last executing test programs: 8.945291472s ago: executing program 0 (id=3537): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56e, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x5, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x9, 0x1, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x10, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f00000000c0)={0x20, 0xd, 0x2c, {0x2c, 0x23, "e75bcf47a88a34d2dd23ee248c36105a7e746fb1400590136b7103bd4f114e2a60cefa13e8bec3cd466f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESHEX=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r1]) syz_fuse_handle_req(r1, &(0x7f00000007c0)="e0332f8f5747b9f778142cc174a9b5f0244b78bb6346cb5fc9135b8220090ee698fddc241870359d32327f299718466d88dcdb2c7d1209c657485ca1aa3f2fb80e71397b80fca6f3cf2367fb19eb95e5b4a0170063374645d9e020099ffd7def3d94cd29412b3d7b7a47bc70121be848cfcecea78d41a93622b134bd06e84dec07a9e5abc29cb02d5b9091e748cffacf48352628822bab7b24a17bdf4b3f3bd9fb17793496aa6490da3f58039ce5b40745dd63f82d93bed80b50ca5742d67d39029a98db95c9392e2d5fd9a35bad30cfe98682b5a069738a12c3cfd25949106cfc839202fd21c2b28e44be73280d5037351ead2dd1c277d9cc9088c6b14365eb0937ea9685f6b26232293803260f2c8cfe176b55df304bc2865b8f52581afc4beed445ae8cc405cb7bcc51103aef812c41437c5b070a3591ad0964677f4f9017bb300727dfab009056bee3671a9694be2e2f2173fcc06ceba5aed0d9da697cd88365c5c354788efcc705e90d572e34e9e566fc206a8167970ecb9cbc43f4d9de4d43688582b6600dfcfc7379c831e756a45835647bd87879a3e3942c61b9ea2c2af35d49a4caa9a109b0beb972996ff8924ea371e15dc48efd12b1203a7f1fe354977fcf9e4ee2c8f210387e551ddb55e5f67ee6bb9bc8772649693b0adf24606e8ccc59f020834d8cbfcadfa1770549fe464dfc412308fbaee8d30bd20c002794bfb923bac6b490841248d12ad9a0e54d1d96e3aff5dc4930a6c8b7c75264a46af7a6339725fb84e0363463ebaaaf58d6b9309ae7c87a8df8c68d2487d684011de1fa7645f3f48cf3bb61bee8bcace2f8ef5f967f2765f8086aeaa5dcc34c84e379a7ddd6438cccb5b8098dfbffffffffffffeadbc4ad2b2ef98412a46f74a171ad056429dbb723cdb9ca9f9f03170dba2870e5988b7cb755599d1eb8f7eaf5c8ded4b56022cb479d0bdfae18f69f9ecc42f4c181ea10838229ba5db7f088ad8d5f77e49c1fd93ed6b983c43b23c7eeb1233f0c114885057a27cd3f67a309e3fecba241836bc92308b830b10b04af6c9595b44e859b9ca7ef079e151fdd500060787be3a7a5b3e23b06ec70f087134504f8b8e7b6799ebfe14f698ba7a813a380e6f92cace9230aa8094a2465f7224e2becad469d0aaf0e48b0098eacfb17abdb69bb2ebba97a09d2b739b532d70db91fcb0fcb38bccdc01d7c8113024ea8b619e385e58d31899721416e10b408504a9c4fcf870d21051227440a616cf62f6637b62eceaee09029f88009be02269cb5e5ed090c6f5e6c652c31214aef301bd23ec2504f90991cd27539c1b8b54db51825e951d076cd0e70f56de4b91894ce22049205483a0fe7d7886b36118bebd96d138980e26604b6e70a7275c6b81501143119a8c2c271558202eda196704ef9ae3c33301e1afbe56d069ce4926bf531d960f3df58192f3da558adc169d48d39e24e04e95c406b34b1f4ed2726ef0f6a67dd84c75636984191d019cebfa883fdf99affcdb4c874614a5312455403895891daf7469d6721583ccd1290ab05b14516f22965fc52c4a528f1a5c20cc133fea279d9efc991ec4d51d2654daceda234f6d3b0c635db697aba3eeaf8356319adba42428266ac09a6e6495ca8f60c1c4e052068511696296e88ef86a591948627ba97df634e0063eb5f208df00a069b1213c29e58cf76f591253d60de9d7c01d29992ccc728140299c429fec0df9d90f83fa2467ce00de83b16d10c7edb80ff8d4b1b19eea9bd1e2783a0d41215c9cf23bc3ca1ff414e3f29aadba00c5a8d5b44c28c10e99140e5428278e54bfd880a93fd1b54b560422ab2bfcf120a7902373b6442c6e9867b19aa0a6b77b1634ab6fd1c8a1d90d99ebb9ebcb89d593562b266fbc53c40501f9298690283c45059b3f6ee278e46cb3904c947446c28af8855b2a68e6e0c0da205a6e12fdd15b393d579039b31c1a54230ac2ea13cf1f5540046b4dcccdd731fff7323c4880e5d2d8668d8a7f08920715c17ef9652eb55f224c82a6fdb970dbf1032403f283bd868a23f4785a6ab9c0bcd2308dba1a1f258ae512cf64784e501008db366ab7093a6cc4b6ee86154d44a1a15c10834602dd5ccf730f6d1142ac19d113496dbcb80021cb5733924265d082a8453b5c21e0245e4a2627e8df090da6a129ee49c58c1a7437369acdee15f5e4e5638f05d9f6391572d9890219def702a013a2b05239664dba44feec2a9508a3200b47de03e6a784bca2f3633df534af33da0a95a34ca845b61a22ff55a5a4c04ff9e06e7162f458a8c56e106e75ffb76a921f4057dd73d5f3801aa78ca4c78d6b79bce560404c2fe3d57876287f73e84c27c486ffb997951f9e0b3aa81a5e7804ac7360add11e7851842d0ed8df041c999e50226fef006373bbb53d5d8e9d1653924e60234fd0b6645b821746f3d88591ff66e294e8e958ca425ddbc7d604f7cbbcb9d5fe0d4ad53878eb16bc801def1005e1eb12a6d4924d2179948e7aa542f2600ba3c6c600629d64c529c7326c1f38aa4e1a6cc259e58f86400d65d67856c8f4fffc33ad4c279dc05367307f562f8127f37b03c3cf38a97cfde0c02aad8ac40d347a9e0a496f227c068dc6c666fb2b6a18990f607399b0707d135752d93739e1840b5b4c125c81eeeb318869b408f87778451e49f3ad988a8aa97672989ad367833ff7e7f0e79c37ac794fe466623e122127fb94ebbc01bc775183b26b2dc407b1aa1a55d4ce04dbe1df4fba0377fea4c4bfa5a37c4dd733fd116b9c7f50b11dd512ad68646b9ddca295fe27bee78476901fbb5c8d2856ae0e9e21ab26e3587c1325f1fa28edb4081f2ba309d5fc39f7f54abbd0d5a152c2f7e3a8b3a5ef6e097b109061c91124f41f33055a7bb86706629f614d40346715cf2fe387ef4e4fc6646839824d3ef85eeac85bc5e681320f6fa7057e0a10de8c4678b48510f77b91bb397dd1209eaba8ea1f237c348e9e0d7af1229e2c04b6560e48e3a7491f3066b63a8923becdcfd8594c1c55098a51283b599765b049831cacd9478e5e996c778d524b476f6677218c94886d7548be7617e5796e35bb3c9b13d70e4897867d85f0350e9329985f051fb556b861aef7dead54e6b29b9ad837cb4774f47a5371ef034612aa0c151345546b876b53e9f2c06e3ce0113e67eba8842f4ac5b51a61315bf050078c710dcf14371d9593730b1d0302ef999f488bbf42b7360171da98ad68932bda4937358fd1d0c2bcd04f7dbe2beaffa0d53cccda316cb19270cf4aa56695ef3203b49fe92d1623cc1d714da6b8f94112db1781562ab2ae50bda23debd55da440434299c992f2f8c264310d6d8ccdd042737db0253d6889d8bf36fe99a131b73300c9798b8fd58b5fc681b97e71230cd3094e441fe5cf1294bbc28f41146f06e39d5e19e673dd489dbddfc16fe281160a8008e375025cbf25e84945f2f0a5ffb2cd58273328ea9d7533b2f0861eff95823cea18dc1877183fefab808bda0890f91f1d79b36953b138fd62caea3411900647a4afadfecade2ff6274175f06614d108daaf9821c413a137e33c826957953bb39e2d852097f978c3577abcb71d68b45794247d8e82614979708f6d6d0e469828206b22913d6d320d815d42c0d943640c63196f703f946089f535eac511e26c6a5a529e875eb15aaf65fd50dcbaf37a009f2f9081cdbc744cf7aa2336913e89f1961581ad4bb6aeb1d23a787e2d3f99639871df5842c30581263d5139128f0a3f37ef48bb636d7aae06581de6baa55a12019d3ed831950915fdc1eee819dd01047bda606f2852699529718c99606246a92bb1dd9435d8f3a48646c0e423441bc783be358c0c91e6846419b6c0a81354500cb2721834dc11ba40c3bbe5717e5142922a168ca0e20fc269ea584c7f68ff7cced62c4277385368b4ad596b79c45a9c4575c37f300cab37a5693cb777fabed412934d3a77505b17cb2628119ddff45f3fcbffb50386eb9cfb6f82b37fa852ad4b65bf8e2898b11bf051cb7fb0fa81cbf81b9ceebb05498aeb2691eb15297edd682976d5a4f444cdaa82f063bc4482c28c4e6257c7cf3e5ee5a502c6527b77b12725e7526ff896ee2f8066536dce04d63072a34c19d533d4dbdb93e7185482cbf7510c5eef2f8aebebad011727cd8061a367b7e1868252bb43d9a74c9c6a10539e357d5367fac69a9296fe5a79a2e5b45950ff462e0e882aa32ff7f29b5644e5311f3e0b076c58683de29ad9dd8b2c92a41ca8313ac997e44981e82aec550bbf6c88adf3d54e9fdf93d9dce95289e9086043d888f19d209cbea79f8f5b2c81b2c3889eae1cb5305e282b883c4cfa3798eceeabb442a74ff6a8470020a296ef01d8e32553663c844e67e5a3a44375f0074ce9547a6c489ee86d7652219491f35c6b904d51a26c3d2cc77d8ff97050dd0d0aed4a1ecf1db7ac48673a1dcc70ac16f709dcf4b90148aede5302111ceaa3a81c49b724cfa206283b62513f96c1da77efafe2d2d08a5f391ab690b5d974ceed2e95e85b1039def0e94c79cc0aa1de1f8133e985adfadf4a657710487b265bb6692fd2b91a06ac98d50b052b8a13168e2638b93209238fbe67f4590a81a2cdbcc479ca9178720a6ec05bc9457f27ad2e2fd2f4e9c643ef85b6287a01f7fd597799cce7d6464ed3c95110733d4ba92314ba3dd81e51f541a6e37f8bb14376e41560f9049b4ff349a467defc205f915a345b5f06d090645180ca642c719f03e9813bff7fd635660efe38b022130d42f2cedd792bcba2bfb14385c6d1cbe5ff2e38c22f1f8d5e4d93d296042507e43f24ff904827b16f2a3572d26078d7fdb0cfdbe2e6bee07b94ae441e510681c96f97ef0ddbd7efbd80ce0689f6e2022a189dd2937d3eadd82a154a5fac91b5ef48523706957b8d5f55077973e9a036009d745a6df39ba154dc59c4ef784d62b3f2d782dc508242a1b0e4cc294b6e62e98ef946f0d984c3174cf86b8a0beb615f046ec50dd0c8a9c0f36df60bd162f1130f894085e7c47b6c28ff336f5d75166c1840e7ad07204fc10ce976505f6aece0316d8c65b973f61cea2fe4c6db722717985c25249f041c07a86b878702a8c9ab7c33fe41039041aa38489b02a28f18d69ab34619e9e35514c54592c8059984ace64b5302b5f22d68c35c7ffb23c63ce877a1e1b160dd2c329eabcc0e1e3072021bd811de3c0c7a68af20ddb9e2912b7eecc2a8cf083a252d0fe31629b20559f7b976e4d8625644385c692b8cdc2886a42d750962d0dee10a1546ecb7ef961216cc456d2450a44aab07014fe0be076ca6bcb46b644af844b2ad8b3817f1895a5d579af3dc937541f4b7e9203e7a7af534b406d8f6e3bc555d767603122ab1c4e62de19d6af63be8e39fe45732859d6d92e11f1a847f7d62764b6364aa7f95f03cc7deba178fb03a467da5be71657ae50ff6bf93c51efb7d19ac9887e92fe5f3c9d545209eff307c9e02073bd3404827e148aa63c135ed668589bdfec38cb47716201a9d02f1b03993f89e96b33b32e52ddffb0580dac45422ba7a3fef76e519a3dc8d12eac60c2d2f8c4303aafa3e80135c403360d51c9cdeba3ffb31e664302f587e0e983ede7f9b2bfe2bc64bd5029cfa88445e043e08f3e9affee25e980e75d2664738726e3d2eade7dce0ece78a514bbbe5a54c121374d079e3b05996052d66889742232b73e950e1a9892e7352c9e546a8cfb48332d2b2be6327208ca51dc2869a562581947f62b0d5bfb3e0911d4854f822d6738b4deb195840d2bbae0b074b8d1e1010c24ec00052dce7d259e3044aab1a99d261fb3b49cf09dfc85473f94db06d49e202ca12182283d48144f8389a5301679901600bf8130d36315b277a99204b85a1598f84bd2d4c4893108f6717bf44234181467d6eeee61e1823268b5c60bf04d0e13e429f411b51adfca20ff1a1b1eee203d59b03da1643c3e9fc474a91470116c6c5275542adb10f3adae2ae87e88b93f334e0ceb6216fc081e8d84d8b0a503196dc50599b22b89b807627b427a815aea0dbca69e5fb215ee996395d8a21a1c67ac295be33c6517504e1f00f579f8c484873cc670b5b9e787b1c30ca1f0b25f8bb8f4bde3b3f4fa730c292cbf97b25068ba9c65f78c555d5f75d52a57958d7111e824f3afa16484f625abf62afc80654c36fd9f8284466422fb18e08274e8febc719d45b784974d50d187ad2349429af3f7930252a4d45997762e9d5f5493d408ca144532aa89aa3d43c46951dafb8f81794e2e9679ce238cfe86e112f4f046d87feec3be04461032819d62f217faa71fa9dc6da8861015567d1f7309090e25b7015dcc6d72a5e7ba53296ab1bc72467ac50831628cf5238155aed3fb189a8b527ebd38771e16454fe51e3edde55cea454414690491207c23f6cf33aaeeda432de2d1ede04e039a16245e66cce6f4e4ea534f290f02a2a81a46d6ffea7967dfbe37461f83d472091156594852823392efc953f4ac099d74e2d0328d9f47bd952352981a34055acd0273309484ab56afa85ff0c22fb53ac5d7cc8e346b4c2f38a4e2451738146b7b90c14f826c7dbc1b2be79d83772a8d629f2dfaf15286a15be1ea22a05d4ee3de6a6bfb7e208dbbcc88e77baac940d6438aeeb77c3a32db08b46e795484a58083c1bd433092bc9116668c338ab35c01cb5871167868c6b61bd4c0ca5f96e5ce2465da06c4a320839f3bb7c0dffd40d5bb9a32fcbc6f691787de7211da062616272c77c62ac83e4cb29fb954ab27d9009877b79be54acd336bfe2a6e087abaab004743f5ea4ec8ddfb8086920e8e458a413adb98077a3cf860513cc8a453eb129556c871be7e7232a6130c4332819ad17b289fdb31f8f8854dffb4cfeca6d792567b444c750820a2a8a2e0f93779e61a4966650909369fc8bd5bd2bad4ff95cc8a14f6cd83ae6411b4bfe1a9b5cdf1fcf32c54cef1731edc47d41fa581376b25006fc859b98805d70a157e481a2cb2ab425340965213adfecdb5addb2b4b2ec5cc6935e4e279bb98283fb20dfcd8a2c91aefda9dc5a57bba4d8803d1eb0f4ba9529de01e39c2aa60a91267c31d036a3f669b9377661837f58c6950fdf38986ea13ff5e9c4d966bf999002da1a854d54aa225b259d91eb88425328e7d13b06dea321a151a8dfc44755214da97168e8acf027d66b7fff45ded94fcde53ff80342d4595644549c4ed827225596e2b30480e94eb049b6cd718fe8424d044bb5098e0206047ddb81755e3cb92131dd47ec754b64c4b78f663e364cf8a74cdd9857c81316dabfbc9d6a23ee6d1eaf6b8fc1544cfeb06002c8a40fb0e49859d2073a7b1cb112713518ad5e007d0a256f901469bfa5cae98841f877faeb584d41bfe695da72ca5700ae085f39c99f769502ea9f43c0b84ca4611441d5adb3e5d0a426297e535258748169cad487f97d171c0630642943508206ce648aad2971297f3d4037d73e5fbc73460ca7401b7dbd7807273ae077a81fd0d4bc90b6068e3ec95afcfeab16619306fb23942a4308e8253b35f4912df392dfc5daf35dd842a5a1f78fc294cbdbd504056f0c7779121b5b3db7461e437347452476f3b0bb22e63aa23cb9d3e797c6c95513058d8fb2c27864ac0e1f5001c988e29c79bfa4236c7be41dee5561d825c1f0fbebc0c06cc4712e88ad5efd94f4eb4e93794af42a9752a2ebc57dc2f3881c75bbb23ad25b69619f9f5b07fe114ba291d2b5b4c1c175e1aa3ee3eda55e6126b3ad1e613bf8e0bbac727b879e7796fa0ad100893677a18b53f5eb31db43a97370d3749afa92fd0291fa96b05daa6beb43b9c1c11d9515976976d1cc1e44f35d317299ceb68ea2545f2a2b92b4e1046f6f92c33aae6995593189bb2611576599fd765b8e6fe2e88674ffd57ee8252287b1904d622c36a502db45c72b0d5fc3d983cc44bc955eb43911404667a4ab147d72b69ef2514dfb820ad75758e85df88499cea94ed658b4c1c2f49fe2bbb8d2dd97f844a6df289296cfb9cd5bc8d17aa235e2c4501b1422b25acd6dbc3a91d03904c545320524f9034955ab02f5d058097c37d23984baf808d28b3e12821eb8919a77c1b6a8bdeceecfcc487c39db592817dd378a7c5127b427e7279b2a82f6b8eec6b3fabe0947e353e7a386475b15011de93e2f2891f772ef90f4aba1ee1c4d7321c81ce4dcaa378daeabb93182c319494436dbe67d252a01291cacb59686ebd53c6df21c083e98fa299cf5e9b59f1ccea95c62b1437c8ff8754a6372b5b879ebc3241f6430871eafe35337d75cb68c42862846df4342ab434f7f0a7b9f66824e1e696e3dbecde179592774b7511e5a7a1a06ba601eb5f2a935c7cef0f83ecd412a84afdd05120fceb1afb6445ebfcdf12c2287bfb75dddccc45afb4f5bb1308d39309c92c0b61a322d5229881fa5d598113cce54107036ca9f63fe863d257c706fe89d5c7ae59a459c6f15ba48d80da4aff541797b26418acddb987df3544bc4918cdbbdd8dd1bc2163c89635044e7b4da878457727a667c0146a12b4c46639497243259bfe4aa5ea50eb79f39fa9209256c9a685e3e39d6d8b6a9ca7d3554fbff0908ad6c6ecf68e506c20b16cd4a98e3ada9eb0cb3eb0b75b13b6d80bf99eddf2282da52cec085d3a725b71c29395d605e1eb26143290946a3a0d24347fa46145735dbf4eabc12150b8d5f7eeca804d7ed1fecd0132d1b94ebec65cbc07dfd4d54a5140567e77c646bd92666922c43aca8e482c59b970fa43087eb76d6715e4e8e5ebe54ca391383ef685b133534fcc1e5c5eb56f9d76a888506c4ac8d289c37039e0c4f927b0e11e85c5c7ec1cf4b19bebee6014cb89ee57f2ade8d166005e956d46a0c01f60b58299479e8a59a2e88f1a7ffd08b27d92fc2772b338959bd0a1c9cb95075c3cc17043c818345b29b76c0b8ed41c8c7259cc780c657cb9509daec1558453cfe061f54e08523a55d3223897559d51096b680802144f1dfbc114cee5ba322e007c2af0c08867291dd732bfe4b24d1d5ae517a7f5903c369ac6b157d42eb6ca8c0d7b50fd533a56c814e7cf04db3012eebd53ec1b123d65ab1e462d9f9182b690d56a88ad5a1f4d89f1749b005e88085505cc6d7de8eeee08def67bc1d1519d44b7a62dc07e491f328f786956d9200f00d78829e6af7c1a5835366201374b9487330920d4c57e2f7073292e173acc2424bb0d5e0e9448b4c02f9cfc99bc408110b6a3e9bc3799e4b178c2871069bc7d9ceba564378f02b2932c36f159478b5facd452b595a86d119216af9d860bd3997305320159a69a70fc62284141d23d2dc1e5394b271d99e5570450f1c55807e96c7cbe1b7c2e3e96f69fecf0f375e36e0d2acf319e37199e98486a8d145ce2d996c1909402744cce63664a75e480b197c345360321e830e5572d1d7bfe5a129a67fa98e6eda5268fa588047859daa11d087d0dbf0ccc7e120e3a5820cb4f5dc06748317e3f866518eb66e39dc8a68a7411b3403fc8eeab8283dee4d767e8e5842ed922e03ae5b3c9c494d5ebc61527ccd1222740fedd9e469ba6b30761cf387d654081c7e63182860e4548748058914a9cea01caf074fe6a78fafa2b45c516f9f20af9ac6773a400fa9661a872f6b55f0ed52a9be9e9c35502604b924f0eb628d6545da322e0713f9a5587e87e4b04fa495423b7c72093b764adfd1430a2e608b7af3d2bf80fef00e5b69abe386618274921ff57621bb99739de2e066ff17e95eba027f6a35170af3a69e93359a9643e155832d45c1aa9a8f71ad35504b99d3d0a1c11ae108664ea36f4dcded083aee17ac9efe7ee3fdf7b63c7c09bcef62caa88708510d45cea79d323083ddbfe7e5d3d9138f206a7af82ef1d26c85015c3e55a285a35d0052546493536b9061db27291a9292033753b7bddac63dac6f6271689240e43523c434a65e1d35299e386c953d0c92f21057e0b7883e049d20961e75069587eb3df6206496f76bbfd96635bb19837ba2ab193d79072ffb8829306b63697ff104a65031b8a38c24cca9ba23d5cdf753169a00fe2b2c3849f234a7029b657b3324c10d553e601aa97d17024f7bf5a99f96392f4a079a83daa27f4e3b512ee8536e764ce4dc36fd0874dfa502a693e55bd9f116202c5e906703e2c43d84448598b7af78aa60a205c152841e75e23436738ccaa6bbcef87e6a237d86d1a5e38e56c162cd6d61a4fb8b410b1643ad557a22348edfa82c23db11c9abdd8141fce263a66537512e93a930a4801ad862a902c7c1e00eb7c7466b1351318b7196c2a9016c55a05e104e124bdb568132f9397e31b10d04e5284bd029ea2f6a3ed11854e09b5871d6a725c21a9ef5d7e729a90a8206d5f61e6e42e47dda3e31b9134d47872a0dd7a576b665ec6ceaa5fd7d85ed7feede9ac9fc23e40241c0318077edda75b62eb271e28fb3705f7b4950c14b721a3a74a7a4e4de02cef5de76a1602b906016c0892ef37db51b0a1dd53f28b3d896f20abbad1ad0e0220960423267fc6e1779d1150fd584dd184bb43278d2d68ff21ac0daeef5408348cb80f4a9e0e606f6048bbaa517289451f084fffb63c5d904788cfc310b5495528a58f4650dafc4e4675b99d35ebab710ac6fefcee6c51a2835510fb6d2dbd8f97c3e53fb7a23c3f3c0283eb2271504581b9c1fa31e35c117e56a5d668a9c57df3b4e1129ca019a8b877fa4a22768dfbdd9d2154e17f4a7755b065090d88982471bfb242d89af5c6782693a6ab1b1be74dfa5655ac3b5ef4ace8dc595803cf4025bdf5c0e9fbe7a12a3a313311809591da08a2cc6cd8480dc960e1f79fa208440a0e589be5756c36d5830a51c4bdc39c2a85c0431bae3a7331b2ffdf23623693d343a7938a8a8a4dd4d523c6450a705bccbb38427f06f4f84a18adf303c0ddecf4ce2b6cdde4e09a4c31816195f0fe9f05fcdc0609f8a75ad2f23d5c24faaf346c13ec0512a5c29477ac561c878085d1a323f6bab08e2fb9ee57d7bb621ef21caf3609d74036c6dc1d7be0b6058d89dcb8d9aa4462fa0a740be66e3fdaa957f27c5a26dc586ac8c927ab2d7cf1b761798ea4191be8f4423cf1a6727d0c5f27a9969a753573afa584dea82678f3471ba36d726c396d68c671e579120f1a11cd50fa66b26fc2d6cb74ba07edbd5d3a288cf58ed1255381df02b2fb8983b7cf833433d1ab8fdef12651c3507e4b69fbc4b234678cca36761e8da434e5f036f204a1400da15277ef27ac140e2d574b89c0fd617da27e6ce862883bbe81c288834b9477d0d440c15dad505b363fcc1cfef8e2e3a96438809505844196acd0af751dedfced67f209c2ffa9c6da842c93ff4b5fd54a67df904f2f31b4236728c99582a667a8461d397770a657ffa7d514b0f076d7f35e9704a836e7882a2acf0a0ec2158ac7234953c3696abdc791c0b163ee76fbcc5adc18b6fa0f51f76f3d313a0d891f1deb69f6e44289b1aa43a768b8d13270959763a2c45129daeea493a5b0d7b36753b223dca9a8037368653400", 0x2000, &(0x7f00000005c0)={&(0x7f0000000040)={0x50, 0xffffffffffffffda, 0x40000a15, {0x7, 0x28, 0x40, 0x800000004a235b33, 0x1, 0x4, 0x3, 0x0, 0x0, 0x0, 0x40, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000004b40)={0x0, 0x0, &(0x7f0000004b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14eb96fdf7e0d68c5d0ac56503cde17c00000000050104001900000000000007000008b8a9d954336b3ed449d218d3bee19a56b50db976282d08cceac89fc30a84d6d226db18cec7fd9d504d40383827ec4d089d164fb745f2c34213f266fb84afa12ceaeb01b1ac051f249028ea61212a3e119627199dc465af2f324155b82f5beab74eb094e5119382d7f93bb6ebaeda518504e2caa1995f176ee8b8460cb289f9"], 0x14}, 0x1, 0x0, 0x0, 0x5561c44ac5c582ca}, 0x40000c4) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="03010000000000404c441550000000000001090224ff5f000000c609040007020300010009210000050122050009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x81}}, './file0/../file0\x00'}) inotify_add_watch(r5, &(0x7f0000000340)='./file0/../file0\x00', 0x400000a0) syz_usb_control_io(r4, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)={0x40, 0x9, 0x2e, {0x2e, 0x21, "56f2271367e3fd63f43ea01baebe265bc248feebb4ca31f0de93b1d449da2cb1d54a622699593004055ab88f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$TCXONC(r2, 0x540a, 0x3) 6.926441647s ago: executing program 0 (id=3547): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x3, 0x12) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x10, 0x17, 0x0, 0x2d92119, 0xfc, 0x2, 0x4, 0xff, 0x0, 0x6, 0x1, 0x0, 0x7, 0x7, 0x4, 0x7, 0x6, 0xfa, '\x00', 0x3, 0x1ff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.783686034s ago: executing program 0 (id=3549): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025", 0xa6}], 0x1}, 0xd0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$alg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000004000001701000002000000000000000000000018000000"], 0x30}, 0x0) 5.593661405s ago: executing program 0 (id=3550): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000380)=ANY=[@ANYRES64=0x0], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="0200002000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000140)={0x2, 0x0, [{0x9, 0x2, 0x1, 0x0, @adapter={0xffffffffffff0001, 0x6, 0x1, 0x8, 0x9}}, {0x9, 0x4, 0x0, 0x0, @irqchip={0xa5, 0x3}}]}) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r4, 0x6b, 0x3, &(0x7f0000000340)=0x1, 0x4) r5 = semget$private(0x0, 0x6, 0x0) semtimedop(r5, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r5, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(r5, 0x0, 0x0) semctl$GETZCNT(r5, 0x1, 0xf, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r6, 0x0, 0xc) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000400)='/dev/comedi2\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000004c0)={'pcmad\x00', [0x6, 0x2, 0x4, 0x80, 0x1, 0x5, 0x1, 0x80, 0x0, 0x1, 0x81, 0x1, 0x0, 0x0, 0x6, 0x7, 0x7, 0x2, 0x3, 0x1, 0xffff60e4, 0x237a, 0x7, 0x0, 0xbd, 0x2, 0x8, 0x10000, 0x5, 0x3, 0x2, 0xf4]}) syz_usb_connect$uac3(0x0, 