last executing test programs: 1m29.526435669s ago: executing program 1 (id=332): setns(0xc9, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/unix\x00') read$FUSE(r0, &(0x7f00000028c0)={0x2020}, 0x2020) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r1) openat(0xffffffffffffffff, &(0x7f0000000000)='./sec/tomoyo/exception_policy\x00', 0x2, 0x0) (async) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./sec/tomoyo/exception_policy\x00', 0x2, 0x0) write(r3, &(0x7f0000000040)='address_group grp1 0.0.0.0-25..255.255.255\n', 0x2b) mmap$IORING_OFF_SQ_RING(0x0, 0x1, 0x2000000, 0x12, r3, 0x0) prctl$PR_SET_ENDIAN(0x14, 0x2) (async) prctl$PR_SET_ENDIAN(0x14, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000480)={0x1, @pix={0xc2, 0x2c9, 0x32314752, 0x0, 0x100000ff, 0xc, 0x0, 0x6, 0x1, 0x6, 0x2, 0x3}}) socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000003a00290200000000fdfeffff0a"], 0x14}, 0x1, 0x6000000}, 0x0) readv(r6, &(0x7f0000000380)=[{&(0x7f0000000880)=""/4085, 0xff5}, {&(0x7f0000000140)=""/32, 0x20}, {&(0x7f00000003c0)=""/179, 0xb3}, {&(0x7f0000000280)=""/177, 0xb1}], 0x4) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090426bd7000ffdbdf253400000008000300", @ANYRES32=r4, @ANYBLOB="080002010100000014005500b1d53541efd240344fbeede3bb1bf31105002001360000000a0006005050505050500000"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8810) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./proc\x00', &(0x7f0000000580)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/net/rxrpc/calls\x00', 0x0, 0x0) (async) r7 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/net/rxrpc/calls\x00', 0x0, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r9, 0x8982, &(0x7f0000001980)={0x0, 'hsr0\x00', {0x3}, 0x8}) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r9, 0x8982, &(0x7f0000001980)={0x0, 'hsr0\x00', {0x3}, 0x8}) socket$kcm(0x2, 0xa, 0x2) (async) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f00000019c0)={'hsr0\x00', &(0x7f0000001a00)=@ethtool_sfeatures={0x3b, 0x2, [{0x200, 0x4a39b33c}, {0x2, 0xb}]}}) (async) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f00000019c0)={'hsr0\x00', &(0x7f0000001a00)=@ethtool_sfeatures={0x3b, 0x2, [{0x200, 0x4a39b33c}, {0x2, 0xb}]}}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000680)={'geneve1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000680)={'geneve1\x00', 0x0}) sendto$packet(r8, &(0x7f00000006c0)="05031600d3fd1484850000004788", 0xe, 0x4000084, &(0x7f0000001940)={0x11, 0x86dd, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) lseek(r7, 0x800, 0x0) read(r7, &(0x7f0000000600)=""/89, 0x59) read$nci(r7, &(0x7f0000001880)=""/133, 0x85) (async) read$nci(r7, &(0x7f0000001880)=""/133, 0x85) 1m29.154725097s ago: executing program 1 (id=335): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000280)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000540)=ANY=[@ANYBLOB="40000f0000000127"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x80015b1a, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)='3', 0x4e) bind$unix(r3, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$KDSIGACCEPT(r3, 0x4b4e, 0x5) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="f4120000", @ANYRES16=r5, @ANYBLOB="75b125bd6d00fcdbdf252100000008000300", @ANYRES32=r6, @ANYBLOB="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"], 0x12f4}, 0x1, 0x0, 0x0, 0x24040804}, 0x84) listen(r2, 0x0) unshare(0x20000400) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r7, r9, 0x8f5, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) connect$unix(r10, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4$unix(r2, 0x0, 0x0, 0x80800) 1m27.747553351s ago: executing program 3 (id=344): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/vrf/strict_mode\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='1', 0x1) write(r1, 0x0, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x48) 1m27.586585011s ago: executing program 3 (id=345): r0 = socket$kcm(0xa, 0x3, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x8000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{}], 0x1}, 0x8800) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}, 0x11}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 1m27.502408423s ago: executing program 3 (id=347): r0 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x18, r3, 0x1, 0x81}, 0x14) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) 1m27.411758398s ago: executing program 2 (id=348): r0 = socket$kcm(0xa, 0x3, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x8000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d800000004021dff0010000000e8fe55a1180015000600144003600e1205875d000008000000000000000001402000", 0x2f}], 0x1}, 0x8800) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x11, 0x0, 0x0, 0x900}, 0x60) 1m27.392011822s ago: executing program 3 (id=349): r0 = socket$netlink(0x10, 0x3, 0xc) (async) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, &(0x7f00000003c0)) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) (async) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000240)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x89, 0x3a, 'errors=remount-ro', 0x3a, '\xc7b~U\x19[R+\xf0\xb1n\xe9\xef\x00\x80\x94:\x9f\x03\xbe\xd88ov\x84\v|&T\x928\xba\x17\xf1k\x0f|L\x18%\xc7\x9a?\x9f0\xd0\xac\xdc-\x9cX\xc7\xcbY\xc3oK', 0x3a, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x165) (async) r3 = userfaultfd(0x801) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x880) (async) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x234}) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r5) (async) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)="89000000120081ae08060cdc030000fe7f03446b000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000640)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) (async) cachestat(r4, &(0x7f0000000680)={0x80000b, 0x80000000000000}, &(0x7f00000006c0), 0x0) (async) r7 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc539, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) (async) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) syz_usb_control_io$hid(r7, 0x0, 0x0) (async) syz_usb_control_io$hid(r7, &(0x7f0000000480)={0x24, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0022180000000501150091a60906a101090182008c0508950129309102c0"], 0x0}, 0x0) (async) syz_usb_ep_write(r5, 0x81, 0x2, &(0x7f0000000500)="40a6") (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000980)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000029c0)={0x50, 0x0, r8, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002a40)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000004a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004b00)={0x20, 0xfffffffffffffff5, 0xfffffffffffff001, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004b40)="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", 0x2000, &(0x7f0000006b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006c00)=ANY=[@ANYBLOB="b000000000000000f9ffffffffffffff03000000000000000100000000000000ccb600000000000007000000000000003b00000003000000010000000000000034fcffffffffffff01000000000000000300000000000000ff7f000000000000000100000000000005000000fdffffff070000000040000000000000", @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="018000000000b8df0000000002000000844d793c108331c20000000001"], 0x0, 0x0, 0x0}) (async) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000700)=@sr0, r9, &(0x7f0000006cc0)={0xc6, 0x6, 0x4, 0x5, 0x7fffffffffffffff, 0x8, 0x9, 0x7, 0xfffffff8}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) (async) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x4}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) 1m27.169114494s ago: executing program 1 (id=351): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffdfe) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000140)=r1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000600)={0x0, &(0x7f0000000640)}) close_range(r2, 0xffffffffffffffff, 0x0) 1m27.095685863s ago: executing program 2 (id=352): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ioctl$OCFS2_IOC_MOVE_EXT(r0, 0x40406f06, &(0x7f0000000240)={0x0, 0x5, 0x6, 0x5ab4ec37, 0x1}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x264b, 0x3475, 0xae50, 0x100007f, 0x1a, "9f940b3491d052d160d086ff229ac6de50806c"}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000180)={[0x100, 0x0, 0x30a30b42, 0x6, 0x1000, 0x2, 0x208000000001002, 0xfffffffffffffffc, 0x4, 0x80, 0x9, 0x2372, 0x8bd6, 0x4, 0x7f, 0x20], 0x26000, 0x216146}) ioctl$KVM_RUN(r4, 0xae80, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000340), 0x8401, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 1m26.898596272s ago: executing program 1 (id=353): socket$inet6(0xa, 0x1, 0x8010000000000084) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) r1 = open(&(0x7f0000000340)='.\x00', 0x0, 0x109) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) fsetxattr$security_capability(r1, &(0x7f0000000380), 0x0, 0x0, 0x0) close(0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='limits\x00') socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000000)='btrfs\x00', 0x1) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfad, 0x8000, 0x0, 0x369, 0x0, r2}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) socket$inet6_tcp(0xa, 0x1, 0x0) 1m26.866379452s ago: executing program 2 (id=354): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x1c9442, 0x19c) r1 = syz_open_procfs(0x0, &(0x7f0000000840)='task\x00') fcntl$notify(r1, 0x402, 0xfb0fca2daa2f4273) getdents(r1, &(0x7f0000000880)=""/180, 0xb4) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x129202, 0x0) read$dsp(r2, &(0x7f0000000140)=""/44, 0x2c) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000240)=0x33) mkdir(&(0x7f00000002c0)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./myproc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./myproc/scsi/device_info\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)="bc5154f23facdd5dd02bc92c723a6d6f64656c3a", 0x14) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f0000000540)='sysfs\x00', 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='./sys/bus/pci/drivers/i915\x00', 0x0, 0x0) r5 = openat(r4, &(0x7f00000005c0)='bind\x00', 0x1, 0x0) write(r5, &(0x7f0000000600)='0000:00:01.0', 0xc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000400)={0x0, 0x0}) fcntl$lock(r3, 0x0, &(0x7f0000000480)={0x0, 0x1, 0x9, 0xf30, r6}) close_range(r0, r0, 0x0) io_setup(0x20fe, &(0x7f0000000080)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv6/conf/syz_tun/disable_ipv6\x00', 0x1, 0x0) io_submit(r7, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x0, 0x600}]) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="fc000000218a32858795da0bf1f32e947b53f2", @ANYRES16=r9, @ANYBLOB="02002dbd7000fddbdf250300000068000580080001007564700014000280080001000a00000008000300030000000700010069620000080001007564700024000280080001000c00000008000200e9000000080001001f0000000800030059cf000008000100756470000c000280080001000d0000002c000380080002000b000000080003000100000008000100000000000800010050000000080001000300000054000280080001000101000008000200d30a00001c0003800800020000000100080002002e0100000800010006000000040004000400040014000380080002000100000008000200feffffff0800020003000000"], 0xfc}, 0x1, 0x0, 0x0, 0x20004}, 0x4040800) 1m25.884334289s ago: executing program 2 (id=355): r0 = socket$kcm(0xa, 0x3, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x8000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{}], 0x1}, 0x8800) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}, 0x11}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 1m25.686184937s ago: executing program 2 (id=356): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000080010000060a01040000000000000000010000000900020073797a310000000038000480340001800c00010062697477697365002400028008000340000000040800024000000000080006400000000008000140000000000900010073797a30"], 0x1f4}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) (async, rerun: 32) r1 = socket$igmp(0x2, 0x3, 0x2) (rerun: 32) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000a80)={0x0, 0x5, 0x69, 0x2, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x3b}, @loopback}, 0x10) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) (async) userfaultfd(0x801) r2 = syz_usb_connect(0x1, 0x36, &(0x7f0000000100)=ANY=[], &(0x7f0000000140)={0xffffffffffffffbe, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwrite64(r3, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000280)='./sys\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/devices/system/cpu/vulnerabilities/retbleed\x00', 0x0, 0x0) read(r4, &(0x7f0000000340), 0x100) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/devices/system/cpu/vulnerabilities/spectre_v2\x00', 0x0, 0x0) read(r5, &(0x7f00000003c0), 0x100) getsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f0000000040), &(0x7f0000000540)=0x4) (async) ioperm(0x1, 0xb2be, 0x163f) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) (async, rerun: 32) syz_usb_control_io$lan78xx(r2, &(0x7f0000000580)={0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)=ANY=[@ANYBLOB="000304000000cad7cb234090672d8cb327735b09af708a154942583ddc29997584115171ce5cc3b5885c70861373b7741ea1312becef07d1e8f9702dfdb9543c13707ef900a7e12af3b37e969ddb0086faf7657b48a4ba5a685e70266d73db28d3e769827c41bc043994d64cae166df9254d71b06a1d31542b6d8ca0115147824e9bfda45e54cd8c278097b7e896e89a9e1125f4dfc18a759eb0d1d18de710228f8f74d17026ff6b5918e608071a86ebc172a33995bfc25a4c14a736cd04a50731d298a29111ce47682d"]}, &(0x7f0000000840)={0x34, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000700)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000780)={0xc0, 0xa1, 0x4, 0x7}, &(0x7f00000007c0)={0x40, 0xa0, 0x4, 0x2c6}, &(0x7f0000000800)={0xc0, 0xa2, 0x2f, "9b38b85dcac013eee1d9f0ae77638d8c45c5c4b81cbb9cb5ee12ac97f3d376da9376e3781ed22e91f767ab744d3fd0"}}) (async, rerun: 32) ptrace$getregset(0x4204, r6, 0x201, &(0x7f0000000180)={0x0, 0xfffffffffffffe0e}) (async) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x91}) (async) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_CONTINUE(r7, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) (async, rerun: 64) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './sys/devices/system/cpu/vulnerabilities/spectre_v2/file0\x00'}) ioctl$IOMMU_VFIO_SET_IOMMU(r8, 0x3b66, 0x3) (async) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) 1m25.470460994s ago: executing program 1 (id=357): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xffffffffffffff82, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="69cf3e37bb12a755532a31537f6a3f5cb26cd73b1641650d09ea72aeaa94cc9e15aad63c14d39a3a64bb41640e500dfab9a8fd373ab786b4c7114870c4b9f26f838dd2828f1ced8205ac6937b9e731565fb6508ad088c7bb9bad6b709114fd39a95449747747b12b56778e670061c99f3972c7f004ae734d411461e9c6fdd1633ac317e131beb497db9398120817421c0b6dfdc8b22289faa631c76f952e705bb534fbe4773cc9c695cf4790eb6394b46cd361666f5c988b12932b3a1c663ff3258c5a0427214a1ffb74c0d99adb0c0ca6dc8427aadde35e6202aa0192eff6c5bbe532c5e022fead07cf"], 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x40000) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001180)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a78000000060a010400000000000000000a0004050900010073797a31000000004c000480480001800a000100696e6e65720000003800028008000440000000121400058004000100696d6d656469617465000000080003400000000f080002400000008408000140000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x8890}, 0x24008000) (async) r1 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010002000000406d0422c200000000000109022d0001010080320904000002030000000921110100012223000905810340000a00000905020340"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0022230000000600ff0900a10185020901150026ff0075089508810209029512910209039503b102c0"], 0x0}, 0x0) (async, rerun: 64) r2 = syz_open_dev$hidraw(&(0x7f0000000480), 0x0, 0x0) (rerun: 64) ioctl$HIDIOCGRAWINFO(r2, 0x80084803, &(0x7f0000001240)=""/4096) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) (async, rerun: 64) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x1, 0x0) (async, rerun: 64) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x10, 0x803, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 64) sendmsg$inet(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x128}, 0x0) (rerun: 64) recvmsg$unix(r3, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x70}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) socket(0x1, 0x2, 0x0) (async) openat$kvm(0x0, &(0x7f0000000700), 0x8041, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, 0x0) (rerun: 64) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000007c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000800)=0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000840)={0x0, 0xffffffff, 0x0, 0x1, 0x1f4}, &(0x7f00000008c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x200, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x105c87, 0x800, 0x0, 0x8003aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x32c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x80, 0x0, 0x261}}], 0x1, 0x0, 0x0) (async, rerun: 32) syz_open_dev$vbi(&(0x7f0000000240), 0x3, 0x2) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) 1m25.336682551s ago: executing program 3 (id=358): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f00000001c0)=0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000200)={r2, 0xf, 0x8001}, 0x8) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000080)=""/152, &(0x7f0000000140)=0x98) 1m24.765539286s ago: executing program 3 (id=359): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x38, r2, 0x85958ff252a47259, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg1\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c0d5}, 0x240048c0) (async, rerun: 64) syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 1m23.904045635s ago: executing program 0 (id=361): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ipvlan0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000002780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002740)={&(0x7f0000000140)={0x25fc, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_MODES_OURS={0xbc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xb8, 0x5, "568d170e407f511b435cb8413ec24b315329272967ee5fd6895e91ed5f129b143689c0892469f55005ce22950aa7ec389b47b1c3bb08dd5fdb0d3948853fdf1e2bef36c172d957b1581d225a9db81ddcbd3b24114d45ea69aed2177cebcc49bef5a3e4cf094b9b62f4956db3bd1bbb5c5d5c977a94954cf050d23f049104c67e4baaf1b61ce84c81de1d7c3f86277791d161142cfbafcca2a31d97f1c6b5903c9d114cf0f0136624684663faba6ea560dea88e5d"}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_MODES_OURS={0x2210, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_BITS={0x124, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe9f6}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '(@(:$\\\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x1c, 0x2, '.@$+\\,)!{#$.@#{!&%-(\'#%\x00'}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x15, 0x2, '/$)\xc2$:**-)\\]{&!}\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '^*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1800000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffff00}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x19, 0x2, ':@[-/\x8b-/*\x7f.