last executing test programs: 2m47.260664723s ago: executing program 2 (id=196): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x1000000, 0x3900, 0xfffffffe, 0x1e5}, &(0x7f0000000100)=0x0, 0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, 0x0, r3, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0, 0x40002102, 0x1, {0x3}}) syz_ublk_add_dev(r1, r2, 0x0, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x34, 0x0, 0x805, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x1c, 0x5, @l2={'ib', 0x3a, 'ip6gre0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x2090}, 0x0) 2m47.23394881s ago: executing program 2 (id=197): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0, 0xff00, &(0x7f0000000b80)=ANY=[@ANYBLOB="e8"], 0xe8}}], 0x1, 0x4000800) 2m47.167634741s ago: executing program 2 (id=198): r0 = fsopen(&(0x7f0000000180)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000400)='iocharset', &(0x7f0000000680)='ntbs3\x002\xbf\x8f*\xc7\x03\xd8\x18\xe9\xb41\xdb*\xc4\xb2b/5\x81\x10\x8a\xdaZ|\xafq\xf6W\xfe\xed)>\x9f\x99ji\xc4\xf2&\xe1\x99hg\xea\xa6\xbe\xb2q\v\tv\xc5\xd7\x96\x8e\x84&\xb2\n>\x8b\xd0\xee\x95\x1b\x88\xd1m\xef\x9eN\xe8R\xbf\x03dD\xfc\xe4 \x7f\xe0\x8bX\xd3^l\xe9\xd0s\xe6\xc9\xf2a\x1c\xc2\'\x8a|\xe5\x06Q\xce\xc3\x8e\xfdi\x0e\x81\xde\x1b\x85\xdfk\xa3\xce9\x9b\xc9\x18\x9a\xea\xc3\xeb\xfds\x04c\xb5y\xdb~\r\x97>Ut\xe0\xf6\v\xf8\xdcE\v\xa8z\x82\x84\xb1~\x82\xeb\x0fW{\x00\x14\xa89\x11d>ub\xeb\x85F\xd8\xd3\x83V\x82\xae\xf6\x0e\xfe\x1d\xaa\xf7\x8d\xde\xb6V$\x0f~\x05w\x1f3\x12\xfc$.\xab\xf2I{\xf3\xee\xe2\x1e\b3\xe5\xb7}j\x0f\xdd\xc5\x17\xf6\xb7i`%\xe3\x02\xa1|f\xdcL\xee\x9b\x88\xaa\xa9\x1b\x1f\xbcg\xa6]F\xf9w]BFr-\x0f\xd6\x10\xa7\x06', 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x4b45, 0x3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='autogroup\x00') sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="4b7e2bbd7000fbdbdf252a00000008002f00ffffffff0a0001007770616e3100000049c0a4b36062e61663d4968f003de067a78dc32cefc18a5021b6e4bd12f2f90766ccb9765ad226c68cac92ccd49de6f120c2dd4a45791ca697c6acc7f28c176e3df789e812e1a0fb99ea95744698205c07c806076fb0c97bc51ead497e7c8c7684ec3741fa583cd79be2a389ff84446b21b71440692c72beaef0b6403cae084c279eed1d02617154b24771000000000000"], 0x28}, 0x4, 0x700000000000000, 0x0, 0x1}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000080)={0x0, 0xffff}, 0x8) 2m47.028478513s ago: executing program 2 (id=199): r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xb0, 0xc, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0013000000000639"]}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000240)={0x20, 0xc, 0x2e, "a155856cb27b23f32ea31adb0613765ad40aefffc0df0bb33b1167cb6f374153a064da225f858cd4e549b75c1d99"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000180)={0x14, &(0x7f0000000100)={0x20, 0x23, 0x2e, {0x2e, 0x21, "aab160a50dfdba4751aa23bd67f266eb948370d752b38b8f074e67a3a9d13dd966bd7cd7d7652970283c23b1"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000280)={0x1c, &(0x7f00000001c0)={0x20, 0x7, 0x37, "3dca0e92a5ae015cdee6cca7d49489cccb7161d899262a24791db0d9f595e7f21a5002e7ffbd9fc0906020d7faee6d425ff95e2e89a42a"}, &(0x7f0000000200)={0x0, 0xa, 0x1}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x3}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r3, 0x0) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000002140)=0x20) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000f, 0x11, r4, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x4000) write$char_usb(r1, &(0x7f00000007c0)="0bcde56ca9a62cbf", 0x8) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x2201, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) 2m45.604726801s ago: executing program 2 (id=206): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x44, 0x1, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x14}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x1}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'snmp_trap\x00'}}]}, 0x44}}, 0x800) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a00f00000088080ffb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x4100000000000000) 2m45.473117224s ago: executing program 2 (id=208): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80002) ioctl$NBD_DISCONNECT(r0, 0xab08) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1923, @none, 0x0, 0x2}, 0xe) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10, 0x3}) listen(0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000140)={0x4000002, 0x2000bb22, 0x1, {0x1, @raw_data="3d924b827139e8a4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae5b411ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed32147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc331c96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a700"}}) preadv(r2, &(0x7f0000001700)=[{&(0x7f0000000080)=""/78, 0x4e}, {0x0}], 0x2, 0x8, 0x9c1) socket$phonet(0x23, 0x2, 0x1) syz_usb_connect$uac1(0x0, 0x8d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100020000fa050000000000000102030109027b0003010700020904000000010100000a240123d15ca9d57d1da5d3fc42023eee03000a000201020904010000010200000904010101010200000905010908000307010725010c7ff8040904020000010200000904020101010200000a240202e500ff010900072401657502100a24020261001d0003060905"], 0x0) 2m29.383956896s ago: executing program 32 (id=208): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80002) ioctl$NBD_DISCONNECT(r0, 0xab08) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1923, @none, 0x0, 0x2}, 0xe) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10, 0x3}) listen(0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000140)={0x4000002, 0x2000bb22, 0x1, {0x1, @raw_data="3d924b827139e8a4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae5b411ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed32147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc331c96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a700"}}) preadv(r2, &(0x7f0000001700)=[{&(0x7f0000000080)=""/78, 0x4e}, {0x0}], 0x2, 0x8, 0x9c1) socket$phonet(0x23, 0x2, 0x1) syz_usb_connect$uac1(0x0, 0x8d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100020000fa050000000000000102030109027b0003010700020904000000010100000a240123d15ca9d57d1da5d3fc42023eee03000a000201020904010000010200000904010101010200000905010908000307010725010c7ff8040904020000010200000904020101010200000a240202e500ff010900072401657502100a24020261001d0003060905"], 0x0) 2m28.385203557s ago: executing program 3 (id=266): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000900), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x604, 0x0, 0xa, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df, 0x2e}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001140)={0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="0f0d290000002907d617"], 0x0, 0x0, 0x0}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) sendmsg$inet_sctp(r1, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="0b0002"], 0xc) 2m27.129095822s ago: executing program 3 (id=269): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x12}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x7f}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x18000}, 0x0) 2m26.917984175s ago: executing program 3 (id=270): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0xf5, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}]}}}]}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x40040c1}, 0x0) 2m26.3284773s ago: executing program 3 (id=271): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) syz_usb_connect$printer(0x4, 0x2d, 0x0, 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120001a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x1}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) 2m24.225359758s ago: executing program 3 (id=280): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x0, 0x3b, 0xb5, {0xb5, 0x3, "abb5eab109af3359ae0dca27a06e91b96e5209483cdfeab094577fd0be8cb35cab469a347f577826f8cf8397effb77480a447f7b03011d0ac1d0f8efa3f7d1ba8ad34acfdf7808379802f4aea0f81e46c6d528b414a73bf22be8dde8f01703f0595a775d35f499a271863b332d1119809d22a1b6a4761443307160a8296f30c4b07e74354a674c42c0c15c2d0cbbf218e67f259e7b2909e11c1c9335ad17f9e5fa35c6d97c44314aca5c50abe8fb3625fc8a57"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000240)={0x1c, &(0x7f0000000140)={0x0, 0x1, 0x2a, "58b5e75c1edf46dec81da15bae60117c68c2f4f5f22b1980fc234b6de051ac1345711091dd0355dade16"}, &(0x7f00000001c0)={0x0, 0xa, 0x1}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x8}}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000980)={0x44, 0x0, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000380)={0x14, &(0x7f0000000280)={0x40, 0x22, 0xb7, {0xb7, 0x11, "8ec95d9a14fd5a2c8b4f8eb7229903e92943fee9c1656f225e4a90d680976399b0e6ea539094da88cd1e46f4a851f126d9955d34d716c38159a807ff4e41901182cec8f0038bfd7c389cb9ed9698ebba8ac30556827ff5f84e8282f24a17835beed9e933a1d32a6143c4f14d76ec8b458beec5a4b9e6edc4e346393b37b18bbd710857952a364c1986188b52990aaec2116306daad3886386c77068b78034d7ea4c74665a03bf13202f394abc11e6b56e1a5fab25a"}}, &(0x7f0000000340)={0x0, 0x3, 0x30, @string={0x30, 0x3, "90018c8b2e263c0d40ed063a110d323580e705c385a7822dd336650ca1c50396bcb8a500a38a3cf5b6c38a1bef9a"}}}, &(0x7f00000005c0)={0x44, &(0x7f00000003c0)={0x20, 0x8, 0x8, "ba450ea9064c6827"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0xd0}, &(0x7f0000000480)={0x20, 0x81, 0x3, "b2d984"}, &(0x7f00000004c0)={0x20, 0x82, 0x1, "b8"}, &(0x7f0000000500)={0x20, 0x83, 0x3, "8c47de"}, &(0x7f0000000540)={0x20, 0x84, 0x4, "2738137e"}, &(0x7f0000000580)={0x20, 0x85, 0x3, 'pK\n'}}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 2m19.084106089s ago: executing program 3 (id=301): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x6, @pix_mp={0xa, 0x2, 0x50424752, 0x0, 0xa, [{0x2, 0x1}, {0x16}, {0x969, 0x2}, {0x8, 0x8000}, {0x8, 0x69f1}, {0x80000001, 0x8fea}, {0x8001}, {0xe4f0, 0x80000000}], 0x40, 0x6, 0x4, 0x0, 0x6}}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940)=[0x0], &(0x7f0000000980), 0x0, 0x1, 0x0, 0x0, r3}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f0000000480)={&(0x7f00000001c0)=[0x0], 0x0, r4, 0x0, '\x00', 0x1, 0x39}) 2m2.668440544s ago: executing program 33 (id=301): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x6, @pix_mp={0xa, 0x2, 0x50424752, 0x0, 0xa, [{0x2, 0x1}, {0x16}, {0x969, 0x2}, {0x8, 0x8000}, {0x8, 0x69f1}, {0x80000001, 0x8fea}, {0x8001}, {0xe4f0, 0x80000000}], 0x40, 0x6, 0x4, 0x0, 0x6}}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940)=[0x0], &(0x7f0000000980), 0x0, 0x1, 0x0, 0x0, r3}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f0000000480)={&(0x7f00000001c0)=[0x0], 0x0, r4, 0x0, '\x00', 0x1, 0x39}) 47.27633178s ago: executing program 1 (id=674): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e9ffff1f44104d7a0000e100000109022400210000000009040009010300020009210500000122050009058103ff"], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) setsockopt$sock_int(r1, 0x1, 0x24, &(0x7f0000000200)=0x7, 0x4) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000800000001090224000100007e0009043401"], 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000840)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet(0x2, 0x80000, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f00000007c0)={{0x12, 0x1, 0x4a0, 0x9f, 0x84, 0x28, 0x20, 0x3f0, 0x581d, 0xd85e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x3, 0x5, 0x90, 0x8, "", [{{0x9, 0x4, 0xa9, 0x8, 0x0, 0xff, 0x1, 0x7, 0x3}}, {{0x9, 0x4, 0x53, 0xb, 0x0, 0xff, 0xff, 0xff, 0x2}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x46, 0xf, 0x0, 0xe4}]}, 0x10) sendmsg(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="5927f894af7fafeb817b91527c6fd05fd8cb071003ec9fd484e1ffb21bbde5c2ccac84fa5b0f7eb22aea8e2795c1267d09a9dca41dc1cb08af31910c0d500eca66bdaf53784f87865873aa483dafb0ea268a1d825562afa0fb27cfa23a4c34f2b2796366fd37724b7d0f036d", 0x6c}, {&(0x7f0000000180)="5ed88dfd668976fc53446e03c42e7d706f9b8bce81bc27fd1a35fc9c3467b960fc7fed8f77127beeef3d02c59671f652adb21dc1b4d15a0b015cb3287045feb5ff", 0x41}, {&(0x7f0000000200)="846ddd8e0ea8b52379c49e674809b910076816ea40c4fdcc0a037c83119349a95f26a3e79500b9eb8176d5a9f39a72", 0x2f}, {&(0x7f00000002c0)="5cff279293a5c4ce141bc9ee1eeb1c96497bc52a84620442757527461938aca47fa9f4fe58c591f330edd04a810918576ec441695410ca3bcf392c67d402a5e0cdaee8449988ad2c976941bbc03879aad7eb122e1df5937dc9f6e389b0d3443b8cd3000ce952a0a3f81452bbcf1726a7b484abcd4ae61d5629c5e9775a77a95e7b549841db1ecfc108b97887901ecfd59c077294b0b6a6f2f0384456147e0f7aba41954fbca341aefe81e92e38483215f31d1ed6587d531b0730", 0xba}, {&(0x7f0000000380)="dc047ce692b104666101950c1c35105e100e5bb59f1d3801a1cdae01b5431526911b863acb521e13979cd6f2efd39a4854ec955c4ae152b1ff667bb46481deeca7f6d01c71fd0ef2959ad0b0bd0f0b3e0c5dc24305080bac378a45e4e5d9b497498ca71134aa47150750391bc47ac91b9d8b6cdfa23314bdca38417ef44a5494b5facd47979b1b7c83ae8c9d9a35d8a1aed5b14aedde4c773164c7ad0138dc74345ca16b9c13305e97cfd67b28f1cc7d869164", 0xb3}, {&(0x7f0000000440)="5a0fb1c8c08c656d7ab364c6a657a005275f9d628c26899db47e6a7a96fd50d979418d3a8da7cb86240c8a79de534f315d23d74c68196e41ee33b99bd146c2f0c7e1c9b091bcc8e8a6de8cc0819c79769281a0ba02ccf1564fde35", 0x5b}, {&(0x7f00000004c0)="868ed9d4089c4dc9ffceaf73c50e45cd011d2d3b6f342eef5f8ed0138c1a91828e10c021d7c51946618a5e68", 0x2c}, {&(0x7f0000000500)="92767fdeefe5671fdbb1e36f6e63b971bf0caf00", 0x14}], 0x8, &(0x7f00000005c0)}, 0x20000000) r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi={0x101, 0x5, 0x6, 0x38303553, [0x650d, 0x4b], [0x1231be81, 0x5], 0x1}}) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) read(r4, &(0x7f0000000240)=""/28, 0xffd2) setsockopt$sock_int(r3, 0x1, 0x1b, &(0x7f0000000040)=0x46a0d53c, 0x4) 44.532001915s ago: executing program 1 (id=680): syz_ublk_setup_io_uring(0x20, &(0x7f0000000800)={0x0, 0x0, 0x80, 0x2, 0x1e5}, 0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) eventfd(0xfffffff9) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000480)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0xc1e, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xec}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1000, 0x20000103) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80800, 0x0) r9 = dup(r8) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x0, 0x80, 0x1, 0x257, 0x0, r9}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbcab, 0x4, 0x1000000, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x20000000, 0x200, 0x0, 0x1f6, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x80}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9fac, 0x2000, 0x1, 0x3a3}}], 0x1, &(0x7f0000001000)={0x2e, 0x4a, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r6, '\x00', {0xfffd, 0x5, 0x0, 0x0}}, 0x0) 42.888728674s ago: executing program 1 (id=690): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x52, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}}, 0x0) 42.774602549s ago: executing program 1 (id=692): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000240)=0xfdfffff9, 0x4) r1 = syz_usb_connect(0x3, 0x62, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d240601e2030200010006000609240305050306058109240306010304050507240405"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0003040000000403bfdde8"], 0x0, 0x0}, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000040)='./file0/../file0/file0\x00', 0x0, 0x89101e, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x2b, 'pids'}]}, 0x6) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) move_mount(r2, &(0x7f0000000140)='./file0/../file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2) 41.179622333s ago: executing program 1 (id=704): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_vif\x00') preadv2(r0, &(0x7f00000019c0)=[{&(0x7f00000001c0)=""/160, 0xa0}, {&(0x7f0000000280)=""/216, 0xd8}, {&(0x7f0000000380)=""/104, 0x68}, {0x0}, {0x0}, {&(0x7f00000018c0)=""/89, 0x59}], 0x6, 0x12, 0x3ff, 0x1) 39.432835692s ago: executing program 1 (id=715): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) pselect6(0x40, &(0x7f0000000000)={0xd, 0x3, 0x3, 0x6, 0x7ff, 0x50000000000, 0x4, 0x2}, 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000002980)={0x2020}, 0x2020) 38.415735813s ago: executing program 34 (id=715): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) pselect6(0x40, &(0x7f0000000000)={0xd, 0x3, 0x3, 0x6, 0x7ff, 0x50000000000, 0x4, 0x2}, 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000002980)={0x2020}, 0x2020) 8.581594779s ago: executing program 4 (id=825): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0xc22, @remote}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) recvmsg(r0, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000580), 0x0, &(0x7f00000011c0)=""/4096, 0x1000}, 0x121) 7.477371311s ago: executing program 4 (id=831): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x18d1, 0x5050, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xd, 0x3, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x4, 0xb, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000180)={0x40, 0x9, 0x2c, {0x2c, 0x10, "e75bcfb03d43af0c0ab502d8cf47a88ac334ee0bb519068ecbcce31b33dde983c6b5edb8b16b3103db14"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 4.695823277s ago: executing program 4 (id=838): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000003c0)={0x73622a85, 0x0, 0x1}) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prlimit64(r4, 0xe, &(0x7f0000000100)={0x12a, 0x80004100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 4.533342549s ago: executing program 5 (id=839): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee000000410902240001fa0000000904000000ff01000007240100002e000b", @ANYRESHEX], 0x0) 3.868765577s ago: executing program 4 (id=841): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x13ff, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0}) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000140)={0x0, 