last executing test programs: 2m45.899098305s ago: executing program 1 (id=2353): openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000300)={0x6000000d}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000003c0)={0x2000000a}) 2m45.355582424s ago: executing program 1 (id=2354): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000780)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000007c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000008c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000900), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000040)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) r4 = syz_open_procfs(0x0, &(0x7f0000000ac0)='net/route\x00') pread64(r4, &(0x7f0000000b00)=""/102356, 0x18fd4, 0xc2a) execve(&(0x7f0000019b00)='./file0\x00', 0x0, &(0x7f0000019b40)={[&(0x7f0000019b80)=' ']}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc, 0x0, 0x9}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) 2m44.183547353s ago: executing program 1 (id=2355): ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b7030000000800008500000072000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x70, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) inotify_init1(0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000080)={r3, 0x80001, 0x80000004}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000001c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f00000000c0)={r4, 0x1, r2, 0x3, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000280)={r4, 0x5, 0x4000003}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mlockall(0x7) 2m42.964555415s ago: executing program 1 (id=2365): r0 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000600)='dir .', 0x5) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97051, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f00000007c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) write(r0, &(0x7f0000000700)='bind', 0x4) 2m42.892408492s ago: executing program 1 (id=2366): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x34, &(0x7f0000000140)={0x0, 0xe, 0x1, "94"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000a80)={0x1c, &(0x7f0000000440)={0x0, 0xf}, 0x0, 0x0}) 2m38.499936701s ago: executing program 1 (id=2381): syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sync() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f00000004c0)=""/208, 0xd0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 2m23.200866298s ago: executing program 32 (id=2381): syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sync() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f00000004c0)=""/208, 0xd0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 8.74372056s ago: executing program 4 (id=2769): keyctl$instantiate(0xc, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="6e65772064656661756c7420757365723a73797a203030303030303030303030303030ef"], 0x2a, 0x0) add_key(&(0x7f0000000400)='encrypted\x00', &(0x7f0000000440), &(0x7f0000000480), 0xca, 0xfffffffffffffffe) 8.681048611s ago: executing program 4 (id=2770): r0 = syz_usb_connect(0x0, 0x49, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000200000040cc1769190001000000010902370001010080fa0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xf, &(0x7f00000004c0)="010000000001010101010101010100") syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 8.486474705s ago: executing program 0 (id=2771): r0 = syz_usb_connect(0x0, 0x202, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000100)={0x0, 0xd, 0x2, 'Vx'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f00000001c0)={0x40, 0xd, 0x9, {0x9, 0xf, "e6a410cb4a3b8a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000440)={0x14, &(0x7f0000000240)={0x40, 0x5, 0x1a, {0x1a, 0xf, "a466371f12c1b54914b00d1bfcea1ef094b6f1d7d6579e76"}}, 0x0}, &(0x7f00000006c0)={0x34, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0xa0, 0x4, 0x3}, 0x0}) 8.20100573s ago: executing program 3 (id=2775): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(0xffffffffffffffff, &(0x7f0000000040)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB=' \b#\x00\x00\x00#'], 0x0}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 6.807530573s ago: executing program 5 (id=2780): r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x5b) keyctl$revoke(0x3, r0) write$uinput_user_dev(r1, 0x0, 0x0) 6.604927539s ago: executing program 5 (id=2782): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x1, 0x4, 0x2dce, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x800003, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0xa, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x78, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x13, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x80, 0x9, 0xf9a2, 0xa9, 0xff, 0x8, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0x401, 0x2b, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x6, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x7, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x0, 0x9, 0xffffffff, 0x5, 0x81, 0x1ff, 0xe570, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x6, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x4, 0x400005, 0x491, 0x9, 0x8, 0x1, 0x400, 0x102, 0x2, 0x41, 0x5, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x8, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x4, 0x10010, 0xf9d1, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0xe, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0x100005, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1001, 0x10000001, 0x7, 0x21, 0x9, 0x5, 0x7, 0x1000, 0x8, 0x1ce, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80088001, 0x777b, 0x1, 0x3, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xb, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000400)=ANY=[@ANYBLOB='f'], 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f00000001c0)=0x7f, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r3, 0x4018aee2, &(0x7f0000000240)=@attr_pmu_irq={0x0, 0x1, 0x1, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000002c0)=0x7b, 0x4) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 6.007911602s ago: executing program 0 (id=2783): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fc"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000e00)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000e40)={0x2c, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 5.563268071s ago: executing program 4 (id=2785): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000795d6c08450c3e616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 5.37180532s ago: executing program 5 (id=2786): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x16b002, 0x4c) mount(0x0, 0x0, &(0x7f0000000300)='cramfs\x00', 0x208000, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'lo\x00'}, 0x18) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) 5.272187487s ago: executing program 5 (id=2787): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019b40)=""/102400, 0x19000) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000200)=0x40003) file_setattr(r0, 0x0, &(0x7f0000000000)={0x7000, 0xfffffffc, 0x2, 0x0, 0x402}, 0x18, 0x1000) 3.755382108s ago: executing program 5 (id=2789): r0 = syz_usb_connect(0x2, 0x36, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x411}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000340)={0x0, 0x10, 0x1, "c4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000200)={0x1, 0x84, 0x3, &(0x7f00000000c0)={0xc, "8105d6c721100f00000000400000a8267d87000200"}}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB='@H\a'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.635933135s ago: executing program 2 (id=2790): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8153, 0x103000, 0x800, 0x9}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) pselect6(0x40, &(0x7f00000001c0)={0x4, 0x8001, 0x6, 0x300, 0x0, 0x3ff000000, 0x80000000009c2a, 0x4}, 0x0, &(0x7f0000000200)={0x3ff, 0x4000000000002, 0x7ffffffffffff, 0x9, 0x4, 0x0, 0x8000000000000000, 0x4000009}, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0xd, 0x0, &(0x7f0000000140)="e460334470d8d400eb00c15286", 0x0, 0xffffff01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0xfd, 0x28c, 0x1, 0x0, 0x3}, {0x7}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x2, 0x0, 0xbd, 0x0, 0x8000000}}, 0xe8) 3.578360256s ago: executing program 3 (id=2791): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x200440c1}, 0x4000) recvmmsg(r0, &(0x7f00000012c0)=[{{0x0, 0x0, &(0x7f0000001380)=[{0x0}], 0x1}, 0x5dda}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x40, 0x0) 3.229019127s ago: executing program 3 (id=2792): socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffb]}, 0x0, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x401, 0xfffffe0800000001, 0xfa11, 0xf7ffffff}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000332000/0x4000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f000070d000/0x5000)=nil, &(0x7f0000059000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000053000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000548000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0, r1}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_ublk_setup_queues(r1, 0x0, 0x0, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x680c, 0x10000, 0x2, 0x3a4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb8e8, 0x4000, 0x0, 0x2f1, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdb36, 0x4, 0x0, 0x1000c1, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x62c8, 0x2000, 0x0, 0x186, 0x0, r0}}], 0x4, &(0x7f0000001800)={0x2e, 0x3c, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, '\x00', {0x0, 0xff2, 0x0, &(0x7f0000001e80)=@buf_512="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"}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(0xffffffffffffffff, 0x2219, 0xcf74, 0x16, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ptrace$setopts(0x4206, 0x0, 0x5, 0x20) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105c45b24fd", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{0x0, 0x11}, {&(0x7f0000000900)=""/206, 0xce}], 0x2, 0x0, 0x200) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000000)={0x2, 0x1, 0x3, 0x2, 0x4}) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x1) syz_usb_control_io$uac3(r3, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000280)={0x3, r7, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) 2.487825296s ago: executing program 0 (id=2793): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a010400000000000000000a0000010900010073797a31000000002400048020000180070001006374000014000280080002400000000f08000140000000090900020073797a320000000014000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r1 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet6(r1, &(0x7f0000000380)={&(0x7f00000003c0)={0xa, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x17}, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="280000000000000029000000040000003c0102000000040200020401"], 0x28}, 0xc0) 2.272045422s ago: executing program 2 (id=2794): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000005a80), 0xce5, 0x2400) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000005ac0)=""/114) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r6, 0x0, 0x20, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x31, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast2}}}}) 2.243855525s ago: executing program 0 (id=2795): r0 = syz_usb_connect(0x0, 0x49, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000200000040cc1769190001000000010902370001010080fa0904000000ffffff000904000104ffffff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xf, &(0x7f00000004c0)="010000000001010101010101010100") syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 1.947612495s ago: executing program 4 (id=2796): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000009a80)='/sys/kernel/notes', 0x800, 0x6) fchown(r0, 0x0, 0x0) 1.492613345s ago: executing program 4 (id=2797): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x1, 0x4, 0x2dce, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x800003, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0xa, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x78, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x13, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x80, 0x9, 0xf9a2, 0xa9, 0xff, 0x8, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0x401, 0x2b, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x6, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x7, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x0, 0x9, 0xffffffff, 0x5, 0x81, 0x1ff, 0xe570, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x6, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x4, 0x400005, 0x491, 0x9, 0x8, 0x1, 0x400, 0x102, 0x2, 0x41, 0x5, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x8, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x4, 0x10010, 0xf9d1, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0xe, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0x100005, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1001, 0x10000001, 0x7, 0x21, 0x9, 0x5, 0x7, 0x1000, 0x8, 0x1ce, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80088001, 0x777b, 0x1, 0x3, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xb, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000400)=ANY=[@ANYBLOB='f'], 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f00000001c0)=0x7f, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r3, 0x4018aee2, &(0x7f0000000240)=@attr_pmu_irq={0x0, 0x1, 0x1, &(0x7f0000000140)=0x85e}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000002c0)=0x7b, 0x4) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.218799883s ago: executing program 2 (id=2798): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x16b002, 0x4c) mount(0x0, 0x0, &(0x7f0000000300)='cramfs\x00', 0x208000, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'lo\x00'}, 0x18) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) 1.178073639s ago: executing program 3 (id=2799): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dce, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x800003, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0xa, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x80000091, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x0, 0x9, 0xffffffff, 0x5, 0x81, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x4, 0x5, 0x491, 0x9, 0x8, 0x1, 0x400, 0x102, 0x1, 0x41, 0x5, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f5, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1001, 0x10000001, 0x7, 0x21, 0x800, 0x81, 0x7, 0x1000, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xb, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x16, &(0x7f0000000280)={0x3f, 0x8000006, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000300)="18607651") ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 839.665659ms ago: executing program 2 (id=2800): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000002c0)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000300)="3300000008000102030405060101", 0xe) 809.628729ms ago: executing program 2 (id=2801): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x54, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x10000006}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040}, 0x8040) 765.144155ms ago: executing program 2 (id=2802): r0 = syz_usb_connect(0x3, 0x50, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_ep_read(r0, 0x4, 0x0, 0x0) syz_usb_ep_write(r0, 0x83, 0x0, 0x0) syz_usb_ep_read(r0, 0x4, 0x0, 0x0) syz_usb_ep_read(r0, 0x4, 0x0, 0x0) syz_usb_ep_write(r0, 0x83, 0x0, 0x0) syz_usb_ep_read(r0, 0x4, 0x0, 0x0) syz_usb_ep_read(r0, 0x4, 0x0, 0x0) syz_usb_ep_write(r0, 0x83, 0x0, 0x0) syz_usb_ep_read(r0, 0x4, 0x0, 0x0) syz_usb_ep_read(r0, 0x4, 0x0, 0x0) syz_usb_ep_write(r0, 0x83, 0x0, 0x0) 600.15256ms ago: executing program 5 (id=2803): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff0905"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000e00)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000e40)={0x2c, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 571.357734ms ago: executing program 0 (id=2804): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/mem_sleep', 0x101a02, 0x0) sendfile(r0, r0, 0x0, 0x6) 527.24491ms ago: executing program 0 (id=2805): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000780)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f00000007c0)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000840)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000008c0), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000900), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = syz_open_procfs(0x0, &(0x7f0000000ac0)='net/route\x00') pread64(r2, &(0x7f0000000b00)=""/102356, 0x18fd4, 0xc2a) 445.747126ms ago: executing program 3 (id=2806): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a010400000000000000000a0000010900010073797a31000000002400048020000180070001006374000014000280080002400000000f08000140000000090900020073797a320000000014000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r1 