0xcf, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100300000040820582054000010203010902bd000301621009080b0001012430080904000000010130000a2401030a00000001000904010000010230000904010101010230000924020105979a02020e2402020e0002000d630d000005000000000000000000080655a6de090501094000097a080a252500800000c0070009040200000102300009040201010102300017240106810000000900050000000000000009810900800a24020206000800be070905820910007102080a252501000000060500"], &(0x7f0000000300)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x4, 0xe, 0x5, 0x8, 0xe}, 0xc, &(0x7f0000000140)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x1c, 0x9, 0x8, 0x8001}]}, 0x3, [{0x49, &(0x7f0000000180)=@string={0x49, 0x3, "b937ac5d431c09e81731cdaed8bdc78f11a0d4a36fb6bac63f7a8f29d7d6d0b3bc8ac586c3301e7bff3cd5f2011b6060c3bbbf48d396b8107e00"/71}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x459}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x180a}}]}) 4.679851781s ago: executing program 1 (id=3551): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000380)={0x1f, 0x3, @none}, 0xe) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0x4, 0x0, &(0x7f0000000080)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x80}, 0x44) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x2}}) 3.594041334s ago: executing program 1 (id=3555): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c000280050001000000000006000340000200002400028014000180083a0100e000000108000200e00000010c00028005000100000000000800074000000000cc0006"], 0x138}}, 0x4) 3.418459305s ago: executing program 1 (id=3557): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000009c0)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f00000008c0)=""/239, 0xef, 0x2, 0x27}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}}], 0x0, 0xef00, 0x0}) 3.252501644s ago: executing program 1 (id=3560): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022400010000000009040000150300000009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_disconnect(r0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) close(0x4) 2.90472014s ago: executing program 2 (id=3565): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) (async) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000400)={0x1, 0x0, [{0x40000107, 0x0, 0x9}]}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) socket$inet_udp(0x2, 0x2, 0x0) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000240)="62d2a02bc964b2278bec3478606fe7b30d4e8da2db6c6a2ddbcb68187c2b4ebb9ede654256e3519e52d31d60add998ec9e8a66a7c53e4f294cc64484dbb5889a4a2ab000f95115383e2a297b4dcea80d85dcdee7c681af30810c548cb8cdcdbc86ed2a43abca8bf695c61b721fcd867e4973de6a85ea8e969104a168412a8e5fe40a446ee80b9593657e2c9f4f9ea16b1bc00e083ad700cb54a955000a2c3e80d49dd61672fef0d92ceb253d7d3b8ca19f911d46f15f458516f36408adb578e3a88fabefab24d3763092992bd9f6a2320a656d7c0e74054adca545e94d7f94ded3908a68291f596c49d41110bb452082c97ba33d1be4", 0xf6, 0x20004840, &(0x7f0000000340)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) sendto$inet(r2, &(0x7f0000000240)="62d2a02bc964b2278bec3478606fe7b30d4e8da2db6c6a2ddbcb68187c2b4ebb9ede654256e3519e52d31d60add998ec9e8a66a7c53e4f294cc64484dbb5889a4a2ab000f95115383e2a297b4dcea80d85dcdee7c681af30810c548cb8cdcdbc86ed2a43abca8bf695c61b721fcd867e4973de6a85ea8e969104a168412a8e5fe40a446ee80b9593657e2c9f4f9ea16b1bc00e083ad700cb54a955000a2c3e80d49dd61672fef0d92ceb253d7d3b8ca19f911d46f15f458516f36408adb578e3a88fabefab24d3763092992bd9f6a2320a656d7c0e74054adca545e94d7f94ded3908a68291f596c49d41110bb452082c97ba33d1be4", 0xf6, 0x20004840, &(0x7f0000000340)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) bind$inet(r7, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) (async) bind$inet(r7, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg$inet(r7, &(0x7f0000000ac0)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) readv(r0, &(0x7f0000000480)=[{&(0x7f0000001940)=""/4104, 0x1008}], 0x1) splice(r1, 0x0, r6, 0x0, 0x7151, 0x0) (async) splice(r1, 0x0, r6, 0x0, 0x7151, 0x0) 2.493006268s ago: executing program 0 (id=3568): r0 = socket$kcm(0x10, 0x2, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x40, 0x6b, 0x8, 0x40, 0x5ac, 0x240, 0x45f3, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x60, 0x10, "", [{{0x9, 0x4, 0x4a, 0x6, 0x0, 0x3, 0xf6, 0x2, 0x87}}]}}]}}, 0x0) sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="d8000000180081064e81f789db4cb904021d080006007c09e8ee55a10a001500040014260500000008000f0000000401a8001600200008801c000100a0e4e8e702ef52a98516277ce06bba519554e2686715dc86e5c9ce8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9a0000d5d9001901df60e1b6649682e1cace81ed0bffece0b42abf", 0xd8}], 0x1}, 0x4040) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x7f, 0xa, 0x5c, 0xa}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20004, r1, 0x2}) write$cgroup_subtree(r3, &(0x7f0000000180)={[{0x2d, 'rdma'}, {0x2d, 'hugetlb'}, {0x2d, 'memory'}, {0x2d, 'hugetlb'}, {0x2d, 'cpu'}, {0x2d, 'rdma'}]}, 0x2b) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0xb4, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x99, 0x12, 0x0, 0x1, [@generic="19420dcb2de13603388315acd27f406e241cf1c24a77757a52a1fcb8a0ad1ddd585a7216a9595da1e428997a078a8ffa82b5bad53f77379a4b1291c4d6027ea4dcb5f6722291164a2f9d402bf7a585ea3871a035", @generic="428184a477201ac90f24d8c531680464a01e08554baff2279134e2a452c739471e1c7bd4aef903f973120a8762bddc1900f269ce3068ee8401e0199c9cf16ed3db"]}, @nested={0x4, 0x3}]}, 0xb4}, 0x1, 0x0, 0x0, 0x5}, 0x804) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000300)={r6}) 2.33269027s ago: executing program 3 (id=3570): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000240)={0x0, 0x0}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x3, 0x12) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x10, 0x17, 0x0, 0x2d92119, 0xfc, 0x2, 0x4, 0xff, 0x0, 0x6, 0x1, 0x0, 0x7, 0x7, 0x4, 0x7, 0x6, 0xfa, '\x00', 0x3, 0x1ff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.565034756s ago: executing program 2 (id=3571): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @broadcast}}}], 0x20}}], 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000380)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff080004fffffffffffffffd", 0x39}], 0x1) 1.327768769s ago: executing program 2 (id=3572): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="c4000000190001000008000000000000ff0200000000000000000000000000010000000000000000000000000000010000000000000000000a00808000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000020000000000000000000080000000000ff7f00000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000a00100001"], 0xc4}}, 0x0) 1.246695613s ago: executing program 2 (id=3573): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x1000000, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'V'}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x0) 1.201894553s ago: executing program 3 (id=3574): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x83) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d3, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x9) r3 = fsopen(&(0x7f0000000200)='pstore\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0xf) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0xa, 0x300) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, 0x0, 0x0) listen(r4, 0x0) accept(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="04050400c900", @ANYRES16=r5], 0x7) socket$kcm(0x10, 0x2, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0xb) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000000800054000000001"], 0x1c}, 0x1, 0x0, 0x0, 0x20044004}, 0x44050) 1.052881895s ago: executing program 2 (id=3575): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000009c0)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f00000008c0)=""/239, 0xef, 0x2, 0x27}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0xfffffffffffffff0}], 0x0, 0x0, 0x0}) 1.025067933s ago: executing program 3 (id=3576): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004900010000000000000000000a0000000f00000000000000140001800d2a79075827af5aa534d6815c2e93f10c0002"], 0x3c}, 0x1, 0x0, 0x0, 0x700}, 0x0) 949.354415ms ago: executing program 2 (id=3577): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00"], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) recvfrom$phonet(r1, &(0x7f00000002c0)=""/4096, 0x1000, 0x2000, &(0x7f00000012c0)={0x23, 0xe, 0x80, 0x1}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002900)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000001e1401002cbd7000720000000800010002000000080003"], 0x20}, 0x1, 0x0, 0x0, 0x20000840}, 0x4004810) syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d"], 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x4000840) 905.525031ms ago: executing program 3 (id=3578): socket$inet(0x2, 0x6, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000200)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001c00)=ANY=[@ANYBLOB="28040000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2], 0x428}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 905.310312ms ago: executing program 0 (id=3579): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b0001000010000904"], 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x20, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0xc, 0xb, 0x0, 0x1, [@typed={0x8, 0x121, 0x0, 0x0, @uid}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x804) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01082cbd7000000000000b00000008000300", @ANYRES32=r4, @ANYBLOB="28005080110001004abee33908f8eef16f162471f400000005000200000000000800030001ac0f00a18a3683e1eba2fbe1ae77e542ea5d603741ee5628c406fec412ff7ddcda627b0e86e681db305de6eb6b02081e0938c36ebf967e654e6e928e0ddd6c7fc789bf3831d2fbd31b096d15c459aed226e04ab80e09e7380e2b6c0e83731d89f0dece9f5197b1cdc2a20c514a6455a8af60b2456ab33a624267ca"], 0x44}}, 0x4000800) syz_usb_control_io$hid(r0, 0x0, 0x0) 660.440249ms ago: executing program 3 (id=3580): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x3, 0x6, 0x35303553, 0x7, 0x2, [{0x4, 0xb}, {0x802b, 0x1}, {0x1000000, 0x1c64}, {0x8, 0x42f6dfb7}, {0xc, 0x7}, {0x1, 0xfaa}, {0x5, 0xfff}, {0x400, 0x4}], 0x3, 0x4, 0x0, 0x2, 0x2}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000140)="0100000009800089", 0x8) write$UHID_INPUT(r1, &(0x7f0000000000)={0xc, {"a2e3ad2107c752f91b25470987f70e06e038e7ff7fc6e5539b3264078b089b3b083468060890e0878f0e1ac6e70a9b3365959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31350d095d0636cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7dafbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194ba6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3df8fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f5f71d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810930500ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab974c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc660db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d154d8a5ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21e5ec68cb068ea88067d905ea917bb03eefdaebdeabf2c0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000001b0700", 0x1030}}, 0x1006) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000001040)={0x1f, @none, 0x7}, 0xa) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000001140), 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001440)=ANY=[@ANYBLOB="a2c025678c9b1dc49d7b490388d8cc314e6e7acf808a9b45c7b340c1c913606b675dd468e6f014c8b4cb6901e7c5f80f28bde6d75986351cdc7764efdcc25437d213de6d64105009430fa56dc7ebd1efc79e855e7be9a5c3969e6c25322760f36ec7884e3139334fc071609b735d350c6ca266d983c201eeef005c438883d0b780f80f50e2c30eac4446916ad4017e621e8d3717e43d50e7a81f22a198b9a0c10a4e22cef35caa513ddc0e2801413db52a022a98b08d311e949131aacaec3d6cb916583fefbf0873c2d8", @ANYBLOB="400b906cd1882a06b906fc3b52dbc93df804a1ed2765f5b5280b81d36fa94f18bbb0a1904bc1bfbbc5b761b3bdca432e35f64482ca8899fde59ae1ce2cbe0e7894d1a484dfd9d4729f", @ANYBLOB="0d03001f000000080000130400001c0009800700a341028a93343281851ecb9f858a203550aedaa21e62deb52da828992a78b91c2e746e85ea9defc6a91ce0642ecd557de0307e20a5aadd92f30b17427ff7a3d045977f7c87351c39960c93b562f383465800"/114], 0x30}, 0x1, 0x0, 0x0, 0x4880}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000001080)={0xd8, 0x0, r1}) bind$bt_l2cap(r5, &(0x7f00000010c0)={0x1f, 0x3, @none, 0x2, 0x1}, 0xe) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r5) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f00000012c0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001680)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="200026bd7000fddbdf253500000008000300", @ANYRES32=r7, @ANYBLOB="0c0099000b000000310000000600fd0005000000664338dca3ce9dce985b522549824b1acdde8871f6e44ce6ec214b648224c772102a5fb7deaabd0dd23f1b50008ff33a1860540e8fce13b2af37db48518f402009b8a0aa1f8c9dcc0380534a9da654c30dde9e56fff80f9babb34bbf996ea159835518f9f4a98807db80d6389c4698f05fa63cb7475448ce63fc6b368bb8977a59f77ea143543cde50f967ee5e9b9e293766e7c520c010483a2d5bdf191228d34dd033b1646c3fb0f87c67ffc338505963754ed7bbf0d3cd18f9c5823d2f60"], 0x30}, 0x1, 0x0, 0x0, 0x45}, 0x4010) r8 = syz_open_procfs(0x0, &(0x7f0000000780)='net/fib_triestat\x00') r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_ASSOCINFO(r8, 0x84, 0x1, &(0x7f0000001380)={0x0, 0xf, 0x2, 0x7, 0x1, 0x5}, &(0x7f00000013c0)=0x14) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000001400)={r10, 0x3, 0x80, 0xdb}, &(0x7f0000001600)=0x10) r11 = socket(0x1e, 0x1, 0x0) connect$tipc(r11, &(0x7f0000000040)=@id, 0x10) shutdown(r11, 0x2) recvfrom$inet_nvme(r11, &(0x7f0000000340)=""/233, 0xe9, 0x2000, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r8, &(0x7f0000000c40)={0x8000203d}) epoll_wait(r5, &(0x7f0000001300)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0xa, 0x9) 473.517918ms ago: executing program 3 (id=3581): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001540), 0x2, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000300ea1120000005000000", 0x29}], 0x1) write$dsp(r2, &(0x7f00000001c0)='\\', 0x1) r4 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x1, 0x222d65) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r5, 0x4112, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, 0x0) r6 = socket(0xa, 0x6, 0x45c) r7 = dup(r6) sendmmsg$inet_sctp(r7, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000084000000050000000009"], 0x18, 0x4}], 0x1, 0x20040000) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) r9 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r9, &(0x7f0000000ac0)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, &(0x7f0000000500)}}], 0x1, 0x4000000) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r9, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r11, 0x8}, 0x8) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {0x0, r8, 0x1}}, 0x18) 117.007788ms ago: executing program 1 (id=3582): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000a00)={{0xffffffffffffffff, 0x0, 0x70001, 0x0, 0x7, 0x0, 0x0}, 0x0, 0x0}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r3, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e3100"/40], 0x60}}, 0x200000000000000) 0s ago: executing program 1 (id=3583): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000240)={0x0, 0x0}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x3, 0x12) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x10, 0x17, 0x0, 0x2d92119, 0xfc, 0x2, 0x4, 0xff, 0x0, 0x6, 0x1, 0x0, 0x7, 0x7, 0x4, 0x7, 0x6, 0xfa, '\x00', 0x3, 0x1ff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): 3:097D:0000.001B: unknown main item tag 0x0 [ 483.816013][ T5717] hid-generic 0003:097D:0000.001B: unknown main item tag 0x0 [ 483.816042][ T5717] hid-generic 0003:097D:0000.001B: unknown main item tag 0x0 [ 483.816069][ T5717] hid-generic 0003:097D:0000.001B: unknown main item tag 0x0 [ 483.816097][ T5717] hid-generic 0003:097D:0000.001B: unknown main item tag 0x0 [ 483.816125][ T5717] hid-generic 0003:097D:0000.001B: unknown main item tag 0x0 [ 483.816154][ T5717] hid-generic 0003:097D:0000.001B: unknown main item tag 0x0 [ 483.816182][ T5717] hid-generic 0003:097D:0000.001B: unknown main item tag 0x0 [ 483.816211][ T5717] hid-generic 0003:097D:0000.001B: unknown main item tag 0x0 [ 483.816240][ T5717] hid-generic 0003:097D:0000.001B: unknown main item tag 0x0 [ 483.826493][ T5717] hid-generic 0003:097D:0000.001B: hidraw0: USB HID v7f.fd Device [HID 097d:0000] on usb-dummy_hcd.2-1/input0 [ 483.876979][T15801] netlink: 'syz.3.2748': attribute type 4 has an invalid length. [ 483.879316][ T5822] veth1_vlan: left promiscuous mode [ 483.879569][ T5822] veth0_vlan: left promiscuous mode [ 484.498079][ T5822] team0 (unregistering): Port device team_slave_1 removed [ 484.537611][ T5822] team0 (unregistering): Port device team_slave_0 removed [ 484.792384][ T5266] 8021q: adding VLAN 0 to HW filter on device eth1 [ 485.466995][ T821] usb 4-1: new full-speed USB device number 81 using dummy_hcd [ 485.659452][ T821] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 485.659488][ T821] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 485.659511][ T821] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 485.659533][ T821] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 485.659557][ T821] usb 4-1: config 1 has no interface number 0 [ 485.659609][ T821] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 485.659636][ T821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.691251][ T821] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 485.863083][ T1006] usb 3-1: USB disconnect, device number 80 [ 485.870172][ T821] snd_usb_pod 4-1:1.1: endpoint not available, using fallback values [ 485.870596][ T821] snd_usb_pod 4-1:1.1: invalid control EP [ 485.870611][ T821] snd_usb_pod 4-1:1.1: cannot start listening: -22 [ 485.870902][ T821] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 485.871476][ T821] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 486.112063][ T821] usb 4-1: USB disconnect, device number 81 [ 486.292078][T15921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2754'. [ 486.292267][T15921] netlink: 200 bytes leftover after parsing attributes in process `syz.1.2754'. [ 486.691098][T15938] binder_alloc: 15937: binder_alloc_buf size 61808 failed, no address space [ 486.691238][T15938] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 487.073974][ T5266] 8021q: adding VLAN 0 to HW filter on device eth2 [ 487.147044][T15953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2762'. [ 487.147229][T15953] netlink: 200 bytes leftover after parsing attributes in process `syz.3.2762'. [ 489.543403][T16041] FAULT_INJECTION: forcing a failure. [ 489.543403][T16041] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 489.543446][T16041] CPU: 0 UID: 0 PID: 16041 Comm: syz.2.2783 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 489.543479][T16041] Tainted: [L]=SOFTLOCKUP [ 489.543488][T16041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 489.543502][T16041] Call Trace: [ 489.543512][T16041] [ 489.543522][T16041] dump_stack_lvl+0xe8/0x150 [ 489.543557][T16041] should_fail_ex+0x46b/0x600 [ 489.543594][T16041] _copy_to_user+0x31/0xb0 [ 489.543633][T16041] simple_read_from_buffer+0xe1/0x170 [ 489.543668][T16041] proc_fail_nth_read+0x1be/0x230 [ 489.543702][T16041] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 489.543736][T16041] ? rw_verify_area+0x2ac/0x4e0 [ 489.543767][T16041] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 489.543808][T16041] vfs_read+0x212/0xa80 [ 489.543850][T16041] ? __pfx_vfs_read+0x10/0x10 [ 489.543885][T16041] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 489.543922][T16041] ? lockdep_hardirqs_on+0x7a/0x110 [ 489.543957][T16041] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 489.543993][T16041] ? mutex_lock_nested+0x152/0x1d0 [ 489.544021][T16041] ? fdget_pos+0x252/0x320 [ 489.544058][T16041] ksys_read+0x156/0x270 [ 489.544094][T16041] ? __pfx_ksys_read+0x10/0x10 [ 