last executing test programs: 11.165498161s ago: executing program 0 (id=2341): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000000)={0x0, 'bridge_slave_1\x00', {0x1}, 0x264d}) 11.030942992s ago: executing program 0 (id=2343): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9f, 0x18, 0x76, 0x20, 0x17ef, 0x7203, 0x2e36, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xbc, 0x0, 0x2, 0x9e, 0x88, 0x33, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0x3}}]}}]}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f00000000c0)={0x20, 0x14, 0x2, '~K'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="200e02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x20, 0xe, 0x2, '=h'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000027c0)={0x2c, &(0x7f0000002600)=ANY=[@ANYBLOB="201814"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000001700)="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", 0x901}], 0x1}}], 0x1, 0x7000800) syz_usb_control_io(r0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000580)='.', 0x1}], 0x1) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f0000000080)={0x60, 0xf, 0x1e, {0x1e, 0x7, "12539047997d9d9bd2206fd54c32ec4a2cd771fed55f4ae2740c7a71"}}, &(0x7f0000000100)=ANY=[@ANYBLOB="090304002904"], &(0x7f0000000140)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0xa}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0xff, 0x1, {0x22, 0xd2d}}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB="401479000000373765fed0afe322a5a26df0334d12849fdec28bccc0b98336efac01acc9a553db809c7a367b90343eb7fc45bb5ca7400ab4ddd0987469775c759fb2b366cb75e54de7297f539d407a72997a7c65f1e9fe8968fe490c000000bd9da8993dd8cf7b50b9fbd2005311d8206edf6fc4cab02765374741c293f499c3b05d56865b4c830b"], &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000580)=ANY=[@ANYBLOB="2001c1000000b6e9fb0637078b700ae57dc30ed9b2009e2b3d3cb5cae3534797492c6f94b459feba382732e587121e677b22098aa9e862738fa4bd56792063a8afd0e8c3cdfad008296c1298ae6e3e301cb8ea8b00cc83538ce03b271a90bb654600f1bdaa10a0a53ddc6f1dbb5aaed844c8f4be1d42d839286410a40612e6685d8841284ba2c370ab29077d316eb6c7dec138964726b0a03fb966fdc5ee2e00f571761db6edbbe2f20c724eac49a4ecbca926ee37f4dea7c427eef0ece88a45f08f57973a0722"], &(0x7f0000000500)={0x20, 0x3, 0x1, 0xa3}}) 9.526473414s ago: executing program 2 (id=2347): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffffef, &(0x7f0000000080)=[{&(0x7f0000000040)="0f020000390005", 0x7}], 0x1}, 0x1) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300091b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff"], 0xd8}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_usb_connect(0x3, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x4b, 0x3, 0x9, 0x10, 0x1199, 0x9015, 0x992d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x3, 0x7f, 0x7, 0x10, 0x5, [{{0x9, 0x4, 0x0, 0x9, 0x0, 0x45, 0x83, 0xd6, 0x3}}, {{0x9, 0x4, 0x1, 0xe, 0x0, 0xff, 0xff, 0xff, 0x8}}, {{0x9, 0x4, 0x66, 0xc, 0x0, 0xff, 0xff, 0xff, 0x8}}]}}]}}, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f00000000c0)={0x0, 0x2710}, 0x10) recvmsg(r0, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="180000006a"], 0xfe33) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000007400)=[{{0x0, 0x0, &(0x7f00000060c0)=[{&(0x7f0000003f40)=""/4096, 0x1000}], 0x1}, 0x7f}], 0x1, 0x60002120, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007640)=ANY=[], 0x3aa0}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000007c0)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="40040000d9b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.79821148s ago: executing program 1 (id=2349): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000000)='veno\x00', 0x5) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)=ANY=[], 0x1c}, {&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x154}], 0x2, 0x0, 0x0, 0x4004000}, 0x48005) 8.646469889s ago: executing program 1 (id=2350): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@mcast2, @in=@multicast1, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0x1000000000000, 0x5, 0xfffffffffffffffa, 0x8}, {0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x1, 0x0, 0x3}, {{@in=@empty, 0x0, 0x33}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x7c, 0xfffffffe}}, 0xe8) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYRES32=r2], 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e26, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) 6.396099472s ago: executing program 2 (id=2354): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b40), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x40000) 5.773937895s ago: executing program 2 (id=2355): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000380), 0x0, 0x2) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000bc0)={0x4, @sliced={0x5, [0x10, 0x3, 0x4, 0x7, 0x3, 0x2, 0x4fc, 0x7, 0x9, 0x4, 0x8001, 0x4, 0x9, 0x2, 0x2, 0xffff, 0x10, 0x101, 0x0, 0x4, 0x0, 0x3, 0x5, 0x8006, 0xd, 0x9, 0x1, 0x3, 0x7f, 0x9, 0x7f6a, 0x0, 0xfff, 0xdb4, 0x5, 0x74, 0x8, 0x1, 0x7, 0x1, 0x2, 0x48, 0x1, 0x785, 0x100, 0x7f, 0x782a, 0x7fff], 0x4}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000000406030000000000000000000300000105000100e9"], 0x34}, 0x1, 0x0, 0x0, 0x1800}, 0x40004) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) r4 = memfd_secret(0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r4, 0x8004af81, &(0x7f0000000680)) ioctl$KVM_CLEAR_DIRTY_LOG(r3, 0xc018aec0, &(0x7f0000001300)={0x0, 0x240, 0x380, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x98bd, 0x80000000000000c, 0x0, 0x4, 0x10000, 0x7, 0x9004, 0x9, 0x8, 0x9, 0x7, 0x49, 0x3ff, 0x5, 0x2, 0x1, 0x8, 0x7, 0xc1, 0x1, 0x2, 0xee, 0x6, 0x9, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x5, 0x7, 0x4, 0x3, 0x9, 0x888f, 0x1, 0x6, 0x46, 0x1, 0x3, 0xa3de, 0x20000000006, 0x8, 0x7, 0x3fc, 0x3, 0xffffffffffffffb7, 0xfffffffffffffffa, 0x2, 0xe, 0x6, 0x4, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x9, 0x7, 0x40000005, 0xfffffffeffffffff, 0x9, 0xd, 0x10001, 0xbbd9, 0x80000000, 0xfffffffffffffc00, 0x2, 0x7, 0x2, 0xcdc, 0x4000000007, 0x2, 0x3, 0x2, 0x2, 0xfff, 0x6, 0x4, 0x1, 0xab6, 0x0, 0x4, 0x0, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x3, 0x5, 0x8061d, 0x3, 0x7, 0xf6, 0x4, 0x6, 0x204, 0x7, 0xe53e, 0x4, 0x8, 0x2293332f, 0x6, 0x5, 0x6, 0xd, 0x2, 0x4, 0xfffffffffffffffb, 0x80000001, 0x7, 0xdfd4, 0xfff9, 0x10, 0x5, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0xd0, 0x8, 0x1000003]}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x10006, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000003080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000030c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000000740)=ANY=[@ANYRES8=r2, @ANYRES8=r1, @ANYRES8=r9, @ANYRES32=r1, @ANYBLOB="1cb79b22e51e520c46eb492e71e3f68d512aff"], 0x1c}, 0x1, 0x0, 0x0, 0x48080}, 0x8004) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) ioctl$KVM_SET_PIT(r10, 0x8048ae66, &(0x7f0000000600)={[{0x0, 0x4, 0xfe, 0xfe, 0x8, 0x6, 0x44, 0x8, 0xfd, 0x2, 0x8, 0xfb, 0x7}, {0x1ff, 0x5, 0x8, 0x5, 0x9, 0x0, 0x5, 0x81, 0x9, 0xff, 0x6, 0x7, 0x8}, {0x4, 0x46c, 0x9, 0x8, 0x9, 0x3, 0xe, 0x4, 0x7, 0xb, 0x3, 0x8, 0x5}], 0x10000}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r6, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB="8e5bc4409148f3", @ANYRES16=r7, @ANYBLOB="08002abd7000fbdbdf251c00000008000300", @ANYRES32=r9, @ANYBLOB="0c009900050000006a000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40084) r11 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x580, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000000)={0x2, 0x3, 0xa}) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x500, 0x0) ioctl$PPPIOCNEWUNIT(r12, 0xc004743e, &(0x7f00000005c0)=0x3) ioctl$PPPIOCGIDLE(r12, 0x8010743f, &(0x7f0000000940)) ioctl$SNDCTL_DSP_GETOSPACE(r11, 0x8010500c, &(0x7f0000000280)) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000140)='/dev/audio1\x00', 0xc, 0x0) 5.674071884s ago: executing program 0 (id=2356): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7010202120001000000000904000000ff000000000000"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='iocharset', &(0x7f0000000080)='\xe0^@&&}\'\x00', 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0}, &(0x7f0000000240)={0x1c, &(0x7f0000000180)={0x0, 0x16, 0x3, "47f399"}, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="821337bc9783d57e961539e3b9f4991933e604a7b74b295035621fedabdf53f55fcaf1caeff26f6ea9e940afb451f86ff563ea1a3322ebd70fa3bda05abf26566e92d350acb6f769ce3e696da394e2b043a85e2142af3023609471bc5eeabc6714af50fa0b32d8ca07c514924ce6f75707028158e08921e8654008", @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0}) 4.557874176s ago: executing program 2 (id=2358): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x22440, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x72, 0x3, 0x9, 0x9, 0x5, 0xfffffbf9, 0x7ffb, 0x5, 0x6, 0x0, 0x5, 0x1, 0x1, 0xffff3840, 0x40000003, 0xf, 0x0, 0x0, 0x3, 0x3fffffff, 0x86, 0xfffffffd, 0x0, 0x20001e56, 0x8436, 0xfff, 0x403f, 0x7ffffffc, 0x7, 0x7fffffd, 0xfffffff8]}) (fail_nth: 1) 3.81109261s ago: executing program 2 (id=2360): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/key-users\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000480)="2bcd65e88ee4a88dc6dca1d3e3138630fe60bf5066b9d7ce1f76140c1f84aeb9a4c73ede5743bc64cce6da1bd35501a060db3c6b36bfc46f38500adc3bfbb67218a9e40c259faaf471e2e1b81dd830f651ad", 0x52, 0x4010, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0x5) r5 = timerfd_create(0x0, 0x0) removexattr(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)=@known='user.syz\x00') r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r7) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ifreq(r8, 0x89a3, 0x0) timerfd_settime(r5, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = syz_usb_connect(0x5, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000203010902120001000000000904000000dba29200"], 0x0) ioctl$FIONCLEX(r1, 0x5450) syz_usb_control_io$cdc_ecm(r9, 0x0, &(0x7f00000000c0)={0x1c, &(0x7f0000000700)=ANY=[], 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080), 0x80, &(0x7f00000001c0)={[{@mode={'mode', 0x3d, 0x9}}]}) syz_usb_control_io$hid(r9, 0x0, &(0x7f0000000680)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="e9b0b45e09f3d4d60cc416fd0956db8cb413fde5d2aff54b14d8236d3c49f9a4cbd4597420b60001000000000000d6dc2ab4392fa6254312796e833de95045b82960c5b7e9dbd878db51281674fa67957d61b71a0bd0244a53018d63d122eaba46a0da5622c9f16261f33ce019e64493822e9910c3bde7"], 0x0, 0x0, 0x0, 0x0}) read(r5, &(0x7f0000000240)=""/123, 0x7b) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@private}}, &(0x7f0000000100)=0xe8) r11 = getegid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r10, r11}}, './file0\x00'}) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x4, 0xffdffffffffffffe, 0x100000001, 0x8000800000205, 0x100000000000000, 0x8006, 0x0, 0x800ffc, 0x6, 0x0, 0x8, 0xb, 0x1, 0x1e87, 0xfffffffffffffffc, 0x7, 0x2, 0x3, 0x8, 0x7, 0x3, 0x0, 0x6, 0x0, 0x4}) 2.547198873s ago: executing program 0 (id=2361): r0 = socket$inet(0x2, 0x5, 0x0) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e23, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x1100, &(0x7f0000000c80)=[{&(0x7f00000005c0)="38740fbe744b678e65c6f17633b1515581530e782f63cb13b46114bd80d5d011429702cba0b7a1ad71bf3b0c9aa673bd44f2cf827a5e532c2fbfaff9209964e536d1086266b29c2ca7475b17d316cf4f79cf807ed0110c6b565cdf33ddac104f4f2856a587b1e9480d11cd41a80d8fced53c785dede6d5eed8976aaa9954e00276351e2dcbf93034fefd445fb798f45da9b7578c52a96cae9736cbc6867b46a26e942b1ecad401cecf619dfa4b3bb45ddd7b5d40c260", 0xb6}, {&(0x7f0000000ac0)="41c70dc0044f630c936ddf84d858d2da255728b73ae977fead538d189a6343128da660335b1a2bd376772ae5ef6f70a58c6d084e8c80ce1867aee503d74448e2509dea647c92414a934eb15971251faddfac198b74a84f54f09ef4e6de3f040ec1bda8ab59e3b3dcc651c7cd51bea37889be8c6a169acbc8cdca701459d8b397f244108741a58b0ed7d494f588b45826db261f6e38ae91a6d9290021502ab9804e05a0", 0xa3}, {&(0x7f0000000380)="a14c76be8b19f10e25b8a409868258bb5fffe21281efa582d2f2aa1286b09aa44ee42f6de2dad73a965e05778a76ca6b266f9e13d2dfc7005c587ab18b4abeeed72011ec5c049e87c3efb7b776cdf00508dce167ab1b94faf2d128658ece46757eb08b5b23f40ef292ffcc54e9de9cbe85182eed855d547c", 0x78}, {&(0x7f0000000900)="232ee651aec030d44f41fd7a3693e3d091344b7fdc5d5df4980c8a086397192cc56c624789981970006283b31bec65d3771e74284f49672ff97027a39c5c8ae3edda3e101d65a780", 0x48}], 0x4}}], 0x1, 0x4000045) 2.405934845s ago: executing program 0 (id=2362): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0xaf503, 0xffed) 1.049727821s ago: executing program 1 (id=2363): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b40), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x40000) 1.006672721s ago: executing program 1 (id=2364): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_connect$uac1(0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x2, 0x0, 0x411}}}, 0x7) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x6, 0x0, 0x0, &(0x7f00000003c0)="80", 0x1, 0x7b}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) 778.483842ms ago: executing program 3 (id=2365): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, r0, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x62}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x8]}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x316}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x196}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x23}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x450}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x116b}]}, 0x70}, 0x1, 0x0, 0x0, 0x4041}, 0x80) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x98, r3, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_FRAME={0x74, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @initial, {0xf, 0x5}}, 0xffffffffffffffff, @default, 0x1000, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0x2c}, @void, @val={0x6, 0x2, 0x9fc}, @val={0x5, 0xfffffffffffffeeb, {0x5, 0x97, 0x5}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x2, 0x8, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x300, 0x100, 0x1}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x69, 0x0, 0x1, 0xffffffffffffffff, 0x1, 0x9, 0x20}}, @val={0x76, 0x6, {0x3, 0x0, 0x2f, 0x6}}}}]}, 0x98}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 778.10563ms ago: executing program 0 (id=2366): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = socket$inet6(0xa, 0x6, 0xd) setsockopt$inet_opts(r0, 0x0, 0x6, &(0x7f0000000380)='\a', 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) futex(&(0x7f0000000000), 0x10b, 0x0, &(0x7f0000000040), &(0x7f0000000100), 0x0) recvmmsg(r0, &(0x7f0000000b00), 0x0, 0x12141, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000c00), &(0x7f0000000c40)=0x8) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x2002) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="120100003a982a08cd0ca310a223010203010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000b80)=ANY=[@ANYBLOB="400806000000633ea61623b6ee832ecd90e5638c9aa496016764013c64a3b08e06cb6efd80acbcb2c0668f000000000000002000000000000000", @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000440)={0x2c, &(0x7f00000001c0)={0x0, 0xe, 0x85, {0x85, 0x30, "c9391f9b0ea4750bee972cb9289ffb221b8b32af251a7ef2b0aa8453d06cd38254523a724bdf5eea8a897c951d2735e3f841ceaacedde12a09bf7c8f375d1e532931a25884a0c689b54f37ffac0c14e233afa1969a8a57672ed9c1fecec89da8f51ee015f4b126d25270e5b7a0c5aba993f38d8b1461cdf732e93b55f58c3a5e96280c"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42d}}, &(0x7f0000000b40)=ANY=[@ANYBLOB="000f11000000050f1800010c100a004000000000e094782af77d7535020b26"], &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x4, 0x6, 0x2, "d3f5eb59", "9e18a186"}}, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xfd, 0x1, 0x4, 0x0, 0x6, 0x8, 0x401}}}, &(0x7f0000000a40)={0x84, &(0x7f0000000500)={0x0, 0x13, 0xa2, "b1e0632b95d213db388ddad262d880eb3741580585682c9fb8d6a9ae5b5d79db95350f08ed2dc5189249202d253fff89ab5e5f29d0ca676a32846a43714b9b8379d3cc1c301a2eab5752e37058bfa7d0e505c97ea5ddc085aa52659396d737e957e42cf1e1b77a9cde14a005b2b3667387d9be53fb58ec46ede43e5001266dad610657dc4e32692289b7ac5533bd95245b3a9af1afc804c271f10158ab15941daa2f"}, &(0x7f0000000480)={0x0, 0xa, 0x1}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x1a8, 0x5c}}, &(0x7f0000000680)={0x40, 0x7, 0x2, 0x1}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0xfb}, &(0x7f0000000700)={0x40, 0xb, 0x2, "8252"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x7fff}, &(0x7f0000000780)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000800)={0x40, 0x19, 0x2, "71ed"}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000940)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000980)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0xa}}) 650.168104ms ago: executing program 3 (id=2367): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r2, 0x40086683, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000440)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r1, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0xa000000, &(0x7f0000000700)='\n'}) 635.330211ms ago: executing program 2 (id=2368): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xc65, 0x5, &(0x7f0000006680)) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x10000000000) r6 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x0) ioctl$VIDIOC_G_FMT(r6, 0xc0d05604, &(0x7f0000000300)={0x9, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r4}, @ptr={0x73622a85, 0x80000, 0x0, 0x0, 0x1, 0x11}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) r7 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0, @ANYRES32=r1, @ANYRESDEC=0x0], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1ff, &(0x7f0000000700)=0x1) syz_usb_control_io$printer(r7, 0x0, &(0x7f0000000400)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="40032e000000ba0d1f976a6c3b99533131b4d4f821ba761a124f70b30a342872a5fd0a64d7c5327d0283d1d826efa8445a4ed394"], 0x0, 0x0, 0x0, 0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='zonefs\x00', 0x0, 0x0) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)={0x14, 0x14, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4, 0x2}]}, 0x14}], 0x1, 0x0, 0x0, 0x4000}, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0xfffffffc) syz_usb_connect$hid(0x7, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x60b, 0x700a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x10, 0xe, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x1, 0x9, {0x9, 0x21, 0x7, 0xe, 0x1, {0x22, 0xd7a}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x8, 0x8, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x5, 0x5, 