECTION: forcing a failure. [ 266.573312][ T7873] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.573352][ T7873] CPU: 1 UID: 0 PID: 7873 Comm: syz.1.598 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 266.573381][ T7873] Tainted: [L]=SOFTLOCKUP [ 266.573389][ T7873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 266.573400][ T7873] Call Trace: [ 266.573409][ T7873] [ 266.573417][ T7873] dump_stack_lvl+0xe8/0x150 [ 266.573451][ T7873] should_fail_ex+0x46b/0x600 [ 266.573480][ T7873] _copy_from_iter+0x1d3/0x1670 [ 266.573516][ T7873] ? trace_kmem_cache_alloc+0x29/0xe0 [ 266.573540][ T7873] ? __alloc_skb+0x27d/0x7d0 [ 266.573564][ T7873] ? __pfx__copy_from_iter+0x10/0x10 [ 266.573589][ T7873] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 266.573615][ T7873] ? __alloc_skb+0x27d/0x7d0 [ 266.573643][ T7873] ? netlink_sendmsg+0x650/0xb40 [ 266.573668][ T7873] ? skb_put+0x11b/0x210 [ 266.573696][ T7873] netlink_sendmsg+0x6c0/0xb40 [ 266.573731][ T7873] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.573760][ T7873] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 266.573803][ T7873] ? aa_sock_msg_perm+0x122/0x200 [ 266.573829][ T7873] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.573853][ T7873] sock_sendmsg_nosec+0x112/0x150 [ 266.573887][ T7873] __sys_sendto+0x402/0x590 [ 266.573916][ T7873] ? __pfx___sys_sendto+0x10/0x10 [ 266.573970][ T7873] ? ksys_write+0x248/0x270 [ 266.573999][ T7873] ? __pfx_ksys_write+0x10/0x10 [ 266.574035][ T7873] __x64_sys_sendto+0xde/0x100 [ 266.574060][ T7873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.574083][ T7873] do_syscall_64+0x15f/0xf80 [ 266.574110][ T7873] ? trace_irq_disable+0x3b/0x140 [ 266.574136][ T7873] ? clear_bhb_loop+0x40/0x90 [ 266.574162][ T7873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.574182][ T7873] RIP: 0033:0x7f7727a0d60e [ 266.574201][ T7873] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 266.574219][ T7873] RSP: 002b:00007f7725ca4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 266.574243][ T7873] RAX: ffffffffffffffda RBX: 00007f7725ca66c0 RCX: 00007f7727a0d60e [ 266.574258][ T7873] RDX: 0000000000000020 RSI: 00007f7725ca5000 RDI: 0000000000000003 [ 266.574271][ T7873] RBP: 0000000000000000 R08: 00007f7725ca4f04 R09: 000000000000000c [ 266.574284][ T7873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 266.574296][ T7873] R13: 00007f7725ca4f58 R14: 00007f7725ca5000 R15: 0000000000000000 [ 266.574328][ T7873] [ 266.887517][ T7882] FAULT_INJECTION: forcing a failure. [ 266.887517][ T7882] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.887543][ T7882] CPU: 1 UID: 0 PID: 7882 Comm: syz.1.600 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 266.887560][ T7882] Tainted: [L]=SOFTLOCKUP [ 266.887564][ T7882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 266.887571][ T7882] Call Trace: [ 266.887576][ T7882] [ 266.887581][ T7882] dump_stack_lvl+0xe8/0x150 [ 266.887603][ T7882] should_fail_ex+0x46b/0x600 [ 266.887621][ T7882] _copy_from_user+0x2d/0xb0 [ 266.887638][ T7882] get_user_ifreq+0x6b/0x180 [ 266.887656][ T7882] sock_ioctl+0x707/0x7f0 [ 266.887673][ T7882] ? __pfx_sock_ioctl+0x10/0x10 [ 266.887691][ T7882] ? __fget_files+0x3a6/0x420 [ 266.887703][ T7882] ? __fget_files+0x2a/0x420 [ 266.887717][ T7882] ? bpf_lsm_file_ioctl+0x9/0x20 [ 266.887734][ T7882] ? __pfx_sock_ioctl+0x10/0x10 [ 266.887750][ T7882] __se_sys_ioctl+0xff/0x170 [ 266.887764][ T7882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.887778][ T7882] do_syscall_64+0x15f/0xf80 [ 266.887792][ T7882] ? trace_irq_disable+0x3b/0x140 [ 266.887807][ T7882] ? clear_bhb_loop+0x40/0x90 [ 266.887821][ T7882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.887833][ T7882] RIP: 0033:0x7f7727a4cdd9 [ 266.887845][ T7882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.887855][ T7882] RSP: 002b:00007f7725ca6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 266.887869][ T7882] RAX: ffffffffffffffda RBX: 00007f7727cc5fa0 RCX: 00007f7727a4cdd9 [ 266.887878][ T7882] RDX: 00002000000005c0 RSI: 00000000000089f3 RDI: 0000000000000003 [ 266.887885][ T7882] RBP: 00007f7725ca6090 R08: 0000000000000000 R09: 0000000000000000 [ 266.887893][ T7882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.887900][ T7882] R13: 00007f7727cc6038 R14: 00007f7727cc5fa0 R15: 00007fffe5e809e8 [ 266.887916][ T7882] [ 267.197973][ T7889] syzkaller1: entered promiscuous mode [ 267.197993][ T7889] syzkaller1: entered allmulticast mode [ 267.587654][ T7897] netlink: 6 bytes leftover after parsing attributes in process `syz.1.607'. [ 267.587670][ T7897] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 267.590511][ T7897] : renamed from veth0_vlan (while UP) [ 267.987219][ T7905] loop9: detected capacity change from 0 to 7 [ 268.051819][ T7905] Dev loop9: unable to read RDB block 7 [ 268.051870][ T7905] loop9: unable to read partition table [ 268.065692][ T7905] loop9: partition table beyond EOD, truncated [ 268.065736][ T7905] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 268.279248][ T7908] FAULT_INJECTION: forcing a failure. [ 268.279248][ T7908] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 268.279275][ T7908] CPU: 1 UID: 0 PID: 7908 Comm: syz.2.611 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 268.279293][ T7908] Tainted: [L]=SOFTLOCKUP [ 268.279297][ T7908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 268.279304][ T7908] Call Trace: [ 268.279309][ T7908] [ 268.279315][ T7908] dump_stack_lvl+0xe8/0x150 [ 268.279335][ T7908] should_fail_ex+0x46b/0x600 [ 268.279354][ T7908] _copy_to_user+0x31/0xb0 [ 268.279371][ T7908] simple_read_from_buffer+0xe1/0x170 [ 268.279387][ T7908] proc_fail_nth_read+0x1be/0x230 [ 268.279403][ T7908] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 268.279417][ T7908] ? rw_verify_area+0x2ac/0x4e0 [ 268.279431][ T7908] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 268.279444][ T7908] vfs_read+0x212/0xa80 [ 268.279463][ T7908] ? __pfx_vfs_read+0x10/0x10 [ 268.279478][ T7908] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 268.279494][ T7908] ? lockdep_hardirqs_on+0x7a/0x110 [ 268.279509][ T7908] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 268.279524][ T7908] ? mutex_lock_nested+0x152/0x1d0 [ 268.279535][ T7908] ? fdget_pos+0x252/0x320 [ 268.279552][ T7908] ksys_read+0x156/0x270 [ 268.279568][ T7908] ? __pfx_ksys_read+0x10/0x10 [ 268.279586][ T7908] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.279599][ T7908] do_syscall_64+0x15f/0xf80 [ 