last executing test programs: 7.464186974s ago: executing program 2 (id=447): syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x81) socket$kcm(0x10, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80600, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x50400, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r2], 0x3c}}, 0x10) 5.954906776s ago: executing program 3 (id=454): io_setup(0x30, &(0x7f00000001c0)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x24}]) 5.683902717s ago: executing program 3 (id=455): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x4780, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x101a01) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1cf) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x3f00) 5.439914901s ago: executing program 3 (id=456): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$unix(0x1, 0x5, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r4 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x83, &(0x7f0000000140)={0x0, 0x300}, 0x8) (async) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbff251000000008000300", @ANYRES32=r3], 0x34}}, 0x4054000) 5.253305061s ago: executing program 3 (id=457): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x26400, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x4780, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000200)={0xffffff7f00000000, 0x0, 0xa0, 0x1, 0x0, r0, 0x0}]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x101a01) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1cf) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x138, 0x0, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_LABELS_MASK={0x28, 0x17, [0x2, 0xfd8d, 0x3, 0x2, 0x6, 0x5, 0xfffffff7, 0x9, 0x0]}, @CTA_MARK_MASK={0x8}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xcb2}]}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x400, 0x0]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x800}]}, @CTA_TUPLE_MASTER={0x34, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x22}}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_LABELS_MASK={0x10, 0x17, [0x1, 0x1000, 0x6]}, @CTA_TUPLE_ORIG={0x84, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_LABELS_MASK={0x8, 0x17, [0x9]}]}, 0x138}, 0x1, 0x0, 0x0, 0x20044000}, 0x81) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r5}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) 4.937296006s ago: executing program 3 (id=458): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYRES8=0x0], 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e999000000000000000000000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001400e9990000000000000000fc000000000000000000000000000000ac1e000100"], 0xb8}}, 0x20040000) 4.535909205s ago: executing program 1 (id=459): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r2, &(0x7f00000010c0)=[{&(0x7f0000000380)=""/245, 0xf5}], 0x1, 0x40000004, 0x6) ioctl$FBIOGETCMAP(r2, 0x4604, &(0x7f0000000140)={0x3, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080), &(0x7f0000000100)=[0x0, 0x0, 0x0]}) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 4.514282018s ago: executing program 2 (id=460): r0 = socket$inet(0x2, 0x2, 0x1) timer_create(0x9, &(0x7f0000002c00)={0x0, 0x25, 0x1}, &(0x7f0000002c40)=0x0) timer_settime(r1, 0x1, &(0x7f0000000240)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000180), &(0x7f00000001c0)) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="0800101dae91d2fd", 0x8}], 0x1, &(0x7f0000000200)=[@ip_tos_u8={{0x11}}, @ip_retopts={{0x10}}], 0x28}, 0x24008004) io_setup(0x30, &(0x7f00000001c0)=0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r2, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000000c0)="01", 0x24}]) 4.48728091s ago: executing program 1 (id=461): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)={0x1c, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @fd=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x24000844) 4.387759169s ago: executing program 2 (id=462): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0xfffffffffffffffa, 0x100) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001440)={0x53, 0xfffffffc, 0x6, 0x4, @buffer={0x0, 0xfd30, &(0x7f0000000040)=""/10}, &(0x7f00000000c0)="2f2bc0cbd1ab", 0x0, 0xffffffff, 0x2, 0x1, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x800}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x78}}, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000980)={'syz0\x00', {}, 0x22, [0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x3fffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0xfffffffc, 0x800, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x5, 0x0, 0xffffffff, 0x55f8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x2, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) ioctl$UI_GET_SYSNAME(r3, 0x8040552c, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb1}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000a40)={0x0, 0x17}, 0x0, &(0x7f0000000840)={0x0, 0x8, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.32535433s ago: executing program 1 (id=463): sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000030301010000000000000000000000000c0002000000000000000100d64b575095349a0d592d11cadddda5e2e22b860e46ac679fbf0ed7ba04db1798bb97f97253a6d51a5e60f082dbeebe2487ef7e9717a012f83f465b10fc95cc056289474035c1b70525a1f8da58c7327a65c49dbe56cf9d804d31c3587ac78648502d720b2d3a0250a302b6352fab7bbd1c17757f367eedde1fb39b8698f76d985c4a51fbd735a9a9239f4f1a1d5625afd95f5734f72188f241a238cc3b3aaf0d6c"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) r0 = socket$kcm(0x10, 0x2, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00910c07a551559a257aac81"], 0xfe33) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x19}]}]}, 0x30}}, 0x0) syz_usb_connect(0x5, 0x46, &(0x7f0000000080)=ANY=[@ANYRES16=r2, @ANYBLOB="19c0e43ff2a02b6d81d649451fad3a5cf6502dbea33bd394d86a7efaa6d2b9eb726790cd0654a6cfe03ca1652900f0a744c1c275e1587ba3c7da795c64e4042a13219f8977ee3c67f16e04220e05858b078ce61a64ccd176d0f5edb48c30d315069bc67c122a3d95f5bf0a9eb09f0d0251eada40c6b13c58d6d94f1abb960b9e531f"], 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000030301010000000000000000000000000c0002000000000000000100d64b575095349a0d592d11cadddda5e2e22b860e46ac679fbf0ed7ba04db1798bb97f97253a6d51a5e60f082dbeebe2487ef7e9717a012f83f465b10fc95cc056289474035c1b70525a1f8da58c7327a65c49dbe56cf9d804d31c3587ac78648502d720b2d3a0250a302b6352fab7bbd1c17757f367eedde1fb39b8698f76d985c4a51fbd735a9a9239f4f1a1d5625afd95f5734f72188f241a238cc3b3aaf0d6c"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) (async) socket$kcm(0x10, 0x2, 0x0) (async) socket$inet_icmp(0x2, 0x2, 0x1) (async) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00910c07a551559a257aac81"], 0xfe33) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x19}]}]}, 0x30}}, 0x0) (async) syz_usb_connect(0x5, 0x46, &(0x7f0000000080)=ANY=[@ANYRES16=r2, @ANYBLOB="19c0e43ff2a02b6d81d649451fad3a5cf6502dbea33bd394d86a7efaa6d2b9eb726790cd0654a6cfe03ca1652900f0a744c1c275e1587ba3c7da795c64e4042a13219f8977ee3c67f16e04220e05858b078ce61a64ccd176d0f5edb48c30d315069bc67c122a3d95f5bf0a9eb09f0d0251eada40c6b13c58d6d94f1abb960b9e531f"], 0x0) (async) 2.540457766s ago: executing program 2 (id=469): socket(0xa, 0x3, 0x3a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000080)=0x40000001) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="000086dd03000a000020140000006c07010033d43afffec00000000000000000000000000010ff020000000000000000000000000001"], 0x340a) (fail_nth: 8) 2.114918889s ago: executing program 2 (id=471): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/reserved_size', 0x149a82, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)="2d0ae105168624ace0ecc52fe7b2c36c22ae5203906ddeeebe021f1c1d5c2db06d32970489a85376c06f29194d4300000000000001ff5cd6ecb22a6a8d7cfe0585e2fb51d2c50618329a726766c45d5eaf2080dc224638a98ccda8a3b0850000000000000000", 0x66) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) shutdown(r2, 0x1) setsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f0000000080)=0x8, 0x4) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x0, 0xc9, 0x7, 0xd, "d636c479378dac75"}}}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x3, &(0x7f0000000000), 0x4) setsockopt$packet_int(r1, 0x107, 0x1e, &(0x7f0000000000)=0x9, 0x4) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x80) 2.048972314s ago: executing program 2 (id=472): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x400, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x4020940d, &(0x7f0000019080)=0x30) 1.635582135s ago: executing program 3 (id=475): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x60000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x8) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='c >'], 0x8) r2 = getuid() stat(&(0x7f0000000200)='./cgroup.net/devices.allow\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@ipv4={""/10, ""/2, @private}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@empty}}, &(0x7f00000004c0)=0xe8) mount$fuse(0x0, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', &(0x7f00000001c0), 0x80, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=r2, @ANYBLOB="2c6772f37e9c8b000000", @ANYRESDEC=0xee00, @ANYBLOB=',allow_other,max_read=0x0000000000000013,smackfshat=/dev/ptmx\x00,uid<', @ANYRESDEC=r3, @ANYBLOB=',dont_hash,euid=', @ANYRESDEC=r4, @ANYBLOB=',defcontext=system_u,seclabel,appraise,\x00']) lsetxattr$security_ima(&(0x7f0000000080)='./cgroup.net/devices.allow\x00', &(0x7f0000000100), &(0x7f0000000140)=@md5={0x1, "6f43ea063aed36a5f291f400c007fe16"}, 0x11, 0x2) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000019080)=0x30) 1.444270645s ago: executing program 0 (id=477): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0xa6ffffff, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 1.27196513s ago: executing program 0 (id=478): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x19}, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x3b}}}], 0x18}, 0xc4) 1.231497521s ago: executing program 1 (id=479): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000140)={0x2, 0x26e5, 0x5, 0x20000000, 0x10, 0x2, 0xf45}, 0x20) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04230d00c90001"], 0x10) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) 1.096314447s ago: executing program 0 (id=480): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24a13cb604000000000000000000000000000000c7aa5035897b", 0x109}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd80", 0x6d}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9c515a1c3ee25ace1a9948c24b277d0c9c46f948f8a3f98b1a18eff685b7296457ba31632fea4d8f817817026eeb76460dad4f677de73043600e7", 0xec}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 895.78072ms ago: executing program 0 (id=481): ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x3, 0x1588, 0x6, &(0x7f0000000640)="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"}, {0x2, 0x0, 0x1ff, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x0, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40003, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x10000004, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0xa3a, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x8001) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x4}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r1, 0x0, 0xd3, &(0x7f0000000100)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200, 0x489c}, 0x3c) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0205647, &(0x7f0000000940)={0xf010000, @win={{0x81, 0x4, 0x5, 0x7ff}, 0x4, 0x6, &(0x7f0000000340)={{0x4, 0x80000001, 0x4, 0x8001}}, 0x80000001, 0x0, 0x4}}) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40000}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 668.137433ms ago: executing program 0 (id=482): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x2, 0xe, 0x0, 0x2, 0x2, 0x0, 0x700}, 0x10}, 0x1, 0x7}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x4780, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) writev(r2, &(0x7f0000000640)=[{&(0x7f00000004c0)="9bb28a44", 0x4}], 0x1) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2201, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x20202) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000000080)={[{@quota}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x37]}}]}) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0xe}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000200)={0xf, 0x8, 0xfa00, {r4, 0xa}}, 0x10) read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0xcb0a) syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x101a01) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x189) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) 593.84716ms ago: executing program 0 (id=483): syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x20402) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) read(r1, &(0x7f0000001300)=""/236, 0xec) 187.165029ms ago: executing program 1 (id=484): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x90, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x7c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x1, 0x91) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) 0s ago: executing program 1 (id=485): r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2", 0x77}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571", 0x9c}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e", 0x73}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6e", 0x71}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f3", 0x1b}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x78}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a", 0x18}], 0x1}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x1}}], 0x4, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r2, 0x3ba0, &(0x7f0000000ac0)={0x48, 0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r1, 0x0, 0x0, 0x800) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(r4, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}, 0x20ff}], 0x1, 0x40010102, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) ioctl$SIOCGSTAMP(r4, 0x8906, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r5, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): 1 [ 107.736791][ T6187] RAX: ffffffffffffffda RBX: 00007fdd5b4de6c0 RCX: 00007fdd5d24d04e [ 107.736798][ T6187] RDX: 0000000000000001 RSI: 00007fdd5b4de0a0 RDI: 0000000000000004 [ 107.736804][ T6187] RBP: 00007fdd5b4de090 R08: 0000000000000000 R09: 0000000000000000 [ 107.736810][ T6187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.736816][ T6187] R13: 00007fdd5d506038 R14: 00007fdd5d505fa0 R15: 00007ffe1a6db008 [ 107.736831][ T6187] [ 107.968426][ T6189] fuse: Unknown parameter '0x0000000000000004' [ 108.073086][ T6193] nfs: Unknown parameter '#! ' [ 108.248832][ T990] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 108.399021][ T990] usb 1-1: Using ep0 maxpacket: 16 [ 108.402047][ T990] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 108.402070][ T990] usb 1-1: config 0 has no interface number 0 [ 108.402112][ T990] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 108.402136][ T990] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 108.406704][ T990] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 108.406730][ T990] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.406746][ T990] usb 1-1: Product: syz [ 108.406757][ T990] usb 1-1: Manufacturer: syz [ 108.406770][ T990] usb 1-1: SerialNumber: syz [ 108.444820][ T990] usb 1-1: config 0 descriptor?? [ 108.469444][ T6191] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 108.517960][ T6191] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 108.732761][ T6191] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 108.732936][ T6191] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 108.964330][ T990] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 108.964579][ T990] asix 1-1:0.34: probe with driver asix failed with error -61 [ 109.465185][ T6210] fuse: Unknown parameter '00000000000000000003' [ 109.833564][ T5889] usb 4-1: USB disconnect, device number 9 [ 110.348899][ T6233] fuse: Unknown parameter '00000000000000000003' [ 110.507186][ T5950] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 110.657074][ T5950] usb 4-1: Using ep0 maxpacket: 32 [ 110.662962][ T5950] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 110.662989][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.663007][ T5950] usb 4-1: Product: syz [ 110.663021][ T5950] usb 4-1: Manufacturer: syz [ 110.663034][ T5950] usb 4-1: SerialNumber: syz [ 110.728752][ T5950] usb 4-1: config 0 descriptor?? [ 110.744667][ T5950] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 110.746674][ T5950] dvb-usb: bulk message failed: -22 (4/0) [ 110.746691][ T5950] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 110.746815][ T5950] dvb-usb: bulk message failed: -22 (5/0) [ 110.746827][ T5950] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 110.815659][ T5950] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 110.816545][ T5950] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 110.816748][ T5950] usb 4-1: media controller created [ 110.848438][ T822] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 110.873281][ T5950] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 110.921314][ T5950] usb 4-1: selecting invalid altsetting 3 [ 110.921332][ T5950] ttusb2: set interface to alts=3 failed [ 110.983201][ T5950] DVB: Unable to find symbol tda10086_attach() [ 110.983230][ T5950] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 110.984226][ T5950] dvb-usb: bulk message failed: -22 (4/0) [ 110.984243][ T5950] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 110.984359][ T5950] dvb-usb: bulk message failed: -22 (5/0) [ 110.984372][ T5950] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 110.984433][ T5950] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 111.001945][ T822] usb 2-1: Using ep0 maxpacket: 16 [ 111.053075][ T6244] ttusb2: more than 2 i2c messages at a time is not handled yet. TODO. [ 111.053090][ T6244] ttusb2: i2c rd len=59 too high [ 111.067028][ T822] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 111.067051][ T822] usb 2-1: config 0 has no interface number 0 [ 111.067087][ T822] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 111.067106][ T822] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 111.105918][ T822] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 111.105945][ T822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.105962][ T822] usb 2-1: Product: syz [ 111.105974][ T822] usb 2-1: Manufacturer: syz [ 111.105987][ T822] usb 2-1: SerialNumber: syz [ 111.195478][ T5950] usb 1-1: USB disconnect, device number 5 [ 111.219235][ T822] usb 2-1: config 0 descriptor?? [ 111.231662][ T6239] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 111.231835][ T6239] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 111.435963][ T6239] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 111.436083][ T6239] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 111.637164][ T822] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 111.637337][ T822] asix 2-1:0.34: probe with driver asix failed with error -61 [ 111.757088][ T5889] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 111.777183][ T5808] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 111.907402][ T5889] usb 3-1: Using ep0 maxpacket: 8 [ 111.911348][ T5889] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 111.911374][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.911392][ T5889] usb 3-1: Product: syz [ 111.911405][ T5889] usb 3-1: Manufacturer: syz [ 111.912754][ T5889] usb 3-1: SerialNumber: syz [ 111.937057][ T5808] usb 1-1: Using ep0 maxpacket: 16 [ 111.944673][ T5889] usb 3-1: config 0 descriptor?? [ 111.945449][ T5808] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.945475][ T5808] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.945495][ T5808] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 111.945518][ T5808] usb 1-1: config 0 interface 0 has no altsetting 0 [ 111.945556][ T5808] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 111.945576][ T5808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.975202][ T5808] usb 1-1: config 0 descriptor?? [ 112.171183][ T5889] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 112.182285][ T6252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.183136][ T6252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.477597][ T5808] usbhid 1-1:0.0: can't add hid device: -71 [ 112.477933][ T5808] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 112.498944][ T5808] usb 1-1: USB disconnect, device number 6 [ 113.212133][ T5889] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 113.274684][ T5889] usb 4-1: USB disconnect, device number 10 [ 113.423792][ T6267] fuse: Unknown parameter '00000000000000000003' [ 113.436687][ T5889] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 113.603508][ T5808] usb 2-1: USB disconnect, device number 7 [ 113.744617][ T6273] netlink: 'syz.1.124': attribute type 11 has an invalid length. [ 113.744983][ T6273] netlink: 'syz.1.124': attribute type 11 has an invalid length. [ 113.745482][ T6273] netlink: 'syz.1.124': attribute type 11 has an invalid length. [ 113.745824][ T6273] netlink: 'syz.1.124': attribute type 11 has an invalid length. [ 113.746126][ T6273] netlink: 'syz.1.124': attribute type 11 has an invalid length. [ 113.746548][ T6273] netlink: 'syz.1.124': attribute type 11 has an invalid length. [ 113.746865][ T6273] netlink: 'syz.1.124': attribute type 11 has an invalid length. [ 113.750131][ T6272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.957888][ T6281] warning: `syz.0.127' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 113.979510][ T6280] fuse: Unknown parameter 'rootMode' [ 114.010661][ T6283] netlink: 'syz.0.127': attribute type 11 has an invalid length. [ 114.010675][ T6283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.127'. [ 114.377210][ T5950] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 114.500186][ T6294] fuse: Unknown parameter 'fd00000000000000000003' [ 114.565963][ T5950] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 114.565992][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.566010][ T5950] usb 1-1: Product: syz [ 114.566022][ T5950] usb 1-1: Manufacturer: syz [ 114.566035][ T5950] usb 1-1: SerialNumber: syz [ 114.604909][ T990] usb 3-1: USB disconnect, device number 7 [ 114.651536][ T6296] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.132'. [ 114.654300][ T6296] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.132'. [ 114.686132][ T5950] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 114.730106][ T32] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 115.901164][ T32] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 115.901342][ T32] ath9k_htc: Failed to initialize the device [ 115.933792][ T822] usb 1-1: USB disconnect, device number 7 [ 115.959961][ T822] usb 1-1: ath9k_htc: USB layer deinitialized [ 115.965153][ C1] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 116.434888][ T6316] fuse: Unknown parameter 'fd00000000000000000003' [ 116.444723][ T822] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 116.597579][ T822] usb 2-1: Using ep0 maxpacket: 16 [ 116.614553][ T822] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.614602][ T822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 116.614629][ T822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 116.614648][ T822] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 116.614670][ T822] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 116.616058][ T822] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 116.616082][ T822] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 116.616100][ T822] usb 2-1: Manufacturer: syz [ 116.709159][ T822] usb 2-1: config 0 descriptor?? [ 116.888949][ T42] wlan1: Trigger new scan to find an IBSS to join [ 116.944955][ T6329] netlink: 16 bytes leftover after parsing attributes in process `syz.2.146'. [ 117.157081][ T822] rc_core: IR keymap rc-hauppauge not found [ 117.157100][ T822] Registered IR keymap rc-empty [ 117.179299][ T822] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 117.207177][ T822] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 117.244708][ T822] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 117.263542][ T822] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input8 [ 117.315458][ T822] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 117.327401][ T822] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 117.348915][ T822] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 117.361065][ T6338] fuse: Unknown parameter 'fd00000000000000000003' [ 117.367976][ T822] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 117.387140][ T822] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 117.407299][ T822] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 117.427346][ T822] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 117.448406][ T822] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 117.467232][ T822] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 117.489936][ T822] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 117.497845][ T6341] block nbd2: shutting down sockets [ 117.518048][ T822] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 117.583707][ T822] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 117.583729][ T822] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 117.739741][ T822] usb 2-1: USB disconnect, device number 8 [ 117.997443][ T990] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 118.152265][ T990] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 118.152295][ T990] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.152312][ T990] usb 1-1: Product: syz [ 118.152324][ T990] usb 1-1: Manufacturer: syz [ 118.152337][ T990] usb 1-1: SerialNumber: syz [ 118.172146][ T990] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 118.228002][ T9] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 118.358712][ T5808] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 118.400406][ T6355] netlink: 'syz.2.156': attribute type 10 has an invalid length. [ 118.518096][ T5808] usb 4-1: Using ep0 maxpacket: 32 [ 118.534380][ T5808] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 118.534396][ T5808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.578443][ T5808] usb 4-1: config 0 descriptor?? [ 118.632002][ T6355] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 118.652826][ T5808] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 119.648954][ T9] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 119.649092][ T9] ath9k_htc: Failed to initialize the device [ 119.654251][ T990] usb 1-1: USB disconnect, device number 8 [ 119.664844][ T990] usb 1-1: ath9k_htc: USB layer deinitialized [ 119.668743][ C0] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 120.242270][ T5808] gspca_vc032x: reg_w err -110 [ 120.242288][ T5808] gspca_vc032x: I2c Bus Busy Wait 00 [ 120.242298][ T5808] gspca_vc032x: I2c Bus Busy Wait 00 [ 120.242306][ T5808] gspca_vc032x: I2c Bus Busy Wait 00 [ 120.242313][ T5808] gspca_vc032x: I2c Bus Busy Wait 00 [ 120.242321][ T5808] gspca_vc032x: I2c Bus Busy Wait 00 [ 120.242329][ T5808] gspca_vc032x: I2c Bus Busy Wait 00 [ 120.242337][ T5808] gspca_vc032x: I2c Bus Busy Wait 00 [ 120.242344][ T5808] gspca_vc032x: I2c Bus Busy Wait 00 [ 120.242353][ T5808] gspca_vc032x: I2c Bus Busy Wait 00 [ 120.242361][ T5808] gspca_vc032x: I2c Bus Busy Wait 00 [ 120.242369][ T5808] gspca_vc032x: I2c Bus Busy Wait 00 [ 120.242377][ T5808] gspca_vc032x: I2c Bus Busy Wait 00 [ 120.242385][ T5808] gspca_vc032x: I2c Bus Busy Wait 00 [ 120.242393][ T5808] gspca_vc032x: I2c Bus Busy Wait 00 [ 120.242401][ T5808] gspca_vc032x: I2c Bus Busy Wait 00 [ 120.242409][ T5808] gspca_vc032x: I2c Bus Busy Wait 00 [ 120.242417][ T5808] gspca_vc032x: I2c Bus Busy Wait 00 [ 120.242425][ T5808] gspca_vc032x: I2c Bus Busy Wait 00 [ 120.242432][ T5808] gspca_vc032x: Unknown sensor... [ 120.242513][ T5808] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 120.570548][ T32] usb 4-1: USB disconnect, device number 11 [ 120.625954][ T6390] FAULT_INJECTION: forcing a failure. [ 120.625954][ T6390] name failslab, interval 1, probability 0, space 0, times 0 [ 120.626007][ T6390] CPU: 1 UID: 0 PID: 6390 Comm: syz.0.168 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 120.626032][ T6390] Tainted: [L]=SOFTLOCKUP [ 120.626038][ T6390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 120.626048][ T6390] Call Trace: [ 120.626055][ T6390] [ 120.626062][ T6390] dump_stack_lvl+0xe8/0x150 [ 120.626087][ T6390] should_fail_ex+0x46b/0x600 [ 120.626118][ T6390] should_failslab+0xa8/0x100 [ 120.626147][ T6390] __kmalloc_noprof+0xdf/0x7b0 [ 120.626169][ T6390] ? __kmalloc_cache_noprof+0x3a6/0x690 [ 120.626194][ T6390] ? alloc_pipe_info+0x1fc/0x4d0 [ 120.626220][ T6390] ? alloc_pipe_info+0xe8/0x4d0 [ 120.626249][ T6390] alloc_pipe_info+0x1fc/0x4d0 [ 120.626278][ T6390] splice_direct_to_actor+0xa19/0xc80 [ 120.626308][ T6390] ? kstrtouint+0x6e/0xe0 [ 120.626332][ T6390] ? __pfx_direct_splice_actor+0x10/0x10 [ 120.626358][ T6390] ? __pfx_aa_file_perm+0x10/0x10 [ 120.626387][ T6390] ? __lock_acquire+0x6b5/0x2cf0 [ 120.626414][ T6390] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 120.626447][ T6390] do_splice_direct+0x19b/0x2a0 [ 120.626474][ T6390] ? __pfx_do_splice_direct+0x10/0x10 [ 120.626496][ T6390] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 120.626527][ T6390] ? rw_verify_area+0x25b/0x4e0 [ 120.626557][ T6390] do_sendfile+0x547/0x7e0 [ 120.626577][ T6390] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 120.626607][ T6390] ? __pfx_do_sendfile+0x10/0x10 [ 120.626638][ T6390] __se_sys_sendfile64+0x144/0x1a0 [ 120.626660][ T6390] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 120.626687][ T6390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.626708][ T6390] do_syscall_64+0x15f/0xf80 [ 120.626728][ T6390] ? trace_irq_disable+0x3b/0x140 [ 120.626749][ T6390] ? clear_bhb_loop+0x40/0x90 [ 120.626772][ T6390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.626789][ T6390] RIP: 0033:0x7f0db10fc819 [ 120.626818][ T6390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.626833][ T6390] RSP: 002b:00007f0daf356028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 120.626860][ T6390] RAX: ffffffffffffffda RBX: 00007f0db1375fa0 RCX: 00007f0db10fc819 [ 120.626873][ T6390] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000009 [ 120.626883][ T6390] RBP: 00007f0daf356090 R08: 0000000000000000 R09: 0000000000000000 [ 120.626894][ T6390] R10: 00004000000053d2 R11: 0000000000000246 R12: 0000000000000001 [ 120.626906][ T6390] R13: 00007f0db1376038 R14: 00007f0db1375fa0 R15: 00007fff9efa8b98 [ 120.626934][ T6390] [ 120.793290][ T822] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 121.003530][ T822] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 121.003559][ T822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.003578][ T822] usb 2-1: Product: syz [ 121.003591][ T822] usb 2-1: Manufacturer: syz [ 121.003604][ T822] usb 2-1: SerialNumber: syz [ 121.328918][ T5808] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 121.494398][ T5808] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 121.494427][ T5808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.494445][ T5808] usb 1-1: Product: syz [ 121.494457][ T5808] usb 1-1: Manufacturer: syz [ 121.494470][ T5808] usb 1-1: SerialNumber: syz [ 121.531998][ T5808] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 121.576103][ T822] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 121.580857][ T9] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 121.682480][ T5808] usb 2-1: USB disconnect, device number 9 [ 121.734605][ T5808] usblp0: removed [ 121.905042][ T1187] wlan1: Trigger new scan to find an IBSS to join [ 121.977739][ T6409] FAULT_INJECTION: forcing a failure. [ 121.977739][ T6409] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.977773][ T6409] CPU: 1 UID: 0 PID: 6409 Comm: syz.2.176 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 121.977798][ T6409] Tainted: [L]=SOFTLOCKUP [ 121.977805][ T6409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 121.977816][ T6409] Call Trace: [ 121.977823][ T6409] [ 121.977831][ T6409] dump_stack_lvl+0xe8/0x150 [ 121.977858][ T6409] should_fail_ex+0x46b/0x600 [ 121.977890][ T6409] _copy_to_user+0x31/0xb0 [ 121.977911][ T6409] simple_read_from_buffer+0xe1/0x170 [ 121.977939][ T6409] proc_fail_nth_read+0x1be/0x230 [ 121.977964][ T6409] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 121.977991][ T6409] ? rw_verify_area+0x2ac/0x4e0 [ 121.978016][ T6409] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 121.978041][ T6409] vfs_read+0x212/0xa80 [ 121.978074][ T6409] ? __pfx_vfs_read+0x10/0x10 [ 121.978102][ T6409] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 121.978125][ T6409] ? lockdep_hardirqs_on+0x7a/0x110 [ 121.978147][ T6409] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 121.978169][ T6409] ? mutex_lock_nested+0x152/0x1d0 [ 121.978196][ T6409] ? fdget_pos+0x252/0x320 [ 121.978226][ T6409] ksys_read+0x156/0x270 [ 121.978258][ T6409] ? __pfx_ksys_read+0x10/0x10 [ 121.978282][ T6409] ? __pfx_v4l2_ioctl+0x10/0x10 [ 121.978309][ T6409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.978330][ T6409] do_syscall_64+0x15f/0xf80 [ 121.978351][ T6409] ? trace_irq_disable+0x3b/0x140 [ 121.978373][ T6409] ? clear_bhb_loop+0x40/0x90 [ 121.978396][ T6409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.978414][ T6409] RIP: 0033:0x7fdd5d24d04e [ 121.978432][ T6409] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 