0x27}}]}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x310, 0xce, 0x9, 0x4, 0x20}, 0x8, &(0x7f0000000240)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x7, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x41f}}, {0x1d, &(0x7f0000000300)=@string={0x1d, 0x3, "4751b974218ba1c596c0724885a2aee95cbc20b639e7ca3f6a5e98"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x81d}}, {0x96, &(0x7f0000000440)=@string={0x96, 0x3, "2f909e019b21bb045ab8751b03f705261b8e929f5d38fa1f874a03bb360686a0162925d0f2abdc2b6f2097a76d41ffefacffa2d89900152d801d898c1417b2383e9c73f4e9803f2b4d3044d986d91a03fa6eaf8490c8d9d68ec388dc2ba582a7ce12e580f02965b805544d482bd9a28dc43a670199c4f192adbb8ef6203413210edeeed40e04b73e507c0526a9219be8727eead5"}}, {0x3a, &(0x7f0000000500)=@string={0x3a, 0x3, "72eb3b8ef3e15a0fbfca10e1c4c1fd5ad610f6efc0d49fc8f2b72f3ab8fef5738f290224d3f04349909a36330338280acc803f9dfc586eb5"}}, {0x2f, &(0x7f0000000540)=@string={0x2f, 0x3, "2ab0bf16de0b9b0020b7a216bd25d716035af7baf3996b4d5916d067e1ba2600472604e962798b49d8ce68f420"}}, {0xdb, &(0x7f0000000580)=@string={0xdb, 0x3, "d3b4182e2597bbcc110e2bf7b768b186d1d74d4df3e73a00ab6d6f786f9b8cfca358232aaadf4ae1eee9bd9a7e3f4eba992d46d5f940fde9200a891210b282321db40d1af87e94072911fea5aa22782c2bc66dd7c58020cadf54b7d2f45f250926e8642d90e34601b9602d7c03a3e52a3615116f5f8d25f8a179d120439f997b9b57dd9731db4016ecbff1fe2410f1edb775c6becfa4ebf1d3135b6e4b67552ade2670b5f6aeb626cd354dd8d660ddf5019b75cd14882de34ebc40d056b0fde27d7902a02c513f4e2a3d43b13ac174d642d1b73c42197e9aab"}}]}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r10, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/23, 0x17}], 0x1, 0x4, 0x3ff) 364.927291ms ago: executing program 1 (id=2369): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) modify_ldt$write2(0x11, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000000010000000000e01794699dd7566a4a5fb3000000000500000a4c000000060a0b04000000000000000002000005200004801c0001800b00010065787468fa7200000c00028008000640000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x74}}, 0x0) 364.760844ms ago: executing program 3 (id=2370): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000003c0)=0x13) (async) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0xfffffff4, 0x0, 0x9, 0x6, 0x9, "0c41920887e8d2b791f19dd026d76d7fcb366b", 0x4, 0xe6f}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x8) 242.980441ms ago: executing program 1 (id=2371): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e5cf01406e0510401c20000000010902120001000000000904"], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000040)={0x20, 0x29, 0x15, {0x15, 0x8, "242366c4c11e3cc7df1ec3831c6e268c6fe1d4"}}, &(0x7f0000000140)=ANY=[@ANYBLOB="0003e2000000e20394e87b621f03603abf63b2751f9015f94b51e55c518cb51042cea0bc07414527a8790a51b14fc9ec0c92ca9bc12df4ba5c276d0ad214246333cb0806a9267088fd5338c9084cc1ed8ce420ad5b5e2d9e3f0a276a45ed1fd6fb422fbf238dd2a00000000000000000d3419fb9a7d7c824d2a6b92cb3af42bf61c0d2531b831bf41284f7fe567cbc0e94c4e407605dcd5fed589939dc38afa7a37a8ce10a87943ceea692bb238d901ab5f19885ecf9916d563fd7c0b76076297c6c2ba58634f04d1afe6f07c2989a7b0f564f1019702cf0abd31981aed0b96149ae172bc4374e29"], &(0x7f0000000240)={0x0, 0xf, 0x83, {0x5, 0xf, 0x83, 0x1, [@generic={0x7e, 0x10, 0x3, "2d660ed117fc535bd6c4eca67b5e25afa1153027557bbd354cb70b037152eb3f63c0b0e40757188acb126ab91d0c013105a20f5c1bd230307fe6d2d1873ff53e995debea7e701cea6a3b6ff38d8b04dca8dcf742f82985167e078ca8ec00ccc83d6d0daeea2a4fcb8488bb7ee9eaf454962e6290a43162f6946112"}]}}, &(0x7f0000000080)={0x20, 0x29, 0xf, {0xf, 0x29, 0x40, 0x2, 0x4, 0x0, "5c484acb", "f5214f83"}}, &(0x7f00000000c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x7f, 0x3, 0x7, 0xc10b}}}, &(0x7f0000000880)={0x84, &(0x7f0000000440)={0x20, 0x17, 0xc9, "f6f12bbc22fcd68bbbad1517d138784dd350c264f7f62a01076cb4438b74dab03fcf474a9491eaa9821ee2354662b9e687ca2a91e82058598ffc0a993761e096f833787f129bdc8f8d55a8cb1cded38242dc0a64ef09cd264db8534b538adcd644409146ebb9b3fb8721522c9204f76ff065e4fa262580c3971026074d8e61919d6c90eb9a290af35931ccbdb1ae6aa169fa3309d747489a9b76b2355ce1a1dd95028fb07e12cb2da48b1cb9a84ea6c9b5be7889ef824753e5edc8ceee622e7ca5cc4d9f27f9602fb4"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0xc0, 0x1, [0xf0]}}, &(0x7f0000000940)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x9f}, &(0x7f0000000640)={0x40, 0xb, 0x2, "0e1c"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x3ff}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000700)={0x40, 0x17, 0x5, @broadcast}, &(0x7f0000000740)={0x40, 0x19, 0x2, "d578"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x1ff}, &(0x7f00000007c0)={0x40, 0x1c, 0x1}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0xcf}, &(0x7f0000000840)={0x40, 0x21, 0x1}}) syz_usb_control_io$uac1(r0, &(0x7f0000000980)={0x14, &(0x7f0000000a80)={0x40, 0x30, 0xb1, {0xb1, 0x0, "1bbb002b237d4972bcc79f6f838c3ff600cedf00ac2be3615080d1914fafc70d9400a59ee705209b44628e790ae6c808dddd975da929bad95349d912da4aba1f022e25b77407c42cfc8b678f4abdbb11639b9ea8a6b69fd9100dd33a34179cbbf04005ba571a514b8c6edea1c880425e34bfcd60de95d632316b6ee1004f9cae4d703c3107f9250e29da8dafc947b71cead0ffbc0ca2f7929d3cf24616041afd090bf860ba73cd43dbc3b1d3edc7b4"}}, &(0x7f00000006c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x455}}}, &(0x7f0000000d00)={0x44, &(0x7f00000009c0)={0x40, 0x15, 0x25, "1d460d17a99dd6ad8fb1411c0197bbb302c69bb3b28d6bef58adaee7e2abdd2e4a5c059e0a"}, &(0x7f0000000b40)={0x0, 0xa, 0x1, 0x1c}, &(0x7f0000000b80)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000bc0)={0x20, 0x81, 0x3, "1abc37"}, &(0x7f0000000c00)={0x20, 0x82, 0x3, 'gUR'}, &(0x7f0000000c40)={0x20, 0x83, 0x3, "3027a4"}, &(0x7f0000000d80)=ANY=[@ANYBLOB="20c2142776a9167ad2e5bc006eec688565bce401"], &(0x7f0000000cc0)={0x20, 0x85, 0x3, "0bc45a"}}) 217.52192ms ago: executing program 3 (id=2372): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b40), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x40000) 87.246921ms ago: executing program 3 (id=2373): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0xa8c05c84}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0x100) syz_fuse_handle_req(r1, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$tcp_congestion(r3, &(0x7f00000001c0)='bbr\x00', 0x4) close_range(r0, 0xffffffffffffffff, 0x2) 0s ago: executing program 3 (id=2374): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x28}}}}}, 0x36) kernel console output (not intermixed with test programs): =0, SerialNumber=0 [ 518.858036][ T6664] usb 2-1: config 0 descriptor?? [ 519.062976][T12085] netlink: 'syz.2.2023': attribute type 10 has an invalid length. [ 519.338228][T12059] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2022'. [ 519.360555][ T29] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 519.374182][T12098] input: syz1 as /devices/virtual/input/input94 [ 519.512318][ T29] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 519.525584][ T29] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 519.534761][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.545557][ T29] usb 3-1: config 0 descriptor?? [ 519.555247][ T29] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 519.902529][ T30] audit: type=1400 audit(6060840690.416:11): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A21D01A0B978D2F2F262D2A83D1 pid=12103 comm="syz.0.2027" [ 520.124797][ T6664] pegasus 2-1:0.0: can't reset MAC [ 520.130268][ T6664] pegasus 2-1:0.0: probe with driver pegasus failed with error -5 [ 520.142185][ T6664] usb 2-1: USB disconnect, device number 42 [ 520.181247][ T9] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 520.351562][ T9] usb 1-1: config 1 has an invalid interface number: 228 but max is 0 [ 520.359770][ T9] usb 1-1: config 1 has no interface number 0 [ 520.366095][ T9] usb 1-1: config 1 interface 228 has no altsetting 0 [ 520.374750][ T9] usb 1-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=27.38 [ 520.383889][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.391904][ T9] usb 1-1: Product: syz [ 520.396044][ T9] usb 1-1: Manufacturer: syz [ 520.400717][ T9] usb 1-1: SerialNumber: syz [ 520.411373][ T9] as10x_usb: device has been detected [ 520.417478][ T9] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 520.432601][ T9] usb 1-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 520.454292][ T9] as10x_usb: error during firmware upload part1 [ 520.461338][ T9] Registered device Abilis Systems DVB-Titan [ 520.626238][ T9] usb 1-1: USB disconnect, device number 45 [ 520.673929][ T9] Unregistered device Abilis Systems DVB-Titan [ 520.688681][ T9] as10x_usb: device has been disconnected [ 520.820228][T12122] input: syz1 as /devices/virtual/input/input95 [ 520.921932][T12126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2035'. [ 522.156818][ T6664] usb 3-1: USB disconnect, device number 18 [ 522.240592][T12144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.252790][T12144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.479011][ T9819] usb 1-1: new low-speed USB device number 46 using dummy_hcd [ 522.498927][ T6664] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 522.521125][ T5841] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 522.530895][ T5841] Bluetooth: hci3: Injecting HCI hardware error event [ 522.538391][ T5841] Bluetooth: hci3: hardware error 0x00 [ 522.608912][ T9819] usb 1-1: device descriptor read/64, error -71 [ 522.650611][ T6664] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 522.660012][ T6664] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.671079][ T6664] usb 3-1: config 0 descriptor?? [ 522.848764][ T9819] usb 1-1: new low-speed USB device number 47 using dummy_hcd [ 522.942525][T12148] input: syz1 as /devices/virtual/input/input96 [ 522.978766][ T9819] usb 1-1: device descriptor read/64, error -71 [ 523.089104][ T9819] usb usb1-port1: attempt power cycle [ 523.279945][T12157] overlayfs: failed to resolve './file1': -2 [ 523.429092][ T5903] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 523.439478][ T9819] usb 1-1: new low-speed USB device number 48 using dummy_hcd [ 523.459326][ T9819] usb 1-1: device descriptor read/8, error -71 [ 523.558406][ T5903] usb 2-1: device descriptor read/64, error -71 [ 523.692910][ T6664] pegasus 3-1:0.0: probe with driver pegasus failed with error -71 [ 523.701804][ T9819] usb 1-1: new low-speed USB device number 49 using dummy_hcd [ 523.712140][ T6664] usb 3-1: USB disconnect, device number 19 [ 523.728738][ T9819] usb 1-1: device descriptor read/8, error -71 [ 523.798462][ T5903] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 523.838604][ T9819] usb usb1-port1: unable to enumerate USB device [ 523.928195][ T5903] usb 2-1: device descriptor read/64, error -71 [ 524.039249][ T5903] usb usb2-port1: attempt power cycle [ 524.387999][ T5903] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 524.409250][ T5903] usb 2-1: device descriptor read/8, error -71 [ 524.477955][ T6664] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 524.597906][ T5841] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 524.630478][ T6664] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 524.643602][ T6664] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 524.652802][ T5903] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 524.660477][ T6664] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.671659][ T6664] usb 3-1: config 0 descriptor?? [ 524.685237][ T6664] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 524.693202][ T5903] usb 2-1: device descriptor read/8, error -71 [ 524.808894][ T5903] usb usb2-port1: unable to enumerate USB device [ 526.377222][ T6664] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 526.539382][ T6664] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 526.561558][ T6664] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.580200][ T6664] usb 1-1: config 0 descriptor?? [ 526.796912][ T978] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 526.968617][ T978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 526.979733][ T978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 526.989565][ T978] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 526.999396][ T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.011284][ T978] usb 2-1: config 0 descriptor?? [ 527.076931][ T4553] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 527.222104][T12184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.231976][T12184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.243205][ T978] usbhid 2-1:0.0: can't add hid device: -71 [ 527.258006][ T978] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 527.267053][ T9] usb 3-1: USB disconnect, device number 20 [ 527.269911][ T978] usb 2-1: USB disconnect, device number 47 [ 527.327293][T12190] fuse: Bad value for 'group_id' [ 527.332342][T12190] fuse: Bad value for 'group_id' [ 527.402468][ T6664] pegasus 1-1:0.0: probe with driver pegasus failed with error -71 [ 527.421404][ T6664] usb 1-1: USB disconnect, device number 50 [ 528.196102][ T9] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 528.226092][ T8428] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 528.347690][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 528.358124][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 528.368925][ T9] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 528.378277][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 528.386395][ T9] usb 1-1: SerialNumber: syz [ 528.392447][ T8428] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 528.401258][ T8428] usb 2-1: config 0 has no interface number 0 [ 528.408438][ T8428] usb 2-1: config 0 interface 41 has no altsetting 0 [ 528.418531][ T8428] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 528.427757][ T8428] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.435756][ T8428] usb 2-1: Product: syz [ 528.440060][ T8428] usb 2-1: Manufacturer: syz [ 528.444907][ T8428] usb 2-1: SerialNumber: syz [ 528.452241][ T8428] usb 2-1: config 0 descriptor?? [ 528.495950][ T6664] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 528.632759][ T9] usb 1-1: 0:2 : does not exist [ 528.647333][ T6664] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 528.661159][ T6664] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 528.671549][ T6664] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 528.678573][ T9] usb 1-1: USB disconnect, device number 51 [ 528.690219][ T6664] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.709904][T12199] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 528.729268][ T6664] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 528.731495][ T6112] udevd[6112]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 528.976178][ T9] usb 3-1: USB disconnect, device number 21 [ 529.518997][T12214] fuse: Bad value for 'group_id' [ 529.523984][T12214] fuse: Bad value for 'group_id' [ 529.585596][ T9] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 529.641929][ T8428] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 529.674319][ T8428] usb 2-1: USB disconnect, device number 48 [ 529.747605][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 529.761235][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 529.770869][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.785963][ T9] usb 1-1: config 0 descriptor?? [ 529.798473][ T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 530.498803][T12237] random: crng reseeded on system resumption [ 531.144665][ T8428] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 531.276895][ T8428] usb 3-1: device descriptor read/64, error -71 [ 531.534518][ T8428] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 531.664409][ T8428] usb 3-1: device descriptor read/64, error -71 [ 531.774521][ T8428] usb usb3-port1: attempt power cycle [ 532.124241][ T8428] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 532.144755][ T8428] usb 3-1: device descriptor read/8, error -71 [ 532.355535][ T5903] usb 1-1: USB disconnect, device number 52 [ 532.384397][ T8428] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 532.404621][ T8428] usb 3-1: device descriptor read/8, error -71 [ 532.424782][ T6664] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 532.514302][ T8428] usb usb3-port1: unable to enumerate USB device [ 532.594103][ T6664] usb 2-1: Using ep0 maxpacket: 32 [ 532.600910][ T6664] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 532.609246][ T6664] usb 2-1: config 0 has no interface number 0 [ 532.617412][ T6664] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 532.626552][ T6664] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.634810][ T6664] usb 2-1: Product: syz [ 532.638968][ T6664] usb 2-1: Manufacturer: syz [ 532.643550][ T6664] usb 2-1: SerialNumber: syz [ 532.651367][ T6664] usb 2-1: config 0 descriptor?? [ 532.658146][ T6664] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 532.861156][ T6664] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 532.873276][ T6664] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 533.085713][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 533.086111][ T8428] usb 2-1: USB disconnect, device number 49 [ 533.108725][ T8428] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 533.123138][ T8428] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 533.137399][ T8428] quatech2 2-1:0.51: device disconnected [ 533.533494][ T8428] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 533.683330][ T8428] usb 2-1: Using ep0 maxpacket: 8 [ 533.693621][ T8428] usb 2-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.717579][ T8428] usb 2-1: config 0 interface 0 has no altsetting 0 [ 533.725318][ T8428] usb 2-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 533.744739][ T8428] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.756734][ T8428] usb 2-1: config 0 descriptor?? [ 533.986792][T12281] binder: 12280:12281 ioctl c0306201 200000000300 returned -11 [ 534.077414][T12287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2094'. [ 534.078110][T12288] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2094'. [ 534.170217][ T8428] itetech 0003:258A:6A88.0024: item fetching failed at offset 0/5 [ 534.178675][ T8428] itetech 0003:258A:6A88.0024: probe with driver itetech failed with error -22 [ 534.363014][ T8428] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 534.373618][T12268] dlm: Unknown command passed to DLM device : 0 [ 534.373618][T12268] [ 534.383400][ T6664] usb 2-1: USB disconnect, device number 50 [ 534.534322][ T8428] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 534.543533][ T8428] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.553385][ T8428] usb 3-1: config 0 descriptor?? [ 535.202584][ T9] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 