268.279613][ T7908] ? trace_irq_disable+0x3b/0x140 [ 268.279628][ T7908] ? clear_bhb_loop+0x40/0x90 [ 268.279642][ T7908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.279653][ T7908] RIP: 0033:0x7ff6c0c8d60e [ 268.279666][ T7908] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 268.279676][ T7908] RSP: 002b:00007ff6bef1dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 268.279690][ T7908] RAX: ffffffffffffffda RBX: 00007ff6bef1e6c0 RCX: 00007ff6c0c8d60e [ 268.279699][ T7908] RDX: 000000000000000f RSI: 00007ff6bef1e0a0 RDI: 0000000000000004 [ 268.279706][ T7908] RBP: 00007ff6bef1e090 R08: 0000000000000000 R09: 0000000000000000 [ 268.279713][ T7908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.279720][ T7908] R13: 00007ff6c0f46038 R14: 00007ff6c0f45fa0 R15: 00007ffd864e31e8 [ 268.279738][ T7908] [ 268.651767][ T7912] tipc: Enabling of bearer rejected, failed to enable media [ 268.756878][ T7912] block nbd0: server does not support multiple connections per device. [ 268.776665][ T7912] block nbd0: shutting down sockets [ 271.680367][ T7949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.626'. [ 273.301798][ T7975] FAULT_INJECTION: forcing a failure. [ 273.301798][ T7975] name failslab, interval 1, probability 0, space 0, times 0 [ 273.301826][ T7975] CPU: 1 UID: 0 PID: 7975 Comm: syz.0.632 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 273.301843][ T7975] Tainted: [L]=SOFTLOCKUP [ 273.301848][ T7975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 273.301854][ T7975] Call Trace: [ 273.301859][ T7975] [ 273.301865][ T7975] dump_stack_lvl+0xe8/0x150 [ 273.301885][ T7975] should_fail_ex+0x46b/0x600 [ 273.301904][ T7975] should_failslab+0xa8/0x100 [ 273.301921][ T7975] __kmalloc_noprof+0xdf/0x7b0 [ 273.301936][ T7975] ? ovl_lookup+0x76e/0x1c80 [ 273.301959][ T7975] ovl_lookup+0x76e/0x1c80 [ 273.301978][ T7975] ? do_raw_spin_lock+0x12b/0x2f0 [ 273.302007][ T7975] ? __pfx_ovl_lookup+0x10/0x10 [ 273.302024][ T7975] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 273.302050][ T7975] ? rt_spin_unlock+0x160/0x200 [ 273.302073][ T7975] ? d_alloc+0x144/0x190 [ 273.302098][ T7975] lookup_one_qstr_excl+0x12d/0x360 [ 273.302128][ T7975] __start_renaming+0x186/0x410 [ 273.302162][ T7975] filename_renameat2+0x38c/0x9c0 [ 273.302212][ T7975] ? __might_fault+0xaf/0x130 [ 273.302238][ T7975] ? __might_fault+0xaf/0x130 [ 273.302269][ T7975] ? __pfx_filename_renameat2+0x10/0x10 [ 273.302300][ T7975] ? do_getname+0x151/0x250 [ 273.302318][ T7975] __se_sys_renameat2+0x5a/0x2c0 [ 273.302330][ T7975] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.302344][ T7975] do_syscall_64+0x15f/0xf80 [ 273.302359][ T7975] ? trace_irq_disable+0x3b/0x140 [ 273.302374][ T7975] ? clear_bhb_loop+0x40/0x90 [ 273.302389][ T7975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.302401][ T7975] RIP: 0033:0x7f0b870dcdd9 [ 273.302414][ T7975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.302424][ T7975] RSP: 002b:00007f0b8532e028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 273.302438][ T7975] RAX: ffffffffffffffda RBX: 00007f0b87355fa0 RCX: 00007f0b870dcdd9 [ 273.302447][ T7975] RDX: ffffffffffffff9c RSI: 0000200000000440 RDI: ffffffffffffff9c [ 273.302457][ T7975] RBP: 00007f0b8532e090 