((,.,(}$#\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_BITS={0xd0, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd62}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '*\'\xa1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ':]\'-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x885}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\x91\'(\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2f37f234}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfc}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}]}, @ETHTOOL_A_EEE_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x1}, @ETHTOOL_A_EEE_MODES_OURS={0x27c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_VALUE={0xdb, 0x4, "beae57462934097b0bdeaddd8ae95ea2e294db75f0e60f03778290f37c8a8fd430a33eed08b5a41a542baee5d30cdfb0294aaa32bb21c9feda3341ac6387c1afc85b6a607e790345e8716375d4f4107ba4e4a29c05e226e7fd96b2b991be2130cba0d1462c15832edfd51c3b901c938709024be091f2228dbb13ee2a56295e278beded31bd6db14c5372a7d89e9ab05cd201a68f6bbc3c8971a1195acbb34cf3c1725102ac7b950c183eb82c228ff29be85447e8fac9f3135a37f6c51f24b5bb1aa654323322bd6dcec680ba67b5c88e4a6678dfd819c1"}, @ETHTOOL_A_BITSET_VALUE={0x76, 0x4, "232f9d74babf3ebe8e70384f5afbf0cc31afaae9fdae2442a1c3123f383bbece2fb12d8e23b3c2d9707abe9ed39dc5b9b6013e10d2410fff0cfd52b1fb9cea3b46445a9270e42cee25373780023f5f04b0d11cce8b7980f717b2f4a6855daeefac75445f150a58e64342a0c897555a00ecac"}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x10c, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '!\'\xfe&@:@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xeb1}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '[(),:,!}%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '-#^{-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '${#-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '^[\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '!^\xa5]!\xb8,,\xb5[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x25fc}, 0x1, 0x0, 0x0, 0x8040}, 0x4000000) r4 = accept4$x25(0xffffffffffffffff, &(0x7f00000027c0), &(0x7f0000002800)=0x12, 0x800) r5 = accept4$x25(r4, &(0x7f0000002840), &(0x7f0000002880)=0x12, 0x80000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000028c0)={{0x1, 0x1, 0x18, r5, {0x6}}, './file0\x00'}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r6, 0xc0406619, &(0x7f0000002900)={@desc={0x1, 0x0, @auto="3ca4afce914ede1a"}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000002940)={'vcan0\x00'}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000002980)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x8}, &(0x7f0000002a40)=0x90) setsockopt$inet_sctp_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000002a80)=@assoc_value={r7, 0xff}, 0x8) sendmsg$NFT_BATCH(r6, &(0x7f0000002bc0)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002b80)={&(0x7f0000002b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWOBJ={0x30, 0x12, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_DATA={0x1c, 0x4, 0x0, 0x1, [@NFTA_CT_EXPECT_DPORT={0x6, 0x3, 0x1, 0x0, 0x4e22}, @NFTA_CT_EXPECT_SIZE={0x5, 0x5, 0x40}, @NFTA_CT_EXPECT_L3PROTO={0x6, 0x1, 0x1, 0x0, 0x18}]}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x804) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002c00)='net/arp\x00') ioctl$VHOST_VDPA_SET_CONFIG(r8, 0x4008af74, &(0x7f0000002c40)={0x5, 0x6c, "a54ef3466f431b9e4d2faca373b394f5b52c54664511f5c5d3c078daa5a28eb109e0d1484552151330dee49a6de2c3a91f898e7f875f44e322e9e46ca5e46a056b6e2ca5dc1138e45810f7f236d4614732e7e722c3809da3cc4e1389b1c4543f966dbce801a4a1335c03f636"}) ioctl$PPPIOCSPASS(r8, 0x40107447, &(0x7f0000002d00)={0x4, &(0x7f0000002cc0)=[{0x657f, 0x73, 0x81, 0x6}, {0x31, 0x1, 0x7, 0x10000}, {0x3, 0x8, 0x6, 0x5}, {0x4, 0x6, 0xd, 0x3}]}) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r9, 0x0, 0xcb, &(0x7f0000002d40)={0x1, 0x4, 0x88, 0x5ea5, @vifc_lcl_ifindex=r2, @multicast2}, 0x10) r10 = openat$binderfs_log(0xffffffffffffff9c, &(0x7f0000002d80)='./binderfs/binder_logs/transactions_hashed\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000002e00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000002ec0)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002e80)={&(0x7f0000002e40)={0x28, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r11}, @val={0xc, 0x99, {0xfffff28d, 0x77}}}}}, 0x28}}, 0x4001) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) r13 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000002f00), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r13, 0xc02c564a, &(0x7f0000002f40)={0x6, 0x34424752, 0x3, @stepwise={0x0, 0x4, 0x8001, 0x2, 0x0, 0x3}}) ioctl$IOMMU_VFIO_IOAS$GET(r8, 0x3b88, &(0x7f0000002f80)={0xc, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r10, 0x3b88, &(0x7f0000002fc0)={0xc, r14}) ioctl$VIDIOC_ENCODER_CMD(r8, 0xc028564d, &(0x7f0000003000)={0x1, 0x0, [0x3, 0x39b1, 0x6, 0x8, 0xff, 0x7, 0x0, 0x4]}) fstat(r12, &(0x7f0000003040)) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003100), r8) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000003240)={&(0x7f00000030c0), 0xc, &(0x7f0000003200)={&(0x7f0000003140)={0xa0, r15, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_RULES={0x84, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xe8c}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1ff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x80}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7fff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xbb}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3ff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x80000001}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x50}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20008800}, 0x8011) 1m23.76773969s ago: executing program 0 (id=362): ioctl(0xffffffffffffffff, 0xc138fd03, &(0x7f0000000100)="0400") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet(0x2, 0x2, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000005c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000600)=0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, 0x0, 0x1, &(0x7f0000000640)={0x2e, 0x8, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=[@rights={{0x10}}, @rights={{0x10}}], 0x20}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) syz_ublk_add_dev(r3, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000900)=@new_dev={0x2, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000940)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000980)={0x0, 0xbd, 0x20000, 0x1, 0x7f}, &(0x7f0000000a00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x2, 0x141}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3afd, 0x2, 0x10000001, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x200, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x20, 0x1, 0x26d}}], 0x1, 0x0, 0x0) (async) r9 = socket$kcm(0x2d, 0x2, 0x0) getsockopt$bt_hci(r9, 0x11d, 0x1, 0x0, &(0x7f0000000180)) (async) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) memfd_create(&(0x7f0000000200)='\xb1Y\xf8$\x00\x00\x00\x00\x00\xb8\xc9\x84*\xc0\xfeR\x01\x95', 0x1) (async) writev(r10, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000240)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 1m23.60293254s ago: executing program 0 (id=363): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x5032}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000003c0)={'syzkaller0\x00', 0x1}) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000440)="010000000000220010000900000000010000000000020800450000740001400040063c817f0000017f00000104d204d2", 0xe7}, {&(0x7f0000000480)='\x00'/16, 0x10}], 0x2) r2 = socket(0x1e, 0x4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) connect$inet(r2, &(0x7f0000000000)={0x1e, 0x4e22, @rand_addr=0x640100fd}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r1, {0xd}}, 'auth.unix.ip/channel\x00'}) fanotify_mark(r4, 0x10, 0x4000000, r1, &(0x7f0000000500)='auth.unix.ip/channel\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/rpc\x00') r6 = openat(r5, &(0x7f00000000c0)='auth.unix.ip/channel\x00', 0x2, 0x0) close(r6) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0x8082801, 0x5fa, 0x8, 0x1ff, 0x0, [{0x3, 0x9, 0x8, '\x00', 0xe}, {0x5, 0xb, 0x72, '\x00', 0x6}, {0xfe, 0x5, 0x9, '\x00', 0x5}, {0x81, 0x3, 0x8, '\x00', 0x5}, {0xf, 0x4d, 0x7f, '\x00', 0x60}, {0x0, 0x0, 0x2}, {0x1, 0x9, 0x9, '\x00', 0xa}, {0xd, 0x7, 0xb, '\x00', 0x45}, {0x8, 0x5, 0x0, '\x00', 0xff}, {0x6, 0x3, 0x0, '\x00', 0x6}, {0x40, 0x4, 0x2, '\x00', 0xa3}, {0x8, 0x5d, 0x19, '\x00', 0xff}, {0x3, 0x86, 0xa, '\x00', 0xf9}, {0x5, 0x4f, 0x2}, {0x64, 0x87, 0x96, '\x00', 0x7}, {0x6, 0x0, 0x23, '\x00', 0x7b}, {0x3, 0x7, 0xd1}, {0x68, 0x3, 0x2, '\x00', 0x3}, {0x8, 0x9e, 0xc0, '\x00', 0x2}, {0x3e, 0x48, 0x10, '\x00', 0x2}, {0x7, 0x1, 0x2, '\x00', 0x1}, {0x0, 0x7, 0x6, '\x00', 0x4}, {0x93, 0x9, 0x4, '\x00', 0xe6}, {0x3, 0x7f, 0xa0, '\x00', 0x47}]}}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x101402, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000580)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNGETFILTER(r8, 0x801054db, &(0x7f00000005c0)=""/85) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r9, 0x4008ae8a, &(0x7f0000000040)={0x1, 0x0, [{0x1, 0x9, 0x4b9, 0x4f1b04e0, 0x1000}]}) ioctl$KVM_SET_LAPIC(r9, 0x4400ae8f, &(0x7f0000000800)={"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"}) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x17, 0x5, 0x4, 0x0, 0x0, 0x4, 0xbb, 0x2, 0xc0, 0x6d, 0x26, 0x61, 0x7, 0x95, 0xd}}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 1m23.022271099s ago: executing program 0 (id=364): r0 = socket$kcm(0xa, 0x3, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x8000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d800000004021dff0010000000e8fe55a118001500060014", 0x18}], 0x1}, 0x8800) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}, 0x11}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 1m22.933104716s ago: executing program 0 (id=365): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f00000007c0)={0x0, 0x130, 0x30}, 0x18) r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000840)) mount_setattr(r0, &(0x7f0000000800)='./file0\x00', 0x800, &(0x7f0000000880)={0x81, 0x100070, 0x0, {r1}}, 0x20) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)={0x78, 0x14, 0x300, 0x70bd27, 0xfffffffc, {0x83, 0x0, 0xec0}, [@generic="e6dace25870927bf25bd8888a2783b6cc3abaa614f2c7e525f6d093930a227fd376d8f513c1d402d5f8a9ef435a20cd017227e1f6adccddd9ac67ae4edcfe98cbc2462cfee336a50494fef51a45e85a37e619f63a053dbb56268984b74ca19ac975172"]}, 0x78}, 0x1, 0x0, 0x0, 0x20048853}, 0x400c000) (async) r3 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x8, &(0x7f0000000200)=0xffffffffffffffff, 0x57) (async) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$DVB_DEMUX_DMX_REMOVE_PID(0xffffffffffffffff, 0x40026f34, &(0x7f0000000280)=0x1) (async) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/80, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000380)={0x1, 0x1, 0x0, &(0x7f00000003c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000440)) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000480)=0x1) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r4, 0x4008af04, &(0x7f00000004c0)) ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x405c5504, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x12c}}, 0x0) (async) r8 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r8, &(0x7f00000006c0)="12345678", 0x8, 0x0, &(0x7f0000000700)={0x2, 0x1234, @loopback}, 0x10) (async) setsockopt$inet_buf(r6, 0x0, 0x4, &(0x7f0000000140)="17000000020001000003be8c5ee17688a20032000203000a0292000098fc5ad90a00bb6a880000d6c8db0000dba67e06020000e28900000200df018002000000fc0607bdff59100ac45761547a681f009cee4a5a2d8f89814bc6c252674f00c88ebb01005033bf79ac2dfc060115003901000000000000ea0000000000000800b59bd2b8e50ce5af649a702202ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5a1b47b6806323deb3", 0xb8) (async) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x0, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000051100006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) 1m22.79030954s ago: executing program 0 (id=366): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010700000000000040fc33"], 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) memfd_create(&(0x7f00000001c0)='\xb1Y\xf8$\x00\x00\x00\x00\x00\xb8\xc9\x84*\xc0\xfeR\x01\x95', 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setxattr$system_posix_acl(&(0x7f00000009c0)='.\x00', &(0x7f0000000a00)='system.posix_acl_default\x00', &(0x7f0000000a40), 0x24, 0x0) mkdir(&(0x7f0000000a80)='./bus\x00', 0x0) listxattr(&(0x7f0000000ac0)='./bus\x00', &(0x7f0000000b00)=""/38, 0x26) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r2) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x3, 0xb7b, 0x0, &(0x7f0000000300)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018b", 0x0, 0x73}) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000200)={0x0, 0x30b2, 0x10, 0x2, 0x158}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000380)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000440)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4b}}}, &(0x7f0000000500)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$UBLK_U_CMD_GET_PARAMS(r9, 0x80207509, &(0x7f0000000c00)={0x0, 0xffff, 0x70, &(0x7f0000000b80)={0x70}}) syz_open_dev$ublk_chdev(&(0x7f0000000b40), r12, 0x8000) r13 = dup(r11) syz_ublk_setup_queues(r13, r10, &(0x7f0000000540)={0x0, 0x1, 0x3000, 0x3, 0x2a4}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x28, 0x1ffa, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x10000, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1000000, 0x2e4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4c2e, 0x80020, 0x0, 0x312}}], 0x1, &(0x7f0000000840)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="f0000000100030060000000000002000ac14224c0000000080000003000000000000000000000000000000000000298000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffe0000001000004d432"], 0xf0}}, 0x24000800) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0xc, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x439, 0x6, 0x9, 0x4, 0x8, '\x00', 0x4, 0x4}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m22.495394134s ago: executing program 2 (id=367): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001", @ANYRES8=0x0, @ANYRES16=r0], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40241, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc00000013000101000000000000000064010102000000000000000000000000640101020000000000000000000000000100000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYRESHEX=r2], 0xbc}, 0x1, 0x0, 0x0, 0x20048000}, 0x44000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000380)='dctcp', 0x5) bind$inet6(r3, &(0x7f0000000540)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000680)=0x1, 0x4) sendto$inet6(r3, &(0x7f00000006c0)="b20cae68", 0x4, 0x24000045, &(0x7f0000000700)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) sendto$inet6(r3, &(0x7f0000000740)='.', 0x1, 0x801, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000440)={'syzkaller1\x00', 0x1}) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020200020d00000000000000000000000200080008000000fd00000000000000020001000000000000000500000000a0030006000000000002000000ac1414ff0000000000000000030005000000000002000000000000000000000000000000010014"], 0x68}, 0x1, 0x7}, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x2) write(r6, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x8) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000480)={'syzkaller1\x00', @link_local}) setns(0xc9, 0x0) r7 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r7, &(0x7f00000000c0)={&(0x7f00000005c0)=@in6={0x2, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}}, 0x80, 0x0, 0x0, &(0x7f0000000640)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r8 = socket(0x1f, 0x5, 0x8) bind(r8, &(0x7f0000000300)=@generic={0x1f, "0000000000000100"}, 0xa) setsockopt(r8, 0x112, 0x11, 0x0, 0x0) write$tun(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 1m22.354047278s ago: executing program 1 (id=368): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000340)=0x7ffffffd, 0x4) write$binfmt_script(r3, 0x0, 0x6f4000) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='E<\x00\x00', @ANYRES16=r0, @ANYRES8=r3, @ANYRES32=r2, @ANYBLOB="08002600940900000800a100020000000800a0000002000008002700010000000800b700a5000000"], 0x44}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r4, &(0x7f00000002c0)='6', 0x1) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x2400, 0x8, 0x1, 0x8480, 0x0, 0x3}, 0x30, 0x1) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r5, 0xf504, 0x0) 0s ago: executing program 32 (id=359): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x38, r2, 0x85958ff252a47259, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg1\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c0d5}, 0x240048c0) (async, rerun: 64) syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): changing to 10 [ 79.304788][ T5701] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 79.304810][ T5701] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 79.304823][ T5701] usb 2-1: config 0 interface 0 has no altsetting 0 [ 79.304841][ T5701] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.306822][ T5701] usb 2-1: config 0 descriptor?? [ 79.307604][ T5842] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 79.510605][ T5841] ======================================================= [ 79.510605][ T5841] WARNING: The mand mount option has been deprecated and [ 79.510605][ T5841] and is ignored by this kernel. Remove the mand [ 79.510605][ T5841] option from the mount to silence this warning. [ 79.510605][ T5841] ======================================================= [ 79.510778][ T5841] 9pnet_fd: Insufficient options for proto=fd [ 79.555334][ T5345] usb 3-1: USB disconnect, device number 3 [ 79.618439][ T52] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 79.637340][ T52] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 79.830210][ T5858] fido_id[5858]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/0000:0000:0000.0001/report_descriptor': No such file or directory [ 79.883981][ T5701] usbhid 2-1:0.0: can't add hid device: -71 [ 79.884078][ T5701] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 79.905371][ T5701] usb 2-1: USB disconnect, device number 3 [ 79.960096][ T5866] raw_sendmsg: syz.0.34 forgot to set AF_INET. Fix it! [ 80.241795][ T5345] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 80.261417][ T5708] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 80.391588][ T5345] usb 4-1: Using ep0 maxpacket: 32 [ 80.392415][ T5345] usb 4-1: New USB device found: idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 80.393586][ T5345] usb 4-1: config 2 has an invalid interface number: 88 but max is 0 [ 80.393600][ T5345] usb 4-1: config 2 has no interface number 0 [ 80.393621][ T5345] usb 4-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 80.393635][ T5345] usb 4-1: config 2 interface 88 has no altsetting 0 [ 80.395421][ T5345] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 80.395433][ T5345] usb 4-1: Product: syz [ 80.395440][ T5345] usb 4-1: Manufacturer: syz [ 80.395448][ T5345] usb 4-1: SerialNumber: syz [ 80.398163][ T5870] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 80.411424][ T5708] usb 3-1: Using ep0 maxpacket: 16 [ 80.412216][ T5708] usb 3-1: New USB device found: idVendor=5543, idProduct=0064, bcdDevice=0.00 [ 80.415922][ T5708] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.415948][ T5708] usb 3-1: config 0 interface 0 has no altsetting 0 [ 80.415978][ T5708] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.422584][ T5708] usb 3-1: config 0 descriptor?? [ 80.605041][ T5870] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 80.647721][ T5701] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 80.660742][ T5708] uclogic 0003:5543:0064.0002: unknown main item tag 0x0 [ 80.660773][ T5708] uclogic 0003:5543:0064.0002: unknown main item tag 0x0 [ 80.660798][ T5708] uclogic 0003:5543:0064.0002: unknown main item tag 0x0 [ 80.660822][ T5708] uclogic 0003:5543:0064.0002: unknown main item tag 0x0 [ 80.660847][ T5708] uclogic 0003:5543:0064.0002: unknown main item tag 0x0 [ 80.697040][ T5882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.697525][ T5882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.719442][ T5884] netlink: 20 bytes leftover after parsing attributes in process `syz.2.36'. [ 80.720305][ T5708] uclogic 0003:5543:0064.0002: hiddev0,hidraw0: USB HID v0.01 Device [HID 5543:0064] on usb-dummy_hcd.2-1/input0 [ 80.722456][ T5886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.725039][ T5884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.36'. [ 80.730977][ T5886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.774014][ T5708] rxe_eth0 speed is unknown, defaulting to 1000 [ 80.795192][ T5701] usb 1-1: Using ep0 maxpacket: 8 [ 80.796216][ T5701] usb 1-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 80.800213][ T5701] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.800234][ T5701] usb 1-1: Product: syz [ 80.800248][ T5701] usb 1-1: Manufacturer: syz [ 80.800260][ T5701] usb 1-1: SerialNumber: syz [ 80.811580][ T5701] usb 1-1: config 0 descriptor?? [ 80.911657][ T5759] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 81.017385][ T5701] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 81.066649][ T5759] usb 2-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 81.068765][ T5759] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.068807][ T5759] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 81.073480][ T5759] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.073508][ T5759] usb 2-1: Product: syz [ 81.073521][ T5759] usb 2-1: Manufacturer: syz [ 81.073534][ T5759] usb 2-1: SerialNumber: syz [ 81.097981][ T5759] cdc_mbim 2-1:1.0: skipping garbage [ 81.256258][ T5870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.257039][ T5870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.269982][ T5870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.274051][ T5870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.297626][ T5883] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 81.323053][ T5345] asix 4-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 81.323579][ T5345] asix 4-1:2.88: probe with driver asix failed with error -71 [ 81.349386][ T5345] usb 4-1: USB disconnect, device number 2 [ 81.781706][ T5701] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 81.790838][ T5701] usb 1-1: USB disconnect, device number 3 [ 81.917861][ T5883] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 81.918800][ T5759] cdc_mbim 2-1:1.0: setting tx_max = 48 [ 81.929706][ T5759] cdc_mbim 2-1:1.0: cdc-wdm1: USB WDM device [ 81.938113][ T5759] wwan wwan0: port wwan0mbim0 attached [ 81.976973][ T5759] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, c6:e4:c8:c7:5d:fc [ 82.122413][ T5759] usb 2-1: USB disconnect, device number 4 [ 82.125393][ T5759] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 82.235556][ T5759] wwan wwan0: port wwan0mbim0 disconnected [ 82.811703][ T5759] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 82.818597][ T5943] capability: warning: `syz.1.48' uses deprecated v2 capabilities in a way that may be insecure [ 82.965120][ T5759] usb 4-1: Using ep0 maxpacket: 8 [ 82.966300][ T5759] usb 4-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 82.973262][ T5759] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 82.973309][ T5759] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.979359][ T5759] usb 4-1: config 0 descriptor?? [ 83.096091][ T9] usb 3-1: USB disconnect, device number 4 [ 83.201580][ T5759] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 83.394819][ T5969] FAULT_INJECTION: forcing a failure. [ 83.394819][ T5969] name failslab, interval 1, probability 0, space 0, times 0 [ 83.394851][ T5969] CPU: 1 UID: 0 PID: 5969 Comm: syz.2.51 Tainted: G L syzkaller #0 PREEMPT(full) [ 83.394874][ T5969] Tainted: [L]=SOFTLOCKUP [ 83.394880][ T5969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 83.394890][ T5969] Call Trace: [ 83.394897][ T5969] [ 83.394905][ T5969] dump_stack_lvl+0xe8/0x150 [ 83.394935][ T5969] should_fail_ex+0x3eb/0x540 [ 83.394966][ T5969] should_failslab+0xa8/0x100 [ 83.394985][ T5969] ? do_getname+0x2e/0x250 [ 83.395008][ T5969] kmem_cache_alloc_noprof+0x9c/0x600 [ 83.395032][ T5969] ? do_futex+0x3e7/0x4e0 [ 83.395057][ T5969] ? do_getname+0x2e/0x250 [ 83.395086][ T5969] do_getname+0x2e/0x250 [ 83.395107][ T5969] ? getname_flags+0x11/0x20 [ 83.395132][ T5969] do_sys_openat2+0xce/0x200 [ 83.395156][ T5969] ? __se_sys_futex+0x3a8/0x450 [ 83.395179][ T5969] ? __pfx_do_sys_openat2+0x10/0x10 [ 83.395204][ T5969] ? ksys_write+0x242/0x270 [ 83.395230][ T5969] ? __pfx___se_sys_futex+0x10/0x10 [ 83.395256][ T5969] ? __pfx_ksys_write+0x10/0x10 [ 83.395295][ T5969] __x64_sys_openat+0x138/0x170 [ 83.395324][ T5969] do_syscall_64+0x166/0x520 [ 83.395349][ T5969] ? trace_irq_disable+0x3b/0x140 [ 83.395369][ T5969] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.395388][ T5969] ? clear_bhb_loop+0x70/0xc0 [ 83.395411][ T5969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.395429][ T5969] RIP: 0033:0x7f2a6155ed8e [ 83.395447][ T5969] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 83.395462][ T5969] RSP: 002b:00007f2a6252ef18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 83.395482][ T5969] RAX: ffffffffffffffda RBX: 00007f2a6252f6c0 RCX: 00007f2a6155ed8e [ 83.395495][ T5969] RDX: 0000000000000000 RSI: 00007f2a616351e6 RDI: ffffffffffffff9c [ 83.395508][ T5969] RBP: 00007f2a61635ab8 R08: 0000000000000000 R09: 0000000000000000 [ 83.395520][ T5969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.395534][ T5969] R13: 00007f2a61826038 R14: 00007f2a61825fa0 R15: 00007fff9334fab8 [ 83.395565][ T5969] [ 83.541332][ T5935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.541734][ T5935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.548198][ T5759] usb 4-1: USB disconnect, device number 3 [ 83.653054][ T5345] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 83.761375][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 83.811349][ T5345] usb 2-1: Using ep0 maxpacket: 8 [ 83.811932][ T5345] usb 2-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 83.814697][ T5345] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.814719][ T5345] usb 2-1: Product: syz [ 83.814732][ T5345] usb 2-1: Manufacturer: syz [ 83.814744][ T5345] usb 2-1: SerialNumber: syz [ 83.817147][ T5345] usb 2-1: config 0 descriptor?? [ 83.941351][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 83.943661][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 83.943706][ T9] usb 3-1: New USB device found: idVendor=045e, idProduct=0468, bcdDevice=b2.9c [ 83.944683][ T9] usb 3-1: config 3 has an invalid interface number: 74 but max is 0 [ 83.944704][ T9] usb 3-1: config 3 has no interface number 0 [ 83.944783][ T9] usb 3-1: config 3 interface 74 altsetting 1 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 83.944808][ T9] usb 3-1: config 3 interface 74 altsetting 1 has an endpoint descriptor with address 0xC3, changing to 0x83 [ 83.944830][ T9] usb 3-1: config 3 interface 74 altsetting 1 has a duplicate endpoint with address 0x5, skipping [ 83.944848][ T9] usb 3-1: config 3 interface 74 altsetting 1 bulk endpoint 0xD has invalid maxpacket 8 [ 83.944859][ T9] usb 3-1: config 3 interface 74 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 83.944870][ T9] usb 3-1: config 3 interface 74 altsetting 1 has an endpoint descriptor with address 0xB1, changing to 0x81 [ 83.944882][ T9] usb 3-1: config 3 interface 74 altsetting 1 endpoint 0x81 has invalid maxpacket 9507, setting to 1024 [ 83.944894][ T9] usb 3-1: config 3 interface 74 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 1024 [ 83.944909][ T9] usb 3-1: config 3 interface 74 altsetting 1 has an endpoint descriptor with address 0x49, changing to 0x9 [ 83.944930][ T9] usb 3-1: config 3 interface 74 altsetting 1 endpoint 0x9 has invalid maxpacket 17751, setting to 1024 [ 83.944952][ T9] usb 3-1: config 3 interface 74 altsetting 1 bulk endpoint 0x9 has invalid maxpacket 1024 [ 83.944971][ T9] usb 3-1: config 3 interface 74 altsetting 1 has 9 endpoint descriptors, different from the interface descriptor's value: 7 [ 83.944993][ T9] usb 3-1: config 3 interface 74 has no altsetting 0 [ 83.946878][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.946899][ T9] usb 3-1: Product: syz [ 83.946912][ T9] usb 3-1: Manufacturer: syz [ 83.946924][ T9] usb 3-1: SerialNumber: syz [ 83.966738][ T5972] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 83.966941][ T5972] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 83.967164][ T5972] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 84.022807][ T5345] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 84.184771][ T5974] netlink: 20 bytes leftover after parsing attributes in process `syz.3.53'. [ 84.421437][ T27] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 84.571314][ T27] usb 4-1: Using ep0 maxpacket: 16 [ 84.572044][ T27] usb 4-1: New USB device found: idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 84.573077][ T27] usb 4-1: config 0 has an invalid interface number: 49 but max is 0 [ 84.573099][ T27] usb 4-1: config 0 has no interface number 0 [ 84.573136][ T27] usb 4-1: config 0 interface 49 altsetting 0 endpoint 0x8A has invalid maxpacket 14378, setting to 64 [ 84.573181][ T27] usb 4-1: config 0 interface 49 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.575780][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.575801][ T27] usb 4-1: Product: syz [ 84.575814][ T27] usb 4-1: Manufacturer: syz [ 84.575826][ T27] usb 4-1: SerialNumber: syz [ 84.578383][ T27] usb 4-1: config 0 descriptor?? [ 84.704075][ T9] ipaq 3-1:3.74: PocketPC PDA converter detected [ 84.707763][ T9] usb 3-1: active config #3 != 1 ?? [ 84.733439][ T9] usb 3-1: USB disconnect, device number 5 [ 84.795753][ T27] usb 4-1: USB disconnect, device number 4 [ 84.929494][ T5982] sg_write: data in/out 163806/24 bytes for SCSI command 0x0-- guessing data in; [ 84.929494][ T5982] program syz.2.57 not setting count and/or reply_len properly [ 85.221362][ T5683] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 85.371464][ T5683] usb 3-1: Using ep0 maxpacket: 16 [ 85.373219][ T5683] usb 3-1: New USB device found: idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 85.376295][ T5683] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.376317][ T5683] usb 3-1: Product: syz [ 85.376330][ T5683] usb 3-1: Manufacturer: syz [ 85.376359][ T5683] usb 3-1: SerialNumber: syz [ 85.380032][ T5683] usb 3-1: config 0 descriptor?? [ 85.422816][ T5991] netlink: 'syz.3.61': attribute type 4 has an invalid length. [ 85.422833][ T5991] netlink: 'syz.3.61': attribute type 5 has an invalid length. [ 85.422844][ T5991] netlink: 'syz.3.61': attribute type 27 has an invalid length. [ 85.452134][ T5683] gspca_main: spca508-2.14.0 probing 041e:4018 [ 85.665820][ T5345] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 85.684086][ T5345] usb 2-1: USB disconnect, device number 5 [ 85.752118][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 85.777388][ T6005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.66'. [ 85.816769][ T5683] gspca_spca508: reg_read err -71 [ 85.817562][ T5683] gspca_spca508: reg_read err -71 [ 85.819381][ T5683] gspca_spca508: reg_read err -71 [ 85.819749][ T5683] gspca_spca508: reg_read err -71 [ 85.820189][ T5683] gspca_spca508: reg write: error -71 [ 85.820270][ T5683] spca508 3-1:0.0: probe with driver spca508 failed with error -71 [ 85.823532][ T5683] usb 3-1: USB disconnect, device number 6 [ 85.951336][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 85.952796][ T9] usb 1-1: New USB device found: idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 85.953846][ T9] usb 1-1: config index 0 descriptor too short (expected 27632, got 27) [ 85.953861][ T9] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 85.953872][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.953881][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 85.953891][ T9] usb 1-1: config 1 has no interface number 0 [ 85.953915][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.028680][ T9] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 86.171327][ T5701] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 86.259732][ T9] snd_usb_pod 1-1:1.1: endpoint not available, using fallback values [ 86.260143][ T9] snd_usb_pod 1-1:1.1: invalid control EP [ 86.260170][ T9] snd_usb_pod 1-1:1.1: cannot start listening: -22 [ 86.260511][ T9] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 86.261163][ T9] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 86.331339][ T5701] usb 4-1: Using ep0 maxpacket: 16 [ 86.338908][ T5701] usb 4-1: unable to get BOS descriptor or descriptor too short [ 86.338955][ T5701] usb 4-1: New USB device found: idVendor=17cc, idProduct=1969, bcdDevice=0.40 [ 86.341398][ T5701] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.341419][ T5701] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 86.343606][ T5701] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.343627][ T5701] usb 4-1: Product: syz [ 86.343640][ T5701] usb 4-1: Manufacturer: syz [ 86.343652][ T5701] usb 4-1: SerialNumber: syz [ 86.716650][ T27] usb 1-1: USB disconnect, device number 4 [ 86.781148][ T5701] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 86.786056][ T5701] usb 4-1: selecting invalid altsetting 1 [ 86.786089][ T5701] snd-usb-caiaq 4-1:1.0: can't set alt interface. [ 86.786107][ T5701] usb 4-1: unable to init card! (ret=-5) [ 86.786600][ T5701] snd-usb-caiaq 4-1:1.0: probe with driver snd-usb-caiaq failed with error -5 [ 86.796554][ T5701] usb 4-1: selecting invalid altsetting 1 [ 86.796573][ T5701] snd-usb-caiaq 4-1:1.1: can't set alt interface. [ 86.796586][ T5701] usb 4-1: unable to init card! (ret=-5) [ 86.798710][ T5701] snd-usb-caiaq 4-1:1.1: probe with driver snd-usb-caiaq failed with error -5 [ 86.815992][ T5701] usb 4-1: USB disconnect, device number 5 [ 86.819249][ T2260] cfg80211: failed to load regulatory.db [ 86.866032][ T5614] udevd[5614]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 86.874277][ T6018] netlink: 48 bytes leftover after parsing attributes in process `syz.1.70'. [ 86.874508][ T6018] netlink: 48 bytes leftover after parsing attributes in process `syz.1.70'. [ 86.880026][ T6019] netlink: 48 bytes leftover after parsing attributes in process `syz.1.70'. [ 86.880051][ T6019] netlink: 48 bytes leftover after parsing attributes in process `syz.1.70'. [ 87.101880][ T5345] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 87.254881][ T5345] usb 3-1: unable to get BOS descriptor or descriptor too short [ 87.254932][ T5345] usb 3-1: New USB device found: idVendor=05ac, idProduct=025b, bcdDevice=0.40 [ 87.257142][ T5345] usb 3-1: config 1 interface 0 altsetting 251 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 87.257172][ T5345] usb 3-1: config 1 interface 0 has no altsetting 0 [ 87.259473][ T5345] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.259496][ T5345] usb 3-1: Product: syz [ 87.259513][ T5345] usb 3-1: Manufacturer: syz [ 87.259526][ T5345] usb 3-1: SerialNumber: syz [ 87.556354][ T6057] netlink: NAT attribute has 8 unknown bytes [ 87.556398][ T6057] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 87.559881][ T5345] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input7 [ 87.600451][ T4964] bcm5974 3-1:1.0: could not read from device [ 87.601363][ T27] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 87.611723][ T4964] bcm5974 3-1:1.0: could not read from device [ 87.625707][ T4964] bcm5974 3-1:1.0: could not read from device [ 87.629551][ T4964] bcm5974 3-1:1.0: could not read from device [ 87.630955][ T5345] usb 3-1: USB disconnect, device number 7 [ 87.762628][ T27] usb 1-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 87.764411][ T27] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.764457][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.767396][ T27] usb 1-1: config 0 descriptor?? [ 87.987794][ T2260] usb 1-1: USB disconnect, device number 5 [ 88.308723][ T6065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.309143][ T6065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.445045][ T2260] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 88.551390][ T27] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 88.592939][ T2260] usb 1-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 88.595046][ T2260] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.595077][ T2260] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.598042][ T2260] usb 1-1: config 0 descriptor?? [ 88.723343][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 88.724798][ T27] usb 3-1: New USB device found: idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 88.725739][ T27] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 88.725759][ T27] usb 3-1: config 0 has no interface number 0 [ 88.727706][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.727729][ T27] usb 3-1: Product: syz [ 88.727741][ T27] usb 3-1: Manufacturer: syz [ 88.727754][ T27] usb 3-1: SerialNumber: syz [ 88.729504][ T27] usb 3-1: config 0 descriptor?? [ 88.748314][ T27] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 88.803217][ T6052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.803723][ T6052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.807107][ T5759] usb 1-1: USB disconnect, device number 6 [ 88.811363][ T5701] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 88.934014][ T27] gspca_spca1528: reg_w err -71 [ 88.941499][ T5701] usb 4-1: device descriptor read/64, error -71 [ 88.952746][ T27] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 88.955187][ T27] usb 3-1: USB disconnect, device number 8 [ 89.182091][ T5701] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 89.311370][ T5701] usb 4-1: device descriptor read/64, error -71 [ 89.422643][ T5701] usb usb4-port1: attempt power cycle [ 89.477306][ T6081] syzkaller1: entered promiscuous mode [ 89.477336][ T6081] syzkaller1: entered allmulticast mode [ 89.573935][ T6081] jffs2: notice: (6081) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 89.772360][ T5701] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 89.802966][ T5701] usb 4-1: device descriptor read/8, error -71 [ 89.894171][ T5759] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 90.024497][ T5759] usb 1-1: device descriptor read/64, error -71 [ 90.041389][ T5701] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 90.067794][ T5701] usb 4-1: device descriptor read/8, error -71 [ 90.122206][ T5683] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 90.174834][ T5701] usb usb4-port1: unable to enumerate USB device [ 90.192284][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 90.261382][ T5759] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 90.278895][ T5683] usb 3-1: Using ep0 maxpacket: 16 [ 90.290182][ T5683] usb 3-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 90.301077][ T5683] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.301109][ T5683] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.301128][ T5683] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 90.321353][ T9] usb 2-1: device descriptor read/64, error -71 [ 90.345585][ T5683] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.384771][ T5683] usb 3-1: config 0 descriptor?? [ 90.402617][ T5759] usb 1-1: device descriptor read/64, error -71 [ 90.511705][ T5759] usb usb1-port1: attempt power cycle [ 90.563024][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 90.731401][ T9] usb 2-1: device descriptor read/64, error -71 [ 90.810821][ T6096] syz.1.91 (6096): drop_caches: 2 [ 90.834589][ T5683] microsoft 0003:045E:07DA.0003: ignoring exceeding usage max [ 90.835711][ T5683] microsoft 0003:045E:07DA.0003: ignoring exceeding usage max [ 90.842397][ T9] usb usb2-port1: attempt power cycle [ 90.851350][ T5759] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 90.874965][ T5759] usb 1-1: device descriptor read/8, error -71 [ 91.113110][ T5759] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 