535.372472][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 535.380310][ T9] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 214, changing to 11 [ 535.391793][ T9] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 535.405270][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 535.411920][ T9] usb 2-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 535.421858][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.432304][ T9] usb 2-1: config 0 descriptor?? [ 535.572516][ T8428] pegasus 3-1:0.0: probe with driver pegasus failed with error -71 [ 535.584809][ T8428] usb 3-1: USB disconnect, device number 26 [ 535.672229][T12295] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 535.683227][T12295] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 535.691924][T12295] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 535.701296][T12295] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 535.710487][T12295] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 535.718920][T12295] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 535.728210][T12295] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 535.736543][T12295] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 535.744965][T12295] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 535.753299][T12295] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 535.761285][T12295] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 535.769395][T12295] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 535.777596][T12295] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 535.785690][T12295] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 535.793777][T12295] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 535.801795][T12295] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 535.809876][T12295] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 535.818629][T12295] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 535.828074][T12295] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 535.836112][T12295] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 535.844144][T12295] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 535.852322][T12295] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 535.855609][ T9] input: HID 28bd:0933 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28BD:0933.0025/input/input97 [ 535.860310][T12295] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 535.881417][T12295] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 535.890056][T12295] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 535.898210][T12295] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 535.906357][T12295] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 535.914571][T12295] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 535.923785][T12295] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 535.932671][T12295] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 535.942870][T12295] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 535.951168][T12295] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 535.960581][ T9] uclogic 0003:28BD:0933.0025: input,hidraw0: USB HID v5f.b2 Mouse [HID 28bd:0933] on usb-dummy_hcd.1-1/input0 [ 535.966633][T12295] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 535.980461][T12295] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 535.988582][T12295] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 536.000379][T12295] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 536.008504][T12295] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 536.016549][T12295] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 536.024678][T12295] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 536.034490][T12295] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 536.042727][T12295] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 536.050760][T12295] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 536.051330][ T9] usb 2-1: USB disconnect, device number 51 [ 536.096374][T12295] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 536.105124][T12295] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 536.113852][T12295] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 536.124755][T12295] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 536.141398][T12295] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 536.151964][T12295] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 536.164816][T12295] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 536.174145][T12295] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 536.182317][T12295] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 536.197816][T12295] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 536.209316][T12295] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 536.220128][T12295] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 536.229163][T12295] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 536.238499][T12295] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 536.246583][T12295] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 536.254654][T12295] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 536.262742][T12295] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 536.270745][T12295] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 536.278910][T12295] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 536.286916][T12295] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 536.295166][T12295] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 536.303211][T12295] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 536.311207][T12295] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 536.399778][T12305] tmpfs: Unknown parameter 'indo64' [ 536.405730][T12305] tmpfs: Unknown parameter 'indo64' [ 536.411166][T12305] tmpfs: Unknown parameter 'indo64' [ 536.417693][T12305] tmpfs: Unknown parameter 'indo64' [ 536.423364][T12305] tmpfs: Unknown parameter 'indo64' [ 536.428812][T12305] tmpfs: Unknown parameter 'indo64' [ 536.434327][T12305] tmpfs: Unknown parameter 'indo64' [ 536.439782][T12305] tmpfs: Unknown parameter 'indo64' [ 536.441985][ T5903] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 536.445265][T12305] tmpfs: Unknown parameter 'indo64' [ 536.458201][T12305] tmpfs: Unknown parameter 'indo64' [ 536.463764][T12305] tmpfs: Unknown parameter 'indo64' [ 536.469133][T12305] tmpfs: Unknown parameter 'indo64' [ 536.474599][T12305] tmpfs: Unknown parameter 'indo64' [ 536.479949][T12305] tmpfs: Unknown parameter 'indo64' [ 536.485405][T12305] tmpfs: Unknown parameter 'indo64' [ 536.491060][T12305] tmpfs: Unknown parameter 'indo64' [ 536.496547][T12305] tmpfs: Unknown parameter 'indo64' [ 536.502002][T12305] tmpfs: Unknown parameter 'indo64' [ 536.507352][T12305] tmpfs: Unknown parameter 'indo64' [ 536.512848][T12305] tmpfs: Unknown parameter 'indo64' [ 536.518181][T12305] tmpfs: Unknown parameter 'indo64' [ 536.523715][T12305] tmpfs: Unknown parameter 'indo64' [ 536.529042][T12305] tmpfs: Unknown parameter 'indo64' [ 536.534535][T12305] tmpfs: Unknown parameter 'indo64' [ 536.540076][T12305] tmpfs: Unknown parameter 'indo64' [ 536.545583][T12305] tmpfs: Unknown parameter 'indo64' [ 536.551035][T12305] tmpfs: Unknown parameter 'indo64' [ 536.556458][T12305] tmpfs: Unknown parameter 'indo64' [ 536.561852][T12305] tmpfs: Unknown parameter 'indo64' [ 536.567192][T12305] tmpfs: Unknown parameter 'indo64' [ 536.572651][T12305] tmpfs: Unknown parameter 'indo64' [ 536.577977][T12305] tmpfs: Unknown parameter 'indo64' [ 536.583468][T12305] tmpfs: Unknown parameter 'indo64' [ 536.611945][ T5903] usb 3-1: Using ep0 maxpacket: 32 [ 536.618426][ T5903] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 536.627109][ T5903] usb 3-1: config 0 has no interface number 0 [ 536.633542][ T5903] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 536.665037][ T5903] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 536.675876][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.687095][ T5903] usb 3-1: Product: syz [ 536.691274][ T5903] usb 3-1: Manufacturer: syz [ 536.696853][ T5903] usb 3-1: SerialNumber: syz [ 536.706005][ T5903] usb 3-1: config 0 descriptor?? [ 536.712290][T12300] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 536.719633][T12307] comedi comedi2: das16m1: I/O port conflict (0x200401,16) [ 536.932477][T12300] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 537.082837][T12325] usb usb8: usbfs: process 12325 (syz.1.2108) did not claim interface 7 before use [ 537.247888][T12331] input: syz1 as /devices/virtual/input/input98 [ 538.034437][ T9819] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 538.203661][ T9819] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 538.213884][ T9819] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 538.223773][ T9819] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 538.232863][ T9819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 538.240842][ T9819] usb 2-1: SerialNumber: syz [ 538.455922][ T9819] usb 2-1: 0:2 : does not exist [ 538.460993][ T9819] usb 2-1: unit 255 not found! [ 538.492024][ T9819] usb 2-1: USB disconnect, device number 52 [ 538.509576][ T5842] udevd[5842]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 539.021242][T12355] input: syz1 as /devices/virtual/input/input99 [ 540.165500][ T5903] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 540.181490][ T5903] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 540.193414][ T5903] asix 3-1:0.188: probe with driver asix failed with error -71 [ 540.208034][T12368] input: syz1 as /devices/virtual/input/input100 [ 540.210907][ T5903] usb 3-1: USB disconnect, device number 27 [ 540.221238][T12368] input: failed to attach handler leds to device input100, error: -6 [ 540.390167][ T9819] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 540.439970][ T9] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 540.545376][ T9819] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 540.556343][ T9819] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 540.572904][ T9819] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 540.582920][ T9819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.599472][ T9819] usb 2-1: config 0 descriptor?? [ 540.608042][ T9819] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 540.621670][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 540.630563][ T9] usb 1-1: config 0 has no interface number 0 [ 540.639086][ T9] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 540.648944][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.657020][ T9] usb 1-1: Product: syz [ 540.661407][ T9] usb 1-1: Manufacturer: syz [ 540.665999][ T9] usb 1-1: SerialNumber: syz [ 540.677441][ T9] usb 1-1: config 0 descriptor?? [ 540.686290][ T9] usb 1-1: selecting invalid altsetting 1 [ 540.695940][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 540.702433][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 540.758528][ T9] DVB: Unable to find symbol stv0299_attach() [ 540.791757][ T9] DVB: Unable to find symbol tda8083_attach() [ 540.797921][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 540.799333][T12393] FAULT_INJECTION: forcing a failure. [ 540.799333][T12393] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 540.828571][T12393] CPU: 1 UID: 0 PID: 12393 Comm: syz.2.2128 Tainted: G L syzkaller #0 PREEMPT(full) [ 540.828600][T12393] Tainted: [L]=SOFTLOCKUP [ 540.828607][T12393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 540.828618][T12393] Call Trace: [ 540.828625][T12393] [ 540.828632][T12393] dump_stack_lvl+0xe8/0x150 [ 540.828659][T12393] should_fail_ex+0x412/0x560 [ 540.828688][T12393] _copy_from_user+0x2d/0xb0 [ 540.828706][T12393] ___sys_recvmsg+0x175/0x590 [ 540.828730][T12393] ? __pfx____sys_recvmsg+0x10/0x10 [ 540.828751][T12393] ? __fget_files+0x2a/0x420 [ 540.828795][T12393] do_recvmmsg+0x334/0x800 [ 540.828821][T12393] ? __pfx_do_recvmmsg+0x10/0x10 [ 540.828852][T12393] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 540.828881][T12393] __x64_sys_recvmmsg+0x198/0x250 [ 540.828904][T12393] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 540.828933][T12393] do_syscall_64+0xe2/0xf80 [ 540.828957][T12393] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.828974][T12393] ? trace_irq_disable+0x37/0x100 [ 540.828995][T12393] ? clear_bhb_loop+0x40/0x90 [ 540.829017][T12393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.829035][T12393] RIP: 0033:0x7fafdf59aeb9 [ 540.829053][T12393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 540.829067][T12393] RSP: 002b:00007fafe0507028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 540.829085][T12393] RAX: ffffffffffffffda RBX: 00007fafdf816090 RCX: 00007fafdf59aeb9 [ 540.829097][T12393] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 540.829107][T12393] RBP: 00007fafe0507090 R08: 0000000000000000 R09: 0000000000000000 [ 540.829116][T12393] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 540.829127][T12393] R13: 00007fafdf816128 R14: 00007fafdf816090 R15: 00007ffccebb3518 [ 540.829153][T12393] [ 540.884981][ T9] usb 1-1: USB disconnect, device number 53 [ 541.557260][T12482] input: syz1 as /devices/virtual/input/input102 [ 541.633664][T12485] No source specified [ 541.637912][T12486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2130'. [ 541.647570][T12486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2130'. [ 542.041926][T12499] openvswitch: netlink: EtherType 53b is less than min 600 [ 542.369075][ T9] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 542.520877][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.531913][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 542.542045][ T9] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 542.551116][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.561257][ T9] usb 1-1: config 0 descriptor?? [ 542.772670][T12504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.781445][T12504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.793874][ T5841] Bluetooth: hci4: unexpected event for opcode 0x0411 [ 542.794328][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 542.807590][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 542.819933][ T9] usb 1-1: USB disconnect, device number 54 [ 543.151874][ T9819] usb 2-1: USB disconnect, device number 53 [ 543.653426][ T9] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 543.820667][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.832470][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 543.855667][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 543.874127][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 543.892852][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.938588][ T9] usb 1-1: config 0 descriptor?? [ 544.397800][ T9] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 544.508004][ T9819] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 544.668989][ T9819] usb 3-1: Using ep0 maxpacket: 32 [ 544.703366][ T9819] usb 3-1: config 0 has an invalid interface number: 135 but max is 0 [ 544.712710][ T978] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 544.722712][ T9819] usb 3-1: config 0 has no interface number 0 [ 544.738851][ T9819] usb 3-1: config 0 interface 135 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 544.784926][ T9819] usb 3-1: New USB device found, idVendor=040b, idProduct=6521, bcdDevice=c3.6d [ 544.794347][ T9819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.811462][ T9819] usb 3-1: Product: syz [ 544.815685][ T9819] usb 3-1: Manufacturer: syz [ 544.834157][ T9819] usb 3-1: SerialNumber: syz [ 544.849002][ T9819] usb 3-1: config 0 descriptor?? [ 544.894410][ T978] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 544.904185][ T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.922303][ T978] usb 2-1: config 0 descriptor?? [ 545.084346][ T9819] xbox_remote_probe: Unexpected desc.bNumEndpoints: 2 [ 545.099701][ T9819] usb 3-1: USB disconnect, device number 28 [ 545.680179][ C1] plantronics 0003:047F:FFFF.0026: usb_submit_urb(ctrl) failed: -1 [ 545.941104][ T978] pegasus 2-1:0.0: probe with driver pegasus failed with error -71 [ 545.953227][ T978] usb 2-1: USB disconnect, device number 54 [ 546.469732][ T7853] usb 1-1: USB disconnect, device number 55 [ 546.486994][ T8428] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 546.648824][ T8428] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.660425][ T8428] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 546.671412][ T8428] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 546.680938][ T8428] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.691754][ T8428] usb 3-1: config 0 descriptor?? [ 546.826805][ T5841] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 546.837529][ T5841] Bluetooth: hci4: Injecting HCI hardware error event [ 546.845489][ T5841] Bluetooth: hci4: hardware error 0x00 [ 546.905624][ T8428] usbhid 3-1:0.0: can't add hid device: -71 [ 546.914292][ T8428] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 546.929363][ T8428] usb 3-1: USB disconnect, device number 29 [ 547.666328][ T9819] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 547.816270][ T9819] usb 3-1: Using ep0 maxpacket: 8 [ 547.823314][ T9819] usb 3-1: unable to get BOS descriptor or descriptor too short [ 547.831962][ T9819] usb 3-1: config 7 has an invalid interface number: 74 but max is 0 [ 547.840184][ T9819] usb 3-1: config 7 has an invalid descriptor of length 16, skipping remainder of the config [ 547.850445][ T9819] usb 3-1: config 7 has no interface number 0 [ 547.856609][ T9819] usb 3-1: config 7 interface 74 altsetting 179 has an endpoint descriptor with address 0x24, changing to 0x4 [ 547.868282][ T9819] usb 3-1: config 7 interface 74 altsetting 179 endpoint 0x4 has invalid maxpacket 1795, setting to 1024 [ 547.879595][ T9819] usb 3-1: config 7 interface 74 has no altsetting 0 [ 547.888406][ T9819] usb 3-1: New USB device found, idVendor=19d2, idProduct=1276, bcdDevice=f9.32 [ 547.897545][ T9819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.906035][ T9819] usb 3-1: Product: ᐥ [ 547.910298][ T9819] usb 3-1: Manufacturer: 緫蚔省睌꡽㗜庚䓺跁︓큓尔䖹甕緆鎵㺹㰌᳴튖届㨁锻留熒찬탚揙蹪츁 [ 547.922564][ T9819] usb 3-1: SerialNumber: syz [ 548.134300][ T9819] option 3-1:7.74: GSM modem (1-port) converter detected [ 548.149823][ T9819] usb 3-1: USB disconnect, device number 30 [ 548.160508][ T9819] option 3-1:7.74: device disconnected [ 548.729149][T12568] pic_ioport_write: 5153 callbacks suppressed [ 548.729161][T12568] kvm: pic: single mode not supported [ 548.735272][T12568] kvm: pic: level sensitive irq not supported [ 548.905861][ T5841] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 549.235564][ T8428] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 549.387060][ T8428] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 549.396177][ T8428] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.408006][ T8428] usb 1-1: config 0 descriptor?? [ 549.620004][T12573] netlink: 592 bytes leftover after parsing attributes in process `syz.2.2159'. [ 549.629393][T12573] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 549.848214][ T7853] IPVS: starting estimator thread 0... [ 549.936726][T12579] IPVS: using max 27 ests per chain, 64800 per kthread [ 550.145135][ T7853] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 550.165184][ T9] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 550.316631][ T7853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 550.327764][ T7853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 550.337760][ T7853] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 550.347127][ T7853] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.355934][ T9] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 550.366007][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.375607][ T7853] usb 2-1: config 0 descriptor?? [ 550.383711][ T9] usb 3-1: config 0 descriptor?? [ 550.443447][ T8428] pegasus 1-1:0.0: probe with driver pegasus failed with error -71 [ 550.454427][ T8428] usb 1-1: USB disconnect, device number 56 [ 550.551530][T12585] tipc: New replicast peer: 255.255.255.255 [ 550.558467][T12585] tipc: Enabled bearer , priority 10 [ 550.587551][ T7853] usbhid 2-1:0.0: can't add hid device: -71 [ 550.602008][ T7853] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 550.620356][ T7853] usb 2-1: USB disconnect, device number 55 [ 551.106755][T12598] syzkaller1: entered promiscuous mode [ 551.115207][T12598] syzkaller1: entered allmulticast mode [ 551.406809][ T9] pegasus 3-1:0.0: probe with driver pegasus failed with error -71 [ 551.426935][ T9] usb 3-1: USB disconnect, device number 31 [ 551.524437][ T5902] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 551.675692][ T5902] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 551.686004][ T5902] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 551.696672][ T5902] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 551.706010][ T5902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 551.714110][ T5902] usb 1-1: SerialNumber: syz [ 551.931228][ T5902] usb 1-1: 0:2 : does not exist [ 551.937233][ T5902] usb 1-1: unit 255 not found! [ 551.948530][ T5902] usb 1-1: 5:0: cannot get min/max values for control 1 (id 5) [ 551.960701][ T5902] usb 1-1: 5:0: cannot get min/max values for control 4 (id 5) [ 551.972798][ T5902] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 551.980510][T12606] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2171'. [ 551.980544][T12606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2171'. [ 551.981671][T12606] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2171'. [ 551.996240][ T5902] usb 1-1: 5:0: cannot get min/max values for control 8 (id 5) [ 552.000238][T12606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2171'. [ 552.029324][ T5902] usb 1-1: 5:0: cannot get min/max values for control 9 (id 5) [ 552.041082][ T5902] usb 1-1: 5:0: cannot get min/max values for control 12 (id 5) [ 552.053961][ T5902] usb 1-1: 5:0: cannot get min/max values for control 13 (id 5) [ 552.066664][ T5902] usb 1-1: 5:0: cannot get min/max values for control 16 (id 5) [ 552.113859][ T5902] usb 1-1: USB disconnect, device number 57 [ 552.149094][ T6112] udevd[6112]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 552.331650][T12614] kvm: pic: non byte write [ 552.413336][T12617] overlayfs: failed to resolve './file1': -2 [ 552.713945][ T9] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 552.733841][ T7853] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 552.863872][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 552.872122][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 552.881205][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.889337][ T9] usb 3-1: Product: syz [ 552.893540][ T9] usb 3-1: Manufacturer: syz [ 552.898446][ T9] usb 3-1: SerialNumber: syz [ 552.904186][ T7853] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 552.913218][ T7853] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.922926][ T9] usb 3-1: config 0 descriptor?? [ 552.931801][ T7853] usb 1-1: config 0 descriptor?? [ 553.131006][ T9] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 553.951193][ T7853] pegasus 1-1:0.0: probe with driver pegasus failed with error -71 [ 553.962216][ T7853] usb 1-1: USB disconnect, device number 58 [ 554.613017][ T978] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 554.722891][ T7853] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 554.764191][ T978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.775237][ T978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 554.785048][ T978] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 554.794189][ T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.804367][ T978] usb 2-1: config 0 descriptor?? [ 554.884643][ T7853] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.895676][ T7853] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 554.906016][ T7853] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 554.915115][ T7853] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.925436][ T7853] usb 1-1: config 0 descriptor?? [ 554.946151][ T9] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 554.956889][ T9] dvbdev: DVB: registering new adapter (Terratec H7) [ 554.963897][ T9] usb 3-1: media controller created [ 555.018422][ T978] usbhid 2-1:0.0: can't add hid device: -71 [ 555.024972][ T978] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 555.040146][ T978] usb 2-1: USB disconnect, device number 56 [ 555.060481][T12620] use of bytesused == 0 is deprecated and will be removed in the future, [ 555.070115][T12620] use the actual size instead. [ 555.079064][ T9] usb 3-1: dvb_usb_v2: MAC address: b1:e0:63:2b:95:d2 [ 555.094595][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 555.132859][ T9] DVB: Unable to find symbol drxk_attach() [ 555.158500][ T9] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -22 [ 555.290338][ T9] usb 3-1: USB disconnect, device number 32 [ 555.346550][ T7853] playstation 0003:054C:0DF2.0027: unknown main item tag 0x0 [ 555.354031][ T7853] playstation 0003:054C:0DF2.0027: unknown main item tag 0x0 [ 555.361408][ T7853] playstation 0003:054C:0DF2.0027: unknown main item tag 0x0 [ 555.368881][ T7853] playstation 0003:054C:0DF2.0027: unknown main item tag 0x0 [ 555.376696][ T7853] playstation 0003:054C:0DF2.0027: unknown main item tag 0x0 [ 555.386197][ T7853] playstation 0003:054C:0DF2.0027: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 555.946207][ T7853] playstation 0003:054C:0DF2.0027: Invalid gyro calibration data for axis (3), disabling calibration. [ 555.957364][ T7853] playstation 0003:054C:0DF2.0027: Invalid gyro calibration data for axis (4), disabling calibration. [ 555.968392][ T7853] playstation 0003:054C:0DF2.0027: Invalid gyro calibration data for axis (5), disabling calibration. [ 555.972245][ T978] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 555.979419][ T7853] playstation 0003:054C:0DF2.0027: Invalid accelerometer calibration data for axis (0), disabling calibration. [ 555.999052][ T7853] playstation 0003:054C:0DF2.0027: Invalid accelerometer calibration data for axis (1), disabling calibration. [ 556.010863][ T7853] playstation 0003:054C:0DF2.0027: Invalid accelerometer calibration data for axis (2), disabling calibration. [ 556.024482][ T7853] input: HID 054c:0df2 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:0DF2.0027/input/input103 [ 556.045507][ T7853] input: HID 054c:0df2 Motion Sensors as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:0DF2.0027/input/input104 [ 556.088954][ T7853] input: HID 054c:0df2 Touchpad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:0DF2.0027/input/input105 [ 556.132489][ T9819] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 556.141047][ T978] usb 2-1: Using ep0 maxpacket: 32 [ 556.153725][ T978] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 556.166356][ T7853] input: HID 054c:0df2 Headset Jack as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:0DF2.0027/input/input106 [ 556.187124][ T978] usb 2-1: config 0 has no interface number 0 [ 556.205295][ T978] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 556.228586][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.248542][ T978] usb 2-1: Product: syz [ 556.253185][ T978] usb 2-1: Manufacturer: syz [ 556.261132][ T978] usb 2-1: SerialNumber: syz [ 556.272559][ T7853] playstation 0003:054C:0DF2.0027: Registered DualSense controller hw_version=0x00000000 fw_version=0x00000000 [ 556.276418][ T978] usb 2-1: config 0 descriptor?? [ 556.290375][ T7853] usb 1-1: USB disconnect, device number 59 [ 556.308069][ T9819] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 556.317643][ T9819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.329186][ T978] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 556.340524][ T9819] usb 3-1: Product: syz [ 556.345540][ T9819] usb 3-1: Manufacturer: syz [ 556.350605][ T9819] usb 3-1: SerialNumber: syz [ 556.359055][ T9819] usb 3-1: config 0 descriptor?? [ 556.576930][ T9819] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 556.588074][ T978] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 556.601264][ T978] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 556.961758][T12652] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 557.000977][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 557.001324][ T7853] usb 2-1: USB disconnect, device number 57 [ 557.052471][ T7853] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 557.083262][ T7853] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 557.097208][ T7853] quatech2 2-1:0.51: device disconnected [ 557.271535][ T8428] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 557.423025][ T8428] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 557.432307][ T8428] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.443158][ T8428] usb 1-1: config 0 descriptor?? [ 557.851290][ T5903] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 558.004855][ T5903] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 558.014056][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.023199][ T5903] usb 2-1: Product: syz [ 558.027407][ T5903] usb 2-1: Manufacturer: syz [ 558.032158][ T5903] usb 2-1: SerialNumber: syz [ 558.447189][ T5903] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 558.459235][ T5903] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 558.473880][ T8428] pegasus 1-1:0.0: probe with driver pegasus failed with error -71 [ 558.485183][ T8428] usb 1-1: USB disconnect, device number 60 [ 558.873850][T12660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.882757][T12660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.910394][T12660] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2190'. [ 558.919567][T12660] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 559.016199][T12663] overlayfs: failed to resolve './file1': -2 [ 559.063977][ T4553] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 559.143548][ T9819] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 559.156498][ T9819] usb 3-1: USB disconnect, device number 33 [ 559.320564][ T29] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 559.470518][ T29] usb 1-1: Using ep0 maxpacket: 8 [ 559.478778][ T29] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 559.487979][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.495993][ T29] usb 1-1: Product: syz [ 559.500199][ T29] usb 1-1: Manufacturer: syz [ 559.504971][ T29] usb 1-1: SerialNumber: syz [ 559.511605][ T29] usb 1-1: config 0 descriptor?? [ 559.580457][ T8428] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 559.718769][ T29] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 559.730529][ T8428] usb 3-1: Using ep0 maxpacket: 8 [ 559.737545][ T8428] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 559.748897][ T8428] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 559.759056][ T8428] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 559.769150][ T8428] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 559.782666][ T8428] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 559.791768][ T8428] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.007947][ T8428] usb 3-1: GET_CAPABILITIES returned 0 [ 560.013623][ T8428] usbtmc 3-1:16.0: can't read capabilities [ 560.142710][T12660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.152322][T12660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.162396][ T5903] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000040. ret = -EPROTO [ 560.177402][ T5903] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 560.192740][ T5903] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 560.205512][ T5903] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 560.217185][ T5903] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 560.218330][T12674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.237349][ T5903] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 560.238214][T12674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.259555][ T5903] usb 2-1: USB disconnect, device number 58 [ 560.268518][ T8428] usb 3-1: USB disconnect, device number 34 [ 560.836378][T12686] fuse: Bad value for 'user_id' [ 560.841307][T12686] fuse: Bad value for 'user_id' [ 560.899494][T12690] random: crng reseeded on system resumption [ 560.930181][ T8428] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 560.976777][T12691] netlink: 580 bytes leftover after parsing attributes in process `syz.2.2200'. [ 561.091223][ T8428] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 561.102319][ T8428] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 561.112063][ T8428] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 561.125052][ T8428] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 561.134211][ T8428] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.144612][ T8428] usb 2-1: config 0 descriptor?? [ 561.532998][ T29] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 561.543786][ T29] dvbdev: DVB: registering new adapter (Terratec H7) [ 561.550818][ T29] usb 1-1: media controller created [ 561.560520][ T8428] plantronics 0003:047F:FFFF.0028: report_id 0 is invalid [ 561.568003][ T8428] plantronics 0003:047F:FFFF.0028: item 0 0 1 8 parsing failed [ 561.577140][ T8428] plantronics 0003:047F:FFFF.0028: parse failed [ 561.583985][ T8428] plantronics 0003:047F:FFFF.0028: probe with driver plantronics failed with error -22 [ 561.644716][ T29] usb 1-1: dvb_usb_v2: MAC address: b1:e0:63:2b:95:d2 [ 561.658327][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 561.693561][ T29] DVB: Unable to find symbol drxk_attach() [ 561.718112][ T29] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -22 [ 561.763175][ T8428] usb 2-1: USB disconnect, device number 59 [ 561.850839][ T29] usb 1-1: USB disconnect, device number 61 [ 562.420340][T12702] netlink: 'syz.1.2203': attribute type 39 has an invalid length. [ 563.256876][T12711] fuse: Bad value for 'user_id' [ 563.261907][T12711] fuse: Bad value for 'user_id' [ 563.324940][T12718] /dev/sg0: Can't lookup blockdev [ 563.337304][T12718] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2210'. [ 563.339576][T12717] FAULT_INJECTION: forcing a failure. [ 563.339576][T12717] name failslab, interval 1, probability 0, space 0, times 0 [ 563.361811][T12717] CPU: 0 UID: 0 PID: 12717 Comm: syz.0.2209 Tainted: G L syzkaller #0 PREEMPT(full) [ 563.361839][T12717] Tainted: [L]=SOFTLOCKUP [ 563.361846][T12717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 563.361857][T12717] Call Trace: [ 563.361864][T12717] [ 563.361873][T12717] dump_stack_lvl+0xe8/0x150 [ 563.361901][T12717] should_fail_ex+0x412/0x560 [ 563.361930][T12717] should_failslab+0xa8/0x100 [ 563.361958][T12717] ? __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 563.361982][T12717] kmem_cache_alloc_noprof+0x87/0x650 [ 563.362004][T12717] ? __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 563.362026][T12717] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 563.362054][T12717] __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 563.362089][T12717] mmu_topup_memory_caches+0x21/0x170 [ 563.362115][T12717] kvm_mmu_load+0x9d/0x22d0 [ 563.362141][T12717] ? vmx_set_intercept_for_msr+0x2ea/0x3e0 [ 563.362169][T12717] ? vmx_recalc_intercepts+0xed5/0x1b40 [ 563.362186][T12717] ? kvm_apic_has_interrupt+0x73c/0x770 [ 563.362210][T12717] ? kvm_deliver_exception_payload+0xcf/0x1f0 [ 563.362246][T12717] vcpu_run+0x5d81/0x7940 [ 563.362344][T12717] ? __pfx_vcpu_run+0x10/0x10 [ 563.362362][T12717] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 563.362383][T12717] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 563.362404][T12717] ? fpu_swap_kvm_fpstate+0xc1/0x4f0 [ 563.362432][T12717] ? __srcu_check_read_flavor+0x106/0x250 [ 563.362456][T12717] kvm_arch_vcpu_ioctl_run+0x11e6/0x20d0 [ 563.362490][T12717] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 563.362509][T12717] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 563.362531][T12717] ? __lock_acquire+0x6b5/0x2cf0 [ 563.362554][T12717] ? __mutex_lock+0x319/0x1300 [ 563.362579][T12717] ? kasan_quarantine_put+0xbb/0x1f0 [ 563.362615][T12717] ? do_raw_write_lock+0x11d/0x260 [ 563.362656][T12717] kvm_vcpu_ioctl+0xa62/0xfd0 [ 563.362683][T12717] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 563.362704][T12717] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 563.362742][T12717] ? __fget_files+0x2a/0x420 [ 563.362764][T12717] ? __fget_files+0x2a/0x420 [ 563.362782][T12717] ? __fget_files+0x3a0/0x420 [ 563.362801][T12717] ? __fget_files+0x2a/0x420 [ 563.362824][T12717] ? bpf_lsm_file_ioctl+0x9/0x20 [ 563.362843][T12717] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 563.362868][T12717] __se_sys_ioctl+0xfc/0x170 [ 563.362896][T12717] do_syscall_64+0xe2/0xf80 [ 563.362922][T12717] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.362939][T12717] ? trace_irq_disable+0x37/0x100 [ 563.362961][T12717] ? clear_bhb_loop+0x40/0x90 [ 563.362984][T12717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.363006][T12717] RIP: 0033:0x7f3d9679aeb9 [ 563.363023][T12717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 563.363038][T12717] RSP: 002b:00007f3d976c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 563.363056][T12717] RAX: ffffffffffffffda RBX: 00007f3d96a15fa0 RCX: 00007f3d9679aeb9 [ 