R08: 0000000000000004 R09: 0000000000000000 [ 273.302466][ T7975] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.302473][ T7975] R13: 00007f0b87356038 R14: 00007f0b87355fa0 R15: 00007ffc6f48f6a8 [ 273.302492][ T7975] [ 273.636222][ T7981] netlink: 'syz.0.635': attribute type 39 has an invalid length. [ 273.658195][ T7983] hub 1-0:1.0: USB hub found [ 273.667525][ T7983] hub 1-0:1.0: 1 port detected [ 273.679817][ T7981] hsr_slave_0: left promiscuous mode [ 273.715555][ T7981] hsr_slave_1: left promiscuous mode [ 273.746093][ T7984] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.636' sets config #1 [ 274.437543][ T8004] netlink: 14 bytes leftover after parsing attributes in process `syz.0.645'. [ 275.158390][ T8015] netlink: 56 bytes leftover after parsing attributes in process `syz.1.649'. [ 275.385369][ T8015] netlink: 56 bytes leftover after parsing attributes in process `syz.1.649'. [ 275.588660][ T8021] FAULT_INJECTION: forcing a failure. [ 275.588660][ T8021] name failslab, interval 1, probability 0, space 0, times 0 [ 275.588701][ T8021] CPU: 1 UID: 0 PID: 8021 Comm: syz.1.650 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 275.588731][ T8021] Tainted: [L]=SOFTLOCKUP [ 275.588738][ T8021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 275.588750][ T8021] Call Trace: [ 275.588760][ T8021] [ 275.588769][ T8021] dump_stack_lvl+0xe8/0x150 [ 275.588798][ T8021] should_fail_ex+0x46b/0x600 [ 275.588831][ T8021] should_failslab+0xa8/0x100 [ 275.588861][ T8021] kmem_cache_alloc_noprof+0x87/0x680 [ 275.588887][ T8021] ? skb_clone+0x212/0x3a0 [ 275.588920][ T8021] skb_clone+0x212/0x3a0 [ 275.588950][ T8021] __netlink_deliver_tap+0x424/0x8b0 [ 275.588990][ T8021] ? netlink_deliver_tap+0x2e/0x1b0 [ 275.589017][ T8021] netlink_deliver_tap+0x19c/0x1b0 [ 275.589045][ T8021] netlink_sendskb+0x68/0x140 [ 275.589072][ T8021] netlink_rcv_skb+0x2b6/0x4b0 [ 275.589099][ T8021] ? __pfx_genl_rcv_msg+0x10/0x10 [ 275.589133][ T8021] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 275.589180][ T8021] ? netlink_deliver_tap+0x2e/0x1b0 [ 275.589207][ T8021] ? netlink_deliver_tap+0x2e/0x1b0 [ 275.589238][ T8021] genl_rcv+0x28/0x40 [ 275.589266][ T8021] netlink_unicast+0x780/0x920 [ 275.589302][ T8021] netlink_sendmsg+0x813/0xb40 [ 275.589338][ T8021] ? __pfx_netlink_sendmsg+0x10/0x10 [ 275.589366][ T8021] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 275.589403][ T8021] ? aa_sock_msg_perm+0x122/0x200 [ 275.589432][ T8021] ? __pfx_netlink_sendmsg+0x10/0x10 [ 275.589457][ T8021] sock_sendmsg_nosec+0x112/0x150 [ 275.589491][ T8021] __sys_sendto+0x402/0x590 [ 275.589520][ T8021] ? __pfx___sys_sendto+0x10/0x10 [ 275.589576][ T8021] ? ksys_write+0x248/0x270 [ 275.589606][ T8021] ? __pfx_ksys_write+0x10/0x10 [ 275.589637][ T8021] __x64_sys_sendto+0xde/0x100 [ 275.589662][ T8021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.589685][ T8021] do_syscall_64+0x15f/0xf80 [ 275.589712][ T8021] ? trace_irq_disable+0x3b/0x140 [ 275.589740][ T8021] ? clear_bhb_loop+0x40/0x90 [ 275.589767][ T8021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.589788][ T8021] RIP: 0033:0x7f7727a0d60e [ 275.589808][ T8021] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 275.589825][ T8021] RSP: 