489.544135][T16041] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.544161][T16041] do_syscall_64+0x15f/0xf80 [ 489.544183][T16041] ? trace_irq_disable+0x3b/0x140 [ 489.544216][T16041] ? clear_bhb_loop+0x40/0x90 [ 489.544245][T16041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.544269][T16041] RIP: 0033:0x7efebeadd60e [ 489.544291][T16041] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 489.544310][T16041] RSP: 002b:00007efebcd75fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 489.544335][T16041] RAX: ffffffffffffffda RBX: 00007efebcd766c0 RCX: 00007efebeadd60e [ 489.544352][T16041] RDX: 000000000000000f RSI: 00007efebcd760a0 RDI: 0000000000000003 [ 489.544366][T16041] RBP: 00007efebcd76090 R08: 0000000000000000 R09: 0000000000000000 [ 489.544380][T16041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 489.544395][T16041] R13: 00007efebed96038 R14: 00007efebed95fa0 R15: 00007ffe70a197e8 [ 489.544431][T16041] [ 490.189190][T16042] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2784'. [ 490.504030][T16067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2793'. [ 491.817403][T16114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2795'. [ 491.817585][T16114] netlink: 200 bytes leftover after parsing attributes in process `syz.1.2795'. [ 492.042708][T16125] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2802'. [ 492.267222][ T1006] usb 3-1: new full-speed USB device number 81 using dummy_hcd [ 492.377858][T16142] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2803'. [ 492.618929][ T5717] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 492.771543][ T5717] usb 4-1: Using ep0 maxpacket: 16 [ 492.780957][ T5717] usb 4-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 492.780996][ T5717] usb 4-1: config 1 interface 0 has no altsetting 0 [ 492.800621][ T5717] usb 4-1: New USB device found, idVendor=05ac, idProduct=0249, bcdDevice= 0.40 [ 492.800659][ T5717] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.800682][ T5717] usb 4-1: Product: syz [ 492.800698][ T5717] usb 4-1: Manufacturer: syz [ 492.800714][ T5717] usb 4-1: SerialNumber: syz [ 492.847474][T15088] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 492.916981][ T32] usb 2-1: new full-speed USB device number 97 using dummy_hcd [ 492.943850][T15088] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 492.967667][T15088] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 493.085550][ T32] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 493.085595][ T32] usb 2-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 493.085621][ T32] usb 2-1: Product: syz [ 493.085639][ T32] usb 2-1: Manufacturer: syz [ 493.085656][ T32] usb 2-1: SerialNumber: syz [ 493.121680][ T32] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 493.298187][T15088] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 493.378715][ T32] vp7045: USB control message 'out' went wrong. [ 493.378736][ T32] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 493.378800][ T32] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 493.392184][T15088] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 493.461994][ T32] usb 2-1: USB disconnect, device number 97 [ 493.479365][ T5717] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input32 [ 493.514311][ T4956] bcm5974 4-1:1.0: could not read from device [ 493.629415][T15088] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 493.634479][T15088] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 493.703747][ T4956] bcm5974 4-1:1.0: could not read from device [ 493.704434][ T5717] usb 4-1: USB disconnect, device number 82 [ 493.747269][T15088] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 493.780741][T16207] 9p: Bad value for 'rfdno' [ 493.781398][T16207] 9p: Bad value for 'rfdno' [ 493.781667][T16207] 9p: Bad value for 'rfdno' [ 493.781899][T16207] 9p: Bad value for 'rfdno' [ 493.805555][T16207] 9p: Bad value for 'rfdno' [ 494.513012][ T5717] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 494.619888][T16253] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2818'. [ 494.637383][ T5717] usb 4-1: device descriptor read/64, error -71 [ 494.717964][T15088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.845699][T16258] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 494.880535][ T5717] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 494.952266][T15088] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.060256][ T5717] usb 4-1: device descriptor read/64, error -71 [ 495.137666][T16269] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2822'. [ 495.150182][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.150397][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.173598][ T5717] usb usb4-port1: attempt power cycle [ 495.280140][ T1193] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.280355][ T1193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.526962][ T5717] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 495.548892][ T5717] usb 4-1: device descriptor read/8, error -71 [ 495.797622][ T5717] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 495.837684][ T5717] usb 4-1: device descriptor read/8, error -71 [ 495.961431][ T5717] usb usb4-port1: unable to enumerate USB device [ 497.299756][T15088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 497.475183][T16369] netlink: 200 bytes leftover after parsing attributes in process `syz.1.2846'. [ 497.602821][T16374] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2849'. [ 497.617664][ T1006] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 497.723780][T15088] veth0_vlan: entered promiscuous mode [ 497.771889][T15088] veth1_vlan: entered promiscuous mode [ 497.779337][ T1006] usb 4-1: Using ep0 maxpacket: 32 [ 497.783648][ T1006] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 497.783679][ T1006] usb 4-1: config 0 has no interface number 0 [ 497.783728][ T1006] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 497.783759][ T1006] usb 4-1: config 0 interface 85 has no altsetting 0 [ 497.829042][ T1006] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 497.829077][ T1006] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.829100][ T1006] usb 4-1: Product: syz [ 497.829117][ T1006] usb 4-1: Manufacturer: syz [ 497.829132][ T1006] usb 4-1: SerialNumber: syz [ 497.869305][ T1006] usb 4-1: config 0 descriptor?? [ 497.985851][T15088] veth0_macvtap: entered promiscuous mode [ 498.048721][T15088] veth1_macvtap: entered promiscuous mode [ 498.235335][T15088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.292493][ T1006] appletouch 4-1:0.85: Geyser mode initialized. [ 498.313075][ T1006] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input33 [ 498.395468][T15088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.424480][ T32] usb 4-1: USB disconnect, device number 87 [ 498.572672][ T1141] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.574699][ T1141] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.619889][ T1141] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.621828][ T1141] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.645301][ T1006] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 498.851103][ T1006] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.851143][ T1006] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.851169][ T1006] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 498.851218][ T1006] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 498.851243][ T1006] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.871360][ T32] appletouch 4-1:0.85: input: appletouch disconnected [ 498.924997][ T1006] usb 2-1: config 0 descriptor?? [ 499.534183][ T32] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 499.698830][ T32] usb 4-1: Using ep0 maxpacket: 32 [ 499.701747][ T32] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 499.709636][ T32] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 499.709667][ T32] usb 4-1: config 0 has no interface number 0 [ 499.709735][ T32] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 499.709759][ T32] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 499.711173][ T32] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 499.711200][ T32] usb 4-1: config 0 has no interface number 0 [ 499.711245][ T32] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 499.711275][ T32] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 499.712649][ T32] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 499.712710][ T32] usb 4-1: config 0 has no interface number 0 [ 499.712755][ T32] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 499.712779][ T32] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 499.751015][ T32] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 499.751045][ T32] usb 4-1: config 0 has no interface number 0 [ 499.751098][ T32] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 499.751122][ T32] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 499.822192][ T32] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 499.822224][ T32] usb 4-1: config 0 has no interface number 0 [ 499.822275][ T32] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 499.822299][ T32] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 499.840014][ T32] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 499.840047][ T32] usb 4-1: config 0 has no interface number 0 [ 499.840095][ T32] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 499.840118][ T32] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 499.852153][ T32] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 499.852183][ T32] usb 4-1: config 0 has no interface number 0 [ 499.852230][ T32] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 499.852253][ T32] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 499.905935][ T32] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 499.905966][ T32] usb 4-1: config 0 has no interface number 0 [ 499.906017][ T32] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 499.906041][ T32] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 500.017920][ T32] usb 4-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 500.017954][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.017975][ T32] usb 4-1: Product: syz [ 500.017990][ T32] usb 4-1: Manufacturer: syz [ 500.018005][ T32] usb 4-1: SerialNumber: syz [ 500.271271][ T32] usb 4-1: config 0 descriptor?? [ 500.374008][ T32] etas_es58x 4-1:0.2: Starting syz syz (Serial Number syz) [ 500.498210][ T32] etas_es58x 4-1:0.2: could not retrieve the product info string [ 500.503895][ T1006] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 500.643045][ T1006] usb 2-1: USB disconnect, device number 98 [ 500.838868][T16461] fido_id[16461]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 500.869736][T16478] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2867'. [ 500.887585][ T5593] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 500.948511][ T32] usb 4-1: USB disconnect, device number 88 [ 500.967646][ T32] etas_es58x 4-1:0.2: Disconnecting syz syz [ 501.018147][ T5593] usb 3-1: device descriptor read/64, error -71 [ 501.159601][ T1193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.159626][ T1193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.274613][ T5593] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 501.487740][ T5593] usb 3-1: device descriptor read/64, error -71 [ 501.534214][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.534238][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.614410][ T5593] usb usb3-port1: attempt power cycle [ 501.734118][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.734229][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.906998][ T32] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 501.983561][T16523] netlink: 'syz.0.2871': attribute type 16 has an invalid length. [ 502.007002][ T5593] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 502.038372][ T5593] usb 3-1: device descriptor read/8, error -71 [ 502.059932][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 502.059971][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 502.059989][ T32] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 502.060017][ T32] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 502.060033][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.121691][ T32] usb 2-1: config 0 descriptor?? [ 502.317012][ T5593] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 502.341555][ T5593] usb 3-1: device descriptor read/8, error -71 [ 502.409063][T16538] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2873'. [ 502.447929][ T5593] usb usb3-port1: unable to enumerate USB device [ 502.673707][ T32] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 502.869832][ T5593] usb 2-1: USB disconnect, device number 99 [ 503.415287][T16596] netlink: 200 bytes leftover after parsing attributes in process `syz.0.2882'. [ 504.294180][ T5619] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 504.362583][ T5619] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 504.415578][ T5619] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 504.430476][ T5619] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 504.435109][ T5619] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 505.882389][ T57] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.910719][T16682] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2908'. [ 506.114278][T16690] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2911'. [ 506.318884][T16699] tmpfs: Bad value for 'mpol' [ 506.695672][ T5619] Bluetooth: hci3: command tx timeout [ 506.792397][ T57] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.191572][ T5593] usb 4-1: new full-speed USB device number 89 using dummy_hcd [ 507.363027][ T5593] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 200, setting to 64 [ 507.363070][ T5593] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 507.363096][ T5593] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 64 [ 507.363142][ T5593] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 507.363169][ T5593] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.424296][ T5593] usb 4-1: config 0 descriptor?? [ 507.427465][T16730] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 507.427736][T16730] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 507.699828][T16773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2932'. [ 507.710735][ T5619] Bluetooth: hci1: Opcode 0x0c03 failed: -71 [ 507.772007][ T5593] usb 4-1: USB disconnect, device number 89 [ 508.122766][T16790] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 508.145042][T16789] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 508.172554][ T57] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.220460][T16773] bridge_slave_1: left allmulticast mode [ 508.220623][T16773] bridge_slave_1: left promiscuous mode [ 508.221707][T16773] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.310307][T16773] bridge_slave_0: left allmulticast mode [ 508.310350][T16773] bridge_slave_0: left promiscuous mode [ 508.310657][T16773] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.512111][ T32] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 508.659103][ T32] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 508.659136][ T32] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 508.660316][ T32] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 508.660346][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 508.660366][ T32] usb 3-1: SerialNumber: syz [ 508.759474][ T60] Bluetooth: hci3: command tx timeout [ 508.778289][ T5684] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 508.961062][ T5684] usb 4-1: Using ep0 maxpacket: 32 [ 508.988947][ T5684] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 508.988978][ T5684] usb 4-1: config 0 has no interface number 0 [ 508.991777][ T5684] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 508.991810][ T5684] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.991831][ T5684] usb 4-1: Product: syz [ 508.991842][ T5684] usb 4-1: Manufacturer: syz [ 508.991852][ T5684] usb 4-1: SerialNumber: syz [ 509.006970][ T5684] usb 4-1: config 0 descriptor?? [ 509.014090][ T32] usb 3-1: 0:2 : does not exist [ 509.059756][ T5684] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 509.223845][ T32] usb 3-1: USB disconnect, device number 86 [ 509.233164][T16517] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 509.373606][ T57] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.391786][T16517] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.391881][T16517] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.391908][T16517] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 509.391956][T16517] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 509.391981][T16517] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.580436][T16801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.615339][ T5684] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 509.626294][T16801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.741332][T16517] usb 1-1: config 0 descriptor?? [ 509.897829][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 509.980598][ T5684] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 510.121633][ T5684] usb 4-1: USB disconnect, device number 90 [ 510.169484][ T5684] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 510.253857][ T5879] udevd[5879]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 510.353817][ T5684] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 510.373214][T16517] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 510.381412][ T5684] quatech2 4-1:0.51: device disconnected [ 510.502359][ T5593] usb 1-1: USB disconnect, device number 90 [ 510.617205][ T32] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 510.840200][ T60] Bluetooth: hci3: command tx timeout [ 511.017971][T16937] FAULT_INJECTION: forcing a failure. [ 511.017971][T16937] name failslab, interval 1, probability 0, space 0, times 0 [ 511.018027][T16937] CPU: 0 UID: 0 PID: 16937 Comm: syz.2.2942 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 511.018055][T16937] Tainted: [L]=SOFTLOCKUP [ 511.018062][T16937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 511.018073][T16937] Call Trace: [ 511.018081][T16937] [ 511.018090][T16937] dump_stack_lvl+0xe8/0x150 [ 511.018125][T16937] should_fail_ex+0x46b/0x600 [ 511.018154][T16937] should_failslab+0xa8/0x100 [ 511.018183][T16937] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 511.018208][T16937] ? __alloc_skb+0x1d0/0x7d0 [ 511.018230][T16937] ? lockdep_hardirqs_on+0x7a/0x110 [ 511.018263][T16937] __alloc_skb+0x1d0/0x7d0 [ 511.018290][T16937] netlink_sendmsg+0x5d4/0xb40 [ 511.018325][T16937] ? __pfx_netlink_sendmsg+0x10/0x10 [ 511.018352][T16937] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 511.018384][T16937] ? aa_sock_msg_perm+0x122/0x200 [ 511.018411][T16937] ? __pfx_netlink_sendmsg+0x10/0x10 [ 511.018435][T16937] sock_sendmsg_nosec+0x112/0x150 [ 511.018457][T16937] ____sys_sendmsg+0x55c/0x870 [ 511.018489][T16937] ? __pfx_____sys_sendmsg+0x10/0x10 [ 511.018534][T16937] ? import_iovec+0x73/0xa0 [ 511.018564][T16937] ___sys_sendmsg+0x2a5/0x360 [ 511.018588][T16937] ? __lock_acquire+0x6b5/0x2d10 [ 511.018610][T16937] ? __pfx____sys_sendmsg+0x10/0x10 [ 511.018668][T16937] ? __fget_files+0x2a/0x420 [ 511.018690][T16937] ? __fget_files+0x3a6/0x420 [ 511.018721][T16937] __x64_sys_sendmsg+0x1c3/0x2a0 [ 511.018751][T16937] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 511.018786][T16937] ? __pfx_ksys_write+0x10/0x10 [ 511.018819][T16937] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.018839][T16937] do_syscall_64+0x15f/0xf80 [ 511.018857][T16937] ? trace_irq_disable+0x3b/0x140 [ 511.018882][T16937] ? clear_bhb_loop+0x40/0x90 [ 511.018903][T16937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.018920][T16937] RIP: 0033:0x7efebeb1cdd9 [ 511.018938][T16937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 