563.363070][T12717] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 563.363080][T12717] RBP: 00007f3d976c7090 R08: 0000000000000000 R09: 0000000000000000 [ 563.363092][T12717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 563.363102][T12717] R13: 00007f3d96a16038 R14: 00007f3d96a15fa0 R15: 00007fff62f49248 [ 563.363133][T12717] [ 563.421000][T12718] syz.3.2210 (12718): drop_caches: 2 [ 563.540069][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 563.714208][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 563.726426][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 563.738537][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 563.750796][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 563.762955][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 563.775283][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 563.787462][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 563.799726][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 563.811856][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 564.297372][T12735] syzkaller1: entered allmulticast mode [ 564.518047][ T978] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 564.577240][T12743] fuse: Bad value for 'user_id' [ 564.591492][T12743] fuse: Bad value for 'user_id' [ 564.691032][ T978] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 564.705013][ T978] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 564.720579][ T978] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 564.735496][ T978] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 564.746145][ T978] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 564.757948][ T978] usb 2-1: Manufacturer: syz [ 564.775894][ T978] usb 2-1: config 0 descriptor?? [ 564.792181][ T978] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 564.869542][T12749] kvm: pic: single mode not supported [ 564.869563][T12749] kvm: pic: level sensitive irq not supported [ 564.875849][T12749] kvm: pic: non byte write [ 564.886573][ T29] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 564.897515][T12749] kvm: pic: single mode not supported [ 564.897532][T12749] kvm: pic: level sensitive irq not supported [ 564.904219][T12749] kvm: pic: non byte write [ 565.037650][ T29] usb 1-1: Using ep0 maxpacket: 32 [ 565.044717][ T29] usb 1-1: config 10 has an invalid interface number: 171 but max is 0 [ 565.054521][ T29] usb 1-1: config 10 has an invalid descriptor of length 0, skipping remainder of the config [ 565.085825][ T29] usb 1-1: config 10 has no interface number 0 [ 565.102406][ T29] usb 1-1: config 10 interface 171 has no altsetting 0 [ 565.116411][ T29] usb 1-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice=d0.8f [ 565.136170][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.156165][ T29] usb 1-1: Product: syz [ 565.166285][ T29] usb 1-1: Manufacturer: syz [ 565.172958][ T29] usb 1-1: SerialNumber: syz [ 565.787289][ T5903] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 565.950459][ T5903] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 565.962770][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 565.974572][ T5903] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 565.989095][ T5903] usb 3-1: language id specifier not provided by device, defaulting to English [ 566.004066][ T5903] usb 3-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 566.018399][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.026557][ T5903] usb 3-1: Manufacturer: ‰ [ 566.032842][ T5903] usb 3-1: SerialNumber: syz [ 566.043486][ T5903] usb 3-1: config 0 descriptor?? [ 566.059358][ T5903] em28xx 3-1:0.0: New device ‰ @ 480 Mbps (2013:0251, interface 0, class 0) [ 566.069602][ T5903] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 566.327569][ T5903] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 566.334376][ T5903] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 566.342108][ T5903] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 566.350964][ T5903] em28xx 3-1:0.0: No AC97 audio processor [ 566.376101][ T5903] usb 3-1: USB disconnect, device number 35 [ 566.401661][ T5903] em28xx 3-1:0.0: Disconnecting em28xx [ 566.431823][ T5903] em28xx 3-1:0.0: Freeing device [ 567.276228][ T5903] usb 2-1: USB disconnect, device number 60 [ 567.364568][T12765] ieee802154 phy0 wpan0: encryption failed: -22 [ 567.572571][T12767] ieee802154 phy0 wpan0: encryption failed: -22 [ 567.675433][ T29] s2255 1-1:10.171: Could not find bulk-in endpoint [ 567.709996][ T29] Sensoray 2255 driver load failed: 0xfffffff4 [ 567.729597][ T29] s2255 1-1:10.171: probe with driver s2255 failed with error -12 [ 567.771078][ T29] usb 1-1: USB disconnect, device number 63 [ 567.939342][T12775] fuse: Bad value for 'fd' [ 568.261272][ T29] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 568.449047][ T29] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 568.469517][ T29] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 568.491449][ T29] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 568.512065][ T29] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 568.532712][ T29] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 568.543104][ T5902] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 568.545856][ C0] net_ratelimit: 16772 callbacks suppressed [ 568.545874][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 568.556007][ T29] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 568.557018][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 568.590137][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 568.590289][ T29] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 568.602664][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 568.623717][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 568.636133][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 568.648181][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 568.649127][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 568.668110][ T29] usb 1-1: SerialNumber: syz [ 568.668480][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 568.684979][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 568.697291][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 568.724089][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.730723][ T5902] usb 2-1: Using ep0 maxpacket: 32 [ 568.739936][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.770042][ T5902] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 568.785734][ T5902] usb 2-1: config 0 has no interface number 0 [ 568.802124][ T5902] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 568.828463][ T5902] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 568.843533][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.862185][ T5902] usb 2-1: Product: syz [ 568.872298][ T5902] usb 2-1: Manufacturer: syz [ 568.878936][ T5902] usb 2-1: SerialNumber: syz [ 568.895462][ T5902] usb 2-1: config 0 descriptor?? [ 568.913845][T12779] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 568.926947][T12777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.947711][T12777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.958480][ T29] usb 1-1: USB disconnect, device number 64 [ 569.144240][T12779] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 570.355388][T12803] fuse: Bad value for 'fd' [ 570.614922][ T29] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 570.807078][ T29] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 570.824801][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.852977][ T29] usb 3-1: config 0 descriptor?? [ 571.687815][ T29] pegasus 3-1:0.0: probe with driver pegasus failed with error -71 [ 571.725686][ T29] usb 3-1: USB disconnect, device number 36 [ 571.829767][T12821] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 571.836325][T12821] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 571.846544][T12821] vhci_hcd vhci_hcd.0: Device attached [ 572.085296][ T29] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 572.163436][T12822] vhci_hcd: connection reset by peer [ 572.169891][T10772] vhci_hcd vhci_hcd.0: stop threads [ 572.176604][T10772] vhci_hcd vhci_hcd.0: release socket [ 572.182209][T10772] vhci_hcd vhci_hcd.0: disconnect device [ 572.198197][ T5902] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 572.209978][ T5902] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 572.222845][ T5902] asix 2-1:0.188: probe with driver asix failed with error -71 [ 572.253929][ T5902] usb 2-1: USB disconnect, device number 61 [ 572.826447][T12834] fuse: Bad value for 'fd' [ 573.553553][ C0] net_ratelimit: 15747 callbacks suppressed [ 573.553577][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 573.571839][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 573.584182][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 573.596585][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 573.608722][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 573.620979][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 573.633108][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 573.645375][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 573.657677][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 573.670001][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 573.682005][ T978] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 573.848194][ T978] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 573.863756][ T978] usb 2-1: config 0 has no interface number 0 [ 573.883308][ T978] usb 2-1: config 0 interface 41 has no altsetting 0 [ 573.895109][ T978] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 573.925920][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.956408][ T978] usb 2-1: Product: syz [ 573.960630][ T978] usb 2-1: Manufacturer: syz [ 573.985750][ T978] usb 2-1: SerialNumber: syz [ 574.000896][ T978] usb 2-1: config 0 descriptor?? [ 574.630647][ T978] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -22 [ 574.682920][ T9819] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 574.704342][T12873] netlink: 'syz.0.2262': attribute type 39 has an invalid length. [ 574.845059][ T5902] usb 2-1: USB disconnect, device number 62 [ 574.861456][ T9819] usb 3-1: Using ep0 maxpacket: 32 [ 574.883945][ T9819] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 574.928476][ T9819] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.958969][ T9819] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 574.982828][ T9819] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 575.008198][ T9819] usb 3-1: config 0 interface 0 has no altsetting 0 [ 575.018409][ T9819] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 575.029026][ T9819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.049564][ T9819] usb 3-1: config 0 descriptor?? [ 575.480505][ T9819] corsair-psu 0003:1B1C:1C09.0029: unknown main item tag 0x0 [ 575.492424][ T9819] corsair-psu 0003:1B1C:1C09.0029: unknown main item tag 0x0 [ 575.500019][ T9819] corsair-psu 0003:1B1C:1C09.0029: unknown main item tag 0x0 [ 575.508214][ T9819] corsair-psu 0003:1B1C:1C09.0029: unknown main item tag 0x0 [ 575.515996][ T9819] corsair-psu 0003:1B1C:1C09.0029: unknown main item tag 0x0 [ 575.538279][ T9819] corsair-psu 0003:1B1C:1C09.0029: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.2-1/input0 [ 575.629377][ T9819] corsair-psu 0003:1B1C:1C09.0029: unable to initialize device (-38) [ 575.686681][ T9819] corsair-psu 0003:1B1C:1C09.0029: probe with driver corsair-psu failed with error -38 [ 575.736318][ T9819] usb 3-1: USB disconnect, device number 37 [ 576.572005][ T9819] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 576.751793][ T9819] usb 2-1: Using ep0 maxpacket: 32 [ 576.765383][ T9819] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 576.784330][ T9819] usb 2-1: config 0 has no interface number 0 [ 576.805234][ T9819] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 576.835150][ T9819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.852279][ T9819] usb 2-1: Product: syz [ 576.861954][ T9819] usb 2-1: Manufacturer: syz [ 576.871953][ T9819] usb 2-1: SerialNumber: syz [ 576.884303][ T9819] usb 2-1: config 0 descriptor?? [ 576.906008][ T9819] smsc95xx v2.0.0 [ 576.939347][T12891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2269'. [ 577.114009][T12887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.134140][T12887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.222394][ T29] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 577.345777][ T9819] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 577.370568][ T9819] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 577.635227][T12903] netlink: 'syz.0.2275': attribute type 1 has an invalid length. [ 577.671985][T12903] netlink: 'syz.0.2275': attribute type 4 has an invalid length. [ 578.337252][ T9819] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 578.356867][ T9819] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 578.372513][ T9819] usb 2-1: USB disconnect, device number 63 [ 578.440962][ T29] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 578.561064][ C0] net_ratelimit: 4856 callbacks suppressed [ 578.561078][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 578.579715][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 578.592217][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 578.605086][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 578.617662][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 578.622804][ T29] usb 3-1: config 0 has an invalid interface number: 168 but max is 0 [ 578.630695][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 578.638563][ T29] usb 3-1: config 0 has no interface number 0 [ 578.650881][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 578.668909][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 578.680989][ T29] usb 3-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 578.681940][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 578.690059][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.703009][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 578.725793][ T29] usb 3-1: config 0 descriptor?? [ 578.963050][T12918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.994974][T12918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.079028][ T29] usb 3-1: string descriptor 0 read error: -71 [ 579.108331][ T29] usb-storage 3-1:0.168: USB Mass Storage device detected [ 579.166250][ T29] usb-storage 3-1:0.168: Quirks match for vid 05ab pid 0060: 2 [ 579.262091][ T29] usb 3-1: USB disconnect, device number 38 [ 579.554306][T12937] tipc: Started in network mode [ 579.559363][T12937] tipc: Node identity d6d5776e8804, cluster identity 4711 [ 579.567192][T12937] tipc: Enabled bearer , priority 0 [ 579.793218][T12937] syzkaller0: entered promiscuous mode [ 579.798843][T12937] syzkaller0: entered allmulticast mode [ 579.817580][T12937] tipc: Resetting bearer [ 579.858167][T12936] tipc: Resetting bearer [ 580.136019][T12949] tmpfs: Bad value for 'mpol' [ 580.550302][ T24] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 580.725481][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 580.746001][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 580.764147][ T24] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 580.780212][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.793796][ T24] usb 2-1: config 0 descriptor?? [ 580.898022][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 580.910352][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 580.942896][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 580.964235][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 580.980731][ T24] usb 2-1: media controller created [ 580.995608][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 581.031013][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 581.046254][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 581.078229][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input107 [ 581.134370][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 581.150517][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 581.174530][ T24] usb 2-1: USB disconnect, device number 64 [ 581.246960][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 581.355567][ T30] audit: type=1326 audit(6060840751.897:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12953 comm="syz.1.2291" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ca0f9aeb9 code=0x0 [ 582.047209][T12965] binder: BINDER_SET_CONTEXT_MGR already set [ 582.059173][T12965] binder: 12964:12965 ioctl 4018620d 200000000100 returned -16 [ 582.071731][T12965] binder: BINDER_SET_CONTEXT_MGR already set [ 582.092313][T12965] binder: 12964:12965 ioctl 4018620d 2000000002c0 returned -16 [ 583.568473][ C0] net_ratelimit: 4458 callbacks suppressed [ 583.568497][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 583.587106][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 583.599645][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 583.612662][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 583.625838][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 583.638841][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 583.651994][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 583.665146][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 583.678335][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 583.679425][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 585.028683][ T5903] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 585.115995][T12936] tipc: Disabling bearer [ 585.148788][ T29] tipc: Node number set to 1590785902 [ 585.197901][ T5903] usb 2-1: Using ep0 maxpacket: 8 [ 585.212223][ T5903] usb 2-1: unable to get BOS descriptor or descriptor too short [ 585.232594][ T5903] usb 2-1: config 7 has an invalid interface number: 60 but max is 0 [ 585.247957][ T5903] usb 2-1: config 7 has no interface number 0 [ 585.262030][ T5903] usb 2-1: config 7 interface 60 has no altsetting 0 [ 585.293165][ T5903] usb 2-1: New USB device found, idVendor=05ac, idProduct=0217, bcdDevice=75.54 [ 585.329668][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.357079][ T5903] usb 2-1: Product: syz [ 585.377342][ T5903] usb 2-1: Manufacturer: syz [ 585.390777][ T5903] usb 2-1: SerialNumber: syz [ 585.430358][T12990] ALSA: mixer_oss: invalid OSS volume '' [ 585.547623][ T29] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 585.617057][T12996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2304'. [ 585.684883][ T5903] appletouch 2-1:7.60: Could not find int-in endpoint [ 585.692114][ T5903] appletouch 2-1:7.60: probe with driver appletouch failed with error -5 [ 585.702277][ T5903] usbhid 2-1:7.60: couldn't find an