last executing test programs: 2m5.490241479s ago: executing program 1 (id=1094): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file0'}, 0xfffffffe) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 2m5.094192101s ago: executing program 1 (id=1103): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2a140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000540)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m3.782190496s ago: executing program 1 (id=1106): r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) recvmmsg(r0, &(0x7f0000004140)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x20, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) 2m2.340933967s ago: executing program 1 (id=1123): r0 = getpid() syz_pidfd_open(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 2m2.107866293s ago: executing program 1 (id=1125): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb9316", 0x32}, {&(0x7f0000000680)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d271d30d1a5fff9d3b1ce90b597992b2a4d5", 0x93}], 0x2}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2m1.035361127s ago: executing program 1 (id=1137): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000, 0x100, 0x1}, 0x20) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'netdevsim0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, r1}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003740)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x4040010) 2m0.702707952s ago: executing program 32 (id=1137): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000, 0x100, 0x1}, 0x20) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'netdevsim0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, r1}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003740)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x4040010) 10.974497257s ago: executing program 3 (id=1847): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 7.785596744s ago: executing program 3 (id=1858): syz_extract_tcp_res(&(0x7f0000000440), 0x18, 0x80000000) r0 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000500)=@newtaction={0xb4, 0x30, 0x53b, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_simple={0x9c, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x6e, 0x6, "41a4963ce672446e3244875379c931bb986943451bdda83005ae05dddaf665e719ecf87649482ab59973d35f159820ec7eb78ce5dbd79654db04f6b5d28fe679d902cb58bd9713100685f906d60f85539a72196531877ab737e158f2886f1e7eeac0e196649282a23174"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xb4}}, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000f40)=ANY=[@ANYBLOB="0c01000006000000000000000000000004000000000000000000000080000000e3000000000000002f7379732f06c0a49e4e00000000000000656edf0000000080000100000000008adcb51a38c154cce97c3818f0b5b45830920a254561464beace866339ff36688c24a22cc3a4c9f4c81fa3c277618fc547ad159bfdcc3847ef50bd2a9860eb5dded6d057d3189367185de0fcd00b7bf62cd6a3b1fcbc4738759b48b33b94893149740e9e6dad90d2926921314c67538f347aa4f78f16ee43533b4b6bdc45e01f9ba45985d8807a530cb7f2b27c33c959cb0a752be8bfdc3ed558e2fd52edc2c85ff00f7f7dc491ca3f8a8978ced77503e588909c6b31212b7c1882575b84052fcc49ff00"], 0x10c) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$sg(&(0x7f0000001080), 0x0, 0x500) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000000)={0x8, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e23, @private=0xa010100}}}, 0x108) 5.3292912s ago: executing program 4 (id=1866): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f00000007c0)={0xa, 0x4e23, 0x0, @loopback, 0x1170}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0xfefe) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_128={{0x303}, "db57cda808852139", "252432e72844858a068b92a5a810f4dc", "e900ff49", "5aee41448c84afb7"}, 0x28) close_range(r0, 0xffffffffffffffff, 0x0) 5.144180337s ago: executing program 4 (id=1868): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 4.939151554s ago: executing program 3 (id=1869): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x77, 0x2, 0x2, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x2010d3}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000700)=[@nested_amd_inject_event={0x180, 0x38, {0x2, 0xb5, 0x6, 0x8}}, @nested_vmresume={0x130, 0x18}, @uexit={0x0, 0x18, 0x3}, @rdmsr={0x66, 0x18, {0x8ac}}, @nested_amd_vmload={0x182, 0x18}, @cpuid={0x64, 0x18, {0x9, 0xd20d}}, @nested_amd_stgi={0x17e, 0x10}, @cpuid={0x64, 0x18, {0x7, 0x8}}, @set_irq_handler={0xc8, 0x20, {0x4e, 0x1}}, @uexit={0x0, 0x18, 0x8}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_load_code={0x12e, 0x5a, {0x3, "26470f00d8c442c98e286664f30fc77427d2c40289be48fcf30f59e166b82d008ee0c4e27d5a9000300000b8010000000f01c1c461ab2aaac7ff70b665660f71e765"}}, @set_irq_handler={0xc8, 0x20, {0xb8, 0x2}}, @nested_amd_invlpga={0x17d, 0x20, {0x8000000, 0xb766}}, @nested_load_code={0x12e, 0x72, {0x1, "0fc730660f3ace193348b8a4a20000000000000f23c00f21f83502000a000f23f80f20d835080000000f22d8360f01c9b9800000c00f3235004000000f30f2440f5fe9f40f01cac7442400c8000000c744240200000000ff2c24"}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0xfff, 0x0, 0x1}}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @cpuid={0x64, 0x18, {0x9, 0x4}}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_vmresume={0x130, 0x18, 0x1}, @uexit={0x0, 0x18, 0x54}, @nested_load_syzos={0x136, 0x30, {0x0, 0x2, [@nested_amd_stgi={0x17e, 0x10}]}}], 0x30c}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f0000000100)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.799743731s ago: executing program 2 (id=1871): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000a00)={0x70, 0x7, r1, 0x0, 0xfffffffffffffffc, 0x1000}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x0) sendfile(r3, r2, &(0x7f0000000080)=0xb, 0x8) 4.662795483s ago: executing program 2 (id=1872): io_setup(0x1, &(0x7f0000000040)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 4.52575388s ago: executing program 0 (id=1874): close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x37) syz_emit_vhci(&(0x7f00000011c0)=ANY=[@ANYRES32=r0], 0x10) 4.449933945s ago: executing program 0 (id=1875): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0005002000010027bd7000ccfdf6ffe71c4d7e35008123c7eed800"/39], 0x2c}, 0x1, 0x0, 0x0, 0x24048860}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) socket$inet6(0xa, 0x2, 0xe64) setresuid(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = getpgid(0x0) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x0, r4}) sendmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1, 0x0, 0x0, 0x10}, 0x1) syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a0000090505"], 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x31}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\twr'], 0xa) r8 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r8, 0xc00464be, &(0x7f0000000180)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) 4.369547966s ago: executing program 3 (id=1877): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000012006b00000000d86e6c1d0000147ea60864160af36504b68675f8001d000a008be6050017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f40800036806010000080003", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000dc0)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/73, &(0x7f00000002c0)=""/95}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) 4.131981244s ago: executing program 3 (id=1879): syz_extract_tcp_res(&(0x7f0000000440), 0x18, 0x80000000) r0 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000500)=@newtaction={0xb4, 0x30, 0x53b, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_simple={0x9c, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x6e, 0x6, "41a4963ce672446e3244875379c931bb986943451bdda83005ae05dddaf665e719ecf87649482ab59973d35f159820ec7eb78ce5dbd79654db04f6b5d28fe679d902cb58bd9713100685f906d60f85539a72196531877ab737e158f2886f1e7eeac0e196649282a23174"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xb4}}, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x10c) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$sg(&(0x7f0000001080), 0x0, 0x500) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000000)={0x8, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e23, @private=0xa010100}}}, 0x108) 3.988389448s ago: executing program 5 (id=1880): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x9, 0x8000040000000001}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.868240825s ago: executing program 2 (id=1881): r0 = fsopen(&(0x7f0000000100)='fuse\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000003700)='default_permissions', &(0x7f0000003740)="8c", 