511.018956][T16937] RSP: 002b:00007efebcd76028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 511.018979][T16937] RAX: ffffffffffffffda RBX: 00007efebed95fa0 RCX: 00007efebeb1cdd9 [ 511.018995][T16937] RDX: 0000000000000818 RSI: 0000200000000940 RDI: 0000000000000003 [ 511.019009][T16937] RBP: 00007efebcd76090 R08: 0000000000000000 R09: 0000000000000000 [ 511.019022][T16937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 511.019037][T16937] R13: 00007efebed96038 R14: 00007efebed95fa0 R15: 00007ffe70a197e8 [ 511.019069][T16937] [ 511.495067][T16957] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2949'. [ 511.495099][T16957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2949'. [ 511.815603][T16969] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2953'. [ 512.022304][T16981] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2957'. [ 512.248771][T16995] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2958'. [ 512.248803][T16995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2958'. [ 512.480222][T17015] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2961'. [ 512.810584][T17037] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2965'. [ 512.917508][ T60] Bluetooth: hci3: command tx timeout [ 513.353566][ T57] dvmrp8: left allmulticast mode [ 513.383801][T17083] tmpfs: Unknown parameter 'nrFinodes' [ 513.798559][ T37] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 513.926930][ T37] usb 4-1: device descriptor read/64, error -71 [ 514.231444][ T37] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 514.366972][ T37] usb 4-1: device descriptor read/64, error -71 [ 514.477771][ T37] usb usb4-port1: attempt power cycle [ 514.714127][ T5717] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 514.837137][ T37] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 514.857765][ T37] usb 4-1: device descriptor read/8, error -71 [ 514.889852][ T5717] usb 3-1: config 5 has an invalid interface number: 210 but max is 0 [ 514.889887][ T5717] usb 3-1: config 5 has no interface number 0 [ 514.889922][ T5717] usb 3-1: config 5 interface 210 has no altsetting 0 [ 514.909970][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 514.923225][ T5717] usb 3-1: New USB device found, idVendor=05c6, idProduct=9222, bcdDevice=a6.5b [ 514.923271][ T5717] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.923294][ T5717] usb 3-1: Product: syz [ 514.923312][ T5717] usb 3-1: Manufacturer: syz [ 514.923329][ T5717] usb 3-1: SerialNumber: syz [ 515.027994][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 515.073416][ T57] bond0 (unregistering): Released all slaves [ 515.106962][ T37] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 515.128983][ T37] usb 4-1: device descriptor read/8, error -71 [ 515.216973][ T5593] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 515.237629][ T37] usb usb4-port1: unable to enumerate USB device [ 515.269947][ T5717] uvcvideo 3-1:5.210: Found multiple Units with ID 1 [ 515.278210][ T5717] uvcvideo 3-1:5.210: Found UVC 0.00 device syz (05c6:9222) [ 515.278247][ T5717] uvcvideo 3-1:5.210: No valid video chain found. [ 515.285776][ T5266] 8021q: adding VLAN 0 to HW filter on device eth1 [ 515.290239][ T5717] usb 3-1: USB disconnect, device number 88 [ 515.378901][ T57] tipc: Left network mode [ 515.380129][T16624] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.380474][T16624] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.380811][T16624] bridge_slave_0: entered allmulticast mode [ 515.384890][T16624] bridge_slave_0: entered promiscuous mode [ 515.409294][ T5593] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.409328][ T5593] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.409350][ T5593] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 515.409392][ T5593] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 515.409415][ T5593] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.449511][ T5593] usb 1-1: config 0 descriptor?? [ 515.478827][T16624] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.479247][T16624] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.479567][T16624] bridge_slave_1: entered allmulticast mode [ 515.483673][T16624] bridge_slave_1: entered promiscuous mode [ 515.631277][T16624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.653048][T16624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.813871][T16624] team0: Port device team_slave_0 added [ 515.826107][T16624] team0: Port device team_slave_1 added [ 516.038773][ T5593] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 516.333030][ T32] usb 1-1: USB disconnect, device number 91 [ 516.811656][T17256] netlink: 'syz.3.2990': attribute type 4 has an invalid length. [ 516.875849][T16624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 516.875869][T16624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 516.875899][T16624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 516.996350][T16624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 516.996368][T16624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 516.996399][T16624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 517.958986][ T5266] 8021q: adding VLAN 0 to HW filter on device eth2 [ 518.346906][ T57] hsr_slave_0: left promiscuous mode [ 518.388491][ T57] hsr_slave_1: left promiscuous mode [ 518.389932][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 518.389961][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 518.430864][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 518.430889][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 518.487091][ T32] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 518.641090][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.641120][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 518.641135][ T32] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 518.641164][ T32] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 518.641179][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.650969][ T57] veth1_vlan: left allmulticast mode [ 518.651303][ T57] veth1_vlan: left promiscuous mode [ 518.651380][ T57] veth0_vlan: left promiscuous mode [ 518.716727][ T32] usb 4-1: config 0 descriptor?? [ 518.856939][ T5684] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 519.015684][ T5684] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 519.015723][ T5684] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 519.015750][ T5684] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 519.015865][ T5684] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 519.015894][ T5684] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.091061][ T5684] usb 1-1: config 0 descriptor?? [ 519.188826][ T60] Bluetooth: hci4: command 0x0406 tx timeout [ 519.601257][ T57] team0 (unregistering): Port device macvlan1 removed [ 519.626254][ T5684] usbhid 1-1:0.0: can't add hid device: -71 [ 519.626404][ T5684] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 519.681557][ T5684] usb 1-1: USB disconnect, device number 92 [ 519.694830][ T32] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 519.763476][ T32] usb 4-1: USB disconnect, device number 95 [ 519.991341][T17378] fido_id[17378]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 520.297994][ T57] team0 (unregistering): Port device team_slave_1 removed [ 520.358901][ T57] team0 (unregistering): Port device team_slave_0 removed [ 520.478705][T17409] loop8: detected capacity change from 0 to 7 [ 520.480003][ T149] lo_rw_aio(loop8) starting read with raw_refcnt=0x1, refcnt=2 [ 520.480713][T17409] Dev loop8: unable to read RDB block 7 [ 520.480745][T17409] loop8: AHDI p1 p2 [ 520.480776][T17409] loop8: partition table partially beyond EOD, truncated [ 520.499355][T17409] loop8: p1 start 1702000233 is beyond EOD, truncated [ 520.554090][T17408] __loop_clr_fd(loop8) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 520.839368][ T5593] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 520.981387][T16624] hsr_slave_0: entered promiscuous mode [ 520.982868][T16624] hsr_slave_1: entered promiscuous mode [ 521.030035][ T5593] usb 1-1: Using ep0 maxpacket: 16 [ 521.043815][ T5593] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 521.043848][ T5593] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 521.043886][ T5593] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 521.043909][ T5593] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.086365][ T32] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 521.170933][ T5593] usb 1-1: config 0 descriptor?? [ 521.183841][ T5593] xbox_remote_probe: endpoint_in message size==0? [ 521.244688][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 521.244724][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 521.244749][ T32] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 521.244795][ T32] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 521.244821][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.474617][ T32] usb 4-1: config 0 descriptor?? [ 521.522460][T17478] Invalid source name [ 521.522539][T17478] UBIFS error (pid: 17478): cannot open "./file0", error -22 [ 521.955487][ T32] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 522.105021][ T5593] usbhid 1-1:0.0: can't add hid device: -71 [ 522.105149][ T5593] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 522.273156][ T5593] usb 1-1: USB disconnect, device number 93 [ 522.369786][T17518] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3033'. [ 523.488461][ T5593] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 523.630677][ T5266] 8021q: adding VLAN 0 to HW filter on device eth3 [ 523.638105][ T5593] usb 1-1: Using ep0 maxpacket: 16 [ 523.641193][ T5593] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 523.641222][ T5593] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.641242][ T5593] usb 1-1: config 0 has no interface number 0 [ 523.644187][ T5593] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 523.644214][ T5593] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.644235][ T5593] usb 1-1: Product: syz [ 523.644250][ T5593] usb 1-1: Manufacturer: syz [ 523.644266][ T5593] usb 1-1: SerialNumber: syz [ 523.656230][ T5593] usb 1-1: config 0 descriptor?? [ 523.676877][ T5593] uvcvideo 1-1:0.105: probe with driver uvcvideo failed with error -22 [ 524.108369][T17598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.130312][T17598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.155707][T17569] use of bytesused == 0 is deprecated and will be removed in the future, [ 524.155727][T17569] use the actual size instead. [ 524.163050][ T7091] usb 4-1: USB disconnect, device number 96 [ 524.483104][T16517] usb 1-1: USB disconnect, device number 94 [ 524.505822][T17600] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3044'. [ 525.940069][ T7091] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 526.105814][ T7091] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 526.105853][ T7091] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 526.105878][ T7091] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 526.105927][ T7091] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 526.105954][ T7091] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.189236][ T7091] usb 1-1: config 0 descriptor?? [ 526.669332][ T7091] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 526.957343][ T7091] usb 1-1: USB disconnect, device number 95 [ 527.256576][T17740] XFS (nbd2): SB validate failed with error -5. [ 527.431156][T17756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3074'. [ 527.827442][T17768] openvswitch: netlink: Actions may not be safe on all matching packets [ 527.837255][T17768] openvswitch: netlink: Actions may not be safe on all matching packets [ 528.679647][T17789] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3081'. [ 529.186234][T16624] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 529.224700][T16624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 529.228841][T16624] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 529.384854][T16624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 529.386420][T16624] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 529.552763][T16624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 529.554995][T16624] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 529.602234][T16624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 530.147101][T16624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 530.205529][T16624] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.263574][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.263770][ T5822] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.399312][ T805] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.399521][ T805] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.737550][ T7091] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 530.896951][ T7091] usb 1-1: Using ep0 maxpacket: 16 [ 530.899632][ T7091] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.899669][ T7091] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 530.899694][ T7091] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 530.899738][ T7091] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 530.899764][ T7091] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.968754][ T7091] usb 1-1: config 0 descriptor?? [ 531.397440][T16624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 531.405662][T17876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.430860][T17876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.460612][ T7091] microsoft 0003:045E:07DA.0023: ignoring exceeding usage max [ 531.462857][ T7091] microsoft 0003:045E:07DA.0023: ignoring exceeding usage max [ 531.657679][ T7091] microsoft 0003:045E:07DA.0023: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 531.657735][ T7091] microsoft 0003:045E:07DA.0023: no inputs found [ 531.657758][ T7091] microsoft 0003:045E:07DA.0023: could not initialize ff, continuing anyway [ 531.694858][ T7091] usb 1-1: USB disconnect, device number 96 [ 531.712993][T16624] veth0_vlan: entered promiscuous mode [ 531.818146][T16624] veth1_vlan: entered promiscuous mode [ 531.879064][T17918] fido_id[17918]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 531.919910][T16624] veth0_macvtap: entered promiscuous mode [ 531.940102][T16624] veth1_macvtap: entered promiscuous mode [ 531.999511][T16624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 532.026692][T16624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 532.057345][ T1147] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.059210][ T1147] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.060518][ T1147] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.061477][ T1147] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.269801][T17924] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3106'. [ 532.620684][T17935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3108'. [ 532.667191][T17927] kvm: kvm [17926]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffff [ 532.866574][ T5822] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 532.866825][ T5822] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 532.903182][T17945] netlink: 'syz.0.3107': attribute type 29 has an invalid length. [ 533.088489][T17952] vivid-002: disconnect [ 533.808831][ T5822] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.808874][ T5822] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.031251][T17948] vivid-002: reconnect [ 534.447716][ T7091] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 534.586959][ T7091] usb 4-1: device descriptor read/64, error -71 [ 534.733114][T18009] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3126'. [ 534.819608][T18013] FAULT_INJECTION: forcing a failure. [ 534.819608][T18013] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 534.819651][T18013] CPU: 1 UID: 0 PID: 18013 Comm: syz.2.3127 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 534.819683][T18013] Tainted: [L]=SOFTLOCKUP [ 534.819692][T18013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 534.819705][T18013] Call Trace: [ 534.819713][T18013] [ 534.819723][T18013] dump_stack_lvl+0xe8/0x150 [ 534.819757][T18013] should_fail_ex+0x46b/0x600 [ 534.819791][T18013] _copy_from_iter+0x1d3/0x1670 [ 534.819830][T18013] ? trace_kmem_cache_alloc+0x29/0xe0 [ 534.819858][T18013] ? __alloc_skb+0x27d/0x7d0 [ 534.819886][T18013] ? __pfx__copy_from_iter+0x10/0x10 [ 534.819915][T18013] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 534.819945][T18013] ? __alloc_skb+0x27d/0x7d0 [ 534.819986][T18013] ? netlink_sendmsg+0x650/0xb40 [ 534.820015][T18013] ? skb_put+0x11b/0x210 [ 534.820050][T18013] netlink_sendmsg+0x6c0/0xb40 [ 534.820090][T18013] ? __pfx_netlink_sendmsg+0x10/0x10 [ 534.820126][T18013] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 534.820168][T18013] ? aa_sock_msg_perm+0x122/0x200 [ 534.820201][T18013] ? __pfx_netlink_sendmsg+0x10/0x10 [ 534.820230][T18013] sock_sendmsg_nosec+0x112/0x150 [ 534.820259][T18013] ____sys_sendmsg+0x55c/0x870 [ 534.820297][T18013] ? __pfx_____sys_sendmsg+0x10/0x10 [ 534.820350][T18013] ? import_iovec+0x73/0xa0 [ 534.820387][T18013] ___sys_sendmsg+0x2a5/0x360 [ 534.820419][T18013] ? __lock_acquire+0x6b5/0x2d10 [ 534.820447][T18013] ? __pfx____sys_sendmsg+0x10/0x10 [ 534.820517][T18013] ? __fget_files+0x2a/0x420 [ 534.820544][T18013] ? __fget_files+0x3a6/0x420 [ 534.820575][T18013] __x64_sys_sendmsg+0x1c3/0x2a0 [ 534.820604][T18013] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 534.820640][T18013] ? __pfx_ksys_write+0x10/0x10 [ 534.820682][T18013] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.820709][T18013] do_syscall_64+0x15f/0xf80 [ 534.820731][T18013] ? trace_irq_disable+0x3b/0x140 [ 534.820763][T18013] ? clear_bhb_loop+0x40/0x90 [ 534.820792][T18013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.820816][T18013] RIP: 0033:0x7efebeb1cdd9 [ 534.820838][T18013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 534.820858][T18013] RSP: 002b:00007efebcd76028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 534.820883][T18013] RAX: ffffffffffffffda RBX: 00007efebed95fa0 RCX: 00007efebeb1cdd9 [ 534.820901][T18013] RDX: 0000000000000004 RSI: 0000200000000040 RDI: 0000000000000004 [ 534.820916][T18013] RBP: 00007efebcd76090 R08: 0000000000000000 R09: 0000000000000000 [ 534.820930][T18013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.820943][T18013] R13: 00007efebed96038 R14: 00007efebed95fa0 R15: 00007ffe70a197e8 [ 534.820977][T18013] [ 534.871587][ T5616] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 534.876956][ T7091] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 535.047640][ T5616] usb 2-1: Using ep0 maxpacket: 16 [ 535.050313][ T5616] usb 2-1: unable to get BOS descriptor or descriptor too short [ 535.051673][ T5616] usb 2-1: config 1 has an invalid interface number: 232 but max is 0 [ 535.051699][ T5616] usb 2-1: config 1 has no interface number 0 [ 535.051743][ T5616] usb 2-1: config 1 interface 232 altsetting 93 bulk endpoint 0xE has invalid maxpacket 64 [ 535.051770][ T5616] usb 2-1: config 1 interface 232 has no altsetting 0 [ 535.054710][ T5616] usb 2-1: New USB device found, idVendor=1410, idProduct=7004, bcdDevice= 6.a2 [ 535.054737][ T5616] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.054757][ T5616] usb 2-1: Product: syz [ 535.054772][ T5616] usb 2-1: Manufacturer: syz [ 535.054786][ T5616] usb 2-1: SerialNumber: syz [ 535.067087][T18001] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 535.076931][ T7091] usb 4-1: device descriptor read/64, error -71 [ 535.232811][ T7091] usb usb4-port1: attempt power cycle [ 535.372500][ T5616] hub 2-1:1.232: bad descriptor, ignoring hub [ 535.372546][ T5616] hub 2-1:1.232: probe with driver hub failed with error -5 [ 535.375845][ T5616] option 2-1:1.232: GSM modem (1-port) converter detected [ 535.386654][ T5616] usb 2-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 