0x6}) 3.476665954s ago: executing program 0 (id=842): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x20700, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000080)={0x0, 0x3, 0x11, 0x7, 0x202, 0x2224, 0x4, 0x18, 0xffffffffffffffff}) 3.420069838s ago: executing program 4 (id=843): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1c000000000000000000000008", @ANYRES32=0x0, @ANYBLOB="ac3414aa00000000000000001c000044"], 0x40}, 0x0) 3.303710659s ago: executing program 0 (id=844): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x30, 0x1e, 0x21, 0x70bd2b, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @str='\x85\x95\x1aq\vT\xd4\xc5:\xd8\x7f:\xe2\x00\xf7\x8a'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 3.104689158s ago: executing program 0 (id=845): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x860b01) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)={0x14, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4048091) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000080)=""/222) 3.104441129s ago: executing program 4 (id=846): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) open(&(0x7f0000000240)='./bus\x00', 0x103042, 0x100) 2.916416705s ago: executing program 5 (id=848): userfaultfd(0x801) creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) socket$inet6(0xa, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0xa0011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.752355643s ago: executing program 6 (id=849): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x580, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) 2.556682818s ago: executing program 0 (id=850): iopl(0x3) iopl(0x16) 2.556206938s ago: executing program 6 (id=851): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2.457582847s ago: executing program 0 (id=852): r0 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f00000001c0)=[{0x6, &(0x7f0000000180)=0x6, 0x2}], 0x1, 0x0, &(0x7f0000000240)={0x77359400}, 0x1) syz_clone(0x80000, &(0x7f0000000240)="aaa2cfbb6e00c6a0", 0x8, 0x0, 0x0, 0x0) 2.433494546s ago: executing program 6 (id=853): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01072cbd7000fedbdf251f"], 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x8814) 2.288591429s ago: executing program 6 (id=854): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x2, 0x0, 0x2, 0xffffffffffffffff, 0x1}) ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, &(0x7f0000000080)={0x80, 0x0, 0x9}) 2.236566416s ago: executing program 5 (id=855): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x30, 0x3, 0x8, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88e5}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x7cf}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000844}, 0x20008002) 2.138180682s ago: executing program 0 (id=856): r0 = socket(0x10, 0x2, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0xa0000001}) epoll_pwait(r3, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x0) epoll_wait(r1, &(0x7f0000000180)=[{}], 0x1, 0xf19) close_range(r0, 0xffffffffffffffff, 0x0) 2.024637069s ago: executing program 5 (id=857): ioperm(0x0, 0x62ee, 0x2000000000000006) fsmount(0xffffffffffffffff, 0x0, 0x0) 1.936803913s ago: executing program 6 (id=858): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x12a, 0x80004100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x31}, 0x20000888) 1.912978359s ago: executing program 5 (id=859): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x3}) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x1000000, @vifc_lcl_addr=@broadcast, @remote}, 0x10) getdents(0xffffffffffffffff, 0xffffffffffffffff, 0x5a) 512.663192ms ago: executing program 6 (id=860): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x30, 0x0, 0x0, 0xfffff014}, {0x6, 0x0, 0x4}]}, 0x10) 0s ago: executing program 5 (id=861): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): 86617][ T5720] usb usb1-port1: attempt power cycle [ 133.648833][ T5720] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 133.674027][ T5720] usb 1-1: device descriptor read/8, error -71 [ 133.705967][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.706087][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.741342][ T6455] sg_write: data in/out 483328/136 bytes for SCSI command 0x0-- guessing data in; [ 133.741342][ T6455] program syz.3.255 not setting count and/or reply_len properly [ 133.786341][ T10] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 133.926891][ T5720] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 133.948548][ T5720] usb 1-1: device descriptor read/8, error -71 [ 133.974345][ T10] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 133.974374][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.974394][ T10] usb 2-1: Product: syz [ 133.974407][ T10] usb 2-1: Manufacturer: syz [ 133.974421][ T10] usb 2-1: SerialNumber: syz [ 134.011243][ T10] usb 2-1: config 0 descriptor?? [ 134.016432][ T10] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 134.065484][ T5720] usb usb1-port1: unable to enumerate USB device [ 135.879736][ T60] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 135.948979][ T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 135.961321][ T60] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 135.981287][ T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 136.024322][ T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 136.026639][ T6476] sg_write: data in/out 417792/136 bytes for SCSI command 0x0-- guessing data in; [ 136.026639][ T6476] program syz.3.264 not setting count and/or reply_len properly [ 137.153397][ T5720] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 137.319065][ T5720] usb 1-1: Using ep0 maxpacket: 16 [ 137.332384][ T5720] usb 1-1: config 0 has an invalid interface number: 107 but max is 0 [ 137.332409][ T5720] usb 1-1: config 0 has no interface number 0 [ 137.332446][ T5720] usb 1-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 36864, setting to 1024 [ 137.332470][ T5720] usb 1-1: config 0 interface 107 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1024 [ 137.352782][ T5720] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 137.352812][ T5720] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 137.352831][ T5720] usb 1-1: Product: syz [ 137.352844][ T5720] usb 1-1: Manufacturer: syz [ 137.352858][ T5720] usb 1-1: SerialNumber: syz [ 137.365856][ T5720] usb 1-1: config 0 descriptor?? [ 137.689517][ T6502] tmpfs: Bad value for 'mpol' [ 137.908760][ T10] gspca_stk1135: reg_w 0x19 err -71 [ 137.909798][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 137.909811][ T10] gspca_stk1135: Sensor write failed [ 137.909837][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 137.909846][ T10] gspca_stk1135: Sensor write failed [ 137.909871][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 137.909880][ T10] gspca_stk1135: Sensor read failed [ 137.909905][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 137.909913][ T10] gspca_stk1135: Sensor read failed [ 137.909920][ T10] gspca_stk1135: Detected sensor type unknown (0x0) [ 137.909950][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 137.909967][ T10] gspca_stk1135: Sensor read failed [ 137.909992][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 137.910001][ T10] gspca_stk1135: Sensor read failed [ 137.910025][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 137.910033][ T10] gspca_stk1135: Sensor write failed [ 137.910074][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 137.910083][ T10] gspca_stk1135: Sensor write failed [ 137.910157][ T10] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 138.084222][ T10] usb 2-1: USB disconnect, device number 16 [ 138.181332][ T5720] keyspan 1-1:0.107: Keyspan 4 port adapter converter detected [ 138.259410][ T5720] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 81 [ 138.306461][ T5720] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 1 [ 138.318506][ T5620] Bluetooth: hci4: command tx timeout [ 138.380617][ T5720] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 138.462327][ T5720] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 2 [ 138.468416][ T5720] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 138.473854][ T5720] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 4 [ 138.541126][ T5720] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 138.576084][ T5720] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 6 [ 138.582546][ T5720] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 138.612633][ T5720] usb 1-1: USB disconnect, device number 14 [ 138.706428][ T5720] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 138.708447][ T5622] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 138.873589][ T5622] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 138.873616][ T5622] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 138.873636][ T5622] usb 4-1: config 220 has no interface number 2 [ 138.873702][ T5622] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 138.873728][ T5622] usb 4-1: config 220 interface 0 has no altsetting 0 [ 138.873746][ T5622] usb 4-1: config 220 interface 76 has no altsetting 0 [ 138.873764][ T5622] usb 4-1: config 220 interface 1 has no altsetting 0 [ 138.876318][ T5622] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 138.876345][ T5622] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.876364][ T5622] usb 4-1: Product: syz [ 138.876378][ T5622] usb 4-1: Manufacturer: syz [ 138.876391][ T5622] usb 4-1: SerialNumber: syz [ 138.878775][ T5720] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 139.115385][ T6515] sg_write: data in/out 417792/136 bytes for SCSI command 0x0-- guessing data in; [ 139.115385][ T6515] program syz.1.273 not setting count and/or reply_len properly [ 139.399278][ T5720] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 139.440221][ T5622] usb 4-1: selecting invalid altsetting 0 [ 139.487472][ T5720] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 139.496790][ T5622] usb 4-1: selecting invalid altsetting 0 [ 139.575284][ T5622] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 139.575321][ T5622] uvcvideo 4-1:220.0: No valid video chain found. [ 139.592242][ T5720] keyspan 1-1:0.107: device disconnected [ 139.720552][ T5622] usb 4-1: selecting invalid altsetting 0 [ 139.720591][ T5622] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 139.814610][ T5622] usb 4-1: USB disconnect, device number 12 [ 140.544867][ T5620] Bluetooth: hci4: command tx timeout [ 140.735266][ T32] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 140.894301][ T56] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.909635][ T32] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 140.909665][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.909684][ T32] usb 4-1: Product: syz [ 140.909698][ T32] usb 4-1: Manufacturer: syz [ 140.909710][ T32] usb 4-1: SerialNumber: syz [ 140.925164][ T32] usb 4-1: config 0 descriptor?? [ 140.935953][ T32] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 141.928111][ T6579] sg_write: data in/out 417792/136 bytes for SCSI command 0x0-- guessing data in; [ 141.928111][ T6579] program syz.0.283 not setting count and/or reply_len properly [ 142.426270][ T56] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.503138][ T6587] netlink: 4256 bytes leftover after parsing attributes in process `syz.0.287'. [ 142.503183][ T6587] netlink: 4256 bytes leftover after parsing attributes in process `syz.0.287'. [ 142.765320][ T5620] Bluetooth: hci4: command tx timeout [ 143.021712][ T821] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 143.172569][ T56] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.185895][ T821] usb 1-1: Using ep0 maxpacket: 32 [ 143.198933][ T821] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 143.198966][ T821] usb 1-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 143.198991][ T821] usb 1-1: config 0 interface 0 has no altsetting 0 [ 143.199023][ T821] usb 1-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 143.199044][ T821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.252100][ T821] usb 1-1: config 0 descriptor?? [ 143.489404][ T6467] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.500601][ T6467] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.501099][ T6467] bridge_slave_0: entered allmulticast mode [ 143.583336][ T6467] bridge_slave_0: entered promiscuous mode [ 143.702018][ T6467] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.702334][ T6467] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.702631][ T6467] bridge_slave_1: entered allmulticast mode [ 143.740786][ T6467] bridge_slave_1: entered promiscuous mode [ 143.742759][ T821] elecom 0003:056E:00FB.0001: ignoring exceeding usage max [ 143.753345][ T821] elecom 0003:056E:00FB.0001: unknown main item tag 0x0 [ 143.753385][ T821] elecom 0003:056E:00FB.0001: unknown main item tag 0x0 [ 143.753412][ T821] elecom 0003:056E:00FB.0001: unknown main item tag 0x0 [ 143.753437][ T821] elecom 0003:056E:00FB.0001: unknown main item tag 0x0 [ 143.753462][ T821] elecom 0003:056E:00FB.0001: unknown main item tag 0x0 [ 143.753552][ T821] elecom 0003:056E:00FB.0001: unknown main item tag 0x0 [ 143.753590][ T821] elecom 0003:056E:00FB.0001: unknown main item tag 0x0 [ 143.767192][ T821] elecom 0003:056E:00FB.0001: unknown main item tag 0x0 [ 143.767230][ T821] elecom 0003:056E:00FB.0001: item fetching failed at offset 38/40 [ 143.768437][ T821] elecom 0003:056E:00FB.0001: probe with driver elecom failed with error -22 [ 143.922960][ T5720] usb 1-1: USB disconnect, device number 15 [ 144.078601][ T6603] sg_write: data in/out 483328/136 bytes for SCSI command 0x0-- guessing data in; [ 144.078601][ T6603] program syz.1.292 not setting count and/or reply_len properly [ 144.134815][ T56] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.399519][ T6467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.438212][ T6467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.803656][ T6467] team0: Port device team_slave_0 added [ 144.854325][ T32] gspca_stk1135: reg_w 0x19 err -71 [ 144.855363][ T32] gspca_stk1135: serial bus timeout: status=0x00 [ 144.855376][ T32] gspca_stk1135: Sensor write failed [ 144.855401][ T32] gspca_stk1135: serial bus timeout: status=0x00 [ 144.855410][ T32] gspca_stk1135: Sensor write failed [ 144.855435][ T32] gspca_stk1135: serial bus timeout: status=0x00 [ 144.855444][ T32] gspca_stk1135: Sensor read failed [ 144.855469][ T32] gspca_stk1135: serial bus timeout: status=0x00 [ 144.855477][ T32] gspca_stk1135: Sensor read failed [ 144.855484][ T32] gspca_stk1135: Detected sensor type unknown (0x0) [ 144.855512][ T32] gspca_stk1135: serial bus timeout: status=0x00 [ 144.855520][ T32] gspca_stk1135: Sensor read failed [ 144.855545][ T32] gspca_stk1135: serial bus timeout: status=0x00 [ 144.855554][ T32] gspca_stk1135: Sensor read failed [ 144.855578][ T32] gspca_stk1135: serial bus timeout: status=0x00 [ 144.855586][ T32] gspca_stk1135: Sensor write failed [ 144.855610][ T32] gspca_stk1135: serial bus timeout: status=0x00 [ 144.855619][ T32] gspca_stk1135: Sensor write failed [ 144.855702][ T32] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 144.858505][ T6467] team0: Port device team_slave_1 added [ 144.985596][ T32] usb 4-1: USB disconnect, device number 13 [ 144.991438][ T5620] Bluetooth: hci4: command tx timeout [ 145.608326][ T6622] sg_write: data in/out 483328/136 bytes for SCSI command 0x0-- guessing data in; [ 145.608326][ T6622] program syz.0.300 not setting count and/or reply_len properly [ 145.657739][ T6467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.657754][ T6467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.657778][ T6467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.756594][ T6467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.756610][ T6467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.756633][ T6467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.254073][ T6467] hsr_slave_0: entered promiscuous mode [ 146.256251][ T6467] hsr_slave_1: entered promiscuous mode [ 146.257926][ T6467] debugfs: 'hsr0' already exists in 'hsr' [ 146.257948][ T6467] Cannot create hsr debugfs directory [ 146.501433][ T56] bridge_slave_1: left allmulticast mode [ 146.538185][ T56] bridge_slave_1: left promiscuous mode [ 146.547703][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.905901][ T56] bridge_slave_0: left allmulticast mode [ 146.905936][ T56] bridge_slave_0: left promiscuous mode [ 146.906191][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.072912][ T5713] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 147.269073][ T5713] usb 2-1: unable to get BOS descriptor or descriptor too short [ 147.270152][ T5713] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.270174][ T5713] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 147.304687][ T5713] usb 2-1: string descriptor 0 read error: -22 [ 147.304848][ T5713] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 147.304867][ T5713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.331384][ T32] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 147.382108][ T5713] usb 2-1: selecting invalid altsetting 1 [ 147.391294][ T5713] usb 2-1: unit 6 not found! [ 147.523876][ T32] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 147.523906][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.523979][ T32] usb 1-1: Product: syz [ 147.523994][ T32] usb 1-1: Manufacturer: syz [ 147.524007][ T32] usb 1-1: SerialNumber: syz [ 147.588375][ T32] usb 1-1: config 0 descriptor?? [ 147.611883][ T32] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 148.503799][ T5713] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 148.831873][ T5713] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 148.852210][ T5713] usb 2-1: USB disconnect, device number 17 [ 148.872050][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.965648][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.025852][ T56] bond0 (unregistering): Released all slaves [ 151.244726][ T5270] 8021q: adding VLAN 0 to HW filter on device eth1 [ 151.437967][ T5598] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 151.483236][ T32] gspca_stk1135: reg_w 0x19 err -71 [ 151.484289][ T32] gspca_stk1135: serial bus timeout: status=0x00 [ 151.484299][ T32] gspca_stk1135: Sensor write failed [ 151.484324][ T32] gspca_stk1135: serial bus timeout: status=0x00 [ 151.484333][ T32] gspca_stk1135: Sensor write failed [ 151.484357][ T32] gspca_stk1135: serial bus timeout: status=0x00 [ 151.484366][ T32] gspca_stk1135: Sensor read failed [ 151.484390][ T32] gspca_stk1135: serial bus timeout: status=0x00 [ 151.484399][ T32] gspca_stk1135: Sensor read failed [ 151.484406][ T32] gspca_stk1135: Detected sensor type unknown (0x0) [ 151.484434][ T32] gspca_stk1135: serial bus timeout: status=0x00 [ 151.484443][ T32] gspca_stk1135: Sensor read failed [ 151.484468][ T32] gspca_stk1135: serial bus timeout: status=0x00 [ 151.484476][ T32] gspca_stk1135: Sensor read failed [ 151.484500][ T32] gspca_stk1135: serial bus timeout: status=0x00 [ 151.484514][ T32] gspca_stk1135: Sensor write failed [ 151.484539][ T32] gspca_stk1135: serial bus timeout: status=0x00 [ 151.484547][ T32] gspca_stk1135: Sensor write failed [ 151.484628][ T32] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 151.619655][ T32] usb 1-1: USB disconnect, device number 16 [ 151.651079][ T5598] usb 2-1: config 0 has no interfaces? [ 151.655919][ T5598] usb 2-1: New USB device found, idVendor=2040, idProduct=8265, bcdDevice=b5.a3 [ 151.655946][ T5598] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.655966][ T5598] usb 2-1: Product: syz [ 151.655980][ T5598] usb 2-1: Manufacturer: syz [ 151.656000][ T5598] usb 2-1: SerialNumber: syz [ 151.847737][ T5598] usb 2-1: config 0 descriptor?? [ 152.117144][ T5785] usb 2-1: USB disconnect, device number 18 [ 153.280455][ T5270] 8021q: adding VLAN 0 to HW filter on device eth2 [ 153.327855][ T32] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 153.489086][ T32] usb 1-1: unable to get BOS descriptor or descriptor too short [ 153.490349][ T32] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.490372][ T32] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 153.537469][ T32] usb 1-1: string descriptor 0 read error: -22 [ 153.537604][ T32] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 153.537628][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.587827][ T32] usb 1-1: selecting invalid altsetting 1 [ 153.588622][ T32] usb 1-1: unit 6 not found! [ 153.646984][ T56] hsr_slave_0: left promiscuous mode [ 153.689630][ T56] hsr_slave_1: left promiscuous mode [ 153.721915][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.734756][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.811224][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.811250][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.025095][ T6702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.319'. [ 154.221991][ T56] veth1_macvtap: left promiscuous mode [ 154.260832][ T56] veth0_macvtap: left promiscuous mode [ 154.284938][ T56] veth1_vlan: left promiscuous mode [ 154.326700][ T56] veth0_vlan: left promiscuous mode [ 154.369121][ T6697] input: syz1 as /devices/virtual/input/input8 [ 154.750548][ T32] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 154.920133][ T32] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 154.954463][ T32] usb 1-1: USB disconnect, device number 17 [ 156.501627][ T56] team0 (unregistering): Port device team_slave_1 removed [ 156.565611][ T56] team0 (unregistering): Port device team_slave_0 removed [ 157.087623][ T5270] 8021q: adding VLAN 0 to HW filter on device eth3 [ 157.291964][ T6467] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 157.351734][ T6467] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 157.358706][ T6467] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 157.388102][ T32] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 157.457526][ T6467] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 157.462437][ T6467] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 157.540654][ T6467] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 157.559180][ T32] usb 2-1: Using ep0 maxpacket: 32 [ 157.564237][ T6467] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 157.569196][ T32] usb 2-1: config 1 interface 0 has no altsetting 0 [ 157.574073][ T32] usb 2-1: New USB device found, idVendor=05ac, idProduct=0249, bcdDevice= 0.40 [ 157.574111][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.574130][ T32] usb 2-1: Product: syz [ 157.574144][ T32] usb 2-1: Manufacturer: syz [ 157.574159][ T32] usb 2-1: SerialNumber: syz [ 157.732440][ T6467] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 157.964430][ T32] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input9 [ 158.100444][ T4960] bcm5974 2-1:1.0: could not read from device [ 158.184906][ T32] usb 2-1: USB disconnect, device number 19 [ 158.310165][ T4960] bcm5974 2-1:1.0: could not read from device [ 159.000816][ T6467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.123697][ T6467] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.170985][ T1413] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.171149][ T1413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.328782][ T1427] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.328977][ T1427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.436693][ T5270] 8021q: adding VLAN 0 to HW filter on device eth4 [ 160.440537][ T6776] FAULT_INJECTION: forcing a failure. [ 160.440537][ T6776] name failslab, interval 1, probability 0, space 0, times 0 [ 160.440588][ T6776] CPU: 1 UID: 0 PID: 6776 Comm: syz.1.332 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 160.440608][ T6776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 160.440625][ T6776] Call Trace: [ 160.440636][ T6776] [ 160.440644][ T6776] dump_stack_lvl+0xe8/0x150 [ 160.440671][ T6776] should_fail_ex+0x46b/0x600 [ 160.440701][ T6776] should_failslab+0xa8/0x100 [ 160.440726][ T6776] __kmalloc_noprof+0xdf/0x7b0 [ 160.440748][ T6776] ? tomoyo_encode+0x28b/0x550 [ 160.440774][ T6776] tomoyo_encode+0x28b/0x550 [ 160.440797][ T6776] tomoyo_mount_permission+0x3a2/0x9d0 [ 160.440819][ T6776] ? stack_depot_save_flags+0x33/0x810 [ 160.440844][ T6776] ? tomoyo_mount_permission+0x2b3/0x9d0 [ 160.440864][ T6776] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 160.440929][ T6776] security_sb_mount+0xe4/0x320 [ 160.440954][ T6776] path_mount+0xbc/0x10e0 [ 160.440976][ T6776] ? user_path_at+0xd4/0x160 [ 160.441001][ T6776] ? user_path_at+0xd4/0x160 [ 160.441025][ T6776] __se_sys_mount+0x31d/0x420 [ 160.441053][ T6776] ? __pfx___se_sys_mount+0x10/0x10 [ 160.441082][ T6776] ? __x64_sys_mount+0x20/0xc0 [ 160.441103][ T6776] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.441124][ T6776] do_syscall_64+0x174/0x580 [ 160.441151][ T6776] ? trace_irq_disable+0x3b/0x140 [ 160.441172][ T6776] ? clear_bhb_loop+0x40/0x90 [ 160.441194][ T6776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.441212][ T6776] RIP: 0033:0x7fb186b0ce59 [ 160.441236][ T6776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.441248][ T6776] RSP: 002b:00007fb184d66028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 160.441270][ T6776] RAX: ffffffffffffffda RBX: 00007fb186d85fa0 RCX: 00007fb186b0ce59 [ 160.441283][ T6776] RDX: 0000200000000100 RSI: 0000200000000080 RDI: 00002000000000c0 [ 160.441296][ T6776] RBP: 00007fb184d66090 R08: 0000000000000000 R09: 0000000000000000 [ 160.441307][ T6776] R10: 0000000000208000 R11: 0000000000000246 R12: 0000000000000001 [ 160.441318][ T6776] R13: 00007fb186d86038 R14: 00007fb186d85fa0 R15: 00007ffe0af03e68 [ 160.441347][ T6776] [ 160.752545][ T6467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.885838][ T6782] ADFS-fs (loop1): error: unable to read block 3, try 0 [ 161.540168][ T6467] veth0_vlan: entered promiscuous mode [ 161.567109][ T6467] veth1_vlan: entered promiscuous mode [ 161.643981][ T6467] veth0_macvtap: entered promiscuous mode [ 161.661517][ T6467] veth1_macvtap: entered promiscuous mode [ 161.705494][ T6467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.733857][ T6467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.785023][ T146] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.786237][ T146] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.788123][ T146] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.852564][ T146] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.731693][ T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 162.732693][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.732711][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.763988][ T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 162.783189][ T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 162.804729][ T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 162.816496][ T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 163.215884][ T6564] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.215902][ T6564] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.025728][ T6800] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.026162][ T6800] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.026773][ T6800] bridge_slave_0: entered allmulticast mode [ 165.030259][ T6800] bridge_slave_0: entered promiscuous mode [ 165.042225][ T6800] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.042565][ T6800] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.042823][ T6800] bridge_slave_1: entered allmulticast mode [ 165.046348][ T6800] bridge_slave_1: entered promiscuous mode [ 165.084699][ T5620] Bluetooth: hci3: command tx timeout [ 165.156395][ T6800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.188842][ T6800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.239015][ T5785] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 165.323229][ T6800] team0: Port device team_slave_0 added [ 165.332757][ T6800] team0: Port device team_slave_1 added [ 165.401233][ T5785] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 165.401262][ T5785] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.401282][ T5785] usb 2-1: Product: syz [ 165.401296][ T5785] usb 2-1: Manufacturer: syz [ 165.401307][ T5785] usb 2-1: SerialNumber: syz [ 165.412667][ T5785] usb 2-1: config 0 descriptor?? [ 165.485893][ T5785] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 165.512335][ T6800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.512351][ T6800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.512375][ T6800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.515696][ T6800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.515708][ T6800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.515727][ T6800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.287155][ T6800] hsr_slave_0: entered promiscuous mode [ 166.298459][ T6800] hsr_slave_1: entered promiscuous mode [ 166.301762][ T6800] debugfs: 'hsr0' already exists in 'hsr' [ 166.301786][ T6800] Cannot create hsr debugfs directory [ 166.394761][ T6836] netlink: 128 bytes leftover after parsing attributes in process `syz.4.340'. [ 166.412787][ T6836] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 167.057668][ T6800] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 167.123619][ T6800] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 167.141341][ T6800] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 167.233984][ T6800] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 167.237703][ T6800] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 167.295418][ T6800] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 167.309239][ T5620] Bluetooth: hci3: command tx timeout [ 167.320997][ T6800] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 167.421876][ T6800] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 167.697921][ T6800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.775561][ T6800] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.839134][ T1413] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.839455][ T1413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.978536][ T1413] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.978852][ T1413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.404330][ T5785] gspca_stk1135: reg_w 0x19 err -71 [ 169.405370][ T5785] gspca_stk1135: serial bus timeout: status=0x00 [ 169.405383][ T5785] gspca_stk1135: Sensor write failed [ 169.405408][ T5785] gspca_stk1135: serial bus timeout: status=0x00 [ 169.405417][ T5785] gspca_stk1135: Sensor write failed [ 169.405443][ T5785] gspca_stk1135: serial bus timeout: status=0x00 [ 169.405452][ T5785] gspca_stk1135: Sensor read failed [ 169.405476][ T5785] gspca_stk1135: serial bus timeout: status=0x00 [ 169.405486][ T5785] gspca_stk1135: Sensor read failed [ 169.405493][ T5785] gspca_stk1135: Detected sensor type unknown (0x0) [ 169.405526][ T5785] gspca_stk1135: serial bus timeout: status=0x00 [ 169.405535][ T5785] gspca_stk1135: Sensor read failed [ 169.405576][ T5785] gspca_stk1135: serial bus timeout: status=0x00 [ 169.405585][ T5785] gspca_stk1135: Sensor read failed [ 169.405610][ T5785] gspca_stk1135: serial bus timeout: status=0x00 [ 169.405618][ T5785] gspca_stk1135: Sensor write failed [ 169.405643][ T5785] gspca_stk1135: serial bus timeout: status=0x00 [ 169.405652][ T5785] gspca_stk1135: Sensor write failed [ 169.405736][ T5785] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 169.460563][ T5785] usb 2-1: USB disconnect, device number 20 [ 169.534460][ T5620] Bluetooth: hci3: command tx timeout [ 169.714896][ T6873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.348'. [ 169.948452][ T6884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.350'. [ 170.182080][ T6890] netlink: 'syz.1.352': attribute type 27 has an invalid length. [ 170.419895][ T1181] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.731654][ T6800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.997921][ T6908] sg_write: data in/out 417792/136 bytes for SCSI command 0x0-- guessing data in; [ 170.997921][ T6908] program syz.1.358 not setting count and/or reply_len properly [ 171.147242][ T1181] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.720595][ T1181] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.754493][ T5620] Bluetooth: hci3: command tx timeout [ 171.835363][ T5720] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 171.999794][ T5720] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 171.999825][ T5720] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.044377][ T5720] usb 1-1: config 0 descriptor?? [ 172.087327][ T5720] cp210x 1-1:0.0: cp210x converter detected [ 172.275058][ T6942] sg_write: data in/out 417792/136 bytes for SCSI command 0x0-- guessing data in; [ 172.275058][ T6942] program syz.4.366 not setting count and/or reply_len properly [ 172.525268][ T6948] netlink: 104 bytes leftover after parsing attributes in process `syz.4.367'. [ 172.553609][ T1181] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.557515][ T32] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 172.741089][ T32] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.741141][ T32] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 172.741218][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 172.741244][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 172.741266][ T32] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 172.746148][ T32] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 172.746173][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 172.746190][ T32] usb 2-1: Product: syz [ 172.746203][ T32] usb 2-1: Manufacturer: syz [ 172.746215][ T32] usb 2-1: SerialNumber: syz [ 172.809965][ T6800] veth0_vlan: entered promiscuous mode [ 172.871735][ T32] usb 2-1: config 0 descriptor?? [ 173.009000][ T6800] veth1_vlan: entered promiscuous mode [ 173.092086][ T32] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 173.092166][ T32] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 173.259847][ T6800] veth0_macvtap: entered promiscuous mode [ 173.287758][ T6800] veth1_macvtap: entered promiscuous mode [ 173.307402][ T32] radio-si470x 2-1:0.0: software version 0, hardware version 0 [ 173.307426][ T32] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 173.307446][ T32] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 173.523355][ T32] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 173.724426][ T6800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.849460][ T6800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.292154][ T1427] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.300379][ T1427] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.325223][ T1427] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.334750][ T1427] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.506924][ T32] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 174.524524][ T32] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 174.679216][ T1181] bridge_slave_1: left allmulticast mode [ 174.679247][ T1181] bridge_slave_1: left promiscuous mode [ 174.709206][ T1181] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.837352][ T6991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.838056][ T6991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.957389][ T1181] bridge_slave_0: left allmulticast mode [ 174.957424][ T1181] bridge_slave_0: left promiscuous mode [ 174.957672][ T1181] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.295122][ T6998] sg_write: data in/out 417792/136 bytes for SCSI command 0x0-- guessing data in; [ 175.295122][ T6998] program syz.4.374 not setting count and/or reply_len properly [ 175.639442][ T7003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.640988][ T7003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.692342][ T5597] usb 2-1: USB disconnect, device number 21 [ 176.372867][ T1181] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.437037][ T1181] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.488964][ T1181] bond0 (unregistering): Released all slaves [ 176.997844][ T7021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.028317][ T7021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.665756][ T5720] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -110 [ 177.671326][ T5720] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -32 [ 177.671383][ T5720] cp210x 1-1:0.0: GPIO initialisation failed: -32 [ 177.856842][ T5720] usb 1-1: cp210x converter now attached to ttyUSB0 [ 177.979743][ T7033] sg_write: data in/out 483328/136 bytes for SCSI command 0x0-- guessing data in; [ 177.979743][ T7033] program syz.4.382 not setting count and/or reply_len properly [ 178.064803][ T1413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.064822][ T1413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.424688][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 178.635277][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 178.648031][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.648056][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 178.679890][ T7050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.386'. [ 178.679914][ T7050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.386'. [ 178.702586][ T9] usb 2-1: string descriptor 0 read error: -22 [ 178.702708][ T9] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 178.702726][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.747431][ T9] usb 2-1: selecting invalid altsetting 1 [ 178.748225][ T9] usb 2-1: unit 6 not found! [ 179.005988][ T7052] netlink: 92 bytes leftover after parsing attributes in process `syz.4.387'. [ 179.231317][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.231335][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.262694][ T5720] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 179.418929][ T5720] usb 5-1: Using ep0 maxpacket: 32 [ 179.424789][ T5720] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.424837][ T5720] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 179.424859][ T5720] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.436205][ T5720] usb 5-1: config 0 descriptor?? [ 179.518199][ T5720] hub 5-1:0.0: USB hub found [ 179.627823][ T1181] hsr_slave_0: left promiscuous mode [ 179.675137][ T1181] hsr_slave_1: left promiscuous mode [ 179.676885][ T1181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.676964][ T1181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.716363][ T5720] hub 5-1:0.0: 1 port detected [ 179.750141][ T1181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.750169][ T1181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.946430][ T9] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 180.150337][ T1181] veth1_macvtap: left promiscuous mode [ 180.150429][ T1181] veth0_macvtap: left promiscuous mode [ 180.150692][ T1181] veth1_vlan: left promiscuous mode [ 180.150876][ T1181] veth0_vlan: left promiscuous mode [ 180.362995][ T9] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 180.373606][ T7068] capability: warning: `syz.0.388' uses 32-bit capabilities (legacy support in use) [ 180.391715][ T9] usb 2-1: USB disconnect, device number 22 [ 180.861471][ T9] usb 5-1: USB disconnect, device number 2 [ 181.322435][ T1181] team0 (unregistering): Port device team_slave_1 removed [ 181.352147][ T7078] netlink: 'syz.1.392': attribute type 15 has an invalid length. [ 181.352168][ T7078] netlink: 666 bytes leftover after parsing attributes in process `syz.1.392'. [ 181.365305][ T1181] team0 (unregistering): Port device team_slave_0 removed [ 181.788065][ T5270] 8021q: adding VLAN 0 to HW filter on device eth5 [ 182.374800][ T32] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 182.408787][ T7111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.447054][ T7111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.580957][ T32] usb 5-1: unable to get BOS descriptor or descriptor too short [ 182.590550][ T32] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.590575][ T32] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 182.620245][ T32] usb 5-1: string descriptor 0 read error: -22 [ 182.620401][ T32] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 182.620423][ T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.644992][ T32] usb 5-1: selecting invalid altsetting 1 [ 182.664754][ T32] usb 5-1: unit 6 not found! [ 183.410147][ T5270] 8021q: adding VLAN 0 to HW filter on device eth6 [ 183.770346][ T32] usb 5-1: 2:0: failed to get current value for ch 0 (-71) [ 183.827528][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 183.962460][ T10] usb 6-1: device descriptor read/64, error -71 [ 184.038632][ T7151] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 184.039153][ T7151] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 184.043706][ T7151] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 184.044021][ T7151] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 184.045828][ T7151] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 184.045987][ T7151] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 184.064309][ T32] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 184.112859][ T32] usb 5-1: USB disconnect, device number 3 [ 184.150173][ T7151] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 184.150358][ T7151] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 184.150378][ T7151] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 184.282125][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 184.446671][ T10] usb 6-1: device descriptor read/64, error -71 [ 184.532282][ T5270] 8021q: adding VLAN 0 to HW filter on device eth7 [ 184.580202][ T10] usb usb6-port1: attempt power cycle [ 184.635495][ T5597] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 184.856506][ T5597] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 184.856538][ T5597] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.856558][ T5597] usb 2-1: Product: syz [ 184.856572][ T5597] usb 2-1: Manufacturer: syz [ 184.856585][ T5597] usb 2-1: SerialNumber: syz [ 184.922883][ T5597] usb 2-1: config 0 descriptor?? [ 184.944858][ T5597] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 184.955694][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 184.989534][ T10] usb 6-1: device descriptor read/8, error -71 [ 185.172178][ T5270] 8021q: adding VLAN 0 to HW filter on device eth8 [ 185.276690][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 185.299118][ T10] usb 6-1: device descriptor read/8, error -71 [ 185.417675][ T10] usb usb6-port1: unable to enumerate USB device [ 185.960346][ T5720] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 186.099355][ T5720] usb 5-1: device descriptor read/64, error -71 [ 186.355854][ T5720] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 186.495902][ T5720] usb 5-1: device descriptor read/64, error -71 [ 186.617261][ T5720] usb usb5-port1: attempt power cycle [ 186.741477][ T7197] sg_write: data in/out 483328/136 bytes for SCSI command 0x0-- guessing data in; [ 186.741477][ T7197] program syz.0.417 not setting count and/or reply_len properly [ 186.975841][ T5720] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 186.998157][ T5720] usb 5-1: device descriptor read/8, error -71 [ 187.253725][ T5720] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 187.275893][ T5720] usb 5-1: device descriptor read/8, error -71 [ 187.392992][ T5720] usb usb5-port1: unable to enumerate USB device [ 187.415749][ T37] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 187.512615][ T7209] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 187.575346][ T37] usb 6-1: Using ep0 maxpacket: 32 [ 187.583740][ T37] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.583765][ T37] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 187.605875][ T37] usb 6-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 187.605905][ T37] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.605924][ T37] usb 6-1: Product: syz [ 187.605938][ T37] usb 6-1: Manufacturer: syz [ 187.605953][ T37] usb 6-1: SerialNumber: syz [ 187.624632][ T37] usb 6-1: config 0 descriptor?? [ 187.695414][ T7212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.421'. [ 187.774232][ T37] viperboard 6-1:0.0: version 0.00 found at bus 006 address 006 [ 187.995517][ T37] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 187.995548][ T37] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 188.023164][ T37] usb 6-1: USB disconnect, device number 6 [ 188.829729][ T5597] gspca_stk1135: reg_w 0x19 err -71 [ 188.830769][ T5597] gspca_stk1135: serial bus timeout: status=0x00 [ 188.830783][ T5597] gspca_stk1135: Sensor write failed [ 188.830809][ T5597] gspca_stk1135: serial bus timeout: status=0x00 [ 188.830818][ T5597] gspca_stk1135: Sensor write failed [ 188.830842][ T5597] gspca_stk1135: serial bus timeout: status=0x00 [ 188.830849][ T5597] gspca_stk1135: Sensor read failed [ 188.830873][ T5597] gspca_stk1135: serial bus timeout: status=0x00 [ 188.830882][ T5597] gspca_stk1135: Sensor read failed [ 188.830888][ T5597] gspca_stk1135: Detected sensor type unknown (0x0) [ 188.830923][ T5597] gspca_stk1135: serial bus timeout: status=0x00 [ 188.830932][ T5597] gspca_stk1135: Sensor read failed [ 188.830957][ T5597] gspca_stk1135: serial bus timeout: status=0x00 [ 188.830966][ T5597] gspca_stk1135: Sensor read failed [ 188.830990][ T5597] gspca_stk1135: serial bus timeout: status=0x00 [ 188.830999][ T5597] gspca_stk1135: Sensor write failed [ 188.831020][ T5597] gspca_stk1135: serial bus timeout: status=0x00 [ 188.831029][ T5597] gspca_stk1135: Sensor write failed [ 188.832764][ T5597] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 188.956130][ T5597] usb 2-1: USB disconnect, device number 23 [ 189.038017][ T7231] program syz.4.428 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 189.202728][ T37] hid-generic 0005:0001:03FF.0002: unexpected long global item [ 189.203204][ T37] hid-generic 0005:0001:03FF.0002: probe with driver hid-generic failed with error -22 [ 189.423713][ T6799] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 190.642140][ T6799] usb 6-1: not running at top speed; connect to a high speed hub [ 190.671076][ T6799] usb 6-1: config 8 has an invalid interface number: 53 but max is 0 [ 190.671104][ T6799] usb 6-1: config 8 has no interface number 0 [ 190.671148][ T6799] usb 6-1: config 8 interface 53 altsetting 3 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 190.671175][ T6799] usb 6-1: config 8 interface 53 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 190.671195][ T6799] usb 6-1: config 8 interface 53 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 190.671216][ T6799] usb 6-1: config 8 interface 53 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 190.671234][ T6799] usb 6-1: config 8 interface 53 altsetting 3 has a duplicate endpoint with address 0x6, skipping [ 190.671257][ T6799] usb 6-1: config 8 interface 53 altsetting 3 has a duplicate endpoint with address 0x5, skipping [ 190.671278][ T6799] usb 6-1: config 8 interface 53 altsetting 3 has a duplicate endpoint with address 0x5, skipping [ 190.671309][ T6799] usb 6-1: config 8 interface 53 has no altsetting 0 [ 190.724424][ T6799] usb 6-1: Dual-Role OTG device on HNP port [ 190.724773][ T6799] usb 6-1: New USB device found, idVendor=1b3d, idProduct=0106, bcdDevice=a3.07 [ 190.724797][ T6799] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.724816][ T6799] usb 6-1: Product: syz [ 190.724829][ T6799] usb 6-1: Manufacturer: 柔ꊂ䙼鯈ﲪ﹀瑇﫷Ä걕ᚿ酩ê˜ì°ˆãœ¯ê§ŠêŸ¦é’±â‘²à½’那趌é‚쌙頗㙓䤻ꛊ༪㔻纛踓⸕솩ê´ëâ«ìšê½„뀜㥋缵궺圮ം엧î‘䧤丨ë¶Ô³áŽ¹ [ 190.725106][ T6799] usb 6-1: SerialNumber: syz [ 190.762541][ T7235] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 190.766870][ T7235] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 190.893652][ T7248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.434'. [ 191.045206][ T6799] ftdi_sio 6-1:8.53: FTDI USB Serial Device converter detected [ 191.060489][ T6799] ftdi_sio ttyUSB1: unknown device type: 0xa307 [ 191.096011][ T6799] usb 6-1: USB disconnect, device number 7 [ 191.129405][ T6799] ftdi_sio 6-1:8.53: device disconnected [ 191.295842][ T5712] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 191.398369][ T7261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.439'. [ 191.459889][ T5712] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 191.461677][ T5712] usb 2-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 191.461703][ T5712] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 191.461719][ T5712] usb 2-1: Manufacturer: syz [ 191.461730][ T5712] usb 2-1: SerialNumber: syz [ 192.101123][ T60] Bluetooth: hci4: unexpected cc 0x0c14 length: 33 < 249 [ 192.418391][ T7286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.419052][ T7286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.489691][ T7286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.490313][ T7286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.609275][ T5597] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 192.773644][ T5597] usb 6-1: unable to get BOS descriptor or descriptor too short [ 192.784619][ T5597] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.784645][ T5597] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 192.816062][ T5597] usb 6-1: string descriptor 0 read error: -22 [ 192.816722][ T5597] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 192.816748][ T5597] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.936026][ T5597] usb 6-1: selecting invalid altsetting 1 [ 192.939660][ T5597] usb 6-1: unit 6 not found! [ 193.219863][ T60] Bluetooth: hci3: command 0x0405 tx timeout [ 194.181420][ T5597] usb 6-1: 2:0: failed to get current value for ch 0 (-71) [ 194.299255][ T5712] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 194.320103][ T7309] afs: Unknown parameter 'autïcell' [ 194.332969][ T5597] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 194.351913][ T5597] usb 6-1: USB disconnect, device number 8 [ 194.357650][ T5712] usb 2-1: unit 2 not found! [ 194.426434][ T5762] udevd[5762]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 194.484300][ T5712] usb 2-1: disable ehci-hcd to run US-144 [ 194.502578][ T5712] usb 2-1: USB disconnect, device number 24 [ 194.596125][ T5778] udevd[5778]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 194.980941][ T7323] sg_write: data in/out 24576/136 bytes for SCSI command 0x0-- guessing data in; [ 194.980941][ T7323] program syz.5.453 not setting count and/or reply_len properly [ 195.004473][ T5712] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 195.200335][ T5712] usb 2-1: config 0 has an invalid interface number: 252 but max is 0 [ 195.200363][ T5712] usb 2-1: config 0 has no interface number 0 [ 195.200394][ T5712] usb 2-1: too many endpoints for config 0 interface 252 altsetting 124: 133, using maximum allowed: 30 [ 195.200439][ T5712] usb 2-1: config 0 interface 252 altsetting 124 has 0 endpoint descriptors, different from the interface descriptor's value: 133 [ 195.200466][ T5712] usb 2-1: config 0 interface 252 has no altsetting 0 [ 195.200507][ T5712] usb 2-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 195.200530][ T5712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.205315][ T5712] usb 2-1: config 0 descriptor?? [ 195.461889][ T5712] usb 2-1: string descriptor 0 read error: -71 [ 195.463930][ T7334] netlink: 'syz.0.457': attribute type 10 has an invalid length. [ 195.463949][ T7334] netlink: 168 bytes leftover after parsing attributes in process `syz.0.457'. [ 195.616779][ T5712] usb 2-1: USB disconnect, device number 25 [ 195.889332][ T7346] sg_write: data in/out 24576/136 bytes for SCSI command 0x0-- guessing data in; [ 195.889332][ T7346] program syz.0.463 not setting count and/or reply_len properly [ 196.130481][ T5597] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 196.186162][ T7356] trusted_key: encrypted_key: master key parameter '' is invalid [ 196.318294][ T5597] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.318328][ T5597] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.318351][ T5597] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 196.318390][ T5597] usb 5-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 196.318421][ T5597] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.373744][ T5597] usb 5-1: config 0 descriptor?? [ 196.828895][ T5597] macally 0003:060B:0001.0003: unknown main item tag 0x0 [ 196.828931][ T5597] macally 0003:060B:0001.0003: unknown main item tag 0x0 [ 196.828955][ T5597] macally 0003:060B:0001.0003: unknown main item tag 0x0 [ 196.828979][ T5597] macally 0003:060B:0001.0003: unknown main item tag 0x0 [ 196.829005][ T5597] macally 0003:060B:0001.0003: unknown main item tag 0x0 [ 196.829031][ T5597] macally 0003:060B:0001.0003: unknown main item tag 0x0 [ 196.829056][ T5597] macally 0003:060B:0001.0003: unknown main item tag 0x0 [ 196.829082][ T5597] macally 0003:060B:0001.0003: unknown main item tag 0x0 [ 196.829108][ T5597] macally 0003:060B:0001.0003: unknown main item tag 0x0 [ 196.829148][ T5597] macally 0003:060B:0001.0003: unknown main item tag 0x0 [ 196.962433][ T5597] macally 0003:060B:0001.0003: hidraw0: USB HID v0.00 Device [HID 060b:0001] on usb-dummy_hcd.4-1/input0 [ 197.036525][ T7344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.037037][ T7344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.119047][ T7344] input: syz0 as /devices/virtual/input/input11 [ 197.214042][ T7386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.214521][ T7386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.241721][ T7386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.242048][ T7386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.480629][ T32] usb 5-1: USB disconnect, device number 8 [ 197.667759][ T7401] sg_write: data in/out 24576/136 bytes for SCSI command 0x0-- guessing data in; [ 197.667759][ T7401] program syz.1.472 not setting count and/or reply_len properly [ 197.934926][ T7410] netlink: 'syz.4.475': attribute type 16 has an invalid length. [ 197.934956][ T7410] netlink: 152 bytes leftover after parsing attributes in process `syz.4.475'. [ 197.959851][ T7410] binder: 7409:7410 ioctl c018620c 200000000380 returned -1 [ 198.061398][ T5597] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 198.242441][ T5597] usb 2-1: Using ep0 maxpacket: 8 [ 198.248992][ T5597] usb 2-1: unable to get BOS descriptor or descriptor too short [ 198.252683][ T5597] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.252706][ T5597] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 198.252754][ T5597] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 198.293567][ T7423] netlink: 763 bytes leftover after parsing attributes in process `syz.0.477'. [ 198.318154][ T5597] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 198.318183][ T5597] usb 2-1: New USB device strings: Mfr=1, Product=232, SerialNumber=3 [ 198.318202][ T5597] usb 2-1: Product: syz [ 198.318216][ T5597] usb 2-1: Manufacturer: syz [ 198.318229][ T5597] usb 2-1: SerialNumber: syz [ 198.350327][ T32] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 198.524661][ T32] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 198.524691][ T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.524711][ T32] usb 5-1: Product: syz [ 198.524725][ T32] usb 5-1: Manufacturer: syz [ 198.524739][ T32] usb 5-1: SerialNumber: syz [ 198.539647][ T32] usb 5-1: config 0 descriptor?? [ 198.577190][ T32] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 198.804169][ T5597] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 198.804229][ T5597] cdc_ncm 2-1:1.0: bind() failure [ 198.856822][ T5597] usb 2-1: USB disconnect, device number 26 [ 199.095029][ T7441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.095609][ T7441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.166130][ T7441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.168478][ T7441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.417205][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.417363][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.577056][ T7453] netlink: 256 bytes leftover after parsing attributes in process `syz.5.481'. [ 199.896813][ T7464] ceph: Path missing in source [ 199.921611][ T5712] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 200.091475][ T5712] usb 6-1: Using ep0 maxpacket: 8 [ 200.131065][ T5712] usb 6-1: unable to get BOS descriptor or descriptor too short [ 200.157948][ T5712] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0201, bcdDevice= 0.40 [ 200.157979][ T5712] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.157998][ T5712] usb 6-1: Product: syz [ 200.158012][ T5712] usb 6-1: Manufacturer: syz [ 200.158025][ T5712] usb 6-1: SerialNumber: syz [ 200.204800][ T7467] netlink: 'syz.0.484': attribute type 46 has an invalid length. [ 200.348389][ T7464] netlink: 9 bytes leftover after parsing attributes in process `syz.0.484'. [ 200.406185][ T5712] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 200.407672][ T5712] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 200.556962][ T5712] usb 6-1: USB disconnect, device number 9 [ 200.565728][ T7464] gretap0: entered promiscuous mode [ 200.640027][ T5778] udevd[5778]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 201.108957][ T7479] trusted_key: syz.5.490 sent an empty control message without MSG_MORE. [ 201.399794][ T7485] futex_wake_op: syz.0.489 tries to shift op by 144; fix this program [ 202.339531][ T5597] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 202.509821][ T5597] usb 6-1: Using ep0 maxpacket: 16 [ 202.521223][ T5597] usb 6-1: config 247 has an invalid interface number: 88 but max is 0 [ 202.521250][ T5597] usb 6-1: config 247 has no interface number 0 [ 202.521281][ T5597] usb 6-1: config 247 interface 88 has no altsetting 0 [ 202.546014][ T32] gspca_stk1135: reg_w 0x19 err -71 [ 202.547051][ T32] gspca_stk1135: serial bus timeout: status=0x00 [ 202.547062][ T32] gspca_stk1135: Sensor write failed [ 202.547084][ T32] gspca_stk1135: serial bus timeout: status=0x00 [ 202.547093][ T32] gspca_stk1135: Sensor write failed [ 202.547116][ T32] gspca_stk1135: serial bus timeout: status=0x00 [ 202.547125][ T32] gspca_stk1135: Sensor read failed [ 202.547146][ T32] gspca_stk1135: serial bus timeout: status=0x00 [ 202.547154][ T32] gspca_stk1135: Sensor read failed [ 202.547161][ T32] gspca_stk1135: Detected sensor type unknown (0x0) [ 202.547189][ T32] gspca_stk1135: serial bus timeout: status=0x00 [ 202.547198][ T32] gspca_stk1135: Sensor read failed [ 202.547235][ T32] gspca_stk1135: serial bus timeout: status=0x00 [ 202.547244][ T32] gspca_stk1135: Sensor read failed [ 202.547266][ T32] gspca_stk1135: serial bus timeout: status=0x00 [ 202.547274][ T32] gspca_stk1135: Sensor write failed [ 202.547298][ T32] gspca_stk1135: serial bus timeout: status=0x00 [ 202.555025][ T32] gspca_stk1135: Sensor write failed [ 202.555118][ T32] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 202.573389][ T32] usb 5-1: USB disconnect, device number 9 [ 202.673091][ T5597] usb 6-1: New USB device found, idVendor=1bc7, idProduct=0023, bcdDevice=e4.25 [ 202.673119][ T5597] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.673139][ T5597] usb 6-1: Product: syz [ 202.673153][ T5597] usb 6-1: Manufacturer: syz [ 202.673168][ T5597] usb 6-1: SerialNumber: syz [ 203.224287][ T5597] usb 6-1: USB disconnect, device number 10 [ 203.434409][ T60] Bluetooth: hci4: link tx timeout [ 203.434585][ T60] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 203.668516][ T7520] netlink: 148 bytes leftover after parsing attributes in process `syz.1.504'. [ 203.703066][ C0] Unknown status report in ack skb [ 203.729526][ T7515] netlink: 84 bytes leftover after parsing attributes in process `syz.4.503'. [ 203.890488][ T7520] netlink: 148 bytes leftover after parsing attributes in process `syz.1.504'. [ 205.341669][ T7545] syzkaller1: entered promiscuous mode [ 205.341696][ T7545] syzkaller1: entered allmulticast mode [ 205.619969][ T5614] Bluetooth: hci4: command 0x0406 tx timeout [ 205.932818][ T7550] netlink: 393 bytes leftover after parsing attributes in process `syz.4.513'. [ 207.030664][ T7565] netlink: 'syz.0.517': attribute type 10 has an invalid length. [ 207.073485][ T7565] team0: Device vxcan1 is of different type [ 207.098518][ T38] audit: type=1326 audit(1780705821.949:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7564 comm="syz.0.517" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f3580ce59 code=0x50000 [ 207.098567][ T38] audit: type=1326 audit(1780705821.949:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7564 comm="syz.0.517" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f3580ce59 code=0x50000 [ 207.098606][ T38] audit: type=1326 audit(1780705821.949:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7564 comm="syz.0.517" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f3580ce59 code=0x50000 [ 207.098645][ T38] audit: type=1326 audit(1780705821.949:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7564 comm="syz.0.517" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f3580ce59 code=0x50000 [ 207.098684][ T38] audit: type=1326 audit(1780705821.949:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7564 comm="syz.0.517" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f3580ce59 code=0x50000 [ 207.098723][ T38] audit: type=1326 audit(1780705821.949:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7564 comm="syz.0.517" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f3580ce59 code=0x50000 [ 207.098763][ T38] audit: type=1326 audit(1780705821.949:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7564 comm="syz.0.517" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f3580ce59 code=0x50000 [ 207.098800][ T38] audit: type=1326 audit(1780705821.949:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7564 comm="syz.0.517" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f4f3580ce59 code=0x50000 [ 207.098848][ T38] audit: type=1326 audit(1780705821.949:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7564 comm="syz.0.517" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f3580ce59 code=0x50000 [ 207.098887][ T38] audit: type=1326 audit(1780705821.949:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7564 comm="syz.0.517" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f3580ce59 code=0x50000 [ 207.157466][ T5614] Bluetooth: hci1: command 0x0406 tx timeout [ 207.157518][ T5620] Bluetooth: hci2: command 0x0406 tx timeout [ 207.652536][ T7569] ptrace attach of "ci-upstream-rust-kasan-gce/syz-executor exec"[6800] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ"[7569] [ 207.701257][ T7569] netlink: 12 bytes leftover after parsing attributes in process `syz.5.518'. [ 207.953088][ T7573] netlink: 56 bytes leftover after parsing attributes in process `syz.1.520'. [ 207.983465][ T37] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 208.174176][ T37] usb 6-1: Using ep0 maxpacket: 8 [ 208.198404][ T37] usb 6-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 208.198431][ T37] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 208.198449][ T37] usb 6-1: Product: syz [ 208.198462][ T37] usb 6-1: Manufacturer: syz [ 208.198474][ T37] usb 6-1: SerialNumber: syz [ 208.245750][ T37] usb 6-1: config 0 descriptor?? [ 208.271121][ T37] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 208.389614][ T32] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 208.494450][ T7569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.495968][ T7569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.497203][ T7569] netlink: 64 bytes leftover after parsing attributes in process `syz.5.518'. [ 208.557405][ T32] usb 5-1: Using ep0 maxpacket: 32 [ 208.561501][ T32] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.561531][ T32] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.561624][ T32] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 208.561647][ T32] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.624881][ T32] usb 5-1: config 0 descriptor?? [ 208.814351][ T37] gspca_sn9c2028: read1 error -110 [ 208.815034][ T37] gspca_sn9c2028: read1 error -32 [ 208.815554][ T37] gspca_sn9c2028: read1 error -32 [ 208.815871][ T37] sn9c2028 6-1:0.0: probe with driver sn9c2028 failed with error -32 [ 208.853042][ T7578] syzkaller1: entered promiscuous mode [ 208.853068][ T7578] syzkaller1: entered allmulticast mode [ 208.880185][ T5712] usb 6-1: USB disconnect, device number 11 [ 208.963536][ T32] usbhid 5-1:0.0: can't add hid device: -71 [ 208.963661][ T32] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 208.984425][ T32] usb 5-1: USB disconnect, device number 10 [ 209.614153][ T7590] netlink: 24 bytes leftover after parsing attributes in process `syz.1.525'. [ 209.882909][ T32] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 210.043161][ T32] usb 2-1: Using ep0 maxpacket: 16 [ 210.052252][ T32] usb 2-1: unable to get BOS descriptor or descriptor too short [ 210.061597][ T32] usb 2-1: config 5 has an invalid interface number: 68 but max is 0 [ 210.061624][ T32] usb 2-1: config 5 has no interface number 0 [ 210.061656][ T32] usb 2-1: config 5 interface 68 has no altsetting 0 [ 210.101441][ T32] usb 2-1: string descriptor 0 read error: -22 [ 210.101594][ T32] usb 2-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice=53.c0 [ 210.101618][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.172847][ T32] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:5.68/input/input13 [ 210.374033][ T7590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.379619][ T7590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.442671][ T4960] bcm5974 2-1:5.68: could not read from device [ 210.545848][ T32] usb 2-1: USB disconnect, device number 27 [ 211.358855][ T37] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 211.460918][ T7305] Bluetooth: hci0: Frame reassembly failed (-84) [ 211.469091][ T7305] Bluetooth: hci0: Frame reassembly failed (-84) [ 211.480227][ T7614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.480751][ T7614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.482577][ T7614] netlink: 16 bytes leftover after parsing attributes in process `syz.0.533'. [ 211.526919][ T37] usb 2-1: unable to get BOS descriptor or descriptor too short [ 211.528124][ T37] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.528148][ T37] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 211.559853][ T37] usb 2-1: string descriptor 0 read error: -22 [ 211.559987][ T37] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 211.560010][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.563904][ T7618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.564463][ T7618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.640473][ T37] usb 2-1: selecting invalid altsetting 1 [ 211.663955][ T37] usb 2-1: unit 6 not found! [ 211.832711][ T7623] netlink: 8 bytes leftover after parsing attributes in process `syz.5.535'. [ 211.836705][ T7623] overlayfs: failed to resolve 'permit_directio': -2 [ 212.127579][ T5720] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 212.288205][ T5720] usb 6-1: Using ep0 maxpacket: 16 [ 212.291258][ T5720] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 212.291285][ T5720] usb 6-1: config 0 has no interface number 0 [ 212.291368][ T5720] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 212.291389][ T5720] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 212.294244][ T5720] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 212.294272][ T5720] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.294283][ T5720] usb 6-1: Product: syz [ 212.294349][ T5720] usb 6-1: Manufacturer: syz [ 212.294365][ T5720] usb 6-1: SerialNumber: syz [ 212.305608][ T5720] usb 6-1: config 0 descriptor?? [ 212.363727][ T7623] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 212.363877][ T7623] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 212.485131][ T37] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 212.601087][ T7623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.603294][ T7623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.605307][ T7623] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 212.605837][ T7623] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 212.673295][ T37] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 212.696738][ T37] usb 2-1: USB disconnect, device number 28 [ 213.570710][ T60] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 213.600044][ T7297] Bluetooth: hci0: Frame reassembly failed (-84) [ 213.633295][ T7637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.540'. [ 213.689217][ T7623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.690023][ T7623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.104888][ T7645] netlink: 164 bytes leftover after parsing attributes in process `syz.1.544'. [ 214.342450][ T5720] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 214.342480][ T5720] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 214.344339][ T5720] asix 6-1:0.34: probe with driver asix failed with error -71 [ 214.355601][ T5720] usb 6-1: USB disconnect, device number 12 [ 214.500574][ T5712] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 214.540290][ T7615] Bluetooth: hci0: Opcode 0x1003 failed: -4 [ 214.665103][ T5712] usb 2-1: unable to get BOS descriptor or descriptor too short [ 214.666282][ T5712] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.666304][ T5712] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 214.669401][ T5712] usb 2-1: string descriptor 0 read error: -22 [ 214.669496][ T5712] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 214.669508][ T5712] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.737691][ T5712] usb 2-1: selecting invalid altsetting 1 [ 214.738262][ T5712] usb 2-1: unit 6 not found! [ 215.282816][ T7655] loop7: detected capacity change from 0 to 7 [ 215.490222][ T7655] Dev loop7: unable to read RDB block 7 [ 215.490269][ T7655] loop7: unable to read partition table [ 215.501073][ T7666] vivid-000: ================= START STATUS ================= [ 215.532181][ T7655] loop7: partition table beyond EOD, truncated [ 215.532225][ T7655] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 215.556282][ T7666] vivid-000: Test Pattern: 75% Colorbar [ 215.556389][ T7666] vivid-000: Fill Percentage of Frame: 100 [ 215.556412][ T7666] vivid-000: Horizontal Movement: No Movement [ 215.556431][ T7666] vivid-000: Vertical Movement: No Movement [ 215.556449][ T7666] vivid-000: OSD Text Mode: All [ 215.556466][ T7666] vivid-000: Show Border: false [ 215.556483][ T7666] vivid-000: Show Square: false [ 215.557559][ T7666] vivid-000: Sensor Flipped Horizontally: false [ 215.557586][ T7666] vivid-000: Sensor Flipped Vertically: false [ 215.557663][ T7666] vivid-000: Insert SAV Code in Image: false [ 215.557681][ T7666] vivid-000: Insert EAV Code in Image: false [ 215.557700][ T7666] vivid-000: Insert Video Guard Band: false [ 215.557716][ T7666] vivid-000: Reduced Framerate: false [ 215.557732][ T7666] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 215.557751][ T7666] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 215.666840][ T7666] vivid-000: Enable Capture Cropping: true [ 215.666861][ T7666] vivid-000: Enable Capture Composing: true [ 215.666880][ T7666] vivid-000: Enable Capture Scaler: true [ 215.666899][ T7666] vivid-000: Timestamp Source: End of Frame [ 215.666918][ T7666] vivid-000: Colorspace: sRGB [ 215.666934][ T7666] vivid-000: Transfer Function: Default [ 215.666953][ T7666] vivid-000: Y'CbCr Encoding: Default [ 215.666971][ T7666] vivid-000: HSV Encoding: Hue 0-179 [ 215.666988][ T7666] vivid-000: Quantization: Default [ 215.667005][ T7666] vivid-000: Apply Alpha To Red Only: false [ 215.667023][ T7666] vivid-000: Standard Aspect Ratio: 4x3 [ 215.667042][ T7666] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 215.667066][ T7666] vivid-000: DV Timings: 640x480p59 inactive [ 215.667088][ T7666] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 215.667107][ T7666] vivid-000: Maximum EDID Blocks: 2 [ 215.667126][ T7666] vivid-000: Limited RGB Range (16-235): false [ 215.667144][ T7666] vivid-000: Rx RGB Quantization Range: Automatic [ 215.667162][ T7666] vivid-000: Power Present: 0x00000001 [ 215.667183][ T7666] tpg source WxH: 3840x2160 (R'G'B) [ 215.667196][ T7666] tpg field: 1 [ 215.667203][ T7666] tpg crop: (0,0)/3840x2160 [ 215.667215][ T7666] tpg compose: (0,0)/3840x2160 [ 215.667228][ T7666] tpg colorspace: 8 [ 215.667236][ T7666] tpg transfer function: 0/2 [ 215.667246][ T7666] tpg quantization: 0/1 [ 215.667255][ T7666] tpg RGB range: 0/2 [ 215.667264][ T7666] vivid-000: ================== END STATUS ================== [ 215.815394][ T37] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 215.841741][ T5712] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 215.966972][ T37] usb 6-1: device descriptor read/64, error -71 [ 216.048309][ T5712] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 216.061644][ T5712] usb 2-1: USB disconnect, device number 29 [ 216.218368][ T7669] netlink: 28 bytes leftover after parsing attributes in process `syz.0.552'. [ 216.253877][ T37] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 216.438771][ T37] usb 6-1: device descriptor read/64, error -71 [ 216.560022][ T37] usb usb6-port1: attempt power cycle [ 216.874334][ T5597] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 216.987853][ T37] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 217.002688][ T37] usb 6-1: device descriptor read/8, error -71 [ 217.020062][ T5597] usb 2-1: device descriptor read/64, error -71 [ 217.279859][ T37] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 217.280928][ T5597] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 217.302383][ T37] usb 6-1: device descriptor read/8, error -71 [ 217.419234][ T37] usb usb6-port1: unable to enumerate USB device [ 217.420565][ T5597] usb 2-1: device descriptor read/64, error -71 [ 217.477149][ T7690] sg_write: data in/out 680020/136 bytes for SCSI command 0x0-- guessing data in; [ 217.477149][ T7690] program syz.0.559 not setting count and/or reply_len properly [ 217.537975][ T5597] usb usb2-port1: attempt power cycle [ 217.554674][ T7691] netlink: 16 bytes leftover after parsing attributes in process `syz.0.559'. [ 217.562550][ T7691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.580230][ T7691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.612882][ T7690] vxfs: unable to read disk superblock at 1 [ 217.613572][ T7690] vxfs: unable to read disk superblock at 8 [ 217.613583][ T7690] vxfs: can't find superblock. [ 217.900216][ T5597] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 217.923304][ T5597] usb 2-1: device descriptor read/8, error -71 [ 218.209789][ T5597] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 218.232130][ T5597] usb 2-1: device descriptor read/8, error -71 [ 218.367372][ T5597] usb usb2-port1: unable to enumerate USB device [ 218.455151][ T7698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.457785][ T7698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.016462][ T7703] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 219.016533][ T7703] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 219.183470][ T7708] input: syz0 as /devices/virtual/input/input14 [ 219.310826][ T37] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 219.375987][ T7710] sg_write: data in/out 1792/136 bytes for SCSI command 0x0-- guessing data in; [ 219.375987][ T7710] program syz.0.566 not setting count and/or reply_len properly [ 219.438549][ T7712] netlink: 'syz.0.567': attribute type 1 has an invalid length. [ 219.438571][ T7712] netlink: 'syz.0.567': attribute type 2 has an invalid length. [ 219.447869][ T7712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.448401][ T7712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.457264][ T7712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.457849][ T7712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.494514][ T37] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 219.494562][ T37] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 219.494582][ T37] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.505964][ T37] usb 6-1: config 0 descriptor?? [ 219.830081][ T7714] FAULT_INJECTION: forcing a failure. [ 219.830081][ T7714] name failslab, interval 1, probability 0, space 0, times 0 [ 219.830113][ T7714] CPU: 0 UID: 0 PID: 7714 Comm: syz.1.568 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 219.830128][ T7714] Tainted: [L]=SOFTLOCKUP [ 219.830132][ T7714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 219.830139][ T7714] Call Trace: [ 219.830143][ T7714] [ 219.830148][ T7714] dump_stack_lvl+0xe8/0x150 [ 219.830175][ T7714] should_fail_ex+0x46b/0x600 [ 219.830211][ T7714] should_failslab+0xa8/0x100 [ 219.830239][ T7714] __kmalloc_noprof+0xdf/0x7b0 [ 219.830260][ T7714] ? rcu_is_watching+0x15/0xb0 [ 219.830280][ T7714] ? snd_interval_refine+0x602/0xa50 [ 219.830293][ T7714] ? snd_pcm_hw_refine+0x9ef/0x17a0 [ 219.830313][ T7714] snd_pcm_hw_refine+0x9ef/0x17a0 [ 219.830341][ T7714] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 219.830391][ T7714] ? __asan_memset+0x22/0x50 [ 219.830409][ T7714] ? snd_pcm_oss_change_params_locked+0x6e5/0x3e00 [ 219.830435][ T7714] ? snd_pcm_oss_change_params_locked+0x744/0x3e00 [ 219.830460][ T7714] snd_pcm_oss_change_params_locked+0x851/0x3e00 [ 219.830480][ T7714] ? aa_file_perm+0x192/0x15f0 [ 219.830500][ T7714] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 219.830531][ T7714] ? lockdep_hardirqs_on+0x7a/0x110 [ 219.830558][ T7714] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 219.830587][ T7714] ? snd_pcm_oss_write+0x20d/0xbe0 [ 219.830613][ T7714] snd_pcm_oss_write+0x282/0xbe0 [ 219.830637][ T7714] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 219.830649][ T7714] vfs_write+0x2a3/0xba0 [ 219.830668][ T7714] ? __pfx_vfs_write+0x10/0x10 [ 219.830691][ T7714] ? __fget_files+0x2a/0x420 [ 219.830716][ T7714] ? __fget_files+0x2a/0x420 [ 219.830737][ T7714] ? __fget_files+0x3a6/0x420 [ 219.830758][ T7714] ? __fget_files+0x2a/0x420 [ 219.830787][ T7714] ksys_write+0x156/0x270 [ 219.830812][ T7714] ? __pfx_ksys_write+0x10/0x10 [ 219.830830][ T7714] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.830842][ T7714] do_syscall_64+0x174/0x580 [ 219.830869][ T7714] ? trace_irq_disable+0x3b/0x140 [ 219.830890][ T7714] ? clear_bhb_loop+0x40/0x90 [ 219.830914][ T7714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.830933][ T7714] RIP: 0033:0x7fb186b0ce59 [ 219.830950][ T7714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.830963][ T7714] RSP: 002b:00007fb184d66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 219.830975][ T7714] RAX: ffffffffffffffda RBX: 00007fb186d85fa0 RCX: 00007fb186b0ce59 [ 219.830983][ T7714] RDX: 0000000000004000 RSI: 00002000000012c0 RDI: 0000000000000003 [ 219.830989][ T7714] RBP: 00007fb184d66090 R08: 0000000000000000 R09: 0000000000000000 [ 219.830996][ T7714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.831002][ T7714] R13: 00007fb186d86038 R14: 00007fb186d85fa0 R15: 00007ffe0af03e68 [ 219.831027][ T7714] [ 220.088982][ T37] hid_parser_main: 28 callbacks suppressed [ 220.089004][ T37] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 220.089036][ T37] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 220.089062][ T37] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 220.089088][ T37] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 220.089113][ T37] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 220.089138][ T37] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 220.089163][ T37] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 220.089189][ T37] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 220.089215][ T37] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 220.464086][ T7723] FAULT_INJECTION: forcing a failure. [ 220.464086][ T7723] name failslab, interval 1, probability 0, space 0, times 0 [ 220.464118][ T7723] CPU: 0 UID: 0 PID: 7723 Comm: syz.5.570 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 220.464138][ T7723] Tainted: [L]=SOFTLOCKUP [ 220.464142][ T7723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 220.464154][ T7723] Call Trace: [ 220.464159][ T7723] [ 220.464166][ T7723] dump_stack_lvl+0xe8/0x150 [ 220.464186][ T7723] should_fail_ex+0x46b/0x600 [ 220.464211][ T7723] should_failslab+0xa8/0x100 [ 220.464231][ T7723] __kmalloc_cache_noprof+0x84/0x690 [ 220.464248][ T7723] ? __nla_parse+0x40/0x60 [ 220.464262][ T7723] ? nfnetlink_rcv+0xfe8/0x27b0 [ 220.464285][ T7723] nfnetlink_rcv+0xfe8/0x27b0 [ 220.464330][ T7723] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 220.464362][ T7723] ? __pfx_save_netdev_trace_buffer+0x10/0x10 [ 220.464380][ T7723] ? ref_tracker_free+0x673/0x820 [ 220.464424][ T7723] ? __netlink_deliver_tap+0x866/0x8b0 [ 220.464452][ T7723] ? netlink_deliver_tap+0x2e/0x1b0 [ 220.464472][ T7723] ? netlink_deliver_tap+0x2e/0x1b0 [ 220.464497][ T7723] netlink_unicast+0x780/0x920 [ 220.464524][ T7723] netlink_sendmsg+0x813/0xb40 [ 220.464545][ T7723] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.464562][ T7723] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 220.464585][ T7723] ? aa_sock_msg_perm+0x122/0x200 [ 220.464602][ T7723] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.464615][ T7723] sock_sendmsg_nosec+0x13a/0x180 [ 220.464635][ T7723] ____sys_sendmsg+0x55c/0x870 [ 220.464662][ T7723] ? __pfx_____sys_sendmsg+0x10/0x10 [ 220.464692][ T7723] ? import_iovec+0x73/0xa0 [ 220.464714][ T7723] ___sys_sendmsg+0x2a5/0x360 [ 220.464737][ T7723] ? __lock_acquire+0x6b5/0x2d10 [ 220.464761][ T7723] ? __pfx____sys_sendmsg+0x10/0x10 [ 220.464811][ T7723] ? __fget_files+0x2a/0x420 [ 220.464830][ T7723] ? __fget_files+0x3a6/0x420 [ 220.464855][ T7723] __x64_sys_sendmsg+0x1c3/0x2a0 [ 220.464879][ T7723] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 220.464926][ T7723] ? __pfx_ksys_write+0x10/0x10 [ 220.464953][ T7723] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.464968][ T7723] do_syscall_64+0x174/0x580 [ 220.464988][ T7723] ? trace_irq_disable+0x3b/0x140 [ 220.465004][ T7723] ? clear_bhb_loop+0x40/0x90 [ 220.465020][ T7723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.465034][ T7723] RIP: 0033:0x7ff8f900ce59 [ 220.465048][ T7723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.465060][ T7723] RSP: 002b:00007ff8f725e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.465075][ T7723] RAX: ffffffffffffffda RBX: 00007ff8f9285fa0 RCX: 00007ff8f900ce59 [ 220.465086][ T7723] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 220.465095][ T7723] RBP: 00007ff8f725e090 R08: 0000000000000000 R09: 0000000000000000 [ 220.465104][ T7723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.465113][ T7723] R13: 00007ff8f9286038 R14: 00007ff8f9285fa0 R15: 00007ffd734d92e8 [ 220.465136][ T7723] [ 220.527866][ T37] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 220.561105][ T37] usb 6-1: USB disconnect, device number 17 [ 220.892142][ T7724] fido_id[7724]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 221.003057][ T7736] sg_write: data in/out 1792/136 bytes for SCSI command 0x0-- guessing data in; [ 221.003057][ T7736] program syz.0.575 not setting count and/or reply_len properly [ 221.103861][ T7740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.104667][ T7740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.703766][ T7751] netlink: 24 bytes leftover after parsing attributes in process `syz.1.578'. [ 221.887533][ T5712] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 222.073216][ T5712] usb 6-1: unable to get BOS descriptor or descriptor too short [ 222.074521][ T5712] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.074546][ T5712] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 222.090005][ T5597] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 222.116122][ T5712] usb 6-1: string descriptor 0 read error: -22 [ 222.116207][ T5712] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 222.116220][ T5712] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.154906][ T5712] usb 6-1: selecting invalid altsetting 1 [ 222.155682][ T5712] usb 6-1: unit 6 not found! [ 222.271630][ T5597] usb 5-1: Using ep0 maxpacket: 8 [ 222.273912][ T5597] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 222.273936][ T5597] usb 5-1: config 0 has no interface number 0 [ 222.278011][ T5597] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 222.278038][ T5597] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.278057][ T5597] usb 5-1: Product: syz [ 222.278071][ T5597] usb 5-1: Manufacturer: syz [ 222.278086][ T5597] usb 5-1: SerialNumber: syz [ 222.348638][ T5597] usb 5-1: config 0 descriptor?? [ 222.566283][ T5597] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 222.566434][ T5597] uvcvideo 5-1:0.31: Entity type for entity Output 32774 was not initialized! [ 222.639557][ T5597] usb 5-1: USB disconnect, device number 11 [ 222.819697][ T7765] sg_write: data in/out 1792/136 bytes for SCSI command 0x0-- guessing data in; [ 222.819697][ T7765] program syz.0.584 not setting count and/or reply_len properly [ 222.954031][ T7767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.954889][ T7767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.214553][ T5712] usb 6-1: 2:0: failed to get current value for ch 0 (-71) [ 223.311855][ T5712] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 223.323017][ T5712] usb 6-1: USB disconnect, device number 18 [ 224.378150][ T5712] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 224.552711][ T5712] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.552739][ T5712] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 224.552790][ T5712] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 224.552813][ T5712] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.580047][ T5712] usb 5-1: config 0 descriptor?? [ 224.976138][ T37] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 225.104860][ T5785] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 225.147132][ T37] usb 6-1: Using ep0 maxpacket: 8 [ 225.154840][ T37] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.154866][ T37] usb 6-1: config 0 has no interfaces? [ 225.162859][ T37] usb 6-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 225.162891][ T37] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 225.162911][ T37] usb 6-1: Product: syz [ 225.162925][ T37] usb 6-1: Manufacturer: syz [ 225.162939][ T37] usb 6-1: SerialNumber: syz [ 225.210805][ T37] usb 6-1: config 0 descriptor?? [ 225.279472][ T5785] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 225.279503][ T5785] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.295163][ T5785] usb 2-1: config 0 descriptor?? [ 225.399121][ T5785] cp210x 2-1:0.0: cp210x converter detected [ 225.506115][ T37] usb 6-1: USB disconnect, device number 19 [ 225.644633][ T5712] Bluetooth: Can't get version to change to load ram patch err [ 225.644652][ T5712] Bluetooth: Loading patch file failed [ 225.644687][ T5712] ath3k 5-1:0.0: probe with driver ath3k failed with error -71 [ 225.818533][ T5712] usb 5-1: USB disconnect, device number 12 [ 225.986610][ T5785] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 225.986664][ T5785] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 226.007818][ T5785] usb 2-1: cp210x converter now attached to ttyUSB1 [ 226.031636][ T5785] usb 2-1: USB disconnect, device number 34 [ 226.119505][ T5785] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 226.128529][ T5785] cp210x 2-1:0.0: device disconnected [ 226.218333][ T38] kauditd_printk_skb: 5587 callbacks suppressed [ 226.218351][ T38] audit: type=1326 audit(1780705839.836:5599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7844 comm="syz.0.599" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4f3580ce59 code=0x0 [ 226.504294][ T7854] syz.4.601 (7854): /proc/7853/oom_adj is deprecated, please use /proc/7853/oom_score_adj instead. [ 227.471986][ T7881] fuse: Invalid rootmode [ 227.636804][ T7888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.641463][ T7888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.701859][ T5713] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 227.768360][ T7891] deleting an unspecified loop device is not supported. [ 227.862327][ T5713] usb 2-1: Using ep0 maxpacket: 16 [ 227.865974][ T5713] usb 2-1: unable to get BOS descriptor or descriptor too short [ 227.867097][ T5713] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.867158][ T5713] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 227.869289][ T5713] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 227.869315][ T5713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.869335][ T5713] usb 2-1: Product: syz [ 227.869349][ T5713] usb 2-1: Manufacturer: syz [ 