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a900000000c0a010400000000000000000a0000060900020073797a31000000000900010073797a310000000064000380600000800c00018006000100d65b000050000b80200001800e000100636f6e6e6c696d69740000000c000280080001"], 0xb8}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000000101010200000000000000000100000914001980090001"], 0x28}, 0x1, 0x0, 0x0, 0x20044054}, 0xc000) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="5c00000028006b05c84e21020ab16d6e", 0x10}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000000000000700", @ANYBLOB="200000000000000014001a80100006"], 0x34}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x7f, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0xfff, 0xb3, 0x39da], 0x30000, 0x2010d3}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x402, 0xf7f, 0x30314752, 0x3, 0x0, [{0xc, 0xf}, {0x8, 0xa}, {0xd, 0x8}, {0x5, 0x8}, {0x2, 0x3}, {0x5, 0x4}, {0x6, 0x409}, {0x10001, 0x1800002}], 0x0, 0xd, 0x2, 0x3078182a3427730f, 0x1}}) 2.930925915s ago: executing program 3 (id=1882): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) userfaultfd(0x801) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x2081) pipe(&(0x7f00000007c0)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40000) syz_init_net_socket$ax25(0x3, 0x2, 0xc4) userfaultfd(0x801) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x6e7e42, 0x0) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f00000017c0)=ANY=[@ANYRES8=r0, @ANYBLOB='\a'], 0x0) 2.825806306s ago: executing program 5 (id=1883): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000a00)={0x70, 0x7, r1, 0x0, 0xfffffffffffffffc, 0x1000}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x0) sendfile(r3, r2, &(0x7f0000000080)=0xb, 0x8) 2.775272526s ago: executing program 0 (id=1884): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="020300030f0000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070705000080030005000000000002004e22ac14140a0000000000"], 0x78}, 0x1, 0x7}, 0x40000) 2.726245627s ago: executing program 5 (id=1885): sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd7000fddbdf25200000001c002d80080002"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x20004000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0), 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.623721592s ago: executing program 2 (id=1886): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x77, 0x2, 0x2, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x2010d3}) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f00000002c0)=[@nested_amd_inject_event={0x180, 0x38, {0x2, 0xb5, 0x7, 0x8}}, @nested_vmresume={0x130, 0x18}, @uexit={0x0, 0x18, 0x3}, @rdmsr={0x66, 0x18, {0x8ac}}, @wr_drn={0x68, 0x20, {0x0, 0x101}}, @nested_amd_stgi={0x17e, 0x10}, @cpuid={0x64, 0x18, {0x7, 0x8}}, @out_dx={0x6a, 0x28, {0xbfe7, 0x4, 0x1}}, @uexit={0x0, 0x18, 0x8}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0xc, 0x5, 0x50b, 0x1}}, @nested_load_code={0x12e, 0x5a, {0x3, "26470f00d8c442c98e286664f30fc77427d2c40289be48fcf30f59e166b82d008ee0c4e27d5a9000300000b8010000000f01c1c461ab2aaac7ff70b665660f71e765"}}, @set_irq_handler={0xc8, 0x20, {0xb8, 0x2}}, @wr_crn={0x67, 0x20, {0x0, 0xc38}}, @nested_load_code={0x12e, 0x72, {0x1, "0fc730660f3ace193348b8a4a20000000000000f23c00f21f83502000a000f23f80f20d835080000000f22d8360f01c9b9800000c00f3235004000000f30f2440f5fe9f40f01cac7442400c8000000c744240200000000ff2c24"}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0xfff, 0x0, 0x1}}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @cpuid={0x64, 0x18, {0x9, 0x4}}, @nested_load_code={0x12e, 0x58, {0x0, "d2980f0000008fc8208ed50065666766450f72e400b9800000c00f3235004000000f303e0f0766654d99f7beca0e69b18f2808ecbfbb000000262643ab440f07"}}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_load_code={0x12e, 0x5c, {0x3, "66b8f7008ee8f3f23e0f070f011dbade76270fc79d7c91a1ad660f3881a70c0000000f01c466baf80cb8bcdd0b86ef66bafc0cb800200000ef0f01c56641d9fd640f01cf"}}, @nested_vmresume={0x130, 0x18, 0x1}, @uexit={0x0, 0x18, 0x54}, @uexit={0x0, 0x18, 0xfffffffffffff800}], 0x3d8}) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000000180)={0x54000, 0xd000, 0x2, 0x1, 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f0000000100)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.617231038s ago: executing program 0 (id=1887): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x77, 0x2, 0x2, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x2010d3}) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000700)=[@nested_amd_inject_event={0x180, 0x38, {0x2, 0xb5, 0x6, 0x8}}, @nested_vmresume={0x130, 0x18}, @uexit={0x0, 0x18, 0x3}, @rdmsr={0x66, 0x18, {0x8ac}}, @nested_amd_vmload={0x182, 0x18}, @cpuid={0x64, 0x18, {0x9, 0xd20d}}, @nested_amd_stgi={0x17e, 0x10}, @cpuid={0x64, 0x18, {0x7, 0x8}}, @set_irq_handler={0xc8, 0x20, {0x4e, 0x1}}, @uexit={0x0, 0x18, 0x8}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_load_code={0x12e, 0x5a, {0x3, "26470f00d8c442c98e286664f30fc77427d2c40289be48fcf30f59e166b82d008ee0c4e27d5a9000300000b8010000000f01c1c461ab2aaac7ff70b665660f71e765"}}, @set_irq_handler={0xc8, 0x20, {0xb8, 0x2}}, @nested_amd_invlpga={0x17d, 0x20, {0x8000000, 0xb766}}, @nested_load_code={0x12e, 0x72, {0x1, "0fc730660f3ace193348b8a4a20000000000000f23c00f21f83502000a000f23f80f20d835080000000f22d8360f01c9b9800000c00f3235004000000f30f2440f5fe9f40f01cac7442400c8000000c744240200000000ff2c24"}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0xfff, 0x0, 0x1}}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @cpuid={0x64, 0x18, {0x9, 0x4}}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_vmresume={0x130, 0x18, 0x1}, @uexit={0x0, 0x18, 0x54}, @nested_load_syzos={0x136, 0x30, {0x0, 0x2, [@nested_amd_stgi={0x17e, 0x10}]}}], 0x30c}) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000000180)={0x54000, 0xd000, 0x2, 0x1, 0x2}) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f0000000100)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.572070874s ago: executing program 4 (id=1888): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000940)="99", 0x1}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f00000009c0)='~', 0x1}, {&(0x7f0000000a00)}, {&(0x7f0000000440)="06", 0x1}, {&(0x7f0000000580)='k', 0x1}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000280)='$', 0x1}], 0xc}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc", 0x1}, {&(0x7f0000001080)="c9", 0x1}, {&(0x7f0000002180)='-', 0x1}, {&(0x7f0000002240)='R', 0x1}, {&(0x7f00000033c0)="c4", 0x1}], 0x5}}], 0x2, 0x4000000) 2.432684829s ago: executing program 4 (id=1889): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000012006b00000000d86e6c1d0000147ea60864160af36504b68675f8001d000a008be6050017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f40800036806010000080003", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000dc0)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/73, &(0x7f00000002c0)=""/95}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) 2.295502243s ago: executing program 2 (id=1890): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r3, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0x100000000, 0x1) 2.282712777s ago: executing program 5 (id=1891): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x7, 0x2) recvmsg(r1, 0x0, 0x40000000) r2 = memfd_secret(0x80000) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000080)={{{@in=@remote, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000340)={0x8, 0x4}) quotactl_fd$Q_GETFMT(r4, 0xffffffff80000402, r3, &(0x7f0000000400)) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x800) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r7, &(0x7f0000009b80)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xd0}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) write$cgroup_subtree(r1, 0x0, 0xfe33) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r8 = socket$inet6(0xa, 0x2, 0x0) close(0x3) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x3c, 0x0, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x400003}]}, 0x3c}}, 0x20000018) 2.183572518s ago: executing program 0 (id=1892): syz_extract_tcp_res(&(0x7f0000000440), 0x18, 0x80000000) r0 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000500)=@newtaction={0xb4, 0x30, 0x53b, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_simple={0x9c, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x6e, 