535.430782][ T5616] usb 2-1: USB disconnect, device number 100 [ 535.461671][ T5616] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 535.467859][ T5616] option 2-1:1.232: device disconnected [ 535.577480][ T7091] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 535.586039][T18051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3132'. [ 535.598887][ T7091] usb 4-1: device descriptor read/8, error -71 [ 535.640772][ T1006] usb 3-1: new low-speed USB device number 89 using dummy_hcd [ 535.654343][T18054] netlink: 'syz.0.3133': attribute type 29 has an invalid length. [ 535.655284][T18054] netlink: 'syz.0.3133': attribute type 29 has an invalid length. [ 535.656081][T18054] netlink: 500 bytes leftover after parsing attributes in process `syz.0.3133'. [ 535.777688][ T1006] usb 3-1: device descriptor read/64, error -71 [ 535.836999][ T7091] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 535.858807][ T7091] usb 4-1: device descriptor read/8, error -71 [ 535.969493][ T7091] usb usb4-port1: unable to enumerate USB device [ 536.106999][ T1006] usb 3-1: new low-speed USB device number 90 using dummy_hcd [ 536.236897][ T1006] usb 3-1: device descriptor read/64, error -71 [ 536.263899][T18080] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3138'. [ 536.345200][T18084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3139'. [ 536.415124][ T1006] usb usb3-port1: attempt power cycle [ 536.776949][ T1006] usb 3-1: new low-speed USB device number 91 using dummy_hcd [ 536.799675][ T1006] usb 3-1: device descriptor read/8, error -71 [ 537.066963][ T1006] usb 3-1: new low-speed USB device number 92 using dummy_hcd [ 537.076144][ T5593] usb 2-1: new full-speed USB device number 101 using dummy_hcd [ 537.103549][ T1006] usb 3-1: device descriptor read/8, error -71 [ 537.208859][ T1006] usb usb3-port1: unable to enumerate USB device [ 537.249851][ T5593] usb 2-1: not running at top speed; connect to a high speed hub [ 537.251676][ T5593] usb 2-1: config 18 has an invalid interface number: 32 but max is 2 [ 537.251709][ T5593] usb 2-1: config 18 has an invalid interface number: 49 but max is 2 [ 537.251735][ T5593] usb 2-1: config 18 has an invalid interface number: 16 but max is 2 [ 537.251758][ T5593] usb 2-1: config 18 has no interface number 0 [ 537.251776][ T5593] usb 2-1: config 18 has no interface number 1 [ 537.251794][ T5593] usb 2-1: config 18 has no interface number 2 [ 537.251870][ T5593] usb 2-1: config 18 interface 32 altsetting 3 endpoint 0x7 has invalid maxpacket 528, setting to 64 [ 537.251901][ T5593] usb 2-1: config 18 interface 32 altsetting 3 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 537.251930][ T5593] usb 2-1: config 18 interface 32 altsetting 3 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 537.251959][ T5593] usb 2-1: config 18 interface 32 altsetting 3 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 537.251986][ T5593] usb 2-1: config 18 interface 32 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 537.252025][ T5593] usb 2-1: config 18 interface 49 altsetting 255 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 537.252053][ T5593] usb 2-1: config 18 interface 49 altsetting 255 has a duplicate endpoint with address 0x8, skipping [ 537.252078][ T5593] usb 2-1: config 18 interface 49 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 537.252102][ T5593] usb 2-1: config 18 interface 49 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 537.252126][ T5593] usb 2-1: config 18 interface 49 altsetting 255 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 537.252155][ T5593] usb 2-1: config 18 interface 49 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 537.252181][ T5593] usb 2-1: config 18 interface 32 has no altsetting 0 [ 537.252202][ T5593] usb 2-1: config 18 interface 49 has no altsetting 0 [ 537.252221][ T5593] usb 2-1: config 18 interface 16 has no altsetting 0 [ 537.255197][ T5593] usb 2-1: New USB device found, idVendor=5032, idProduct=0bb8, bcdDevice=be.a5 [ 537.255249][ T5593] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.255271][ T5593] usb 2-1: Product: à°‰ [ 537.255287][ T5593] usb 2-1: Manufacturer: 쨤ꎜ嚲ç‡ê¯µë¾’嚎務딖ꈿⸯ讚ã„ⱘ쭓꣤ᳫ걥殨䲚륺꟦듀੖ଠ栻텵铰洌鳗ä’뛋çœå±ä·’웜뺒纈㼅èæۈ薻ã“黥ᰖ腅툖ﲙண界ᘳ檉鮎좷藬ⷓ癤⦞å䠓篱殳â ç“•å­­â¾šã„°áµ‰í—…뵰䨉ï¢ç ¾ì±èŽ‡âµƒæ‡”漪좸軇远fflﴤ微騤؈霿뱎뺘박퀘胛磯蓅ꌌ䯛ক릸웵켜î‘햙栯瑟䚤ᢑȆ椫椳覷鄬 [ 537.255331][ T5593] usb 2-1: SerialNumber: à „ [ 537.367801][T18102] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 537.368231][T18102] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 537.672598][ T5593] dvb-usb: found a 'Grandtec USB1.1 DVB-T' in cold state, will try to load a firmware [ 537.785372][ T5593] usb 2-1: Direct firmware load for dvb-usb-dibusb-5.0.0.11.fw failed with error -2 [ 537.785407][ T5593] usb 2-1: Falling back to sysfs fallback for: dvb-usb-dibusb-5.0.0.11.fw [ 538.207046][ T37] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 538.314622][T18153] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3149'. [ 538.359932][ T37] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 538.359970][ T37] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 538.359993][ T37] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 538.360024][ T37] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 538.360041][ T37] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.365689][ T37] usb 1-1: config 0 descriptor?? [ 538.672545][T18168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3150'. [ 538.672902][T18168] netlink: 200 bytes leftover after parsing attributes in process `syz.3.3150'. [ 538.930687][ T37] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 539.019785][ T1006] usb 1-1: USB disconnect, device number 97 [ 539.139691][T18189] fido_id[18189]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 540.051377][T18253] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3174'. [ 540.390972][ T7091] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 540.539979][ T7091] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 540.540013][ T7091] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.545093][ T7091] usb 4-1: config 0 descriptor?? [ 540.552640][ T7091] cp210x 4-1:0.0: cp210x converter detected [ 540.726900][ T5717] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 540.758113][ T1006] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 540.856973][ T5717] usb 1-1: device descriptor read/64, error -71 [ 540.906866][ T1006] usb 3-1: Using ep0 maxpacket: 32 [ 540.914016][ T1006] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 540.914052][ T1006] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.914076][ T1006] usb 3-1: Product: syz [ 540.914093][ T1006] usb 3-1: Manufacturer: syz [ 540.914109][ T1006] usb 3-1: SerialNumber: syz [ 540.965819][ T1006] usb 3-1: config 0 descriptor?? [ 541.097046][ T5717] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 541.155131][T18265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3176'. [ 541.155430][T18265] netlink: 200 bytes leftover after parsing attributes in process `syz.3.3176'. [ 541.176687][ T7091] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 541.177123][ T7091] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 541.193977][ T7091] usb 4-1: cp210x converter now attached to ttyUSB0 [ 541.201835][ T7091] usb 4-1: USB disconnect, device number 101 [ 541.228515][ T1006] airspy 3-1:0.0: Board ID: 4e [ 541.228561][ T1006] airspy 3-1:0.0: Firmware version: ‘ ƒG„jó`*Bjó¡KáTÃd»ýk’T”2_\K,µÛHø;ÝœûŸgaë5ìdo¦ìæï,«SÕ Ï"úõ|ÏûO4¯X¨éTqŽq~Öæu\·¹Í‚½"_qwÐû&¾yŒ-ÄÊO›Ê£“ [ 541.268829][ T7091] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 541.272983][ T7091] cp210x 4-1:0.0: device disconnected [ 541.291390][ T5717] usb 1-1: device descriptor read/64, error -71 [ 541.359181][ T1006] airspy 3-1:0.0: usb_control_msg() failed -71 request 11 [ 541.382924][ T1006] airspy 3-1:0.0: Registered as swradio24 [ 541.382951][ T1006] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 541.397563][ T5717] usb usb1-port1: attempt power cycle [ 541.419891][ T1006] usb 3-1: USB disconnect, device number 93 [ 541.768821][ T5717] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 541.790020][ T5717] usb 1-1: device descriptor read/8, error -71 [ 542.037103][ T5717] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 542.061978][ T5717] usb 1-1: device descriptor read/8, error -71 [ 542.139460][T18367] fuse: Bad value for 'fd' [ 542.177447][ T5717] usb usb1-port1: unable to enumerate USB device [ 542.187418][ T37] IPVS: starting estimator thread 0... [ 542.277324][ T7091] usb 3-1: new full-speed USB device number 94 using dummy_hcd [ 542.277907][T18368] IPVS: using max 8 ests per chain, 19200 per kthread [ 542.482103][ T7091] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 542.482136][ T7091] usb 3-1: config 0 has no interface number 0 [ 542.482185][ T7091] usb 3-1: config 0 interface 41 has no altsetting 0 [ 542.499716][ T7091] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 542.499748][ T7091] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.499769][ T7091] usb 3-1: Product: syz [ 542.499783][ T7091] usb 3-1: Manufacturer: syz [ 542.499799][ T7091] usb 3-1: SerialNumber: syz [ 542.522286][ T7091] usb 3-1: config 0 descriptor?? [ 542.635124][T18378] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3197'. [ 542.734585][T18381] loop8: detected capacity change from 0 to 7 [ 542.743773][T18356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.744863][T18356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.747410][ T57] lo_rw_aio(loop8) starting read with raw_refcnt=0x1, refcnt=2 [ 542.783403][T18381] Dev loop8: unable to read RDB block 7 [ 542.783442][T18381] loop8: AHDI p1 p2 [ 542.783472][T18381] loop8: partition table partially beyond EOD, truncated [ 542.783785][T18381] loop8: p1 start 1702000233 is beyond EOD, truncated [ 542.977822][ T7091] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 542.990686][ T5624] __loop_clr_fd(loop8) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 543.068463][ T7091] usb 3-1: USB disconnect, device number 94 [ 543.578098][ T5717] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 543.703540][T18439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3212'. [ 543.703604][T18439] netlink: 200 bytes leftover after parsing attributes in process `syz.2.3212'. [ 543.703774][T18439] FAULT_INJECTION: forcing a failure. [ 543.703774][T18439] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 543.703809][T18439] CPU: 0 UID: 0 PID: 18439 Comm: syz.2.3212 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 543.703843][T18439] Tainted: [L]=SOFTLOCKUP [ 543.703852][T18439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 543.703866][T18439] Call Trace: [ 543.703876][T18439] [ 543.703886][T18439] dump_stack_lvl+0xe8/0x150 [ 543.703919][T18439] should_fail_ex+0x46b/0x600 [ 543.703955][T18439] _copy_from_user+0x2d/0xb0 [ 543.703991][T18439] kstrtouint_from_user+0xd6/0x180 [ 543.704024][T18439] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 543.704074][T18439] proc_fail_nth_write+0x8e/0x210 [ 543.704105][T18439] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 543.704142][T18439] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 543.704173][T18439] vfs_write+0x2a3/0xba0 [ 543.704365][T18439] ? __pfx_vfs_write+0x10/0x10 [ 543.704401][T18439] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 543.704436][T18439] ? lockdep_hardirqs_on+0x7a/0x110 [ 543.704465][T18439] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 543.704495][T18439] ? mutex_lock_nested+0x152/0x1d0 [ 543.704522][T18439] ? fdget_pos+0x252/0x320 [ 543.704556][T18439] ksys_write+0x156/0x270 [ 543.704590][T18439] ? __pfx_ksys_write+0x10/0x10 [ 543.704633][T18439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.704659][T18439] do_syscall_64+0x15f/0xf80 [ 543.704681][T18439] ? trace_irq_disable+0x3b/0x140 [ 543.704714][T18439] ? clear_bhb_loop+0x40/0x90 [ 543.704742][T18439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.704765][T18439] RIP: 0033:0x7efebeadd60e [ 543.704786][T18439] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 543.704806][T18439] RSP: 002b:00007efebcd75fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 543.704828][T18439] RAX: ffffffffffffffda RBX: 00007efebcd766c0 RCX: 00007efebeadd60e [ 543.704846][T18439] RDX: 0000000000000001 RSI: 00007efebcd760a0 RDI: 0000000000000005 [ 543.704858][T18439] RBP: 00007efebcd76090 R08: 0000000000000000 R09: 0000000000000000 [ 543.704872][T18439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 543.704885][T18439] R13: 00007efebed96038 R14: 00007efebed95fa0 R15: 00007ffe70a197e8 [ 543.704919][T18439] [ 543.829736][T18442] sctp: [Deprecated]: syz.0.3213 (pid 18442) Use of int in max_burst socket option. [ 543.829736][T18442] Use struct sctp_assoc_value instead [ 543.875377][ T5717] usb 4-1: Using ep0 maxpacket: 8 [ 543.927654][ T5717] usb 4-1: config 53 has an invalid interface number: 101 but max is 0 [ 543.927689][ T5717] usb 4-1: config 53 has an invalid descriptor of length 0, skipping remainder of the config [ 543.927710][ T5717] usb 4-1: config 53 has no interface number 0 [ 543.927747][ T5717] usb 4-1: config 53 interface 101 altsetting 0 has an endpoint descriptor with address 0xC2, changing to 0x82 [ 543.927764][ T5717] usb 4-1: config 53 interface 101 altsetting 0 endpoint 0x82 has invalid maxpacket 33307, setting to 1024 [ 543.927782][ T5717] usb 4-1: config 53 interface 101 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 543.927798][ T5717] usb 4-1: config 53 interface 101 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 543.927813][ T5717] usb 4-1: config 53 interface 101 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 544.030006][ T5717] usb 4-1: New USB device found, idVendor=0bfd, idProduct=011b, bcdDevice=33.a1 [ 544.030041][ T5717] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.030064][ T5717] usb 4-1: Product: syz [ 544.030080][ T5717] usb 4-1: Manufacturer: syz [ 544.030096][ T5717] usb 4-1: SerialNumber: syz [ 544.132472][T18413] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 544.352246][ T5717] kvaser_usb 4-1:53.101: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 544.352276][ T5717] kvaser_usb 4-1:53.101: error -EMSGSIZE: Failed to initialize card [ 544.352376][ T5717] kvaser_usb 4-1:53.101: probe with driver kvaser_usb failed with error -90 [ 544.403919][ T5717] usb 4-1: USB disconnect, device number 102 [ 544.504611][T18469] binder: 18468:18469 ioctl c0306201 200000000540 returned -22 [ 544.943867][T18495] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3228'. [ 545.166992][T18508] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3233'. [ 545.414616][ T37] usb 1-1: new full-speed USB device number 102 using dummy_hcd [ 545.503767][T18529] binder_alloc: 18528: binder_alloc_buf, no vma [ 545.569513][ T37] usb 1-1: not running at top speed; connect to a high speed hub [ 545.570923][ T37] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 545.570950][ T37] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 545.570972][ T37] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 545.570986][ T37] usb 1-1: config 1 has no interface number 0 [ 545.573655][ T37] usb 1-1: New USB device found, idVendor=0e41, idProduct=4650, bcdDevice= 0.40 [ 545.573689][ T37] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.573711][ T37] usb 1-1: Product: syz [ 545.573728][ T37] usb 1-1: Manufacturer: syz [ 545.573745][ T37] usb 1-1: SerialNumber: syz [ 545.768001][T18542] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3243'. [ 545.793692][T18506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.798116][T18506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.839376][ T37] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 545.869902][T18553] FAULT_INJECTION: forcing a failure. [ 545.869902][T18553] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 545.869944][T18553] CPU: 0 UID: 0 PID: 18553 Comm: syz.3.3244 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 545.869974][T18553] Tainted: [L]=SOFTLOCKUP [ 545.869981][T18553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 545.869995][T18553] Call Trace: [ 545.870005][T18553] [ 545.870015][T18553] dump_stack_lvl+0xe8/0x150 [ 545.870048][T18553] should_fail_ex+0x46b/0x600 [ 545.870083][T18553] _copy_to_user+0x31/0xb0 [ 545.870121][T18553] simple_read_from_buffer+0xe1/0x170 [ 545.870155][T18553] proc_fail_nth_read+0x1be/0x230 [ 545.870189][T18553] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 545.870222][T18553] ? rw_verify_area+0x2ac/0x4e0 [ 545.870259][T18553] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 545.870290][T18553] vfs_read+0x212/0xa80 [ 545.870331][T18553] ? __pfx_vfs_read+0x10/0x10 [ 545.870363][T18553] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 545.870397][T18553] ? lockdep_hardirqs_on+0x7a/0x110 [ 545.870430][T18553] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 545.870464][T18553] ? mutex_lock_nested+0x152/0x1d0 [ 545.870491][T18553] ? fdget_pos+0x252/0x320 [ 545.870537][T18553] ksys_read+0x156/0x270 [ 545.870571][T18553] ? __pfx_ksys_read+0x10/0x10 [ 545.870609][T18553] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.870634][T18553] do_syscall_64+0x15f/0xf80 [ 545.870655][T18553] ? trace_irq_disable+0x3b/0x140 [ 545.870687][T18553] ? clear_bhb_loop+0x40/0x90 [ 545.870715][T18553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.870738][T18553] RIP: 0033:0x7fb72933d60e [ 545.870760][T18553] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 545.870779][T18553] RSP: 002b:00007fb7275d5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 545.870804][T18553] RAX: ffffffffffffffda RBX: 00007fb7275d66c0 RCX: 00007fb72933d60e [ 545.870820][T18553] RDX: 000000000000000f RSI: 00007fb7275d60a0 RDI: 0000000000000004 [ 545.870835][T18553] RBP: 00007fb7275d6090 R08: 0000000000000000 R09: 0000000000000000 [ 545.870848][T18553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 545.870860][T18553] R13: 00007fb7295f6038 R14: 00007fb7295f5fa0 R15: 00007ffc73da3a58 [ 545.870894][T18553] [ 546.243658][ T37] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 546.244733][ T37] snd_usb_variax 1-1:1.1: Line 6 PODxt Live found [ 546.244748][ T37] usb 1-1: selecting invalid altsetting 1 [ 546.244758][ T37] snd_usb_variax 1-1:1.1: set_interface failed [ 546.261320][ T37] snd_usb_variax 1-1:1.1: Line 6 PODxt Live now disconnected [ 546.261527][ T37] snd_usb_variax 1-1:1.1: probe with driver snd_usb_variax failed with error -22 [ 546.270189][ T37] usb 1-1: USB disconnect, device number 102 [ 546.329095][ T5684] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 546.347594][ T5601] udevd[5601]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 546.477075][T18588] binder_alloc: 18587: binder_alloc_buf, no vma [ 546.486565][ T5684] usb 3-1: Using ep0 maxpacket: 8 [ 546.492948][ T5684] usb 3-1: unable to get BOS descriptor or descriptor too short [ 546.496071][ T5684] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 546.496137][ T5684] usb 3-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 87, changing to 10 [ 546.496166][ T5684] usb 3-1: config 1 interface 0 has no altsetting 1 [ 546.533524][ T5684] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 546.533556][ T5684] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.533577][ T5684] usb 3-1: Product: syz [ 546.533592][ T5684] usb 3-1: Manufacturer: syz [ 546.533606][ T5684] usb 3-1: SerialNumber: syz [ 546.570959][T18590] netlink: 'syz.3.3249': attribute type 29 has an invalid length. [ 546.576200][T18590] netlink: 'syz.3.3249': attribute type 29 has an invalid length. [ 546.581492][T18590] netlink: 500 bytes leftover after parsing attributes in process `syz.3.3249'. [ 546.739396][T18594] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3251'. [ 546.784937][ T5684] usbtest 3-1:1.0: couldn't get endpoints, -22 [ 546.784994][ T5684] usbtest 3-1:1.0: probe with driver usbtest failed with error -22 [ 546.805918][ T5684] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 546.805950][ T5684] cdc_ncm 3-1:1.1: bind() failure [ 546.819424][ T5684] usbtest 3-1:1.1: couldn't get endpoints, -22 [ 546.819522][ T5684] usbtest 3-1:1.1: probe with driver usbtest failed with error -22 [ 546.836533][ T5684] usb 3-1: USB disconnect, device number 95 [ 546.972962][T18613] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3253'. [ 547.368665][T18636] binder_alloc: 18635: binder_alloc_buf, no vma [ 547.547196][ T5717] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 547.654104][T18653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3264'. [ 547.654190][T18653] netlink: 200 bytes leftover after parsing attributes in process `syz.3.3264'. [ 547.697583][ T5717] usb 1-1: Using ep0 maxpacket: 16 [ 547.715814][ T5717] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 547.715850][ T5717] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.715873][ T5717] usb 1-1: Product: syz [ 547.715890][ T5717] usb 1-1: Manufacturer: syz [ 547.715905][ T5717] usb 1-1: SerialNumber: syz [ 547.770794][ T5717] r8152-cfgselector 1-1: Unknown version 0x0000 [ 547.770826][ T5717] r8152-cfgselector 1-1: config 0 descriptor?? [ 548.201324][ T37] r8152-cfgselector 1-1: USB disconnect, device number 103 [ 549.200321][T18740] tipc: Started in network mode [ 549.200357][T18740] tipc: Node identity 921956acbfab, cluster identity 4711 [ 549.200615][T18740] tipc: Enabled bearer , priority 10 [ 549.306978][ T37] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 549.480269][ T37] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 549.480307][ T37] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 549.480330][ T37] usb 1-1: Product: syz [ 549.480346][ T37] usb 1-1: SerialNumber: syz [ 549.496100][ T37] usb 1-1: config 0 descriptor?? [ 549.656952][ T32] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 549.768442][ T37] hso 1-1:0.0: Can't find BULK endpoints [ 549.797084][ T32] usb 4-1: device descriptor read/64, error -71 [ 549.997745][ T5684] usb 1-1: USB disconnect, device number 104 [ 550.037342][ T32] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 550.167120][ T32] usb 4-1: device descriptor read/64, error -71 [ 550.279530][ T32] usb usb4-port1: attempt power cycle [ 550.325081][ T5684] tipc: Node number set to 766662316 [ 550.617130][ T32] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 550.638820][ T32] usb 4-1: device descriptor read/8, error -71 [ 550.697007][ T5684] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 550.851301][ T5684] usb 3-1: Using ep0 maxpacket: 32 [ 550.853797][ T5684] usb 3-1: config 4 has an invalid interface number: 228 but max is 0 [ 550.853827][ T5684] usb 3-1: config 4 has no interface number 0 [ 550.853874][ T5684] usb 3-1: config 4 interface 228 altsetting 68 endpoint 0x7 has invalid wMaxPacketSize 0 [ 550.853897][ T5684] usb 3-1: config 4 interface 228 altsetting 68 bulk endpoint 0x7 has invalid maxpacket 0 [ 550.853921][ T5684] usb 3-1: config 4 interface 228 has no altsetting 0 [ 550.861043][ T5684] usb 3-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8 [ 550.861074][ T5684] usb 3-1: New USB device strings: Mfr=1, Product=25, SerialNumber=3 [ 550.861095][ T5684] usb 3-1: Product: syz [ 550.861110][ T5684] usb 3-1: Manufacturer: syz [ 550.861125][ T5684] usb 3-1: SerialNumber: syz [ 550.878434][ T32] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 550.897815][ T32] usb 4-1: device descriptor read/8, error -71 [ 551.007951][ T32] usb usb4-port1: unable to enumerate USB device [ 551.255956][ T5684] usb 3-1: USB disconnect, device number 96 [ 551.265016][ T5601] udevd[5601]: setting mode of /dev/bus/usb/003/096 to 020664 failed: No such file or directory [ 551.265167][ T5601] udevd[5601]: setting owner of /dev/bus/usb/003/096 to uid=0, gid=0 failed: No such file or directory [ 551.316370][ T5601] udevd[5601]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:4.228/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 551.943915][T18849] __nla_validate_parse: 2 callbacks suppressed [ 551.943937][T18849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3312'. [ 552.096685][T18855] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3313'. [ 552.139308][ T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 552.203011][ T60] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 552.214849][ T60] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 552.216143][ T60] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 552.239276][ T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 552.906189][T18889] misc userio: No port type given on /dev/userio [ 552.977075][ T5616] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 553.149766][ T5616] usb 1-1: config 0 interface 0 has no altsetting 0 [ 553.149815][ T5616] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 553.149842][ T5616] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.198556][ T5616] usb 1-1: config 0 descriptor?? [ 553.433193][ T5684] hid_parser_main: 222 callbacks suppressed [ 553.433222][ T5684] hid-generic 0006:0004:0009.0025: unknown main item tag 0x0 [ 553.433255][ T5684] hid-generic 0006:0004:0009.0025: unknown main item tag 0x0 [ 553.433285][ T5684] hid-generic 0006:0004:0009.0025: unknown main item tag 0x0 [ 553.433313][ T5684] hid-generic 0006:0004:0009.0025: unknown main item tag 0x0 [ 553.433342][ T5684] hid-generic 0006:0004:0009.0025: unknown main item tag 0x0 [ 553.433370][ T5684] hid-generic 0006:0004:0009.0025: unknown main item tag 0x0 [ 553.433396][ T5684] hid-generic 0006:0004:0009.0025: unknown main item tag 0x0 [ 553.433424][ T5684] hid-generic 0006:0004:0009.0025: unknown main item tag 0x0 [ 553.433452][ T5684] hid-generic 0006:0004:0009.0025: unknown main item tag 0x0 [ 553.433479][ T5684] hid-generic 0006:0004:0009.0025: unknown main item tag 0x0 [ 553.776621][ C0] [drm:vkms_crtc_handle_vblank_timeout] *ERROR* vkms failure on handling vblank [ 553.864742][ T5684] hid-generic 0006:0004:0009.0025: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 553.971962][T18907] fido_id[18907]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 554.002230][ T5616] video4linux radio48: keene_cmd_main failed (-71) [ 554.002264][ T5616] radio-keene 1-1:0.0: V4L2 device registered as radio48 [ 554.025999][ T5616] usb 1-1: USB disconnect, device number 105 [ 554.405282][ T64] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.436959][ T5619] Bluetooth: hci1: command tx timeout [ 554.767342][ T5616] usb 4-1: new full-speed USB device number 107 using dummy_hcd [ 554.869574][T18946] loop8: detected capacity change from 0 to 7 [ 554.893171][ T12] lo_rw_aio(loop8) starting read with raw_refcnt=0x1, refcnt=2 [ 554.959344][ T5616] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 554.959385][ T5616] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 554.959411][ T5616] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 554.959438][ T5616] usb 4-1: config 0 interface 0 has no altsetting 0 [ 554.959472][ T5616] usb 4-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 554.959498][ T5616] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.021266][ T64] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.062871][ T12] lo_rw_aio(loop8) starting read with raw_refcnt=0x1, refcnt=2 [ 555.067150][T18946] Dev loop8: unable to read RDB block 7 [ 555.067184][T18946] loop8: AHDI p1 p2 [ 555.067215][T18946] loop8: partition table partially beyond EOD, truncated [ 555.067535][T18946] loop8: p1 start 1702000233 is beyond EOD, truncated [ 555.092840][ T5624] __loop_clr_fd(loop8) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 555.127332][ T5616] usb 4-1: config 0 descriptor?? [ 555.356119][ T5616] holtek 0003:1241:5015.0026: unknown global tag 0xe [ 555.356145][ T5616] holtek 0003:1241:5015.0026: item 0 0 1 14 parsing failed [ 555.377362][ T5616] holtek 0003:1241:5015.0026: parse failed [ 555.377463][ T5616] holtek 0003:1241:5015.0026: probe with driver holtek failed with error -22 [ 555.555016][ T32] usb 4-1: USB disconnect, device number 107 [ 555.676990][ T5684] usb 1-1: new full-speed USB device number 106 using dummy_hcd [ 555.841643][ T5684] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 555.841681][ T5684] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.841704][ T5684] usb 1-1: Product: syz [ 555.841721][ T5684] usb 1-1: Manufacturer: syz [ 555.841737][ T5684] usb 1-1: SerialNumber: syz [ 555.852712][ T5684] usb 1-1: config 0 descriptor?? [ 556.063651][ T5684] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 556.221248][ T64] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.369665][T19013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3330'. [ 556.516944][ T5619] Bluetooth: hci1: command tx timeout [ 556.756331][ T5684] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 556.780820][ T5684] usb 1-1: USB disconnect, device number 106 [ 557.327027][ T5684] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 557.503713][ T5684] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 557.503845][ T5684] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 557.503874][ T5684] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.541327][ T5684] usb 1-1: config 0 descriptor?? [ 557.570547][ T5684] pwc: Askey VC010 type 2 USB webcam detected. [ 558.075815][ T5684] pwc: recv_control_msg error -32 req 02 val 2b00 [ 558.107990][ T5684] pwc: recv_control_msg error -32 req 02 val 2700 [ 558.110058][ T5684] pwc: recv_control_msg error -32 req 02 val 2c00 [ 558.185936][ T64] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.318054][ T5684] pwc: recv_control_msg error -32 req 04 val 1300 [ 558.318764][ T5684] pwc: recv_control_msg error -32 req 04 val 1400 [ 558.319518][ T5684] pwc: recv_control_msg error -32 req 02 val 2000 [ 558.321426][ T5684] pwc: recv_control_msg error -32 req 02 val 2100 [ 558.322037][ T5684] pwc: recv_control_msg error -32 req 04 val 1500 [ 558.322757][ T5684] pwc: recv_control_msg error -32 req 02 val 2500 [ 558.327283][ T5684] pwc: recv_control_msg error -32 req 02 val 2400 [ 558.328982][ T5684] pwc: recv_control_msg error -32 req 02 val 2600 [ 558.376960][ T5616] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 558.389341][ T5684] pwc: recv_control_msg error -32 req 02 val 2900 [ 558.483152][ T5684] pwc: recv_control_msg error -71 req 02 val 2800 [ 558.483706][ T5684] pwc: recv_control_msg error -71 req 04 val 1100 [ 558.485148][ T5684] pwc: recv_control_msg error -71 req 04 val 1200 [ 558.546978][ T5616] usb 4-1: Using ep0 maxpacket: 16 [ 558.547249][ T5684] pwc: Registered as video103. [ 558.552553][ T5616] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 558.552583][ T5616] usb 4-1: config 0 has no interface number 0 [ 558.552626][ T5616] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 558.552654][ T5616] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 558.560538][ T5684] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input35 [ 558.596969][ T5619] Bluetooth: hci1: command tx timeout [ 558.626649][ T5616] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 558.626684][ T5616] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.626707][ T5616] usb 4-1: Product: syz [ 558.633367][ T5616] usb 4-1: Manufacturer: syz [ 558.633402][ T5616] usb 4-1: SerialNumber: syz [ 558.668505][ T5616] usb 4-1: config 0 descriptor?? [ 558.669461][T19092] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 558.669590][T19092] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 558.725256][ T5684] usb 1-1: USB disconnect, device number 107 [ 558.911294][T19092] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 558.911448][T19092] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 559.123639][ T5616] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 559.123974][ T5616] asix 4-1:0.34: probe with driver asix failed with error -32 [ 559.604493][T19165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3344'. [ 559.604555][T19165] netlink: 200 bytes leftover after parsing attributes in process `syz.1.3344'. [ 559.708395][T19170] overlayfs: missing 'lowerdir' [ 559.903692][T19172] netlink: 822 bytes leftover after parsing attributes in process `syz.1.3346'. [ 560.117239][ T5619] Bluetooth: hci2: command 0x0406 tx timeout [ 560.411470][T19224] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3349'. [ 560.559585][T19232] loop8: detected capacity change from 0 to 7 [ 560.574895][ T57] lo_rw_aio(loop8) starting read with raw_refcnt=0x1, refcnt=2 [ 560.575197][T19232] Dev loop8: unable to read RDB block 7 [ 560.575226][T19232] loop8: AHDI p1 p2 [ 560.575255][T19232] loop8: partition table partially beyond EOD, truncated [ 560.575529][T19232] loop8: p1 start 1702000233 is beyond EOD, truncated [ 560.579365][T19231] __loop_clr_fd(loop8) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 560.676986][ T5619] Bluetooth: hci1: command tx timeout [ 561.001141][ T64] bridge_slave_1: left allmulticast mode [ 561.001171][ T64] bridge_slave_1: left promiscuous mode [ 561.040054][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.116152][T19269] overlayfs: missing 'lowerdir' [ 561.168017][ T64] bridge_slave_0: left allmulticast mode [ 561.168046][ T64] bridge_slave_0: left promiscuous mode [ 561.192591][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.258271][ T5717] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 561.427179][ T5717] usb 1-1: Using ep0 maxpacket: 16 [ 561.435914][ T5717] usb 1-1: unable to get BOS descriptor or descriptor too short [ 561.444869][ T5717] usb 1-1: config 64 has an invalid interface number: 47 but max is 0 [ 561.444901][ T5717] usb 1-1: config 64 has no interface number 0 [ 561.463102][ T5717] usb 1-1: New USB device found, idVendor=0763, idProduct=1011, bcdDevice=42.10 [ 561.463137][ T5717] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 561.463161][ T5717] usb 1-1: Product: syz [ 561.463178][ T5717] usb 1-1: Manufacturer: syz [ 561.463195][ T5717] usb 1-1: SerialNumber: syz [ 561.593425][ T5684] usb 4-1: USB disconnect, device number 108 [ 561.779987][ T5717] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 562.073312][ T5717] snd-usb-audio 1-1:64.47: probe with driver snd-usb-audio failed with error -2 [ 562.093698][ T5717] usb 1-1: USB disconnect, device number 108 [ 562.128430][ T5684] usb 4-1: new full-speed USB device number 109 using dummy_hcd [ 562.130242][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:64.47/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 562.342812][ T5684] usb 4-1: config 150 has an invalid interface number: 204 but max is 2 [ 562.342847][ T5684] usb 4-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 562.342871][ T5684] usb 4-1: config 150 has no interface number 0 [ 562.342921][ T5684] usb 4-1: config 150 interface 204 has no altsetting 0 [ 562.346577][ T5684] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 562.346613][ T5684] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.346638][ T5684] usb 4-1: Product: syz [ 562.346655][ T5684] usb 4-1: Manufacturer: syz [ 562.346673][ T5684] usb 4-1: SerialNumber: syz [ 562.554990][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 562.641333][ T5684] xr_serial 4-1:150.204: skipping garbage [ 562.641378][ T5684] xr_serial 4-1:150.204: xr_serial converter detected [ 562.708646][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 562.793054][ T64] bond0 (unregistering): Released all slaves [ 563.098848][ T1006] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 563.187676][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.238306][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.256906][ T1006] usb 1-1: Using ep0 maxpacket: 16 [ 563.303226][ T1006] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 563.303258][ T1006] usb 1-1: config 0 has no interface number 0 [ 563.303361][ T1006] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 563.303388][ T1006] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 563.342181][ T1006] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 563.342217][ T1006] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.342241][ T1006] usb 1-1: Product: syz [ 563.342257][ T1006] usb 1-1: Manufacturer: syz [ 563.342274][ T1006] usb 1-1: SerialNumber: syz [ 563.395486][T18851] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.395855][T18851] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.396207][T18851] bridge_slave_0: entered allmulticast mode [ 563.464319][ T1006] usb 1-1: config 0 descriptor?? [ 563.466479][T18851] bridge_slave_0: entered promiscuous mode [ 563.466784][T19320] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 563.467074][T19320] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 563.511906][T18851] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.512427][T18851] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.512896][T18851] bridge_slave_1: entered allmulticast mode [ 563.542384][T18851] bridge_slave_1: entered promiscuous mode [ 563.676271][T19354] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 563.676406][T19354] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 563.744537][ T1006] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 563.744871][ T1006] asix 1-1:0.34: probe with driver asix failed with error -32 [ 563.758942][ T5684] usb 4-1: xr_serial converter now attached to ttyUSB0 [ 563.986185][ T37] usb 4-1: USB disconnect, device number 109 [ 564.016578][ T37] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 564.022399][ T37] xr_serial 4-1:150.204: device disconnected [ 564.339481][T18851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 564.405491][T18851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 564.434848][ T37] usb 1-1: USB disconnect, device number 109 [ 564.771185][T19429] overlayfs: missing 'lowerdir' [ 565.148168][ T5266] 8021q: adding VLAN 0 to HW filter on device eth1 [ 565.193839][T18851] team0: Port device team_slave_0 added [ 565.231694][T18851] team0: Port device team_slave_1 added [ 565.286948][ T1006] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 565.376916][ T64] hsr_slave_0: left promiscuous mode [ 565.417138][ T64] hsr_slave_1: left promiscuous mode [ 565.418045][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 565.418064][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 565.439156][ T1006] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 565.439189][ T1006] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 565.442344][ T1006] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 565.442373][ T1006] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.442394][ T1006] usb 1-1: Product: syz [ 565.442409][ T1006] usb 1-1: Manufacturer: syz [ 565.442424][ T1006] usb 1-1: SerialNumber: syz [ 565.449007][ T1006] usb 1-1: config 0 descriptor?? [ 565.458041][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 565.458069][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 565.458973][ T1006] usb 1-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress 07 [ 565.610985][ T64] veth1_macvtap: left promiscuous mode [ 565.611177][ T64] veth0_macvtap: left promiscuous mode [ 565.611483][ T64] veth1_vlan: left promiscuous mode [ 565.611663][ T64] veth0_vlan: left promiscuous mode [ 566.379938][T19464] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3367'. [ 566.529698][T19467] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3368'. [ 567.053566][T19480] overlayfs: missing 'lowerdir' [ 567.422679][ T64] team0 (unregistering): Port device team_slave_1 removed [ 567.517795][ T64] team0 (unregistering): Port device team_slave_0 removed [ 568.044714][T18851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 568.044732][T18851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.044758][T18851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 568.132709][T18851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 