002b:00007f7725ca4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 275.589846][ T8021] RAX: ffffffffffffffda RBX: 00007f7725ca66c0 RCX: 00007f7727a0d60e [ 275.589861][ T8021] RDX: 0000000000000020 RSI: 00007f7725ca5000 RDI: 0000000000000003 [ 275.589874][ T8021] RBP: 0000000000000000 R08: 00007f7725ca4f04 R09: 000000000000000c [ 275.589887][ T8021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 275.589900][ T8021] R13: 00007f7725ca4f58 R14: 00007f7725ca5000 R15: 0000000000000000 [ 275.589932][ T8021] [ 276.130727][ T8027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.653'. [ 276.542194][ T5749] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 276.706235][ T5749] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.706294][ T5749] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 276.706318][ T5749] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.734697][ T5749] usb 1-1: config 0 descriptor?? [ 277.416755][ T5749] ath6kl: mismatched byte count 1506353764 vs. expected 12 [ 277.417565][ T5749] ath6kl: Failed to init ath6kl core: -22 [ 277.418346][ T5749] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 279.180520][ T8047] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 279.415715][ T5620] usb 1-1: USB disconnect, device number 26 [ 279.808880][ T8058] netlink: 'syz.1.662': attribute type 2 has an invalid length. [ 280.272416][ T5620] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 280.443960][ T5620] usb 1-1: Using ep0 maxpacket: 8 [ 280.458387][ T5620] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 280.458417][ T5620] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.458438][ T5620] usb 1-1: Product: syz [ 280.458452][ T5620] usb 1-1: Manufacturer: syz [ 280.458466][ T5620] usb 1-1: SerialNumber: syz [ 280.467547][ T5620] usb 1-1: config 0 descriptor?? [ 280.737981][ T5620] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 281.334993][ T8084] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 281.335009][ T8084] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 8084, name: syz.2.671 [ 281.335020][ T8084] preempt_count: 1, expected: 0 [ 281.335025][ T8084] RCU nest depth: 2, expected: 2 [ 281.335033][ T8084] 4 locks held by syz.2.671/8084: [ 281.335044][ T8084] #0: ffffffff8e1c8180 (rcu_read_lock){....}-{1:3}, at: nf_hook+0xa1/0x3a0 [ 281.335103][ T8084] #1: ffffffff8e05f300 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 281.335154][ T8084] #2: ffffffff8e1c8180 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 281.335191][ T8084] #3: ffff888031ffd7f0 (&cp->lock#2){+...}-{3:3}, at: ip_vs_conn_new+0x14fe/0x25f0 [ 281.335239][ T8084] Preemption disabled at: [ 281.335245][ T8084] [] hlist_bl_lock+0x18/0x110 [ 281.335286][ T8084] CPU: 0 UID: 0 PID: 8084 Comm: syz.2.671 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 281.335312][ T8084] Tainted: [L]=SOFTLOCKUP [ 281.335319][ T8084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 281.335331][ T8084] Call Trace: [ 281.335339][ T8084] [ 281.335345][ T8084] dump_stack_lvl+0xe8/0x150 [ 281.335362][ T8084] __might_resched+0x329/0x480 [ 281.335377][ T8084] ? hlist_bl_lock+0x18/0x110 [ 281.335402][ T8084] rt_spin_lock+0xc2/0x400 [ 281.335428][ T8084] ? __pfx_rt_spin_lock+0x10/0x10 [ 281.335450][ T8084] ? rcu_is_watching+0x15/0xb0 [ 281.335476][ T8084] ? __local_bh_disable_ip+0x3c/0x420 [ 281.335506][ T8084] ip_vs_conn_new+0x14fe/0x25f0 [ 281.335527][ T8084] ? ip_vs_ct_in_get+0x321/0x1350 [ 281.335544][ T8084] ? ip_vs_conn_new+0x1491/0x25f0 [ 281.335575][ T8084] ? __pfx_ip_vs_conn_new+0x10/0x10 [ 281.335610][ T8084] ? ip_vs_ct_in_get+0xab/0x1350 [ 281.335649][ T8084] ? ip_vs_dh_schedule+0x220/0x3a0 [ 281.335674][ T8084] ip_vs_schedule+0x10fd/0x1d70 [ 281.335704][ T8084] ? __pfx_ip_vs_schedule+0x10/0x10 [ 281.335723][ T8084] ? __ip_vs_svc_fwm_find+0x624/0x6b0 [ 281.335744][ T8084] ? ip_vs_service_find+0xbc/0x3c0 [ 281.335771][ T8084] udp_conn_schedule+0x391/0x7a0 [ 281.335808][ T8084] ? __pfx_udp_conn_schedule+0x10/0x10 [ 281.335858][ T8084] ip_vs_in_hook+0xc50/0x1bf0 [ 281.335880][ T8084] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 281.335901][ T8084] ? nf_hook+0xa1/0x3a0 [ 281.335916][ T8084] ? nf_hook+0xa1/0x3a0 [ 281.335941][ T8084] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 281.335964][ T8084] nf_hook_slow+0xc5/0x220 [ 281.335994][ T8084] ? __pfx_dst_output+0x10/0x10 [ 281.336019][ T8084] nf_hook+0x22a/0x3a0 [ 281.336046][ T8084] ? nf_hook+0xa1/0x3a0 [ 281.336061][ T8084] ? __pfx_nf_hook+0x10/0x10 [ 281.336076][ T8084] ? __pfx_dst_output+0x10/0x10 [ 281.336100][ T8084] ? __ip_local_out+0x152/0x6a0 [ 281.336128][ T8084] __ip_local_out+0x558/0x6a0 [ 281.336153][ T8084] ? __pfx_dst_output+0x10/0x10 [ 281.336183][ T8084] ip_local_out+0x2a/0x190 [ 281.336210][ T8084] ip_send_skb+0x45/0xc0 [ 281.336232][ T8084] udp_send_skb+0x7e4/0xf70 [ 281.336255][ T8084] udp_sendmsg+0x1937/0x21a0 [ 281.336292][ T8084] ? __pfx_udp_sendmsg+0x10/0x10 [ 281.336365][ T8084] ? __lock_acquire+0x6b5/0x2d10 [ 281.336401][ T8084] udpv6_sendmsg+0x996/0x25c0 [ 281.336422][ T8084] ? __lock_acquire+0x6b5/0x2d10 [ 281.336439][ T8084] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 281.336470][ T8084] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 281.336498][ T8084] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 281.336542][ T8084] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 281.336572][ T8084] ? inet_send_prepare+0x1b9/0x270 [ 281.336592][ T8084] ? inet6_sendmsg+0xe4/0x120 [ 281.336607][ T8084] ? __pfx_inet6_sendmsg+0x10/0x10 [ 281.336619][ T8084] sock_sendmsg_nosec+0x90/0x150 [ 281.336652][ T8084] ____sys_sendmsg+0x55c/0x870 [ 281.336686][ T8084] ? __pfx_____sys_sendmsg+0x10/0x10 [ 281.336722][ T8084] ? import_iovec+0x73/0xa0 [ 281.336752][ T8084] ___sys_sendmsg+0x2a5/0x360 [ 281.336767][ T8084] ? __lock_acquire+0x6b5/0x2d10 [ 281.336785][ T8084] ? __pfx____sys_sendmsg+0x10/0x10 [ 281.336852][ T8084] ? __fget_files+0x2a/0x420 [ 281.336874][ T8084] ? __fget_files+0x3a6/0x420 [ 281.336905][ T8084] __x64_sys_sendmsg+0x1c3/0x2a0 [ 281.336930][ T8084] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 281.336949][ T8084] ? __pfx_ksys_write+0x10/0x10 [ 281.336969][ T8084] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.336991][ T8084] do_syscall_64+0x15f/0xf80 [ 281.337016][ T8084] ? trace_irq_disable+0x3b/0x140 [ 281.337043][ T8084] ? clear_bhb_loop+0x40/0x90 [ 281.337067][ T8084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.337086][ T8084] RIP: 0033:0x7ff6c0cccdd9 [ 