0x6, "41a4963ce672446e3244875379c931bb986943451bdda83005ae05dddaf665e719ecf87649482ab59973d35f159820ec7eb78ce5dbd79654db04f6b5d28fe679d902cb58bd9713100685f906d60f85539a72196531877ab737e158f2886f1e7eeac0e196649282a23174"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xb4}}, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x10c) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$sg(&(0x7f0000001080), 0x0, 0x500) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000000)={0x8, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e23, @private=0xa010100}}}, 0x108) 2.164178342s ago: executing program 4 (id=1893): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000180)=[{0x80002, 0x2, {0x0, 0x1}, {0x2, 0xf0, 0x4}, 0xfd, 0xfe}, {0x2, 0x4, {0x1, 0xf0}, {0x2, 0x0, 0x4}, 0x0, 0x1}], 0x40) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 1.019829193s ago: executing program 2 (id=1894): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0005002000010027bd7000ccfdf6ffe71c4d7e35008123c7eed800"/39], 0x2c}, 0x1, 0x0, 0x0, 0x24048860}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) socket$inet6(0xa, 0x2, 0xe64) setresuid(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = getpgid(0x0) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x0, r4}) sendmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1, 0x0, 0x0, 0x10}, 0x1) syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a0000090505"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\twr'], 0xa) r7 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r7, 0xc00464be, &(0x7f0000000180)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) 503.218648ms ago: executing program 5 (id=1895): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000a00)={0x70, 0x7, r1, 0x0, 0xfffffffffffffffc, 0x1000}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x0) sendfile(r3, r2, &(0x7f0000000080)=0xb, 0x8) 377.258868ms ago: executing program 5 (id=1896): r0 = fsopen(&(0x7f0000000100)='fuse\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000003700)='default_permissions', &(0x7f0000003740)="8c", 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a900000000c0a010400000000000000000a0000060900020073797a31000000000900010073797a310000000064000380600000800c00018006000100d65b000050000b80200001800e000100636f6e6e6c696d69740000000c000280080001"], 0xb8}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000000101010200000000000000000100000914001980090001"], 0x28}, 0x1, 0x0, 0x0, 0x20044054}, 0xc000) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="5c00000028006b05c84e21020ab16d6e", 0x10}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000000000000700", @ANYBLOB="200000000000000014001a80100006"], 0x34}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x7f, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0xfff, 0xb3, 0x39da], 0x30000, 0x2010d3}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x402, 0xf7f, 0x30314752, 0x3, 0x0, [{0xc, 0xf}, {0x8, 0xa}, {0xd, 0x8}, {0x5, 0x8}, {0x2, 0x3}, {0x5, 0x4}, {0x6, 0x409}, {0x10001, 0x1800002}], 0x0, 0xd, 0x2, 0x3078182a3427730f, 0x1}}) 70.975761ms ago: executing program 0 (id=1897): io_uring_setup(0xb0b, &(0x7f0000000200)={0x0, 0x3a2b, 0x8, 0x1, 0x2}) socket$key(0xf, 0x3, 0x2) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000080), 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4) 0s ago: executing program 4 (id=1898): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x20050800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0x1d0003, 0x0, {[0xffffffffffffffff, 0x0, 0x8, 0xfffffffdefffff16, 0x3, 0x10, 0x4, 0x4]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): 620d 200000004a80 returned -16 [ 136.990627][ T37] audit: type=1800 audit(1772952369.165:2): pid=6375 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.156" name="bus" dev="overlay" ino=191 res=0 errno=0 [ 137.102359][ T5818] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 137.210169][ T6384] syz.4.159 uses obsolete (PF_INET,SOCK_PACKET) [ 137.238207][ T6389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.161'. [ 138.020726][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 138.182353][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.182388][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.182429][ T10] usb 5-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 138.182452][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.261197][ T10] usb 5-1: config 0 descriptor?? [ 138.726623][ T10] hid (null): global environment stack underflow [ 138.726657][ T10] hid (null): report_id 51381 is invalid [ 138.726673][ T10] hid (null): unknown global tag 0x32 [ 138.817087][ T10] waltop 0003:172F:0500.0004: unexpected long global item [ 138.847249][ T10] waltop 0003:172F:0500.0004: probe with driver waltop failed with error -22 [ 138.985738][ T992] usb 5-1: USB disconnect, device number 6 [ 139.194769][ T6437] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 140.800507][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 140.904192][ T6485] netlink: 'syz.1.196': attribute type 29 has an invalid length. [ 140.927152][ T6491] netlink: 'syz.1.196': attribute type 29 has an invalid length. [ 140.950317][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 140.954844][ T10] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 140.954875][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.980721][ T10] usb 5-1: config 0 descriptor?? [ 141.063121][ T10] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 142.436534][ T10] gspca_vc032x: reg_w err -71 [ 142.436554][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 142.436564][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 142.436573][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 142.436582][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 142.436592][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 142.436600][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 142.436609][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 142.436617][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 142.436626][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 142.436635][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 142.436644][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 142.436654][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 142.436662][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 142.436671][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 142.436679][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 142.436687][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 142.436696][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 142.436705][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 142.436713][ T10] gspca_vc032x: Unknown sensor... [ 142.436808][ T10] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 142.454410][ T10] usb 5-1: USB disconnect, device number 7 [ 145.255787][ T6604] syzkaller1: entered promiscuous mode [ 145.255815][ T6604] syzkaller1: entered allmulticast mode [ 145.405306][ T6611] qnx4: no qnx4 filesystem (no root dir). [ 148.010495][ T6663] netlink: 4 bytes leftover after parsing attributes in process `syz.1.270'. [ 148.010530][ T6663] openvswitch: netlink: Unknown nsh attribute 0 [ 148.980881][ T992] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 149.141700][ T992] usb 1-1: Using ep0 maxpacket: 32 [ 149.153183][ T992] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 149.153212][ T992] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.169609][ T992] usb 1-1: config 0 descriptor?? [ 149.184895][ T992] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 150.410770][ T992] gspca_vc032x: reg_w err -71 [ 150.410790][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 150.410801][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 150.410809][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 150.410818][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 150.410827][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 150.410835][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 150.410844][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 150.410853][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 150.410861][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 150.410869][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 150.410878][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 150.410887][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 150.410895][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 150.410904][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 150.410923][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 