91.132045][ T5759] usb 1-1: device descriptor read/8, error -71 [ 91.181341][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 91.202755][ T9] usb 2-1: device descriptor read/8, error -71 [ 91.241679][ T5759] usb usb1-port1: unable to enumerate USB device [ 91.451405][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 91.471782][ T9] usb 2-1: device descriptor read/8, error -71 [ 91.582364][ T9] usb usb2-port1: unable to enumerate USB device [ 92.001373][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 92.162219][ T9] usb 4-1: New USB device found: idVendor=20b7, idProduct=1540, bcdDevice=0.00 [ 92.163342][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.571095][ T6102] netlink: 'syz.3.93': attribute type 63 has an invalid length. [ 92.571138][ T6102] netlink: 16 bytes leftover after parsing attributes in process `syz.3.93'. [ 92.900865][ T5683] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 92.911784][ T5683] usb 3-1: USB disconnect, device number 9 [ 92.999432][ T6109] fido_id[6109]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 93.081525][ T5759] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 93.231324][ T5759] usb 1-1: Using ep0 maxpacket: 32 [ 93.231922][ T5759] usb 1-1: New USB device found: idVendor=17cc, idProduct=1010, bcdDevice=0.40 [ 93.234077][ T5759] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.234098][ T5759] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 93.237759][ T5759] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.237780][ T5759] usb 1-1: Product: syz [ 93.237793][ T5759] usb 1-1: Manufacturer: syz [ 93.237830][ T5759] usb 1-1: SerialNumber: syz [ 93.361407][ T5701] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 93.491120][ T5759] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 93.494387][ T5759] usb 1-1: USB disconnect, device number 11 [ 93.544940][ T5701] usb 2-1: unable to get BOS descriptor or descriptor too short [ 93.546744][ T5701] usb 2-1: not running at top speed; connect to a high speed hub [ 93.546774][ T5701] usb 2-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 93.549880][ T5701] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 93.549903][ T5701] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 93.549922][ T5701] usb 2-1: config 14 has no interface number 0 [ 93.549936][ T5701] usb 2-1: config 14 has no interface number 1 [ 93.550017][ T5701] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 93.550040][ T5701] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 93.550062][ T5701] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 93.550086][ T5701] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.550133][ T5701] usb 2-1: config 14 interface 57 has no altsetting 0 [ 93.550149][ T5701] usb 2-1: config 14 interface 228 has no altsetting 0 [ 93.556327][ T5701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.556369][ T5701] usb 2-1: Product: syz [ 93.556382][ T5701] usb 2-1: Manufacturer: syz [ 93.556395][ T5701] usb 2-1: SerialNumber: syz [ 93.682747][ T9] usb 4-1: Firmware version (0.0) predates our first public release. [ 93.682769][ T9] usb 4-1: Please update to version 0.2 or newer [ 94.009527][ T5683] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 94.010219][ T5701] legousbtower 2-1:14.57: interrupt endpoints not found [ 94.032863][ T5683] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 94.271336][ T27] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 94.381323][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 94.408460][ T5701] legousbtower 2-1:14.228: LEGO USB Tower firmware version is 170.80 build 16178 [ 94.411220][ T5701] legousbtower 2-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 94.421334][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 94.422112][ T27] usb 3-1: New USB device found: idVendor=05d1, idProduct=2001, bcdDevice=2.00 [ 94.423359][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.442509][ T27] usb 3-1: config 0 descriptor?? [ 94.453189][ T27] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 94.542012][ T9] usb 1-1: New USB device found: idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 94.542052][ T9] usb 1-1: too many configurations: 36, using maximum allowed: 8 [ 94.543409][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 94.543441][ T9] usb 1-1: can't read configurations, error -61 [ 94.641805][ T5683] usb 4-1: USB disconnect, device number 10 [ 94.671675][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 94.702890][ T6133] netlink: Invalid conntrack timeout [ 94.702996][ T6133] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 94.708154][ T6133] comedi comedi0: lab-pc-1200: a I/O base address must be specified [ 94.822968][ T9] usb 1-1: New USB device found: idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 94.823009][ T9] usb 1-1: too many configurations: 36, using maximum allowed: 8 [ 94.824769][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 94.824801][ T9] usb 1-1: can't read configurations, error -61 [ 94.825111][ T9] usb usb1-port1: attempt power cycle [ 94.909938][ T6134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.910367][ T6134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.929389][ T27] usb 3-1: Detected FT232A [ 94.942555][ T27] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 94.947142][ T27] usb 3-1: USB disconnect, device number 10 [ 94.967841][ T27] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 94.968707][ T27] ftdi_sio 3-1:0.0: device disconnected [ 95.131546][ T5683] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 95.161338][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 95.182301][ T9] usb 1-1: New USB device found: idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 95.182328][ T9] usb 1-1: too many configurations: 36, using maximum allowed: 8 [ 95.183627][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 95.183647][ T9] usb 1-1: can't read configurations, error -61 [ 95.272667][ T5683] usb 4-1: device descriptor read/64, error -71 [ 95.311375][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 95.332408][ T9] usb 1-1: New USB device found: idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 95.332432][ T9] usb 1-1: too many configurations: 36, using maximum allowed: 8 [ 95.334191][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 95.334225][ T9] usb 1-1: can't read configurations, error -61 [ 95.334527][ T9] usb usb1-port1: unable to enumerate USB device [ 95.511453][ T5683] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 95.641380][ T5683] usb 4-1: device descriptor read/64, error -71 [ 95.675347][ T6113] usb 2-1: LEGO USB Tower reset control request failed [ 95.678178][ T27] usb 2-1: USB disconnect, device number 10 [ 95.691447][ T27] legousbtower 2-1:14.228: LEGO USB Tower #-160 now disconnected [ 95.751565][ T5683] usb usb4-port1: attempt power cycle [ 95.781351][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 95.941855][ T9] usb 3-1: New USB device found: idVendor=050d, idProduct=3201, bcdDevice=0.40 [ 95.942787][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 95.945502][ T9] usb 3-1: string descriptor 0 read error: -22 [ 95.945610][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.091352][ T5683] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 96.112036][ T5683] usb 4-1: device descriptor read/8, error -71 [ 96.277478][ T6140] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 96.334989][ T5701] Process accounting resumed [ 96.351348][ T5683] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 96.357194][ T9] belkin 0003:050D:3201.0005: unknown main item tag 0x0 [ 96.357227][ T9] belkin 0003:050D:3201.0005: unknown main item tag 0x0 [ 96.357252][ T9] belkin 0003:050D:3201.0005: unknown main item tag 0x0 [ 96.357276][ T9] belkin 0003:050D:3201.0005: unknown main item tag 0x0 [ 96.357298][ T9] belkin 0003:050D:3201.0005: unknown main item tag 0x0 [ 96.357321][ T9] belkin 0003:050D:3201.0005: unknown main item tag 0x0 [ 96.357343][ T9] belkin 0003:050D:3201.0005: unknown main item tag 0x0 [ 96.357365][ T9] belkin 0003:050D:3201.0005: unknown main item tag 0x0 [ 96.357388][ T9] belkin 0003:050D:3201.0005: unknown main item tag 0x0 [ 96.372339][ T5683] usb 4-1: device descriptor read/8, error -71 [ 96.443656][ T9] belkin 0003:050D:3201.0005: hiddev0,hidraw0: USB HID v0.0b Device [HID 050d:3201] on usb-dummy_hcd.2-1/input0 [ 96.482984][ T5683] usb usb4-port1: unable to enumerate USB device [ 96.557458][ T6136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.557864][ T6136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.581334][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 96.731361][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 96.731944][ T9] usb 2-1: New USB device found: idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 96.734894][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.734915][ T9] usb 2-1: Product: syz [ 96.734927][ T9] usb 2-1: Manufacturer: syz [ 96.734939][ T9] usb 2-1: SerialNumber: syz [ 96.736566][ T9] usb 2-1: config 0 descriptor?? [ 97.143334][ T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 97.163113][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 97.174880][ T9] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 97.174936][ T9] usb 2-1: media controller created [ 97.202621][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 97.211117][ T6157] openvswitch: netlink: Actions may not be safe on all matching packets [ 97.345993][ T9] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 97.346011][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 97.440080][ T6164] openvswitch: netlink: Port 856954028 exceeds max allowable 65535 [ 97.557525][ T6146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.557960][ T6146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.691345][ T5683] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 97.821861][ T5683] usb 1-1: device descriptor read/64, error -71 [ 98.066073][ T27] usb 2-1: USB disconnect, device number 11 [ 98.073690][ T5683] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 98.103274][ T6169] Process accounting resumed [ 98.111739][ T27] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 98.113772][ T6137] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 98.158802][ T6173] FAULT_INJECTION: forcing a failure. [ 98.158802][ T6173] name failslab, interval 1, probability 0, space 0, times 0 [ 98.158823][ T6173] CPU: 1 UID: 0 PID: 6173 Comm: syz.1.111 Tainted: G L syzkaller #0 PREEMPT(full) [ 98.158840][ T6173] Tainted: [L]=SOFTLOCKUP [ 98.158844][ T6173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 98.158850][ T6173] Call Trace: [ 98.158855][ T6173] [ 98.158859][ T6173] dump_stack_lvl+0xe8/0x150 [ 98.158878][ T6173] should_fail_ex+0x3eb/0x540 [ 98.158895][ T6173] ? __pfx_proc_alloc_inode+0x10/0x10 [ 98.158908][ T6173] should_failslab+0xa8/0x100 [ 98.158920][ T6173] ? __pfx_proc_alloc_inode+0x10/0x10 [ 98.158936][ T6173] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 98.158951][ T6173] ? __d_alloc_parallel+0x39e/0x1700 [ 98.158962][ T6173] ? proc_alloc_inode+0x2a/0xc0 [ 98.158973][ T6173] ? proc_alloc_inode+0x2a/0xc0 [ 98.158987][ T6173] ? __pfx_proc_alloc_inode+0x10/0x10 [ 98.158998][ T6173] proc_alloc_inode+0x2a/0xc0 [ 98.159010][ T6173] alloc_inode+0x6a/0x1b0 [ 98.159026][ T6173] new_inode+0x1f/0x170 [ 98.159039][ T6173] ? proc_pid_make_inode+0x19/0x130 [ 98.159055][ T6173] proc_pid_make_inode+0x21/0x130 [ 98.159070][ T6173] proc_pident_instantiate+0x6d/0x2a0 [ 98.159088][ T6173] proc_pident_lookup+0x1b7/0x270 [ 98.159106][ T6173] __lookup_slow+0x1fb/0x2f0 [ 98.159124][ T6173] lookup_slow+0x59/0x80 [ 98.159140][ T6173] link_path_walk+0xd22/0x1910 [ 98.159165][ T6173] path_openat+0x1b7/0x20f0 [ 98.159185][ T6173] do_file_open+0x23e/0x4a0 [ 98.159198][ T6173] ? __pfx_do_file_open+0x10/0x10 [ 98.159216][ T6173] ? __pfx_kfree_link+0x10/0x10 [ 98.159236][ T6173] ? _raw_spin_unlock+0x28/0x50 [ 98.159248][ T6173] ? alloc_fd+0x6af/0x760 [ 98.159268][ T6173] do_sys_openat2+0x115/0x200 [ 98.159281][ T6173] ? __se_sys_futex+0x3a8/0x450 [ 98.159296][ T6173] ? __pfx_do_sys_openat2+0x10/0x10 [ 98.159312][ T6173] ? rcu_is_watching+0x16/0xb0 [ 98.159328][ T6173] __x64_sys_openat+0x138/0x170 [ 98.159344][ T6173] do_syscall_64+0x166/0x520 [ 98.159358][ T6173] ? trace_irq_disable+0x3b/0x140 [ 98.159369][ T6173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.159379][ T6173] ? clear_bhb_loop+0x70/0xc0 [ 98.159392][ T6173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.159402][ T6173] RIP: 0033:0x7fe0f855ed8e [ 98.159413][ T6173] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 98.159421][ T6173] RSP: 002b:00007fe0f93b8f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 98.159432][ T6173] RAX: ffffffffffffffda RBX: 00007fe0f93b96c0 RCX: 00007fe0f855ed8e [ 98.159440][ T6173] RDX: 0000000000000000 RSI: 00007fe0f86351e6 RDI: ffffffffffffff9c [ 98.159447][ T6173] RBP: 00007fe0f8635ab8 R08: 0000000000000000 R09: 0000000000000000 [ 98.159453][ T6173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.159459][ T6173] R13: 00007fe0f8826038 R14: 00007fe0f8825fa0 R15: 00007ffe4f042858 [ 98.159476][ T6173] [ 98.214463][ T5683] usb 1-1: device descriptor read/64, error -71 [ 98.281504][ T6137] usb 4-1: Using ep0 maxpacket: 16 [ 98.282209][ T6137] usb 4-1: New USB device found: idVendor=1e71, idProduct=2020, bcdDevice=0.00 [ 98.284583][ T6137] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.284611][ T6137] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.284640][ T6137] usb 4-1: config 0 interface 0 has no altsetting 0 [ 98.284697][ T6137] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.297068][ T6137] usb 4-1: config 0 descriptor?? [ 98.312203][ T6177] netlink: 'syz.1.112': attribute type 1 has an invalid length. [ 98.312219][ T6177] netlink: 244 bytes leftover after parsing attributes in process `syz.1.112'. [ 98.333927][ T5683] usb usb1-port1: attempt power cycle [ 98.568608][ T5701] usb 3-1: USB disconnect, device number 11 [ 98.683951][ T5683] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 98.703745][ T5683] usb 1-1: device descriptor read/8, error -71 [ 98.712948][ T6171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.715736][ T6171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.725862][ T6137] usbhid 4-1:0.0: can't add hid device: -71 [ 98.725955][ T6137] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 98.733249][ T6137] usb 4-1: USB disconnect, device number 15 [ 98.907381][ T6192] kAFS: unable to lookup cell 'syze¤@Ës0' [ 98.941342][ T5683] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 98.963649][ T5683] usb 1-1: device descriptor read/8, error -71 [ 99.071702][ T5683] usb usb1-port1: unable to enumerate USB device [ 99.361082][ T6199] netlink: 'syz.3.118': attribute type 1 has an invalid length. [ 99.364733][ T6199] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.118'. [ 99.365160][ T6199] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.118'. [ 99.461340][ T9] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 99.611335][ T5683] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 99.612000][ T9] usb 2-1: New USB device found: idVendor=9c74, idProduct=5b09, bcdDevice=0.00 [ 99.613128][ T9] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 99.613154][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 99.613185][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.614998][ T9] usb 2-1: config 0 descriptor?? [ 99.762073][ T5683] usb 4-1: New USB device found: idVendor=15c2, idProduct=2204, bcdDevice=0.00 [ 99.763053][ T5683] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.763079][ T5683] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.763099][ T5683] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 99.763151][ T5683] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.765185][ T5683] usb 4-1: config 0 descriptor?? [ 99.783312][ T6137] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 99.826156][ T9] usb 2-1: string descriptor 0 read error: -71 [ 99.834862][ T9] usbhid 2-1:0.0: fixing wrong optional hid class descriptors count [ 99.834880][ T9] usbhid 2-1:0.0: can't add hid device: -22 [ 99.834959][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 99.844615][ T9] usb 2-1: USB disconnect, device number 12 [ 99.951767][ T6137] usb 3-1: New USB device found: idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 99.952204][ T6137] usb 3-1: config 0 has no interfaces? [ 99.953766][ T6137] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.953779][ T6137] usb 3-1: Product: syz [ 99.953786][ T6137] usb 3-1: Manufacturer: syz [ 99.953793][ T6137] usb 3-1: SerialNumber: syz [ 99.956610][ T6137] usb 3-1: config 0 descriptor?? [ 100.004676][ T5683] usbhid 4-1:0.0: can't add hid device: -71 [ 100.004750][ T5683] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 100.006684][ T5683] usb 4-1: USB disconnect, device number 16 [ 100.166512][ T6137] usb 3-1: USB disconnect, device number 12 [ 100.430487][ T6205] Zero length message leads to an empty skb [ 100.500351][ T6209] netlink: 132 bytes leftover after parsing attributes in process `syz.1.122'. [ 100.500838][ T6208] netlink: 132 bytes leftover after parsing attributes in process `syz.1.122'. [ 100.532679][ T6208] syz.1.122 uses obsolete (PF_INET,SOCK_PACKET) [ 100.577866][ T6212] warning: `syz.3.123' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 100.589444][ T6212] netlink: 60 bytes leftover after parsing attributes in process `syz.3.123'. [ 100.589789][ T6212] netlink: 60 bytes leftover after parsing attributes in process `syz.3.123'. [ 100.775090][ T6223] ceph: Unknown parameter 'ùpÏI5ÑŠò' [ 100.781446][ T5701] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 100.861353][ T6137] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 100.931355][ T5701] usb 2-1: Using ep0 maxpacket: 8 [ 100.932196][ T5701] usb 2-1: New USB device found: idVendor=05ac, idProduct=023f, bcdDevice=0.00 [ 100.933586][ T5701] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 100.933609][ T5701] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.935529][ T5701] usb 2-1: config 0 descriptor?? [ 101.011812][ T6137] usb 1-1: New USB device found: idVendor=1235, idProduct=8201, bcdDevice=1.00 [ 101.012865][ T6137] usb 1-1: config index 0 descriptor too short (expected 69, got 51) [ 101.012920][ T6137] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.012943][ T6137] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.014796][ T6137] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.014817][ T6137] usb 1-1: Product: syz [ 101.014830][ T6137] usb 1-1: Manufacturer: syz [ 101.014843][ T6137] usb 1-1: SerialNumber: syz [ 101.024005][ T6137] usb 1-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 101.141560][ T5683] usb 2-1: USB disconnect, device number 13 [ 101.219213][ T6210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.219621][ T6210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.239752][ T6210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.240083][ T6210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.262637][ T6137] usb 1-1: Error initialising Scarlett Gen 2 Mixer Driver: -90 [ 101.293615][ T6137] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -90 [ 101.324088][ T5614] udevd[5614]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 101.470904][ T5683] usb 1-1: USB disconnect, device number 20 [ 101.645434][ T6226] block nbd3: shutting down sockets [ 101.794000][ T32] audit: type=1326 audit(1792289270.940:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6232 comm="syz.1.129" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe0f859e559 code=0x0 [ 101.935858][ T32] audit: type=1326 audit(1792289271.090:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6238 comm="syz.3.130" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4121d9e559 code=0x7ffc0000 [ 101.936068][ T32] audit: type=1326 audit(1792289271.090:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6238 comm="syz.3.130" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4121d9e559 code=0x7ffc0000 [ 101.938527][ T32] audit: type=1326 audit(1792289271.090:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6238 comm="syz.3.130" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4121d9e559 code=0x7ffc0000 [ 101.938674][ T32] audit: type=1326 audit(1792289271.090:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6238 comm="syz.3.130" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4121d9e559 code=0x7ffc0000 [ 101.938827][ T32] audit: type=1326 audit(1792289271.090:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6238 comm="syz.3.130" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4121d9e559 code=0x7ffc0000 [ 101.938981][ T32] audit: type=1326 audit(1792289271.090:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6238 comm="syz.3.130" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4121d9e559 code=0x7ffc0000 [ 101.939192][ T32] audit: type=1326 audit(1792289271.090:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6238 comm="syz.3.130" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4121d9e559 code=0x7ffc0000 [ 101.939324][ T32] audit: type=1326 audit(1792289271.090:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6238 comm="syz.3.130" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4121d9e559 code=0x7ffc0000 [ 101.939574][ T32] audit: type=1326 audit(1792289271.090:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6238 comm="syz.3.130" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4121d9e559 code=0x7ffc0000 [ 102.491373][ T6137] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 102.581340][ T5683] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 102.641313][ T6137] usb 4-1: Using ep0 maxpacket: 32 [ 102.643642][ T6137] usb 4-1: New USB device found: idVendor=14c8, idProduct=0003, bcdDevice=5.6c [ 102.647493][ T6137] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 102.649612][ T6137] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.649633][ T6137] usb 4-1: Product: syz [ 102.649646][ T6137] usb 4-1: Manufacturer: syz [ 102.649659][ T6137] usb 4-1: SerialNumber: syz [ 102.665733][ T6137] usb 4-1: config 0 descriptor?? [ 102.666410][ T6247] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 102.667568][ T6137] hub 4-1:0.0: bad descriptor, ignoring hub [ 102.667587][ T6137] hub 4-1:0.0: probe with driver hub failed with error -5 [ 102.671207][ T6137] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input9 [ 102.742257][ T5683] usb 1-1: Using ep0 maxpacket: 32 [ 102.746127][ T5683] usb 1-1: New USB device found: idVendor=046d, idProduct=08f6, bcdDevice=0.40 [ 102.749002][ T5683] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 102.758851][ T5683] usb 1-1: string descriptor 0 read error: -22 [ 102.759041][ T5683] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.781787][ T5683] gspca_main: STV06xx-2.14.0 probing 046d:08f6 [ 102.781874][ T5683] gspca_stv06xx: st6422 sensor detected [ 102.803416][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 102.871444][ T46] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 102.898675][ T6259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.898858][ T6247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.899687][ T6247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.907040][ T6259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.914600][ T6247] FAULT_INJECTION: forcing a failure. [ 102.914600][ T6247] name failslab, interval 1, probability 0, space 0, times 0 [ 102.914628][ T6247] CPU: 1 UID: 0 PID: 6247 Comm: syz.3.132 Tainted: G L syzkaller #0 PREEMPT(full) [ 102.914652][ T6247] Tainted: [L]=SOFTLOCKUP [ 102.914661][ T6247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 102.914672][ T6247] Call Trace: [ 102.914679][ T6247] [ 102.914686][ T6247] dump_stack_lvl+0xe8/0x150 [ 102.914715][ T6247] should_fail_ex+0x3eb/0x540 [ 102.914745][ T6247] should_failslab+0xa8/0x100 [ 102.914767][ T6247] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 102.914793][ T6247] ? __d_alloc+0x37/0x820 [ 102.914817][ T6247] ? __d_alloc+0x37/0x820 [ 102.914848][ T6247] __d_alloc+0x37/0x820 [ 102.914885][ T6247] d_alloc+0x4b/0x190 [ 102.914908][ T6247] ? lookup_one_qstr_excl+0xc4/0x360 [ 102.914937][ T6247] lookup_one_qstr_excl+0xd8/0x360 [ 102.914969][ T6247] filename_create+0x20e/0x370 [ 102.914994][ T6247] ? __pfx_filename_create+0x10/0x10 [ 102.915023][ T6247] filename_mkdirat+0xd2/0x510 [ 102.915041][ T6247] ? __might_fault+0xaf/0x130 [ 102.915067][ T6247] ? __pfx_filename_mkdirat+0x10/0x10 [ 102.915089][ T6247] ? do_getname+0x151/0x250 [ 102.915115][ T6247] __se_sys_mkdirat+0x35/0x150 [ 102.915137][ T6247] do_syscall_64+0x166/0x520 [ 102.915160][ T6247] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.915179][ T6247] ? clear_bhb_loop+0x70/0xc0 [ 102.915202][ T6247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.915219][ T6247] RIP: 0033:0x7f4121d9e559 [ 102.915236][ T6247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.915250][ T6247] RSP: 002b:00007f4122c25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 102.915269][ T6247] RAX: ffffffffffffffda RBX: 00007f4122025fa0 RCX: 00007f4121d9e559 [ 102.915282][ T6247] RDX: 00000000000001ff RSI: 0000200000000380 RDI: ffffffffffffff9c [ 102.915294][ T6247] RBP: 00007f4121e35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 102.915305][ T6247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.915315][ T6247] R13: 00007f4122026038 R14: 00007f4122025fa0 R15: 00007ffe1e546ba8 [ 102.915344][ T6247] [ 102.928858][ T6137] usb 4-1: USB disconnect, device number 17 [ 102.928948][ C1] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 102.989999][ T6250] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 102.990022][ T6250] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 102.994728][ T6250] vhci_hcd vhci_hcd.0: Device attached [ 102.997068][ T6260] vhci_hcd: connection closed [ 103.002265][ T46] usb 2-1: device descriptor read/64, error -71 [ 103.002306][ T12] vhci_hcd vhci_hcd.0: stop threads [ 103.002685][ T12] vhci_hcd vhci_hcd.0: release socket [ 103.002713][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 103.011162][ T9] usb 3-1: New USB device found: idVendor=1908, idProduct=1315, bcdDevice=0.00 [ 103.030500][ T9] usb 3-1: config 0 has an invalid interface number: 127 but max is 1 [ 103.030522][ T9] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 103.030541][ T9] usb 3-1: config 0 has no interface number 1 [ 103.030584][ T9] usb 3-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 103.030616][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 103.033219][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.033239][ T9] usb 3-1: Product: syz [ 103.033252][ T9] usb 3-1: Manufacturer: syz [ 103.033264][ T9] usb 3-1: SerialNumber: syz [ 103.036519][ T9] usb 3-1: config 0 descriptor?? [ 103.040163][ T9] usb-storage 3-1:0.127: USB Mass Storage device detected [ 103.050157][ T9] usb-storage 3-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 103.053734][ T5683] STV06xx 1-1:1.0: probe with driver STV06xx failed with error -71 [ 103.056992][ T5683] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 103.175292][ T5683] usb 1-1: USB disconnect, device number 21 [ 103.250321][ T46] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 103.253401][ T9] usb-storage 3-1:0.0: USB Mass Storage device detected [ 103.290898][ T6252] jffs2: notice: (6252) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 103.292596][ T9] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 103.401350][ T46] usb 2-1: device descriptor read/64, error -71 [ 103.455950][ T9] usb 3-1: USB disconnect, device number 13 [ 103.512114][ T46] usb usb2-port1: attempt power cycle [ 103.573675][ T6274] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.136'. [ 103.573965][ T6274] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.136'. [ 103.574188][ T6274] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.136'. [ 103.574404][ T6274] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.136'. [ 103.574640][ T6274] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.136'. [ 103.574875][ T6274] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.136'. [ 103.577139][ T6274] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.136'. [ 103.577383][ T6274] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.136'. [ 103.579245][ T6274] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.136'. [ 103.579521][ T6274] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.136'. [ 103.607815][ T6277] random: crng reseeded on system resumption [ 103.619855][ T6277] FAULT_INJECTION: forcing a failure. [ 103.619855][ T6277] name failslab, interval 1, probability 0, space 0, times 0 [ 103.619886][ T6277] CPU: 1 UID: 0 PID: 6277 Comm: syz.0.137 Tainted: G L syzkaller #0 PREEMPT(full) [ 103.619913][ T6277] Tainted: [L]=SOFTLOCKUP [ 103.619920][ T6277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 103.619932][ T6277] Call Trace: [ 103.619939][ T6277] [ 103.619947][ T6277] dump_stack_lvl+0xe8/0x150 [ 103.619980][ T6277] should_fail_ex+0x3eb/0x540 [ 103.620012][ T6277] should_failslab+0xa8/0x100 [ 103.620035][ T6277] __kmalloc_cache_noprof+0x9e/0x600 [ 103.620064][ T6277] ? memory_bm_create+0x131/0xf70 [ 103.620089][ T6277] ? memory_bm_create+0x131/0xf70 [ 103.620122][ T6277] memory_bm_create+0x131/0xf70 [ 103.620153][ T6277] ? __kmalloc_cache_noprof+0x31c/0x600 [ 103.620180][ T6277] ? __kmalloc_cache_noprof+0x148/0x600 [ 103.620205][ T6277] ? create_basic_memory_bitmaps+0x81/0x360 [ 103.620230][ T6277] ? create_basic_memory_bitmaps+0x81/0x360 [ 103.620264][ T6277] create_basic_memory_bitmaps+0x98/0x360 [ 103.620304][ T6277] snapshot_open+0x1aa/0x290 [ 103.620325][ T6277] ? __pfx_snapshot_open+0x10/0x10 [ 103.620344][ T6277] misc_open+0x2d5/0x350 [ 103.620371][ T6277] chrdev_open+0x4d9/0x600 [ 103.620397][ T6277] ? __pfx_chrdev_open+0x10/0x10 [ 103.620418][ T6277] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 103.620439][ T6277] ? devcgroup_check_permission+0x31/0x8f0 [ 103.620464][ T6277] ? __pfx_chrdev_open+0x10/0x10 [ 103.620486][ T6277] do_dentry_open+0x80e/0x1360 [ 103.620519][ T6277] vfs_open_consume+0x4a/0x350 [ 103.620540][ T6277] ? path_openat+0x16e1/0x20f0 [ 103.620562][ T6277] path_openat+0x16fc/0x20f0 [ 103.620601][ T6277] do_file_open+0x23e/0x4a0 [ 103.620625][ T6277] ? __pfx_do_file_open+0x10/0x10 [ 103.620669][ T6277] ? _raw_spin_unlock+0x28/0x50 [ 103.620691][ T6277] ? alloc_fd+0x6af/0x760 [ 103.620727][ T6277] do_sys_openat2+0x115/0x200 [ 103.620751][ T6277] ? __se_sys_futex+0x3a8/0x450 [ 103.620776][ T6277] ? __pfx_do_sys_openat2+0x10/0x10 [ 103.620806][ T6277] ? rcu_is_watching+0x16/0xb0 [ 103.620834][ T6277] __x64_sys_openat+0x138/0x170 [ 103.620864][ T6277] do_syscall_64+0x166/0x520 [ 103.620888][ T6277] ? trace_irq_disable+0x3b/0x140 [ 103.620908][ T6277] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.620927][ T6277] ? clear_bhb_loop+0x70/0xc0 [ 103.620951][ T6277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.620970][ T6277] RIP: 0033:0x7f950af9e559 [ 103.620988][ T6277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.621002][ T6277] RSP: 002b:00007f950be2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 103.621023][ T6277] RAX: ffffffffffffffda RBX: 00007f950b225fa0 RCX: 00007f950af9e559 [ 103.621037][ T6277] RDX: 0000000000121001 RSI: 0000200000000480 RDI: ffffffffffffff9c [ 103.621051][ T6277] RBP: 00007f950b035ab8 R08: 0000000000000000 R09: 0000000000000000 [ 103.621063][ T6277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.621074][ T6277] R13: 00007f950b226038 R14: 00007f950b225fa0 R15: 00007ffcc80ee8e8 [ 103.621105][ T6277] [ 103.785353][ T5611] svc: failed to register nfsdv3 RPC service (errno 5). [ 103.785358][ T2260] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 103.785372][ T5611] failed to unregister udp with rpcbind [ 103.853448][ T46] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 103.872201][ T46] usb 2-1: device descriptor read/8, error -71 [ 104.006714][ T2260] usb 4-1: Using ep0 maxpacket: 32 [ 104.031135][ T2260] usb 4-1: New USB device found: idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 104.061757][ T2260] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=4 [ 104.061803][ T2260] usb 4-1: SerialNumber: syz [ 104.067276][ T2260] usb 4-1: config 0 descriptor?? [ 104.080224][ T6288] ntfs3(loop0): try to read out of volume at offset 0x0 [ 104.110959][ T2260] as10x_usb: device has been detected [ 104.114890][ T46] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 104.129953][ T2260] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 104.141420][ T46] usb 2-1: device descriptor read/8, error -71 [ 104.150314][ T2260] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 104.234086][ T2260] as10x_usb: error during firmware upload part1 [ 104.234156][ T2260] Registered device nBox DVB-T Dongle [ 104.253779][ T46] usb usb2-port1: unable to enumerate USB device [ 104.275375][ T6273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.275807][ T6273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.276776][ T6273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.280287][ T6273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.307769][ T6273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.327146][ T6295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.327595][ T6295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.327636][ T6273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.328460][ T6273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.328921][ T6273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.329846][ T6273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.330207][ T6273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.427283][ T6137] usb 4-1: USB disconnect, device number 18 [ 104.446102][ T6296] nvme_rdma: malformed address passed: malformed:4420 [ 104.468193][ T6137] Unregistered device nBox DVB-T Dongle [ 104.471088][ T6137] as10x_usb: device has been disconnected [ 104.561340][ T2260] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 104.715561][ T2260] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 104.716519][ T2260] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.716573][ T2260] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 104.718438][ T2260] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.718459][ T2260] usb 1-1: Product: syz [ 104.718472][ T2260] usb 1-1: Manufacturer: syz [ 104.718485][ T2260] usb 1-1: SerialNumber: syz [ 104.769919][ T5701] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 104.931403][ T5701] usb 3-1: Using ep0 maxpacket: 16 [ 104.932065][ T5701] usb 3-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 104.933068][ T5701] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.933094][ T5701] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.933114][ T5701] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 104.933152][ T5701] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.937808][ T5701] usb 3-1: config 0 descriptor?? [ 105.088850][ T6309] CIFS: Attempting to mount //127.0.0.1/share [ 105.093332][ T13] CIFS: VFS: smbdirect_connect_resolve_route:121 rdma_resolve_route() failed -ENODEV [ 105.093359][ T13] CIFS: VFS: smbdirect_connect_rdma_event_handler:313 smbdirect_socket_schedule_cleanup(-ENODEV) called from smbdirect_connect_rdma_event_handler in line=313 status=RESOLVE_ROUTE_RUNNING [ 105.099293][ T6309] CIFS: VFS: _smbd_get_connection:327 connect to 127.0.0.1:5445 failed: -ENODEV [ 105.102319][ T13] CIFS: VFS: smbdirect_connect_resolve_route:121 rdma_resolve_route() failed -ENODEV [ 105.102340][ T13] CIFS: VFS: smbdirect_connect_rdma_event_handler:313 smbdirect_socket_schedule_cleanup(-ENODEV) called from smbdirect_connect_rdma_event_handler in line=313 status=RESOLVE_ROUTE_RUNNING [ 105.111433][ T6309] CIFS: VFS: _smbd_get_connection:327 connect to 127.0.0.1:445 failed: -ENODEV [ 105.111866][ T6309] CIFS: VFS: cifs_mount failed w/return code = -2 [ 105.130353][ T6296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.143388][ T6296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.172376][ T6311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.172865][ T6311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.184235][ T5701] microsoft 0003:045E:07DA.0006: ignoring exceeding usage max [ 105.191214][ T5701] microsoft 0003:045E:07DA.0006: ignoring exceeding usage max [ 105.345194][ T2260] cdc_ncm 1-1:1.0: bind() failure [ 105.360097][ T2260] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 105.363513][ T2260] usb 1-1: USB disconnect, device number 22 [ 105.397392][ T5701] microsoft 0003:045E:07DA.0006: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 105.401717][ T5701] usb 3-1: USB disconnect, device number 14 [ 105.451834][ T6317] fido_id[6317]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 106.101367][ T2260] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 106.261377][ T46] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 106.261989][ T2260] usb 2-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 106.263983][ T2260] usb 2-1: config 0 has no interfaces? [ 106.264017][ T2260] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.267876][ T2260] usb 2-1: config 0 descriptor?? [ 106.308224][ T6340] loop5: detected capacity change from 0 to 7 [ 106.337010][ T6340] Dev loop5: unable to read RDB block 7 [ 106.337054][ T6340] loop5: unable to read partition table [ 106.337256][ T6340] loop5: partition table beyond EOD, truncated [ 106.337287][ T6340] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 106.442120][ T46] usb 3-1: New USB device found: idVendor=0525, idProduct=a4a7, bcdDevice=1.00 [ 106.443311][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.479374][ T6324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.488663][ T6324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.490252][ T5701] usb 2-1: USB disconnect, device number 18 [ 106.676735][ T46] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 106.687433][ T27] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 106.843072][ T27] usb 1-1: New USB device found: idVendor=0596, idProduct=0001, bcdDevice=1.00 [ 106.844413][ T27] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.844441][ T27] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.844473][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.920549][ T2260] usb 3-1: USB disconnect, device number 15 [ 106.941336][ T5701] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 107.071663][ T5701] usb 2-1: device descriptor read/64, error -71 [ 107.110174][ T27] usbtouchscreen 1-1:1.0: Failed to read FW rev: -71 [ 107.110430][ T27] usbtouchscreen 1-1:1.0: probe with driver usbtouchscreen failed with error -71 [ 107.119868][ T6349] overlayfs: upper fs does not support file handles, falling back to index=off. [ 107.119886][ T6349] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 107.119948][ T6349] overlayfs: conflicting lowerdir path [ 107.137463][ T6349] capability: warning: `syz.3.159' uses 32-bit capabilities (legacy support in use) [ 107.166663][ T27] usb 1-1: USB disconnect, device number 23 [ 107.312451][ T5701] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 107.442795][ T5701] usb 2-1: device descriptor read/64, error -71 [ 107.564238][ T5701] usb usb2-port1: attempt power cycle [ 107.602549][ T2260] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 107.761325][ T2260] usb 4-1: Using ep0 maxpacket: 16 [ 107.762026][ T2260] usb 4-1: New USB device found: idVendor=320f, idProduct=5041, bcdDevice=0.00 [ 107.770491][ T2260] usb 4-1: config index 0 descriptor too short (expected 47652, got 36) [ 107.770514][ T2260] usb 4-1: config 153 has too many interfaces: 143, using maximum allowed: 32 [ 107.770531][ T2260] usb 4-1: config 153 has an invalid descriptor of length 171, skipping remainder of the config [ 107.770548][ T2260] usb 4-1: config 153 has 0 interfaces, different from the descriptor's value: 143 [ 107.770582][ T2260] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.927473][ T5701] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 107.963029][ T5701] usb 2-1: device descriptor read/8, error -71 [ 108.009118][ T2260] usb 4-1: string descriptor 0 read error: -71 [ 108.031359][ T2260] usb 4-1: USB disconnect, device number 19 [ 108.214960][ T6373] fuse: Unknown parameter 'ù6 ÆKÿõw/ØT¤un•)y$Ê3V„?' [ 108.221900][ T5701] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 108.246271][ T5701] usb 2-1: device descriptor read/8, error -71 [ 108.265088][ T6375] fuse: fd is not a fuse device [ 108.357246][ T5701] usb usb2-port1: unable to enumerate USB device [ 108.482734][ T6383] FAULT_INJECTION: forcing a failure. [ 108.482734][ T6383] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 108.482782][ T6383] CPU: 0 UID: 0 PID: 6383 Comm: syz.0.168 Tainted: G L syzkaller #0 PREEMPT(full) [ 108.482823][ T6383] Tainted: [L]=SOFTLOCKUP [ 108.482838][ T6383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 108.482855][ T6383] Call Trace: [ 108.482867][ T6383] [ 108.482879][ T6383] dump_stack_lvl+0xe8/0x150 [ 108.482930][ T6383] should_fail_ex+0x3eb/0x540 [ 108.482989][ T6383] _copy_to_user+0x31/0xb0 [ 108.483038][ T6383] __se_sys_newfstatat+0x307/0x3a0 [ 108.483085][ T6383] ? __pfx___se_sys_newfstatat+0x10/0x10 [ 108.483149][ T6383] ? __pfx_do_futex+0x10/0x10 [ 108.483186][ T6383] ? __fget_files+0x3a2/0x420 [ 108.483259][ T6383] ? rcu_is_watching+0x16/0xb0 [ 108.483314][ T6383] do_syscall_64+0x166/0x520 [ 108.483353][ T6383] ? trace_irq_disable+0x3b/0x140 [ 108.483384][ T6383] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.483415][ T6383] ? clear_bhb_loop+0x70/0xc0 [ 108.483454][ T6383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.483482][ T6383] RIP: 0033:0x7f950af9e559 [ 108.483510][ T6383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.483533][ T6383] RSP: 002b:00007f950be2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 108.483564][ T6383] RAX: ffffffffffffffda RBX: 00007f950b225fa0 RCX: 00007f950af9e559 [ 108.483586][ T6383] RDX: 00002000000003c0 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 108.483607][ T6383] RBP: 00007f950b035ab8 R08: 0000000000000000 R09: 0000000000000000 [ 108.483625][ T6383] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000000 [ 108.483643][ T6383] R13: 00007f950b226038 R14: 00007f950b225fa0 R15: 00007ffcc80ee8e8 [ 108.483692][ T6383] [ 108.653826][ T5701] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 108.794609][ T5701] usb 3-1: New USB device found: idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 108.799164][ T5701] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.799188][ T5701] usb 3-1: Product: syz [ 108.799200][ T5701] usb 3-1: Manufacturer: syz [ 108.799212][ T5701] usb 3-1: SerialNumber: syz [ 108.805149][ T5701] usb 3-1: config 0 descriptor?? [ 108.822824][ T5701] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 109.018753][ T6381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.020476][ T6381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.191693][ T5683] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 109.193965][ T2260] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 109.342311][ T5683] usb 4-1: New USB device found: idVendor=0846, idProduct=1001, bcdDevice=1.00 [ 109.342978][ T2260] usb 2-1: New USB device found: idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 109.343774][ T5683] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 109.343800][ T5683] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 109.344176][ T2260] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.346170][ T5683] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.346191][ T5683] usb 4-1: Product: syz [ 109.346203][ T5683] usb 4-1: Manufacturer: syz [ 109.346216][ T5683] usb 4-1: SerialNumber: syz [ 109.347021][ T2260] usb 2-1: config 0 descriptor?? [ 109.361782][ T2260] cp210x 2-1:0.0: cp210x converter detected [ 109.430423][ T6381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.435644][ T6381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.598661][ T5683] kaweth 4-1:1.0: Firmware present in device. [ 109.753504][ T2260] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 109.791381][ T5683] kaweth 4-1:1.0: Statistics collection: 0 [ 109.791408][ T5683] kaweth 4-1:1.0: Multicast filter limit: 0 [ 109.791422][ T5683] kaweth 4-1:1.0: MTU: 0 [ 109.791434][ T5683] kaweth 4-1:1.0: Read MAC address 00:00:00:00:00:00 [ 109.973828][ T2260] usb 2-1: cp210x converter now attached to ttyUSB0 [ 110.164687][ T27] usb 2-1: USB disconnect, device number 23 [ 110.179482][ T27] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 110.180137][ T27] cp210x 2-1:0.0: device disconnected [ 110.291367][ T2260] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 110.402954][ T5683] kaweth 4-1:1.0: kaweth interface created at eth1 [ 110.442732][ T6381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.444059][ T2260] usb 1-1: New USB device found: idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 110.445424][ T2260] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.447658][ T6381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.450556][ T2260] usb 1-1: config 0 descriptor?? [ 110.450825][ T5701] gspca_stk1135: reg_w 0x200 err -71 [ 110.452559][ T5701] gspca_stk1135: serial bus timeout: status=0x00 [ 110.452572][ T5701] gspca_stk1135: Sensor write failed [ 110.452600][ T5701] gspca_stk1135: serial bus timeout: status=0x00 [ 110.452608][ T5701] gspca_stk1135: Sensor write failed [ 110.452639][ T5701] gspca_stk1135: serial bus timeout: status=0x00 [ 110.452647][ T5701] gspca_stk1135: Sensor read failed [ 110.452672][ T5701] gspca_stk1135: serial bus timeout: status=0x00 [ 110.452679][ T5701] gspca_stk1135: Sensor read failed [ 110.452685][ T5701] gspca_stk1135: Detected sensor type unknown (0x0) [ 110.452716][ T5701] gspca_stk1135: serial bus timeout: status=0x00 [ 110.452725][ T5701] gspca_stk1135: Sensor read failed [ 110.452747][ T5701] gspca_stk1135: serial bus timeout: status=0x00 [ 110.452756][ T5701] gspca_stk1135: Sensor read failed [ 110.452778][ T5701] gspca_stk1135: serial bus timeout: status=0x00 [ 110.452785][ T5701] gspca_stk1135: Sensor write failed [ 110.452811][ T5701] gspca_stk1135: serial bus timeout: status=0x00 [ 110.452818][ T5701] gspca_stk1135: Sensor write failed [ 110.452890][ T5701] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 110.614497][ T5701] usb 3-1: USB disconnect, device number 16 [ 110.619089][ T5683] usb 4-1: USB disconnect, device number 20 [ 110.619433][ T2260] cp210x 1-1:0.0: cp210x converter detected [ 110.729461][ T2260] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 110.729488][ T2260] cp210x 1-1:0.0: querying part number failed [ 110.761683][ T2260] usb 1-1: cp210x converter now attached to ttyUSB0 [ 111.011710][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 111.162060][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 111.163059][ T9] usb 2-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40 [ 111.164034][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.164059][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.164093][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.168851][ T9] usb 2-1: config 0 descriptor?? [ 111.225764][ T9] hub 2-1:0.0: USB hub found [ 111.285123][ T6442] __nla_validate_parse: 58 callbacks suppressed [ 111.285142][ T6442] netlink: 64 bytes leftover after parsing attributes in process `syz.3.182'. [ 111.373885][ T9] hub 2-1:0.0: 1 port detected [ 111.624740][ T9] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 111.629818][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 111.629875][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 111.686204][ T9] usb 2-1: USB disconnect, device number 24 [ 112.082541][ T6471] overlayfs: failed to resolve './bus': -2 [ 112.201731][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 112.462315][ T9] usb 4-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 112.463213][ T9] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 112.463243][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.463260][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 112.463301][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.465171][ T9] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 112.465192][ T9] usb 4-1: Product: syz [ 112.465203][ T9] usb 4-1: Manufacturer: syz [ 112.936342][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 112.936355][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 112.943464][ T9] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 112.943482][ T9] cdc_wdm 4-1:1.0: Unknown control protocol [ 112.946062][ T9] usb 4-1: USB disconnect, device number 21 [ 113.064025][ T5683] usb 1-1: USB disconnect, device number 24 [ 113.093331][ T5683] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 113.093908][ T5683] cp210x 1-1:0.0: device disconnected [ 113.106429][ T6496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.106891][ T6496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.170877][ T6500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.171160][ T6500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.232918][ T6500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.234240][ T6500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.402404][ T6505] netlink: 'syz.2.202': attribute type 1 has an invalid length. [ 113.471350][ T5683] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 113.481741][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 113.521446][ T46] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 113.621375][ T5683] usb 1-1: Using ep0 maxpacket: 16 [ 113.623606][ T5683] usb 1-1: unable to get BOS descriptor or descriptor too short [ 113.623650][ T5683] usb 1-1: New USB device found: idVendor=103d, idProduct=0100, bcdDevice=0.40 [ 113.624746][ T5683] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.624797][ T5683] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 113.624832][ T5683] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 113.627841][ T5683] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.627862][ T5683] usb 1-1: Product: syz [ 113.627875][ T5683] usb 1-1: Manufacturer: syz [ 113.627888][ T5683] usb 1-1: SerialNumber: syz [ 113.633576][ T9] usb 4-1: New USB device found: idVendor=20b7, idProduct=1540, bcdDevice=0.00 [ 113.637849][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.730298][ T46] usb 2-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 113.740712][ T46] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 113.757792][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 113.757816][ T46] usb 2-1: SerialNumber: syz [ 113.847812][ T9] usb 4-1: Firmware version (0.0) predates our first public release. [ 113.847837][ T9] usb 4-1: Please update to version 0.2 or newer [ 113.876000][ T5683] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 113.876739][ T5683] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 113.908702][ T9] usb 4-1: USB disconnect, device number 22 [ 113.964212][ T5683] usb 1-1: USB disconnect, device number 25 [ 113.982236][ T46] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 114.008249][ T46] usb 2-1: USB disconnect, device number 25 [ 114.085134][ T5614] udevd[5614]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 114.469123][ T6550] netlink: 68 bytes leftover after parsing attributes in process `syz.3.215'. [ 115.452255][ T9] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 115.614341][ T9] usb 4-1: New USB device found: idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 115.618136][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.618158][ T9] usb 4-1: Product: syz [ 115.618170][ T9] usb 4-1: Manufacturer: syz [ 115.618183][ T9] usb 4-1: SerialNumber: syz [ 115.621462][ T9] usb 4-1: config 0 descriptor?? [ 115.634797][ T9] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 115.821412][ T52] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 115.951461][ T52] usb 1-1: device descriptor read/64, error -71 [ 116.191347][ T52] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 116.321324][ T52] usb 1-1: device descriptor read/64, error -71 [ 116.432871][ T52] usb usb1-port1: attempt power cycle [ 116.437981][ T9] gspca_stk1135: reg_w 0x5 err -71 [ 116.439789][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 116.439802][ T9] gspca_stk1135: Sensor write failed [ 116.439827][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 116.439836][ T9] gspca_stk1135: Sensor write failed [ 116.439861][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 116.439870][ T9] gspca_stk1135: Sensor read failed [ 116.439894][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 116.439902][ T9] gspca_stk1135: Sensor read failed [ 116.439908][ T9] gspca_stk1135: Detected sensor type unknown (0x0) [ 116.439934][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 116.439950][ T9] gspca_stk1135: Sensor read failed [ 116.439975][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 116.439983][ T9] gspca_stk1135: Sensor read failed [ 116.440005][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 116.440013][ T9] gspca_stk1135: Sensor write failed [ 116.440037][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 116.440044][ T9] gspca_stk1135: Sensor write failed [ 116.440116][ T9] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 116.447696][ T9] usb 4-1: USB disconnect, device number 23 [ 116.771328][ T52] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 116.791856][ T52] usb 1-1: device descriptor read/8, error -71 [ 117.034311][ T52] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 117.051910][ T52] usb 1-1: device descriptor read/8, error -71 [ 117.162563][ T52] usb usb1-port1: unable to enumerate USB device [ 117.239533][ T6614] netlink: 52 bytes leftover after parsing attributes in process `syz.2.233'. [ 117.283425][ T6616] syzkaller1: entered promiscuous mode [ 117.283446][ T6616] syzkaller1: entered allmulticast mode [ 117.302592][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 117.395820][ T6619] syzkaller1: entered promiscuous mode [ 117.395834][ T6619] syzkaller1: entered allmulticast mode [ 117.452707][ T9] usb 4-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 117.453635][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.453678][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 117.453698][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 117.453718][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 117.453749][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.642741][ T6627] x_tables: duplicate underflow at hook 4 [ 117.684611][ T12] IPVS: starting estimator thread 0... [ 117.685032][ T6612] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 117.772812][ T6630] IPVS: using max 31 ests per chain, 74400 per kthread [ 118.070449][ T6647] FAULT_INJECTION: forcing a failure. [ 118.070449][ T6647] name failslab, interval 1, probability 0, space 0, times 0 [ 118.070482][ T6647] CPU: 0 UID: 0 PID: 6647 Comm: syz.2.242 Tainted: G L syzkaller #0 PREEMPT(full) [ 118.070497][ T6647] Tainted: [L]=SOFTLOCKUP [ 118.070503][ T6647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 118.070510][ T6647] Call Trace: [ 118.070514][ T6647] [ 118.070519][ T6647] dump_stack_lvl+0xe8/0x150 [ 118.070538][ T6647] should_fail_ex+0x3eb/0x540 [ 118.070556][ T6647] should_failslab+0xa8/0x100 [ 118.070569][ T6647] __kmalloc_noprof+0xf9/0x710 [ 118.070583][ T6647] ? do_raw_spin_lock+0x12b/0x2f0 [ 118.070599][ T6647] ? iter_file_splice_write+0x1ea/0x1240 [ 118.070615][ T6647] ? iter_file_splice_write+0x1ea/0x1240 [ 118.070635][ T6647] iter_file_splice_write+0x1ea/0x1240 [ 118.070650][ T6647] ? __lock_acquire+0x747/0x2de0 [ 118.070672][ T6647] ? __pfx_iter_file_splice_write+0x10/0x10 [ 118.070687][ T6647] ? lock_acquire+0x115/0x350 [ 118.070705][ T6647] ? __pfx_iter_file_splice_write+0x10/0x10 [ 118.070722][ T6647] direct_splice_actor+0x101/0x160 [ 118.070740][ T6647] splice_direct_to_actor+0x57b/0xcb0 [ 118.070780][ T6647] ? __pfx_direct_splice_actor+0x10/0x10 [ 118.070807][ T6647] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 118.070845][ T6647] do_splice_direct+0x195/0x290 [ 118.070865][ T6647] ? __pfx_do_splice_direct+0x10/0x10 [ 118.070881][ T6647] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 118.070894][ T6647] ? rw_verify_area+0x203/0x4c0 [ 118.070909][ T6647] ? fdget+0x1ac/0x250 [ 118.070926][ T6647] do_sendfile+0x52e/0x7c0 [ 118.070943][ T6647] ? __pfx_do_sendfile+0x10/0x10 [ 118.070957][ T6647] ? __might_fault+0xaf/0x130 [ 118.070973][ T6647] __se_sys_sendfile64+0xdf/0x1a0 [ 118.070984][ T6647] ? __pfx___se_sys_futex+0x10/0x10 [ 118.070999][ T6647] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 118.071016][ T6647] do_syscall_64+0x166/0x520 [ 118.071031][ T6647] ? trace_irq_disable+0x3b/0x140 [ 118.071042][ T6647] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.071057][ T6647] ? clear_bhb_loop+0x70/0xc0 [ 118.071080][ T6647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.071098][ T6647] RIP: 0033:0x7f2a6159e559 [ 118.071116][ T6647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.071125][ T6647] RSP: 002b:00007f2a6250e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 118.071138][ T6647] RAX: ffffffffffffffda RBX: 00007f2a61826090 RCX: 00007f2a6159e559 [ 118.071146][ T6647] RDX: 0000200000000080 RSI: 0000000000000003 RDI: 0000000000000003 [ 118.071152][ T6647] RBP: 00007f2a61635ab8 R08: 0000000000000000 R09: 0000000000000000 [ 118.071159][ T6647] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000000 [ 118.071165][ T6647] R13: 00007f2a61826128 R14: 00007f2a61826090 R15: 00007fff9334fab8 [ 118.071182][ T6647] [ 118.181942][ T6649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.243'. [ 118.185559][ T6649] FAULT_INJECTION: forcing a failure. [ 118.185559][ T6649] name failslab, interval 1, probability 0, space 0, times 0 [ 118.185587][ T6649] CPU: 1 UID: 0 PID: 6649 Comm: syz.2.243 Tainted: G L syzkaller #0 PREEMPT(full) [ 118.185612][ T6649] Tainted: [L]=SOFTLOCKUP [ 118.185619][ T6649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 118.185630][ T6649] Call Trace: [ 118.185637][ T6649] [ 118.185645][ T6649] dump_stack_lvl+0xe8/0x150 [ 118.185678][ T6649] should_fail_ex+0x3eb/0x540 [ 118.185710][ T6649] should_failslab+0xa8/0x100 [ 118.185733][ T6649] __kmalloc_cache_noprof+0x9e/0x600 [ 118.185767][ T6649] ? __x64_sys_sendmsg+0x1b1/0x290 [ 118.185793][ T6649] ? __kmalloc_noprof+0x1a6/0x710 [ 118.185817][ T6649] ? __alloc_workqueue+0x15a/0x21d0 [ 118.185843][ T6649] ? __alloc_workqueue+0x15a/0x21d0 [ 118.185877][ T6649] __alloc_workqueue+0x15a/0x21d0 [ 118.185925][ T6649] alloc_workqueue_noprof+0xe3/0x210 [ 118.185952][ T6649] ? rcu_is_watching+0x16/0xb0 [ 118.185978][ T6649] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 118.186007][ T6649] ? __kmalloc_noprof+0x1a6/0x710 [ 118.186030][ T6649] ? ieee80211_register_hw+0x2700/0x4b30 [ 118.186052][ T6649] ? ieee80211_register_hw+0x2700/0x4b30 [ 118.186081][ T6649] ieee80211_register_hw+0x364b/0x4b30 [ 118.186103][ T6649] ? ieee80211_register_hw+0x1af1/0x4b30 [ 118.186127][ T6649] ? ieee80211_register_hw+0x1af1/0x4b30 [ 118.186146][ T6649] ? ieee80211_register_hw+0x1bf1/0x4b30 [ 118.186173][ T6649] ? ieee80211_register_hw+0x19f1/0x4b30 [ 118.186218][ T6649] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 118.186244][ T6649] ? __asan_memset+0x22/0x50 [ 118.186269][ T6649] ? __hrtimer_setup+0x1b7/0x260 [ 118.186294][ T6649] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 