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet6(r1, &(0x7f0000000380)={&(0x7f00000003c0)={0xa, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x17}, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="280000000000000029000000040000003c0102000000040200020401"], 0x28}, 0xc0) 319.343616ms ago: executing program 3 (id=2807): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000300)={0x40, 0x31}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 0s ago: executing program 4 (id=2808): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000005a80), 0xce5, 0x2400) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000005ac0)=""/114) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r6, 0x0, 0x20, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x31, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast2}}}}) kernel console output (not intermixed with test programs): nzero urb status received: -71 [ 639.709468][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.709731][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.709966][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.710211][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.710440][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.710672][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.710906][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.711146][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.711389][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.711615][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.711900][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.712137][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.712362][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.712600][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.712825][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.713048][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.713270][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.713494][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.713757][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.713985][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.714213][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.714439][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.714668][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.714894][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.715119][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.715346][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.715591][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.715843][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.716072][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.716297][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.716519][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.716754][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.716994][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.717220][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.717444][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.717667][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.717904][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.718130][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.718366][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.718592][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.718816][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.719035][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.719307][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.719538][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.719764][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.719987][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.720212][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.720437][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.720718][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.720952][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.721176][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.721419][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.721768][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.722044][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.722268][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.722491][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.722724][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.722947][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.723168][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.723391][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.723610][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.723836][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.724050][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.724268][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.724508][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.724746][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.724990][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.725230][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.725841][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.726115][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.726266][ T5795] usb 2-1: USB disconnect, device number 78 [ 639.726339][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 639.726361][ C0] usb 2-1: hanwang_irq - usb_submit_urb failed with result -19 [ 641.812704][ T37] audit: type=1326 audit(1792098329.994:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12535 comm="syz.0.2274" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff6355ae559 code=0x0 [ 641.875366][ T11] block nbd3: Possible stuck request ffff8880286ac080: control (read@0,4096B). Runtime 120 seconds [ 643.351012][T12550] Illegal XDP return value 68 on prog (id 124) dev N/A, expect packet loss! [ 644.806143][T12570] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2283'. [ 644.912919][ T11] block nbd1: Possible stuck request ffff8880285e5080: control (read@0,4096B). Runtime 150 seconds [ 644.981129][T12574] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 644.981158][T12574] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 644.981177][T12574] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xc92a instead [ 644.981198][T12574] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xdb8d instead [ 644.981216][T12574] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 644.981233][T12574] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 644.981251][T12574] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 644.981273][T12574] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 644.981304][T12574] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 644.981337][T12574] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 644.981355][T12574] jffs2: Further such events for this erase block will not be printed [ 645.123898][T12574] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 645.123926][T12574] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 645.123946][T12574] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xc92a instead [ 645.123967][T12574] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xdb8d instead [ 645.123985][T12574] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 645.124003][T12574] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 645.124020][T12574] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 645.124042][T12574] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 645.124073][T12574] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 645.124103][T12574] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 645.124121][T12574] jffs2: Further such events for this erase block will not be printed [ 645.124467][T12574] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 645.124477][T12574] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32 [ 645.451882][ T1000] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 645.623860][ T1000] usb 2-1: Using ep0 maxpacket: 32 [ 645.624962][ T1000] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 645.629369][ T1000] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 645.629402][ T1000] usb 2-1: config 0 has no interface number 0 [ 645.629455][ T1000] usb 2-1: config 0 interface 12 has no altsetting 0 [ 645.636582][ T1000] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.636613][ T1000] usb 2-1: Product: syz [ 645.636629][ T1000] usb 2-1: Manufacturer: syz [ 645.636646][ T1000] usb 2-1: SerialNumber: syz [ 645.660662][ T1000] usb 2-1: config 0 descriptor?? [ 647.046184][ T5576] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 647.232842][ T5576] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 647.235680][ T5576] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.266106][ T5576] usb 1-1: config 0 descriptor?? [ 648.420063][ T5576] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 648.420633][ T5576] [drm:udl_init] *ERROR* Selecting channel failed [ 648.500362][ T5576] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1 [ 648.500391][ T5576] [drm] Initialized udl on minor 1 [ 648.528354][ T5576] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 648.543983][ T5576] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 648.560622][ T5576] usb 1-1: USB disconnect, device number 81 [ 648.854562][T12608] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2295'. [ 649.043645][ T1000] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 649.043708][ T1000] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 649.043741][ T1000] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 649.043830][ T1000] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 649.068538][ T1000] usb 2-1: USB disconnect, device number 79 [ 649.272356][T12617] tipc: Enabled bearer , priority 0 [ 649.273168][T12617] syzkaller0: entered promiscuous mode [ 649.273193][T12617] syzkaller0: entered allmulticast mode [ 649.283733][T12617] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2300'. [ 649.322380][T12626] FAULT_INJECTION: forcing a failure. [ 649.322380][T12626] name fail_futex, interval 1, probability 0, space 0, times 0 [ 649.322414][T12626] CPU: 0 UID: 0 PID: 12626 Comm: syz.2.2304 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 649.322439][T12626] Tainted: [L]=SOFTLOCKUP [ 649.322446][T12626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 649.322458][T12626] Call Trace: [ 649.322467][T12626] [ 649.322492][T12626] dump_stack_lvl+0xe8/0x150 [ 649.322546][T12626] should_fail_ex+0x46b/0x600 [ 649.322599][T12626] get_futex_key+0x1b4/0x1580 [ 649.322657][T12626] ? __pfx_get_futex_key+0x10/0x10 [ 649.322684][T12626] ? kasan_quarantine_put+0xbb/0x1f0 [ 649.322750][T12626] futex_wake+0x119/0x600 [ 649.322778][T12626] ? __pfx_futex_wake+0x10/0x10 [ 649.322804][T12626] ? __pfx_smack_log+0x10/0x10 [ 649.322853][T12626] do_futex+0x458/0x4e0 [ 649.322872][T12626] ? smk_tskacc+0x2fb/0x370 [ 649.322900][T12626] ? __pfx_do_futex+0x10/0x10 [ 649.322919][T12626] ? smack_file_ioctl+0x2c4/0x370 [ 649.322957][T12626] __se_sys_futex+0x3a8/0x450 [ 649.322981][T12626] ? __fget_files+0x2a/0x420 [ 649.323016][T12626] ? __pfx___se_sys_futex+0x10/0x10 [ 649.323037][T12626] ? __fget_files+0x2a/0x420 [ 649.323073][T12626] ? __x64_sys_futex+0x21/0xf0 [ 649.323096][T12626] do_syscall_64+0x166/0x520 [ 649.323151][T12626] ? trace_irq_disable+0x3b/0x140 [ 649.323183][T12626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.323216][T12626] ? clear_bhb_loop+0x70/0xc0 [ 649.323241][T12626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.323262][T12626] RIP: 0033:0x7f587f2ee559 [ 649.323281][T12626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 649.323297][T12626] RSP: 002b:00007f587d5460e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 649.323319][T12626] RAX: ffffffffffffffda RBX: 00007f587f575fa8 RCX: 00007f587f2ee559 [ 649.323335][T12626] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f587f575fac [ 649.323347][T12626] RBP: 00007f587f575fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 649.323363][T12626] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 649.323377][T12626] R13: 00007f587f576038 R14: 00007ffc0cf482e0 R15: 00007ffc0cf483c8 [ 649.323410][T12626] [ 649.362455][T12617] tipc: Resetting bearer [ 649.561945][ T1000] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 649.566096][T12616] tipc: Resetting bearer [ 649.749208][T12616] tipc: Disabling bearer [ 649.753381][ T1000] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 649.757728][ T1000] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.757755][ T1000] usb 4-1: Product: syz [ 649.757770][ T1000] usb 4-1: Manufacturer: syz [ 649.757786][ T1000] usb 4-1: SerialNumber: syz [ 650.085709][T12637] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 650.151826][ T5714] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 650.210815][T12637] bond5 (unregistering): Released all slaves [ 650.229855][ T1000] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 650.229895][ T1000] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 650.321857][ T5576] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 650.411219][ T5714] usb 1-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 650.428294][ T5714] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 650.447304][ T5714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.447376][ T5714] usb 1-1: Product: syz [ 650.447391][ T5714] usb 1-1: Manufacturer: syz [ 650.447405][ T5714] usb 1-1: SerialNumber: syz [ 650.512618][ T5714] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 650.530385][ T5576] usb 2-1: Using ep0 maxpacket: 16 [ 650.531245][ T5576] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 650.550746][ T5576] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.550776][ T5576] usb 2-1: Product: syz [ 650.550791][ T5576] usb 2-1: Manufacturer: syz [ 650.550806][ T5576] usb 2-1: SerialNumber: syz [ 650.832304][ T5576] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 650.852490][ T5576] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 650.852857][ T5576] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 650.852909][ T5576] usb 2-1: media controller created [ 650.899158][ T5576] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 650.915313][T12647] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2314'. [ 650.915342][T12647] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2314'. [ 651.033027][ T5576] zl10353_read_register: readreg error (reg=127, ret==-71) [ 651.156172][ T5576] dvb_usb_gl861 2-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 651.189414][ T5576] usb 2-1: USB disconnect, device number 80 [ 651.500104][ T1000] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 651.501249][ T1000] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 651.512967][ T5714] gspca_mr97310a: reg write [21] error -71 [ 651.513118][ T5714] mr97310a 1-1:1.0: probe with driver mr97310a failed with error -71 [ 651.556986][ T5714] usb 1-1: USB disconnect, device number 82 [ 651.940153][ T1000] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO [ 651.940208][ T1000] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 651.987056][T12656] FAULT_INJECTION: forcing a failure. [ 651.987056][T12656] name failslab, interval 1, probability 0, space 0, times 0 [ 651.987100][T12656] CPU: 1 UID: 0 PID: 12656 Comm: syz.1.2318 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 651.987131][T12656] Tainted: [L]=SOFTLOCKUP [ 651.987140][T12656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 651.987154][T12656] Call Trace: [ 651.987164][T12656] [ 651.987175][T12656] dump_stack_lvl+0xe8/0x150 [ 651.987214][T12656] should_fail_ex+0x46b/0x600 [ 651.987254][T12656] should_failslab+0xa8/0x100 [ 651.987282][T12656] __kvmalloc_node_noprof+0x176/0x890 [ 651.987318][T12656] ? alloc_netdev_mqs+0xaf7/0x12c0 [ 651.987374][T12656] ? alloc_netdev_mqs+0xaf7/0x12c0 [ 651.987414][T12656] alloc_netdev_mqs+0xaf7/0x12c0 [ 651.987475][T12656] ppp_ioctl+0xb0f/0x1db0 [ 651.987529][T12656] ? __pfx_ppp_ioctl+0x10/0x10 [ 651.987563][T12656] ? __fget_files+0x2a/0x420 [ 651.987590][T12656] ? __fget_files+0x3a8/0x420 [ 651.987616][T12656] ? __fget_files+0x2a/0x420 [ 651.987645][T12656] ? bpf_lsm_file_ioctl+0x9/0x20 [ 651.987684][T12656] ? __pfx_ppp_ioctl+0x10/0x10 [ 651.987713][T12656] __se_sys_ioctl+0xff/0x170 [ 651.987752][T12656] do_syscall_64+0x166/0x520 [ 651.987783][T12656] ? trace_irq_disable+0x3b/0x140 [ 651.987812][T12656] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.987835][T12656] ? clear_bhb_loop+0x70/0xc0 [ 651.987862][T12656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.987892][T12656] RIP: 0033:0x7fca536de559 [ 651.987915][T12656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 651.987935][T12656] RSP: 002b:00007fca51936028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 651.987960][T12656] RAX: ffffffffffffffda RBX: 00007fca53965fa0 RCX: 00007fca536de559 [ 651.987978][T12656] RDX: 00002000000000c0 RSI: 00000000c004743e RDI: 0000000000000005 [ 651.987993][T12656] RBP: 00007fca537758b0 R08: 0000000000000000 R09: 0000000000000000 [ 651.988008][T12656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 651.988023][T12656] R13: 