input interrupt endpoint [ 585.717873][ T5903] usb 2-1: USB disconnect, device number 65 [ 585.734116][ T29] usb 3-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=43.6f [ 585.754330][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.780733][ T29] usb 3-1: Product: syz [ 585.795982][ T29] usb 3-1: Manufacturer: syz [ 585.802708][ T29] usb 3-1: SerialNumber: syz [ 585.810427][ T29] usb 3-1: config 0 descriptor?? [ 585.824787][ T29] gspca_main: touptek-2.14.0 probing 0547:6801 [ 585.888323][ T24] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 586.039387][T12985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.048584][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 586.055798][ T24] usb 1-1: config 0 has an invalid interface number: 239 but max is 0 [ 586.064253][T12985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.074641][ T24] usb 1-1: config 0 has no interface number 0 [ 586.084313][ T24] usb 1-1: config 0 interface 239 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 32 [ 586.100596][ T24] usb 1-1: config 0 interface 239 has no altsetting 0 [ 586.110391][ T24] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0005, bcdDevice=ab.3c [ 586.120589][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.131592][ T24] usb 1-1: Product: syz [ 586.135870][ T24] usb 1-1: Manufacturer: syz [ 586.141045][ T24] usb 1-1: SerialNumber: syz [ 586.148969][ T24] usb 1-1: config 0 descriptor?? [ 586.160533][T12996] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 586.171880][ T24] ati_remote 1-1:0.239: ati_remote_probe: Unexpected endpoint_in [ 586.271868][T12984] process '/newroot/530/file0' started with executable stack [ 586.290352][ T24] usb 3-1: USB disconnect, device number 39 [ 586.373126][ T29] usb 1-1: USB disconnect, device number 65 [ 586.497947][ T5903] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 586.582751][T13004] comedi comedi3: das16m1: I/O port conflict (0x4e27,16) [ 586.657142][ T5903] usb 2-1: Using ep0 maxpacket: 32 [ 586.664422][ T5903] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 219 [ 586.690361][ T5903] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 586.716414][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.732296][ T5903] usb 2-1: Product: syz [ 586.736508][ T5903] usb 2-1: Manufacturer: syz [ 586.742822][ T5903] usb 2-1: SerialNumber: syz [ 586.751780][ T5903] usb 2-1: config 0 descriptor?? [ 586.762133][T12999] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 586.773555][ T5903] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 586.967158][T13010] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.2310' resets device [ 586.990568][T13010] FAULT_INJECTION: forcing a failure. [ 586.990568][T13010] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 587.006938][T13010] CPU: 1 UID: 0 PID: 13010 Comm: syz.0.2310 Tainted: G L syzkaller #0 PREEMPT(full) [ 587.006974][T13010] Tainted: [L]=SOFTLOCKUP [ 587.006981][T13010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 587.006995][T13010] Call Trace: [ 587.007003][T13010] [ 587.007011][T13010] dump_stack_lvl+0xe8/0x150 [ 587.007039][T13010] should_fail_ex+0x412/0x560 [ 587.007067][T13010] _copy_to_user+0x31/0xb0 [ 587.007087][T13010] simple_read_from_buffer+0xe1/0x170 [ 587.007112][T13010] proc_fail_nth_read+0x1bb/0x230 [ 587.007140][T13010] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 587.007169][T13010] ? rw_verify_area+0x2a6/0x4d0 [ 587.007191][T13010] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 587.007217][T13010] vfs_read+0x20c/0xa70 [ 587.007239][T13010] ? fdget_pos+0x246/0x320 [ 587.007264][T13010] ? __pfx___mutex_lock+0x10/0x10 [ 587.007283][T13010] ? __pfx_vfs_read+0x10/0x10 [ 587.007306][T13010] ? __fget_files+0x2a/0x420 [ 587.007331][T13010] ? __fget_files+0x3a0/0x420 [ 587.007350][T13010] ? __fget_files+0x2a/0x420 [ 587.007378][T13010] ksys_read+0x150/0x270 [ 587.007404][T13010] ? __pfx_ksys_read+0x10/0x10 [ 587.007438][T13010] do_syscall_64+0xe2/0xf80 [ 587.007464][T13010] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.007482][T13010] ? trace_irq_disable+0x37/0x100 [ 587.007503][T13010] ? clear_bhb_loop+0x40/0x90 [ 587.007526][T13010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.007544][T13010] RIP: 0033:0x7f3d9675b78e [ 587.007562][T13010] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 587.007576][T13010] RSP: 002b:00007f3d976c6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 587.007596][T13010] RAX: ffffffffffffffda RBX: 00007f3d976c76c0 RCX: 00007f3d9675b78e [ 587.007609][T13010] RDX: 000000000000000f RSI: 00007f3d976c70a0 RDI: 0000000000000004 [ 587.007620][T13010] RBP: 00007f3d976c7090 R08: 0000000000000000 R09: 0000000000000000 [ 587.007632][T13010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 587.007643][T13010] R13: 00007f3d96a16038 R14: 00007f3d96a15fa0 R15: 00007fff62f49248 [ 587.007672][T13010] [ 587.233594][ T29] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 587.317489][ T5903] usb 2-1: USB disconnect, device number 66 [ 587.383648][ T6105] udevd[6105]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 587.399841][ T29] usb 3-1: device descriptor read/64, error -71 [ 587.648083][ T29] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 587.771360][T13016] FAULT_INJECTION: forcing a failure. [ 587.771360][T13016] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 587.785131][T13016] CPU: 1 UID: 0 PID: 13016 Comm: syz.0.2313 Tainted: G L syzkaller #0 PREEMPT(full) [ 587.785160][T13016] Tainted: [L]=SOFTLOCKUP [ 587.785166][T13016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 587.785178][T13016] Call Trace: [ 587.785185][T13016] [ 587.785193][T13016] dump_stack_lvl+0xe8/0x150 [ 587.785222][T13016] should_fail_ex+0x412/0x560 [ 587.785249][T13016] prepare_alloc_pages+0x22a/0x650 [ 587.785282][T13016] __alloc_frozen_pages_noprof+0x12f/0x380 [ 587.785312][T13016] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 587.785341][T13016] ? __pfx_policy_nodemask+0x10/0x10 [ 587.785368][T13016] ? __free_frozen_pages+0x6d9/0xd80 [ 587.785398][T13016] alloc_pages_mpol+0x232/0x4a0 [ 587.785429][T13016] alloc_migration_target_by_mpol+0x2e4/0x5e0 [ 587.785459][T13016] migrate_pages_batch+0x9e7/0x4d80 [ 587.785477][T13016] ? unwind_next_frame+0xa5/0x23c0 [ 587.785512][T13016] ? migrate_pages_batch+0x16e1/0x4d80 [ 587.785535][T13016] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 587.785559][T13016] ? is_bpf_text_address+0x26/0x2b0 [ 587.785591][T13016] ? __pfx_migrate_pages_batch+0x10/0x10 [ 587.785610][T13016] ? kernel_text_address+0xa5/0xe0 [ 587.785636][T13016] ? __kernel_text_address+0xd/0x30 [ 587.785660][T13016] ? unwind_get_return_address+0x4d/0x90 [ 587.785683][T13016] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 587.785707][T13016] ? arch_stack_walk+0xfb/0x150 [ 587.785738][T13016] ? __mpol_dup+0x79/0x330 [ 587.785756][T13016] ? stack_trace_save+0xa9/0x100 [ 587.785779][T13016] ? __pfx_stack_trace_save+0x10/0x10 [ 587.785805][T13016] ? __mpol_dup+0x79/0x330 [ 587.785826][T13016] ? __pfx_remove_migration_pte+0x10/0x10 [ 587.785845][T13016] ? kasan_save_track+0x4f/0x80 [ 587.785866][T13016] ? kasan_save_track+0x3e/0x80 [ 587.785886][T13016] ? __kasan_slab_alloc+0x6c/0x80 [ 587.785910][T13016] ? mbind_range+0x3c8/0x800 [ 587.785927][T13016] ? __se_sys_mbind+0xad4/0x10f0 [ 587.785959][T13016] migrate_pages+0x20e0/0x29c0 [ 587.785993][T13016] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 587.786020][T13016] ? __pfx_migrate_pages+0x10/0x10 [ 587.786046][T13016] ? current_cpuset_is_being_rebound+0x1d/0x300 [ 587.786072][T13016] ? current_cpuset_is_being_rebound+0x1d/0x300 [ 587.786095][T13016] ? current_cpuset_is_being_rebound+0x1d/0x300 [ 587.786147][T13016] __se_sys_mbind+0xe89/0x10f0 [ 587.786182][T13016] ? __pfx___se_sys_mbind+0x10/0x10 [ 587.786214][T13016] ? fput+0xa0/0xd0 [ 587.786232][T13016] ? ksys_write+0x242/0x270 [ 587.786256][T13016] ? __pfx_ksys_write+0x10/0x10 [ 587.786282][T13016] ? __x64_sys_mbind+0x21/0xf0 [ 587.786307][T13016] do_syscall_64+0xe2/0xf80 [ 587.786332][T13016] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.786349][T13016] ? trace_irq_disable+0x37/0x100 [ 587.786370][T13016] ? clear_bhb_loop+0x40/0x90 [ 587.786392][T13016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.786409][T13016] RIP: 0033:0x7f3d9679aeb9 [ 587.786425][T13016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 587.786440][T13016] RSP: 002b:00007f3d976c7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 587.786460][T13016] RAX: ffffffffffffffda RBX: 00007f3d96a15fa0 RCX: 00007f3d9679aeb9 [ 587.786473][T13016] RDX: 0000000000000004 RSI: 0000000000800000 RDI: 0000200000001000 [ 587.786485][T13016] RBP: 00007f3d976c7090 R08: 0000000000000000 R09: 0000000000000002 [ 587.786496][T13016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 587.786507][T13016] R13: 00007f3d96a16038 R14: 00007f3d96a15fa0 R15: 00007fff62f49248 [ 587.786535][T13016] [ 588.149376][ T29] usb 3-1: device descriptor read/64, error -71 [ 588.260218][ T29] usb usb3-port1: attempt power cycle [ 588.446002][ T6011] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 588.575986][ C0] net_ratelimit: 4728 callbacks suppressed [ 588.576004][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 588.594734][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 588.607320][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 588.615964][ T29] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 588.620404][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 588.626983][ T5903] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 588.639883][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 588.658632][ T6011] usb 2-1: Using ep0 maxpacket: 8 [ 588.659777][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 588.676757][ T29] usb 3-1: device descriptor read/8, error -71 [ 588.676864][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 588.684253][ T6011] usb 2-1: config 53 has an invalid interface number: 101 but max is 0 [ 588.696144][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 588.715531][ T6011] usb 2-1: config 53 has an invalid descriptor of length 0, skipping remainder of the config [ 588.716770][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 588.726793][ T6011] usb 2-1: config 53 has no interface number 0 [ 588.738868][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 588.745235][ T6011] usb 2-1: config 53 interface 101 altsetting 0 has an endpoint descriptor with address 0xC2, changing to 0x82 [ 588.797027][ T6011] usb 2-1: config 53 interface 101 altsetting 0 endpoint 0x82 has invalid maxpacket 33307, setting to 1024 [ 588.826440][ T6011] usb 2-1: config 53 interface 101 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 588.845716][ T6011] usb 2-1: config 53 interface 101 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 32 [ 588.855944][ T5903] usb 1-1: Using ep0 maxpacket: 32 [ 588.862104][ T5903] usb 1-1: too many configurations: 87, using maximum allowed: 8 [ 588.880021][ T5903] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 588.894535][ T5903] usb 1-1: can't read configurations, error -61 [ 588.903432][ T6011] usb 2-1: New USB device found, idVendor=0bfd, idProduct=011b, bcdDevice=33.a1 [ 588.923745][ T6011] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.935514][ T29] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 588.952472][ T6011] usb 2-1: Product: syz [ 588.965629][ T6011] usb 2-1: Manufacturer: syz [ 588.970383][ T6011] usb 2-1: SerialNumber: syz [ 588.976401][ T29] usb 3-1: device descriptor read/8, error -71 [ 589.012136][T13018] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 589.019926][T13018] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 589.065699][ T5903] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 589.096130][ T29] usb usb3-port1: unable to enumerate USB device [ 589.225529][ T5903] usb 1-1: Using ep0 maxpacket: 32 [ 589.236579][ T5903] usb 1-1: too many configurations: 87, using maximum allowed: 8 [ 589.259427][ T5903] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 589.287135][ T5903] usb 1-1: can't read configurations, error -61 [ 589.311517][ T5903] usb usb1-port1: attempt power cycle [ 589.410281][T13030] IPVS: length: 156 != 8 [ 589.460577][ T6011] kvaser_usb 2-1:53.101: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 589.497441][ T6011] kvaser_usb 2-1:53.101: error -EPROTO: Failed to initialize card [ 589.527560][ T6011] kvaser_usb 2-1:53.101: probe with driver kvaser_usb failed with error -71 [ 589.577652][ T6011] usb 2-1: USB disconnect, device number 67 [ 589.695428][ T5903] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 589.739605][ T5903] usb 1-1: Using ep0 maxpacket: 32 [ 589.767412][ T5903] usb 1-1: too many configurations: 87, using maximum allowed: 8 [ 589.796466][ T5903] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 589.831449][ T5903] usb 1-1: can't read configurations, error -61 [ 589.985295][ T5903] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 590.037965][ T5903] usb 1-1: Using ep0 maxpacket: 32 [ 590.050338][ T5903] usb 1-1: too many configurations: 87, using maximum allowed: 8 [ 590.091422][ T5903] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 590.110747][ T5903] usb 1-1: can't read configurations, error -61 [ 590.129774][ T5903] usb usb1-port1: unable to enumerate USB device [ 590.405536][ T5903] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 590.571478][ T5903] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 590.581790][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.593171][ T5903] usb 2-1: config 0 descriptor?? [ 591.014912][ T6011] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 591.044803][T10771] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 591.187327][ T6011] usb 3-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 591.199302][ T6011] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.215723][ T6011] usb 3-1: config 0 descriptor?? [ 591.639112][ T6011] kye 0003:0458:0138.002A: unknown main item tag 0x5 [ 591.664726][ T6011] kye 0003:0458:0138.002A: hidraw0: USB HID v0.00 Device [HID 0458:0138] on usb-dummy_hcd.2-1/input0 [ 591.678453][ T5902] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 591.841567][ T5903] pegasus 2-1:0.0: can't reset MAC [ 591.849833][T13053] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 591.860862][ T5903] pegasus 2-1:0.0: probe with driver pegasus failed with error -5 [ 591.869009][ T5902] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 591.880888][T13053] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 591.891617][ T5902] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 591.911186][ T5903] usb 2-1: USB disconnect, device number 68 [ 591.937978][ T5902] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 591.960589][T13053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2329'. [ 591.977257][ T5902] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 591.989346][ T5902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.007861][ T5902] usb 1-1: config 0 descriptor?? [ 592.017875][ T6011] usb 3-1: USB disconnect, device number 44 [ 592.660567][ T5902] plantronics 0003:047F:FFFF.002B: report_id 0 is invalid [ 592.678505][ T5902] plantronics 0003:047F:FFFF.002B: item 0 0 1 8 parsing failed [ 592.697640][ T5902] plantronics 0003:047F:FFFF.002B: parse failed [ 592.711783][ T5902] plantronics 0003:047F:FFFF.002B: probe with driver plantronics failed with error -22 [ 592.873775][ T978] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 592.895174][ T5903] usb 1-1: USB disconnect, device number 70 [ 592.943711][ T5902] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 593.043700][ T978] usb 2-1: Using ep0 maxpacket: 32 [ 593.050995][ T978] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 593.063188][ T978] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 593.072777][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.085142][ T978] usb 2-1: Product: syz [ 593.090644][ T978] usb 2-1: Manufacturer: syz [ 593.095474][ T5902] usb 3-1: Using ep0 maxpacket: 16 [ 593.101756][ T978] usb 2-1: SerialNumber: syz [ 593.108187][ T5902] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 593.120333][ T978] usb 2-1: config 0 descriptor?? [ 593.127717][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.157678][ T5902] usb 3-1: config 0 descriptor?? [ 593.177878][ T5902] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 593.352412][ T5903] usb 2-1: USB disconnect, device number 69 [ 593.498261][T13067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2333'. [ 593.583615][ C0] net_ratelimit: 4544 callbacks suppressed [ 593.583631][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 593.602699][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 593.615827][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 593.629012][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 593.642488][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 593.655666][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 593.668831][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 593.681984][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 593.695210][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 593.696780][T13073] openvswitch: netlink: Invalid VLAN frame [ 593.794587][T13069] syz.0.2336 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 593.812532][T13066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.831764][T13066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.491408][ T5902] gspca_sonixj: reg_w1 err -71 [ 594.523009][ T5902] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 594.541418][ T5902] usb 3-1: USB disconnect, device number 45 [ 594.563179][ T5903] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 594.602906][ T978] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 594.723392][ T5903] usb 2-1: Using ep0 maxpacket: 8 [ 594.730603][ T5903] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 594.744259][ T5903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 594.756107][ T5903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 594.766319][ T5903] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 594.777032][ T978] usb 1-1: Using ep0 maxpacket: 32 [ 594.783321][ T5903] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 594.801202][ T5903] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 594.811947][ T978] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 594.827180][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.835623][ T978] usb 1-1: config 0 has no interface number 0 [ 594.841730][ T978] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 594.855198][ T5903] usb 2-1: config 0 descriptor?? [ 