118.186318][ T6649] mac80211_hwsim_new_radio+0x32f1/0x5990 [ 118.186370][ T6649] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 118.186390][ T6649] ? trace_kmalloc+0x2a/0xf0 [ 118.186423][ T6649] hwsim_new_radio_nl+0xd8b/0xf90 [ 118.186457][ T6649] genl_family_rcv_msg_doit+0x233/0x340 [ 118.186490][ T6649] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 118.186529][ T6649] ? bpf_lsm_capable+0x9/0x20 [ 118.186549][ T6649] ? security_capable+0x7e/0x2c0 [ 118.186581][ T6649] genl_rcv_msg+0x614/0x7a0 [ 118.186612][ T6649] ? __pfx_genl_rcv_msg+0x10/0x10 [ 118.186636][ T6649] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 118.186659][ T6649] ? __asan_memcpy+0x40/0x70 [ 118.186691][ T6649] netlink_rcv_skb+0x226/0x4a0 [ 118.186712][ T6649] ? __pfx_genl_rcv_msg+0x10/0x10 [ 118.186740][ T6649] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 118.186781][ T6649] ? down_read+0x2b9/0x320 [ 118.186813][ T6649] genl_rcv+0x28/0x40 [ 118.186836][ T6649] netlink_unicast+0x8ef/0xa80 [ 118.186883][ T6649] netlink_sendmsg+0x7f0/0xb20 [ 118.186911][ T6649] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.186937][ T6649] ? aa_sock_msg_perm+0x144/0x210 [ 118.186967][ T6649] ? apparmor_socket_sendmsg+0x98/0x360 [ 118.186993][ T6649] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.187012][ T6649] sock_sendmsg_nosec+0x14e/0x190 [ 118.187035][ T6649] ____sys_sendmsg+0x54e/0x850 [ 118.187067][ T6649] ? __pfx_____sys_sendmsg+0x10/0x10 [ 118.187101][ T6649] ? import_iovec+0x73/0xa0 [ 118.187130][ T6649] ___sys_sendmsg+0x2a5/0x360 [ 118.187154][ T6649] ? __lock_acquire+0x747/0x2de0 [ 118.187176][ T6649] ? __pfx____sys_sendmsg+0x10/0x10 [ 118.187206][ T6649] ? futex_wait+0x2a2/0x390 [ 118.187254][ T6649] ? __fget_files+0x3a2/0x420 [ 118.187278][ T6649] ? __fget_files+0x2a/0x420 [ 118.187313][ T6649] __x64_sys_sendmsg+0x1b1/0x290 [ 118.187342][ T6649] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 118.187390][ T6649] do_syscall_64+0x166/0x520 [ 118.187413][ T6649] ? trace_irq_disable+0x3b/0x140 [ 118.187432][ T6649] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.187451][ T6649] ? clear_bhb_loop+0x70/0xc0 [ 118.187479][ T6649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.187498][ T6649] RIP: 0033:0x7f2a6159e559 [ 118.187515][ T6649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.187530][ T6649] RSP: 002b:00007f2a6252f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.187550][ T6649] RAX: ffffffffffffffda RBX: 00007f2a61825fa0 RCX: 00007f2a6159e559 [ 118.187564][ T6649] RDX: 0000000000000004 RSI: 0000200000002e80 RDI: 0000000000000003 [ 118.187577][ T6649] RBP: 00007f2a61635ab8 R08: 0000000000000000 R09: 0000000000000000 [ 118.187588][ T6649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.187600][ T6649] R13: 00007f2a61826038 R14: 00007f2a61825fa0 R15: 00007fff9334fab8 [ 118.187630][ T6649] [ 118.593564][ T5701] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 118.769078][ T5701] usb 3-1: unable to get BOS descriptor or descriptor too short [ 118.769124][ T5701] usb 3-1: New USB device found: idVendor=1235, idProduct=0010, bcdDevice=0.40 [ 118.770166][ T5701] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.770185][ T5701] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 118.779331][ T5701] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.779353][ T5701] usb 3-1: Product: syz [ 118.779366][ T5701] usb 3-1: Manufacturer: syz [ 118.779401][ T5701] usb 3-1: SerialNumber: syz [ 118.994423][ T6652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.994902][ T6652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.007758][ T5701] usb 3-1: selecting invalid altsetting 1 [ 119.008585][ T5701] usb 3-1: unit 3 not found! [ 119.008601][ T5701] usb 3-1: unit 6 not found! [ 119.016414][ T6662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.016898][ T6662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.125091][ T5701] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 119.171904][ T5614] udevd[5614]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 119.218104][ T5683] usb 3-1: USB disconnect, device number 17 [ 119.341341][ T46] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 119.491852][ T46] usb 2-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 119.492837][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.492879][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.496202][ T46] usb 2-1: config 0 descriptor?? [ 119.771397][ T5683] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 119.777582][ T6676] netlink: 12 bytes leftover after parsing attributes in process `syz.2.251'. [ 119.800316][ T6676] openvswitch: netlink: Actions may not be safe on all matching packets [ 119.852290][ T5615] Bluetooth: hci1: Malformed LE Event: 0x0d [ 119.905769][ T6665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.906646][ T6665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.910181][ T46] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 119.928843][ T5683] usb 1-1: Using ep0 maxpacket: 32 [ 119.946736][ T5683] usb 1-1: unable to get BOS descriptor or descriptor too short [ 119.946780][ T5683] usb 1-1: New USB device found: idVendor=0582, idProduct=00a3, bcdDevice=0.40 [ 119.947993][ T5683] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.948013][ T5683] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 119.948032][ T5683] usb 1-1: config 1 has no interface number 0 [ 119.948071][ T5683] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 120.006213][ T46] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0007/input/input12 [ 120.008276][ T5683] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.008298][ T5683] usb 1-1: Product: syz [ 120.008311][ T5683] usb 1-1: Manufacturer: syz [ 120.008324][ T5683] usb 1-1: SerialNumber: syz [ 120.119925][ T46] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 120.178376][ T9] gud 4-1:1.0: probe with driver gud failed with error -71 [ 120.218121][ T6682] process 'syz.1.248' launched './file2' with NULL argv: empty string added [ 120.229365][ T9] usb 4-1: USB disconnect, device number 24 [ 120.308642][ T6674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.250'. [ 120.921137][ T6692] netlink: 730 bytes leftover after parsing attributes in process `syz.3.256'. [ 120.949001][ T6692] netlink: 730 bytes leftover after parsing attributes in process `syz.3.256'. [ 121.971356][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 122.121352][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 122.122722][ T9] usb 4-1: New USB device found: idVendor=0525, idProduct=a4a3, bcdDevice=0.40 [ 122.125313][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 122.125339][ T9] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 122.125358][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 122.129243][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.129266][ T9] usb 4-1: Product: syz [ 122.129279][ T9] usb 4-1: Manufacturer: syz [ 122.129319][ T9] usb 4-1: SerialNumber: syz [ 122.169250][ T6716] mmap: syz.2.262 (6716) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 122.223695][ T6712] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 122.226078][ T9] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 122.227020][ T9] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 122.227094][ T9] usbtest 4-1:1.0: probe with driver usbtest failed with error -22 [ 122.281077][ T5683] usb 1-1: unknown sample rate [ 122.300074][ T9] usb 2-1: USB disconnect, device number 26 [ 122.442780][ T5683] usb 1-1: USB disconnect, device number 30 [ 122.482132][ T46] usb 4-1: USB disconnect, device number 25 [ 122.493999][ T5614] udevd[5614]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 123.001938][ T46] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 123.009305][ T6760] netlink: 12 bytes leftover after parsing attributes in process `syz.0.274'. [ 123.132303][ T46] usb 2-1: device descriptor read/64, error -71 [ 123.137300][ T6764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.137696][ T6764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.222100][ T5701] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 123.323320][ T27] usb 4-1: new low-speed USB device number 26 using dummy_hcd [ 123.371351][ T46] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 123.390013][ T5701] usb 3-1: New USB device found: idVendor=13e5, idProduct=0001, bcdDevice=0.40 [ 123.400297][ T5701] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.400314][ T5701] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 123.422903][ T5701] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.422919][ T5701] usb 3-1: Product: syz [ 123.422926][ T5701] usb 3-1: Manufacturer: syz [ 123.422934][ T5701] usb 3-1: SerialNumber: syz [ 123.501374][ T46] usb 2-1: device descriptor read/64, error -71 [ 123.611829][ T46] usb usb2-port1: attempt power cycle [ 123.734810][ T5701] usb 3-1: USB disconnect, device number 18 [ 123.952743][ T46] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 123.972132][ T46] usb 2-1: device descriptor read/8, error -71 [ 124.178646][ T6786] smpboot: CPU 1 is now offline [ 124.213330][ T46] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 124.237933][ T46] usb 2-1: device descriptor read/8, error -71 [ 124.324947][ T6790] syzkaller0: entered promiscuous mode [ 124.324961][ T6790] syzkaller0: entered allmulticast mode [ 124.342373][ T46] usb usb2-port1: unable to enumerate USB device [ 124.387858][ T6790] syzkaller0: left promiscuous mode [ 124.387872][ T6790] syzkaller0: left allmulticast mode [ 124.428970][ T6793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.429203][ T6793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.577516][ T6801] syz.3.288 (6801) used greatest stack depth: 12224 bytes left [ 124.603001][ T6803] netlink: 72 bytes leftover after parsing attributes in process `syz.3.289'. [ 124.711483][ T5701] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 124.721416][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 124.862559][ T5701] usb 1-1: New USB device found: idVendor=05c5, idProduct=0002, bcdDevice=1.00 [ 124.865055][ T5701] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.865068][ T5701] usb 1-1: Product: syz [ 124.865076][ T5701] usb 1-1: Manufacturer: syz [ 124.865083][ T5701] usb 1-1: SerialNumber: syz [ 124.905738][ T5701] digi_acceleport 1-1:1.0: Digi 2 port USB adapter converter detected [ 124.905902][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 124.908673][ T9] usb 3-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40 [ 124.909514][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.909531][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.909550][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.911021][ T9] usb 3-1: config 0 descriptor?? [ 124.973592][ T5701] usb 1-1: Digi 2 port USB adapter converter now attached to ttyUSB0 [ 124.974616][ T9] hub 3-1:0.0: USB hub found [ 124.996966][ T5701] usb 1-1: Digi 2 port USB adapter converter now attached to ttyUSB1 [ 125.012638][ T5701] usb 1-1: Digi 2 port USB adapter converter now attached to ttyUSB2 [ 125.073894][ T6793] No control pipe specified [ 125.076853][ T5701] usb 1-1: USB disconnect, device number 31 [ 125.117473][ T5701] digi_2 ttyUSB0: Digi 2 port USB adapter converter now disconnected from ttyUSB0 [ 125.120717][ T5701] digi_2 ttyUSB1: Digi 2 port USB adapter converter now disconnected from ttyUSB1 [ 125.145170][ T5701] digi_2 ttyUSB2: Digi 2 port USB adapter converter now disconnected from ttyUSB2 [ 125.146555][ T5701] digi_acceleport 1-1:1.0: device disconnected [ 125.178909][ T9] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 125.471355][ T2260] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 125.602419][ T2260] usb 4-1: device descriptor read/64, error -71 [ 125.632835][ T6814] x_tables: unsorted underflow at hook 1 [ 125.648881][ T9] hid_parser_main: 2122 callbacks suppressed [ 125.648896][ T9] hid-generic 0003:046D:C31C.0008: unknown main item tag 0x0 [ 125.677997][ T9] hid-generic 0003:046D:C31C.0008: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 125.841592][ T2260] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 125.953733][ T6827] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 125.953749][ T6827] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 125.953791][ T6827] vhci_hcd vhci_hcd.0: Device attached [ 125.978134][ T2260] usb 4-1: device descriptor read/64, error -71 [ 126.077346][ T6837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.078579][ T6837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.082731][ T2260] usb usb4-port1: attempt power cycle [ 126.191380][ T5701] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 126.192629][ T9] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 126.312186][ T52] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 126.341280][ T5701] usb 1-1: Using ep0 maxpacket: 32 [ 126.341819][ T5701] usb 1-1: New USB device found: idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 126.342737][ T5701] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 126.342750][ T5701] usb 1-1: config 0 has no interface number 0 [ 126.342770][ T5701] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 126.342784][ T5701] usb 1-1: config 0 interface 85 has no altsetting 0 [ 126.344603][ T5701] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.344616][ T5701] usb 1-1: Product: syz [ 126.344624][ T5701] usb 1-1: Manufacturer: syz [ 126.344631][ T5701] usb 1-1: SerialNumber: syz [ 126.346194][ T5701] usb 1-1: config 0 descriptor?? [ 126.451303][ T2260] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 126.472376][ T2260] usb 4-1: device descriptor read/8, error -71 [ 126.501277][ T52] usb 2-1: Using ep0 maxpacket: 32 [ 126.501838][ T52] usb 2-1: New USB device found: idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 126.502714][ T52] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 126.502732][ T52] usb 2-1: config 0 has no interface number 0 [ 126.504604][ T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.504617][ T52] usb 2-1: Product: syz [ 126.504624][ T52] usb 2-1: Manufacturer: syz [ 126.504632][ T52] usb 2-1: SerialNumber: syz [ 126.509308][ T52] usb 2-1: config 0 descriptor?? [ 126.571166][ T52] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 126.712333][ T2260] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 126.717257][ T52] usb 2-1: qt2_attach - failed to power on unit: -71 [ 126.717414][ T52] quatech2 2-1:0.51: probe with driver quatech2 failed with error -71 [ 126.748605][ T2260] usb 4-1: device descriptor read/8, error -71 [ 126.750455][ T52] usb 2-1: USB disconnect, device number 31 [ 126.851795][ T2260] usb usb4-port1: unable to enumerate USB device [ 126.984524][ T5701] appletouch 1-1:0.85: Geyser mode initialized. [ 126.986258][ T5701] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input13 [ 127.188183][ T5701] usb 3-1: reset high-speed USB device number 19 using dummy_hcd [ 127.200405][ T5708] usb 1-1: USB disconnect, device number 32 syzkaller syzkaller login: [ 127.218939][ T6830] vhci_hcd: connection reset by peer [ 127.227069][ T51] vhci_hcd vhci_hcd.0: stop threads [ 127.227085][ T51] vhci_hcd vhci_hcd.0: release socket [ 127.227371][ T51] vhci_hcd vhci_hcd.0: disconnect device [ 127.257431][ T5708] appletouch 1-1:0.85: input: appletouch disconnected [ 127.601313][ T5759] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 127.753166][ T5759] usb 2-1: New USB device found: idVendor=056a, idProduct=010e, bcdDevice=0.00 [ 127.753951][ T5759] usb 2-1: config 0 interface 0 altsetting 249 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 127.753968][ T5759] usb 2-1: config 0 interface 0 altsetting 249 endpoint 0x81 has invalid maxpacket 1015, setting to 64 [ 127.753982][ T5759] usb 2-1: config 0 interface 0 altsetting 249 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 127.753995][ T5759] usb 2-1: config 0 interface 0 has no altsetting 0 [ 127.754012][ T5759] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.758973][ T5759] usb 2-1: config 0 descriptor?? [ 127.759504][ T6848] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 127.977399][ T6848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.978234][ T6848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.078680][ T6857] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 128.094812][ T2260] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 128.098325][ T6857] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 128.161206][ T6859] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.178587][ T6860] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.192320][ T6848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.192589][ T6848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.233758][ T5759] wacom 0003:056A:010E.0009: hidraw1: USB HID vf9.be Joystick [HID 056a:010e] on usb-dummy_hcd.1-1/input0 [ 128.254756][ T2260] usb 1-1: New USB device found: idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 128.275136][ T2260] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 128.275152][ T2260] usb 1-1: Product: syz [ 128.275159][ T2260] usb 1-1: SerialNumber: syz [ 128.277428][ T52] usb 3-1: USB disconnect, device number 19 [ 128.311097][ T2260] usb 1-1: config 0 descriptor?? [ 128.412423][ T5701] usb 2-1: USB disconnect, device number 32 [ 128.458034][ T6864] fido_id[6864]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 128.529635][ T2260] hso 1-1:0.0: Failed to find BULK eps [ 128.540769][ T6854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.541032][ T6854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.669524][ T6874] netlink: 52 bytes leftover after parsing attributes in process `syz.2.308'. [ 128.670909][ T6874] netlink: 376 bytes leftover after parsing attributes in process `syz.2.308'. [ 128.730453][ T2260] usb 1-1: USB disconnect, device number 33 [ 128.929469][ T6848] Process accounting paused [ 129.213411][ T6894] rxe_eth0 speed is unknown, defaulting to 1000 [ 129.327684][ T6897] sg_write: data in/out 360412/136 bytes for SCSI command 0x0-- guessing data in; [ 129.327684][ T6897] program syz.0.313 not setting count and/or reply_len properly [ 129.423991][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 130.221870][ T5701] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 130.352765][ T5701] usb 2-1: device descriptor read/64, error -71 [ 130.591312][ T5701] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 130.721312][ T5701] usb 2-1: device descriptor read/64, error -71 [ 130.831476][ T5701] usb usb2-port1: attempt power cycle [ 130.921283][ T52] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 131.072902][ T52] usb 3-1: New USB device found: idVendor=05ac, idProduct=0225, bcdDevice=80.16 [ 131.073676][ T52] usb 3-1: config 2 has an invalid interface number: 49 but max is 1 [ 131.073691][ T52] usb 3-1: config 2 has an invalid interface number: 116 but max is 1 [ 131.073701][ T52] usb 3-1: config 2 has no interface number 0 [ 131.073709][ T52] usb 3-1: config 2 has no interface number 1 [ 131.073736][ T52] usb 3-1: config 2 interface 116 altsetting 10 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 131.073750][ T52] usb 3-1: config 2 interface 116 altsetting 10 endpoint 0x84 has invalid maxpacket 62055, setting to 64 [ 131.073763][ T52] usb 3-1: config 2 interface 116 altsetting 10 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 131.073777][ T52] usb 3-1: config 2 interface 49 has no altsetting 0 [ 131.073786][ T52] usb 3-1: config 2 interface 116 has no altsetting 0 [ 131.079154][ T52] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.079168][ T52] usb 3-1: Product: syz [ 131.079176][ T52] usb 3-1: Manufacturer: syz [ 131.079183][ T52] usb 3-1: SerialNumber: syz [ 131.232587][ T5701] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 131.253954][ T5701] usb 2-1: device descriptor read/8, error -71 [ 131.342975][ T9] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 131.375625][ T6930] FAULT_INJECTION: forcing a failure. [ 131.375625][ T6930] name failslab, interval 1, probability 0, space 0, times 0 [ 131.375646][ T6930] CPU: 0 UID: 0 PID: 6930 Comm: syz.3.326 Tainted: G L syzkaller #0 PREEMPT(full) [ 131.375661][ T6930] Tainted: [L]=SOFTLOCKUP [ 131.375665][ T6930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 131.375672][ T6930] Call Trace: [ 131.375677][ T6930] [ 131.375682][ T6930] dump_stack_lvl+0xe8/0x150 [ 131.375701][ T6930] should_fail_ex+0x3eb/0x540 [ 131.375719][ T6930] should_failslab+0xa8/0x100 [ 131.375732][ T6930] ? do_getname+0x2e/0x250 [ 131.375745][ T6930] kmem_cache_alloc_noprof+0x9c/0x600 [ 131.375762][ T6930] ? do_futex+0x3e7/0x4e0 [ 131.375777][ T6930] ? do_getname+0x2e/0x250 [ 131.375793][ T6930] do_getname+0x2e/0x250 [ 131.375805][ T6930] ? getname_flags+0x11/0x20 [ 131.375819][ T6930] do_sys_openat2+0xce/0x200 [ 131.375832][ T6930] ? __se_sys_futex+0x3a8/0x450 [ 131.375847][ T6930] ? __pfx_do_sys_openat2+0x10/0x10 [ 131.375863][ T6930] ? rcu_is_watching+0x16/0xb0 [ 131.375878][ T6930] __x64_sys_openat+0x138/0x170 [ 131.375894][ T6930] do_syscall_64+0x166/0x520 [ 131.375909][ T6930] ? trace_irq_disable+0x3b/0x140 [ 131.375920][ T6930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.375931][ T6930] ? clear_bhb_loop+0x70/0xc0 [ 131.375943][ T6930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.375954][ T6930] RIP: 0033:0x7f4121d9e559 [ 131.375964][ T6930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.375973][ T6930] RSP: 002b:00007f4122c25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 131.375985][ T6930] RAX: ffffffffffffffda RBX: 00007f4122025fa0 RCX: 00007f4121d9e559 [ 131.375993][ T6930] RDX: 0000000000050000 RSI: 0000200000001500 RDI: ffffffffffffff9c [ 131.376000][ T6930] RBP: 00007f4121e35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 131.376007][ T6930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.376013][ T6930] R13: 00007f4122026038 R14: 00007f4122025fa0 R15: 00007ffe1e546ba8 [ 131.376029][ T6930] [ 131.433068][ T5621] Bluetooth: hci4: command 0xfc11 tx timeout [ 131.433175][ T5615] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 131.536617][ T5701] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 131.564587][ T5701] usb 2-1: device descriptor read/8, error -71 [ 131.673326][ T5701] usb usb2-port1: unable to enumerate USB device [ 131.910914][ T52] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:2.49/input/input18 [ 132.201691][ T5701] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 132.316622][ T6945] sda1: Can't mount, would change RO state [ 132.351428][ T5701] usb 4-1: Using ep0 maxpacket: 8 [ 132.355124][ T5701] usb 4-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 132.356402][ T5701] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 132.356433][ T5701] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 132.356444][ T5701] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 132.356457][ T5701] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 132.356468][ T5701] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.356490][ T5701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.507669][ T4964] bcm5974 3-1:2.49: could not read from device [ 132.508202][ T4964] bcm5974 3-1:2.49: could not read from device [ 132.536476][ T4964] bcm5974 3-1:2.49: could not read from device [ 132.541170][ T4964] bcm5974 3-1:2.49: could not read from device [ 132.563754][ T52] usb 3-1: USB disconnect, device number 20 [ 132.871105][ T6946] usbtmc 4-1:16.0: simple usb_control_msg returned 0 [ 132.875501][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.071599][ T52] usb 4-1: USB disconnect, device number 32 [ 133.661373][ T5759] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 133.765700][ T6970] /dev/nullb0: Can't open blockdev [ 133.779627][ T6971] /dev/nullb0: Can't open blockdev [ 133.812553][ T5759] usb 2-1: Using ep0 maxpacket: 8 [ 133.814351][ T5759] usb 2-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 133.816872][ T5759] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 133.816903][ T5759] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 133.816915][ T5759] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 133.816927][ T5759] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 133.816940][ T5759] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 133.816961][ T5759] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.191460][ T5701] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 134.355332][ T5701] usb 1-1: New USB device found: idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 134.356128][ T5701] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 134.356148][ T5701] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.356158][ T5701] usb 1-1: config 0 has no interface number 0 [ 134.356180][ T5701] usb 1-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 134.356202][ T5701] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.360269][ T5701] usb 1-1: config 0 descriptor?? [ 134.458987][ T5701] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 134.599602][ T6981] usbtmc 2-1:16.0: control status returned 0 [ 134.642738][ T13] usb 1-1: Failed to submit usb control message: -71 [ 134.642762][ T13] usb 1-1: unable to send the bmi data to the device: -71 [ 134.642771][ T13] usb 1-1: unable to get target info from device [ 134.642787][ T13] usb 1-1: could not get target info (-71) [ 134.642805][ T13] usb 1-1: could not probe fw (-71) [ 134.677336][ T5701] usb 1-1: USB disconnect, device number 34 [ 134.772761][ T6982] evm: overlay not supported [ 135.406521][ T52] usb 2-1: USB disconnect, device number 37 [ 135.591546][ T5759] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 135.703505][ T5701] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 135.742838][ T5759] usb 4-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 135.746537][ T5759] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.746563][ T5759] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.748062][ T5759] usb 4-1: config 0 descriptor?? [ 135.851991][ T5701] usb 1-1: Using ep0 maxpacket: 16 [ 135.852668][ T5701] usb 1-1: New USB device found: idVendor=320f, idProduct=5041, bcdDevice=0.00 [ 135.855189][ T5701] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.855204][ T5701] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 135.855218][ T5701] usb 1-1: config 0 interface 0 has no altsetting 0 [ 135.855251][ T5701] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.856867][ T5701] usb 1-1: config 0 descriptor?? [ 135.965767][ T5759] usbhid 4-1:0.0: can't add hid device: -71 [ 135.965844][ T5759] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 135.970737][ T5759] usb 4-1: USB disconnect, device number 33 [ 136.027621][ T7021] scsi_strcpy_devinfo: vendor string '¼QTò?¬Ý]Ð+É,r' is too long [ 136.103261][ T7008] sctp: [Deprecated]: syz.0.350 (pid 7008) Use of struct sctp_assoc_value in delayed_ack socket option. [ 136.103261][ T7008] Use struct sctp_sack_info instead [ 136.305603][ T5701] usbhid 1-1:0.0: can't add hid device: -32 [ 136.305665][ T5701] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 136.345349][ T5759] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 136.491773][ T5759] usb 4-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 136.492583][ T5759] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 136.492610][ T5759] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.494189][ T5759] usb 4-1: config 0 descriptor?? [ 136.709604][ T5759] usbhid 4-1:0.0: can't add hid device: -71 [ 136.709663][ T5759] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 136.732350][ T5759] usb 4-1: USB disconnect, device number 34 [ 136.941932][ T7034] netlink: 284 bytes leftover after parsing attributes in process `syz.2.356'. [ 137.321313][ T5759] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 137.471805][ T5759] usb 2-1: New USB device found: idVendor=046d, idProduct=c222, bcdDevice=0.00 [ 137.472615][ T5759] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 137.472641][ T5759] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.917256][ T5759] lg-g15 0003:046D:C222.000A: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.1-1/input0 [ 138.081384][ T5701] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 138.137017][ T7037] cgroup: fork rejected by pids controller in /syz2 [ 138.231883][ T5701] usb 4-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 138.234502][ T5701] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.234516][ T5701] usb 4-1: Product: syz [ 138.234523][ T5701] usb 4-1: Manufacturer: syz [ 138.234531][ T5701] usb 4-1: SerialNumber: syz [ 138.239928][ T5701] usb 4-1: config 0 descriptor?? [ 138.438127][ T52] usb 1-1: USB disconnect, device number 35 [ 138.481012][ T5701] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 139.755603][ T5701] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 139.917459][ T7124] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (8589934590 ns) > initial count (474742790 ns). Using initial count to start timer. [ 140.190625][ T5759] lg-g15 0003:046D:C222.000A: Error -71 disabling keyboard emulation for the G-keys, falling back to generic hid-input driver [ 140.221017][ T5759] usb 2-1: USB disconnect, device number 38 [ 140.299492][ T7128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.367'. [ 145.591244][ C0] sched: DL replenish lagged too much [ 163.470362][ T7129] Process accounting resumed [ 197.575013][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.852993][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 312.831178][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 312.838138][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5606/1:b..l.. P5701/1:b..l.. [ 312.848348][ C0] rcu: (detected by 0, t=10502 jiffies, g=28869, q=1193 ncpus=1) [ 312.856145][ C0] task:kworker/0:5 state:R running task stack:20608 pid:5701 tgid:5701 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 312.869691][ C0] Workqueue: events_power_efficient gc_worker [ 312.875756][ C0] Call Trace: [ 312.879038][ C0] [ 312.881951][ C0] __schedule+0x17dd/0x5820 [ 312.886445][ C0] ? rcu_is_watching+0x16/0xb0 [ 312.891193][ C0] ? __lock_acquire+0x747/0x2de0 [ 312.896127][ C0] ? __pfx___schedule+0x10/0x10 [ 312.900965][ C0] preempt_schedule_irq+0x4b/0x90 [ 312.905968][ C0] irqentry_exit+0x14f/0x9b0 [ 312.910605][ C0] ? trace_irq_disable+0x3b/0x140 [ 312.915649][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 312.921621][ C0] RIP: 0010:seqcount_lockdep_reader_access+0xed/0x100 [ 312.928382][ C0] Code: 00 75 11 e8 85 d3 a7 f7 4d 85 f6 75 16 e8 7b d3 a7 f7 eb 15 e8 74 d3 a7 f7 e8 cf f1 e7 01 4d 85 f6 74 ea e8 65 d3 a7 f7 fb 5b <41> 5e c3 cc cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 [ 312.947968][ C0] RSP: 0018:ffffc9000485f970 EFLAGS: 00000293 [ 312.954022][ C0] RAX: ffffffff8a21343b RBX: 0000000000000001 RCX: ffff88803626ddc0 [ 312.961990][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 312.969942][ C0] RBP: ffffc9000485fad0 R08: ffffffff91bd56bf R09: 1ffffffff237aad7 [ 312.977896][ C0] R10: dffffc0000000000 R11: fffffbfff237aad8 R12: dffffc0000000000 [ 312.985845][ C0] R13: ffffffff81905d7a R14: 0000000000000200 R15: 000000000000361b [ 312.993798][ C0] ? process_scheduled_works+0x97a/0x1630 [ 312.999501][ C0] ? seqcount_lockdep_reader_access+0xeb/0x100 [ 313.005643][ C0] gc_worker+0x31b/0x1890 [ 313.009971][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 313.014983][ C0] ? gc_worker+0x274/0x1890 [ 313.019464][ C0] ? __pfx_gc_worker+0x10/0x10 [ 313.024204][ C0] ? rcu_is_watching+0x16/0xb0 [ 313.028948][ C0] ? process_scheduled_works+0x97a/0x1630 [ 313.034646][ C0] process_scheduled_works+0xc3d/0x1630 [ 313.040185][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 313.046147][ C0] ? assign_work+0x3cf/0x5d0 [ 313.050716][ C0] worker_thread+0xa47/0xfb0 [ 313.055291][ C0] ? __kthread_parkme+0x71/0x1f0 [ 313.060214][ C0] kthread+0x38b/0x480 [ 313.064261][ C0] ? __pfx_worker_thread+0x10/0x10 [ 313.069348][ C0] ? __pfx_kthread+0x10/0x10 [ 313.073922][ C0] ret_from_fork+0x514/0xb70 [ 313.078498][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 313.083588][ C0] ? __switch_to+0xc78/0x1410 [ 313.088260][ C0] ? __pfx_kthread+0x10/0x10 [ 313.092831][ C0] ret_from_fork_asm+0x1a/0x30 [ 313.097582][ C0] [ 313.100591][ C0] task:syz-executor state:R running task stack:21952 pid:5606 tgid:5606 ppid:1 task_flags:0x40054c flags:0x00080002 [ 313.114037][ C0] Call Trace: [ 313.117294][ C0] [ 313.120212][ C0] __schedule+0x17dd/0x5820 [ 313.124699][ C0] ? irqentry_exit+0x2a0/0x9b0 [ 313.129441][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 313.134620][ C0] ? irqentry_exit+0x2a0/0x9b0 [ 313.139360][ C0] ? trace_irq_disable+0x3b/0x140 [ 313.144369][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 313.149371][ C0] ? __pfx___schedule+0x10/0x10 [ 313.154203][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 313.159551][ C0] preempt_schedule_common+0x7f/0xd0 [ 313.164815][ C0] preempt_schedule_thunk+0x16/0x40 [ 313.169991][ C0] _raw_spin_unlock+0x41/0x50 [ 313.174645][ C0] __zap_vma_range+0x3d29/0x4b50 [ 313.179599][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 313.184871][ C0] ? mas_find+0x6d6/0xcb0 [ 313.189182][ C0] unmap_vmas+0x38b/0x550 [ 313.193494][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 313.198341][ C0] ? mas_next_slot+0xc91/0xd70 [ 313.203128][ C0] exit_mmap+0x290/0xa40 [ 313.207362][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 313.212132][ C0] ? __pfx_exit_aio+0x10/0x10 [ 313.216813][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 313.222002][ C0] __mmput+0x118/0x420 [ 313.226057][ C0] exit_mm+0x18e/0x240 [ 313.230116][ C0] do_exit+0x6a8/0x2360 [ 313.234260][ C0] ? __pfx_do_exit+0x10/0x10 [ 313.238834][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 313.243843][ C0] do_group_exit+0x22d/0x2f0 [ 313.248414][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 313.253595][ C0] get_signal+0x1216/0x12c0 [ 313.258090][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 313.263617][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 313.268799][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 313.274940][ C0] ? __se_sys_clock_nanosleep+0x35b/0x3b0 [ 313.280649][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 313.286003][ C0] ? rcu_is_watching+0x16/0xb0 [ 313.290750][ C0] do_syscall_64+0x328/0x520 [ 313.295323][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.301369][ C0] ? clear_bhb_loop+0x70/0xc0 [ 313.306027][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.311895][ C0] RIP: 0033:0x7f4121d5ed8e [ 313.316300][ C0] RSP: 002b:00007ffe1e546e88 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 313.324690][ C0] RAX: 0000000000000000 RBX: 0000555572b5a500 RCX: 00007f4121d5ed8e [ 313.332639][ C0] RDX: 00007ffe1e546ee0 RSI: 0000000000000000 RDI: 0000000000000000 [ 313.340588][ C0] RBP: 00007ffe1e546f4c R08: 0000000000000000 R09: 0000000000000000 [ 313.348533][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000006d [ 313.356477][ C0] R13: 0000000000000006 R14: 0000000000021f19 R15: 00007ffe1e546fa0 [ 313.364435][ C0] [ 313.367442][ C0] rcu: rcu_preempt kthread starved for 250 jiffies! g28869 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 313.378257][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 313.388212][ C0] rcu: RCU grace-period kthread stack dump: [ 313.394072][ C0] task:rcu_preempt state:R running task stack:27656 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 313.407527][ C0] Call Trace: [ 313.410785][ C0] [ 313.413699][ C0] __schedule+0x17dd/0x5820 [ 313.418184][ C0] ? __lock_acquire+0x747/0x2de0 [ 313.423105][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 313.428200][ C0] ? __pfx___schedule+0x10/0x10 [ 313.433028][ C0] ? lock_acquire+0x115/0x350 [ 313.437700][ C0] ? schedule+0x90/0x2b0 [ 313.441922][ C0] schedule+0x164/0x2b0 [ 313.446056][ C0] schedule_timeout+0x152/0x2c0 [ 313.450884][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 313.456232][ C0] ? __pfx_process_timeout+0x10/0x10 [ 313.461500][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 313.467287][ C0] ? prepare_to_swait_event+0x220/0x3e0 [ 313.472810][ C0] ? prepare_to_swait_event+0x35e/0x3e0 [ 313.478343][ C0] rcu_gp_fqs_loop+0x30c/0x1230 [ 313.483187][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 313.489320][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 313.494587][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 313.499781][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 313.505569][ C0] rcu_gp_kthread+0x9c/0x340 [ 313.510138][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 313.515310][ C0] ? __kthread_parkme+0x71/0x1f0 [ 313.520235][ C0] ? __kthread_parkme+0x199/0x1f0 [ 313.525242][ C0] kthread+0x38b/0x480 [ 313.529292][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 313.534467][ C0] ? __pfx_kthread+0x10/0x10 [ 313.539049][ C0] ret_from_fork+0x514/0xb70 [ 313.543643][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 313.548746][ C0] ? __switch_to+0xc78/0x1410 [ 313.553417][ C0] ? __pfx_kthread+0x10/0x10 [ 313.558000][ C0] ret_from_fork_asm+0x1a/0x30 [ 313.562760][ C0] [ 313.565759][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 313.572076][ C0] CPU: 0 UID: 0 PID: 3226 Comm: kworker/R-bat_e Tainted: G L syzkaller #0 PREEMPT(full) [ 313.583439][ C0] Tainted: [L]=SOFTLOCKUP [ 313.587747][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 313.597792][ C0] Workqueue: bat_events batadv_dat_purge [ 313.603417][ C0] RIP: 0010:process_backlog+0x15af/0x18b0 [ 313.609136][ C0] Code: 48 c7 c7 00 da eb 9b e8 6f ab 66 f8 e9 7a ee ff ff e8 f5 d6 f0 f7 48 c7 c7 80 30 68 91 4c 89 f6 e8 b6 92 5a fb e9 22 f9 ff ff <48> c7 c1 00 da eb 9b 80 e1 07 80 c1 03 38 c1 0f 8c 48 f9 ff ff 48 [ 313.628806][ C0] RSP: 0018:ffffc90000007c50 EFLAGS: 00000202 [ 313.634854][ C0] RAX: 0000000000000004 RBX: 0000000000000040 RCX: ffff88802e1c9f40 [ 313.642800][ C0] RDX: 8000000000000100 RSI: 0000000000000100 RDI: 0000000000000008 [ 313.650748][ C0] RBP: dffffc0000000000 R08: 0000000000000100 R09: 0000000000000000 [ 313.658696][ C0] R10: 0000000000000003 R11: 8000000000000100 R12: ffff8880b823d910 [ 313.666656][ C0] R13: 8000000000000101 R14: ffff8880b823d968 R15: 0000000000000000 [ 313.674611][ C0] FS: 0000000000000000(0000) GS:ffff8881233f7000(0000) knlGS:0000000000000000 [ 313.683526][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 313.690110][ C0] CR2: 00007fa68c600218 CR3: 000000005fd98000 CR4: 00000000003526f0 [ 313.698070][ C0] Call Trace: [ 313.701335][ C0] [ 313.704168][ C0] ? process_backlog+0x3de/0x18b0 [ 313.709182][ C0] __napi_poll+0xaa/0x330 [ 313.713512][ C0] net_rx_action+0x61d/0xf50 [ 313.718089][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 313.723191][ C0] handle_softirqs+0x265/0x8d0 [ 313.727938][ C0] ? batadv_dat_purge+0x2d7/0x3c0 [ 313.732939][ C0] do_softirq+0x77/0xd0 [ 313.737076][ C0] [ 313.739999][ C0] [ 313.742916][ C0] __local_bh_enable_ip+0x100/0x140 [ 313.748092][ C0] batadv_dat_purge+0x2d7/0x3c0 [ 313.752941][ C0] ? process_scheduled_works+0x97a/0x1630 [ 313.758639][ C0] process_scheduled_works+0xc3d/0x1630 [ 313.764186][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 313.770154][ C0] ? assign_work+0x3af/0x5d0 [ 313.774726][ C0] rescuer_thread+0x84a/0x12a0 [ 313.779471][ C0] ? rescuer_thread+0xb8/0x12a0 [ 313.784307][ C0] kthread+0x38b/0x480 [ 313.788361][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 313.793535][ C0] ? __pfx_kthread+0x10/0x10 [ 313.798103][ C0] ret_from_fork+0x514/0xb70 [ 313.802691][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 313.807801][ C0] ? __switch_to+0xc78/0x1410 [ 313.812467][ C0] ? __pfx_kthread+0x10/0x10 [ 313.817060][ C0] ret_from_fork_asm+0x1a/0x30 [ 313.821816][ C0]