227.869357][ T5713] usb 2-1: SerialNumber: syz [ 228.022497][ T37] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 228.149878][ T5713] snd-ua101 2-1:1.1: invalid num_altsetting [ 228.149901][ T5713] snd-ua101 2-1:1.0: invalid num_altsetting [ 228.168583][ T37] usb 6-1: device descriptor read/64, error -71 [ 228.235285][ T5713] usb 2-1: USB disconnect, device number 35 [ 228.418092][ T37] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 228.556966][ T37] usb 6-1: device descriptor read/64, error -71 [ 228.676311][ T37] usb usb6-port1: attempt power cycle [ 229.042524][ T37] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 229.062788][ T37] usb 6-1: device descriptor read/8, error -71 [ 229.325000][ T7909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.325592][ T7909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.349395][ T37] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 229.369920][ T37] usb 6-1: device descriptor read/8, error -71 [ 229.488424][ T37] usb usb6-port1: unable to enumerate USB device [ 229.625976][ T5712] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 229.764922][ T5712] usb 2-1: device descriptor read/64, error -71 [ 230.042769][ T5712] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 230.159367][ T7918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.164020][ T7918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.181713][ T5712] usb 2-1: device descriptor read/64, error -71 [ 230.298202][ T7926] netlink: 4 bytes leftover after parsing attributes in process `syz.4.626'. [ 230.299970][ T5712] usb usb2-port1: attempt power cycle [ 230.673533][ T5712] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 230.707369][ T5712] usb 2-1: device descriptor read/8, error -71 [ 230.748383][ T37] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 230.910950][ T37] usb 5-1: unable to get BOS descriptor or descriptor too short [ 230.912143][ T37] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 230.912166][ T37] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 230.915398][ T37] usb 5-1: string descriptor 0 read error: -22 [ 230.915561][ T37] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 230.915577][ T37] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.972711][ T5712] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 230.995828][ T5712] usb 2-1: device descriptor read/8, error -71 [ 230.996452][ T37] usb 5-1: selecting invalid altsetting 1 [ 230.997095][ T37] usb 5-1: unit 6 not found! [ 231.112375][ T5712] usb usb2-port1: unable to enumerate USB device [ 231.368301][ T5713] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 231.534540][ T5713] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.534568][ T5713] usb 6-1: config 0 has no interfaces? [ 231.534597][ T5713] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 231.534655][ T5713] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.542604][ T5713] usb 6-1: config 0 descriptor?? [ 231.795136][ T37] usb 5-1: 2:0: failed to get current value for ch 0 (-71) [ 231.832583][ T7935] netlink: 16 bytes leftover after parsing attributes in process `syz.5.630'. [ 231.897851][ T5778] udevd[5778]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 231.922030][ T37] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 231.926725][ T37] usb 5-1: USB disconnect, device number 13 [ 232.030573][ T7937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.032812][ T7937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.049448][ T5712] usb 6-1: USB disconnect, device number 24 [ 232.785988][ T7948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.789661][ T7948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.010434][ T7954] cgroup: Bad value for 'name' [ 233.395629][ T60] Bluetooth: hci2: unexpected event for opcode 0x2023 [ 233.433437][ T5785] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 233.495720][ T5597] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 233.581733][ T5785] usb 2-1: device descriptor read/64, error -71 [ 233.668830][ T5597] usb 6-1: unable to get BOS descriptor or descriptor too short [ 233.671720][ T5597] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.671735][ T5597] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 233.674945][ T5597] usb 6-1: string descriptor 0 read error: -22 [ 233.675051][ T5597] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 233.675065][ T5597] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.743508][ T5597] usb 6-1: selecting invalid altsetting 1 [ 233.745555][ T5597] usb 6-1: unit 6 not found! [ 233.859132][ T5785] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 234.019823][ T5785] usb 2-1: device descriptor read/64, error -71 [ 234.137061][ T5785] usb usb2-port1: attempt power cycle [ 234.521819][ T5785] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 234.550943][ T5785] usb 2-1: device descriptor read/8, error -71 [ 234.812654][ T5597] usb 6-1: 2:0: failed to get current value for ch 0 (-71) [ 234.831521][ T5785] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 234.856388][ T5785] usb 2-1: device descriptor read/8, error -71 [ 234.972598][ T5785] usb usb2-port1: unable to enumerate USB device [ 235.049616][ T5597] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 235.064989][ T5597] usb 6-1: USB disconnect, device number 25 [ 235.394068][ T8037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.394668][ T8037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.933644][ T37] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 236.103587][ T37] usb 5-1: Using ep0 maxpacket: 16 [ 236.105438][ T37] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 236.105463][ T37] usb 5-1: config 0 has no interface number 0 [ 236.105492][ T37] usb 5-1: config 0 interface 251 has no altsetting 0 [ 236.108096][ T37] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=43.2d [ 236.108123][ T37] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.108145][ T37] usb 5-1: Product: syz [ 236.108160][ T37] usb 5-1: Manufacturer: syz [ 236.108183][ T37] usb 5-1: SerialNumber: syz [ 236.128420][ T37] usb 5-1: config 0 descriptor?? [ 236.181073][ T8059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.183787][ T8059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.305957][ T8062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.309769][ T8062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.582149][ T37] usb_ehset_test 5-1:0.251: probe with driver usb_ehset_test failed with error -32 [ 236.595862][ T37] usb 5-1: USB disconnect, device number 14 [ 236.755910][ T5720] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 236.896936][ T5720] usb 6-1: device descriptor read/64, error -71 [ 237.183165][ T5720] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 237.209157][ T8078] netlink: 76 bytes leftover after parsing attributes in process `syz.4.672'. [ 237.322261][ T5720] usb 6-1: device descriptor read/64, error -71 [ 237.413194][ T8085] netlink: 196 bytes leftover after parsing attributes in process `syz.4.675'. [ 237.440037][ T5720] usb usb6-port1: attempt power cycle [ 237.446798][ T8085] netlink: 72 bytes leftover after parsing attributes in process `syz.4.675'. [ 237.557292][ T5712] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 237.732228][ T5712] usb 2-1: config 0 has no interfaces? [ 237.732262][ T5712] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 237.732282][ T5712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.758650][ T5712] usb 2-1: config 0 descriptor?? [ 237.824519][ T5720] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 237.848592][ T5720] usb 6-1: device descriptor read/8, error -71 [ 237.984130][ T8082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.996669][ T8082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.006964][ T37] usb 2-1: USB disconnect, device number 44 [ 238.113259][ T5720] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 238.135027][ T5720] usb 6-1: device descriptor read/8, error -71 [ 238.252127][ T5597] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 238.255618][ T5720] usb usb6-port1: unable to enumerate USB device [ 238.414946][ T5597] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 238.415046][ T5597] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 238.415071][ T5597] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.453883][ T5597] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 238.519403][ T5712] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 238.690389][ T5712] usb 2-1: Using ep0 maxpacket: 8 [ 238.693393][ T5712] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 238.693421][ T5712] usb 2-1: config 0 has no interface number 0 [ 238.693454][ T5712] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.693469][ T5712] usb 2-1: config 0 interface 52 has no altsetting 0 [ 238.693487][ T5712] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 238.693500][ T5712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.697160][ T5712] usb 2-1: config 0 descriptor?? [ 238.923442][ T5712] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input15 [ 239.067318][ T8088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.069066][ T8088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.076251][ T8088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.088042][ T8088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.258569][ T8091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.259815][ T8091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.390824][ T8082] netlink: 44 bytes leftover after parsing attributes in process `syz.1.674'. [ 239.390850][ T8082] netlink: 35 bytes leftover after parsing attributes in process `syz.1.674'. [ 239.390866][ T8082] netlink: 'syz.1.674': attribute type 6 has an invalid length. [ 239.390879][ T8082] netlink: 35 bytes leftover after parsing attributes in process `syz.1.674'. [ 239.391701][ T8082] sg_read: process 509 (syz.1.674) changed security contexts after opening file descriptor, this is not allowed. [ 239.429505][ T9] usb 2-1: USB disconnect, device number 45 [ 239.430658][ C1] synaptics_usb 2-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 239.584776][ T5597] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 239.593331][ T5597] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 239.593351][ T5597] stv0680 5-1:4.0: last error: 0, command = 0x0 [ 239.658197][ T8097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.658881][ T8097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.671862][ T8098] netlink: 36 bytes leftover after parsing attributes in process `syz.5.678'. [ 239.672492][ T8097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.675039][ T8097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.891972][ T8097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.892545][ T8097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.093915][ T5720] usb 5-1: USB disconnect, device number 15 [ 240.737411][ T8116] FAULT_INJECTION: forcing a failure. [ 240.737411][ T8116] name failslab, interval 1, probability 0, space 0, times 0 [ 240.737456][ T8116] CPU: 0 UID: 0 PID: 8116 Comm: syz.0.684 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 240.737482][ T8116] Tainted: [L]=SOFTLOCKUP [ 240.737489][ T8116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 240.737500][ T8116] Call Trace: [ 240.737508][ T8116] [ 240.737516][ T8116] dump_stack_lvl+0xe8/0x150 [ 240.737545][ T8116] should_fail_ex+0x46b/0x600 [ 240.737578][ T8116] should_failslab+0xa8/0x100 [ 240.737604][ T8116] __kmalloc_noprof+0xdf/0x7b0 [ 240.737626][ T8116] ? kfree+0x4d/0x6c0 [ 240.737644][ T8116] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 240.737673][ T8116] tomoyo_realpath_from_path+0xe3/0x5d0 [ 240.737696][ T8116] ? tomoyo_domain+0xd7/0x130 [ 240.737724][ T8116] ? tomoyo_path_number_perm+0x219/0x630 [ 240.737757][ T8116] tomoyo_path_number_perm+0x246/0x630 [ 240.737789][ T8116] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 240.737817][ T8116] ? __lock_acquire+0x6b5/0x2d10 [ 240.737841][ T8116] ? do_raw_spin_lock+0x12b/0x2f0 [ 240.737891][ T8116] ? __fget_files+0x2a/0x420 [ 240.737916][ T8116] ? __fget_files+0x2a/0x420 [ 240.737937][ T8116] ? __fget_files+0x3a6/0x420 [ 240.737957][ T8116] ? __fget_files+0x2a/0x420 [ 240.737983][ T8116] security_file_ioctl+0xc3/0x2a0 [ 240.738011][ T8116] __se_sys_ioctl+0x47/0x170 [ 240.738037][ T8116] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.738057][ T8116] do_syscall_64+0x174/0x580 [ 240.738083][ T8116] ? trace_irq_disable+0x3b/0x140 [ 240.738104][ T8116] ? clear_bhb_loop+0x40/0x90 [ 240.738127][ T8116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.738146][ T8116] RIP: 0033:0x7f4f3580ce59 [ 240.738165][ T8116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.738181][ T8116] RSP: 002b:00007f4f33a5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 240.738202][ T8116] RAX: ffffffffffffffda RBX: 00007f4f35a85fa0 RCX: 00007f4f3580ce59 [ 240.738216][ T8116] RDX: 0000200000000080 RSI: 00000000c00c642d RDI: 0000000000000004 [ 240.738229][ T8116] RBP: 00007f4f33a5e090 R08: 0000000000000000 R09: 0000000000000000 [ 240.738240][ T8116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.738252][ T8116] R13: 00007f4f35a86038 R14: 00007f4f35a85fa0 R15: 00007ffd55980d78 [ 240.738283][ T8116] [ 240.738302][ T8116] ERROR: Out of memory at tomoyo_realpath_from_path. [ 241.928759][ T8140] netlink: 'syz.0.693': attribute type 29 has an invalid length. [ 241.928781][ T8140] netlink: 'syz.0.693': attribute type 3 has an invalid length. [ 241.928794][ T8140] netlink: 132 bytes leftover after parsing attributes in process `syz.0.693'. [ 241.978534][ T8142] netlink: 16 bytes leftover after parsing attributes in process `syz.4.694'. [ 242.121664][ T5720] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 242.282066][ T5720] usb 2-1: Using ep0 maxpacket: 8 [ 242.288104][ T5720] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 242.288134][ T5720] usb 2-1: config 0 has no interface number 0 [ 242.309190][ T5720] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 242.309218][ T5720] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.309237][ T5720] usb 2-1: Product: syz [ 242.309267][ T5720] usb 2-1: Manufacturer: syz [ 242.309280][ T5720] usb 2-1: SerialNumber: syz [ 242.320282][ T5720] usb 2-1: config 0 descriptor?? [ 242.564397][ T5720] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 242.564470][ T5720] uvcvideo 2-1:0.31: Failed to initialize entity for entity 32774 [ 242.564487][ T5720] uvcvideo 2-1:0.31: Failed to register entities (-22). [ 242.826649][ T9] usb 2-1: USB disconnect, device number 46 [ 247.530275][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 247.551653][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 247.562353][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 247.573032][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 247.583725][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 247.594447][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 247.605103][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 247.615794][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 247.626469][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 247.637167][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 249.216559][ T5617] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 249.252860][ T5617] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 249.259513][ T5617] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 249.290388][ T5617] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 249.324565][ T5617] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 251.381307][ T1427] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.624415][ T60] Bluetooth: hci0: command tx timeout [ 252.175663][ T1427] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.083831][ T1427] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.451659][ T8271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.455376][ T8271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.643226][ T1427] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.853846][ T60] Bluetooth: hci0: command tx timeout [ 254.307821][ T5785] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 254.490123][ T5785] usb 5-1: too many configurations: 65, using maximum allowed: 8 [ 254.491624][ T5785] usb 5-1: config 250 has an invalid descriptor of length 102, skipping remainder of the config [ 254.492869][ T5785] usb 5-1: config 250 has an invalid descriptor of length 102, skipping remainder of the config [ 254.493994][ T5785] usb 5-1: config 250 has an invalid descriptor of length 102, skipping remainder of the config [ 254.537598][ T5785] usb 5-1: config 250 has an invalid descriptor of length 102, skipping remainder of the config [ 254.542076][ T5785] usb 5-1: config 250 has an invalid descriptor of length 102, skipping remainder of the config [ 254.543350][ T5785] usb 5-1: config 250 has an invalid descriptor of length 102, skipping remainder of the config [ 254.544435][ T5785] usb 5-1: config 250 has an invalid descriptor of length 102, skipping remainder of the config [ 254.586773][ T5785] usb 5-1: config 250 has an invalid descriptor of length 102, skipping remainder of the config [ 254.586828][ T5785] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 254.586846][ T5785] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.723828][ T5785] uvcvideo 5-1:250.0: probe with driver uvcvideo failed with error -22 [ 254.944102][ T5720] usb 5-1: USB disconnect, device number 16 [ 255.351118][ T60] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 257.119809][ T60] Bluetooth: hci0: command tx timeout [ 257.401425][ T8318] netlink: 12 bytes leftover after parsing attributes in process `syz.0.756'. [ 257.475063][ T60] Bluetooth: hci4: unexpected event for opcode 0x080d [ 257.624105][ T1427] bridge_slave_1: left allmulticast mode [ 257.624138][ T1427] bridge_slave_1: left promiscuous mode [ 257.624442][ T1427] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.844606][ T1427] bridge_slave_0: left allmulticast mode [ 258.844642][ T1427] bridge_slave_0: left promiscuous mode [ 258.844897][ T1427] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.320618][ T60] Bluetooth: hci0: command tx timeout [ 262.266080][ T1427] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.366555][ T1427] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.409455][ T1427] bond0 (unregistering): Released all slaves [ 264.285200][ T8216] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.287624][ T8216] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.288032][ T8216] bridge_slave_0: entered allmulticast mode [ 264.317797][ T8216] bridge_slave_0: entered promiscuous mode [ 264.427250][ T8367] sock: sock_timestamping_bind_phc: sock not bind to device [ 264.568320][ T8371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.578209][ T8371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.743150][ T8216] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.743471][ T8216] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.743777][ T8216] bridge_slave_1: entered allmulticast mode [ 264.748865][ T8216] bridge_slave_1: entered promiscuous mode [ 266.180136][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.180235][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.271819][ T8216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.277103][ T8216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.439304][ T8216] team0: Port device team_slave_0 added [ 266.474707][ T8216] team0: Port device team_slave_1 added [ 266.481448][ T8376] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 266.481472][ T8376] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 266.702741][ T8216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.702757][ T8216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 266.702782][ T8216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.710741][ T8216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.710756][ T8216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 266.712390][ T8216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.842206][ T8392] input: syz1 as /devices/virtual/input/input16 [ 267.154179][ T8216] hsr_slave_0: entered promiscuous mode [ 267.188043][ T8216] hsr_slave_1: entered promiscuous mode [ 267.189099][ T8216] debugfs: 'hsr0' already exists in 'hsr' [ 267.189121][ T8216] Cannot create hsr debugfs directory [ 267.294856][ T8405] lo: entered allmulticast mode [ 267.480968][ T38] audit: type=1326 audit(1780705878.445:5600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8410 comm="syz.0.785" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4f3580ce59 code=0x0 [ 267.673833][ T5270] 8021q: adding VLAN 0 to HW filter on device eth9 [ 268.039311][ T8216] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 268.090555][ T8216] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 268.093139][ T8216] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 268.153137][ T8216] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 268.156228][ T8216] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 268.188428][ T8216] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 268.191014][ T8216] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 268.243685][ T8216] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 268.387720][ T5617] Bluetooth: hci4: command 0x0406 tx timeout [ 268.511239][ T8376] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 268.511266][ T8376] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 268.565672][ T8376] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 268.565688][ T8376] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 268.712793][ T8439] syzkaller1: entered promiscuous mode [ 268.712817][ T8439] syzkaller1: entered allmulticast mode [ 268.747549][ T8376] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 268.747570][ T8376] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 268.823121][ T5270] 8021q: adding VLAN 0 to HW filter on device eth10 [ 268.851093][ T8216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.567164][ T8216] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.636660][ T7904] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.640372][ T7904] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.198391][ T7791] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.198548][ T7791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.875834][ T1427] hsr_slave_0: left promiscuous mode [ 270.928927][ T1427] hsr_slave_1: left promiscuous mode [ 270.930441][ T1427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.930467][ T1427] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.937754][ T1427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.937782][ T1427] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.199154][ T1427] veth1_macvtap: left promiscuous mode [ 272.199261][ T1427] veth0_macvtap: left promiscuous mode [ 272.216332][ T1427] veth1_vlan: left promiscuous mode [ 272.216556][ T1427] veth0_vlan: left promiscuous mode [ 273.361733][ T8509] 9p: Bad value for 'rfdno' [ 273.751735][ T1427] team0 (unregistering): Port device team_slave_1 removed [ 273.797057][ T1427] team0 (unregistering): Port device team_slave_0 removed [ 274.126484][ T5270] 8021q: adding VLAN 0 to HW filter on device eth11 [ 274.879798][ T38] audit: type=1326 audit(1780705885.368:5601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8541 comm="syz.4.817" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196525ce59 code=0x7ffc0000 [ 274.880412][ T38] audit: type=1326 audit(1780705885.368:5602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8541 comm="syz.4.817" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196525ce59 code=0x7ffc0000 [ 274.885435][ T38] audit: type=1326 audit(1780705885.368:5603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8541 comm="syz.4.817" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f196525ce59 code=0x7ffc0000 [ 274.885764][ T38] audit: type=1326 audit(1780705885.368:5604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8541 comm="syz.4.817" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196525ce59 code=0x7ffc0000 [ 276.113860][ T8216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.481712][ T5270] 8021q: adding VLAN 0 to HW filter on device eth12 [ 277.075548][ T8216] veth0_vlan: entered promiscuous mode [ 277.172260][ T8216] veth1_vlan: entered promiscuous mode [ 277.267602][ T8216] veth0_macvtap: entered promiscuous mode [ 277.356151][ T8216] veth1_macvtap: entered promiscuous mode [ 277.450416][ T37] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 277.572428][ T8216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.593174][ T8216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.637906][ T1427] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.640753][ T1427] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.645372][ T1427] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.663540][ T37] usb 5-1: Using ep0 maxpacket: 32 [ 277.665517][ T37] usb 5-1: New USB device found, idVendor=18d1, idProduct=5050, bcdDevice= 0.00 [ 277.665545][ T37] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.693576][ T37] usb 5-1: config 0 descriptor?? [ 277.720162][ T1427] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.160384][ T37] hid (null): unknown global tag 0xe [ 278.210842][ T37] hid-generic 0003:18D1:5050.0005: unknown main item tag 0x1 [ 278.210883][ T37] hid-generic 0003:18D1:5050.0005: unknown global tag 0xe [ 278.210900][ T37] hid-generic 0003:18D1:5050.0005: item 0 4 1 14 parsing failed [ 278.213642][ T37] hid-generic 0003:18D1:5050.0005: probe with driver hid-generic failed with error -22 [ 278.469810][ T38] audit: type=1326 audit(1780705888.642:5605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8617 comm="syz.0.835" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4f3580ce59 code=0x0 [ 278.940765][ T37] usb 5-1: USB disconnect, device number 17 [ 279.130884][ T8623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.131434][ T8623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.258283][ T7299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.258302][ T7299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.510898][ T8629] binder: 8628:8629 ioctl c0306201 0 returned -14 [ 280.616512][ T8634] kvm: user requested TSC rate below hardware speed [ 280.625878][ T37] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 280.787263][ T37] usb 6-1: too many configurations: 65, using maximum allowed: 8 [ 280.808629][ T37] usb 6-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 280.808660][ T37] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.837264][ T8133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.837282][ T8133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.853784][ T37] uvcvideo 6-1:250.0: probe with driver uvcvideo failed with error -22 [ 281.011315][ T8639] usb usb7: usbfs: process 8639 (syz.4.841) did not claim interface 0 before use [ 281.012042][ T8639] usb usb7: usbfs: process 8639 (syz.4.841) did not claim interface 0 before use [ 281.076157][ T37] usb 6-1: USB disconnect, device number 30 [ 284.655122][ T8683] ================================================================== [ 284.655138][ T8683] BUG: KASAN: slab-use-after-free in clear_tfile_check_list+0x114/0x380 [ 284.655177][ T8683] Read of size 8 at addr ffff88803828b028 by task syz.0.856/8683 [ 284.655195][ T8683] [ 284.655210][ T8683] CPU: 1 UID: 0 PID: 8683 Comm: syz.0.856 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 284.655238][ T8683] Tainted: [L]=SOFTLOCKUP [ 284.655246][ T8683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 284.655257][ T8683] Call Trace: [ 284.655265][ T8683] [ 284.655274][ T8683] dump_stack_lvl+0xe8/0x150 [ 284.655300][ T8683] print_address_description+0x55/0x1e0 [ 284.655329][ T8683] ? clear_tfile_check_list+0x114/0x380 [ 284.655359][ T8683] print_report+0x58/0x70 [ 284.655382][ T8683] kasan_report+0x117/0x150 [ 284.655410][ T8683] ? clear_tfile_check_list+0x114/0x380 [ 284.655441][ T8683] clear_tfile_check_list+0x114/0x380 [ 284.655469][ T8683] ? clear_tfile_check_list+0x22/0x380 [ 284.655501][ T8683] do_epoll_ctl_file+0x8fd/0xed0 [ 284.655528][ T8683] ? do_epoll_ctl_file+0xac3/0xed0 [ 284.655556][ T8683] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 284.655583][ T8683] ? __fget_files+0x3a6/0x420 [ 284.655604][ T8683] ? __fget_files+0x2a/0x420 [ 284.655627][ T8683] __se_sys_epoll_ctl+0x14e/0x210 [ 284.655653][ T8683] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 284.655682][ T8683] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.655703][ T8683] do_syscall_64+0x174/0x580 [ 284.655734][ T8683] ? trace_irq_disable+0x3b/0x140 [ 284.655756][ T8683] ? clear_bhb_loop+0x40/0x90 [ 284.655779][ T8683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.655798][ T8683] RIP: 0033:0x7f4f3580ce59 [ 284.655817][ T8683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.655845][ T8683] RSP: 002b:00007f4f33a1c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 284.655868][ T8683] RAX: ffffffffffffffda RBX: 00007f4f35a86180 RCX: 00007f4f3580ce59 [ 284.655884][ T8683] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000007 [ 284.655897][ T8683] RBP: 00007f4f358a2d6f R08: 0000000000000000 R09: 0000000000000000 [ 284.655911][ T8683] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 284.655925][ T8683] R13: 00007f4f35a86218 R14: 00007f4f35a86180 R15: 00007ffd55980d78 [ 284.655948][ T8683] [ 284.655956][ T8683] [ 284.655961][ T8683] Allocated by task 8679: [ 284.655971][ T8683] kasan_save_track+0x3e/0x80 [ 284.655993][ T8683] __kasan_slab_alloc+0x6c/0x80 [ 284.656014][ T8683] kmem_cache_alloc_noprof+0x33b/0x680 [ 284.656037][ T8683] ep_insert+0x512/0x1820 [ 284.656059][ T8683] do_epoll_ctl_file+0x8bb/0xed0 [ 284.656084][ T8683] __se_sys_epoll_ctl+0x14e/0x210 [ 284.656108][ T8683] do_syscall_64+0x174/0x580 [ 284.656134][ T8683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.656153][ T8683] [ 284.656158][ T8683] Freed by task 8676: [ 284.656167][ T8683] kasan_save_track+0x3e/0x80 [ 284.656185][ T8683] kasan_save_free_info+0x46/0x50 [ 284.656214][ T8683] __kasan_slab_free+0x5c/0x80 [ 284.656235][ T8683] kmem_cache_free+0x187/0x6c0 [ 284.656258][ T8683] eventpoll_release_file+0xc2/0x240 [ 284.656281][ T8683] __fput+0x83c/0xa70 [ 284.656299][ T8683] task_work_run+0x1d9/0x270 [ 284.656320][ T8683] exit_to_user_mode_loop+0x193/0x680 [ 284.656340][ T8683] do_syscall_64+0x353/0x580 [ 284.656367][ T8683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.656385][ T8683] [ 284.656390][ T8683] The buggy address belongs to the object at ffff88803828b020 [ 284.656390][ T8683] which belongs to the cache ep_head of size 16 [ 284.656408][ T8683] The buggy address is located 8 bytes inside of [ 284.656408][ T8683] freed 16-byte region [ffff88803828b020, ffff88803828b030) [ 284.656429][ T8683] [ 284.656434][ T8683] The buggy address belongs to the physical page: [ 284.656455][ T8683] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803828b920 pfn:0x3828b [ 284.656478][ T8683] memcg:ffff88805e56c801 [ 284.656488][ T8683] flags: 0x80000000000200(workingset|node=0|zone=1) [ 284.656510][ T8683] page_type: f5(slab) [ 284.656529][ T8683] raw: 0080000000000200 ffff8880212a2dc0 ffffea0000fe3250 ffffea00008bf010 [ 284.656548][ T8683] raw: ffff88803828b920 0000000800800022 00000000f5000000 ffff88805e56c801 [ 284.656559][ T8683] page dumped because: kasan: bad access detected [ 284.656573][ T8683] page_owner tracks the page as allocated [ 284.656581][ T8683] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4975, tgid 4975 (udevd), ts 23555251355, free_ts 0 [ 284.656615][ T8683] post_alloc_hook+0x1f9/0x250 [ 284.656644][ T8683] get_page_from_freelist+0x265c/0x26e0 [ 284.656670][ T8683] __alloc_frozen_pages_noprof+0x18d/0x380 [ 284.656697][ T8683] allocate_slab+0x74/0x5e0 [ 284.656724][ T8683] refill_objects+0x33c/0x3d0 [ 284.656751][ T8683] __pcs_replace_empty_main+0x373/0x720 [ 284.656779][ T8683] kmem_cache_alloc_noprof+0x433/0x680 [ 284.656800][ T8683] ep_insert+0x512/0x1820 [ 284.656824][ T8683] do_epoll_ctl_file+0x8bb/0xed0 [ 284.656856][ T8683] __se_sys_epoll_ctl+0x14e/0x210 [ 284.656881][ T8683] do_syscall_64+0x174/0x580 [ 284.656909][ T8683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.656928][ T8683] page_owner free stack trace missing [ 284.656936][ T8683] [ 284.656940][ T8683] Memory state around the buggy address: [ 284.656951][ T8683] ffff88803828af00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc [ 284.656965][ T8683] ffff88803828af80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 284.656978][ T8683] >ffff88803828b000: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 284.656988][ T8683] ^ [ 284.656999][ T8683] ffff88803828b080: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 284.657012][ T8683] ffff88803828b100: fa fb fc fc fa fb fc fc fa fb fc fc 00 00 fc fc [ 284.657022][ T8683] ================================================================== [ 284.663183][ T8683] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 284.663208][ T8683] CPU: 1 UID: 0 PID: 8683 Comm: syz.0.856 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 284.663237][ T8683] Tainted: [L]=SOFTLOCKUP [ 284.663245][ T8683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 284.663257][ T8683] Call Trace: [ 284.663264][ T8683] [ 284.663272][ T8683] vpanic+0x56c/0xa60 [ 284.663306][ T8683] ? __pfx_vpanic+0x10/0x10 [ 284.663334][ T8683] ? __pfx___schedule+0x10/0x10 [ 284.663364][ T8683] panic+0xc5/0xd0 [ 284.663391][ T8683] ? __pfx_panic+0x10/0x10 [ 284.663419][ T8683] ? preempt_schedule_thunk+0x16/0x40 [ 284.663463][ T8683] ? clear_tfile_check_list+0x114/0x380 [ 284.663494][ T8683] check_panic_on_warn+0x89/0xb0 [ 284.663519][ T8683] ? clear_tfile_check_list+0x114/0x380 [ 284.663547][ T8683] end_report+0x73/0x170 [ 284.663571][ T8683] ? clear_tfile_check_list+0x114/0x380 [ 284.663601][ T8683] kasan_report+0x128/0x150 [ 284.663629][ T8683] ? clear_tfile_check_list+0x114/0x380 [ 284.663661][ T8683] clear_tfile_check_list+0x114/0x380 [ 284.663690][ T8683] ? clear_tfile_check_list+0x22/0x380 [ 284.663721][ T8683] do_epoll_ctl_file+0x8fd/0xed0 [ 284.663750][ T8683] ? do_epoll_ctl_file+0xac3/0xed0 [ 284.663777][ T8683] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 284.663803][ T8683] ? __fget_files+0x3a6/0x420 [ 284.663827][ T8683] ? __fget_files+0x2a/0x420 [ 284.663861][ T8683] __se_sys_epoll_ctl+0x14e/0x210 [ 284.663890][ T8683] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 284.663922][ T8683] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.663943][ T8683] do_syscall_64+0x174/0x580 [ 284.663973][ T8683] ? trace_irq_disable+0x3b/0x140 [ 284.663996][ T8683] ? clear_bhb_loop+0x40/0x90 [ 284.664018][ T8683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.664038][ T8683] RIP: 0033:0x7f4f3580ce59 [ 284.664056][ T8683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.664075][ T8683] RSP: 002b:00007f4f33a1c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 284.664098][ T8683] RAX: ffffffffffffffda RBX: 00007f4f35a86180 RCX: 00007f4f3580ce59 [ 284.664114][ T8683] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000007 [ 284.664125][ T8683] RBP: 00007f4f358a2d6f R08: 0000000000000000 R09: 0000000000000000 [ 284.664138][ T8683] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 284.664152][ T8683] R13: 00007f4f35a86218 R14: 00007f4f35a86180 R15: 00007ffd55980d78 [ 284.664173][ T8683] [ 284.664455][ T8683] Kernel Offset: disabled