121.978447][ T6409] RSP: 002b:00007fdd5b4ddfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 121.978466][ T6409] RAX: ffffffffffffffda RBX: 00007fdd5b4de6c0 RCX: 00007fdd5d24d04e [ 121.978480][ T6409] RDX: 000000000000000f RSI: 00007fdd5b4de0a0 RDI: 0000000000000006 [ 121.978491][ T6409] RBP: 00007fdd5b4de090 R08: 0000000000000000 R09: 0000000000000000 [ 121.978503][ T6409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.978513][ T6409] R13: 00007fdd5d506038 R14: 00007fdd5d505fa0 R15: 00007ffe1a6db008 [ 121.978544][ T6409] [ 122.774391][ T9] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 122.774552][ T9] ath9k_htc: Failed to initialize the device [ 122.786927][ T6421] ieee802154 phy0 wpan0: encryption failed: -22 [ 122.808897][ T5555] usb 1-1: USB disconnect, device number 9 [ 122.840519][ T5555] usb 1-1: ath9k_htc: USB layer deinitialized [ 122.848493][ C0] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 123.057775][ T12] wlan1: Creating new IBSS network, BSSID 0a:e7:75:67:7e:19 [ 123.137911][ T5808] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 123.210059][ T822] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 123.287178][ T5808] usb 2-1: Using ep0 maxpacket: 8 [ 123.289370][ T5808] usb 2-1: config 0 has an invalid interface number: 122 but max is 0 [ 123.289396][ T5808] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.289413][ T5808] usb 2-1: config 0 has no interface number 0 [ 123.289448][ T5808] usb 2-1: config 0 interface 122 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 123.291837][ T5808] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 123.292004][ T5808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.292018][ T5808] usb 2-1: Product: syz [ 123.292025][ T5808] usb 2-1: Manufacturer: syz [ 123.292032][ T5808] usb 2-1: SerialNumber: syz [ 123.295639][ T5808] usb 2-1: config 0 descriptor?? [ 123.376938][ T822] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 123.377133][ T822] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 123.377157][ T822] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 123.419848][ T822] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 123.419875][ T822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 123.419893][ T822] usb 3-1: Product: syz [ 123.419906][ T822] usb 3-1: Manufacturer: syz [ 123.419920][ T822] usb 3-1: SerialNumber: syz [ 123.512514][ T6420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.513997][ T6420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.594914][ T6431] raw_sendmsg: syz.1.180 forgot to set AF_INET. Fix it! [ 123.670450][ T822] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 123.690638][ T5808] usb 2-1: NFC: intf ffff88802a6b1000 id ffffffff8ed98940 [ 123.725715][ T5808] usb 2-1: USB disconnect, device number 10 [ 123.881075][ T822] usb 3-1: USB disconnect, device number 8 [ 123.895957][ T822] usblp0: removed [ 124.227107][ T5808] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 124.321625][ T6441] Bluetooth: MGMT ver 1.23 [ 124.380678][ T5808] usb 1-1: config 5 has an invalid interface number: 123 but max is 0 [ 124.380704][ T5808] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 124.380720][ T5808] usb 1-1: config 5 has no interface number 0 [ 124.383207][ T5808] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 124.383232][ T5808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.383250][ T5808] usb 1-1: Product: syz [ 124.383262][ T5808] usb 1-1: Manufacturer: syz [ 124.383274][ T5808] usb 1-1: SerialNumber: syz [ 124.622976][ T6445] ieee802154 phy0 wpan0: encryption failed: -22 [ 124.698705][ T6438] cgroup: Invalid name [ 124.829159][ T5808] comedi comedi5: Wrong number of endpoints [ 124.829179][ T5808] ni6501 1-1:5.123: driver 'ni6501' failed to auto-configure device. [ 124.859898][ T5808] usb 1-1: USB disconnect, device number 10 [ 125.187460][ T5909] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 125.346159][ T5909] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 125.346185][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.346195][ T5909] usb 3-1: Product: syz [ 125.346202][ T5909] usb 3-1: Manufacturer: syz [ 125.346209][ T5909] usb 3-1: SerialNumber: syz [ 125.387228][ T5909] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 125.405583][ T5808] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 125.408520][ T32] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 125.527123][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 125.569801][ T5808] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.569852][ T5808] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 125.569876][ T5808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 125.569901][ T5808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 125.569926][ T5808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 125.569948][ T5808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 125.569960][ T5808] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 125.577691][ T5808] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 125.577719][ T5808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.577737][ T5808] usb 2-1: Product: syz [ 125.577749][ T5808] usb 2-1: Manufacturer: syz [ 125.577762][ T5808] usb 2-1: SerialNumber: syz [ 125.583023][ T5808] usb 2-1: config 0 descriptor?? [ 125.584998][ T6455] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 125.591367][ T5808] ati_remote 2-1:0.0: Initializing ati_remote hardware failed. [ 125.591623][ T5808] ati_remote 2-1:0.0: probe with driver ati_remote failed with error -5 [ 125.679994][ T5808] usb 3-1: USB disconnect, device number 9 [ 125.696191][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 125.696294][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.696312][ T9] usb 1-1: Product: syz [ 125.696325][ T9] usb 1-1: Manufacturer: syz [ 125.696336][ T9] usb 1-1: SerialNumber: syz [ 125.889169][ T990] usb 2-1: USB disconnect, device number 11 [ 126.136799][ T6464] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.410036][ T6457] capability: warning: `syz.0.197' uses deprecated v2 capabilities in a way that may be insecure [ 126.410650][ T6457] program syz.0.197 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 126.444507][ T6472] netlink: 60 bytes leftover after parsing attributes in process `syz.1.204'. [ 126.487139][ T32] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 126.487317][ T32] ath9k_htc: Failed to initialize the device [ 126.488232][ T5808] usb 3-1: ath9k_htc: USB layer deinitialized [ 126.807463][ T5808] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 126.850382][ T5890] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 126.957075][ T5808] usb 3-1: Using ep0 maxpacket: 16 [ 126.965956][ T5808] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 126.965983][ T5808] usb 3-1: config 0 has no interface number 0 [ 126.966716][ T5808] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 126.966743][ T5808] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 127.000101][ T5890] usb 2-1: Using ep0 maxpacket: 32 [ 127.009789][ T5808] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 127.009870][ T5808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.009889][ T5808] usb 3-1: Product: syz [ 127.009901][ T5808] usb 3-1: Manufacturer: syz [ 127.009913][ T5808] usb 3-1: SerialNumber: syz [ 127.020726][ T5890] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 127.020752][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.020766][ T5890] usb 2-1: Product: syz [ 127.020778][ T5890] usb 2-1: Manufacturer: syz [ 127.020789][ T5890] usb 2-1: SerialNumber: syz [ 127.075624][ T5890] usb 2-1: config 0 descriptor?? [ 127.076558][ T5808] usb 3-1: config 0 descriptor?? [ 127.080370][ T6468] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 127.080846][ T6468] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 127.294477][ T6468] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 127.294701][ T6468] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 127.338748][ T5890] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 127.339184][ T5890] gspca_topro: reg_w err -71 [ 127.367153][ T5890] gspca_topro: Sensor soi763a [ 127.426168][ T5890] usb 2-1: USB disconnect, device number 12 [ 127.501914][ T5808] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 127.502355][ T5808] asix 3-1:0.34: probe with driver asix failed with error -61 [ 127.657871][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 127.657908][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 127.665334][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 127.689473][ T9] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 127.936500][ T6480] FAULT_INJECTION: forcing a failure. [ 127.936500][ T6480] name failslab, interval 1, probability 0, space 0, times 0 [ 127.936524][ T6480] CPU: 1 UID: 0 PID: 6480 Comm: syz.1.207 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 127.936538][ T6480] Tainted: [L]=SOFTLOCKUP [ 127.936542][ T6480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 127.936549][ T6480] Call Trace: [ 127.936552][ T6480] [ 127.936557][ T6480] dump_stack_lvl+0xe8/0x150 [ 127.936574][ T6480] should_fail_ex+0x46b/0x600 [ 127.936591][ T6480] should_failslab+0xa8/0x100 [ 127.936607][ T6480] __kmalloc_noprof+0xdf/0x7b0 [ 127.936620][ T6480] ? kfree+0x4d/0x6c0 [ 127.936631][ T6480] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 127.936648][ T6480] tomoyo_realpath_from_path+0xe3/0x5d0 [ 127.936663][ T6480] ? tomoyo_domain+0xd7/0x130 [ 127.936680][ T6480] ? tomoyo_path_number_perm+0x219/0x630 [ 127.936692][ T6480] tomoyo_path_number_perm+0x246/0x630 [ 127.936705][ T6480] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 127.936717][ T6480] ? __lock_acquire+0x6b5/0x2cf0 [ 127.936731][ T6480] ? do_raw_spin_lock+0x12b/0x2f0 [ 127.936757][ T6480] ? __fget_files+0x2a/0x420 [ 127.936780][ T6480] ? __fget_files+0x2a/0x420 [ 127.936799][ T6480] ? __fget_files+0x3a6/0x420 [ 127.936819][ T6480] ? __fget_files+0x2a/0x420 [ 127.936842][ T6480] security_file_ioctl+0xc3/0x2a0 [ 127.936866][ T6480] __se_sys_ioctl+0x47/0x170 [ 127.936882][ T6480] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.936893][ T6480] do_syscall_64+0x15f/0xf80 [ 127.936905][ T6480] ? trace_irq_disable+0x3b/0x140 [ 127.936917][ T6480] ? clear_bhb_loop+0x40/0x90 [ 127.936929][ T6480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.936943][ T6480] RIP: 0033:0x7f63698ac819 [ 127.936960][ T6480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.936973][ T6480] RSP: 002b:00007f6367add028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 127.937000][ T6480] RAX: ffffffffffffffda RBX: 00007f6369b26090 RCX: 00007f63698ac819 [ 127.937013][ T6480] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000013 [ 127.937024][ T6480] RBP: 00007f6367add090 R08: 0000000000000000 R09: 0000000000000000 [ 127.937035][ T6480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.937044][ T6480] R13: 00007f6369b26128 R14: 00007f6369b26090 R15: 00007fff4e331828 [ 127.937070][ T6480] [ 127.937574][ T6480] ERROR: Out of memory at tomoyo_realpath_from_path. [ 128.466121][ T6494] ieee802154 phy0 wpan0: encryption failed: -22 [ 128.612087][ T6500] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 128.612110][ T6500] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 128.704477][ T5950] usb 1-1: USB disconnect, device number 11 [ 129.086973][ T6514] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 129.086997][ T6514] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 129.087410][ T6514] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 129.087433][ T6514] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 129.146697][ T6516] ieee802154 phy0 wpan0: encryption failed: -22 [ 129.352945][ T5887] usb 3-1: USB disconnect, device number 10 [ 129.813905][ T6527] bond0: (slave syz_tun): Releasing backup interface [ 130.000755][ T6538] ieee802154 phy0 wpan0: encryption failed: -22 [ 130.347496][ T5950] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 130.497246][ T5950] usb 4-1: Using ep0 maxpacket: 16 [ 130.513125][ T5950] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 130.513158][ T5950] usb 4-1: config 0 has no interface number 0 [ 130.513202][ T5950] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 130.513225][ T5950] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 130.516731][ T5950] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 130.516762][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.516784][ T5950] usb 4-1: Product: syz [ 130.516796][ T5950] usb 4-1: Manufacturer: syz [ 130.516809][ T5950] usb 4-1: SerialNumber: syz [ 130.530966][ T5950] usb 4-1: config 0 descriptor?? [ 130.531706][ T6544] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 130.531811][ T6544] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 130.639770][ T6560] netlink: 72 bytes leftover after parsing attributes in process `syz.1.236'. [ 130.660112][ T32] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 130.684226][ T6560] syz.1.236 (6560) used greatest stack depth: 18984 bytes left [ 130.790174][ T6544] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 130.790473][ T6544] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 130.811701][ T32] usb 1-1: device descriptor read/64, error -71 [ 130.992697][ T5950] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 131.077144][ T32] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 131.194679][ T5950] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 131.194708][ T5950] asix 4-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 131.194968][ T5950] asix 4-1:0.34: probe with driver asix failed with error -32 [ 131.229157][ T32] usb 1-1: device descriptor read/64, error -71 [ 131.254952][ T6573] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.348874][ T32] usb usb1-port1: attempt power cycle [ 131.697226][ T32] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 131.717732][ T32] usb 1-1: device descriptor read/8, error -71 [ 131.943853][ T6581] input: syz0 as /devices/virtual/input/input10 [ 131.968177][ T32] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 131.990777][ T32] usb 1-1: device descriptor read/8, error -71 [ 131.997553][ T5887] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 132.099199][ T32] usb usb1-port1: unable to enumerate USB device [ 132.154646][ T5887] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 132.154675][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.154693][ T5887] usb 2-1: Product: syz [ 132.154705][ T5887] usb 2-1: Manufacturer: syz [ 132.154717][ T5887] usb 2-1: SerialNumber: syz [ 132.216721][ T5887] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 132.239239][ T5890] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 132.457674][ T32] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 132.474224][ T5909] usb 2-1: USB disconnect, device number 13 [ 132.607096][ T32] usb 3-1: Using ep0 maxpacket: 32 [ 132.609516][ T32] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.609538][ T32] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.611809][ T32] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 132.611836][ T32] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 132.611854][ T32] usb 3-1: Product: syz [ 132.611867][ T32] usb 3-1: Manufacturer: syz [ 132.677830][ T32] hub 3-1:4.0: USB hub found [ 132.823779][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.823877][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.879555][ T32] hub 3-1:4.0: 2 ports detected [ 133.123207][ T5887] usb 4-1: USB disconnect, device number 12 [ 133.288266][ T5890] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 133.288421][ T5890] ath9k_htc: Failed to initialize the device [ 133.294124][ T5909] usb 2-1: ath9k_htc: USB layer deinitialized [ 133.566816][ T6595] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.573915][ T5887] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 133.637227][ T5909] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 133.730225][ T5887] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 133.730255][ T5887] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 133.730273][ T5887] usb 4-1: Product: syz [ 133.730286][ T5887] usb 4-1: Manufacturer: syz [ 133.730299][ T5887] usb 4-1: SerialNumber: syz [ 133.768075][ T5887] usb 4-1: config 0 descriptor?? [ 133.771528][ T5887] ch341 4-1:0.0: ch341-uart converter detected [ 133.815446][ T5909] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 133.815475][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.815493][ T5909] usb 2-1: Product: syz [ 133.815506][ T5909] usb 2-1: Manufacturer: syz [ 133.815520][ T5909] usb 2-1: SerialNumber: syz [ 133.864807][ T5909] usb 2-1: config 0 descriptor?? [ 134.073420][ T5909] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 134.100786][ T32] hub 3-1:4.0: activate --> -90 [ 134.174404][ T6591] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 134.394078][ T6591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.395094][ T6591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.692829][ T6601] veth1_macvtap: left promiscuous mode [ 134.698735][ T6601] macsec0: entered promiscuous mode [ 134.729615][ T32] usb 3-1-port2: cannot reset (err = -71) [ 134.730107][ T32] usb 3-1-port2: cannot reset (err = -71) [ 134.730124][ T32] usb 3-1-port2: Cannot enable. Maybe the USB cable is bad? [ 134.750428][ T32] usb 3-1-port2: cannot disable (err = -71) [ 134.760878][ T5866] usb 3-1: USB disconnect, device number 11 [ 134.776662][ T32] usb 3-1-port2: attempt power cycle [ 134.823476][ T5887] ch341-uart ttyUSB0: break control not supported, using simulated break [ 134.832833][ T6602] veth1_macvtap: entered promiscuous mode [ 134.833708][ T6602] macsec0: left promiscuous mode [ 134.846300][ T5887] usb 4-1: ch341-uart converter now attached to ttyUSB0 [ 135.144888][ T6607] netlink: 4 bytes leftover after parsing attributes in process `syz.0.253'. [ 135.144939][ T6607] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 135.411834][ T5950] usb 4-1: USB disconnect, device number 13 [ 135.477077][ T5808] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 135.482469][ T5950] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 135.485955][ T5950] ch341 4-1:0.0: device disconnected [ 135.627097][ T5808] usb 1-1: Using ep0 maxpacket: 16 [ 135.634105][ T5808] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 135.634130][ T5808] usb 1-1: config 0 has no interface number 0 [ 135.634167][ T5808] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 135.634190][ T5808] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 135.662199][ T5808] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 135.662226][ T5808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.662244][ T5808] usb 1-1: Product: syz [ 135.662257][ T5808] usb 1-1: Manufacturer: syz [ 135.662270][ T5808] usb 1-1: SerialNumber: syz [ 135.686672][ T5808] usb 1-1: config 0 descriptor?? [ 135.687718][ T6610] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 135.687887][ T6610] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 135.895863][ T6610] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 135.896029][ T6610] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 135.905252][ T6618] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.098913][ T5808] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 136.299945][ T5808] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 136.299974][ T5808] asix 1-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 136.300239][ T5808] asix 1-1:0.34: probe with driver asix failed with error -32 [ 136.487235][ T5820] Bluetooth: hci3: command tx timeout [ 136.546789][ T5909] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 136.568527][ T5909] usb 2-1: USB disconnect, device number 14 [ 137.734294][ T6648] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.951307][ T6654] netlink: 'syz.2.269': attribute type 10 has an invalid length. [ 138.013734][ T6656] netlink: 'syz.2.269': attribute type 10 has an invalid length. [ 138.013754][ T6656] netlink: 55 bytes leftover after parsing attributes in process `syz.2.269'. [ 138.109569][ T6654] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 138.112232][ T6654] team0: Port device netdevsim0 added [ 138.285884][ T32] usb 1-1: USB disconnect, device number 16 [ 138.331737][ T5950] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 138.346460][ T6661] netlink: 'syz.0.272': attribute type 1 has an invalid length. [ 138.346478][ T6661] netlink: 96 bytes leftover after parsing attributes in process `syz.0.272'. [ 138.346500][ T6661] netlink: 'syz.0.272': attribute type 1 has an invalid length. [ 138.346513][ T6661] netlink: 638 bytes leftover after parsing attributes in process `syz.0.272'. [ 138.346524][ T6661] netlink: 1 bytes leftover after parsing attributes in process `syz.0.272'. [ 138.457093][ T5950] usb 4-1: device descriptor read/64, error -71 [ 138.753166][ T5950] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 138.877152][ T5950] usb 4-1: device descriptor read/64, error -71 [ 138.997478][ T5950] usb usb4-port1: attempt power cycle [ 139.000792][ T6674] binder: 6673:6674 ioctl 4018620d 0 returned -22 [ 139.357089][ T5950] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 139.399338][ T5950] usb 4-1: device descriptor read/8, error -71 [ 139.637126][ T5950] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 139.673313][ T5950] usb 4-1: device descriptor read/8, error -71 [ 139.685503][ T6680] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.776781][ T6684] netlink: 'syz.1.279': attribute type 21 has an invalid length. [ 139.776795][ T6684] netlink: 128 bytes leftover after parsing attributes in process `syz.1.279'. [ 139.788532][ T5950] usb usb4-port1: unable to enumerate USB device [ 140.007216][ T5890] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 140.107156][ T5950] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 140.158917][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.158948][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.158975][ T5890] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 140.158986][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.162291][ T5890] usb 3-1: config 0 descriptor?? [ 140.257314][ T5950] usb 1-1: Using ep0 maxpacket: 16 [ 140.259228][ T5950] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 140.259251][ T5950] usb 1-1: config 0 has no interface number 0 [ 140.259293][ T5950] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 140.259316][ T5950] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 140.261528][ T5950] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 140.261552][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.261569][ T5950] usb 1-1: Product: syz [ 140.261583][ T5950] usb 1-1: Manufacturer: syz [ 140.261596][ T5950] usb 1-1: SerialNumber: syz [ 140.269808][ T5950] usb 1-1: config 0 descriptor?? [ 140.319628][ T6686] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 140.319949][ T6686] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 140.376071][ T6682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.396438][ T6682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.526144][ T6686] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 140.526315][ T6686] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 140.679071][ T6682] 9p: Bad value for 'rfdno' [ 140.715333][ T5890] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 140.715488][ T5890] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 140.731619][ T5950] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 140.753164][ T5890] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0001/input/input11 [ 140.860732][ T5890] cm6533_jd 0003:0D8C:0022.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 140.937410][ T5950] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 140.937435][ T5950] asix 1-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 140.937645][ T5950] asix 1-1:0.34: probe with driver asix failed with error -32 [ 141.099541][ T5950] usb 3-1: USB disconnect, device number 16 [ 141.527230][ T5890] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 141.545916][ T6703] netlink: 28 bytes leftover after parsing attributes in process `syz.1.286'. [ 141.700323][ T5890] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 141.700351][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.700369][ T5890] usb 4-1: Product: syz [ 141.700382][ T5890] usb 4-1: Manufacturer: syz [ 141.700395][ T5890] usb 4-1: SerialNumber: syz [ 141.747168][ T5890] usb 4-1: config 0 descriptor?? [ 141.757899][ T6712] binder: 6711:6712 ioctl 4018620d 0 returned -22 [ 141.773891][ T5890] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 018 [ 141.805067][ T6714] ieee802154 phy0 wpan0: encryption failed: -22 [ 142.127152][ T32] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 142.151757][ T5890] (null): failure reading functionality [ 142.185157][ T5890] i2c i2c-1: connected i2c-tiny-usb device [ 142.293806][ T32] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 142.293835][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.293906][ T32] usb 2-1: Product: syz [ 142.293919][ T32] usb 2-1: Manufacturer: syz [ 142.293931][ T32] usb 2-1: SerialNumber: syz [ 142.332597][ T32] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 142.351931][ T5950] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 142.586830][ T5890] usb 2-1: USB disconnect, device number 15 [ 142.813998][ T6724] FAULT_INJECTION: forcing a failure. [ 142.813998][ T6724] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.814031][ T6724] CPU: 0 UID: 0 PID: 6724 Comm: syz.2.292 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 142.814057][ T6724] Tainted: [L]=SOFTLOCKUP [ 142.814063][ T6724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 142.814075][ T6724] Call Trace: [ 142.814082][ T6724] [ 142.814089][ T6724] dump_stack_lvl+0xe8/0x150 [ 142.814113][ T6724] should_fail_ex+0x46b/0x600 [ 142.814144][ T6724] _copy_to_iter+0x589/0x17d0 [ 142.814180][ T6724] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 142.814199][ T6724] ? __pfx__copy_to_iter+0x10/0x10 [ 142.814221][ T6724] ? rt_spin_lock+0x1e0/0x400 [ 142.814252][ T6724] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 142.814290][ T6724] __skb_datagram_iter+0xf8/0x980 [ 142.814318][ T6724] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 142.814352][ T6724] skb_copy_datagram_iter+0xb5/0x240 [ 142.814383][ T6724] netlink_recvmsg+0x2c3/0xa50 [ 142.814417][ T6724] ? __pfx_netlink_recvmsg+0x10/0x10 [ 142.814442][ T6724] ? __pfx_aa_sk_perm+0x10/0x10 [ 142.814469][ T6724] ? aa_sock_msg_perm+0x122/0x200 [ 142.814493][ T6724] ? __pfx_netlink_recvmsg+0x10/0x10 [ 142.814519][ T6724] sock_recvmsg_nosec+0x10c/0x140 [ 142.814542][ T6724] ____sys_recvmsg+0x23d/0x4f0 [ 142.814577][ T6724] ? __pfx_____sys_recvmsg+0x10/0x10 [ 142.814616][ T6724] ? import_iovec+0x73/0xa0 [ 142.814649][ T6724] ___sys_recvmsg+0x215/0x590 [ 142.814684][ T6724] ? __pfx____sys_recvmsg+0x10/0x10 [ 142.814712][ T6724] ? __fget_files+0x2a/0x420 [ 142.814748][ T6724] ? __fget_files+0x3a6/0x420 [ 142.814777][ T6724] do_recvmmsg+0x33a/0x800 [ 142.814809][ T6724] ? __pfx_do_recvmmsg+0x10/0x10 [ 142.814844][ T6724] ? _copy_from_user+0x94/0xb0 [ 142.814887][ T6724] __x64_sys_recvmmsg+0x1b7/0x250 [ 142.814917][ T6724] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 142.814952][ T6724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.814973][ T6724] do_syscall_64+0x15f/0xf80 [ 142.814994][ T6724] ? trace_irq_disable+0x3b/0x140 [ 142.815016][ T6724] ? clear_bhb_loop+0x40/0x90 [ 142.815039][ T6724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.815057][ T6724] RIP: 0033:0x7fdd5d28c819 [ 142.815075][ T6724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.815090][ T6724] RSP: 002b:00007fdd5b4de028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 142.815109][ T6724] RAX: ffffffffffffffda RBX: 00007fdd5d505fa0 RCX: 00007fdd5d28c819 [ 142.815123][ T6724] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 142.815136][ T6724] RBP: 00007fdd5b4de090 R08: 0000200000003700 R09: 0000000000000000 [ 142.815148][ T6724] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000002 [ 142.815159][ T6724] R13: 00007fdd5d506038 R14: 00007fdd5d505fa0 R15: 00007ffe1a6db008 [ 142.815189][ T6724] [ 142.892350][ T32] usb 1-1: USB disconnect, device number 17 [ 143.308285][ T32] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 143.450495][ T5950] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 143.451277][ T5950] ath9k_htc: Failed to initialize the device [ 143.452210][ T5890] usb 2-1: ath9k_htc: USB layer deinitialized [ 143.467057][ T32] usb 1-1: Using ep0 maxpacket: 32 [ 143.469129][ T32] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.471569][ T32] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 143.471599][ T32] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 143.471617][ T32] usb 1-1: Product: syz [ 143.471630][ T32] usb 1-1: Manufacturer: syz [ 143.471642][ T32] usb 1-1: SerialNumber: syz [ 143.492560][ T32] usb 1-1: config 0 descriptor?? [ 143.605752][ T6734] netlink: 'syz.1.297': attribute type 29 has an invalid length. [ 143.605772][ T6734] netlink: 'syz.1.297': attribute type 3 has an invalid length. [ 143.605784][ T6734] netlink: 132 bytes leftover after parsing attributes in process `syz.1.297'. [ 143.721833][ T5950] usb 1-1: USB disconnect, device number 18 [ 143.737178][ T6738] binder: 6737:6738 ioctl 4018620d 0 returned -22 [ 144.137189][ T32] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 144.218271][ T5950] usb 4-1: USB disconnect, device number 18 [ 144.277095][ T32] usb 3-1: device descriptor read/64, error -71 [ 144.430363][ T6747] tmpfs: Unknown parameter 'mpo‚' [ 144.479865][ T5820] block nbd0: Receive control failed (result -32) [ 144.543704][ T32] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 144.667281][ T32] usb 3-1: device descriptor read/64, error -71 [ 144.677166][ T5950] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 144.783162][ T32] usb usb3-port1: attempt power cycle [ 144.837085][ T5950] usb 4-1: Using ep0 maxpacket: 16 [ 144.838761][ T5950] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 144.838783][ T5950] usb 4-1: config 0 has no interface number 0 [ 144.838822][ T5950] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 144.838835][ T5950] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 144.841045][ T5950] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 144.841070][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.841087][ T5950] usb 4-1: Product: syz [ 144.841100][ T5950] usb 4-1: Manufacturer: syz [ 144.841113][ T5950] usb 4-1: SerialNumber: syz [ 144.845931][ T5950] usb 4-1: config 0 descriptor?? [ 144.846789][ T6745] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 144.846884][ T6745] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 144.859837][ T5909] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 145.043340][ T5909] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 145.043359][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.043369][ T5909] usb 1-1: Product: syz [ 145.043375][ T5909] usb 1-1: Manufacturer: syz [ 145.043382][ T5909] usb 1-1: SerialNumber: syz [ 145.080636][ T6745] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 145.080752][ T6745] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 145.092240][ T5909] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 145.120423][ T32] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 145.141469][ T32] usb 3-1: device descriptor read/8, error -71 [ 145.157737][ T822] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 145.281863][ T5950] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 145.368567][ T990] usb 1-1: USB disconnect, device number 19 [ 145.387348][ T32] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 145.413631][ T32] usb 3-1: device descriptor read/8, error -71 [ 145.483583][ T5950] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 145.483611][ T5950] asix 4-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 145.483920][ T5950] asix 4-1:0.34: probe with driver asix failed with error -32 [ 145.521610][ T32] usb usb3-port1: unable to enumerate USB device [ 146.252472][ T822] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 146.252701][ T822] ath9k_htc: Failed to initialize the device [ 146.255152][ T990] usb 1-1: ath9k_htc: USB layer deinitialized [ 147.417214][ T990] usb 4-1: USB disconnect, device number 19 [ 147.699257][ T6791] FAULT_INJECTION: forcing a failure. [ 147.699257][ T6791] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.699287][ T6791] CPU: 0 UID: 0 PID: 6791 Comm: syz.0.317 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 147.699319][ T6791] Tainted: [L]=SOFTLOCKUP [ 147.699324][ T6791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 147.699338][ T6791] Call Trace: [ 147.699344][ T6791] [ 147.699351][ T6791] dump_stack_lvl+0xe8/0x150 [ 147.699373][ T6791] should_fail_ex+0x46b/0x600 [ 147.699399][ T6791] _copy_from_user+0x2d/0xb0 [ 147.699424][ T6791] __se_sys_sendfile64+0xac/0x1a0 [ 147.699442][ T6791] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 147.699463][ T6791] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.699482][ T6791] do_syscall_64+0x15f/0xf80 [ 147.699503][ T6791] ? clear_bhb_loop+0x40/0x90 [ 147.699524][ T6791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.699541][ T6791] RIP: 0033:0x7f0db10fc819 [ 147.699558][ T6791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.699570][ T6791] RSP: 002b:00007f0daf356028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 147.699587][ T6791] RAX: ffffffffffffffda RBX: 00007f0db1375fa0 RCX: 