00007fca53966038 R14: 00007fca53965fa0 R15: 00007ffd7b45b048 [ 651.988060][T12656] [ 651.995723][T12657] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 652.143764][T12657] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 652.160611][T12657] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 652.179385][ T1000] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 652.194343][T12657] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 652.206741][T12657] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 652.508911][ T1000] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 652.551822][ T1000] usb 4-1: USB disconnect, device number 66 [ 652.982098][T12673] tipc: Enabled bearer , priority 0 [ 652.982900][T12673] syzkaller0: entered promiscuous mode [ 652.982925][T12673] syzkaller0: entered allmulticast mode [ 653.005806][T12673] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2323'. [ 654.558490][T12678] tipc: Resetting bearer [ 655.083380][ T5595] Bluetooth: hci5: command tx timeout [ 655.102011][T12672] tipc: Resetting bearer [ 655.124623][ T11] block nbd0: Possible stuck request ffff888028572140: control (read@0,1024B). Runtime 120 seconds [ 655.304674][T12672] tipc: Disabling bearer [ 655.419425][ T197] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 655.481362][T12688] scsi_dev_info_list_add_str: bad dev info string 'M' '' '' [ 655.551970][ T36] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 655.562318][ T197] usb 5-1: Using ep0 maxpacket: 16 [ 655.563265][ T197] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 655.565004][ T197] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 655.565037][ T197] usb 5-1: config 0 interface 0 has no altsetting 0 [ 655.569883][ T197] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.569912][ T197] usb 5-1: Product: syz [ 655.569928][ T197] usb 5-1: Manufacturer: syz [ 655.569944][ T197] usb 5-1: SerialNumber: syz [ 655.589708][ T197] usb 5-1: config 0 descriptor?? [ 655.711839][ T36] usb 2-1: Using ep0 maxpacket: 16 [ 655.713400][ T36] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 655.729542][ T36] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.729572][ T36] usb 2-1: Product: syz [ 655.729588][ T36] usb 2-1: Manufacturer: syz [ 655.729618][ T36] usb 2-1: SerialNumber: syz [ 656.005582][ T197] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input28 [ 656.067488][ T36] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 656.095490][ T36] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 656.095839][ T36] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 656.143540][ T36] usb 2-1: media controller created [ 656.174762][T12653] rxe_eth0 speed is unknown, defaulting to 1000 [ 656.219958][ T36] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 656.393128][ T36] zl10353_read_register: readreg error (reg=127, ret==-71) [ 656.483273][ T197] rc_core: IR keymap rc-imon-pad not found [ 656.483294][ T197] Registered IR keymap rc-empty [ 656.484238][ T197] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 656.484255][ T197] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 656.669849][ T197] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 656.750658][ C0] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 656.934059][ T197] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input29 [ 656.963295][ T197] imon 5-1:0.0: iMON device (15c2:0041, intf0) on usb<5:63> initialized [ 657.080541][ T197] usb 5-1: USB disconnect, device number 63 [ 657.093104][ T36] dvb_usb_gl861 2-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 657.114464][ T5595] Bluetooth: hci5: command tx timeout [ 657.154970][ T36] usb 2-1: USB disconnect, device number 81 [ 660.169158][ T5595] Bluetooth: hci5: command tx timeout [ 660.504305][T12732] tipc: Enabled bearer , priority 0 [ 660.597929][T12732] syzkaller0: entered promiscuous mode [ 660.598008][T12732] syzkaller0: entered allmulticast mode [ 660.654642][T12732] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2339'. [ 660.714866][T12732] tipc: Resetting bearer [ 660.754969][T12729] tipc: Resetting bearer [ 661.092863][T12729] tipc: Disabling bearer [ 661.604517][T12653] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.604696][T12653] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.604923][T12653] bridge_slave_0: entered allmulticast mode [ 661.609926][T12653] bridge_slave_0: entered promiscuous mode [ 661.667302][T12653] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.667542][T12653] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.667734][T12653] bridge_slave_1: entered allmulticast mode [ 661.670472][T12653] bridge_slave_1: entered promiscuous mode [ 661.744068][T12653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 661.747657][T12653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 661.819198][T12653] team0: Port device team_slave_0 added [ 661.831216][T12653] team0: Port device team_slave_1 added [ 661.881480][T12653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 661.881500][T12653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 661.881526][T12653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 661.934024][T12653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 661.934043][T12653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 661.934070][T12653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 662.046582][T12653] hsr_slave_0: entered promiscuous mode [ 662.047888][T12653] hsr_slave_1: entered promiscuous mode [ 662.064956][T12653] debugfs: 'hsr0' already exists in 'hsr' [ 662.064987][T12653] Cannot create hsr debugfs directory [ 662.225378][ T5595] Bluetooth: hci5: command tx timeout [ 662.571828][ T1000] usb 1-1: new full-speed USB device number 83 using dummy_hcd [ 662.735931][ T1000] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 662.740646][ T1000] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.740678][ T1000] usb 1-1: Product: syz [ 662.740694][ T1000] usb 1-1: Manufacturer: syz [ 662.740711][ T1000] usb 1-1: SerialNumber: syz [ 662.748466][ T1000] usb 1-1: config 0 descriptor?? [ 662.789922][ T1000] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 663.249948][T12653] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.249987][T12653] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 664.822106][ T1000] gspca_stk1135: reg_w 0xf err -71 [ 664.823243][ T1000] gspca_stk1135: serial bus timeout: status=0x00 [ 664.823260][ T1000] gspca_stk1135: Sensor write failed [ 664.823286][ T1000] gspca_stk1135: serial bus timeout: status=0x00 [ 664.823296][ T1000] gspca_stk1135: Sensor write failed [ 664.823321][ T1000] gspca_stk1135: serial bus timeout: status=0x00 [ 664.823330][ T1000] gspca_stk1135: Sensor read failed [ 664.823357][ T1000] gspca_stk1135: serial bus timeout: status=0x00 [ 664.823368][ T1000] gspca_stk1135: Sensor read failed [ 664.823375][ T1000] gspca_stk1135: Detected sensor type unknown (0x0) [ 664.823407][ T1000] gspca_stk1135: serial bus timeout: status=0x00 [ 664.823418][ T1000] gspca_stk1135: Sensor read failed [ 664.823447][ T1000] gspca_stk1135: serial bus timeout: status=0x00 [ 664.823457][ T1000] gspca_stk1135: Sensor read failed [ 664.823483][ T1000] gspca_stk1135: serial bus timeout: status=0x00 [ 664.823493][ T1000] gspca_stk1135: Sensor write failed [ 664.823522][ T1000] gspca_stk1135: serial bus timeout: status=0x00 [ 664.823560][ T1000] gspca_stk1135: Sensor write failed [ 664.823645][ T1000] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 664.953689][ T1000] usb 1-1: USB disconnect, device number 83 [ 665.000680][ T37] audit: type=1326 audit(1792098353.174:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12787 comm="syz.1.2355" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca536de559 code=0x7fc00000 [ 665.551911][ T5795] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 665.607850][ T37] audit: type=1326 audit(1792098353.784:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12787 comm="syz.1.2355" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fca536de559 code=0x7fc00000 [ 665.608199][ T37] audit: type=1326 audit(1792098353.784:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12787 comm="syz.1.2355" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca536de559 code=0x7fc00000 [ 665.608335][ T37] audit: type=1326 audit(1792098353.784:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12787 comm="syz.1.2355" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca536de559 code=0x7fc00000 [ 665.608532][ T37] audit: type=1326 audit(1792098353.784:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12787 comm="syz.1.2355" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca536de559 code=0x7fc00000 [ 665.608663][ T37] audit: type=1326 audit(1792098353.784:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12787 comm="syz.1.2355" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca536de559 code=0x7fc00000 [ 665.608869][ T37] audit: type=1326 audit(1792098353.784:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12787 comm="syz.1.2355" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca536de559 code=0x7fc00000 [ 665.608989][ T37] audit: type=1326 audit(1792098353.784:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12787 comm="syz.1.2355" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca536de559 code=0x7fc00000 [ 665.609587][ T37] audit: type=1326 audit(1792098353.784:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12787 comm="syz.1.2355" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca536de559 code=0x7fc00000 [ 665.702667][ T5795] usb 5-1: New USB device found, idVendor=056a, idProduct=010e, bcdDevice= 0.00 [ 665.704404][ T5795] usb 5-1: config 0 interface 0 altsetting 249 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 665.704444][ T5795] usb 5-1: config 0 interface 0 altsetting 249 endpoint 0x81 has invalid maxpacket 1015, setting to 64 [ 665.704479][ T5795] usb 5-1: config 0 interface 0 altsetting 249 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 665.704508][ T5795] usb 5-1: config 0 interface 0 has no altsetting 0 [ 665.704541][ T5795] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.710579][ T5795] usb 5-1: config 0 descriptor?? [ 665.713744][T12799] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 666.125954][T12653] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.125979][T12653] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 666.159069][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 666.164866][ T5795] usbhid 5-1:0.0: can't add hid device: -71 [ 666.164988][ T5795] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 666.198518][ T5795] usb 5-1: USB disconnect, device number 64 [ 666.321856][ T1000] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 666.672074][ T1000] usb 2-1: Using ep0 maxpacket: 8 [ 667.410784][ T1000] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 667.422140][ T1000] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 667.429625][ T1000] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.429654][ T1000] usb 2-1: Product: syz [ 667.429669][ T1000] usb 2-1: Manufacturer: syz [ 667.429682][ T1000] usb 2-1: SerialNumber: syz [ 667.468458][ T1000] usb 2-1: config 0 descriptor?? [ 667.639717][ T1000] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 668.455030][ T1000] gspca_zc3xx: reg_w_i err -110 [ 668.870397][T12653] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.870435][T12653] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 669.181910][ T1000] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 669.181982][ T1000] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 670.368816][ T1000] usb 2-1: USB disconnect, device number 82 [ 670.533353][T12653] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.533383][T12653] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 670.651828][ T5577] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 670.782190][ T5577] usb 5-1: device descriptor read/64, error -71 [ 671.131799][ T5577] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 671.524923][ T5577] usb 5-1: device descriptor read/64, error -71 [ 671.679001][ T5577] usb usb5-port1: attempt power cycle [ 671.941863][ T11] block nbd3: Possible stuck request ffff8880286ac080: control (read@0,4096B). Runtime 150 seconds [ 672.021852][ T5577] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 672.042683][ T5577] usb 5-1: device descriptor read/8, error -71 [ 672.502297][ T5577] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 672.560260][ T5577] usb 5-1: device descriptor read/8, error -71 [ 673.111073][ T5577] usb usb5-port1: unable to enumerate USB device [ 673.973230][ T5577] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 674.127924][ T5577] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 674.129049][ T5577] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 674.129069][ T5577] usb 5-1: config 1 has no interface number 0 [ 674.157405][ T5577] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.157425][ T5577] usb 5-1: Product: syz [ 674.157433][ T5577] usb 5-1: Manufacturer: syz [ 674.157442][ T5577] usb 5-1: SerialNumber: syz [ 674.217926][ T5577] usb 5-1: 3:0 : does not exist [ 674.217951][ T5577] usb 5-1: 3:0 : does not exist [ 676.049733][ T11] block nbd1: Possible stuck request ffff8880285e5080: control (read@0,4096B). Runtime 180 seconds [ 676.688732][ T5576] usb 5-1: USB disconnect, device number 69 [ 677.708605][T12890] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2393'. [ 677.909868][T12653] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 678.257438][T12653] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 678.310255][T12653] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 678.361817][ T1000] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 678.578470][T12653] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 678.592818][ T1000] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 678.619032][T12653] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 678.777789][ T1000] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 678.777820][ T1000] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 678.777858][ T1000] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.801239][ T1000] usb 1-1: config 0 descriptor?? [ 678.921599][T12653] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 678.997750][T12653] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 679.239826][T12653] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 680.855952][T12653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 681.136070][ T1000] usb 1-1: USB disconnect, device number 84 [ 681.291048][T12653] 8021q: adding VLAN 0 to HW filter on device team0 [ 682.816892][ T1942] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.817014][ T1942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 683.083132][ T1942] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.084005][ T1942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 684.107576][T12935] trusted_key: encrypted_key: insufficient parameters specified [ 684.348619][T12938] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2403'. [ 685.382858][ T11] block nbd0: Possible stuck request ffff888028572140: control (read@0,1024B). Runtime 150 seconds [ 685.550023][T12653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 685.974494][T12969] trusted_key: encrypted_key: insufficient parameters specified [ 685.985236][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.985307][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.206857][T12653] veth0_vlan: entered promiscuous mode [ 686.310669][T12653] veth1_vlan: entered promiscuous mode [ 686.382017][T12971] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2413'. [ 686.533246][T12945] syz.3.2405 (12945): drop_caches: 2 [ 686.593125][ T4954] udevd[4954]: worker [10333] /devices/virtual/block/nbd1 timeout; kill it [ 686.595224][ T4954] udevd[4954]: seq 13765 '/devices/virtual/block/nbd1' killed [ 686.740918][T12657] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 686.820673][T12657] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 686.828123][T12657] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 686.842230][T12657] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 686.848755][T12657] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 686.900479][T12653] veth0_macvtap: entered promiscuous mode [ 687.244036][T12653] veth1_macvtap: entered promiscuous mode [ 687.382813][ T1000] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 687.554102][ T1000] usb 1-1: Using ep0 maxpacket: 32 [ 687.556499][ T1000] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 687.557561][ T1000] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 687.557605][ T1000] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 687.557616][ T1000] usb 1-1: config 0 has no interface number 0 [ 687.557643][ T1000] usb 1-1: config 0 interface 184 altsetting 7 endpoint 0x6 has invalid wMaxPacketSize 0 [ 687.557656][ T1000] usb 1-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 687.557682][ T1000] usb 1-1: config 0 interface 184 has no altsetting 0 [ 687.573348][ T1000] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.573375][ T1000] usb 1-1: Product: syz [ 687.573411][ T1000] usb 1-1: Manufacturer: syz [ 687.573426][ T1000] usb 1-1: SerialNumber: syz [ 687.602945][ T1000] usb 1-1: config 0 descriptor?? [ 687.617639][ T1000] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 687.619098][ T1000] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 687.890362][T12653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 688.110509][T12653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 688.383204][ T3066] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.383722][ T3066] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.383762][ T3066] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.383805][ T3066] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.761903][ T5576] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 688.958635][T12657] Bluetooth: hci1: command tx timeout [ 689.044262][ T5576] usb 4-1: Using ep0 maxpacket: 32 [ 689.045271][ T5576] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 689.046952][ T5576] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 689.046980][ T5576] usb 4-1: config 0 has no interface number 0 [ 689.047027][ T5576] usb 4-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 689.047051][ T5576] usb 4-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 689.047077][ T5576] usb 4-1: config 0 interface 12 has no altsetting 0 [ 689.182230][ T5576] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.182263][ T5576] usb 4-1: Product: syz [ 689.182280][ T5576] usb 4-1: Manufacturer: syz [ 689.182295][ T5576] usb 4-1: SerialNumber: syz [ 689.857308][ T5576] usb 4-1: config 0 descriptor?? [ 689.940447][ T5576] f81534 4-1:0.12: unsupported endpoint max packet size [ 690.452613][T11855] usb 1-1: USB disconnect, device number 85 [ 690.610024][T12972] rxe_eth0 speed is unknown, defaulting to 1000 [ 690.958149][ T1941] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 690.958188][ T1941] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 691.041867][T12657] Bluetooth: hci1: command tx timeout [ 691.469679][ T5714] usb 4-1: USB disconnect, device number 67 [ 693.215108][T12657] Bluetooth: hci1: command tx timeout [ 693.225493][T13027] trusted_key: encrypted_key: insufficient parameters specified [ 693.501455][ T3066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.501478][ T3066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 695.264728][T12657] Bluetooth: hci1: command tx timeout [ 700.261823][ T5795] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 700.411902][ T5795] usb 4-1: Using ep0 maxpacket: 32 [ 700.412758][ T5795] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 700.442735][ T5795] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.442768][ T5795] usb 4-1: Product: syz [ 700.443222][ T5795] usb 4-1: Manufacturer: syz [ 700.443242][ T5795] usb 4-1: SerialNumber: syz [ 700.496725][ T5795] usb 4-1: config 0 descriptor?? [ 700.498607][T12972] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.498733][T12972] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.498936][T12972] bridge_slave_0: entered allmulticast mode [ 700.511532][T12972] bridge_slave_0: entered promiscuous mode [ 700.597075][ T5795] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 700.638049][T12972] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.639458][T12972] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.641274][T12972] bridge_slave_1: entered allmulticast mode [ 700.650734][T12972] bridge_slave_1: entered promiscuous mode [ 701.018264][T12972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 701.029260][T12972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 701.238241][T12972] team0: Port device team_slave_0 added [ 701.247599][T12972] team0: Port device team_slave_1 added [ 701.641158][T12972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 701.641178][T12972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 701.641207][T12972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 701.685905][T12972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 701.685937][T12972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 701.685966][T12972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 701.691898][ T1000] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 701.791855][ T5714] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 701.885406][ T1000] usb 1-1: Using ep0 maxpacket: 32 [ 701.887119][ T1000] usb 1-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=6c.d5 [ 701.888752][ T1000] usb 1-1: config 0 has an invalid interface number: 153 but max is 0 [ 701.888778][ T1000] usb 1-1: config 0 has no interface number 0 [ 701.901747][ T1000] usb 1-1: New USB device strings: Mfr=208, Product=45, SerialNumber=3 [ 701.901776][ T1000] usb 1-1: Product: syz [ 701.901791][ T1000] usb 1-1: Manufacturer: syz [ 701.901805][ T1000] usb 1-1: SerialNumber: syz [ 701.908998][ T1000] usb 1-1: config 0 descriptor?? [ 701.943432][ T5714] usb 3-1: Using ep0 maxpacket: 32 [ 701.944500][ T5714] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 701.946630][ T5714] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 701.946655][ T5714] usb 3-1: config 0 has no interface number 0 [ 701.946763][ T5714] usb 3-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 701.946788][ T5714] usb 3-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 701.946813][ T5714] usb 3-1: config 0 interface 12 has no altsetting 0 [ 701.951853][ T5714] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.951879][ T5714] usb 3-1: Product: syz [ 701.951898][ T5714] usb 3-1: Manufacturer: syz [ 701.951983][ T5714] usb 3-1: SerialNumber: syz [ 701.960849][ T5714] usb 3-1: config 0 descriptor?? [ 701.969384][ T5714] f81534 3-1:0.12: unsupported endpoint max packet size [ 702.102038][ T11] block nbd3: Possible stuck request ffff8880286ac080: control (read@0,4096B). Runtime 180 seconds [ 702.166192][ T1000] sierra 1-1:0.153: Sierra USB modem converter detected [ 702.180552][ T1000] usb 1-1: USB disconnect, device number 86 [ 702.186785][ T1000] sierra 1-1:0.153: device disconnected [ 702.435348][T12972] hsr_slave_0: entered promiscuous mode [ 702.436874][T12972] hsr_slave_1: entered promiscuous mode [ 702.438112][T12972] debugfs: 'hsr0' already exists in 'hsr' [ 702.438135][T12972] Cannot create hsr debugfs directory [ 703.247384][ T5795] gspca_ov534_9: reg_r err -71 [ 703.523108][ T5795] gspca_ov534_9: Unknown sensor 0000 [ 703.523213][ T5795] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 703.846599][ T5795] usb 4-1: USB disconnect, device number 68 [ 704.352749][ T5714] usb 3-1: USB disconnect, device number 7 [ 706.501817][ T11] block nbd1: Possible stuck request ffff8880285e5080: control (read@0,4096B). Runtime 210 seconds [ 706.521885][ T5714] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 706.681545][ T5714] usb 1-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 706.684324][ T5714] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 706.694932][ T5714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.694965][ T5714] usb 1-1: Product: syz [ 706.694980][ T5714] usb 1-1: Manufacturer: syz [ 706.694995][ T5714] usb 1-1: SerialNumber: syz [ 706.761331][ T5714] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 707.676370][T12972] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 707.829578][ T5714] gspca_mr97310a: reg write [21] error -71 [ 707.829672][ T5714] mr97310a 1-1:1.0: probe with driver mr97310a failed with error -71 [ 707.850267][T12972] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 707.879007][T12972] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 707.922760][ T5714] usb 1-1: USB disconnect, device number 87 [ 708.021493][T12972] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 708.049701][T12972] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 710.254559][T12972] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 710.269211][T12972] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 710.331448][T12972] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 710.471857][ T5714] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 710.652953][ T5714] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 710.659563][ T5714] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.688222][ T5714] usb 4-1: config 0 descriptor?? [ 710.799275][T12972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 710.944562][T12972] 8021q: adding VLAN 0 to HW filter on device team0 [ 710.970353][ T802] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.970600][ T802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 711.051957][ T5714] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 711.060843][ T802] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.060977][ T802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 712.003834][ T5714] [drm:udl_init] *ERROR* Selecting channel failed [ 712.069833][ T5714] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 712.069862][ T5714] [drm] Initialized udl on minor 1 [ 712.083722][ T5714] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 712.084226][ T5714] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 712.096407][ T5714] usb 4-1: USB disconnect, device number 69 [ 712.553068][T11855] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 713.677539][T11855] usb 1-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 714.164297][T11855] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 714.629075][T11855] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.629109][T11855] usb 1-1: Product: syz [ 714.629125][T11855] usb 1-1: Manufacturer: syz [ 714.629141][T11855] usb 1-1: SerialNumber: syz [ 715.108522][T11855] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 715.602923][ T11] block nbd0: Possible stuck request ffff888028572140: control (read@0,1024B). Runtime 180 seconds [ 715.611141][T11855] gspca_mr97310a: reg write [21] error -71 [ 715.612750][T11855] mr97310a 1-1:1.0: probe with driver mr97310a failed with error -71 [ 716.568732][T11855] usb 1-1: USB disconnect, device number 88 [ 718.520410][T12972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 718.520895][T13234] tipc: Enabled bearer , priority 0 [ 718.555197][T13234] syzkaller0: entered promiscuous mode [ 718.555227][T13234] syzkaller0: entered allmulticast mode [ 718.586710][T13234] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2473'. [ 718.590753][T13234] tipc: Resetting bearer [ 718.656669][T13233] tipc: Resetting bearer [ 718.803267][T13233] tipc: Disabling bearer [ 719.211810][ T36] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 719.376721][ T36] usb 1-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 719.378791][ T36] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 719.416614][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.416647][ T36] usb 1-1: Product: syz [ 719.416663][ T36] usb 1-1: Manufacturer: syz [ 719.416677][ T36] usb 1-1: SerialNumber: syz [ 719.476461][ T36] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 719.674883][T12972] veth0_vlan: entered promiscuous mode [ 719.731294][T12972] veth1_vlan: entered promiscuous mode [ 720.055907][T12972] veth0_macvtap: entered promiscuous mode [ 720.110288][T12972] veth1_macvtap: entered promiscuous mode [ 720.420578][ T36] gspca_mr97310a: reg read [21] error -110 [ 720.421277][ T36] mr97310a 1-1:1.0: probe with driver mr97310a failed with error -110 [ 721.276492][T12972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 721.303305][T12972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 721.561929][ T36] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 721.723967][ T36] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 721.725513][ T36] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.831910][ T802] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.831954][ T802] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.831984][ T802] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.842654][ T67] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.056904][T13278] netlink: 'syz.3.2485': attribute type 1 has an invalid length. [ 722.056944][T13278] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2485'. [ 722.319080][ T5798] usb 1-1: USB disconnect, device number 89 [ 722.457400][ T36] usb 3-1: Firmware version (0.0) predates our first public release. [ 722.457431][ T36] usb 3-1: Please update to version 0.2 or newer [ 722.944774][ T36] usb 3-1: USB disconnect, device number 8 [ 724.044247][ T1019] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 724.044270][ T1019] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 724.307450][T11332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 724.307474][T11332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 725.231761][ T5798] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 725.392987][ T5798] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 725.394613][ T5798] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 725.394669][ T5798] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 725.394715][ T5798] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.407747][ T5798] usb 3-1: config 0 descriptor?? [ 725.423423][ T5798] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 725.606899][ T5714] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 725.771752][ T5714] usb 4-1: Using ep0 maxpacket: 32 [ 725.887089][ T5714] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 725.891072][ T5714] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 725.891103][ T5714] usb 4-1: config 0 has no interface number 0 [ 725.891146][ T5714] usb 4-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 725.891169][ T5714] usb 4-1: config 0 interface 184 has no altsetting 0 [ 725.935032][ T5714] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.935061][ T5714] usb 4-1: Product: syz [ 725.935077][ T5714] usb 4-1: Manufacturer: syz [ 725.935091][ T5714] usb 4-1: SerialNumber: syz [ 725.971541][ T5714] usb 4-1: config 0 descriptor?? [ 725.980903][ T5714] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 725.981163][ T5714] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 726.141876][ T5576] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 726.291806][ T5576] usb 1-1: Using ep0 maxpacket: 32 [ 726.294610][ T5576] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 726.295796][ T5576] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 726.295823][ T5576] usb 1-1: config 0 has no interface number 0 [ 726.295880][ T5576] usb 1-1: config 0 interface 12 has no altsetting 0 [ 726.301331][ T5576] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.301360][ T5576] usb 1-1: Product: syz [ 726.301375][ T5576] usb 1-1: Manufacturer: syz [ 726.301392][ T5576] usb 1-1: SerialNumber: syz [ 726.340021][ T5576] usb 1-1: config 0 descriptor?? [ 727.001798][ T5798] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 727.174048][ T5798] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 727.175172][ T5798] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 727.175218][ T5798] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 727.175242][ T5798] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 727.175266][ T5798] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 727.175287][ T5798] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 727.178498][ T5798] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 727.178525][ T5798] usb 6-1: Product: syz [ 727.178541][ T5798] usb 6-1: Manufacturer: syz [ 727.178557][ T5798] usb 6-1: SerialNumber: syz [ 727.283571][ T5798] usb 6-1: config 0 descriptor?? [ 727.493677][ T5798] radio-si470x 6-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 727.493707][ T5798] radio-si470x 6-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 727.694808][ T5798] radio-si470x 6-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 727.694836][ T5798] radio-si470x 6-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 727.695109][ T5798] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -5 [ 727.698498][ C1] raw-gadget.3 gadget.5: ignoring, device is not running [ 727.740978][ T5798] usb 6-1: USB disconnect, device number 2 [ 727.986185][ T197] usb 3-1: USB disconnect, device number 9 [ 728.491379][ T1000] usb 4-1: USB disconnect, device number 70 [ 728.594558][ T5576] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 728.594615][ T5576] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 728.594633][ T5576] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 728.594722][ T5576] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 728.718492][ T5576] usb 1-1: USB disconnect, device number 90 [ 729.081840][ T5714] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 729.221819][ T5714] usb 3-1: device descriptor read/64, error -71 [ 729.461897][ T5714] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 729.601743][ T5714] usb 3-1: device descriptor read/64, error -71 [ 729.712330][ T5714] usb usb3-port1: attempt power cycle [ 729.752322][T13413] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2514'. [ 729.941854][ T197] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 730.068252][ T5714] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 