594.875135][ T978] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 594.895212][ T978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.907459][ T978] usb 1-1: Product: syz [ 594.911660][ T978] usb 1-1: Manufacturer: syz [ 594.916831][ T978] usb 1-1: SerialNumber: syz [ 594.928317][ T978] usb 1-1: config 0 descriptor?? [ 594.945940][T13088] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 595.067809][ T5903] usb 2-1: USB disconnect, device number 70 [ 595.162585][T13088] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 595.986472][T13100] FAULT_INJECTION: forcing a failure. [ 595.986472][T13100] name failslab, interval 1, probability 0, space 0, times 0 [ 596.000459][T13100] CPU: 1 UID: 0 PID: 13100 Comm: syz.1.2348 Tainted: G L syzkaller #0 PREEMPT(full) [ 596.000487][T13100] Tainted: [L]=SOFTLOCKUP [ 596.000498][T13100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 596.000509][T13100] Call Trace: [ 596.000517][T13100] [ 596.000525][T13100] dump_stack_lvl+0xe8/0x150 [ 596.000554][T13100] should_fail_ex+0x412/0x560 [ 596.000582][T13100] should_failslab+0xa8/0x100 [ 596.000608][T13100] ? alloc_pid+0x1a3/0x12b0 [ 596.000631][T13100] kmem_cache_alloc_noprof+0x87/0x650 [ 596.000653][T13100] ? __pfx___mutex_trylock_common+0x10/0x10 [ 596.000685][T13100] alloc_pid+0x1a3/0x12b0 [ 596.000715][T13100] ? __pfx_alloc_pid+0x10/0x10 [ 596.000750][T13100] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 596.000768][T13100] ? lockdep_hardirqs_on+0x7a/0x110 [ 596.000793][T13100] ? fpu_clone+0x347/0xb70 [ 596.000828][T13100] ? __asan_memcpy+0x40/0x70 [ 596.000851][T13100] ? copy_thread+0x74b/0x9a0 [ 596.000880][T13100] copy_process+0x1b39/0x3cf0 [ 596.000913][T13100] ? copy_process+0x921/0x3cf0 [ 596.000946][T13100] ? __pfx_copy_process+0x10/0x10 [ 596.000976][T13100] ? mutex_init_lockep+0xf9/0x130 [ 596.001000][T13100] vhost_task_create+0x1f9/0x380 [ 596.001025][T13100] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 596.001050][T13100] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 596.001083][T13100] ? __pfx_vhost_task_create+0x10/0x10 [ 596.001116][T13100] ? __pfx_vhost_task_fn+0x10/0x10 [ 596.001145][T13100] ? __lock_acquire+0x6b5/0x2cf0 [ 596.001168][T13100] ? kasan_save_track+0x4f/0x80 [ 596.001190][T13100] ? kasan_save_track+0x3e/0x80 [ 596.001211][T13100] ? kasan_save_free_info+0x46/0x50 [ 596.001229][T13100] ? __kasan_slab_free+0x5c/0x80 [ 596.001252][T13100] ? kfree+0x1c1/0x610 [ 596.001275][T13100] kvm_mmu_post_init_vm+0x14c/0x300 [ 596.001305][T13100] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 596.001333][T13100] ? __mutex_trylock_common+0x158/0x260 [ 596.001356][T13100] ? look_up_lock_class+0x57/0x110 [ 596.001381][T13100] ? register_lock_class+0x31/0x2e0 [ 596.001400][T13100] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 596.001421][T13100] ? __lock_acquire+0x6b5/0x2cf0 [ 596.001443][T13100] ? __mutex_lock+0x319/0x1300 [ 596.001467][T13100] ? kasan_quarantine_put+0xbb/0x1f0 [ 596.001503][T13100] ? do_raw_write_lock+0x11d/0x260 [ 596.001544][T13100] kvm_vcpu_ioctl+0xa62/0xfd0 [ 596.001576][T13100] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 596.001598][T13100] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 596.001635][T13100] ? __fget_files+0x2a/0x420 [ 596.001658][T13100] ? __fget_files+0x2a/0x420 [ 596.001677][T13100] ? __fget_files+0x3a0/0x420 [ 596.001696][T13100] ? __fget_files+0x2a/0x420 [ 596.001719][T13100] ? bpf_lsm_file_ioctl+0x9/0x20 [ 596.001737][T13100] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 596.001762][T13100] __se_sys_ioctl+0xfc/0x170 [ 596.001791][T13100] do_syscall_64+0xe2/0xf80 [ 596.001816][T13100] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.001833][T13100] ? trace_irq_disable+0x37/0x100 [ 596.001854][T13100] ? clear_bhb_loop+0x40/0x90 [ 596.001876][T13100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.001894][T13100] RIP: 0033:0x7f9ca0f9aeb9 [ 596.001911][T13100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 596.001927][T13100] RSP: 002b:00007f9ca1db8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 596.001946][T13100] RAX: ffffffffffffffda RBX: 00007f9ca1215fa0 RCX: 00007f9ca0f9aeb9 [ 596.001959][T13100] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 596.001970][T13100] RBP: 00007f9ca1db8090 R08: 0000000000000000 R09: 0000000000000000 [ 596.001982][T13100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 596.001993][T13100] R13: 00007f9ca1216038 R14: 00007f9ca1215fa0 R15: 00007ffd196298d8 [ 596.002023][T13100] [ 596.452068][ T5903] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 596.592121][ T5903] usb 3-1: device descriptor read/64, error -71 [ 596.851913][ T5903] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 597.001748][ T5903] usb 3-1: device descriptor read/64, error -71 [ 597.122096][ T5903] usb usb3-port1: attempt power cycle [ 597.353128][T13111] FAULT_INJECTION: forcing a failure. [ 597.353128][T13111] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 597.383409][T13111] CPU: 1 UID: 0 PID: 13111 Comm: syz.3.2351 Tainted: G L syzkaller #0 PREEMPT(full) [ 597.383438][T13111] Tainted: [L]=SOFTLOCKUP [ 597.383445][T13111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 597.383456][T13111] Call Trace: [ 597.383463][T13111] [ 597.383472][T13111] dump_stack_lvl+0xe8/0x150 [ 597.383501][T13111] should_fail_ex+0x412/0x560 [ 597.383529][T13111] prepare_alloc_pages+0x22a/0x650 [ 597.383562][T13111] __alloc_frozen_pages_noprof+0x12f/0x380 [ 597.383593][T13111] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 597.383622][T13111] ? __pfx_policy_nodemask+0x10/0x10 [ 597.383650][T13111] ? stack_trace_save+0xa9/0x100 [ 597.383675][T13111] ? __pfx_stack_trace_save+0x10/0x10 [ 597.383711][T13111] alloc_pages_mpol+0x232/0x4a0 [ 597.383741][T13111] alloc_pages_noprof+0xa8/0x190 [ 597.383761][T13111] __pud_alloc+0x3a/0x6e0 [ 597.383789][T13111] handle_mm_fault+0x2040/0x3310 [ 597.383810][T13111] ? mt_find+0x186/0x630 [ 597.383837][T13111] ? mt_find+0x186/0x630 [ 597.383853][T13111] ? handle_mm_fault+0xee/0x3310 [ 597.383872][T13111] ? __pfx_mt_find+0x10/0x10 [ 597.383895][T13111] ? __pfx_handle_mm_fault+0x10/0x10 [ 597.383939][T13111] __get_user_pages+0x165b/0x29d0 [ 597.383990][T13111] get_user_pages_remote+0x2f6/0xab0 [ 597.384020][T13111] ? __pfx_get_user_pages_remote+0x10/0x10 [ 597.384039][T13111] ? mmap_read_lock_maybe_expand+0xb0/0x3a0 [ 597.384066][T13111] ? mmap_read_lock_maybe_expand+0xc6/0x3a0 [ 597.384094][T13111] copy_string_kernel+0x2f9/0x5f0 [ 597.384128][T13111] ? __pfx_copy_string_kernel+0x10/0x10 [ 597.384154][T13111] ? alloc_bprm+0x508/0x5c0 [ 597.384175][T13111] ? count+0x1cb/0x230 [ 597.384200][T13111] do_execveat_common+0x38b/0x690 [ 597.384233][T13111] __x64_sys_execveat+0xc7/0xf0 [ 597.384259][T13111] do_syscall_64+0xe2/0xf80 [ 597.384284][T13111] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.384302][T13111] ? trace_irq_disable+0x37/0x100 [ 597.384323][T13111] ? clear_bhb_loop+0x40/0x90 [ 597.384345][T13111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.384363][T13111] RIP: 0033:0x7ff5f459aeb9 [ 597.384381][T13111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.384395][T13111] RSP: 002b:00007ff5f5487028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 597.384415][T13111] RAX: ffffffffffffffda RBX: 00007ff5f4816090 RCX: 00007ff5f459aeb9 [ 597.384429][T13111] RDX: 0000000000000000 RSI: 0000200000001400 RDI: ffffffffffffff9c [ 597.384441][T13111] RBP: 00007ff5f5487090 R08: 0000000000000000 R09: 0000000000000000 [ 597.384453][T13111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 597.384464][T13111] R13: 00007ff5f4816128 R14: 00007ff5f4816090 R15: 00007ffcb89b3948 [ 597.384494][T13111] [ 597.761364][ T5903] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 597.782004][ T5903] usb 3-1: device descriptor read/8, error -71 [ 598.041210][ T5903] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 598.082084][ T5903] usb 3-1: device descriptor read/8, error -71 [ 598.202456][ T5903] usb usb3-port1: unable to enumerate USB device [ 598.591870][ C0] net_ratelimit: 4469 callbacks suppressed [ 598.591889][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 598.610889][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 598.624152][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 598.637681][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 598.650935][ T5903] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 598.650989][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 598.671650][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 598.684776][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 598.697941][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 598.711172][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 598.714234][ T978] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 598.724297][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 598.759979][ T978] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 598.814597][ T978] asix 1-1:0.188: probe with driver asix failed with error -71 [ 598.822536][ T5903] usb 2-1: device descriptor read/64, error -71 [ 598.874354][ T978] usb 1-1: USB disconnect, device number 71 [ 599.059371][T13119] FAULT_INJECTION: forcing a failure. [ 599.059371][T13119] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 599.087894][ T5903] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 599.121701][T13119] CPU: 1 UID: 0 PID: 13119 Comm: syz.3.2353 Tainted: G L syzkaller #0 PREEMPT(full) [ 599.121729][T13119] Tainted: [L]=SOFTLOCKUP [ 599.121736][T13119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 599.121748][T13119] Call Trace: [ 599.121756][T13119] [ 599.121765][T13119] dump_stack_lvl+0xe8/0x150 [ 599.121795][T13119] should_fail_ex+0x412/0x560 [ 599.121825][T13119] __kvm_read_guest_page+0x18d/0x240 [ 599.121858][T13119] kvm_fetch_guest_virt+0x12b/0x170 [ 599.121884][T13119] ? __pfx_kvm_fetch_guest_virt+0x10/0x10 [ 599.121907][T13119] __do_insn_fetch_bytes+0x31c/0x700 [ 599.121931][T13119] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 599.121955][T13119] ? vmx_read_guest_seg_base+0x38f/0x580 [ 599.121987][T13119] x86_decode_insn+0x38e/0x5df0 [ 599.122013][T13119] ? kvm_vcpu_write_guest+0x179/0x1b0 [ 599.122044][T13119] ? emulator_write_std+0x1c2/0x1f0 [ 599.122079][T13119] ? __pfx_x86_decode_insn+0x10/0x10 [ 599.122094][T13119] ? vmx_read_guest_seg_ar+0x38f/0x5b0 [ 599.122128][T13119] ? vmx_read_guest_seg_ar+0x38f/0x5b0 [ 599.122156][T13119] ? __asan_memset+0x22/0x50 [ 599.122178][T13119] ? init_decode_cache+0xea/0x160 [ 599.122197][T13119] ? init_emulate_ctxt+0x4e7/0x680 [ 599.122224][T13119] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 599.122259][T13119] x86_emulate_instruction+0x64a/0x2100 [ 599.122294][T13119] ? handle_mmio_page_fault+0x13f/0x1170 [ 599.122322][T13119] ? bsearch+0x8e/0xc0 [ 599.122344][T13119] ? __pfx_x86_emulate_instruction+0x10/0x10 [ 599.122367][T13119] ? kvm_io_bus_write+0x26b/0x5f0 [ 599.122386][T13119] ? __pfx_handle_mmio_page_fault+0x10/0x10 [ 599.122415][T13119] ? __lock_acquire+0x6b5/0x2cf0 [ 599.122436][T13119] ? __pfx_kvm_io_bus_write+0x10/0x10 [ 599.122457][T13119] ? __vmx_complete_interrupts+0xe7/0x670 [ 599.122482][T13119] kvm_mmu_page_fault+0x91a/0xb70 [ 599.122513][T13119] vmx_handle_exit+0xd40/0x16c0 [ 599.122532][T13119] ? vcpu_run+0x4adb/0x7940 [ 599.122568][T13119] vcpu_run+0x5d74/0x7940 [ 599.122603][T13119] ? vcpu_run+0x4adb/0x7940 [ 599.122682][T13119] ? __pfx_vcpu_run+0x10/0x10 [ 599.122700][T13119] ? complete_emulated_mmio+0x18e/0x7a0 [ 599.122730][T13119] ? __asan_memcpy+0x40/0x70 [ 599.122752][T13119] ? complete_emulated_mmio+0x4d2/0x7a0 [ 599.122787][T13119] kvm_arch_vcpu_ioctl_run+0x11e6/0x20d0 [ 599.122820][T13119] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 599.122839][T13119] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 599.122860][T13119] ? rcu_is_watching+0x15/0xb0 [ 599.122883][T13119] ? trace_contention_end+0x39/0x100 [ 599.122905][T13119] ? __mutex_lock+0x319/0x1300 [ 599.122930][T13119] ? kasan_quarantine_put+0xbb/0x1f0 [ 599.122954][T13119] ? kvm_vcpu_ioctl+0x280/0xfd0 [ 599.122985][T13119] ? __pfx___mutex_lock+0x10/0x10 [ 599.123003][T13119] ? tomoyo_path_number_perm+0x219/0x630 [ 599.123033][T13119] ? do_vfs_ioctl+0x1166/0x1530 [ 599.123061][T13119] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 599.123089][T13119] kvm_vcpu_ioctl+0xa62/0xfd0 [ 599.123120][T13119] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 599.123142][T13119] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 599.123179][T13119] ? __fget_files+0x2a/0x420 [ 599.123203][T13119] ? __fget_files+0x2a/0x420 [ 599.123221][T13119] ? __fget_files+0x3a0/0x420 [ 599.123240][T13119] ? __fget_files+0x2a/0x420 [ 599.123262][T13119] ? bpf_lsm_file_ioctl+0x9/0x20 [ 599.123281][T13119] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 599.123306][T13119] __se_sys_ioctl+0xfc/0x170 [ 599.123333][T13119] do_syscall_64+0xe2/0xf80 [ 599.123359][T13119] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.123377][T13119] ? trace_irq_disable+0x37/0x100 [ 599.123399][T13119] ? clear_bhb_loop+0x40/0x90 [ 599.123421][T13119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.123439][T13119] RIP: 0033:0x7ff5f459aeb9 [ 599.123457][T13119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 599.123472][T13119] RSP: 002b:00007ff5f54a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 599.123492][T13119] RAX: ffffffffffffffda RBX: 00007ff5f4815fa0 RCX: 00007ff5f459aeb9 [ 599.123506][T13119] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 599.123517][T13119] RBP: 00007ff5f54a8090 R08: 0000000000000000 R09: 0000000000000000 [ 599.123529][T13119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 599.123540][T13119] R13: 00007ff5f4816038 R14: 00007ff5f4815fa0 R15: 00007ffcb89b3948 [ 599.123571][T13119] [ 599.608741][T13126] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2355'. [ 599.714862][ T5903] usb 2-1: device descriptor read/64, error -71 [ 600.021066][ T5903] usb usb2-port1: attempt power cycle [ 600.283507][ T978] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 600.380001][ T5903] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 600.478606][ T978] usb 1-1: too many configurations: 18, using maximum allowed: 8 [ 600.509035][ T978] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 600.537936][ T978] usb 1-1: can't read configurations, error -61 [ 600.699964][ T978] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 600.881371][ T978] usb 1-1: too many configurations: 18, using maximum allowed: 8 [ 600.897571][ T978] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 600.914438][ T978] usb 1-1: can't read configurations, error -61 [ 600.936478][ T978] usb usb1-port1: attempt power cycle [ 600.955909][T13133] FAULT_INJECTION: forcing a failure. [ 600.955909][T13133] name failslab, interval 1, probability 0, space 0, times 0 [ 600.994464][T13133] CPU: 1 UID: 0 PID: 13133 Comm: syz.2.2358 Tainted: G L syzkaller #0 PREEMPT(full) [ 600.994498][T13133] Tainted: [L]=SOFTLOCKUP [ 600.994505][T13133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 600.994516][T13133] Call Trace: [ 600.994524][T13133] [ 600.994533][T13133] dump_stack_lvl+0xe8/0x150 [ 600.994562][T13133] should_fail_ex+0x412/0x560 [ 600.994590][T13133] should_failslab+0xa8/0x100 [ 600.994618][T13133] __kmalloc_noprof+0xe8/0x760 [ 600.994642][T13133] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 600.994669][T13133] tomoyo_realpath_from_path+0xe3/0x5d0 [ 600.994691][T13133] ? tomoyo_domain+0xd7/0x130 [ 600.994714][T13133] ? tomoyo_path_number_perm+0x219/0x630 [ 600.994739][T13133] tomoyo_path_number_perm+0x246/0x630 [ 600.994767][T13133] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 600.994790][T13133] ? __lock_acquire+0x6b5/0x2cf0 [ 600.994825][T13133] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 600.994863][T13133] ? __fget_files+0x2a/0x420 [ 600.994888][T13133] ? __fget_files+0x2a/0x420 [ 600.994906][T13133] ? __fget_files+0x3a0/0x420 [ 600.994925][T13133] ? __fget_files+0x2a/0x420 [ 600.994948][T13133] security_file_ioctl+0xc3/0x2a0 [ 600.994976][T13133] __se_sys_ioctl+0x47/0x170 [ 600.995003][T13133] do_syscall_64+0xe2/0xf80 [ 600.995028][T13133] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.995046][T13133] ? trace_irq_disable+0x37/0x100 [ 600.995067][T13133] ? clear_bhb_loop+0x40/0x90 [ 600.995090][T13133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.995108][T13133] RIP: 0033:0x7fafdf59aeb9 [ 600.995125][T13133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 600.995140][T13133] RSP: 002b:00007fafe0528028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 600.995159][T13133] RAX: ffffffffffffffda RBX: 00007fafdf815fa0 RCX: 00007fafdf59aeb9 [ 600.995173][T13133] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 600.995184][T13133] RBP: 00007fafe0528090 R08: 0000000000000000 R09: 0000000000000000 [ 600.995196][T13133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 600.995207][T13133] R13: 00007fafdf816038 R14: 00007fafdf815fa0 R15: 00007ffccebb3518 [ 600.995237][T13133] [ 600.996904][T13133] ERROR: Out of memory at tomoyo_realpath_from_path. [ 601.432962][T13133] comedi comedi0: pcmda12: I/O port conflict (0x72,16) [ 601.549472][ T978] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 601.570837][ T978] usb 1-1: too many configurations: 18, using maximum allowed: 8 [ 601.583420][ T978] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 601.601344][ T978] usb 1-1: can't read configurations, error -61 [ 601.770042][ T978] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 601.800859][ T978] usb 1-1: too many configurations: 18, using maximum allowed: 8 [ 601.815945][ T978] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 601.830616][ T978] usb 1-1: can't read configurations, error -61 [ 601.852008][ T978] usb usb1-port1: unable to enumerate USB device [ 603.288886][ T978] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 603.482771][ T978] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 603.503926][ T978] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 603.525438][ T978] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 603.545912][ T978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.572170][T13142] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 603.599299][ C0] net_ratelimit: 4111 callbacks suppressed [ 603.599318][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 603.612999][ T978] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 603.618740][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 603.637657][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 603.650877][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 