00007f0db10fc819 [ 147.699601][ T6791] RDX: 0000200000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 147.699611][ T6791] RBP: 00007f0daf356090 R08: 0000000000000000 R09: 0000000000000000 [ 147.699622][ T6791] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 147.699633][ T6791] R13: 00007f0db1376038 R14: 00007f0db1375fa0 R15: 00007fff9efa8b98 [ 147.699661][ T6791] [ 147.977519][ T990] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 148.067394][ T5950] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 148.137626][ T990] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 148.137654][ T990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.137672][ T990] usb 4-1: Product: syz [ 148.137685][ T990] usb 4-1: Manufacturer: syz [ 148.137698][ T990] usb 4-1: SerialNumber: syz [ 148.199928][ T990] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 148.218378][ T5950] usb 2-1: Using ep0 maxpacket: 32 [ 148.220689][ T5950] usb 2-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice=e0.d8 [ 148.220713][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.232850][ T5890] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 148.257120][ T5887] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 148.282595][ T5950] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:16.0/input/input12 [ 148.417610][ T5887] usb 1-1: Using ep0 maxpacket: 16 [ 148.420377][ T5887] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 148.420403][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.479177][ T5887] usb 1-1: config 0 descriptor?? [ 148.516146][ T5887] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 148.591639][ T5174] bcm5974 2-1:16.0: could not read from device [ 148.641728][ T32] usb 4-1: USB disconnect, device number 20 [ 148.682222][ T5887] usb 1-1: Detected FT232A [ 148.718084][ T5174] bcm5974 2-1:16.0: could not read from device [ 148.724213][ T5887] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 148.781085][ T5950] usb 2-1: USB disconnect, device number 16 [ 148.917752][ T822] usb 1-1: USB disconnect, device number 20 [ 149.004789][ T822] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 149.050774][ T822] ftdi_sio 1-1:0.0: device disconnected [ 149.367100][ T5890] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 149.367281][ T5890] ath9k_htc: Failed to initialize the device [ 149.369231][ T32] usb 4-1: ath9k_htc: USB layer deinitialized [ 149.628586][ T5950] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 149.779975][ T32] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 149.797587][ T5950] usb 2-1: Using ep0 maxpacket: 16 [ 149.804366][ T5950] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 149.804389][ T5950] usb 2-1: config 0 has no interface number 0 [ 149.804433][ T5950] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 149.804455][ T5950] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 149.809151][ T5950] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 149.809177][ T5950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.809194][ T5950] usb 2-1: Product: syz [ 149.809207][ T5950] usb 2-1: Manufacturer: syz [ 149.809219][ T5950] usb 2-1: SerialNumber: syz [ 149.820228][ T5950] usb 2-1: config 0 descriptor?? [ 149.821277][ T6810] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 149.821567][ T6810] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 149.945527][ T32] usb 4-1: Using ep0 maxpacket: 32 [ 149.962168][ T32] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 149.962202][ T32] usb 4-1: config 0 has no interface number 0 [ 149.966198][ T32] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 149.966225][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.966297][ T32] usb 4-1: Product: syz [ 149.966310][ T32] usb 4-1: Manufacturer: syz [ 149.966323][ T32] usb 4-1: SerialNumber: syz [ 150.011004][ T32] usb 4-1: config 0 descriptor?? [ 150.038781][ T6810] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 150.039667][ T6810] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 150.241959][ T5950] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 150.407179][ T5887] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 150.447311][ T5950] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 150.447340][ T5950] asix 2-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 150.447764][ T5950] asix 2-1:0.34: probe with driver asix failed with error -32 [ 150.457627][ T32] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 150.457652][ T32] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 150.583667][ T5887] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 150.583696][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 150.583719][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 150.583739][ T5887] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 150.583778][ T5887] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 150.583799][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.677198][ T5887] usb 1-1: config 0 descriptor?? [ 151.129765][ T5887] plantronics 0003:047F:FFFF.0002: ignoring exceeding usage max [ 151.204157][ T5887] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 151.590891][ T6838] ptrace attach of "./syz-executor exec"[5826] was attempted by ""[6838] [ 151.967332][ T5887] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 152.034061][ T9] usb 1-1: USB disconnect, device number 21 [ 152.119508][ T5887] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.119561][ T5887] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 152.119581][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.124914][ T5887] usb 3-1: config 0 descriptor?? [ 152.175171][ T5887] pwc: Askey VC010 type 2 USB webcam detected. [ 152.341925][ T5950] usb 2-1: USB disconnect, device number 17 [ 152.537577][ T5887] pwc: recv_control_msg error -32 req 02 val 2b00 [ 152.538634][ T5887] pwc: recv_control_msg error -32 req 02 val 2700 [ 152.539332][ T5887] pwc: recv_control_msg error -32 req 02 val 2c00 [ 152.540611][ T5887] pwc: recv_control_msg error -32 req 04 val 1000 [ 152.541560][ T5887] pwc: recv_control_msg error -32 req 04 val 1300 [ 152.542198][ T5887] pwc: recv_control_msg error -32 req 04 val 1400 [ 152.542888][ T5887] pwc: recv_control_msg error -32 req 02 val 2000 [ 152.543532][ T5887] pwc: recv_control_msg error -32 req 02 val 2100 [ 152.544166][ T5887] pwc: recv_control_msg error -32 req 04 val 1500 [ 152.748354][ T6841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.749331][ T6841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.750113][ T6841] netlink: 188 bytes leftover after parsing attributes in process `syz.2.333'. [ 152.760133][ T5887] pwc: recv_control_msg error -71 req 02 val 2400 [ 152.760849][ T5887] pwc: recv_control_msg error -71 req 02 val 2600 [ 152.761305][ T5887] pwc: recv_control_msg error -71 req 02 val 2900 [ 152.761736][ T5887] pwc: recv_control_msg error -71 req 02 val 2800 [ 152.762481][ T5887] pwc: recv_control_msg error -71 req 04 val 1100 [ 152.762940][ T5887] pwc: recv_control_msg error -71 req 04 val 1200 [ 152.834425][ T5887] pwc: Registered as video103. [ 152.887270][ T5950] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 152.900706][ T5887] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input13 [ 152.989408][ T5887] usb 3-1: USB disconnect, device number 21 [ 153.077914][ T5950] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 153.077943][ T5950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.078020][ T5950] usb 2-1: Product: syz [ 153.078034][ T5950] usb 2-1: Manufacturer: syz [ 153.078047][ T5950] usb 2-1: SerialNumber: syz [ 153.080053][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 153.175529][ T5950] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 153.253795][ T5909] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 153.482868][ T6852] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 153.482894][ T6852] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 153.504815][ T32] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 153.505326][ T32] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 153.542349][ T5887] usb 2-1: USB disconnect, device number 18 [ 153.586005][ T32] usb 4-1: USB disconnect, device number 21 [ 154.281264][ T6859] binder: 6858:6859 ioctl c0306201 0 returned -14 [ 154.327145][ T5909] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 154.327300][ T5909] ath9k_htc: Failed to initialize the device [ 154.331642][ T5887] usb 2-1: ath9k_htc: USB layer deinitialized [ 155.205466][ T6878] netlink: 20 bytes leftover after parsing attributes in process `syz.0.345'. [ 155.308687][ T5950] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 155.467147][ T5950] usb 4-1: Using ep0 maxpacket: 16 [ 155.469002][ T5950] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 155.469018][ T5950] usb 4-1: config 0 has no interface number 0 [ 155.469041][ T5950] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 155.469053][ T5950] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 155.509648][ T5950] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 155.509676][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.509797][ T5950] usb 4-1: Product: syz [ 155.509811][ T5950] usb 4-1: Manufacturer: syz [ 155.509825][ T5950] usb 4-1: SerialNumber: syz [ 155.514994][ T5950] usb 4-1: config 0 descriptor?? [ 155.515706][ T6872] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 155.515806][ T6872] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 155.724917][ T6872] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 155.725037][ T6872] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 155.781876][ T6894] binder: 6893:6894 ioctl c0306201 0 returned -14 [ 155.932032][ T5950] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 156.133184][ T5950] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 156.133213][ T5950] asix 4-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 156.133529][ T5950] asix 4-1:0.34: probe with driver asix failed with error -32 [ 156.496114][ T38] audit: type=1800 audit(1776889771.950:3): pid=6902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.355" name="file1" dev="tmpfs" ino=473 res=0 errno=0 [ 156.547107][ T5890] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 156.697181][ T5890] usb 1-1: Using ep0 maxpacket: 16 [ 156.699324][ T5890] usb 1-1: unable to get BOS descriptor or descriptor too short [ 156.700478][ T5890] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 156.702754][ T5890] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 156.702769][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.702783][ T5890] usb 1-1: Product: syz [ 156.702790][ T5890] usb 1-1: Manufacturer: syz [ 156.702799][ T5890] usb 1-1: SerialNumber: syz [ 156.833711][ T6907] netlink: 16 bytes leftover after parsing attributes in process `syz.1.357'. [ 156.857301][ T990] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 156.925328][ T6897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.926178][ T6897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.017172][ T990] usb 3-1: Using ep0 maxpacket: 8 [ 157.028672][ T990] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 157.028700][ T990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.028719][ T990] usb 3-1: Product: syz [ 157.028946][ T990] usb 3-1: Manufacturer: syz [ 157.028960][ T990] usb 3-1: SerialNumber: syz [ 157.076919][ T990] usb 3-1: config 0 descriptor?? [ 157.098302][ T990] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 157.119602][ T6910] snd_dummy snd_dummy.0: control 0:0:128:syz0:8200 is already present [ 157.190614][ T6910] overlayfs: failed to decode file handle (len=17, type=248, flags=0, err=-22) [ 157.310924][ T5890] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 157.312723][ T5890] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 157.578764][ T5890] usb 1-1: USB disconnect, device number 22 [ 157.762689][ T6923] netlink: 216 bytes leftover after parsing attributes in process `syz.1.360'. [ 157.762709][ T6923] netlink: 'syz.1.360': attribute type 2 has an invalid length. [ 157.762718][ T6923] netlink: 'syz.1.360': attribute type 1 has an invalid length. [ 158.105671][ T990] usb 4-1: USB disconnect, device number 22 [ 158.124144][ T5980] udevd[5980]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 158.226416][ T6933] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 158.295975][ T6933] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 158.302358][ T6933] FAULT_INJECTION: forcing a failure. [ 158.302358][ T6933] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.302391][ T6933] CPU: 0 UID: 0 PID: 6933 Comm: syz.3.362 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 158.302417][ T6933] Tainted: [L]=SOFTLOCKUP [ 158.302424][ T6933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 158.302434][ T6933] Call Trace: [ 158.302441][ T6933] [ 158.302448][ T6933] dump_stack_lvl+0xe8/0x150 [ 158.302472][ T6933] should_fail_ex+0x46b/0x600 [ 158.302504][ T6933] _copy_to_user+0x31/0xb0 [ 158.302523][ T6933] simple_read_from_buffer+0xe1/0x170 [ 158.302550][ T6933] proc_fail_nth_read+0x1be/0x230 [ 158.302575][ T6933] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 158.302602][ T6933] ? rw_verify_area+0x2ac/0x4e0 [ 158.302626][ T6933] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 158.302650][ T6933] vfs_read+0x212/0xa80 [ 158.302689][ T6933] ? __pfx_vfs_read+0x10/0x10 [ 158.302715][ T6933] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 158.302738][ T6933] ? lockdep_hardirqs_on+0x7a/0x110 [ 158.302760][ T6933] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 158.302781][ T6933] ? mutex_lock_nested+0x152/0x1d0 [ 158.302807][ T6933] ? fdget_pos+0x252/0x320 [ 158.302837][ T6933] ksys_read+0x156/0x270 [ 158.302864][ T6933] ? __pfx_ksys_read+0x10/0x10 [ 158.302896][ T6933] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.302916][ T6933] do_syscall_64+0x15f/0xf80 [ 158.302941][ T6933] ? trace_irq_disable+0x3b/0x140 [ 158.302962][ T6933] ? clear_bhb_loop+0x40/0x90 [ 158.302984][ T6933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.303002][ T6933] RIP: 0033:0x7fd3bad6d04e [ 158.303020][ T6933] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 158.303035][ T6933] RSP: 002b:00007fd3b8ffdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 158.303055][ T6933] RAX: ffffffffffffffda RBX: 00007fd3b8ffe6c0 RCX: 00007fd3bad6d04e [ 158.303068][ T6933] RDX: 000000000000000f RSI: 00007fd3b8ffe0a0 RDI: 0000000000000004 [ 158.303079][ T6933] RBP: 00007fd3b8ffe090 R08: 0000000000000000 R09: 0000000000000000 [ 158.303090][ T6933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 158.303101][ T6933] R13: 00007fd3bb026038 R14: 00007fd3bb025fa0 R15: 00007ffed75511a8 [ 158.303130][ T6933] [ 158.519382][ T6936] binder: 6934:6936 ioctl c0306201 0 returned -14 [ 158.729545][ T6945] FAULT_INJECTION: forcing a failure. [ 158.729545][ T6945] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.729579][ T6945] CPU: 0 UID: 0 PID: 6945 Comm: syz.1.367 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 158.729605][ T6945] Tainted: [L]=SOFTLOCKUP [ 158.729621][ T6945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 158.729632][ T6945] Call Trace: [ 158.729640][ T6945] [ 158.729647][ T6945] dump_stack_lvl+0xe8/0x150 [ 158.729674][ T6945] should_fail_ex+0x46b/0x600 [ 158.729707][ T6945] _copy_to_user+0x31/0xb0 [ 158.729728][ T6945] simple_read_from_buffer+0xe1/0x170 [ 158.729757][ T6945] proc_fail_nth_read+0x1be/0x230 [ 158.729784][ T6945] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 158.729811][ T6945] ? rw_verify_area+0x2ac/0x4e0 [ 158.729837][ T6945] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 158.729862][ T6945] vfs_read+0x212/0xa80 [ 158.729896][ T6945] ? __pfx_vfs_read+0x10/0x10 [ 158.729925][ T6945] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 158.729949][ T6945] ? lockdep_hardirqs_on+0x7a/0x110 [ 158.729971][ T6945] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 158.729994][ T6945] ? mutex_lock_nested+0x152/0x1d0 [ 158.730024][ T6945] ? fdget_pos+0x252/0x320 [ 158.730055][ T6945] ksys_read+0x156/0x270 [ 158.730084][ T6945] ? __pfx_ksys_read+0x10/0x10 [ 158.730118][ T6945] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.730139][ T6945] do_syscall_64+0x15f/0xf80 [ 158.730160][ T6945] ? trace_irq_disable+0x3b/0x140 [ 158.730183][ T6945] ? clear_bhb_loop+0x40/0x90 [ 158.730207][ T6945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.730226][ T6945] RIP: 0033:0x7f636986d04e [ 158.730244][ T6945] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 158.730260][ T6945] RSP: 002b:00007f6367afdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 158.730280][ T6945] RAX: ffffffffffffffda RBX: 00007f6367afe6c0 RCX: 00007f636986d04e [ 158.730295][ T6945] RDX: 000000000000000f RSI: 00007f6367afe0a0 RDI: 0000000000000004 [ 158.730308][ T6945] RBP: 00007f6367afe090 R08: 0000000000000000 