150.410932][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 150.410941][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 150.410950][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 150.410958][ T992] gspca_vc032x: Unknown sensor... [ 150.411044][ T992] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 150.450869][ T992] usb 1-1: USB disconnect, device number 8 [ 152.950971][ T6779] syz.3.317 (6779) used greatest stack depth: 17376 bytes left [ 153.490139][ T31] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 153.571008][ T6815] binder: BINDER_SET_CONTEXT_MGR already set [ 153.571025][ T6815] binder: 6814:6815 ioctl 4018620d 200000004a80 returned -16 [ 153.652797][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.652833][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.652873][ T31] usb 5-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 153.652906][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.659316][ T31] usb 5-1: config 0 descriptor?? [ 153.808604][ T6822] fuse: Bad value for 'fd' [ 154.093565][ T31] usbhid 5-1:0.0: can't add hid device: -71 [ 154.093709][ T31] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 154.116952][ T31] usb 5-1: USB disconnect, device number 8 [ 155.150087][ T992] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 155.300195][ T992] usb 5-1: Using ep0 maxpacket: 32 [ 155.303127][ T992] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 155.303156][ T992] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.347082][ T992] usb 5-1: config 0 descriptor?? [ 155.366833][ T992] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 155.750431][ T6874] fuse: Bad value for 'fd' [ 155.991686][ T5949] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 156.151520][ T5949] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.151784][ T5949] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.151828][ T5949] usb 2-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 156.151852][ T5949] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.184489][ T5949] usb 2-1: config 0 descriptor?? [ 156.610026][ T5949] usbhid 2-1:0.0: can't add hid device: -71 [ 156.610289][ T5949] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 156.649166][ T5949] usb 2-1: USB disconnect, device number 8 [ 156.775765][ T992] gspca_vc032x: reg_w err -71 [ 156.775786][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.775797][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.775806][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.775814][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.775824][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.775832][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.775841][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.775850][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.775859][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.775868][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.775877][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.775895][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.775904][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.775912][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.775921][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.775930][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.775938][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.775947][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.775955][ T992] gspca_vc032x: Unknown sensor... [ 156.776050][ T992] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 156.800549][ T992] usb 5-1: USB disconnect, device number 9 [ 159.219260][ T5818] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 159.591091][ T992] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 159.740552][ T992] usb 1-1: Using ep0 maxpacket: 16 [ 159.771727][ T992] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.771757][ T992] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 159.777640][ T992] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 159.777671][ T992] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.777692][ T992] usb 1-1: Product: syz [ 159.777706][ T992] usb 1-1: Manufacturer: syz [ 159.777720][ T992] usb 1-1: SerialNumber: syz [ 160.080467][ T992] usb 1-1: 0:2 : does not exist [ 160.094327][ T992] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 160.332782][ T992] usb 1-1: USB disconnect, device number 9 [ 160.361138][ T5818] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 160.511327][ T5946] udevd[5946]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 160.824159][ T7030] binder: BINDER_SET_CONTEXT_MGR already set [ 160.824176][ T7030] binder: 7027:7030 ioctl 4018620d 200000004a80 returned -16 [ 161.035059][ T7040] ieee802154 phy0 wpan0: encryption failed: -22 [ 161.193425][ T5818] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 161.560155][ T31] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 161.720023][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 161.727188][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.727216][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 161.741618][ T31] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 161.741651][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.741672][ T31] usb 1-1: Product: syz [ 161.741686][ T31] usb 1-1: Manufacturer: syz [ 161.741700][ T31] usb 1-1: SerialNumber: syz [ 161.998081][ T31] usb 1-1: 0:2 : does not exist [ 162.019505][ T31] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 162.352182][ T31] usb 1-1: USB disconnect, device number 10 [ 162.502161][ T5818] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 162.664442][ T5946] udevd[5946]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 163.127026][ T7101] binder: BINDER_SET_CONTEXT_MGR already set [ 163.127043][ T7101] binder: 7100:7101 ioctl 4018620d 200000004a80 returned -16 [ 163.699117][ T5818] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 163.843598][ T7115] fuse: Bad value for 'fd' [ 164.733842][ T5818] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 164.756307][ T7141] fuse: Bad value for 'fd' [ 165.567704][ T7167] fuse: Bad value for 'fd' [ 165.663747][ T7174] netlink: 12 bytes leftover after parsing attributes in process `syz.2.486'. [ 165.887503][ T7184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.490'. [ 165.887536][ T7184] openvswitch: netlink: nsh attr 1 has unexpected len 0 expected 8 [ 166.743183][ T7210] netlink: 12 bytes leftover after parsing attributes in process `syz.3.502'. [ 167.150975][ T7221] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4080200224 (130566407168 ns) > initial count (123270821696 ns). Using initial count to start timer. [ 167.636196][ T7240] netlink: 12 bytes leftover after parsing attributes in process `syz.1.515'. [ 167.830091][ T992] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 167.991131][ T992] usb 4-1: Using ep0 maxpacket: 16 [ 167.997444][ T992] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.997470][ T992] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 168.002508][ T992] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 168.002536][ T992] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.002553][ T992] usb 4-1: Product: syz [ 168.002566][ T992] usb 4-1: Manufacturer: syz [ 168.002578][ T992] usb 4-1: SerialNumber: syz [ 168.071810][ T5949] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 168.220263][ T5949] usb 2-1: Using ep0 maxpacket: 32 [ 168.222575][ T5949] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 168.222664][ T5949] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.228969][ T992] usb 4-1: 0:2 : does not exist [ 168.267569][ T992] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 168.272854][ T5949] usb 2-1: config 0 descriptor?? [ 168.336299][ T5949] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 168.563750][ T992] usb 4-1: USB disconnect, device number 6 [ 168.746242][ T5946] udevd[5946]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 169.503920][ T5949] gspca_vc032x: reg_w err -71 [ 169.503941][ T5949] gspca_vc032x: I2c Bus Busy Wait 00 [ 169.503951][ T5949] gspca_vc032x: I2c Bus Busy Wait 00 [ 169.503960][ T5949] gspca_vc032x: I2c Bus Busy Wait 00 [ 169.503969][ T5949] gspca_vc032x: I2c Bus Busy Wait 00 [ 169.504167][ T5949] gspca_vc032x: I2c Bus Busy Wait 00 [ 169.504186][ T5949] gspca_vc032x: I2c Bus Busy Wait 00 [ 169.504195][ T5949] gspca_vc032x: I2c Bus Busy Wait 00 [ 169.504204][ T5949] gspca_vc032x: I2c Bus Busy Wait 00 [ 169.504212][ T5949] gspca_vc032x: I2c Bus Busy Wait 00 [ 169.504221][ T5949] gspca_vc032x: I2c Bus Busy Wait 00 [ 169.504229][ T5949] gspca_vc032x: I2c Bus Busy Wait 00 [ 169.504238][ T5949] gspca_vc032x: I2c Bus Busy Wait 00 [ 169.504247][ T5949] gspca_vc032x: I2c Bus Busy Wait 00 [ 169.504254][ T5949] gspca_vc032x: I2c Bus Busy Wait 00 [ 169.504264][ T5949] gspca_vc032x: I2c Bus Busy Wait 00 [ 169.504272][ T5949] gspca_vc032x: I2c Bus Busy Wait 00 [ 169.504281][ T5949] gspca_vc032x: I2c Bus Busy Wait 00 [ 169.504290][ T5949] gspca_vc032x: I2c Bus Busy Wait 00 [ 169.504298][ T5949] gspca_vc032x: Unknown sensor... [ 169.504395][ T5949] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 169.514112][ T5949] usb 2-1: USB disconnect, device number 9 [ 170.999857][ T7317] netlink: 4 bytes leftover after parsing attributes in process `syz.4.545'. [ 170.999890][ T7317] openvswitch: netlink: Unknown nsh attribute 0 [ 173.570218][ T5949] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 173.703567][ T5949] usb 4-1: device descriptor read/64, error -71 [ 173.960087][ T5949] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 174.090127][ T5949] usb 4-1: device descriptor read/64, error -71 [ 174.207892][ T5949] usb usb4-port1: attempt power cycle [ 174.560828][ T5949] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 174.581377][ T5949] usb 4-1: device descriptor read/8, error -71 [ 174.585899][ T7424] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 174.820189][ T5949] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 174.840904][ T5949] usb 4-1: device descriptor read/8, error -71 [ 174.950481][ T5949] usb usb4-port1: unable to enumerate USB device [ 176.051476][ T7473] binder: BINDER_SET_CONTEXT_MGR already set [ 176.051493][ T7473] binder: 7472:7473 ioctl 4018620d 200000004a80 returned -16 [ 176.146019][ T7478] binder: BINDER_SET_CONTEXT_MGR already set [ 176.146035][ T7478] binder: 7476:7478 ioctl 4018620d 200000004a80 returned -16 [ 176.523713][ T7491] overlayfs: failed to resolve './file1/file0': -2 [ 176.537204][ T7488] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 177.146320][ T7517] kvm: apic: phys broadcast and lowest prio [ 177.209031][ T7520] overlayfs: failed to resolve './file1/file0': -2 [ 178.560218][ T5949] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 178.580954][ T7557] overlayfs: failed to resolve './file1/file0': -2 [ 178.710062][ T5949] usb 4-1: Using ep0 maxpacket: 16 [ 178.716414][ T5949] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.716444][ T5949] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 178.719781][ T5949] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 178.719809][ T5949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.719827][ T5949] usb 4-1: Product: syz [ 178.719842][ T5949] usb 4-1: Manufacturer: syz [ 178.719855][ T5949] usb 4-1: SerialNumber: syz [ 178.982619][ T5949] usb 4-1: 0:2 : does not exist [ 178.994737][ T5949] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 179.225867][ T5949] usb 4-1: USB disconnect, device number 11 [ 179.324940][ T5946] udevd[5946]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 179.857138][ T7584] kAFS: No cell specified [ 180.322037][ T7595] netlink: 36 bytes leftover after parsing attributes in process `syz.0.646'. [ 180.520263][ T7603] warning: `syz.2.650' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 182.552048][ T7647] kAFS: No cell specified [ 183.310264][ T7676] fuse: Bad value for 'fd' [ 183.941460][ T7703] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 184.355417][ T7715] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 185.980074][ T31] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 186.110219][ T31] usb 4-1: device descriptor read/64, error -71 [ 186.370184][ T31] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 186.506724][ T31] usb 4-1: device descriptor read/64, error -71 [ 186.624820][ T31] usb usb4-port1: attempt power cycle [ 186.980046][ T31] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 187.001930][ T31] usb 4-1: device descriptor read/8, error -71 [ 187.120551][ T7826] netlink: 24 bytes leftover after parsing attributes in process `syz.0.738'. [ 187.266289][ T31] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 187.281645][ T31] usb 4-1: device descriptor read/8, error -71 [ 187.394840][ T31] usb usb4-port1: unable to enumerate USB device [ 187.660362][ T7841] kAFS: No cell specified [ 188.165716][ T7862] netlink: 4 bytes leftover after parsing attributes in process `syz.1.752'. [ 188.165749][ T7862] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 189.067342][ T7896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.763'. [ 189.067375][ T7896] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 189.367756][ T7909] afs: Unknown parameter 'dy' [ 191.206264][ T7970] binder: 7969:7970 ioctl 4018620d 0 returned -22 [ 193.020128][ T992] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 193.122297][ T8028] overlayfs: failed to resolve './file0': -2 [ 193.188578][ T992] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 193.188613][ T992] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.188634][ T992] usb 4-1: Product: syz [ 193.188648][ T992] usb 4-1: Manufacturer: syz [ 193.188663][ T992] usb 4-1: SerialNumber: syz [ 193.207584][ T992] usb 4-1: config 0 descriptor?? [ 193.419325][ T992] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 194.729050][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.730089][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.997792][ T8082] overlayfs: failed to resolve './file1': -2 [ 195.075535][ T992] usb 4-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 32) [ 195.076218][ T992] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 195.076307][ T992] usb 4-1: media controller created [ 195.090869][ T992] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 195.313150][ T992] i2c i2c-1: Added multiplexed i2c bus 2 [ 195.313179][ T992] rtl2832 1-0010: Realtek RTL2832 successfully attached [ 195.314200][ T992] usb 4-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2832 (DVB-T))... [ 195.315129][ T992] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 195.406196][ T992] DVB: Unable to find symbol r820t_attach() [ 195.517390][ T8096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.845'. [ 195.630982][ T992] usb 4-1: USB disconnect, device number 16 [ 197.374067][ T5887] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 197.540079][ T5887] usb 5-1: Using ep0 maxpacket: 32 [ 197.544193][ T5887] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 197.544222][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.570247][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 197.585590][ T5887] usb 5-1: config 0 descriptor?? [ 197.624876][ T5887] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 197.720077][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 197.722687][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.722712][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 197.729668][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 197.729698][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.729716][ T10] usb 2-1: Product: syz [ 197.729732][ T10] usb 2-1: Manufacturer: syz [ 197.729745][ T10] usb 2-1: SerialNumber: syz [ 197.966597][ T10] usb 2-1: 0:2 : does not exist [ 197.974117][ T10] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 198.080621][ T10] usb 2-1: USB disconnect, device number 10 [ 198.089568][ T8179] fuse: Bad value for 'group_id' [ 198.089589][ T8179] fuse: Bad value for 'group_id' [ 198.191203][ T5946] udevd[5946]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 198.833384][ T5887] gspca_vc032x: reg_w err -71 [ 198.833404][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 198.833414][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 198.833423][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 198.833431][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 198.833439][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 198.833447][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 198.833456][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 198.833464][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 198.833473][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 198.833481][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 198.833489][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 198.833497][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 198.833506][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 198.833527][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 