568.132728][T18851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.132756][T18851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 568.178920][ T1006] usb 1-1: USB disconnect, device number 110 [ 568.827286][T18851] hsr_slave_0: entered promiscuous mode [ 568.834180][T18851] hsr_slave_1: entered promiscuous mode [ 568.839481][T18851] debugfs: 'hsr0' already exists in 'hsr' [ 568.839509][T18851] Cannot create hsr debugfs directory [ 569.922490][T19633] overlayfs: missing 'lowerdir' [ 570.293953][T19665] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3382'. [ 570.294024][T19665] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3382'. [ 570.471511][ T5266] 8021q: adding VLAN 0 to HW filter on device eth2 [ 570.596941][T19685] binder: 19683:19685 ioctl c0306201 0 returned -14 [ 570.601953][T19687] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3385'. [ 570.602209][T19686] binder: 19683:19686 ioctl c0306201 0 returned -14 [ 570.800429][T19705] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3387'. [ 570.898943][T19708] overlayfs: missing 'lowerdir' [ 571.204232][T19721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3391'. [ 572.099986][T19748] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3394'. [ 572.322993][T19761] overlayfs: missing 'workdir' [ 573.446468][ T5684] hid_parser_main: 7 callbacks suppressed [ 573.446498][ T5684] hid-generic 0005:046D:0A0E.0027: unknown main item tag 0x0 [ 573.804108][T19810] overlayfs: missing 'workdir' [ 574.016575][ T5684] hid-generic 0005:046D:0A0E.0027: hidraw0: BLUETOOTH HID v0.43 Device [syz0] on aa:aa:aa:aa:aa:aa [ 574.292774][T19831] Bluetooth: MGMT ver 1.23 [ 574.697360][T19849] netlink: 'syz.0.3409': attribute type 4 has an invalid length. [ 575.206199][T18851] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 575.227512][ T1006] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 575.264848][T18851] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 575.271078][T18851] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 575.305760][T18851] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 575.308893][T18851] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 575.346938][ T5616] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 575.353597][T18851] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 575.354591][T18851] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 575.396003][T18851] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 575.406417][ T1006] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.406454][ T1006] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 575.406479][ T1006] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 575.406525][ T1006] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 575.406551][ T1006] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.474371][ T1006] usb 4-1: config 0 descriptor?? [ 575.517016][ T5616] usb 1-1: device descriptor read/64, error -71 [ 575.766982][ T5616] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 575.811441][T18851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 575.915013][ T5616] usb 1-1: device descriptor read/64, error -71 [ 575.923850][ T1006] usbhid 4-1:0.0: can't add hid device: -71 [ 575.923983][ T1006] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 575.945928][ T1006] usb 4-1: USB disconnect, device number 110 [ 576.015785][T18851] 8021q: adding VLAN 0 to HW filter on device team0 [ 576.024342][ T5616] usb usb1-port1: attempt power cycle [ 576.051400][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.051669][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 576.098625][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.098835][ T5822] bridge0: port 2(bridge_slave_1) entered forwarding state [ 576.442460][ T5616] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 576.474031][ T5616] usb 1-1: device descriptor read/8, error -71 [ 576.706844][ T5616] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 576.732469][ T5616] usb 1-1: device descriptor read/8, error -71 [ 576.851809][ T5616] usb usb1-port1: unable to enumerate USB device [ 576.954056][T19926] overlayfs: missing 'workdir' [ 577.283273][T19937] option changes via remount are deprecated (pid=19936 comm=syz.3.3415) [ 577.331866][T18851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 577.513858][T18851] veth0_vlan: entered promiscuous mode [ 577.611013][T18851] veth1_vlan: entered promiscuous mode [ 577.865864][T18851] veth0_macvtap: entered promiscuous mode [ 577.895775][T18851] veth1_macvtap: entered promiscuous mode [ 578.028757][T18851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 578.222693][T18851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 578.259365][T19964] overlayfs: missing 'lowerdir' [ 578.323997][ T1141] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.324731][ T1141] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.324781][ T1141] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.324820][ T1141] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.384710][T19966] FAULT_INJECTION: forcing a failure. [ 578.384710][T19966] name failslab, interval 1, probability 0, space 0, times 0 [ 578.384738][T19966] CPU: 1 UID: 0 PID: 19966 Comm: syz.1.3420 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 578.384757][T19966] Tainted: [L]=SOFTLOCKUP [ 578.384762][T19966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 578.384770][T19966] Call Trace: [ 578.384776][T19966] [ 578.384782][T19966] dump_stack_lvl+0xe8/0x150 [ 578.384802][T19966] should_fail_ex+0x46b/0x600 [ 578.384823][T19966] should_failslab+0xa8/0x100 [ 578.384843][T19966] __kmalloc_noprof+0xdf/0x7b0 [ 578.384861][T19966] ? tomoyo_encode+0x28b/0x550 [ 578.384884][T19966] tomoyo_encode+0x28b/0x550 [ 578.384907][T19966] tomoyo_realpath_from_path+0x58d/0x5d0 [ 578.384928][T19966] ? tomoyo_domain+0xd7/0x130 [ 578.384944][T19966] ? tomoyo_path_number_perm+0x219/0x630 [ 578.384962][T19966] tomoyo_path_number_perm+0x246/0x630 [ 578.384981][T19966] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 578.385001][T19966] ? __lock_acquire+0x6b5/0x2d10 [ 578.385036][T19966] ? do_raw_spin_lock+0x12b/0x2f0 [ 578.385101][T19966] ? __fget_files+0x2a/0x420 [ 578.385129][T19966] ? __fget_files+0x2a/0x420 [ 578.385153][T19966] ? __fget_files+0x3a6/0x420 [ 578.385172][T19966] ? __fget_files+0x2a/0x420 [ 578.385189][T19966] security_file_ioctl+0xc3/0x2a0 [ 578.385207][T19966] __se_sys_ioctl+0x47/0x170 [ 578.385226][T19966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.385242][T19966] do_syscall_64+0x15f/0xf80 [ 578.385254][T19966] ? trace_irq_disable+0x3b/0x140 [ 578.385276][T19966] ? clear_bhb_loop+0x40/0x90 [ 578.385292][T19966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.385305][T19966] RIP: 0033:0x7f916cfacdd9 [ 578.385319][T19966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 578.385330][T19966] RSP: 002b:00007f916b206028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 578.385345][T19966] RAX: ffffffffffffffda RBX: 00007f916d225fa0 RCX: 00007f916cfacdd9 [ 578.385355][T19966] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 578.385363][T19966] RBP: 00007f916b206090 R08: 0000000000000000 R09: 0000000000000000 [ 578.385371][T19966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 578.385379][T19966] R13: 00007f916d226038 R14: 00007f916d225fa0 R15: 00007ffeefb176a8 [ 578.385398][T19966] [ 578.385412][T19966] ERROR: Out of memory at tomoyo_realpath_from_path. [ 578.508651][ C0] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 579.985409][T20002] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3427'. [ 580.135972][T20004] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.3426'. [ 580.153124][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.153147][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.403582][T20019] overlayfs: missing 'lowerdir' [ 580.467146][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.467172][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.517295][ T5616] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 580.690850][ T5616] usb 4-1: device descriptor read/64, error -71 [ 580.929969][ T5616] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 581.058590][ T5616] usb 4-1: device descriptor read/64, error -71 [ 581.191855][ T5616] usb usb4-port1: attempt power cycle [ 581.307110][T20046] syzkaller1: entered promiscuous mode [ 581.307154][T20046] syzkaller1: entered allmulticast mode [ 581.386971][ T5684] usb 3-1: new low-speed USB device number 97 using dummy_hcd [ 581.531476][ T5684] usb 3-1: device descriptor read/64, error -71 [ 582.249812][ T5684] usb 3-1: new low-speed USB device number 98 using dummy_hcd [ 582.377076][ T5616] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 582.377677][ T5684] usb 3-1: device descriptor read/64, error -71 [ 582.410915][ T5616] usb 4-1: device descriptor read/8, error -71 [ 582.487538][ T5684] usb usb3-port1: attempt power cycle [ 582.630928][T20076] overlayfs: missing 'lowerdir' [ 582.662379][T20079] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3440'. [ 582.717031][ T5616] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 582.749213][ T5616] usb 4-1: device descriptor read/8, error -71 [ 582.827267][ T5684] usb 3-1: new low-speed USB device number 99 using dummy_hcd [ 582.848115][ T5684] usb 3-1: device descriptor read/8, error -71 [ 582.857550][ T5616] usb usb4-port1: unable to enumerate USB device [ 583.099948][ T5684] usb 3-1: new low-speed USB device number 100 using dummy_hcd [ 583.128102][ T5684] usb 3-1: device descriptor read/8, error -71 [ 583.238874][ T5684] usb usb3-port1: unable to enumerate USB device [ 583.390166][T20106] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3445'. [ 583.468110][T20109] netlink: 'syz.1.3446': attribute type 29 has an invalid length. [ 583.470121][T20109] netlink: 'syz.1.3446': attribute type 29 has an invalid length. [ 583.471430][T20109] netlink: 500 bytes leftover after parsing attributes in process `syz.1.3446'. [ 584.263157][T20129] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 584.263221][T20129] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 584.766982][ T5691] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 584.919797][ T5691] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 584.919831][ T5691] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 584.919885][ T5691] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 584.919911][ T5691] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.012516][ T5691] usb 1-1: config 0 descriptor?? [ 585.822421][T20167] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3459'. [ 585.864762][T20169] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 585.864800][T20169] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 585.934449][T20171] netlink: 'syz.2.3462': attribute type 2 has an invalid length. [ 585.934467][T20171] netlink: 'syz.2.3462': attribute type 1 has an invalid length. [ 586.047518][ T32] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 586.200289][ T32] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 586.200323][ T32] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 586.201787][ T32] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 586.201816][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 586.201836][ T32] usb 4-1: SerialNumber: syz [ 586.540702][ T32] usb 4-1: invalid UAC_HEADER (v1) [ 586.678998][ T32] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 586.684811][ T32] usb 4-1: USB disconnect, device number 115 [ 586.787724][ T5601] udevd[5601]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 587.075990][T20199] binder: BINDER_SET_CONTEXT_MGR already set [ 587.076010][T20199] binder: 20198:20199 ioctl 4018620d 200000004a80 returned -16 [ 587.144665][T20202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3467'. [ 587.273547][T20210] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 587.273586][T20210] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 587.527533][ T5691] usb 1-1: USB disconnect, device number 115 [ 587.667789][T20223] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3472'. [ 587.852594][T20230] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3474'. [ 588.059598][T20240] binder: BINDER_SET_CONTEXT_MGR already set [ 588.059616][T20240] binder: 20238:20240 ioctl 4018620d 200000004a80 returned -16 [ 588.191678][T20248] syzkaller1: entered promiscuous mode [ 588.191707][T20248] syzkaller1: entered allmulticast mode [ 588.417206][ T5616] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 588.547093][ T5616] usb 1-1: device descriptor read/64, error -71 [ 588.734756][T20271] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3483'. [ 588.816995][ T5616] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 588.872193][T20277] netlink: 'syz.3.3485': attribute type 29 has an invalid length. [ 588.873073][T20277] netlink: 'syz.3.3485': attribute type 29 has an invalid length. [ 588.873877][T20277] netlink: 500 bytes leftover after parsing attributes in process `syz.3.3485'. [ 588.962986][T20280] binder: BINDER_SET_CONTEXT_MGR already set [ 588.962999][T20280] binder: 20279:20280 ioctl 4018620d 200000004a80 returned -16 [ 588.981841][ T5616] usb 1-1: device descriptor read/64, error -71 [ 589.099003][ T5616] usb usb1-port1: attempt power cycle [ 589.234289][T20289] netlink: 'syz.3.3489': attribute type 4 has an invalid length. [ 589.446984][ T5616] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 589.467633][ T5616] usb 1-1: device descriptor read/8, error -71 [ 589.707077][ T5616] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 589.727461][ T5616] usb 1-1: device descriptor read/8, error -71 [ 589.837994][ T5616] usb usb1-port1: unable to enumerate USB device [ 589.981420][T20297] binder_alloc: 20296: binder_alloc_buf size 16408 failed, no address space [ 589.981438][T20297] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 590.160448][T20305] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3494'. [ 590.192808][T20307] binder: 20306:20307 ioctl c0306201 0 returned -14 [ 590.545085][T20322] FAULT_INJECTION: forcing a failure. [ 590.545085][T20322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 590.545128][T20322] CPU: 0 UID: 0 PID: 20322 Comm: syz.2.3498 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 590.545162][T20322] Tainted: [L]=SOFTLOCKUP [ 590.545170][T20322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 590.545184][T20322] Call Trace: [ 590.545193][T20322] [ 590.545204][T20322] dump_stack_lvl+0xe8/0x150 [ 590.545247][T20322] should_fail_ex+0x46b/0x600 [ 590.545282][T20322] _copy_from_user+0x2d/0xb0 [ 590.545318][T20322] ucma_write+0x166/0x2f0 [ 590.545351][T20322] ? __pfx_ucma_write+0x10/0x10 [ 590.545382][T20322] ? rw_verify_area+0x25b/0x4e0 [ 590.545413][T20322] ? __pfx_ucma_write+0x10/0x10 [ 590.545442][T20322] vfs_write+0x2a3/0xba0 [ 590.545481][T20322] ? __pfx_vfs_write+0x10/0x10 [ 590.545515][T20322] ? __fget_files+0x2a/0x420 [ 590.545545][T20322] ? __fget_files+0x2a/0x420 [ 590.545570][T20322] ? __fget_files+0x3a6/0x420 [ 590.545596][T20322] ? __fget_files+0x2a/0x420 [ 590.545632][T20322] ksys_write+0x156/0x270 [ 590.545666][T20322] ? __pfx_ksys_write+0x10/0x10 [ 590.545705][T20322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.545732][T20322] do_syscall_64+0x15f/0xf80 [ 590.545754][T20322] ? trace_irq_disable+0x3b/0x140 [ 590.545794][T20322] ? clear_bhb_loop+0x40/0x90 [ 590.545821][T20322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.545844][T20322] RIP: 0033:0x7f7a3854cdd9 [ 590.545865][T20322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 590.545885][T20322] RSP: 002b:00007f7a3679e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 590.545911][T20322] RAX: ffffffffffffffda RBX: 00007f7a387c5fa0 RCX: 00007f7a3854cdd9 [ 590.545928][T20322] RDX: 0000000000000018 RSI: 0000200000000380 RDI: 0000000000000004 [ 590.545943][T20322] RBP: 00007f7a3679e090 R08: 0000000000000000 R09: 0000000000000000 [ 590.545957][T20322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 590.545969][T20322] R13: 00007f7a387c6038 R14: 00007f7a387c5fa0 R15: 00007ffe773e1288 [ 590.546004][T20322] [ 590.929953][T20328] binder_alloc: 20326: binder_alloc_buf size 16384 failed, no address space [ 590.929988][T20328] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 591.200544][T20346] binder: 20345:20346 ioctl c0306201 0 returned -14 [ 591.524899][T20367] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3510'. [ 591.607444][ T5691] usb 3-1: new full-speed USB device number 101 using dummy_hcd [ 591.633984][T20374] loop8: detected capacity change from 0 to 7 [ 591.635709][ T64] lo_rw_aio(loop8) starting read with raw_refcnt=0x1, refcnt=2 [ 591.637631][T20374] Dev loop8: unable to read RDB block 7 [ 591.637661][T20374] loop8: AHDI p1 p2 [ 591.637694][T20374] loop8: partition table partially beyond EOD, truncated [ 591.637985][T20374] loop8: p1 start 1702000233 is beyond EOD, truncated [ 591.638902][T20372] __loop_clr_fd(loop8) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 591.812010][ T5691] usb 3-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 591.812046][ T5691] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.812069][ T5691] usb 3-1: Product: syz [ 591.812086][ T5691] usb 3-1: Manufacturer: syz [ 591.812102][ T5691] usb 3-1: SerialNumber: syz [ 591.885874][ T5691] usb 3-1: config 0 descriptor?? [ 592.124100][ T5691] usb 3-1: selecting invalid altsetting 3 [ 592.124126][ T5691] comedi comedi4: could not set alternate setting 3 in high speed [ 592.124155][ T5691] usbdux 3-1:0.0: driver 'usbdux' failed to auto-configure device. [ 592.168885][T20395] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3515'. [ 592.191703][ T5691] usbdux 3-1:0.0: probe with driver usbdux failed with error -22 [ 592.243314][ T5691] usb 3-1: USB disconnect, device number 101 [ 592.282217][T20407] binder: 20401:20407 ioctl c0306201 0 returned -14 [ 592.737218][ T7091] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 592.787606][ T5616] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 592.949817][ T7091] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 592.949850][ T7091] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 592.949881][ T7091] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 592.949897][ T7091] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.954912][ T7091] usb 4-1: config 0 descriptor?? [ 593.000512][ T5616] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 593.000552][ T5616] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 593.000577][ T5616] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 593.000636][ T5616] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 593.000660][ T5616] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.060676][ T5616] usb 1-1: config 0 descriptor?? [ 593.321081][T20452] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3525'. [ 593.475979][ T5616] usbhid 1-1:0.0: can't add hid device: -71 [ 593.480951][ T5616] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 593.493346][ T5616] usb 1-1: USB disconnect, device number 120 [ 593.539886][T20463] syzkaller1: entered promiscuous mode [ 593.539904][T20463] syzkaller1: entered allmulticast mode [ 594.359114][T20480] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3530'. [ 594.423371][T20482] netlink: 'syz.2.3531': attribute type 29 has an invalid length. [ 594.424637][T20482] netlink: 'syz.2.3531': attribute type 29 has an invalid length. [ 594.426510][T20482] netlink: 500 bytes leftover after parsing attributes in process `syz.2.3531'. [ 594.597701][ T1006] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 594.758544][ T1006] usb 1-1: Using ep0 maxpacket: 32 [ 594.761913][ T1006] usb 1-1: unable to get BOS descriptor or descriptor too short [ 594.770183][ T1006] usb 1-1: New USB device found, idVendor=7104, idProduct=2202, bcdDevice= 0.40 [ 594.770214][ T1006] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.770236][ T1006] usb 1-1: Product: syz [ 594.770253][ T1006] usb 1-1: Manufacturer: syz [ 594.770270][ T1006] usb 1-1: SerialNumber: syz [ 595.052450][ T1006] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 595.287443][ T1006] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 595.299236][ T1006] usb 1-1: USB disconnect, device number 121 [ 595.415316][ T5601] udevd[5601]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 595.492812][T16517] usb 4-1: USB disconnect, device number 116 Stopping sshd: [ 595.957643][ T5619] Bluetooth: hci0: command 0x0406 tx timeout [ 595.996884][ T5691] usb 1-1: new high-speed USB device number 122 using dummy_hcd stopped /usr/sbin/sshd (pid 5359) OK [ 596.095430][T20532] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3538'. [ 596.162621][ T5691] usb 1-1: Using ep0 maxpacket: 32 [ 596.198351][ T5691] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 596.198407][ T5691] usb 1-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 596.198435][ T5691] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.242480][ T5691] usb 1-1: config 0 descriptor?? Stopping crond: [ 596.664601][T20555] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3541'. [ 596.678095][ T5691] hid (null): bogus close delimiter [ 596.719094][ T5691] elecom 0003:056E:00E6.0028: unknown main item tag 0x2 [ 596.719166][ T5691] elecom 0003:056E:00E6.0028: bogus close delimiter [ 596.719182][ T5691] elecom 0003:056E:00E6.0028: item 0 0 2 10 parsing failed [ 596.723674][ T5691] elecom 0003:056E:00E6.0028: probe with driver elecom failed with error -22 stopped /usr/sbin/crond (pid 5342) OK [ 596.947162][T20521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.950072][T20521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.032919][T20561] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3542'. [ 597.110372][ T5691] usb 1-1: USB disconnect, device number 122 Stopping dhcpcd... stopped /sbin/dhcpcd (pid 5265) [ 597.666941][T16517] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 597.829637][T16517] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 597.829699][T16517] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 597.829766][T16517] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 597.829794][T16517] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.889687][T16517] usb 4-1: config 0 descriptor?? [ 597.938177][T16517] usbhid 4-1:0.0: couldn't find an input interrupt endpoint Stopping network: [ 598.327254][ T5616] usb 3-1: new full-speed USB device number 102 using dummy_hcd [ 598.456921][ T5616] usb 3-1: device descriptor read/64, error -71 [ 598.707415][ T5616] usb 3-1: new full-speed USB device number 103 using dummy_hcd [ 598.837082][ T5616] usb 3-1: device descriptor read/64, error -71 [ 598.953120][ T5616] usb usb3-port1: attempt power cycle OK [ 599.169327][ T5593] dvb-usb: did not find the firmware file 'dvb-usb-dibusb-5.0.0.11.