R09: 0000000000000000 [ 158.730320][ T6945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.730339][ T6945] R13: 00007f6369b26038 R14: 00007f6369b25fa0 R15: 00007fff4e331828 [ 158.730369][ T6945] [ 159.127788][ T990] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 159.257277][ T5555] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 159.280967][ T990] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 159.280992][ T990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.281002][ T990] usb 4-1: Product: syz [ 159.281009][ T990] usb 4-1: Manufacturer: syz [ 159.281016][ T990] usb 4-1: SerialNumber: syz [ 159.369079][ T6956] capability: warning: `syz.0.371' uses 32-bit capabilities (legacy support in use) [ 159.371209][ T6956] comedi comedi4: bad chanlist[0]=0x00020007 chan=7 range length=2 [ 159.407921][ T5555] usb 2-1: Using ep0 maxpacket: 16 [ 159.412227][ T5555] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 159.412251][ T5555] usb 2-1: config 0 has no interface number 0 [ 159.412288][ T5555] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 159.412497][ T5555] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 159.414790][ T5555] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 159.414807][ T5555] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.414817][ T5555] usb 2-1: Product: syz [ 159.414823][ T5555] usb 2-1: Manufacturer: syz [ 159.414830][ T5555] usb 2-1: SerialNumber: syz [ 159.469010][ T5555] usb 2-1: config 0 descriptor?? [ 159.497210][ T6952] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 159.497336][ T6952] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 159.713262][ T6952] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 159.713344][ T6952] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 159.739268][ T990] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 159.739304][ T990] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 159.919062][ T5555] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 160.098929][ T5890] usb 3-1: USB disconnect, device number 22 [ 160.120435][ T5555] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 160.120519][ T5555] asix 2-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 160.120878][ T5555] asix 2-1:0.34: probe with driver asix failed with error -61 [ 160.704710][ T6974] kvm: user requested TSC rate below hardware speed [ 160.933135][ T6978] netlink: zone id is out of range [ 161.056510][ T6978] netlink: set zone limit has 4 unknown bytes [ 161.398272][ T990] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPIPE [ 161.402710][ T990] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 161.403188][ T990] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 161.403242][ T990] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 161.426762][ T990] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 161.453449][ T990] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 161.457193][ T5909] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 161.503840][ T990] usb 4-1: USB disconnect, device number 23 [ 161.627071][ T5909] usb 3-1: Using ep0 maxpacket: 16 [ 161.630171][ T5909] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 161.630195][ T5909] usb 3-1: config 0 has no interface number 0 [ 161.630240][ T5909] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 161.630339][ T5909] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 161.632613][ T5909] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 161.632638][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.632656][ T5909] usb 3-1: Product: syz [ 161.632668][ T5909] usb 3-1: Manufacturer: syz [ 161.632681][ T5909] usb 3-1: SerialNumber: syz [ 161.636776][ T5909] usb 3-1: config 0 descriptor?? [ 161.651699][ T6982] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 161.651813][ T6982] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 161.860293][ T6982] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 161.860479][ T6982] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 161.860875][ T6990] netlink: 12 bytes leftover after parsing attributes in process `syz.0.382'. [ 162.061193][ T9] usb 2-1: USB disconnect, device number 19 [ 162.096784][ T5909] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 162.295747][ T5909] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 162.295777][ T5909] asix 3-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 162.296034][ T5909] asix 3-1:0.34: probe with driver asix failed with error -61 [ 162.607184][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 162.737494][ T9] usb 4-1: device descriptor read/64, error -71 [ 162.943963][ T7012] netlink: 40 bytes leftover after parsing attributes in process `syz.0.392'. [ 162.977149][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 163.107109][ T9] usb 4-1: device descriptor read/64, error -71 [ 163.129056][ T990] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 163.217395][ T9] usb usb4-port1: attempt power cycle [ 163.237185][ T5909] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 163.277121][ T990] usb 2-1: Invalid ep0 maxpacket: 64 [ 163.397150][ T5909] usb 1-1: Using ep0 maxpacket: 16 [ 163.400156][ T5909] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 163.400181][ T5909] usb 1-1: config 0 has no interface number 0 [ 163.400223][ T5909] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 163.400248][ T5909] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 163.402288][ T5909] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 163.402314][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.402327][ T5909] usb 1-1: Product: syz [ 163.402334][ T5909] usb 1-1: Manufacturer: syz [ 163.402341][ T5909] usb 1-1: SerialNumber: syz [ 163.405241][ T5909] usb 1-1: config 0 descriptor?? [ 163.405882][ T7014] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 163.406032][ T7014] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 163.407205][ T990] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 163.577112][ T990] usb 2-1: Invalid ep0 maxpacket: 64 [ 163.577650][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 163.584635][ T990] usb usb2-port1: attempt power cycle [ 163.603130][ T9] usb 4-1: device descriptor read/8, error -71 [ 163.615732][ T7014] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 163.615902][ T7014] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 163.834360][ T5909] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 163.837436][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 163.858076][ T9] usb 4-1: device descriptor read/8, error -71 [ 163.917195][ T990] usb 2-1: new low-speed USB device number 22 using dummy_hcd [ 163.937870][ T990] usb 2-1: Invalid ep0 maxpacket: 64 [ 163.967467][ T9] usb usb4-port1: unable to enumerate USB device [ 164.035581][ T5909] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 164.035611][ T5909] asix 1-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 164.035860][ T5909] asix 1-1:0.34: probe with driver asix failed with error -61 [ 164.067338][ T990] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 164.087676][ T990] usb 2-1: Invalid ep0 maxpacket: 64 [ 164.087958][ T990] usb usb2-port1: unable to enumerate USB device [ 164.239198][ T5909] usb 3-1: USB disconnect, device number 23 [ 165.797134][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 165.907121][ T5909] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 165.947151][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 165.948901][ T9] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 165.948963][ T9] usb 3-1: config 0 has no interface number 0 [ 165.948998][ T9] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 165.949012][ T9] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 165.951081][ T9] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 165.951107][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.951126][ T9] usb 3-1: Product: syz [ 165.951139][ T9] usb 3-1: Manufacturer: syz [ 165.951151][ T9] usb 3-1: SerialNumber: syz [ 165.954627][ T9] usb 3-1: config 0 descriptor?? [ 165.955879][ T7042] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 165.956007][ T7042] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 165.991451][ T5820] Bluetooth: hci3: link tx timeout [ 166.007009][ T5820] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 166.102987][ T7050] netlink: 'syz.1.404': attribute type 4 has an invalid length. [ 166.103008][ T7050] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.404'. [ 166.121667][ T5890] usb 1-1: USB disconnect, device number 23 [ 166.160355][ T7042] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 166.160465][ T7042] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 166.185788][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.185821][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.185842][ T5909] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 166.185880][ T5909] usb 4-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 166.185900][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.245741][ T5909] usb 4-1: config 0 descriptor?? [ 166.248936][ T7048] can: request_module (can-proto-0) failed. [ 166.367200][ T9] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 166.565657][ T9] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 166.565687][ T9] asix 3-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 166.565941][ T9] asix 3-1:0.34: probe with driver asix failed with error -61 [ 166.655341][ T5909] usbhid 4-1:0.0: can't add hid device: -71 [ 166.655416][ T5909] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 166.685914][ T5909] usb 4-1: USB disconnect, device number 28 [ 167.072435][ T7072] netlink: 64 bytes leftover after parsing attributes in process `syz.1.412'. [ 167.178395][ T5909] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 167.337218][ T5909] usb 1-1: Using ep0 maxpacket: 32 [ 167.339014][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.339035][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.339056][ T5909] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 167.339067][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.342542][ T5909] usb 1-1: config 0 descriptor?? [ 167.457184][ T822] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 167.547103][ T5950] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 167.608333][ T822] usb 2-1: Using ep0 maxpacket: 8 [ 167.612941][ T822] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 167.612991][ T822] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 167.613003][ T822] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 167.613052][ T822] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 167.613064][ T822] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 167.613087][ T822] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 167.613099][ T822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.737140][ T5950] usb 4-1: device descriptor read/64, error -71 [ 167.780475][ T5909] ft260 0003:0403:6030.0003: unknown main item tag 0x0 [ 167.780514][ T5909] ft260 0003:0403:6030.0003: unknown main item tag 0x0 [ 167.892934][ T822] usb 2-1: usb_control_msg returned -32 [ 167.892968][ T822] usbtmc 2-1:16.0: can't read capabilities [ 167.997226][ T5950] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 168.104424][ T5820] Bluetooth: hci3: command 0x0406 tx timeout [ 168.126038][ T9] usb 2-1: USB disconnect, device number 24 [ 168.160911][ T5950] usb 4-1: device descriptor read/64, error -71 [ 168.282579][ T5950] usb usb4-port1: attempt power cycle [ 168.495434][ T5909] ft260 0003:0403:6030.0003: failed to retrieve chip version [ 168.495689][ T5909] ft260 0003:0403:6030.0003: probe with driver ft260 failed with error -71 [ 168.509715][ T5909] usb 1-1: USB disconnect, device number 24 [ 168.581342][ T822] usb 3-1: USB disconnect, device number 24 [ 168.647264][ T5950] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 168.672380][ T5950] usb 4-1: device descriptor read/8, error -71 [ 168.897131][ T5909] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 168.908479][ T5950] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 168.928786][ T5950] usb 4-1: device descriptor read/8, error -71 [ 169.037428][ T5950] usb usb4-port1: unable to enumerate USB device [ 169.049863][ T5909] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 28161, setting to 64 [ 169.055426][ T5909] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 169.055453][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.055471][ T5909] usb 1-1: Product: syz [ 169.055483][ T5909] usb 1-1: Manufacturer: syz [ 169.055496][ T5909] usb 1-1: SerialNumber: syz [ 169.072757][ T7084] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 169.369444][ T5950] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 169.511026][ T5909] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 25 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 169.542946][ T5950] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 169.542981][ T5950] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 169.543018][ T5950] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 169.543038][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.584059][ T7097] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 169.602566][ T5950] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 170.017402][ T5950] usb 2-1: USB disconnect, device number 25 [ 170.777129][ T5950] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 170.934417][ T5950] usb 4-1: Using ep0 maxpacket: 16 [ 170.945748][ T5950] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 170.945774][ T5950] usb 4-1: config 0 has no interface number 0 [ 170.945815][ T5950] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 170.945836][ T5950] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 170.956064][ T5950] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 170.956090][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.956114][ T5950] usb 4-1: Product: syz [ 170.956129][ T5950] usb 4-1: Manufacturer: syz [ 170.956142][ T5950] usb 4-1: SerialNumber: syz [ 171.033001][ T5950] usb 4-1: config 0 descriptor?? [ 171.047218][ T7109] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 171.066183][ T7109] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 171.145264][ T7115] mmap: syz.1.427 (7115): VmData 37474304 exceed data ulimit 6. Update limits or use boot option ignore_rlimit_data. [ 171.274023][ T7109] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 171.274157][ T7109] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 171.447620][ T5909] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 171.480640][ T5950] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 171.560451][ T5866] usb 1-1: USB disconnect, device number 25 [ 171.608499][ T5866] usblp0: removed [ 171.631495][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.631635][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.631659][ T5909] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 171.631700][ T5909] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 171.631785][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.696639][ T5950] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 171.696668][ T5950] asix 4-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 171.696937][ T5950] asix 4-1:0.34: probe with driver asix failed with error -61 [ 171.740009][ T5909] usb 2-1: config 0 descriptor?? [ 172.148137][ T5866] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 172.169362][ T7115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.170262][ T7115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.175079][ T7115] comedi comedi3: comedi_config --init_data is deprecated [ 172.203989][ T5909] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 172.204013][ T5909] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 172.204028][ T5909] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 172.204043][ T5909] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 172.204057][ T5909] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 172.204072][ T5909] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 172.204086][ T5909] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 172.204100][ T5909] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 172.284005][ T5909] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 172.308270][ T5866] usb 1-1: Using ep0 maxpacket: 16 [ 172.312101][ T5866] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.312134][ T5866] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 172.312157][ T5866] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 172.312180][ T5866] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 172.313355][ T5866] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 172.313380][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 172.313398][ T5866] usb 1-1: SerialNumber: syz [ 172.376612][ T7120] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 172.376701][ T7120] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 172.407045][ T5866] hub 1-1:1.0: bad descriptor, ignoring hub [ 172.407081][ T5866] hub 1-1:1.0: probe with driver hub failed with error -5 [ 172.410942][ T7115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.411469][ T7115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.416422][ T5909] usb 2-1: USB disconnect, device number 26 [ 172.581887][ T7120] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 172.582066][ T7120] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 172.606572][ T7122] fido_id[7122]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 172.758004][ T5866] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 172.848581][ T5866] usb 1-1: USB disconnect, device number 26 [ 172.899896][ T7128] tmpfs: Unknown parameter '0x000000000000000300000000000000000000003' [ 173.457153][ T9] usb 2-1: new low-speed USB device number 27 using dummy_hcd [ 173.530349][ T5555] usb 4-1: USB disconnect, device number 33 [ 173.997198][ T5555] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 174.211427][ T5555] usb 4-1: Using ep0 maxpacket: 16 [ 174.234443][ T5555] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 174.234483][ T5555] usb 4-1: config 0 has no interface number 0 [ 174.234577][ T5555] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 174.234603][ T5555] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 174.244454][ T5555] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 174.244481][ T5555] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.244548][ T5555] usb 4-1: Product: syz [ 174.244561][ T5555] usb 4-1: Manufacturer: syz [ 174.244573][ T5555] usb 4-1: SerialNumber: syz [ 174.270623][ T5555] usb 4-1: config 0 descriptor?? [ 174.272859][ T7142] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 174.274010][ T7142] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 174.501604][ T7142] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 174.501891][ T7142] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 174.563757][ T7117] syz.2.428 (7117): drop_caches: 2 [ 174.703173][ T5555] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 174.815786][ T7153] binder: 7152:7153 ioctl c0306201 0 returned -14 [ 174.903769][ T5555] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 174.903824][ T5555] asix 4-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 174.904053][ T5555] asix 4-1:0.34: probe with driver asix failed with error -61 [ 175.045915][ T7159] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 176.073855][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 176.074969][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 176.074998][ T9] usb 2-1: can't read configurations, error -71 [ 176.415664][ T7177] netlink: 'syz.0.446': attribute type 1 has an invalid length. [ 176.415678][ T7177] nbd: error processing sock list [ 176.614438][ T5866] usb 4-1: USB disconnect, device number 34 [ 176.697295][ T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 176.714561][ T5890] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 176.788731][ T990] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 176.818470][ T7185] FAULT_INJECTION: forcing a failure. [ 176.818470][ T7185] name failslab, interval 1, probability 0, space 0, times 0 [ 176.818491][ T7185] CPU: 1 UID: 0 PID: 7185 Comm: syz.3.449 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 176.818512][ T7185] Tainted: [L]=SOFTLOCKUP [ 176.818516][ T7185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 176.818523][ T7185] Call Trace: [ 176.818527][ T7185] [ 176.818532][ T7185] dump_stack_lvl+0xe8/0x150 [ 176.818548][ T7185] should_fail_ex+0x46b/0x600 [ 176.818570][ T7185] should_failslab+0xa8/0x100 [ 176.818586][ T7185] __kmalloc_cache_noprof+0x84/0x690 [ 176.818601][ T7185] ? snd_seq_timer_new+0x55/0x7f0 [ 176.818615][ T7185] ? __kasan_kmalloc+0x93/0xb0 [ 176.818631][ T7185] snd_seq_timer_new+0x55/0x7f0 [ 176.818646][ T7185] ? __asan_memset+0x22/0x50 [ 176.818658][ T7185] snd_seq_queue_alloc+0x19f/0x770 [ 176.818676][ T7185] snd_seq_ioctl_create_queue+0x7f/0x3d0 [ 176.818689][ T7185] snd_seq_oss_open+0x674/0xfc0 [ 176.818704][ T7185] ? __pfx_snd_seq_oss_open+0x10/0x10 [ 176.818717][ T7185] ? __lock_acquire+0x6b5/0x2cf0 [ 176.818735][ T7185] ? __lock_acquire+0x6b5/0x2cf0 [ 176.818772][ T7185] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 176.818783][ T7185] ? __pfx_free_devinfo+0x10/0x10 [ 176.818793][ T7185] ? lockdep_hardirqs_on+0x7a/0x110 [ 176.818806][ T7185] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 176.818818][ T7185] ? mutex_lock_nested+0x152/0x1d0 [ 176.818832][ T7185] ? odev_open+0x5c/0xa0 [ 176.818843][ T7185] odev_open+0x67/0xa0 [ 176.818853][ T7185] chrdev_open+0x4d0/0x5f0 [ 176.818865][ T7185] ? __pfx_chrdev_open+0x10/0x10 [ 176.818875][ T7185] ? fsnotify_open_perm_and_set_mode+0x13b/0x6e0 [ 176.818892][ T7185] ? __pfx_chrdev_open+0x10/0x10 [ 176.818901][ T7185] do_dentry_open+0x83d/0x13e0 [ 176.818918][ T7185] vfs_open+0x3b/0x350 [ 176.818928][ T7185] ? path_openat+0x2e2b/0x38a0 [ 176.818944][ T7185] path_openat+0x2e43/0x38a0 [ 176.818973][ T7185] ? __pfx_path_openat+0x10/0x10 [ 176.818997][ T7185] ? kasan_save_track+0x4f/0x80 [ 176.819017][ T7185] ? kasan_save_track+0x3e/0x80 [ 176.819037][ T7185] ? __kasan_slab_alloc+0x6c/0x80 [ 176.819058][ T7185] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 176.819087][ T7185] ? do_raw_spin_lock+0x12b/0x2f0 [ 176.819113][ T7185] do_file_open+0x23e/0x4a0 [ 176.819127][ T7185] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 176.819140][ T7185] ? __pfx_do_file_open+0x10/0x10 [ 176.819153][ T7185] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 176.819173][ T7185] ? alloc_fd+0x64e/0x6c0 [ 176.819190][ T7185] do_sys_openat2+0x113/0x200 [ 176.819203][ T7185] ? __pfx_do_sys_openat2+0x10/0x10 [ 176.819216][ T7185] ? ksys_write+0x248/0x270 [ 176.819230][ T7185] ? __pfx_ksys_write+0x10/0x10 [ 176.819246][ T7185] __x64_sys_openat+0x138/0x170 [ 176.819261][ T7185] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.819272][ T7185] do_syscall_64+0x15f/0xf80 [ 176.819283][ T7185] ? trace_irq_disable+0x3b/0x140 [ 176.819295][ T7185] ? clear_bhb_loop+0x40/0x90 [ 176.819308][ T7185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.819317][ T7185] RIP: 0033:0x7fd3badac819 [ 176.819328][ T7185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.819337][ T7185] RSP: 002b:00007fd3b8ffe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 176.819349][ T7185] RAX: ffffffffffffffda RBX: 00007fd3bb025fa0 RCX: 00007fd3badac819 [ 176.819356][ T7185] RDX: 00000000001c1341 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 176.819363][ T7185] RBP: 00007fd3b8ffe090 R08: 0000000000000000 R09: 0000000000000000 [ 176.819369][ T7185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 176.819375][ T7185] R13: 00007fd3bb026038 R14: 00007fd3bb025fa0 R15: 00007ffed75511a8 [ 176.819390][ T7185] [ 176.907283][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 176.927094][ T5890] usb 1-1: Using ep0 maxpacket: 16 [ 176.956826][ T7187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.450'. [ 176.982385][ T5890] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 176.982410][ T5890] usb 1-1: config 0 has no interface number 0 [ 176.982456][ T5890] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.982618][ T9] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 176.982637][ T9] usb 2-1: config 0 has no interface number 0 [ 176.982675][ T9] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 176.982695][ T9] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 176.982716][ T9] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 176.982739][ T9] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 176.982777][ T9] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 176.982798][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.077732][ T5890] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.077766][ T5890] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 177.077779][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.284376][ T9] usb 2-1: config 0 descriptor?? [ 177.368113][ T990] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 177.368142][ T990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.368161][ T990] usb 3-1: Product: syz [ 177.368174][ T990] usb 3-1: Manufacturer: syz [ 177.368187][ T990] usb 3-1: SerialNumber: syz [ 177.373312][ T5890] usb 1-1: config 0 descriptor?? [ 177.476736][ T990] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 177.545809][ T7175] netlink: 'syz.1.445': attribute type 10 has an invalid length. [ 177.545829][ T7175] netlink: 55 bytes leftover after parsing attributes in process `syz.1.445'. [ 177.607913][ T9] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 177.630121][ T5555] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 178.017363][ T5890] uclogic 0003:28BD:0071.0005: pen parameters not found [ 178.017400][ T5890] uclogic 0003:28BD:0071.0005: interface is invalid, ignoring [ 178.224047][ T7177] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.446'. [ 178.535711][ T7207] netlink: 24 bytes leftover after parsing attributes in process `syz.3.456'. [ 178.706050][ T5909] usb 3-1: USB disconnect, device number 25 [ 178.731360][ T5555] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 178.731635][ T5555] ath9k_htc: Failed to initialize the device [ 178.747487][ T5909] usb 3-1: ath9k_htc: USB layer deinitialized [ 178.832394][ T5866] usb 2-1: USB disconnect, device number 28 [ 178.853704][ T5866] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 179.277154][ T5555] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 179.407212][ T5555] usb 4-1: device descriptor read/64, error -71 [ 179.647236][ T5555] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 179.685684][ T990] usb 1-1: USB disconnect, device number 27 [ 179.777397][ T5555] usb 4-1: device descriptor read/64, error -71 [ 179.817117][ T5909] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 179.895574][ T5555] usb usb4-port1: attempt power cycle [ 179.900092][ T5890] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 179.979077][ T5909] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.979137][ T5909] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 179.979160][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.982848][ T5909] usb 3-1: config 0 descriptor?? [ 180.023520][ T5909] pwc: Askey VC010 type 2 USB webcam detected. [ 180.028159][ T5890] usb 2-1: device descriptor read/64, error -71 [ 180.237117][ T5555] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 180.257917][ T5555] usb 4-1: device descriptor read/8, error -71 [ 180.270138][ T5890] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 180.393214][ T5909] pwc: recv_control_msg error -32 req 02 val 2b00 [ 180.393800][ T5909] pwc: recv_control_msg error -32 req 02 val 2700 [ 180.394353][ T5909] pwc: recv_control_msg error -32 req 02 val 2c00 [ 180.394871][ T5909] pwc: recv_control_msg error -32 req 04 val 1000 [ 180.399481][ T5890] usb 2-1: device descriptor read/64, error -71 [ 180.402913][ T5909] pwc: recv_control_msg error -32 req 04 val 1300 [ 180.428705][ T5909] pwc: recv_control_msg error -32 req 04 val 1400 [ 180.430200][ T7220] input: syz0 as /devices/virtual/input/input14 [ 180.449564][ T5909] pwc: recv_control_msg error -32 req 02 val 2000 [ 180.467111][ T9] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 180.470608][ T5909] pwc: recv_control_msg error -32 req 02 val 2100 [ 180.471285][ T5909] pwc: recv_control_msg error -32 req 04 val 1500 [ 180.471940][ T5909] pwc: recv_control_msg error -32 req 02 val 2500 [ 180.497626][ T5555] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 180.515662][ T5890] usb usb2-port1: attempt power cycle [ 180.520430][ T5555] usb 4-1: device descriptor read/8, error -71 [ 180.624750][ T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 180.624778][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.624797][ T9] usb 1-1: Product: syz [ 180.624810][ T9] usb 1-1: Manufacturer: syz [ 180.624823][ T9] usb 1-1: SerialNumber: syz [ 180.627652][ T5555] usb usb4-port1: unable to enumerate USB device [ 180.670058][ T9] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 180.710568][ T5555] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 180.857176][ T5890] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 180.875162][ T5909] pwc: recv_control_msg error -71 req 02 val 2600 [ 180.879381][ T5890] usb 2-1: device descriptor read/8, error -71 [ 180.891592][ T5909] pwc: recv_control_msg error -71 req 02 val 2900 [ 180.892701][ T5909] pwc: recv_control_msg error -71 req 02 val 2800 [ 180.893382][ T5909] pwc: recv_control_msg error -71 req 04 val 1100 [ 180.893938][ T5909] pwc: recv_control_msg error -71 req 04 val 1200 [ 180.896554][ T5909] pwc: Registered as video103. [ 180.931882][ T5909] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input15 [ 180.961467][ T5909] usb 3-1: USB disconnect, device number 26 [ 181.084053][ T5873] usb 1-1: USB disconnect, device number 28 [ 181.127379][ T5890] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 181.147836][ T5890] usb 2-1: device descriptor read/8, error -71 [ 181.257916][ T5890] usb usb2-port1: unable to enumerate USB device [ 181.444144][ T7238] FAULT_INJECTION: forcing a failure. [ 181.444144][ T7238] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.444178][ T7238] CPU: 1 UID: 0 PID: 7238 Comm: syz.2.469 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 181.444203][ T7238] Tainted: [L]=SOFTLOCKUP [ 181.444210][ T7238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 181.444220][ T7238] Call Trace: [ 181.444227][ T7238] [ 181.444234][ T7238] dump_stack_lvl+0xe8/0x150 [ 181.444258][ T7238] should_fail_ex+0x46b/0x600 [ 181.444288][ T7238] _copy_from_iter+0x1d3/0x1670 [ 181.444314][ T7238] ? sock_alloc_send_pskb+0x8a2/0x9a0 [ 181.444343][ T7238] ? __pfx__copy_from_iter+0x10/0x10 [ 181.444374][ T7238] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 181.444403][ T7238] skb_copy_datagram_from_iter+0xf5/0x710 [ 181.444435][ T7238] ? skb_put+0x11b/0x210 [ 181.444461][ T7238] tun_get_user+0xc5b/0x4400 [ 181.444493][ T7238] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 181.444515][ T7238] ? rt_mutex_slowunlock+0x430/0x8b0 [ 181.444530][ T7238] ? reacquire_held_locks+0x104/0x190 [ 181.444556][ T7238] ? rt_spin_lock+0x1e0/0x400 [ 181.444585][ T7238] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 181.444613][ T7238] ? __pfx_tun_get_user+0x10/0x10 [ 181.444631][ T7238] ? rt_spin_unlock+0x14f/0x200 [ 181.444661][ T7238] ? rt_spin_unlock+0x160/0x200 [ 181.444688][ T7238] ? save_netdev_trace_buffer+0x4ba/0x5f0 [ 181.444705][ T7238] ? ref_tracker_alloc+0x332/0x4a0 [ 181.444719][ T7238] ? tun_get+0x157/0x2f0 [ 181.444729][ T7238] ? vfs_write+0x629/0xba0 [ 181.444742][ T7238] ? ksys_write+0x156/0x270 [ 181.444754][ T7238] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 181.444771][ T7238] ? tun_get+0x1c/0x2f0 [ 181.444784][ T7238] ? tun_get+0x1c/0x2f0 [ 181.444795][ T7238] ? tun_get+0x1c/0x2f0 [ 181.444808][ T7238] tun_chr_write_iter+0x119/0x210 [ 181.444820][ T7238] vfs_write+0x629/0xba0 [ 181.444837][ T7238] ? __pfx_vfs_write+0x10/0x10 [ 181.444855][ T7238] ? __fget_files+0x2a/0x420 [ 181.444871][ T7238] ksys_write+0x156/0x270 [ 181.444886][ T7238] ? __pfx_ksys_write+0x10/0x10 [ 181.444903][ T7238] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.444914][ T7238] do_syscall_64+0x15f/0xf80 [ 181.444932][ T7238] ? trace_irq_disable+0x3b/0x140 [ 181.444944][ T7238] ? clear_bhb_loop+0x40/0x90 [ 181.444956][ T7238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.444967][ T7238] RIP: 0033:0x7fdd5d28c819 [ 181.444977][ T7238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.444986][ T7238] RSP: 002b:00007fdd5b4de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 181.444997][ T7238] RAX: ffffffffffffffda RBX: 00007fdd5d505fa0 RCX: 00007fdd5d28c819 [ 181.445005][ T7238] RDX: 000000000000340a RSI: 0000200000000000 RDI: 0000000000000004 [ 181.445011][ T7238] RBP: 00007fdd5b4de090 R08: 0000000000000000 R09: 0000000000000000 [ 181.445017][ T7238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.445023][ T7238] R13: 00007fdd5d506038 R14: 00007fdd5d505fa0 R15: 00007ffe1a6db008 [ 181.445043][ T7238] [ 181.767144][ T5555] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 181.767336][ T5555] ath9k_htc: Failed to initialize the device [ 181.768091][ T5873] usb 1-1: ath9k_htc: USB layer deinitialized [ 181.835486][ T7240] bridge0: entered promiscuous mode [ 181.835519][ T7240] bridge0: entered allmulticast mode [ 182.027714][ T7246] FAULT_INJECTION: forcing a failure. [ 182.027714][ T7246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.027746][ T7246] CPU: 0 UID: 0 PID: 7246 Comm: syz.0.473 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 182.027771][ T7246] Tainted: [L]=SOFTLOCKUP [ 182.027777][ T7246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 182.027788][ T7246] Call Trace: [ 182.027795][ T7246] [ 182.027802][ T7246] dump_stack_lvl+0xe8/0x150 [ 182.027822][ T7246] should_fail_ex+0x46b/0x600 [ 182.027840][ T7246] _copy_to_user+0x31/0xb0 [ 182.027851][ T7246] simple_read_from_buffer+0xe1/0x170 [ 182.027872][ T7246] proc_fail_nth_read+0x1be/0x230 [ 182.027897][ T7246] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 182.027923][ T7246] ? rw_verify_area+0x2ac/0x4e0 [ 182.027947][ T7246] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 182.027971][ T7246] vfs_read+0x212/0xa80 [ 182.027998][ T7246] ? __pfx_vfs_read+0x10/0x10 [ 182.028013][ T7246] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 182.028026][ T7246] ? lockdep_hardirqs_on+0x7a/0x110 [ 182.028038][ T7246] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 182.028049][ T7246] ? mutex_lock_nested+0x152/0x1d0 [ 182.028063][ T7246] ? fdget_pos+0x252/0x320 [ 182.028080][ T7246] ksys_read+0x156/0x270 [ 182.028095][ T7246] ? __pfx_ksys_read+0x10/0x10 [ 182.028108][ T7246] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 182.028125][ T7246] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.028136][ T7246] do_syscall_64+0x15f/0xf80 [ 182.028148][ T7246] ? trace_irq_disable+0x3b/0x140 [ 182.028159][ T7246] ? clear_bhb_loop+0x40/0x90 [ 182.028172][ T7246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.028183][ T7246] RIP: 0033:0x7f0db10bd04e [ 182.028193][ T7246] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 182.028202][ T7246] RSP: 002b:00007f0daf355fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 182.028213][ T7246] RAX: ffffffffffffffda RBX: 00007f0daf3566c0 RCX: 00007f0db10bd04e [ 182.028220][ T7246] RDX: 000000000000000f RSI: 00007f0daf3560a0 RDI: 0000000000000006 [ 182.028230][ T7246] RBP: 00007f0daf356090 R08: 0000000000000000 R09: 0000000000000000 [ 182.028242][ T7246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.028247][ T7246] R13: 00007f0db1376038 R14: 00007f0db1375fa0 R15: 00007fff9efa8b98 [ 182.028263][ T7246] [ 182.311333][ T7249] netlink: 16 bytes leftover after parsing attributes in process `syz.0.474'. [ 182.382222][ T7251] fuse: fd is not a fuse device [ 182.403527][ T7254] FAULT_INJECTION: forcing a failure. [ 182.403527][ T7254] name failslab, interval 1, probability 0, space 0, times 0 [ 182.403560][ T7254] CPU: 1 UID: 0 PID: 7254 Comm: syz.0.476 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 182.403586][ T7254] Tainted: [L]=SOFTLOCKUP [ 182.403593][ T7254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 182.403604][ T7254] Call Trace: [ 182.403612][ T7254] [ 182.403619][ T7254] dump_stack_lvl+0xe8/0x150 [ 182.403644][ T7254] should_fail_ex+0x46b/0x600 [ 182.403674][ T7254] should_failslab+0xa8/0x100 [ 182.403704][ T7254] __kmalloc_cache_noprof+0x84/0x690 [ 182.403739][ T7254] ? snd_seq_timer_new+0x55/0x7f0 [ 182.403764][ T7254] ? __kasan_kmalloc+0x93/0xb0 [ 182.403792][ T7254] snd_seq_timer_new+0x55/0x7f0 [ 182.403819][ T7254] ? __asan_memset+0x22/0x50 [ 182.403843][ T7254] snd_seq_queue_alloc+0x19f/0x770 [ 182.403877][ T7254] snd_seq_ioctl_create_queue+0x7f/0x3d0 [ 182.403901][ T7254] snd_seq_oss_open+0x674/0xfc0 [ 182.403937][ T7254] ? __pfx_snd_seq_oss_open+0x10/0x10 [ 182.403959][ T7254] ? __lock_acquire+0x6b5/0x2cf0 [ 182.403987][ T7254] ? __lock_acquire+0x6b5/0x2cf0 [ 182.404064][ T7254] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 182.404089][ T7254] ? __pfx_free_devinfo+0x10/0x10 [ 182.404107][ T7254] ? lockdep_hardirqs_on+0x7a/0x110 [ 182.404131][ T7254] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 182.404153][ T7254] ? mutex_lock_nested+0x152/0x1d0 [ 182.404178][ T7254] ? odev_open+0x5c/0xa0 [ 182.404198][ T7254] odev_open+0x67/0xa0 [ 182.404217][ T7254] chrdev_open+0x4d0/0x5f0 [ 182.404239][ T7254] ? __pfx_chrdev_open+0x10/0x10 [ 182.404258][ T7254] ? fsnotify_open_perm_and_set_mode+0x13b/0x6e0 [ 182.404288][ T7254] ? __pfx_chrdev_open+0x10/0x10 [ 182.404306][ T7254] do_dentry_open+0x83d/0x13e0 [ 182.404340][ T7254] vfs_open+0x3b/0x350 [ 182.404358][ T7254] ? path_openat+0x2e2b/0x38a0 [ 182.404387][ T7254] path_openat+0x2e43/0x38a0 [ 182.404444][ T7254] ? __pfx_path_openat+0x10/0x10 [ 182.404475][ T7254] ? kasan_save_track+0x4f/0x80 [ 182.404496][ T7254] ? kasan_save_track+0x3e/0x80 [ 182.404517][ T7254] ? __kasan_slab_alloc+0x6c/0x80 [ 182.404539][ T7254] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 182.404572][ T7254] ? do_raw_spin_lock+0x12b/0x2f0 [ 182.404602][ T7254] do_file_open+0x23e/0x4a0 [ 182.404627][ T7254] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 182.404654][ T7254] ? __pfx_do_file_open+0x10/0x10 [ 182.404678][ T7254] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 182.404717][ T7254] ? alloc_fd+0x64e/0x6c0 [ 182.404750][ T7254] do_sys_openat2+0x113/0x200 [ 182.404775][ T7254] ? __pfx_do_sys_openat2+0x10/0x10 [ 182.404797][ T7254] ? ksys_write+0x248/0x270 [ 182.404825][ T7254] ? __pfx_ksys_write+0x10/0x10 [ 182.404854][ T7254] __x64_sys_openat+0x138/0x170 [ 182.404880][ T7254] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.404900][ T7254] do_syscall_64+0x15f/0xf80 [ 182.404928][ T7254] ? trace_irq_disable+0x3b/0x140 [ 182.404950][ T7254] ? clear_bhb_loop+0x40/0x90 [ 182.404973][ T7254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.404992][ T7254] RIP: 0033:0x7f0db10fc819 [ 182.405009][ T7254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.405024][ T7254] RSP: 002b:00007f0daf356028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 182.405043][ T7254] RAX: ffffffffffffffda RBX: 00007f0db1375fa0 RCX: 00007f0db10fc819 [ 182.405056][ T7254] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 182.405070][ T7254] RBP: 00007f0daf356090 R08: 0000000000000000 R09: 0000000000000000 [ 182.405081][ T7254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 182.405092][ T7254] R13: 00007f0db1376038 R14: 00007f0db1375fa0 R15: 00007fff9efa8b98 [ 182.405121][ T7254] [ 182.579799][ T5922] Bluetooth: hci5: Frame reassembly failed (-84) [ 182.588827][ T5922] Bluetooth: hci5: Frame reassembly failed (-84) [ 182.588923][ T5922] Bluetooth: hci5: Frame reassembly failed (-84) [ 182.588996][ T5922] Bluetooth: hci5: Frame reassembly failed (-84) [ 182.589269][ T5922] Bluetooth: hci5: Frame reassembly failed (-84) [ 182.589341][ T5922] Bluetooth: hci5: Frame reassembly failed (-84) [ 182.946253][ T38] audit: type=1800 audit(1776889798.390:4): pid=7251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.475" name="/syz3/devices.allow" dev="cgroup" ino=128 res=0 errno=0 [ 183.617084][ T5890] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 183.767141][ T5890] usb 1-1: Using ep0 maxpacket: 8 [ 183.773374][ T5890] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 183.775959][ T5890] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 183.775985][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.776003][ T5890] usb 1-1: Product: syz [ 183.776017][ T5890] usb 1-1: Manufacturer: syz [ 183.776030][ T5890] usb 1-1: SerialNumber: syz [ 183.787526][ T5890] usb 1-1: config 0 descriptor?? [ 183.843288][ T5890] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 183.843324][ T5890] usb 1-1: setting power ON [ 183.843602][ T5890] dvb-usb: bulk message failed: -22 (2/0) [ 183.859201][ T5890] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 183.862538][ T5890] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 183.862587][ T5890] usb 1-1: media controller created [ 183.910955][ T5890] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 183.962097][ T5890] usb 1-1: selecting invalid altsetting 6 [ 183.962120][ T5890] usb 1-1: digital interface selection failed (-22) [ 183.962134][ T5890] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 183.962978][ T5890] usb 1-1: setting power OFF [ 183.963074][ T5890] dvb-usb: bulk message failed: -22 (2/0) [ 183.963083][ T5890] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 183.963090][ T5890] (NULL device *): no alternate interface [ 184.050986][ T7274] ------------[ cut here ]------------ [ 184.051001][ T7274] refcount_t: addition on 0; use-after-free. [ 184.051013][ T7274] WARNING: lib/refcount.c:25 at refcount_warn_saturate+0x9f/0x110, CPU#0: syz.0.483/7274 [ 184.051058][ T7274] Modules linked in: [ 184.051079][ T7274] CPU: 0 UID: 0 PID: 7274 Comm: syz.0.483 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 184.051094][ T7274] Tainted: [L]=SOFTLOCKUP [ 184.051098][ T7274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 184.051105][ T7274] RIP: 0010:refcount_warn_saturate+0x9f/0x110 [ 184.051124][ T7274] Code: eb 66 85 db 74 3e 83 fb 01 75 4c e8 ab 3f 10 fd 48 8d 3d 14 25 25 0b 67 48 0f b9 3a eb 4a e8 98 3f 10 fd 48 8d 3d 11 25 25 0b <67> 48 0f b9 3a eb 37 e8 85 3f 10 fd 48 8d 3d 0e 25 25 0b 67 48 0f [ 184.051134][ T7274] RSP: 0018:ffffc90003e676d8 EFLAGS: 00010283 [ 184.051143][ T7274] RAX: ffffffff84b4c298 RBX: 0000000000000002 RCX: 0000000000080000 [ 184.051150][ T7274] RDX: ffffc90005789000 RSI: 0000000000000678 RDI: ffffffff8fd9e7b0 [ 184.051157][ T7274] RBP: 0000000000000000 R08: ffff888032628000 R09: 0000000000000005 [ 184.051164][ T7274] R10: 0000000000000100 R11: 0000000000000004 R12: ffffffff8c294a48 [ 184.051170][ T7274] R13: dffffc0000000000 R14: ffff8880397f5188 R15: dffffc0000000000 [ 184.051178][ T7274] FS: 00007f0daf3566c0(0000) GS:ffff888125a5e000(0000) knlGS:0000000000000000 [ 184.051186][ T7274] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 184.051193][ T7274] CR2: 000000110c251215 CR3: 000000002aaba000 CR4: 00000000003526f0 [ 184.051203][ T7274] Call Trace: [ 184.051208][ T7274] [ 184.051214][ T7274] kobject_get+0xfa/0x120 [ 184.051231][ T7274] i2c_get_adapter+0x6d/0xa0 [ 184.051249][ T7274] i2cdev_open+0x48/0x190 [ 184.051265][ T7274] chrdev_open+0x4d0/0x5f0 [ 184.051277][ T7274] ? __pfx_chrdev_open+0x10/0x10 [ 184.051288][ T7274] ? fsnotify_open_perm_and_set_mode+0x13b/0x6e0 [ 184.051306][ T7274] ? __pfx_chrdev_open+0x10/0x10 [ 184.051315][ T7274] do_dentry_open+0x83d/0x13e0 [ 184.051333][ T7274] vfs_open+0x3b/0x350 [ 184.051343][ T7274] ? path_openat+0x2e2b/0x38a0 [ 184.051358][ T7274] path_openat+0x2e43/0x38a0 [ 184.051389][ T7274] ? __pfx_path_openat+0x10/0x10 [ 184.051405][ T7274] ? kasan_save_track+0x4f/0x80 [ 184.051417][ T7274] ? kasan_save_track+0x3e/0x80 [ 184.051429][ T7274] ? __kasan_slab_alloc+0x6c/0x80 [ 184.051441][ T7274] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 184.051459][ T7274] ? do_raw_spin_lock+0x12b/0x2f0 [ 184.051474][ T7274] do_file_open+0x23e/0x4a0 [ 184.051488][ T7274] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 184.051502][ T7274] ? __pfx_do_file_open+0x10/0x10 [ 184.051515][ T7274] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 184.051536][ T7274] ? alloc_fd+0x64e/0x6c0 [ 184.051552][ T7274] do_sys_openat2+0x113/0x200 [ 184.051563][ T7274] ? __se_sys_futex+0x3a8/0x450 [ 184.051578][ T7274] ? __pfx_do_sys_openat2+0x10/0x10 [ 184.051592][ T7274] ? rcu_is_watching+0x15/0xb0 [ 184.051610][ T7274] __x64_sys_openat+0x138/0x170 [ 184.051623][ T7274] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.051634][ T7274] do_syscall_64+0x15f/0xf80 [ 184.051646][ T7274] ? trace_irq_disable+0x3b/0x140 [ 184.051657][ T7274] ? clear_bhb_loop+0x40/0x90 [ 184.051669][ T7274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.051682][ T7274] RIP: 0033:0x7f0db10bd04e [ 184.051692][ T7274] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 184.051700][ T7274] RSP: 002b:00007f0daf355b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 184.051711][ T7274] RAX: ffffffffffffffda RBX: 00007f0daf3566c0 RCX: 00007f0db10bd04e [ 184.051718][ T7274] RDX: 0000000000020402 RSI: 00007f0daf355c00 RDI: ffffffffffffff9c [ 184.051725][ T7274] RBP: 00007f0daf355c00 R08: 0000000000000000 R09: 0000000000000000 [ 184.051731][ T7274] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 184.051738][ T7274] R13: 00007f0db1376038 R14: 00007f0db1375fa0 R15: 00007fff9efa8b98 [ 184.051753][ T7274] [ 184.051759][ T7274] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 184.051768][ T7274] CPU: 0 UID: 0 PID: 7274 Comm: syz.0.483 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 184.051782][ T7274] Tainted: [L]=SOFTLOCKUP [ 184.051785][ T7274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 184.051791][ T7274] Call Trace: [ 184.051795][ T7274] [ 184.051799][ T7274] vpanic+0x56c/0xa60 [ 184.051813][ T7274] ? __pfx__printk+0x10/0x10 [ 184.051827][ T7274] ? __pfx_vpanic+0x10/0x10 [ 184.051838][ T7274] ? is_bpf_text_address+0x292/0x2b0 [ 184.051852][ T7274] ? is_bpf_text_address+0x26/0x2b0 [ 184.051868][ T7274] panic+0xc5/0xd0 [ 184.051888][ T7274] ? __pfx_panic+0x10/0x10 [ 184.051907][ T7274] __warn+0x315/0x4c0 [ 184.051919][ T7274] ? refcount_warn_saturate+0x9f/0x110 [ 184.051937][ T7274] ? refcount_warn_saturate+0x9f/0x110 [ 184.051953][ T7274] __report_bug+0x29a/0x540 [ 184.051965][ T7274] ? rt_mutex_slowlock_block+0x56c/0x680 [ 184.051983][ T7274] ? refcount_warn_saturate+0x9f/0x110 [ 184.051998][ T7274] ? __pfx___report_bug+0x10/0x10 [ 184.052012][ T7274] ? rt_mutex_slowlock+0x420/0x780 [ 184.052028][ T7274] ? rt_mutex_slowlock+0x1fd/0x780 [ 184.052044][ T7274] report_bug_entry+0x19a/0x290 [ 184.052056][ T7274] ? refcount_warn_saturate+0x9f/0x110 [ 184.052070][ T7274] ? refcount_warn_saturate+0xa4/0x110 [ 184.052085][ T7274] handle_bug+0xce/0x200 [ 184.052099][ T7274] exc_invalid_op+0x1a/0x50 [ 184.052112][ T7274] asm_exc_invalid_op+0x1a/0x20 [ 184.052124][ T7274] RIP: 0010:refcount_warn_saturate+0x9f/0x110 [ 184.052142][ T7274] Code: eb 66 85 db 74 3e 83 fb 01 75 4c e8 ab 3f 10 fd 48 8d 3d 14 25 25 0b 67 48 0f b9 3a eb 4a e8 98 3f 10 fd 48 8d 3d 11 25 25 0b <67> 48 0f b9 3a eb 37 e8 85 3f 10 fd 48 8d 3d 0e 25 25 0b 67 48 0f [ 184.052150][ T7274] RSP: 0018:ffffc90003e676d8 EFLAGS: 00010283 [ 184.052159][ T7274] RAX: ffffffff84b4c298 RBX: 0000000000000002 RCX: 0000000000080000 [ 184.052165][ T7274] RDX: ffffc90005789000 RSI: 0000000000000678 RDI: ffffffff8fd9e7b0 [ 184.052172][ T7274] RBP: 0000000000000000 R08: ffff888032628000 R09: 0000000000000005 [ 184.052179][ T7274] R10: 0000000000000100 R11: 0000000000000004 R12: ffffffff8c294a48 [ 184.052185][ T7274] R13: dffffc0000000000 R14: ffff8880397f5188 R15: dffffc0000000000 [ 184.052196][ T7274] ? refcount_warn_saturate+0x98/0x110 [ 184.052214][ T7274] ? refcount_warn_saturate+0x98/0x110 [ 184.052229][ T7274] kobject_get+0xfa/0x120 [ 184.052243][ T7274] i2c_get_adapter+0x6d/0xa0 [ 184.052257][ T7274] i2cdev_open+0x48/0x190 [ 184.052270][ T7274] chrdev_open+0x4d0/0x5f0 [ 184.052282][ T7274] ? __pfx_chrdev_open+0x10/0x10 [ 184.052292][ T7274] ? fsnotify_open_perm_and_set_mode+0x13b/0x6e0 [ 184.052310][ T7274] ? __pfx_chrdev_open+0x10/0x10 [ 184.052320][ T7274] do_dentry_open+0x83d/0x13e0 [ 184.052337][ T7274] vfs_open+0x3b/0x350 [ 184.052347][ T7274] ? path_openat+0x2e2b/0x38a0 [ 184.052362][ T7274] path_openat+0x2e43/0x38a0 [ 184.052391][ T7274] ? __pfx_path_openat+0x10/0x10 [ 184.052417][ T7274] ? kasan_save_track+0x4f/0x80 [ 184.052439][ T7274] ? kasan_save_track+0x3e/0x80 [ 184.052461][ T7274] ? __kasan_slab_alloc+0x6c/0x80 [ 184.052485][ T7274] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 184.052515][ T7274] ? do_raw_spin_lock+0x12b/0x2f0 [ 184.052541][ T7274] do_file_open+0x23e/0x4a0 [ 184.052568][ T7274] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 184.052590][ T7274] ? __pfx_do_file_open+0x10/0x10 [ 184.052604][ T7274] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 184.052623][ T7274] ? alloc_fd+0x64e/0x6c0 [ 184.052639][ T7274] do_sys_openat2+0x113/0x200 [ 184.052651][ T7274] ? __se_sys_futex+0x3a8/0x450 [ 184.052666][ T7274] ? __pfx_do_sys_openat2+0x10/0x10 [ 184.052680][ T7274] ? rcu_is_watching+0x15/0xb0 [ 184.052696][ T7274] __x64_sys_openat+0x138/0x170 [ 184.052710][ T7274] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.052721][ T7274] do_syscall_64+0x15f/0xf80 [ 184.052732][ T7274] ? trace_irq_disable+0x3b/0x140 [ 184.052743][ T7274] ? clear_bhb_loop+0x40/0x90 [ 184.052756][ T7274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.052766][ T7274] RIP: 0033:0x7f0db10bd04e [ 184.052776][ T7274] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 184.052784][ T7274] RSP: 002b:00007f0daf355b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 184.052802][ T7274] RAX: ffffffffffffffda RBX: 00007f0daf3566c0 RCX: 00007f0db10bd04e [ 184.052810][ T7274] RDX: 0000000000020402 RSI: 00007f0daf355c00 RDI: ffffffffffffff9c [ 184.052818][ T7274] RBP: 00007f0daf355c00 R08: 0000000000000000 R09: 0000000000000000 [ 184.052825][ T7274] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 184.052832][ T7274] R13: 00007f0db1376038 R14: 00007f0db1375fa0 R15: 00007fff9efa8b98 [ 184.052848][ T7274] [ 184.053450][ T7274] Kernel Offset: disabled