730.075275][T13420] syz_tun: entered allmulticast mode [ 730.819122][T13424] rxe_eth0 speed is unknown, defaulting to 1000 [ 731.383641][ T197] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 731.400303][ T197] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 731.400361][ T197] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 731.400406][ T197] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.411004][ T197] usb 4-1: config 0 descriptor?? [ 731.596332][ T5714] usb 3-1: device descriptor read/8, error -71 [ 731.656979][ T197] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 731.854188][ T5714] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 731.884933][ T5714] usb 3-1: device descriptor read/8, error -71 [ 732.034928][ T5714] usb usb3-port1: unable to enumerate USB device [ 735.342083][ T1000] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 735.342944][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 735.501803][ T1000] usb 1-1: device descriptor read/64, error -32 [ 735.771886][ T1000] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 735.772229][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 735.777583][ T197] usb 4-1: USB disconnect, device number 71 [ 735.855672][ T11] block nbd3: Possible stuck request ffff8880286ac080: control (read@0,4096B). Runtime 210 seconds [ 736.171737][T13465] tipc: Enabling of bearer rejected, already enabled [ 736.267379][ T1000] usb 1-1: device descriptor read/64, error -32 [ 736.372226][ T1000] usb usb1-port1: attempt power cycle [ 736.581874][ T11] block nbd1: Possible stuck request ffff8880285e5080: control (read@0,4096B). Runtime 240 seconds [ 736.741779][ T1000] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 736.792477][ T1000] usb 1-1: Using ep0 maxpacket: 32 [ 736.793266][ T1000] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 736.794764][ T1000] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 736.794790][ T1000] usb 1-1: config 0 has no interface number 0 [ 736.794837][ T1000] usb 1-1: config 0 interface 184 has no altsetting 0 [ 736.798967][ T1000] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.798996][ T1000] usb 1-1: Product: syz [ 736.799012][ T1000] usb 1-1: Manufacturer: syz [ 736.799027][ T1000] usb 1-1: SerialNumber: syz [ 736.814657][ T1000] usb 1-1: config 0 descriptor?? [ 736.934956][ T197] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 737.237469][ T197] usb 5-1: Using ep0 maxpacket: 16 [ 737.589795][ T197] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 737.596922][ T197] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 737.596957][ T197] usb 5-1: config 0 has no interfaces? [ 737.632812][ T197] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.632842][ T197] usb 5-1: Product: syz [ 737.632859][ T197] usb 5-1: Manufacturer: syz [ 737.632875][ T197] usb 5-1: SerialNumber: syz [ 737.716736][ T197] usb 5-1: config 0 descriptor?? [ 737.852877][ T1000] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 737.853147][ T1000] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 737.883214][ T1000] usb 1-1: USB disconnect, device number 93 [ 739.518320][T13516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2535'. [ 739.518348][T13516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2535'. [ 739.737908][ T1000] usb 5-1: USB disconnect, device number 70 [ 741.443749][ T1000] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 741.623318][ T1000] usb 1-1: Using ep0 maxpacket: 32 [ 741.627533][ T1000] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 741.629652][ T1000] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 741.629684][ T1000] usb 1-1: config 0 has no interface number 0 [ 741.629744][ T1000] usb 1-1: config 0 interface 184 has no altsetting 0 [ 741.634253][ T1000] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.634282][ T1000] usb 1-1: Product: syz [ 741.634297][ T1000] usb 1-1: Manufacturer: syz [ 741.634321][ T1000] usb 1-1: SerialNumber: syz [ 741.656316][ T1000] usb 1-1: config 0 descriptor?? [ 742.115473][ T1000] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 742.115509][ T1000] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 742.115529][ T1000] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 742.115926][ T1000] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 742.311775][T11855] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 742.462041][T11855] usb 6-1: Using ep0 maxpacket: 16 [ 742.462988][T11855] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 742.467050][T11855] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.467076][T11855] usb 6-1: Product: syz [ 742.467091][T11855] usb 6-1: Manufacturer: syz [ 742.467106][T11855] usb 6-1: SerialNumber: syz [ 742.752629][T11855] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 742.773574][T11855] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 742.774058][T11855] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 742.774114][T11855] usb 6-1: media controller created [ 742.832942][T11855] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 742.958210][T11855] zl10353_read_register: readreg error (reg=127, ret==-71) [ 743.017832][T13588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2550'. [ 743.017862][T13588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2550'. [ 743.094713][T11855] dvb_usb_gl861 6-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 743.115516][T11855] usb 6-1: USB disconnect, device number 3 [ 743.190867][ T5577] usb 1-1: USB disconnect, device number 94 [ 743.759992][T13600] netlink: 'syz.4.2553': attribute type 2 has an invalid length. [ 743.760023][T13600] netlink: 'syz.4.2553': attribute type 2 has an invalid length. [ 745.311719][ T1000] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 745.464202][ T1000] usb 5-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 745.466559][ T1000] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 745.478287][ T1000] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.478319][ T1000] usb 5-1: Product: syz [ 745.478334][ T1000] usb 5-1: Manufacturer: syz [ 745.478349][ T1000] usb 5-1: SerialNumber: syz [ 745.552927][ T1000] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 745.751950][T13646] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2563'. [ 745.751978][T13646] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2563'. [ 745.861814][T11855] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 746.011896][T11855] usb 1-1: Using ep0 maxpacket: 32 [ 746.012914][T11855] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 746.014718][T11855] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 746.014744][T11855] usb 1-1: config 0 has no interface number 0 [ 746.014792][T11855] usb 1-1: config 0 interface 184 has no altsetting 0 [ 746.020897][T11855] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.020927][T11855] usb 1-1: Product: syz [ 746.020943][T11855] usb 1-1: Manufacturer: syz [ 746.020959][T11855] usb 1-1: SerialNumber: syz [ 746.100053][T11855] usb 1-1: config 0 descriptor?? [ 746.187819][ T11] block nbd0: Possible stuck request ffff888028572140: control (read@0,1024B). Runtime 210 seconds [ 746.411784][ T5576] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 746.521851][ T5798] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 746.523205][T11855] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 746.523258][T11855] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 746.523280][T11855] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 746.523808][T11855] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 746.585658][ T1000] gspca_mr97310a: reg write [21] error -71 [ 746.585752][ T1000] mr97310a 5-1:1.0: probe with driver mr97310a failed with error -71 [ 746.586843][ T5576] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 746.590244][ T5576] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 746.590299][ T5576] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.663920][ T1000] usb 5-1: USB disconnect, device number 71 [ 746.675113][ T5798] usb 3-1: New USB device found, idVendor=056a, idProduct=010e, bcdDevice= 0.00 [ 746.680814][ T5798] usb 3-1: config 0 interface 0 altsetting 249 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 746.681006][ T5798] usb 3-1: config 0 interface 0 altsetting 249 endpoint 0x81 has invalid maxpacket 1015, setting to 64 [ 746.681035][ T5798] usb 3-1: config 0 interface 0 altsetting 249 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 746.681062][ T5798] usb 3-1: config 0 interface 0 has no altsetting 0 [ 746.681100][ T5798] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.742316][ T5798] usb 3-1: config 0 descriptor?? [ 746.745059][T13656] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 746.765807][ T5576] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 747.192510][ T5798] hid_parser_main: 4 callbacks suppressed [ 747.192601][ T5798] wacom 0003:056A:010E.0008: unknown main item tag 0x0 [ 747.192632][ T5798] wacom 0003:056A:010E.0008: unknown main item tag 0x0 [ 747.192658][ T5798] wacom 0003:056A:010E.0008: unknown main item tag 0x0 [ 747.192683][ T5798] wacom 0003:056A:010E.0008: unknown main item tag 0x0 [ 747.192709][ T5798] wacom 0003:056A:010E.0008: unknown main item tag 0x0 [ 747.192735][ T5798] wacom 0003:056A:010E.0008: unknown main item tag 0x0 [ 747.192770][ T5798] wacom 0003:056A:010E.0008: unbalanced collection at end of report description [ 747.196000][ T5798] wacom 0003:056A:010E.0008: parse failed [ 747.196121][ T5798] wacom 0003:056A:010E.0008: probe with driver wacom failed with error -22 [ 747.364948][ T197] usb 3-1: USB disconnect, device number 14 [ 747.426561][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.426621][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.793103][ T5798] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 747.825046][ T5576] gspca_stv0680: usb_control_msg error 2, request = 0x6, error = -32 [ 747.825064][ T5576] stv0680 6-1:4.0: Could not get descriptor 0200 [ 747.942845][ T5798] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 747.944935][ T5798] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 747.944981][ T5798] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.983775][ T5798] usb 5-1: config 0 descriptor?? [ 748.007434][ T5798] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 748.027637][ T5576] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 748.027662][ T5576] stv0680 6-1:4.0: last error: 9, command = 0xf [ 748.038269][ T5576] usb 6-1: USB disconnect, device number 4 [ 748.323358][T13681] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2574'. [ 748.366168][T13683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2575'. [ 748.366186][T13683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2575'. [ 748.640111][ T5798] usb 1-1: USB disconnect, device number 95 [ 748.851843][ T5576] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 749.021894][ T5576] usb 3-1: Using ep0 maxpacket: 16 [ 749.022835][ T5576] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 749.024351][ T5576] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 749.024385][ T5576] usb 3-1: config 0 interface 0 has no altsetting 0 [ 749.027676][ T5576] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.027702][ T5576] usb 3-1: Product: syz [ 749.027716][ T5576] usb 3-1: Manufacturer: syz [ 749.027730][ T5576] usb 3-1: SerialNumber: syz [ 749.090894][ T197] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 749.110836][ T5576] usb 3-1: config 0 descriptor?? [ 749.254776][ T197] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 749.256966][ T197] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.475050][ T5576] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input30 [ 750.943734][ T197] usb 4-1: Firmware version (0.0) predates our first public release. [ 750.943766][ T197] usb 4-1: Please update to version 0.2 or newer [ 751.879006][ T5576] rc_core: IR keymap rc-imon-pad not found [ 751.879024][ T5576] Registered IR keymap rc-empty [ 751.879091][ T5576] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 751.879146][ T5576] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 752.135204][T13693] syz.5.2578 (13693) used greatest stack depth: 19240 bytes left [ 752.157676][ T5798] usb 5-1: USB disconnect, device number 72 [ 752.467554][ T5576] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 752.599366][T13721] FAULT_INJECTION: forcing a failure. [ 752.599366][T13721] name failslab, interval 1, probability 0, space 0, times 0 [ 752.599407][T13721] CPU: 1 UID: 0 PID: 13721 Comm: syz.4.2584 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 752.599440][T13721] Tainted: [L]=SOFTLOCKUP [ 752.599449][T13721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 752.599463][T13721] Call Trace: [ 752.599471][T13721] [ 752.599482][T13721] dump_stack_lvl+0xe8/0x150 [ 752.599518][T13721] should_fail_ex+0x46b/0x600 [ 752.599554][T13721] should_failslab+0xa8/0x100 [ 752.599580][T13721] __kmalloc_cache_noprof+0xa1/0x680 [ 752.599614][T13721] ? do_epoll_create+0x75/0x440 [ 752.599645][T13721] ? do_epoll_create+0x75/0x440 [ 752.599672][T13721] do_epoll_create+0x75/0x440 [ 752.599695][T13721] __x64_sys_epoll_create1+0x37/0x40 [ 752.599726][T13721] do_syscall_64+0x166/0x520 [ 752.599757][T13721] ? trace_irq_disable+0x3b/0x140 [ 752.599795][T13721] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.599821][T13721] ? clear_bhb_loop+0x70/0xc0 [ 752.599849][T13721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.599876][T13721] RIP: 0033:0x7ff30696e559 [ 752.599899][T13721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 752.599917][T13721] RSP: 002b:00007ff304bc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000123 [ 752.599939][T13721] RAX: ffffffffffffffda RBX: 00007ff306bf5fa0 RCX: 00007ff30696e559 [ 752.599954][T13721] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080000 [ 752.599967][T13721] RBP: 00007ff306a058b0 R08: 0000000000000000 R09: 0000000000000000 [ 752.599982][T13721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 752.599995][T13721] R13: 00007ff306bf6038 R14: 00007ff306bf5fa0 R15: 00007ffd4718fc78 [ 752.600029][T13721] [ 752.702860][T13729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2586'. [ 752.702889][T13729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2586'. [ 752.886455][ T5576] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input31 [ 752.903108][ T5576] imon 3-1:0.0: iMON device (15c2:0041, intf0) on usb<3:15> initialized [ 753.231751][ T5739] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 753.408353][ T197] usb 4-1: USB disconnect, device number 72 [ 753.432877][ T5739] usb 6-1: Using ep0 maxpacket: 8 [ 753.434500][ T5739] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 753.436175][ T5739] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 753.438653][ T5739] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.438679][ T5739] usb 6-1: Product: syz [ 753.438693][ T5739] usb 6-1: Manufacturer: syz [ 753.438708][ T5739] usb 6-1: SerialNumber: syz [ 753.459290][ T5739] usb 6-1: config 0 descriptor?? [ 753.483963][ T5739] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 753.492662][ C0] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 753.493778][ T5798] usb 3-1: USB disconnect, device number 15 [ 753.713120][T13732] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2587'. [ 754.389102][T13745] netlink: 'syz.4.2592': attribute type 2 has an invalid length. [ 754.389122][T13745] netlink: 'syz.4.2592': attribute type 2 has an invalid length. [ 754.475249][ T5798] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 754.611777][ T5714] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 754.661789][ T5798] usb 3-1: Using ep0 maxpacket: 32 [ 754.663346][ T5798] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 754.666176][ T5798] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 754.666264][ T5798] usb 3-1: config 0 has no interface number 0 [ 754.666298][ T5798] usb 3-1: config 0 interface 184 has no altsetting 0 [ 754.669181][ T5798] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.669207][ T5798] usb 3-1: Product: syz [ 754.669216][ T5798] usb 3-1: Manufacturer: syz [ 754.669224][ T5798] usb 3-1: SerialNumber: syz [ 754.680436][ T5798] usb 3-1: config 0 descriptor?? [ 754.691737][ T1000] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 754.771846][ T5714] usb 1-1: Using ep0 maxpacket: 16 [ 754.772780][ T5714] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 754.774014][ T5714] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 754.774054][ T5714] usb 1-1: config 0 interface 0 has no altsetting 0 [ 754.776596][ T5714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.776620][ T5714] usb 1-1: Product: syz [ 754.776629][ T5714] usb 1-1: Manufacturer: syz [ 754.776679][ T5714] usb 1-1: SerialNumber: syz [ 754.787986][ T5714] usb 1-1: config 0 descriptor?? [ 754.863487][ T1000] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 754.868554][ T1000] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 754.868606][ T1000] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.884856][ T1000] usb 5-1: config 0 descriptor?? [ 754.922350][ T1000] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 