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 599.169710][ T5593] dvb_usb_dibusb_mb 2-1:18.32: probe with driver dvb_usb_dibusb_mb failed with error -22 [ 599.204254][ T5593] dvb-usb: found a 'Grandtec USB1.1 DVB-T' in cold state, will try to load a firmware [ 599.232177][ T5593] usb 2-1: Direct firmware load for dvb-usb-dibusb-5.0.0.11.fw failed with error -2 [ 599.232211][ T5593] usb 2-1: Falling back to sysfs fallback for: dvb-usb-dibusb-5.0.0.11.fw [ 599.286990][ T5616] usb 3-1: new full-speed USB device number 104 using dummy_hcd [ 599.317682][ T5616] usb 3-1: device descriptor read/8, error -71 Stopping iptables: [ 599.388231][ T7091] usb 1-1: new high-speed USB device number 123 using dummy_hcd modprobe: can't change directory to 'syzkaller': No such file or directory iptables v1.8.11 (legacy): can't initialize iptables table `filter': Table does not exist (do you need to insmod?) Perhaps iptables or your kernel needs to be upgraded. FAIL [ 599.516963][ T7091] usb 1-1: device descriptor read/64, error -71 [ 599.567253][ T5616] usb 3-1: new full-speed USB device number 105 using dummy_hcd [ 599.588258][ T5616] usb 3-1: device descriptor read/8, error -71 Stopping system message bus: [ 599.697386][ T5616] usb usb3-port1: unable to enumerate USB device [ 599.770327][ T7091] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 599.916915][ T7091] usb 1-1: device descriptor read/64, error -71 [ 600.047857][ T7091] usb usb1-port1: attempt power cycle done [ 600.386947][ T7091] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 600.407801][ T5684] usb 4-1: USB disconnect, device number 117 [ 600.409617][ T7091] usb 1-1: device descriptor read/8, error -71 [ 600.544621][T20671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3552'. [ 600.647044][ T7091] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 600.672999][ T7091] usb 1-1: device descriptor read/8, error -71 [ 600.782275][ T7091] usb usb1-port1: unable to enumerate USB device Stopping klogd: [ 601.188781][T20690] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3555'. OK Stopping acpid: [ 601.897240][T20728] syzkaller1: entered promiscuous mode [ 601.897259][T20728] syzkaller1: entered allmulticast mode [ 602.298045][T20742] netlink: 'syz.3.3569': attribute type 29 has an invalid length. [ 602.299225][T20742] netlink: 'syz.3.3569': attribute type 29 has an invalid length. [ 602.300190][T20742] netlink: 500 bytes leftover after parsing attributes in process `syz.3.3569'. [ 602.569731][ T5616] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 602.761432][ T5616] usb 1-1: config 1 has an invalid interface number: 74 but max is 0 [ 602.761468][ T5616] usb 1-1: config 1 has no interface number 0 [ 602.761499][ T5616] usb 1-1: config 1 interface 74 has no altsetting 0 [ 602.761532][ T5616] usb 1-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice=45.f3 [ 602.761558][ T5616] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 OK [ 603.039659][T20735] netlink: 'syz.0.3568': attribute type 21 has an invalid length. [ 603.039833][T20735] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3568'. [ 603.160111][ T5616] usb 1-1: string descriptor 0 read error: -71 [ 603.174700][ T5616] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.74/input/input37 Stopping syslogd[ 603.199548][ T5616] usb 1-1: USB disconnect, device number 127 : [ 603.231930][T20762] netlink: 'syz.2.3571': attribute type 4 has an invalid length. stopped /sbin/syslogd (pid 4953) OK [ 603.809838][T20790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3577'. umount: can't remount debugfs read-only umount: tmpfs busy - remounted read-only [ 604.374458][T20804] sctp: [Deprecated]: syz.3.3581 (pid 20804) Use of struct sctp_assoc_value in delayed_ack socket option. [ 604.374458][T20804] Use struct sctp_sack_info instead [ 604.595326][T20809] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3582'. [ 606.038136][ T60] Bluetooth: hci2: command 0x0c1a tx timeout [ 606.038594][T20790] Bluetooth: hci2: Opcode 0x0c1a failed: -110 umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! [ 606.368883][ T4971] udevd[4971]: could not touch /run/udev/queue: Read-only file system Sent SIGTERM to all processes [ 606.408741][T20790] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 606.409106][T20790] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 606.409239][T20790] Bluetooth: hci3: Opcode 0x0406 failed: -4 Connection to 10.128.0.10 closed by remote host. [ 606.619823][T20790] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 606.692996][T20790] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 606.693120][T20790] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 606.757999][T20790] Bluetooth: hci1: Opcode 0x0406 failed: -4 Sent SIGKILL to all processes Requesting system poweroff [ 608.956478][T20833] smc: removing smcd device lo [ 608.957444][ T5593] dvb-usb: did not find the firmware file 'dvb-usb-dibusb-5.0.0.11.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 608.957670][ T5593] dvb_usb_dibusb_mb 2-1:18.49: probe with driver dvb_usb_dibusb_mb failed with error -22 [ 609.035541][ T5593] dvb-usb: found a 'Grandtec USB1.1 DVB-T' in cold state, will try to load a firmware [ 609.060054][ T5593] usb 2-1: Direct firmware load for dvb-usb-dibusb-5.0.0.11.fw failed with error -2 [ 609.060086][ T5593] usb 2-1: Falling back to sysfs fallback for: dvb-usb-dibusb-5.0.0.11.fw [ 609.060917][ T5593] ------------[ cut here ]------------ [ 609.060929][ T5593] ret [ 609.060936][ T5593] WARNING: drivers/base/firmware_loader/fallback.c:148 at firmware_fallback_sysfs+0x746/0xa30, CPU#0: kworker/0:3/5593 [ 609.060988][ T5593] Modules linked in: [ 609.061014][ T5593] CPU: 0 UID: 0 PID: 5593 Comm: kworker/0:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 609.061046][ T5593] Tainted: [L]=SOFTLOCKUP [ 609.061056][ T5593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 609.061073][ T5593] Workqueue: usb_hub_wq hub_event [ 609.061104][ T5593] RIP: 0010:firmware_fallback_sysfs+0x746/0xa30 [ 609.061137][ T5593] Code: 2e fc e9 5d fc ff ff e8 48 f8 2e fc c6 05 12 c6 00 0a 01 48 c7 c7 20 97 c5 8b e8 75 3b 91 fb e9 85 fc ff ff e8 2b f8 2e fc 90 <0f> 0b 90 4c 89 f7 48 c7 c6 20 98 c5 8b 4c 89 e2 e8 55 25 96 fb e9 [ 609.061167][ T5593] RSP: 0018:ffffc900041ae910 EFLAGS: 00010287 [ 609.061189][ T5593] RAX: ffffffff859623f5 RBX: dffffc0000000000 RCX: 0000000000100000 [ 609.061208][ T5593] RDX: ffffc90018202000 RSI: 000000000003ae70 RDI: 000000000003ae71 [ 609.061225][ T5593] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 609.061241][ T5593] R10: dffffc0000000000 R11: fffffbfff1f59a7f R12: ffffffff8c11b8a0 [ 609.061259][ T5593] R13: 0000000000001770 R14: ffff8880316ca0b0 R15: 00000000fffffff5 [ 609.061276][ T5593] FS: 0000000000000000(0000) GS:ffff888125cc7000(0000) knlGS:0000000000000000 [ 609.061296][ T5593] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 609.061313][ T5593] CR2: 00007f916cffa4c0 CR3: 0000000035c8e000 CR4: 00000000003526f0 [ 609.061343][ T5593] Call Trace: [ 609.061353][ T5593] [ 609.061369][ T5593] ? kfree+0x1c5/0x6c0 [ 609.061400][ T5593] ? _request_firmware+0xf11/0x1780 [ 609.061428][ T5593] ? _request_firmware+0x61b/0x1780 [ 609.061463][ T5593] _request_firmware+0x1052/0x1780 [ 609.061534][ T5593] ? __pfx__request_firmware+0x10/0x10 [ 609.061579][ T5593] request_firmware+0x36/0x50 [ 609.061611][ T5593] dvb_usb_download_firmware+0xb5/0x270 [ 609.061648][ T5593] ? __pfx__printk+0x10/0x10 [ 609.061683][ T5593] ? __pfx_dvb_usb_download_firmware+0x10/0x10 [ 609.061732][ T5593] dvb_usb_device_init+0xde2/0x2590 [ 609.061787][ T5593] ? lockdep_hardirqs_on+0x7a/0x110 [ 609.061830][ T5593] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 609.061863][ T5593] ? rt_spin_lock+0x1e0/0x400 [ 609.061897][ T5593] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 609.061932][ T5593] ? rt_spin_unlock+0x14f/0x200 [ 609.061966][ T5593] ? __pfx_dvb_usb_device_init+0x10/0x10 [ 609.061994][ T5593] ? rt_spin_unlock+0x160/0x200 [ 609.062039][ T5593] dibusb_probe+0x2d/0xf0 [ 609.062067][ T5593] usb_probe_interface+0x659/0xc70 [ 609.062116][ T5593] ? __pfx_usb_probe_interface+0x10/0x10 [ 609.062147][ T5593] really_probe+0x267/0xaf0 [ 609.062196][ T5593] __driver_probe_device+0x1e2/0x350 [ 609.062235][ T5593] driver_probe_device+0x4f/0x240 [ 609.062276][ T5593] __device_attach_driver+0x270/0x410 [ 609.062328][ T5593] bus_for_each_drv+0x25b/0x2f0 [ 609.062359][ T5593] ? __pfx___device_attach_driver+0x10/0x10 [ 609.062398][ T5593] ? __pfx_bus_for_each_drv+0x10/0x10 [ 609.062429][ T5593] ? rt_spin_unlock+0x160/0x200 [ 609.062469][ T5593] __device_attach+0x2c8/0x450 [ 609.062509][ T5593] ? __pfx___device_attach+0x10/0x10 [ 609.062548][ T5593] ? rt_spin_unlock+0x160/0x200 [ 609.062588][ T5593] device_initial_probe+0xa1/0xd0 [ 609.062629][ T5593] bus_probe_device+0x12d/0x220 [ 609.062671][ T5593] device_add+0x7ec/0xb90 [ 609.062712][ T5593] usb_set_configuration+0x1a87/0x2110 [ 609.062785][ T5593] usb_generic_driver_probe+0x8d/0x150 [ 609.062820][ T5593] usb_probe_device+0x1c4/0x3b0 [ 609.062859][ T5593] ? __pfx_usb_probe_device+0x10/0x10 [ 609.062890][ T5593] really_probe+0x267/0xaf0 [ 609.062937][ T5593] __driver_probe_device+0x1e2/0x350 [ 609.062979][ T5593] driver_probe_device+0x4f/0x240 [ 609.063020][ T5593] __device_attach_driver+0x270/0x410 [ 609.063063][ T5593] bus_for_each_drv+0x25b/0x2f0 [ 609.063095][ T5593] ? __pfx___device_attach_driver+0x10/0x10 [ 609.063133][ T5593] ? __pfx_bus_for_each_drv+0x10/0x10 [ 609.063164][ T5593] ? rt_spin_unlock+0x160/0x200 [ 609.063205][ T5593] __device_attach+0x2c8/0x450 [ 609.063245][ T5593] ? __pfx___device_attach+0x10/0x10 [ 609.063281][ T5593] ? rt_spin_unlock+0x160/0x200 [ 609.063321][ T5593] device_initial_probe+0xa1/0xd0 [ 609.063362][ T5593] bus_probe_device+0x12d/0x220 [ 609.063397][ T5593] device_add+0x7ec/0xb90 [ 609.063445][ T5593] usb_new_device+0x9f8/0x16e0 [ 609.063486][ T5593] ? __pfx_usb_new_device+0x10/0x10 [ 609.063526][ T5593] hub_event+0x2a49/0x4f60 [ 609.063626][ T5593] ? __pfx_hub_event+0x10/0x10 [ 609.063665][ T5593] ? process_one_work+0x8be/0x1630 [ 609.063714][ T5593] ? process_one_work+0x8be/0x1630 [ 609.063746][ T5593] process_one_work+0x98b/0x1630 [ 609.063814][ T5593] ? __pfx_process_one_work+0x10/0x10 [ 609.063845][ T5593] ? do_raw_spin_lock+0x12b/0x2f0 [ 609.063903][ T5593] worker_thread+0xb49/0x1140 [ 609.063969][ T5593] kthread+0x388/0x470 [ 609.063996][ T5593] ? __pfx_worker_thread+0x10/0x10 [ 609.064027][ T5593] ? __pfx_kthread+0x10/0x10 [ 609.064054][ T5593] ret_from_fork+0x514/0xb70 [ 609.064096][ T5593] ? __pfx_ret_from_fork+0x10/0x10 [ 609.064126][ T5593] ? __switch_to+0xc79/0x1410 [ 609.064168][ T5593] ? __pfx_kthread+0x10/0x10 [ 609.064195][ T5593] ret_from_fork_asm+0x1a/0x30 [ 609.064250][ T5593] [ 609.064264][ T5593] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 609.064286][ T5593] CPU: 0 UID: 0 PID: 5593 Comm: kworker/0:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 609.064319][ T5593] Tainted: [L]=SOFTLOCKUP [ 609.064329][ T5593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 609.064345][ T5593] Workqueue: usb_hub_wq hub_event [ 609.064376][ T5593] Call Trace: [ 609.064386][ T5593] [ 609.064397][ T5593] vpanic+0x56c/0xa60 [ 609.064434][ T5593] ? __pfx__printk+0x10/0x10 [ 609.064461][ T5593] ? __pfx_vpanic+0x10/0x10 [ 609.064494][ T5593] ? is_bpf_text_address+0x292/0x2b0 [ 609.064519][ T5593] ? is_bpf_text_address+0x26/0x2b0 [ 609.064554][ T5593] panic+0xc5/0xd0 [ 609.064589][ T5593] ? __pfx_panic+0x10/0x10 [ 609.064635][ T5593] ? ret_from_fork_asm+0x1a/0x30 [ 609.064673][ T5593] __warn+0x315/0x4c0 [ 609.064707][ T5593] ? firmware_fallback_sysfs+0x746/0xa30 [ 609.064751][ T5593] ? firmware_fallback_sysfs+0x746/0xa30 [ 609.064793][ T5593] __report_bug+0x29a/0x540 [ 609.064818][ T5593] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 609.064862][ T5593] ? firmware_fallback_sysfs+0x746/0xa30 [ 609.064896][ T5593] ? __pfx___report_bug+0x10/0x10 [ 609.064932][ T5593] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 609.064965][ T5593] ? rt_spin_unlock+0x14f/0x200 [ 609.065005][ T5593] ? firmware_fallback_sysfs+0x746/0xa30 [ 609.065032][ T5593] report_bug+0x16a/0x220 [ 609.065052][ T5593] ? firmware_fallback_sysfs+0x746/0xa30 [ 609.065083][ T5593] ? firmware_fallback_sysfs+0x748/0xa30 [ 609.065113][ T5593] handle_bug+0x9c/0x200 [ 609.065143][ T5593] exc_invalid_op+0x1a/0x50 [ 609.065171][ T5593] asm_exc_invalid_op+0x1a/0x20 [ 609.065195][ T5593] RIP: 0010:firmware_fallback_sysfs+0x746/0xa30 [ 609.065230][ T5593] Code: 2e fc e9 5d fc ff ff e8 48 f8 2e fc c6 05 12 c6 00 0a 01 48 c7 c7 20 97 c5 8b e8 75 3b 91 fb e9 85 fc ff ff e8 2b f8 2e fc 90 <0f> 0b 90 4c 89 f7 48 c7 c6 20 98 c5 8b 4c 89 e2 e8 55 25 96 fb e9 [ 609.065259][ T5593] RSP: 0018:ffffc900041ae910 EFLAGS: 00010287 [ 609.065279][ T5593] RAX: ffffffff859623f5 RBX: dffffc0000000000 RCX: 0000000000100000 [ 609.065296][ T5593] RDX: ffffc90018202000 RSI: 000000000003ae70 RDI: 000000000003ae71 [ 609.065313][ T5593] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 609.065329][ T5593] R10: dffffc0000000000 R11: fffffbfff1f59a7f R12: ffffffff8c11b8a0 [ 609.065347][ T5593] R13: 0000000000001770 R14: ffff8880316ca0b0 R15: 00000000fffffff5 [ 609.065373][ T5593] ? firmware_fallback_sysfs+0x745/0xa30 [ 609.065418][ T5593] ? kfree+0x1c5/0x6c0 [ 609.065448][ T5593] ? _request_firmware+0xf11/0x1780 [ 609.065475][ T5593] ? _request_firmware+0x61b/0x1780 [ 609.065509][ T5593] _request_firmware+0x1052/0x1780 [ 609.065561][ T5593] ? __pfx__request_firmware+0x10/0x10 [ 609.065605][ T5593] request_firmware+0x36/0x50 [ 609.065634][ T5593] dvb_usb_download_firmware+0xb5/0x270 [ 609.065670][ T5593] ? __pfx__printk+0x10/0x10 [ 609.065697][ T5593] ? __pfx_dvb_usb_download_firmware+0x10/0x10 [ 609.065745][ T5593] dvb_usb_device_init+0xde2/0x2590 [ 609.065800][ T5593] ? lockdep_hardirqs_on+0x7a/0x110 [ 609.065840][ T5593] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 609.065874][ T5593] ? rt_spin_lock+0x1e0/0x400 [ 609.065907][ T5593] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 609.065941][ T5593] ? rt_spin_unlock+0x14f/0x200 [ 609.065976][ T5593] ? __pfx_dvb_usb_device_init+0x10/0x10 [ 609.066005][ T5593] ? rt_spin_unlock+0x160/0x200 [ 609.066049][ T5593] dibusb_probe+0x2d/0xf0 [ 609.066076][ T5593] usb_probe_interface+0x659/0xc70 [ 609.066125][ T5593] ? __pfx_usb_probe_interface+0x10/0x10 [ 609.066156][ T5593] really_probe+0x267/0xaf0 [ 609.066202][ T5593] __driver_probe_device+0x1e2/0x350 [ 609.066242][ T5593] driver_probe_device+0x4f/0x240 [ 609.066285][ T5593] __device_attach_driver+0x270/0x410 [ 609.066329][ T5593] bus_for_each_drv+0x25b/0x2f0 [ 609.066359][ T5593] ? __pfx___device_attach_driver+0x10/0x10 [ 609.066398][ T5593] ? __pfx_bus_for_each_drv+0x10/0x10 [ 609.066428][ T5593] ? rt_spin_unlock+0x160/0x200 [ 609.066467][ T5593] __device_attach+0x2c8/0x450 [ 609.066506][ T5593] ? __pfx___device_attach+0x10/0x10 [ 609.066544][ T5593] ? rt_spin_unlock+0x160/0x200 [ 609.066583][ T5593] device_initial_probe+0xa1/0xd0 [ 609.066622][ T5593] bus_probe_device+0x12d/0x220 [ 609.066657][ T5593] device_add+0x7ec/0xb90 [ 609.066697][ T5593] usb_set_configuration+0x1a87/0x2110 [ 609.066768][ T5593] usb_generic_driver_probe+0x8d/0x150 [ 609.066801][ T5593] usb_probe_device+0x1c4/0x3b0 [ 609.066835][ T5593] ? __pfx_usb_probe_device+0x10/0x10 [ 609.066864][ T5593] really_probe+0x267/0xaf0 [ 609.066914][ T5593] __driver_probe_device+0x1e2/0x350 [ 609.066952][ T5593] driver_probe_device+0x4f/0x240 [ 609.066990][ T5593] __device_attach_driver+0x270/0x410 [ 609.067033][ T5593] bus_for_each_drv+0x25b/0x2f0 [ 609.067064][ T5593] ? __pfx___device_attach_driver+0x10/0x10 [ 609.067101][ T5593] ? __pfx_bus_for_each_drv+0x10/0x10 [ 609.067129][ T5593] ? rt_spin_unlock+0x160/0x200 [ 609.067166][ T5593] __device_attach+0x2c8/0x450 [ 609.067206][ T5593] ? __pfx___device_attach+0x10/0x10 [ 609.067242][ T5593] ? rt_spin_unlock+0x160/0x200 [ 609.067283][ T5593] device_initial_probe+0xa1/0xd0 [ 609.067320][ T5593] bus_probe_device+0x12d/0x220 [ 609.067350][ T5593] device_add+0x7ec/0xb90 [ 609.067387][ T5593] usb_new_device+0x9f8/0x16e0 [ 609.067424][ T5593] ? __pfx_usb_new_device+0x10/0x10 [ 609.067460][ T5593] hub_event+0x2a49/0x4f60 [ 609.067545][ T5593] ? __pfx_hub_event+0x10/0x10 [ 609.067574][ T5593] ? process_one_work+0x8be/0x1630 [ 609.067622][ T5593] ? process_one_work+0x8be/0x1630 [ 609.067653][ T5593] process_one_work+0x98b/0x1630 [ 609.067708][ T5593] ? __pfx_process_one_work+0x10/0x10 [ 609.067738][ T5593] ? do_raw_spin_lock+0x12b/0x2f0 [ 609.067801][ T5593] worker_thread+0xb49/0x1140 [ 609.067866][ T5593] kthread+0x388/0x470 [ 609.067891][ T5593] ? __pfx_worker_thread+0x10/0x10 [ 609.067924][ T5593] ? __pfx_kthread+0x10/0x10 [ 609.067951][ T5593] ret_from_fork+0x514/0xb70 [ 609.067984][ T5593] ? __pfx_ret_from_fork+0x10/0x10 [ 609.068013][ T5593] ? __switch_to+0xc79/0x1410 [ 609.068057][ T5593] ? __pfx_kthread+0x10/0x10 [ 609.068084][ T5593] ret_from_fork_asm+0x1a/0x30 [ 609.068136][ T5593] [ 609.068770][ T5593] Kernel Offset: disabled