281.337103][ T8084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.337113][ T8084] RSP: 002b:00007ff6bef1e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 281.337126][ T8084] RAX: ffffffffffffffda RBX: 00007ff6c0f45fa0 RCX: 00007ff6c0cccdd9 [ 281.337135][ T8084] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000006 [ 281.337142][ T8084] RBP: 00007ff6bef1e090 R08: 0000000000000000 R09: 0000000000000000 [ 281.337153][ T8084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 281.337165][ T8084] R13: 00007ff6c0f46038 R14: 00007ff6c0f45fa0 R15: 00007ffd864e31e8 [ 281.337199][ T8084] [ 282.579236][ T5620] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 282.579585][ T5620] dvbdev: DVB: registering new adapter (Terratec H7) [ 282.579616][ T5620] usb 1-1: media controller created [ 282.775707][ T5620] usb read operation failed. (-71) [ 282.792587][ T5620] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 282.799121][ T5620] usb 1-1: USB disconnect, device number 27 [ 283.744171][ T1030] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.128197][ T1030] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.409080][ T1030] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.651243][ T1030] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.573039][ T1030] bridge0: port 3(team0) entered disabled state [ 285.656985][ T1030] bridge_slave_1: left allmulticast mode [ 285.657025][ T1030] bridge_slave_1: left promiscuous mode [ 285.657352][ T1030] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.786664][ T1030] bridge_slave_0: left allmulticast mode [ 285.791392][ T1030] bridge_slave_0: left promiscuous mode [ 285.791685][ T1030] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.823193][ T1030] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.883937][ T1030] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.927683][ T1030] .` (unregistering): Released all slaves [ 287.078479][ T5274] 8021q: adding VLAN 0 to HW filter on device eth5 [ 288.096122][ T5274] 8021q: adding VLAN 0 to HW filter on device eth6 [ 288.493645][ T1030] hsr_slave_0: left promiscuous mode [ 288.536912][ T1030] hsr_slave_1: left promiscuous mode [ 288.538149][ T1030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.538175][ T1030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.573641][ T1030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.573669][ T1030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.667951][ T1030] veth1_macvtap: left promiscuous mode [ 288.668077][ T1030] veth0_macvtap: left promiscuous mode [ 288.684635][ T1030] veth1_vlan: left promiscuous mode [ 288.684829][ T1030] : left promiscuous mode [ 289.898102][ T1030] team_slave_1 (unregistering): left promiscuous mode [ 289.898143][ T1030] team_slave_1 (unregistering): left allmulticast mode [ 289.936210][ T1030] team0 (unregistering): Port device team_slave_1 removed [ 289.973309][ T1030] team_slave_0 (unregistering): left promiscuous mode [ 289.973347][ T1030] team_slave_0 (unregistering): left allmulticast mode [ 290.013455][ T1030] team0 (unregistering): Port device team_slave_0 removed [ 290.351105][ T5274] 8021q: adding VLAN 0 to HW filter on device eth7 [ 291.216278][ T5274] 8021q: adding VLAN 0 to HW filter on device eth8