755.022844][ T5714] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 755.022909][ T5714] imon 1-1:0.0: unable to initialize intf0, err -19 [ 755.022956][ T5714] imon:imon_probe: failed to initialize context! [ 755.022964][ T5714] imon 1-1:0.0: unable to register, err -19 [ 755.123499][ T5798] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 755.123520][ T5798] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 755.123530][ T5798] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 755.123969][ T5798] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -32 [ 755.530236][ T5739] gspca_zc3xx: reg_r err -32 [ 756.121702][ T5739] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 756.121810][ T5739] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 756.573098][ T10] usb 6-1: USB disconnect, device number 5 [ 757.557067][ T5739] usb 1-1: USB disconnect, device number 96 [ 757.828199][ T5576] usb 3-1: USB disconnect, device number 16 [ 757.971909][ T197] usb 5-1: USB disconnect, device number 73 [ 758.131978][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 758.132263][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 758.291858][ T10] usb 6-1: device descriptor read/64, error -32 [ 758.551773][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 758.552063][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 758.691785][ T10] usb 6-1: device descriptor read/64, error -32 [ 758.773362][T13778] FAULT_INJECTION: forcing a failure. [ 758.773362][T13778] name fail_futex, interval 1, probability 0, space 0, times 0 [ 758.773403][T13778] CPU: 0 UID: 0 PID: 13778 Comm: syz.4.2600 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 758.773434][T13778] Tainted: [L]=SOFTLOCKUP [ 758.773442][T13778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 758.773456][T13778] Call Trace: [ 758.773466][T13778] [ 758.773476][T13778] dump_stack_lvl+0xe8/0x150 [ 758.773515][T13778] should_fail_ex+0x46b/0x600 [ 758.773557][T13778] get_futex_key+0x1b4/0x1580 [ 758.773590][T13778] ? __lock_acquire+0x747/0x2de0 [ 758.773743][T13778] ? kasan_save_track+0x3e/0x80 [ 758.773777][T13778] ? __kasan_slab_free+0x5c/0x80 [ 758.773797][T13778] ? kmem_cache_free+0x187/0x6d0 [ 758.773820][T13778] ? __pfx_get_futex_key+0x10/0x10 [ 758.773866][T13778] futex_wake+0x119/0x600 [ 758.773904][T13778] ? __pfx_futex_wake+0x10/0x10 [ 758.773948][T13778] do_futex+0x458/0x4e0 [ 758.773977][T13778] ? __pfx_do_futex+0x10/0x10 [ 758.773998][T13778] ? kmem_cache_free+0x187/0x6d0 [ 758.774019][T13778] ? do_sys_openat2+0x14e/0x200 [ 758.774050][T13778] __se_sys_futex+0x3a8/0x450 [ 758.774081][T13778] ? __pfx___se_sys_futex+0x10/0x10 [ 758.774104][T13778] ? rcu_is_watching+0x16/0xb0 [ 758.774138][T13778] ? __x64_sys_futex+0x21/0xf0 [ 758.774165][T13778] do_syscall_64+0x166/0x520 [ 758.774195][T13778] ? trace_irq_disable+0x3b/0x140 [ 758.774225][T13778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.774247][T13778] ? clear_bhb_loop+0x70/0xc0 [ 758.774279][T13778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.774301][T13778] RIP: 0033:0x7ff30696e559 [ 758.774323][T13778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 758.774342][T13778] RSP: 002b:00007ff304bc60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 758.774370][T13778] RAX: ffffffffffffffda RBX: 00007ff306bf5fa8 RCX: 00007ff30696e559 [ 758.774387][T13778] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff306bf5fac [ 758.774402][T13778] RBP: 00007ff306bf5fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 758.774418][T13778] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 758.774433][T13778] R13: 00007ff306bf6038 R14: 00007ffd4718fb90 R15: 00007ffd4718fc78 [ 758.774469][T13778] [ 758.812024][ T10] usb usb6-port1: attempt power cycle [ 760.433281][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 760.452869][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 760.454058][ T10] usb 6-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 760.456023][ T10] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 760.456059][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 760.460180][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.460209][ T10] usb 6-1: Product: syz [ 760.460225][ T10] usb 6-1: Manufacturer: syz [ 760.460241][ T10] usb 6-1: SerialNumber: syz [ 760.533655][ T10] usb 6-1: config 0 descriptor?? [ 760.819581][ T10] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input32 [ 761.081774][ T10] rc_core: IR keymap rc-imon-pad not found [ 761.081800][ T10] Registered IR keymap rc-empty [ 761.082059][ T10] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 761.082080][ T10] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 761.196363][ T10] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 761.266919][ T10] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input33 [ 761.351772][ T10] imon 6-1:0.0: iMON device (15c2:0041, intf0) on usb<6:8> initialized [ 762.109913][ T1000] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 762.293229][ T1000] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 762.294907][ T1000] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 762.294933][ T1000] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 762.294982][ T1000] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 762.295026][ T1000] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.496820][T13781] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 762.499799][ T1000] hub 4-1:1.0: bad descriptor, ignoring hub [ 762.499835][ T1000] hub 4-1:1.0: probe with driver hub failed with error -5 [ 762.522589][ T1000] cdc_wdm 4-1:1.0: skipping garbage [ 762.522611][ T1000] cdc_wdm 4-1:1.0: skipping garbage [ 762.530158][ T1000] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 762.530184][ T1000] cdc_wdm 4-1:1.0: Unknown control protocol [ 762.565021][ C0] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 762.566270][ T5714] usb 6-1: USB disconnect, device number 8 [ 762.586405][T13795] FAULT_INJECTION: forcing a failure. [ 762.586405][T13795] name failslab, interval 1, probability 0, space 0, times 0 [ 762.586448][T13795] CPU: 1 UID: 0 PID: 13795 Comm: syz.4.2602 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 762.586478][T13795] Tainted: [L]=SOFTLOCKUP [ 762.586487][T13795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 762.586501][T13795] Call Trace: [ 762.586511][T13795] [ 762.586520][T13795] dump_stack_lvl+0xe8/0x150 [ 762.586560][T13795] should_fail_ex+0x46b/0x600 [ 762.586599][T13795] should_failslab+0xa8/0x100 [ 762.586623][T13795] __kmalloc_cache_noprof+0xa1/0x680 [ 762.586655][T13795] ? do_epoll_create+0x75/0x440 [ 762.586676][T13795] ? do_epoll_create+0x75/0x440 [ 762.586704][T13795] do_epoll_create+0x75/0x440 [ 762.586728][T13795] __x64_sys_epoll_create1+0x37/0x40 [ 762.586771][T13795] do_syscall_64+0x166/0x520 [ 762.586800][T13795] ? trace_irq_disable+0x3b/0x140 [ 762.586829][T13795] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.586852][T13795] ? clear_bhb_loop+0x70/0xc0 [ 762.586880][T13795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.586901][T13795] RIP: 0033:0x7ff30696e559 [ 762.586922][T13795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 762.586942][T13795] RSP: 002b:00007ff304bc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000123 [ 762.586965][T13795] RAX: ffffffffffffffda RBX: 00007ff306bf5fa0 RCX: 00007ff30696e559 [ 762.586982][T13795] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080000 [ 762.586996][T13795] RBP: 00007ff306a058b0 R08: 0000000000000000 R09: 0000000000000000 [ 762.587010][T13795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 762.587023][T13795] R13: 00007ff306bf6038 R14: 00007ff306bf5fa0 R15: 00007ffd4718fc78 [ 762.587058][T13795] [ 762.634561][T13796] netlink: 'syz.2.2604': attribute type 2 has an invalid length. [ 762.634758][T13796] netlink: 'syz.2.2604': attribute type 2 has an invalid length. [ 762.958959][ T1000] usb 4-1: USB disconnect, device number 73 [ 763.642051][ T5714] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 763.809967][ T5714] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 763.814689][ T5714] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.814719][ T5714] usb 6-1: Product: syz [ 763.814734][ T5714] usb 6-1: Manufacturer: syz [ 763.814749][ T5714] usb 6-1: SerialNumber: syz [ 763.838953][ T5714] usb 6-1: config 0 descriptor?? [ 763.962238][ T1000] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 764.056479][ T5714] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 764.111745][ T1000] usb 4-1: Using ep0 maxpacket: 16 [ 764.115796][ T1000] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 764.118261][ T1000] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 764.118304][ T1000] usb 4-1: config 0 interface 0 has no altsetting 0 [ 764.147701][ T1000] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.147731][ T1000] usb 4-1: Product: syz [ 764.147805][ T1000] usb 4-1: Manufacturer: syz [ 764.147823][ T1000] usb 4-1: SerialNumber: syz [ 764.192067][ T1000] usb 4-1: config 0 descriptor?? [ 764.439428][ T1000] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 764.439593][ T1000] imon 4-1:0.0: unable to initialize intf0, err -19 [ 764.439611][ T1000] imon:imon_probe: failed to initialize context! [ 764.439624][ T1000] imon 4-1:0.0: unable to register, err -19 [ 766.028136][ T11] block nbd3: Possible stuck request ffff8880286ac080: control (read@0,4096B). Runtime 240 seconds [ 766.661955][ T11] block nbd1: Possible stuck request ffff8880285e5080: control (read@0,4096B). Runtime 270 seconds [ 767.589586][ T5714] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 767.636167][ T10] usb 4-1: USB disconnect, device number 74 [ 767.830519][ T5714] usb 6-1: USB disconnect, device number 9 [ 768.172924][T13874] netlink: 'syz.0.2617': attribute type 2 has an invalid length. [ 768.172951][T13874] netlink: 'syz.0.2617': attribute type 2 has an invalid length. [ 769.495818][ T10] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 769.641740][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 769.643093][ T10] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 769.644389][ T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 769.644423][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 769.648244][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.648272][ T10] usb 4-1: Product: syz [ 769.648288][ T10] usb 4-1: Manufacturer: syz [ 769.648305][ T10] usb 4-1: SerialNumber: syz [ 769.720756][ T10] usb 4-1: config 0 descriptor?? [ 769.778252][T13891] netlink: 'syz.0.2622': attribute type 10 has an invalid length. [ 769.852661][T13891] veth0_to_bond: entered promiscuous mode [ 769.911221][T13891] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 769.957286][ T10] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input34 [ 770.331954][ T10] rc_core: IR keymap rc-imon-pad not found [ 770.331975][ T10] Registered IR keymap rc-empty [ 770.332116][ T10] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 770.332136][ T10] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 770.398341][ T10] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 770.426886][ T10] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input35 [ 770.495006][ T10] imon 4-1:0.0: iMON device (15c2:0041, intf0) on usb<4:75> initialized [ 771.557803][ T10] usb 1-1: new full-speed USB device number 97 using dummy_hcd [ 771.714091][ T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 771.732598][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.732629][ T10] usb 1-1: Product: syz [ 771.732701][ T10] usb 1-1: Manufacturer: syz [ 771.732718][ T10] usb 1-1: SerialNumber: syz [ 771.806727][ T10] usb 1-1: config 0 descriptor?? [ 772.121871][ T10] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 772.142686][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 772.143946][ T197] usb 4-1: USB disconnect, device number 75 [ 773.967144][ T10] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 774.056726][ T10] usb 1-1: USB disconnect, device number 97 [ 774.128102][T13932] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input37 [ 774.133049][T13932] psmouse serio1: probe with driver psmouse failed with error -4 [ 775.831691][ T5595] Bluetooth: hci5: command 0x0406 tx timeout [ 776.281811][ T11] block nbd0: Possible stuck request ffff888028572140: control (read@0,1024B). Runtime 240 seconds [ 777.711767][ T10] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 777.941775][ T5714] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 778.061232][T11855] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 778.082646][ T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 778.091043][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.091086][ T10] usb 4-1: Product: syz [ 778.091102][ T10] usb 4-1: Manufacturer: syz [ 778.091117][ T10] usb 4-1: SerialNumber: syz [ 778.100646][ T10] usb 4-1: config 0 descriptor?? [ 778.103866][ T5714] usb 1-1: Using ep0 maxpacket: 16 [ 778.530857][ T5714] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 778.708204][ T5714] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 778.708244][ T5714] usb 1-1: config 0 interface 0 has no altsetting 0 [ 778.721806][ T5714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.721838][ T5714] usb 1-1: Product: syz [ 778.721854][ T5714] usb 1-1: Manufacturer: syz [ 778.721869][ T5714] usb 1-1: SerialNumber: syz [ 778.789424][ T5714] usb 1-1: config 0 descriptor?? [ 778.961740][T11855] usb 5-1: Using ep0 maxpacket: 32 [ 778.962788][T11855] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 778.964888][T11855] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 778.964917][T11855] usb 5-1: config 0 has no interface number 0 [ 778.965030][T11855] usb 5-1: config 0 interface 12 has no altsetting 0 [ 778.970873][ T10] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 778.977024][T11855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.977105][T11855] usb 5-1: Product: syz [ 778.977123][T11855] usb 5-1: Manufacturer: syz [ 778.977139][T11855] usb 5-1: SerialNumber: syz [ 779.010400][T11855] usb 5-1: config 0 descriptor?? [ 779.163854][ T5714] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input38 [ 779.222000][ T5576] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 779.702736][ T5576] usb 3-1: Using ep0 maxpacket: 8 [ 779.725153][ T5576] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 779.735565][ T5576] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 779.735674][ T5576] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 779.735726][ T5576] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.755799][T14014] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input41 [ 779.951725][ T5714] rc_core: IR keymap rc-imon-pad not found [ 779.951748][ T5714] Registered IR keymap rc-empty [ 779.951897][ T5714] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 779.951918][ T5714] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 780.019722][ T5714] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 780.098094][ T5714] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input39 [ 780.257374][ T5714] imon 1-1:0.0: iMON device (15c2:0041, intf0) on usb<1:98> initialized [ 781.056937][T11855] f81534 5-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 781.057054][T11855] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 781.057074][T11855] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 781.057227][T11855] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 781.276897][T11855] usb 5-1: USB disconnect, device number 74 [ 782.411538][ T10] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 782.450378][ C1] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 782.451150][ T5798] usb 1-1: USB disconnect, device number 98 [ 782.452126][ T10] usb 4-1: USB disconnect, device number 76 [ 782.770408][ T5714] usb 3-1: USB disconnect, device number 17 [ 786.111855][T14085] null_blk: nullb1: using native zone append [ 788.327659][T14085] null_blk: disk nullb1 created [ 789.161760][ T5798] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 789.181104][T14009] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 789.311837][ T5798] usb 5-1: Using ep0 maxpacket: 8 [ 789.312840][ T5798] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 789.314182][ T5798] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 789.314199][ T5798] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 789.314227][ T5798] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.368630][T14009] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 789.385702][T14009] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.385732][T14009] usb 3-1: Product: syz [ 789.385872][T14009] usb 3-1: Manufacturer: syz [ 789.385889][T14009] usb 3-1: SerialNumber: syz [ 789.419935][T14009] usb 3-1: config 0 descriptor?? [ 789.734533][T14009] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 792.188357][T11855] usb 5-1: USB disconnect, device number 75 [ 792.438374][ T5798] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 792.534610][ T7504] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 792.592127][ T5714] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 792.702582][ T7504] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 792.706719][ T7504] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.706738][ T7504] usb 4-1: Product: syz [ 792.706746][ T7504] usb 4-1: Manufacturer: syz [ 792.706754][ T7504] usb 4-1: SerialNumber: syz [ 792.745912][ T5714] usb 6-1: device descriptor read/64, error -71 [ 792.745978][ T5798] usb 1-1: Using ep0 maxpacket: 32 [ 792.746863][ T5798] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 792.749208][ T5798] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 792.749241][ T5798] usb 1-1: config 0 has no interface number 0 [ 792.749310][ T5798] usb 1-1: config 0 interface 12 has no altsetting 0 [ 792.754235][ T5798] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.754261][ T5798] usb 1-1: Product: syz [ 792.754277][ T5798] usb 1-1: Manufacturer: syz [ 792.754291][ T5798] usb 1-1: SerialNumber: syz [ 792.824265][ T5798] usb 1-1: config 0 descriptor?? [ 792.854673][T14132] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input43 [ 793.032727][ T5714] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 793.161731][ T5714] usb 6-1: device descriptor read/64, error -71 [ 793.189399][T14009] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 793.230570][ T7504] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 793.230610][ T7504] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 793.231007][T14009] usb 3-1: USB disconnect, device number 18 [ 793.291093][ T5714] usb usb6-port1: attempt power cycle [ 793.641390][ T7504] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 793.641443][ T7504] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 793.643155][ T5714] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 793.643405][ T7504] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 793.662600][ T5714] usb 6-1: device descriptor read/8, error -71 [ 793.696329][ T7504] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 793.911751][ T5714] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 793.932858][ T5714] usb 6-1: device descriptor read/8, error -71 [ 794.042419][ T5714] usb usb6-port1: unable to enumerate USB device [ 794.342017][ T5798] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 794.342066][ T5798] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 794.342081][ T5798] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 794.342151][ T5798] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 794.406363][ T5798] usb 1-1: USB disconnect, device number 99 [ 794.532072][T14162] FAULT_INJECTION: forcing a failure. [ 794.532072][T14162] name failslab, interval 1, probability 0, space 0, times 0 [ 794.532113][T14162] CPU: 0 UID: 0 PID: 14162 Comm: syz.2.2677 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 794.532144][T14162] Tainted: [L]=SOFTLOCKUP [ 794.532152][T14162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 794.532166][T14162] Call Trace: [ 794.532176][T14162] [ 794.532187][T14162] dump_stack_lvl+0xe8/0x150 [ 794.532227][T14162] should_fail_ex+0x46b/0x600 [ 794.532270][T14162] should_failslab+0xa8/0x100 [ 794.532299][T14162] __kmalloc_cache_noprof+0xa1/0x680 [ 794.532333][T14162] ? do_epoll_create+0x75/0x440 [ 794.532356][T14162] ? do_epoll_create+0x75/0x440 [ 794.532381][T14162] do_epoll_create+0x75/0x440 [ 794.532408][T14162] __x64_sys_epoll_create1+0x37/0x40 [ 794.532440][T14162] do_syscall_64+0x166/0x520 [ 794.532473][T14162] ? trace_irq_disable+0x3b/0x140 [ 794.532502][T14162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.532526][T14162] ? clear_bhb_loop+0x70/0xc0 [ 794.532553][T14162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.532574][T14162] RIP: 0033:0x7f8af9bce559 [ 794.532605][T14162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 794.532624][T14162] RSP: 002b:00007f8af7e26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000123 [ 794.532649][T14162] RAX: ffffffffffffffda RBX: 00007f8af9e55fa0 RCX: 00007f8af9bce559 [ 794.532667][T14162] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080000 [ 794.532681][T14162] RBP: 00007f8af9c658b0 R08: 0000000000000000 R09: 0000000000000000 [ 794.532696][T14162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 794.532711][T14162] R13: 00007f8af9e56038 R14: 00007f8af9e55fa0 R15: 00007ffeded2b038 [ 794.532746][T14162] [ 796.098212][ T7504] usb 4-1: USB disconnect, device number 77 [ 796.106014][ T11] block nbd3: Possible stuck request ffff8880286ac080: control (read@0,4096B). Runtime 270 seconds [ 796.515237][T14209] FAULT_INJECTION: forcing a failure. [ 796.515237][T14209] name failslab, interval 1, probability 0, space 0, times 0 [ 796.515271][T14209] CPU: 0 UID: 0 PID: 14209 Comm: syz.3.2689 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 796.515288][T14209] Tainted: [L]=SOFTLOCKUP [ 796.515292][T14209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 796.515299][T14209] Call Trace: [ 796.515305][T14209] [ 796.515311][T14209] dump_stack_lvl+0xe8/0x150 [ 796.515335][T14209] should_fail_ex+0x46b/0x600 [ 796.515356][T14209] should_failslab+0xa8/0x100 [ 796.515370][T14209] ? security_inode_alloc+0x39/0x310 [ 796.515395][T14209] kmem_cache_alloc_noprof+0x9e/0x690 [ 796.515413][T14209] ? security_inode_alloc+0x39/0x310 [ 796.515431][T14209] security_inode_alloc+0x39/0x310 [ 796.515447][T14209] inode_init_always_gfp+0x983/0xd40 [ 796.515463][T14209] ? __pfx_sock_alloc_inode+0x10/0x10 [ 796.515490][T14209] alloc_inode+0x82/0x1b0 [ 796.515504][T14209] __sock_create+0x12d/0x9d0 [ 796.515522][T14209] __sys_socket+0xd6/0x1b0 [ 796.515536][T14209] __x64_sys_socket+0x7a/0x90 [ 796.515549][T14209] do_syscall_64+0x166/0x520 [ 796.515567][T14209] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.515580][T14209] ? clear_bhb_loop+0x70/0xc0 [ 796.515594][T14209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.515607][T14209] RIP: 0033:0x7f414600e559 [ 796.515622][T14209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 796.515632][T14209] RSP: 002b:00007f4144266028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 796.515646][T14209] RAX: ffffffffffffffda RBX: 00007f4146295fa0 RCX: 00007f414600e559 [ 796.515655][T14209] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 796.515662][T14209] RBP: 00007f41460a58b0 R08: 0000000000000000 R09: 0000000000000000 [ 796.515669][T14209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 796.515676][T14209] R13: 00007f4146296038 R14: 00007f4146295fa0 R15: 00007ffff987ff38 [ 796.515694][T14209] [ 796.515717][T14209] socket: no more sockets [ 796.751776][ T11] block nbd1: Possible stuck request ffff8880285e5080: control (read@0,4096B). Runtime 300 seconds [ 797.101087][ T5798] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 798.290113][ T7504] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 798.458673][ T5798] usb 5-1: Using ep0 maxpacket: 32 [ 798.459869][ T5798] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 798.469421][ T5798] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 798.469451][ T5798] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 798.469471][ T5798] usb 5-1: config 0 has no interface number 0 [ 798.469545][ T5798] usb 5-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 798.469573][ T5798] usb 5-1: config 0 interface 184 has no altsetting 0 [ 798.489542][ T5798] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.491382][ T5798] usb 5-1: Product: syz [ 798.491404][ T5798] usb 5-1: Manufacturer: syz [ 798.491420][ T5798] usb 5-1: SerialNumber: syz [ 798.515666][ T5798] usb 5-1: config 0 descriptor?? [ 798.528033][ T5798] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 798.532709][ T7504] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 798.533836][ T5798] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 798.539795][ T7504] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.539824][ T7504] usb 4-1: Product: syz [ 798.539840][ T7504] usb 4-1: Manufacturer: syz [ 798.539856][ T7504] usb 4-1: SerialNumber: syz [ 799.774721][ T7504] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 799.774784][ T7504] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 800.068284][ T36] usb 5-1: USB disconnect, device number 76 [ 800.384150][ T7504] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 800.384186][ T7504] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 800.385212][ T7504] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 800.448695][ T7504] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 800.641976][ T36] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 801.033388][ T36] usb 5-1: device descriptor read/64, error -71 [ 801.271829][ T36] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 801.511714][ T36] usb 5-1: device descriptor read/64, error -71 [ 801.708205][ T36] usb usb5-port1: attempt power cycle [ 802.044821][ T5714] usb 4-1: USB disconnect, device number 78 [ 802.141814][ T36] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 802.162505][ T36] usb 5-1: device descriptor read/8, error -71 [ 802.409244][ T36] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 802.432496][ T36] usb 5-1: device descriptor read/8, error -71 [ 802.474545][ T1000] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 802.542686][ T36] usb usb5-port1: unable to enumerate USB device [ 802.632067][ T1000] usb 6-1: Using ep0 maxpacket: 32 [ 802.632911][ T1000] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 802.634374][ T1000] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 802.634400][ T1000] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 802.634420][ T1000] usb 6-1: config 0 has no interface number 0 [ 802.634466][ T1000] usb 6-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 802.634494][ T1000] usb 6-1: config 0 interface 184 has no altsetting 0 [ 802.638044][ T1000] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.638071][ T1000] usb 6-1: Product: syz [ 802.638087][ T1000] usb 6-1: Manufacturer: syz [ 802.638102][ T1000] usb 6-1: SerialNumber: syz [ 802.649672][ T1000] usb 6-1: config 0 descriptor?? [ 802.668620][ T1000] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 802.668885][ T1000] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -22 [ 804.181845][ T5576] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 804.333641][ T5576] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 804.340431][ T5576] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.340464][ T5576] usb 1-1: Product: syz [ 804.340480][ T5576] usb 1-1: Manufacturer: syz [ 804.340496][ T5576] usb 1-1: SerialNumber: syz [ 804.815563][ T5576] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 804.815602][ T5576] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 805.298929][T14009] usb 6-1: USB disconnect, device number 14 [ 805.423557][ T5576] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 805.423619][ T5576] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 805.484198][ T5576] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 805.525732][ T5576] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 806.513329][T14009] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 806.634624][ T11] block nbd0: Possible stuck request ffff888028572140: control (read@0,1024B). Runtime 270 seconds [ 806.651772][T14009] usb 6-1: device descriptor read/64, error -71 [ 806.892270][T14009] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 807.031745][T14009] usb 6-1: device descriptor read/64, error -71 [ 807.135934][T14342] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 807.142019][T14009] usb usb6-port1: attempt power cycle [ 807.301797][ T5576] usb 4-1: new full-speed USB device number 79 using dummy_hcd [ 807.454191][ T5576] usb 4-1: New USB device found, idVendor=056a, idProduct=010e, bcdDevice= 0.00 [ 807.455403][ T5576] usb 4-1: config 0 interface 0 altsetting 249 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 807.455424][ T5576] usb 4-1: config 0 interface 0 altsetting 249 endpoint 0x81 has invalid maxpacket 1015, setting to 64 [ 807.455439][ T5576] usb 4-1: config 0 interface 0 altsetting 249 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 807.455454][ T5576] usb 4-1: config 0 interface 0 has no altsetting 0 [ 807.455473][ T5576] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.493395][T14009] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 807.512447][T14009] usb 6-1: device descriptor read/8, error -71 [ 807.545568][ T5576] usb 4-1: config 0 descriptor?? [ 807.560525][T14339] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 808.059827][T14009] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 808.098247][T14009] usb 6-1: device descriptor read/8, error -71 [ 808.774509][T14009] usb usb6-port1: unable to enumerate USB device [ 808.975449][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.975586][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.153154][ T10] usb 1-1: USB disconnect, device number 100 [ 809.719457][ T5576] wacom 0003:056A:010E.0009: unknown main item tag 0x0 [ 809.719482][ T5576] wacom 0003:056A:010E.0009: unbalanced collection at end of report description [ 809.719921][ T5576] wacom 0003:056A:010E.0009: parse failed [ 809.719981][ T5576] wacom 0003:056A:010E.0009: probe with driver wacom failed with error -22 [ 809.767299][ T5576] usb 4-1: USB disconnect, device number 79 [ 810.904333][ T37] audit: type=1326 audit(1792098499.084:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14366 comm="syz.3.2747" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f414600e559 code=0x0 [ 810.935802][ T10] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 811.023484][T12657] Bluetooth: hci1: command 0x0405 tx timeout [ 811.091742][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 811.092549][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 811.093823][ T10] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 811.093849][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 811.093864][ T10] usb 1-1: config 0 has no interface number 0 [ 811.093890][ T10] usb 1-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 811.093905][ T10] usb 1-1: config 0 interface 184 has no altsetting 0 [ 811.096483][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.096509][ T10] usb 1-1: Product: syz [ 811.096524][ T10] usb 1-1: Manufacturer: syz [ 811.096538][ T10] usb 1-1: SerialNumber: syz [ 811.190315][ T10] usb 1-1: config 0 descriptor?? [ 811.202540][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 811.202833][ T10] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 811.871801][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 812.036040][ T10] usb 3-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 812.054880][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 812.054940][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.071764][ T5576] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 812.137297][ T10] usb 3-1: selecting invalid altsetting 1 [ 812.137336][ T10] snd-usb-caiaq 3-1:1.0: can't set alt interface. [ 812.137356][ T10] usb 3-1: unable to init card! (ret=-5) [ 812.174727][ T10] snd-usb-caiaq 3-1:1.0: probe with driver snd-usb-caiaq failed with error -5 [ 812.242516][ T5576] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 812.248300][ T5576] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.248330][ T5576] usb 5-1: Product: syz [ 812.248345][ T5576] usb 5-1: Manufacturer: syz [ 812.248360][ T5576] usb 5-1: SerialNumber: syz [ 812.726519][ T5576] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 812.726587][ T5576] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 812.857323][T11855] usb 1-1: USB disconnect, device number 101 [ 814.477050][ T5576] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): timeout on completion of LiteReset [ 814.477080][ T5576] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 814.478027][ T5576] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 814.656020][ T5576] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -110 [ 814.740302][ T1000] usb 3-1: USB disconnect, device number 19 [ 815.181782][ T1000] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 815.324746][T14416] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 815.342600][ T1000] usb 3-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 815.344277][ T1000] usb 3-1: config 4 has an invalid interface number: 44 but max is 0 [ 815.344305][ T1000] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 815.344326][ T1000] usb 3-1: config 4 has no interface number 0 [ 815.344370][ T1000] usb 3-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 815.346950][ T1000] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.346976][ T1000] usb 3-1: Product: syz [ 815.346990][ T1000] usb 3-1: Manufacturer: syz [ 815.347005][ T1000] usb 3-1: SerialNumber: syz [ 815.794606][ T1000] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 815.807869][ T1000] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 816.635682][ T1000] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 816.636242][ T1000] usb 3-1: media controller created [ 816.720404][ T1000] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 816.817830][ T5576] usb 5-1: USB disconnect, device number 81 [ 817.006382][ T1000] DVB: Unable to find symbol dib7000p_attach() [ 817.006400][ T1000] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 817.231759][ T1000] rc_core: IR keymap rc-dib0700-rc5 not found [ 817.231783][ T1000] Registered IR keymap rc-empty [ 817.232062][ T1000] dvb-usb: could not initialize remote control. [ 817.232075][ T1000] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 817.248953][ T1000] usb 3-1: USB disconnect, device number 20 [ 818.047552][ T1000] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 820.561789][ T10] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 820.713509][ T10] usb 5-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 820.714947][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 820.715004][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.721775][ T5798] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 820.789742][ T10] usb 5-1: selecting invalid altsetting 1 [ 820.789769][ T10] snd-usb-caiaq 5-1:1.0: can't set alt interface. [ 820.789784][ T10] usb 5-1: unable to init card! (ret=-5) [ 820.810305][ T10] snd-usb-caiaq 5-1:1.0: probe with driver snd-usb-caiaq failed with error -5 [ 820.877833][ T5798] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 820.879490][ T5798] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 820.879551][ T5798] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.910273][ T5798] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 821.081792][ T10] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 821.232521][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 821.238680][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.238734][ T10] usb 4-1: Product: syz [ 821.238750][ T10] usb 4-1: Manufacturer: syz [ 821.238766][ T10] usb 4-1: SerialNumber: syz [ 821.699739][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 821.699810][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 821.997186][ T5798] stv0680 1-1:4.0: Could not get descriptor 0200 [ 822.198924][ T5798] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 822.198953][ T5798] stv0680 1-1:4.0: last error: 26, command = 0xf [ 822.212137][ T5798] usb 1-1: USB disconnect, device number 102 [ 822.324024][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 822.324083][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 822.324990][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 822.368348][ T10] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 823.161837][ T5714] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 823.301911][T14009] usb 5-1: USB disconnect, device number 82 [ 823.317857][ T5714] usb 1-1: Using ep0 maxpacket: 8 [ 823.318477][ T5714] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 823.319549][ T5714] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 823.319577][ T5714] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 823.319621][ T5714] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 823.319634][ T5714] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 823.319647][ T5714] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 823.319685][ T5714] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.454074][ T5714] usbtmc 1-1:16.0: bulk endpoints not found [ 825.251761][T14009] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 825.330070][ T36] usb 4-1: USB disconnect, device number 80 [ 825.404297][T14009] usb 5-1: Using ep0 maxpacket: 8 [ 825.405058][T14009] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 825.428072][T14009] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.428098][T14009] usb 5-1: Product: syz [ 825.428107][T14009] usb 5-1: Manufacturer: syz [ 825.428115][T14009] usb 5-1: SerialNumber: syz [ 825.447994][T14009] usb 5-1: config 0 descriptor?? [ 825.486780][T14009] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 826.107197][T14009] gspca_sonixj: reg_w1 err -71 [ 826.107261][T14009] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 826.229907][ T11] block nbd3: Possible stuck request ffff8880286ac080: control (read@0,4096B). Runtime 300 seconds [ 826.273516][T14009] usb 5-1: USB disconnect, device number 83 [ 826.306460][ T36] usb 1-1: USB disconnect, device number 103 [ 826.692130][T11855] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 826.911732][ T11] block nbd1: Possible stuck request ffff8880285e5080: control (read@0,4096B). Runtime 330 seconds [ 826.953715][T11855] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 826.972735][T11855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.988552][T11855] usb 4-1: config 0 descriptor?? [ 827.131967][ T10] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 827.293005][ T10] usb 1-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 827.294311][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 827.294357][ T10] usb 1-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 827.294424][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.406935][T11855] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 827.409116][T11855] [drm:udl_init] *ERROR* Selecting channel failed [ 827.544427][ T10] snd-usb-caiaq 1-1:1.0: invalid EPs [ 827.544444][ T10] usb 1-1: unable to init card! (ret=-22) [ 827.544812][ T10] snd-usb-caiaq 1-1:1.0: probe with driver snd-usb-caiaq failed with error -22 [ 827.740836][T11855] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 827.740862][T11855] [drm] Initialized udl on minor 1 [ 827.765763][ T5798] usb 1-1: USB disconnect, device number 104 [ 827.831305][T11855] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 827.832119][ T10] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 827.839052][T11855] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 827.867441][T11855] usb 4-1: USB disconnect, device number 81 [ 827.944761][ T10] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 828.391712][ T5798] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 828.531745][ T5798] usb 3-1: device descriptor read/64, error -71 [ 828.531860][ T36] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 828.681777][ T36] usb 6-1: Using ep0 maxpacket: 8 [ 828.682630][ T36] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 828.690223][ T36] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 828.690285][ T36] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 828.690309][ T36] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 828.690333][ T36] usb 6-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 828.690356][ T36] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 828.690398][ T36] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.783569][ T36] usbtmc 6-1:16.0: bulk endpoints not found [ 828.811758][ T5798] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 828.903412][ T5714] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 828.951850][ T5798] usb 3-1: device descriptor read/64, error -71 [ 829.073526][ T5798] usb usb3-port1: attempt power cycle [ 829.074269][ T5714] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 829.101384][ T5714] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.101416][ T5714] usb 4-1: Product: syz [ 829.101432][ T5714] usb 4-1: Manufacturer: syz [ 829.101448][ T5714] usb 4-1: SerialNumber: syz [ 829.153440][ T5714] usb 4-1: config 0 descriptor?? [ 829.342572][ T38] INFO: task syz.1.2381:12859 blocked for more than 144 seconds. [ 829.342601][ T38] Tainted: G L syzkaller #0 [ 829.342612][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 829.342622][ T38] task:syz.1.2381 state:D stack:27184 pid:12859 tgid:12854 ppid:5598 task_flags:0x400040 flags:0x00080002 [ 829.342676][ T38] Call Trace: [ 829.342685][ T38] [ 829.342700][ T38] __schedule+0x16d9/0x5700 [ 829.342757][ T38] ? trace_irq_disable+0x3b/0x140 [ 829.342789][ T38] ? __pfx___schedule+0x10/0x10 [ 829.342827][ T38] rt_mutex_schedule+0x76/0xf0 [ 829.342850][ T38] rt_mutex_slowlock_block+0x55e/0x690 [ 829.342877][ T38] ? rt_mutex_slowlock_block+0x33c/0x690 [ 829.342901][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 829.342925][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 829.342948][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 829.342996][ T38] ? sync_bdevs+0x276/0x470 [ 829.343038][ T38] mutex_lock_nested+0x168/0x1d0 [ 829.343064][ T38] sync_bdevs+0x276/0x470 [ 829.343090][ T38] __ia32_sys_sync+0xc5/0x120 [ 829.343117][ T38] ? __pfx___ia32_sys_sync+0x10/0x10 [ 829.343147][ T38] ? do_syscall_64+0xc8/0x520 [ 829.343174][ T38] do_syscall_64+0x166/0x520 [ 829.343198][ T38] ? trace_irq_disable+0x3b/0x140 [ 829.343223][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.343243][ T38] ? clear_bhb_loop+0x70/0xc0 [ 829.343268][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.343296][ T38] RIP: 0033:0x7fca536de559 [ 829.343314][ T38] RSP: 002b:00007fca518f4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 829.343349][ T38] RAX: ffffffffffffffda RBX: 00007fca53966180 RCX: 00007fca536de559 [ 829.343364][ T38] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 829.343377][ T38] RBP: 00007fca53966180 R08: 0000000000000000 R09: 0000000000000000 [ 829.343390][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 829.343404][ T38] R13: 00007fca53966218 R14: 00007fca53966180 R15: 00007ffd7b45b048 [ 829.343437][ T38] [ 829.343470][ T38] [ 829.343470][ T38] Showing all locks held in the system: [ 829.343482][ T38] locks held by ktimers/1/29: 8, last CPU#1: [ 829.343515][ T38] #0: ffffffff8f059580 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 829.343711][ T38] #1: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 829.343761][ T38] #2: ffff8880b85274a0 (&base->expiry_lock){+...}-{3:3}, at: hrtimer_run_softirq+0x7d/0x2e0 [ 829.343808][ T38] #3: ffff8880b85285b8 (_T->lock){....}-{2:2}, at: rt_mutex_slowunlock+0xbf/0xa30 [ 829.343854][ T38] #4: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 829.343896][ T38] #5: ffff8880b853dc00 ((process_queue_bh_lock).lock.wait_lock){....}-{2:2}, at: rt_mutex_slowunlock+0xbf/0xa30 [ 829.343941][ T38] #6: ffff8880b8528558 (hrtimer_bases.lock){-...}-{2:2}, at: hrtimer_start_range_ns+0x8c/0x3f0 [ 829.343993][ T38] #7: ffffffff9adeb900 (&obj_hash[i].lock){-...}-{2:2}, at: debug_object_activate+0xa8/0x3b0 [ 829.344062][ T38] locks held by khungtaskd/38: 1, last CPU#0: [ 829.344077][ T38] #0: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 829.344162][ T38] locks held by getty/5343: 2, on CPU#1: [ 829.344176][ T38] #0: ffff88803758c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 829.344281][ T38] #1: ffffc900044db2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 829.344375][ T38] locks held by kworker/1:3/5714: 6, on CPU#1: [ 829.344390][ T38] #0: ffff888021eb8d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 829.344458][ T38] #1: ffffc900060d7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 829.344507][ T38] #2: ffff88802b5c0210 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4cf0 [ 829.344707][ T38] #3: ffff88803eeae210 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 829.344868][ T38] #4: ffff88802d9ae1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 829.344917][ T38] #5: ffff88806b1240c0 (&d->usb_mutex){+.+.}-{4:4}, at: rtl28xxu_ctrl_msg+0x51/0x690 [ 829.345044][ T38] locks held by kworker/1:6/5798: 6, on CPU#1: [ 829.345060][ T38] #0: ffff888021eb8d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 829.345113][ T38] #1: ffffc90006417c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 829.345165][ T38] #2: ffff88802b598210 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4cf0 [ 829.345212][ T38] #3: ffff88802b5a8658 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20ad/0x4cf0 [ 829.345261][ T38] #4: ffff888029b02558 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20e1/0x4cf0 [ 829.345317][ T38] #5: ffffffff8fe78c00 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x14d/0x1800 [ 829.345377][ T38] locks held by udevd/10107: 1, on CPU#0: [ 829.345392][ T38] #0: ffff88802852a4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd00 [ 829.345442][ T38] locks held by udevd/10110: 1, on CPU#0: [ 829.345457][ T38] #0: ffff8880286324c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd00 [ 829.345492][ T38] locks held by udevd/10333: 1, on CPU#0: [ 829.345500][ T38] #0: ffff8880285a24c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd00 [ 829.345537][ T38] locks held by udevd/10703: 4, on CPU#1: [ 829.345551][ T38] #0: ffff88807f6c3608 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa5/0xcb0 [ 829.345598][ T38] #1: ffff888039672078 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420 [ 829.345658][ T38] #2: ffff88805e48a0f8 (kn->active#25){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 829.345758][ T38] #3: ffff88803eeae210 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 829.345861][ T38] locks held by syz.1.2381/12859: 1, on CPU#1: [ 829.345876][ T38] #0: ffff8880286324c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x276/0x470 [ 829.345930][ T38] locks held by syz.0.2805/14565: 2, last CPU#0: [ 829.345945][ T38] #0: ffff888040ebdff0 (&u->iolock){+.+.}-{4:4}, at: __unix_dgram_recvmsg+0x1e3/0xd70 [ 829.346036][ T38] #1: ffff888040ebd998 (rlock-AF_UNIX){+.+.}-{3:3}, at: __skb_try_recv_datagram+0x89/0x1b0 [ 829.346124][ T38] [ 829.346130][ T38] ============================================= [ 829.346130][ T38] [ 829.346141][ T38] NMI backtrace for cpu 0 [ 829.346158][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 829.346173][ T38] Tainted: [L]=SOFTLOCKUP [ 829.346177][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 829.346184][ T38] Call Trace: [ 829.346190][ T38] [ 829.346196][ T38] dump_stack_lvl+0xe8/0x150 [ 829.346224][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 829.346286][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 829.346319][ T38] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 829.346342][ T38] sys_info+0x135/0x170 [ 829.346353][ T38] watchdog+0xfd7/0x1030 [ 829.346383][ T38] ? watchdog+0x1c7/0x1030 [ 829.346415][ T38] kthread+0x38b/0x470 [ 829.346437][ T38] ? __pfx_watchdog+0x10/0x10 [ 829.346461][ T38] ? __pfx_kthread+0x10/0x10 [ 829.346483][ T38] ret_from_fork+0x514/0xb70 [ 829.346500][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 829.346511][ T38] ? __switch_to+0xc89/0x1420 [ 829.346540][ T38] ? __pfx_kthread+0x10/0x10 [ 829.346560][ T38] ret_from_fork_asm+0x1a/0x30 [ 829.346596][ T38] [ 829.346604][ T38] Sending NMI from CPU 0 to CPUs 1: [ 829.346634][ C1] NMI backtrace for cpu 1 [ 829.346651][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 829.346675][ C1] Tainted: [L]=SOFTLOCKUP [ 829.346682][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 829.346693][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 829.346723][ C1] Code: 4b 5d 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 20 0f 00 fb f4 7c d8 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 829.346740][ C1] RSP: 0018:ffffc900001d7e40 EFLAGS: 00000246 [ 829.346757][ C1] RAX: 0000000000815cd7 RBX: ffffffff819abe50 RCX: 8000000000000001 [ 829.346772][ C1] RDX: 0000000000000001 RSI: ffffffff8d8c000f RDI: ffffffff8bcc6980 [ 829.346785][ C1] RBP: ffffc900001d7f10 R08: ffff8880b8533e9b R09: 1ffff110170a67d3 [ 829.346800][ C1] R10: dffffc0000000000 R11: ffffed10170a67d4 R12: 0000000000000000 [ 829.346813][ C1] R13: 1ffff11003bd3000 R14: 1ffff9200003afd0 R15: dffffc0000000000 [ 829.346833][ C1] FS: 0000000000000000(0000) GS:ffff888124abb000(0000) knlGS:0000000000000000 [ 829.346848][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 829.346861][ C1] CR2: 0000001b3241aff8 CR3: 000000005a686000 CR4: 00000000003526f0 [ 829.346877][ C1] Call Trace: [ 829.346885][ C1] [ 829.346892][ C1] default_idle+0x9/0x20 [ 829.346919][ C1] default_idle_call+0x72/0xb0 [ 829.346936][ C1] do_idle+0x2e0/0x540 [ 829.346963][ C1] ? __pfx_do_idle+0x10/0x10 [ 829.346992][ C1] cpu_startup_entry+0x43/0x60 [ 829.347017][ C1] start_secondary+0x101/0x110 [ 829.347035][ C1] common_startup_64+0x13e/0x157 [ 829.347068][ C1] [ 829.347695][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 830.247128][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 830.258349][ T38] Tainted: [L]=SOFTLOCKUP [ 830.262759][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 830.272829][ T38] Call Trace: [ 830.276209][ T38] [ 830.279241][ T38] vpanic+0x56d/0xa60 [ 830.283232][ T38] ? __pfx___schedule+0x10/0x10 [ 830.288110][ T38] ? __pfx_vpanic+0x10/0x10 [ 830.292648][ T38] panic+0xc5/0xd0 [ 830.296448][ T38] ? __pfx_panic+0x10/0x10 [ 830.300874][ T38] ? preempt_schedule_common+0x7f/0xd0 [ 830.306344][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 830.311749][ T38] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 830.317934][ T38] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 830.324104][ T38] watchdog+0x1030/0x1030 [ 830.328508][ T38] ? watchdog+0x1c7/0x1030 [ 830.332956][ T38] kthread+0x38b/0x470 [ 830.337061][ T38] ? __pfx_watchdog+0x10/0x10 [ 830.341993][ T38] ? __pfx_kthread+0x10/0x10 [ 830.346626][ T38] ret_from_fork+0x514/0xb70 [ 830.351318][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 830.356538][ T38] ? __switch_to+0xc89/0x1420 [ 830.361308][ T38] ? __pfx_kthread+0x10/0x10 [ 830.365917][ T38] ret_from_fork_asm+0x1a/0x30 [ 830.370789][ T38] [ 830.374200][ T38] Kernel Offset: disabled [ 830.378551][ T38] Rebooting in 86400 seconds..