603.664036][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 603.677415][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 603.690687][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 603.703974][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 603.717239][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 603.730484][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 604.006202][ T978] usb 1-1: USB disconnect, device number 76 [ 604.190420][ T5903] usb 2-1: device descriptor read/8, error -71 [ 604.677819][T13150] overlayfs: failed to resolve './file1': -2 [ 604.818695][T13155] binder: BINDER_SET_CONTEXT_MGR already set [ 604.824871][T13155] binder: 13153:13155 ioctl 4018620d 2000000000c0 returned -16 [ 604.858477][T13157] binder: 13154:13157 unknown command 0 [ 604.868413][T13157] binder: 13154:13157 ioctl c0306201 200000000080 returned -22 [ 604.887690][T13155] binder: BINDER_SET_CONTEXT_MGR already set [ 604.916875][T13155] binder: 13153:13155 ioctl 4018620d 200000000040 returned -16 [ 605.017809][ T978] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 605.190993][ T978] usb 1-1: Using ep0 maxpacket: 8 [ 605.196173][ T5902] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 605.212002][ T978] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 605.226189][ T978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.244797][ T978] usb 1-1: Product: syz [ 605.257148][ T978] usb 1-1: Manufacturer: syz [ 605.263186][ T978] usb 1-1: SerialNumber: syz [ 605.280287][ T978] usb 1-1: config 0 descriptor?? [ 605.324416][T13170] fuse: Bad value for 'fd' [ 605.347596][ T5902] usb 3-1: device descriptor read/64, error -71 [ 605.477534][ T5903] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 605.507896][ T978] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 605.597391][ T5902] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 605.633033][ T5903] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 605.652543][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.678314][ T5903] usb 2-1: config 0 descriptor?? [ 605.737331][ T5902] usb 3-1: device descriptor read/64, error -71 [ 605.857825][ T5902] usb usb3-port1: attempt power cycle [ 606.207117][ T5902] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 606.247902][ T5902] usb 3-1: device descriptor read/8, error -71 [ 606.498239][ T5902] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 606.537764][ T5902] usb 3-1: device descriptor read/8, error -71 [ 606.653762][ T5902] usb usb3-port1: unable to enumerate USB device [ 606.909271][ T5903] pegasus 2-1:0.0: can't reset MAC [ 606.914790][ T5903] pegasus 2-1:0.0: probe with driver pegasus failed with error -5 [ 606.945216][ T5903] usb 2-1: USB disconnect, device number 75 [ 607.037409][ T31] INFO: task kworker/1:7:6663 blocked for more than 143 seconds. [ 607.049075][ T31] Tainted: G L syzkaller #0 [ 607.055794][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 607.066261][ T31] task:kworker/1:7 state:D stack:21128 pid:6663 tgid:6663 ppid:2 task_flags:0x4288060 flags:0x00080000 [ 607.079943][ T31] Workqueue: usb_hub_wq hub_event [ 607.085012][ T31] Call Trace: [ 607.088765][ T31] [ 607.091857][ T31] __schedule+0x1539/0x5080 [ 607.096402][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 607.102756][ T31] ? __pfx___schedule+0x10/0x10 [ 607.107932][ T31] ? schedule+0x90/0x360 [ 607.112395][ T31] schedule+0x164/0x360 [ 607.117572][ T31] schedule_timeout+0xc3/0x2c0 [ 607.122578][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 607.128903][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 607.134282][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 607.140435][ T31] ? wait_for_completion+0x274/0x5e0 [ 607.145946][ T31] wait_for_completion+0x2cc/0x5e0 [ 607.152384][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 607.165384][ T31] i2c_del_adapter+0x5c0/0x790 [ 607.170574][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 607.175953][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 607.181727][ T31] ? kfree+0x1c1/0x610 [ 607.185886][ T31] dvb_usb_i2c_exit+0x64/0xb0 [ 607.192216][ T31] dvb_usb_device_exit+0x1cb/0x360 [ 607.198041][ T31] ? __pfx_rpm_resume+0x10/0x10 [ 607.203099][ T31] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 607.209207][ T31] ? usb_disable_interface+0x31d/0x350 [ 607.214862][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 607.220500][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 607.226806][ T31] usb_unbind_interface+0x26e/0x910 [ 607.232152][ T31] ? __pfx_usb_unbind_interface+0x10/0x10 [ 607.238398][ T31] device_release_driver_internal+0x4d9/0x860 [ 607.244559][ T31] bus_remove_device+0x34d/0x440 [ 607.250086][ T31] device_del+0x527/0x8f0 [ 607.254506][ T31] ? usb_disconnect+0xf8/0x990 [ 607.260817][ T31] ? __pfx_device_del+0x10/0x10 [ 607.266984][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 607.272226][ T31] usb_disable_device+0x3d4/0x8d0 [ 607.279895][ T31] usb_disconnect+0x32f/0x990 [ 607.284774][ T31] hub_event+0x1cc9/0x4f30 [ 607.289669][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 607.294862][ T31] ? __pfx_hub_event+0x10/0x10 [ 607.301997][ T31] ? process_one_work+0x87c/0x15a0 [ 607.307517][ T31] ? process_one_work+0x87c/0x15a0 [ 607.312708][ T31] process_one_work+0x949/0x15a0 [ 607.318176][ T31] ? irqentry_exit+0x59e/0x620 [ 607.323060][ T31] ? __pfx_process_one_work+0x10/0x10 [ 607.329010][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 607.334187][ T31] worker_thread+0xb46/0x1140 [ 607.342991][ T978] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 607.354305][ T31] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 607.360458][ T31] kthread+0x388/0x470 [ 607.366729][ T978] dvbdev: DVB: registering new adapter (Terratec H7) [ 607.373510][ T31] ? __pfx_worker_thread+0x10/0x10 [ 607.380074][ T31] ? __pfx_kthread+0x10/0x10 [ 607.384801][ T978] usb 1-1: media controller created [ 607.392849][ T31] ret_from_fork+0x51b/0xa40 [ 607.397897][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 607.403264][ T31] ? __switch_to+0xc7d/0x1400 [ 607.409699][ T31] ? __pfx_kthread+0x10/0x10 [ 607.414529][ T31] ret_from_fork_asm+0x1a/0x30 [ 607.419804][ T31] [ 607.423029][ T31] [ 607.423029][ T31] Showing all locks held in the system: [ 607.431603][ T31] 1 lock held by ksoftirqd/0/15: [ 607.446408][ T31] 1 lock held by khungtaskd/31: [ 607.458042][ T31] #0: ffffffff8e95dda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 607.481986][ T31] 6 locks held by kworker/1:2/978: [ 607.488699][ T31] #0: ffff888021ac2548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x855/0x15a0 [ 607.502394][ T31] #1: ffffc90003ac7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x87c/0x15a0 [ 607.514119][ T31] #2: ffff88802aaa2198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 607.530641][ T31] #3: ffff88807e9f6198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 607.548380][ T978] usb read operation failed. (-71) [ 607.562403][ T31] #4: ffff88807f5a1160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 607.577029][ T978] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 607.586814][ T31] #5: ffff8880b853abe0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 607.606330][ T978] usb 1-1: USB disconnect, device number 77 [ 607.612417][ T31] 2 locks held by getty/5591: [ 607.622453][ T31] #0: ffff8880331890a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 607.635771][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 607.646434][ T31] 2 locks held by udevd/6112: [ 607.651196][ T31] 5 locks held by kworker/1:7/6663: [ 607.660343][ T31] #0: ffff888021ac2548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x855/0x15a0 [ 607.671644][ T31] #1: ffffc900190ffc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x87c/0x15a0 [ 607.683896][ T31] #2: ffff88802ab59198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 607.711293][ T31] #3: ffff88807c4ee198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x990 [ 607.725971][ T31] #4: ffff88805cf0f160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x860 [ 607.739064][ T31] [ 607.741471][ T31] ============================================= [ 607.741471][ T31] [ 607.751254][ T31] NMI backtrace for cpu 1 [ 607.751271][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 607.751295][ T31] Tainted: [L]=SOFTLOCKUP [ 607.751302][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 607.751313][ T31] Call Trace: [ 607.751320][ T31] [ 607.751328][ T31] dump_stack_lvl+0xe8/0x150 [ 607.751356][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 607.751378][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 607.751401][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 607.751426][ T31] sys_info+0x135/0x170 [ 607.751444][ T31] watchdog+0xf90/0xfe0 [ 607.751472][ T31] ? watchdog+0x209/0xfe0 [ 607.751499][ T31] kthread+0x388/0x470 [ 607.751523][ T31] ? __pfx_watchdog+0x10/0x10 [ 607.751547][ T31] ? __pfx_kthread+0x10/0x10 [ 607.751571][ T31] ret_from_fork+0x51b/0xa40 [ 607.751595][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 607.751613][ T31] ? __switch_to+0xc7d/0x1400 [ 607.751645][ T31] ? __pfx_kthread+0x10/0x10 [ 607.751668][ T31] ret_from_fork_asm+0x1a/0x30 [ 607.751705][ T31] [ 607.751734][ T31] Sending NMI from CPU 1 to CPUs 0: [ 607.868375][ C0] NMI backtrace for cpu 0 [ 607.868398][ C0] CPU: 0 UID: 0 PID: 5819 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 607.868420][ C0] Tainted: [L]=SOFTLOCKUP [ 607.868426][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 607.868437][ C0] RIP: 0010:unwind_next_frame+0x528/0x23c0 [ 607.868465][ C0] Code: 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 75 27 49 63 07 4c 01 f8 49 8d 4f 04 4c 39 e0 48 0f 46 e9 <49> 8d 47 fc 48 0f 47 d8 4d 0f 46 ef 48 39 dd 76 a2 e9 76 fd ff ff [ 607.868478][ C0] RSP: 0018:ffffc90000006c38 EFLAGS: 00000287 [ 607.868493][ C0] RAX: ffffffff897e1428 RBX: ffffffff90a46d54 RCX: ffffffff90a46d58 [ 607.868505][ C0] RDX: ffffffff90a46d54 RSI: ffffffff914ddbb0 RDI: ffffffff8c295fa0 [ 607.868517][ C0] RBP: ffffffff90a46d58 R08: 0000000000000001 R09: ffffffff8e95dda0 [ 607.868527][ C0] R10: ffffc90000006d58 R11: ffffffff81b03b50 R12: ffffffff897e1a46 [ 607.868539][ C0] R13: ffffffff90a46d54 R14: ffffc90000006d08 R15: ffffffff90a46d54 [ 607.868550][ C0] FS: 000055558e224500(0000) GS:ffff88812506c000(0000) knlGS:0000000000000000 [ 607.868564][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 607.868575][ C0] CR2: 00007ff5f45840c0 CR3: 00000000776ba000 CR4: 00000000003526f0 [ 607.868589][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 607.868600][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 607.868611][ C0] Call Trace: [ 607.868617][ C0] [ 607.868627][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 607.868662][ C0] ? net_rx_action+0x627/0xf70 [ 607.868685][ C0] ? net_rx_action+0x627/0xf70 [ 607.868706][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 607.868729][ C0] arch_stack_walk+0x11b/0x150 [ 607.868751][ C0] ? net_rx_action+0x627/0xf70 [ 607.868774][ C0] stack_trace_save+0xa9/0x100 [ 607.868795][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 607.868814][ C0] ? kmem_cache_free+0x180/0x610 [ 607.868836][ C0] ? nlmsg_notify+0xf0/0x1a0 [ 607.868856][ C0] ? br_fdb_update+0x4c8/0x690 [ 607.868873][ C0] ? br_handle_frame_finish+0x573/0x1b40 [ 607.868899][ C0] ? br_nf_hook_thresh+0x3dd/0x4c0 [ 607.868920][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 607.868938][ C0] kasan_save_track+0x3e/0x80 [ 607.868957][ C0] ? kasan_save_track+0x3e/0x80 [ 607.868975][ C0] ? kasan_save_free_info+0x46/0x50 [ 607.868991][ C0] ? __kasan_slab_free+0x5c/0x80 [ 607.869010][ C0] ? kmem_cache_free+0x180/0x610 [ 607.869028][ C0] ? netlink_broadcast_filtered+0xee4/0x1020 [ 607.869047][ C0] ? nlmsg_notify+0xf0/0x1a0 [ 607.869066][ C0] ? br_fdb_update+0x4c8/0x690 [ 607.869081][ C0] ? br_handle_frame_finish+0x573/0x1b40 [ 607.869101][ C0] ? br_nf_hook_thresh+0x3dd/0x4c0 [ 607.869119][ C0] ? br_nf_pre_routing_finish_ipv6+0xa3a/0xd70 [ 607.869139][ C0] ? br_nf_pre_routing_ipv6+0x374/0x6f0 [ 607.869160][ C0] ? br_handle_frame+0x989/0x1520 [ 607.869178][ C0] ? __netif_receive_skb_core+0x98f/0x30a0 [ 607.869198][ C0] ? process_backlog+0x76d/0x1950 [ 607.869218][ C0] ? __napi_poll+0xae/0x340 [ 607.869236][ C0] ? net_rx_action+0x627/0xf70 [ 607.869273][ C0] ? skb_release_data+0x688/0x8e0 [ 607.869288][ C0] ? netlink_broadcast_filtered+0xee4/0x1020 [ 607.869307][ C0] kasan_save_free_info+0x46/0x50 [ 607.869324][ C0] __kasan_slab_free+0x5c/0x80 [ 607.869343][ C0] kmem_cache_free+0x180/0x610 [ 607.869366][ C0] netlink_broadcast_filtered+0xee4/0x1020 [ 607.869395][ C0] ? __pfx_netlink_broadcast_filtered+0x10/0x10 [ 607.869417][ C0] ? __alloc_skb+0x4e5/0x7d0 [ 607.869439][ C0] nlmsg_notify+0xf0/0x1a0 [ 607.869461][ C0] br_fdb_update+0x4c8/0x690 [ 607.869480][ C0] ? __pfx_br_fdb_update+0x10/0x10 [ 607.869496][ C0] ? skb_ext_add+0x148/0x8f0 [ 607.869515][ C0] br_handle_frame_finish+0x573/0x1b40 [ 607.869534][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 607.869552][ C0] ? ip6t_do_table+0x137d/0x1560 [ 607.869570][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 607.869594][ C0] ? ip6t_do_table+0x1c3/0x1560 [ 607.869609][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 607.869623][ C0] ? nf_hook_slow+0x176/0x220 [ 607.869646][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 607.869666][ C0] br_nf_hook_thresh+0x3dd/0x4c0 [ 607.869688][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 607.869708][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 607.869727][ C0] ? nf_nat_ipv6_in+0x203/0x2c0 [ 607.869752][ C0] br_nf_pre_routing_finish_ipv6+0xa3a/0xd70 [ 607.869772][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 607.869797][ C0] br_nf_pre_routing_ipv6+0x374/0x6f0 [ 607.869819][ C0] ? br_nf_pre_routing_ipv6+0x421/0x6f0 [ 607.869839][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 607.869862][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 607.869881][ C0] ? br_nf_pre_routing+0x720/0x1470 [ 607.869908][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 607.869927][ C0] br_handle_frame+0x989/0x1520 [ 607.869951][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 607.869972][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 607.869997][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 607.870017][ C0] __netif_receive_skb_core+0x98f/0x30a0 [ 607.870038][ C0] ? ip6_mc_input+0x8de/0xbd0 [ 607.870065][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 607.870085][ C0] ? ip6_rcv_finish+0x29e/0x2e0 [ 607.870102][ C0] ? NF_HOOK+0x336/0x3c0 [ 607.870120][ C0] ? process_backlog+0x3eb/0x1950 [ 607.870139][ C0] ? lock_acquire+0x106/0x330 [ 607.870155][ C0] ? process_backlog+0x3eb/0x1950 [ 607.870178][ C0] ? process_backlog+0x3eb/0x1950 [ 607.870197][ C0] ? process_backlog+0x3eb/0x1950 [ 607.870218][ C0] ? process_backlog+0x3eb/0x1950 [ 607.870239][ C0] process_backlog+0x76d/0x1950 [ 607.870269][ C0] __napi_poll+0xae/0x340 [ 607.870287][ C0] ? skb_defer_free_flush+0x233/0x260 [ 607.870308][ C0] net_rx_action+0x627/0xf70 [ 607.870328][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 607.870355][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 607.870388][ C0] handle_softirqs+0x22a/0x7c0 [ 607.870406][ C0] ? do_softirq+0x76/0xd0 [ 607.870424][ C0] ? tcp_recvmsg+0x21e/0x7f0 [ 607.870443][ C0] do_softirq+0x76/0xd0 [ 607.870458][ C0] [ 607.870464][ C0] [ 607.870470][ C0] __local_bh_enable_ip+0xf8/0x130 [ 607.870487][ C0] tcp_recvmsg+0x21e/0x7f0 [ 607.870507][ C0] ? __pfx_tcp_recvmsg+0x10/0x10 [ 607.870528][ C0] ? aa_sk_perm+0x15a/0x960 [ 607.870550][ C0] ? aa_sk_perm+0x82d/0x960 [ 607.870569][ C0] ? sock_rps_record_flow+0x19/0x400 [ 607.870588][ C0] inet_recvmsg+0x157/0x270 [ 607.870606][ C0] ? __pfx_inet_recvmsg+0x10/0x10 [ 607.870624][ C0] ? __pfx_aa_file_perm+0x10/0x10 [ 607.870641][ C0] sock_recvmsg_nosec+0x11d/0x1c0 [ 607.870664][ C0] sock_read_iter+0x296/0x360 [ 607.870683][ C0] ? __pfx_sock_read_iter+0x10/0x10 [ 607.870706][ C0] ? bpf_lsm_file_permission+0x9/0x20 [ 607.870720][ C0] ? security_file_permission+0x75/0x260 [ 607.870744][ C0] vfs_read+0x582/0xa70 [ 607.870763][ C0] ? debug_object_free+0x2d7/0x490 [ 607.870785][ C0] ? __pfx_vfs_read+0x10/0x10 [ 607.870806][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 607.870832][ C0] ksys_read+0x150/0x270 [ 607.870852][ C0] ? __pfx_ksys_read+0x10/0x10 [ 607.870875][ C0] do_syscall_64+0xe2/0xf80 [ 607.870920][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.870936][ C0] ? trace_irq_disable+0x37/0x100 [ 607.870955][ C0] ? clear_bhb_loop+0x40/0x90 [ 607.870974][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.870989][ C0] RIP: 0033:0x7f7b707560d7 [ 607.871004][ C0] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 607.871017][ C0] RSP: 002b:00007ffccf080730 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 607.871033][ C0] RAX: ffffffffffffffda RBX: 000055558e224500 RCX: 00007f7b707560d7 [ 607.871044][ C0] RDX: 0000000000000004 RSI: 00007ffccf08078c RDI: 0000000000000003 [ 607.871054][ C0] RBP: 00007ffccf080c30 R08: 0000000000000000 R09: 0000000000000000 [ 607.871064][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000004 [ 607.871074][ C0] R13: 00007ffccf08078c R14: 00007ffccf080820 R15: 0000000000000000 [ 607.871092][ C0] [ 608.605915][ C0] net_ratelimit: 4630 callbacks suppressed [ 608.605934][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 608.712113][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 608.725506][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 608.738808][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 608.744753][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 608.744774][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 608.744799][ T31] Tainted: [L]=SOFTLOCKUP [ 608.744807][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 608.744818][ T31] Call Trace: [ 608.744827][ T31] [ 608.744835][ T31] vpanic+0x1e0/0x670 [ 608.744873][ T31] panic+0xc5/0xd0 [ 608.744895][ T31] ? __pfx_panic+0x10/0x10 [ 608.744920][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 608.744943][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 608.744969][ T31] watchdog+0xfda/0xfe0 [ 608.745000][ T31] ? watchdog+0x209/0xfe0 [ 608.745028][ T31] kthread+0x388/0x470 [ 608.745053][ T31] ? __pfx_watchdog+0x10/0x10 [ 608.745073][ T31] ? __pfx_kthread+0x10/0x10 [ 608.745098][ T31] ret_from_fork+0x51b/0xa40 [ 608.745121][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 608.745140][ T31] ? __switch_to+0xc7d/0x1400 [ 608.745170][ T31] ? __pfx_kthread+0x10/0x10 [ 608.745194][ T31] ret_from_fork_asm+0x1a/0x30 [ 608.745230][ T31] [ 608.751225][ T31] Kernel Offset: disabled