198.833537][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 198.833545][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 198.833554][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 198.833562][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 198.833570][ T5887] gspca_vc032x: Unknown sensor... [ 198.833657][ T5887] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 198.970603][ T5887] usb 5-1: USB disconnect, device number 10 [ 199.307014][ T8204] fuse: Bad value for 'group_id' [ 199.307037][ T8204] fuse: Bad value for 'group_id' [ 200.127033][ T8238] fuse: Bad value for 'group_id' [ 200.127055][ T8238] fuse: Bad value for 'group_id' [ 200.310046][ T5887] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 200.460211][ T5887] usb 2-1: Using ep0 maxpacket: 32 [ 200.463928][ T5887] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 200.463957][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.497100][ T5887] usb 2-1: config 0 descriptor?? [ 200.529268][ T5887] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 201.088543][ T8266] netlink: 16 bytes leftover after parsing attributes in process `syz.3.920'. [ 201.399249][ T8274] netlink: 'syz.0.922': attribute type 33 has an invalid length. [ 201.399273][ T8274] netlink: 152 bytes leftover after parsing attributes in process `syz.0.922'. [ 201.609980][ T8279] fuse: Bad value for 'fd' [ 201.735674][ T5887] gspca_vc032x: reg_w err -71 [ 201.735694][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 201.735705][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 201.735713][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 201.735722][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 201.735732][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 201.735740][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 201.735749][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 201.735758][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 201.735767][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 201.735776][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 201.735785][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 201.735794][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 201.735803][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 201.735811][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 201.735820][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 201.735829][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 201.735838][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 201.735847][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 201.735856][ T5887] gspca_vc032x: Unknown sensor... [ 201.735950][ T5887] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 201.858086][ T5887] usb 2-1: USB disconnect, device number 11 [ 202.271938][ T8301] fuse: Bad value for 'fd' [ 205.160537][ T8393] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 205.532023][ T8401] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 205.532088][ T8401] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 206.654216][ T8433] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 206.685059][ T8434] fuse: Unknown parameter 'grou00000000000000000000' [ 206.962469][ T8443] overlayfs: missing 'lowerdir' [ 207.329244][ T8459] fuse: Unknown parameter 'grou00000000000000000000' [ 207.978708][ T8483] overlayfs: missing 'lowerdir' [ 208.802161][ T5887] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 208.970365][ T5887] usb 5-1: Using ep0 maxpacket: 32 [ 208.985814][ T5887] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 208.985848][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.026713][ T5887] usb 5-1: config 0 descriptor?? [ 209.042077][ T5887] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 209.121829][ T8512] overlayfs: missing 'lowerdir' [ 209.416054][ T8521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1016'. [ 209.854247][ T8526] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3343437945 (53495007120 ns) > initial count (52285443328 ns). Using initial count to start timer. [ 210.283401][ T5887] gspca_vc032x: reg_w err -71 [ 210.283420][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 210.283432][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 210.283440][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 210.283448][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 210.283457][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 210.283466][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 210.283475][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 210.283484][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 210.283493][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 210.283501][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 210.283510][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 210.283519][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 210.283528][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 210.283537][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 210.283546][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 210.283555][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 210.283564][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 210.283573][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 210.283582][ T5887] gspca_vc032x: Unknown sensor... [ 210.283676][ T5887] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 210.423507][ T5887] usb 5-1: USB disconnect, device number 11 [ 211.030280][ T8545] overlayfs: missing 'workdir' [ 211.172195][ T8547] binder: BINDER_SET_CONTEXT_MGR already set [ 211.172212][ T8547] binder: 8546:8547 ioctl 4018620d 200000004a80 returned -16 [ 211.214120][ T8549] binder: 8548:8549 ioctl c0306201 2000000001c0 returned -14 [ 212.160103][ T5817] Bluetooth: hci0: command 0x0406 tx timeout [ 212.166008][ T5810] Bluetooth: hci3: command 0x0406 tx timeout [ 212.166173][ T5810] Bluetooth: hci1: command 0x0406 tx timeout [ 212.173349][ T5810] Bluetooth: hci2: command 0x0406 tx timeout [ 212.356156][ T8571] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 212.594216][ T8577] overlayfs: missing 'workdir' [ 212.613452][ T8579] binder: BINDER_SET_CONTEXT_MGR already set [ 212.613469][ T8579] binder: 8578:8579 ioctl 4018620d 200000004a80 returned -16 [ 213.318998][ T8604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1053'. [ 213.319027][ T8604] openvswitch: netlink: Key type 1052 is out of range max 32 [ 213.409418][ T8613] overlayfs: missing 'workdir' [ 213.461267][ T8615] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1057'. [ 214.013801][ T8636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1067'. [ 214.013819][ T8636] openvswitch: netlink: Key type 1052 is out of range max 32 [ 214.086179][ T8638] fuse: Bad value for 'fd' [ 214.110698][ T8640] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1069'. [ 214.907475][ T8672] fuse: Bad value for 'fd' [ 218.163994][ T5813] Bluetooth: hci0: unexpected event for opcode 0x0401 [ 219.500084][ T992] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 219.650092][ T992] usb 3-1: Using ep0 maxpacket: 16 [ 219.653065][ T992] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.653091][ T992] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 219.655590][ T992] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 219.655619][ T992] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.655639][ T992] usb 3-1: Product: syz [ 219.655653][ T992] usb 3-1: Manufacturer: syz [ 219.655667][ T992] usb 3-1: SerialNumber: syz [ 219.953186][ T992] usb 3-1: 0:2 : does not exist [ 219.969375][ T992] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 220.071999][ T992] usb 3-1: USB disconnect, device number 6 [ 220.133768][ T5946] udevd[5946]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 220.445937][ T8818] binder: 8815:8818 ioctl c0306201 2000000001c0 returned -14 [ 220.631557][ T5804] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 220.647648][ T5804] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 220.657338][ T5804] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 220.671091][ T5804] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 220.672617][ T5804] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 221.542535][ T8849] binder: 8848:8849 ioctl c0306201 2000000001c0 returned -14 [ 221.561264][ T8822] chnl_net:caif_netlink_parms(): no params data found [ 222.102092][ T8822] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.106504][ T8822] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.106729][ T8822] bridge_slave_0: entered allmulticast mode [ 222.109673][ T8822] bridge_slave_0: entered promiscuous mode [ 222.164009][ T8822] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.164259][ T8822] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.164493][ T8822] bridge_slave_1: entered allmulticast mode [ 222.175038][ T8822] bridge_slave_1: entered promiscuous mode [ 222.368589][ T8822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.424814][ T8876] loop5: detected capacity change from 0 to 4096 [ 222.455607][ T8822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.613086][ T8822] team0: Port device team_slave_0 added [ 222.621740][ T8822] team0: Port device team_slave_1 added [ 222.713673][ T8822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.713691][ T8822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 222.713717][ T8822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.715248][ T8822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.715257][ T8822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 222.715271][ T8822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.720186][ T5813] Bluetooth: hci4: command tx timeout [ 222.940461][ T8822] hsr_slave_0: entered promiscuous mode [ 222.942089][ T8822] hsr_slave_1: entered promiscuous mode [ 222.943238][ T8822] debugfs: 'hsr0' already exists in 'hsr' [ 222.943260][ T8822] Cannot create hsr debugfs directory [ 223.940478][ T8899] syzkaller1: entered promiscuous mode [ 223.940506][ T8899] syzkaller1: entered allmulticast mode [ 224.246514][ T8822] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 224.260124][ T5949] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 224.275791][ T8822] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 224.336506][ T8822] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 224.393783][ T8822] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 224.410276][ T5949] usb 5-1: Using ep0 maxpacket: 16 [ 224.416431][ T5949] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 224.416447][ T5949] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 224.445925][ T5949] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 224.445957][ T5949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.445976][ T5949] usb 5-1: Product: syz [ 224.445990][ T5949] usb 5-1: Manufacturer: syz [ 224.446005][ T5949] usb 5-1: SerialNumber: syz [ 224.702922][ T5949] usb 5-1: 0:2 : does not exist [ 224.724999][ T5949] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 224.800319][ T5813] Bluetooth: hci4: command tx timeout [ 224.808085][ T5949] usb 5-1: USB disconnect, device number 12 [ 224.918063][ T5946] udevd[5946]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 224.963742][ T8822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.008566][ T8822] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.042404][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.042647][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.076745][ T2229] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.076892][ T2229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.891117][ T8822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.791716][ T8984] syzkaller1: entered promiscuous mode [ 226.791744][ T8984] syzkaller1: entered allmulticast mode [ 226.825515][ T8989] binder: 8987:8989 ioctl c0306201 2000000001c0 returned -14 [ 226.890342][ T5813] Bluetooth: hci4: command tx timeout [ 227.025370][ T8998] loop5: detected capacity change from 0 to 4096 [ 227.278390][ T8822] veth0_vlan: entered promiscuous mode [ 227.317596][ T8822] veth1_vlan: entered promiscuous mode [ 227.402061][ T8822] veth0_macvtap: entered promiscuous mode [ 227.426266][ T8822] veth1_macvtap: entered promiscuous mode [ 227.475819][ T8822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.493702][ T8822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.511634][ T76] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.519118][ T43] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.552970][ T43] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.583675][ T43] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.111714][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.111737][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.227866][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.227885][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.390854][ T9022] binder: 9021:9022 ioctl c0306201 2000000001c0 returned -14 [ 228.961456][ T5813] Bluetooth: hci4: command tx timeout [ 229.749751][ T9057] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1229'. [ 231.405949][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 231.570145][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 231.573445][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 231.573472][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 231.612977][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 231.613009][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.613029][ T10] usb 3-1: Product: syz [ 231.613043][ T10] usb 3-1: Manufacturer: syz [ 231.613058][ T10] usb 3-1: SerialNumber: syz [ 231.879718][ T10] usb 3-1: 0:2 : does not exist [ 231.918899][ T10] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 231.998954][ T10] usb 3-1: USB disconnect, device number 7 [ 232.105838][ T5946] udevd[5946]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 232.148315][ T9102] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1244'. [ 232.278631][ T9104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1245'. [ 233.950358][ T9144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1261'. [ 234.920812][ T10] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 235.090518][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 235.093587][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.093619][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.093643][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 235.093687][ T10] usb 4-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 235.093712][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.180637][ T10] usb 4-1: config 0 descriptor?? [ 235.618273][ T10] hid_parser_main: 15 callbacks suppressed [ 235.618299][ T10] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 235.618329][ T10] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 235.618355][ T10] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 235.618378][ T10] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 235.618402][ T10] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 235.618452][ T10] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 235.618477][ T10] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 235.618502][ T10] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 235.618528][ T10] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 235.618553][ T10] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 235.642523][ T9186] fuse: Bad value for 'fd' [ 235.740136][ T10] a4tech 0003:09DA:000A.0005: hidraw0: USB HID v0.00 Device [HID 09da:000a] on usb-dummy_hcd.3-1/input0 [ 235.800803][ T31] usb 4-1: USB disconnect, device number 17 [ 235.953197][ T9189] fido_id[9189]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 236.410411][ T809] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 236.556802][ T9211] netlink: 620 bytes leftover after parsing attributes in process `syz.0.1288'. [ 236.571451][ T809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.571506][ T809] usb 3-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 236.571530][ T809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.594519][ T809] usb 3-1: config 0 descriptor?? [ 236.646745][ T809] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 237.730067][ T31] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 237.800069][ T5949] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 237.880076][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 237.884002][ T31] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 237.884059][ T31] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 237.884084][ T31] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 237.884108][ T31] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 237.884161][ T31] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 237.884185][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.964478][ T5949] usb 1-1: device descriptor read/64, error -71 [ 238.107696][ T31] usb 5-1: usb_control_msg returned -71 [ 238.107747][ T31] usbtmc 5-1:16.0: can't read capabilities [ 238.195332][ T31] usb 5-1: USB disconnect, device number 13 [ 238.210120][ T5949] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 238.340054][ T5949] usb 1-1: device descriptor read/64, error -71 [ 238.401853][ T5813] Bluetooth: hci3: unexpected event for opcode 0x0001 [ 238.440679][ T809] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 238.458023][ T5949] usb usb1-port1: attempt power cycle [ 238.591873][ T809] usb 6-1: Using ep0 maxpacket: 16 [ 238.594232][ T809] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.594258][ T809] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 238.596958][ T809] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 238.596989][ T809] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.597010][ T809] usb 6-1: Product: syz [ 238.597025][ T809] usb 6-1: Manufacturer: syz [ 238.597039][ T809] usb 6-1: SerialNumber: syz [ 238.762358][ T9250] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1304'. [ 238.762393][ T9250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1304'. [ 238.800033][ T5949] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 238.833365][ T809] usb 6-1: 0:2 : does not exist [ 238.834132][ T5949] usb 1-1: device descriptor read/8, error -71 [ 238.850996][ T809] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 238.982692][ T809] usb 6-1: USB disconnect, device number 2 [ 239.070106][ T5949] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 239.092031][ T5949] usb 1-1: device descriptor read/8, error -71 [ 239.112615][ T5946] udevd[5946]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 239.195685][ T992] usb 3-1: USB disconnect, device number 8 [ 239.207339][ T5949] usb usb1-port1: unable to enumerate USB device [ 240.336611][ T9280] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 240.753304][ T9284] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1316'. [ 240.753331][ T9284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1316'. [ 240.948899][ T5813] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 241.067256][ T9289] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1317'. [ 242.390493][ T9305] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1323'. [ 242.867087][ T9318] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 243.173044][ T5949] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 243.310031][ T5949] usb 5-1: device descriptor read/64, error -71 [ 243.550103][ T5949] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 243.680539][ T5949] usb 5-1: device descriptor read/64, error -71 [ 243.790566][ T5949] usb usb5-port1: attempt power cycle [ 244.138041][ T5949] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 244.162510][ T5949] usb 5-1: device descriptor read/8, error -71 [ 244.405837][ T5949] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 244.430933][ T5949] usb 5-1: device descriptor read/8, error -71 [ 244.540576][ T5949] usb usb5-port1: unable to enumerate USB device [ 245.685533][ T9371] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 246.655002][ T9387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1357'. [ 247.980104][ T809] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 248.030454][ T9408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1365'. [ 248.130027][ T809] usb 4-1: Using ep0 maxpacket: 16 [ 248.132527][ T809] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 248.132553][ T809] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 248.135593][ T809] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 248.135618][ T809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.135632][ T809] usb 4-1: Product: syz [ 248.135643][ T809] usb 4-1: Manufacturer: syz [ 248.135657][ T809] usb 4-1: SerialNumber: syz [ 248.411773][ T809] usb 4-1: 0:2 : does not exist [ 248.416947][ T809] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 248.502420][ T809] usb 4-1: USB disconnect, device number 18 [ 248.648722][ T5946] udevd[5946]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 249.462383][ T5813] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 249.561380][ T9439] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1375'. [ 251.092659][ T6052] udevd[6052]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 251.142794][ T6021] udevd[6021]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 252.656127][ T5804] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 252.656159][ T5804] CPU: 1 UID: 0 PID: 5804 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 252.656189][ T5804] Tainted: [L]=SOFTLOCKUP [ 252.656202][ T5804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 252.656216][ T5804] Workqueue: hci0 hci_rx_work [ 252.656250][ T5804] Call Trace: [ 252.656259][ T5804] [ 252.656277][ T5804] dump_stack_lvl+0xe8/0x150 [ 252.656314][ T5804] sysfs_create_dir_ns+0x271/0x2a0 [ 252.656340][ T5804] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 252.656367][ T5804] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 252.656396][ T5804] ? rt_spin_unlock+0x160/0x200 [ 252.656423][ T5804] kobject_add_internal+0x631/0xd10 [ 252.656467][ T5804] kobject_add+0x163/0x240 [ 252.656506][ T5804] ? __pfx_kobject_add+0x10/0x10 [ 252.656547][ T5804] ? get_device_parent+0x370/0x3a0 [ 252.656585][ T5804] device_add+0x408/0xb80 [ 252.656624][ T5804] hci_conn_add_sysfs+0xd5/0x210 [ 252.656654][ T5804] le_conn_complete_evt+0xf1d/0x1430 [ 252.656700][ T5804] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 252.656734][ T5804] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 252.656765][ T5804] ? lockdep_hardirqs_on+0x7a/0x110 [ 252.656797][ T5804] ? skb_pull_data+0xfb/0x200 [ 252.656826][ T5804] hci_le_conn_complete_evt+0x187/0x470 [ 252.656868][ T5804] hci_event_packet+0x7af/0x12c0 [ 252.656904][ T5804] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 252.656936][ T5804] ? __pfx_hci_event_packet+0x10/0x10 [ 252.656963][ T5804] ? rt_spin_unlock+0x14f/0x200 [ 252.656998][ T5804] ? hci_send_to_monitor+0xe2/0x590 [ 252.657023][ T5804] hci_rx_work+0x3ee/0x1030 [ 252.657059][ T5804] ? process_scheduled_works+0xa25/0x1830 [ 252.657090][ T5804] process_scheduled_works+0xb02/0x1830 [ 252.657155][ T5804] ? __pfx_process_scheduled_works+0x10/0x10 [ 252.657193][ T5804] ? assign_work+0x3d5/0x5e0 [ 252.657227][ T5804] worker_thread+0xa50/0xfc0 [ 252.657302][ T5804] kthread+0x388/0x470 [ 252.657327][ T5804] ? __pfx_worker_thread+0x10/0x10 [ 252.657356][ T5804] ? __pfx_kthread+0x10/0x10 [ 252.657379][ T5804] ret_from_fork+0x51e/0xb90 [ 252.657413][ T5804] ? __pfx_ret_from_fork+0x10/0x10 [ 252.657442][ T5804] ? __switch_to+0xc7d/0x1450 [ 252.657484][ T5804] ? __pfx_kthread+0x10/0x10 [ 252.657508][ T5804] ret_from_fork_asm+0x1a/0x30 [ 252.657551][ T5804] [ 252.657731][ T5804] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 252.657773][ T5804] Bluetooth: hci0: failed to register connection device [ 252.791056][ T9489] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1389'. [ 254.300788][ T5946] udevd[5946]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 255.411679][ T5813] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 255.411712][ T5813] CPU: 0 UID: 0 PID: 5813 Comm: kworker/u9:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 255.411744][ T5813] Tainted: [L]=SOFTLOCKUP [ 255.411752][ T5813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 255.411766][ T5813] Workqueue: hci1 hci_rx_work [ 255.411799][ T5813] Call Trace: [ 255.411808][ T5813] [ 255.411818][ T5813] dump_stack_lvl+0xe8/0x150 [ 255.411855][ T5813] sysfs_create_dir_ns+0x271/0x2a0 [ 255.411880][ T5813] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 255.411906][ T5813] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 255.411935][ T5813] ? rt_spin_unlock+0x160/0x200 [ 255.411962][ T5813] kobject_add_internal+0x631/0xd10 [ 255.412006][ T5813] kobject_add+0x163/0x240 [ 255.412053][ T5813] ? __pfx_kobject_add+0x10/0x10 [ 255.412094][ T5813] ? get_device_parent+0x370/0x3a0 [ 255.412134][ T5813] device_add+0x408/0xb80 [ 255.412173][ T5813] hci_conn_add_sysfs+0xd5/0x210 [ 255.412204][ T5813] le_conn_complete_evt+0xf1d/0x1430 [ 255.412248][ T5813] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 255.412279][ T5813] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 255.412309][ T5813] ? lockdep_hardirqs_on+0x7a/0x110 [ 255.412341][ T5813] ? skb_pull_data+0xfb/0x200 [ 255.412370][ T5813] hci_le_conn_complete_evt+0x187/0x470 [ 255.412411][ T5813] hci_event_packet+0x7af/0x12c0 [ 255.412445][ T5813] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 255.412478][ T5813] ? __pfx_hci_event_packet+0x10/0x10 [ 255.412504][ T5813] ? rt_spin_unlock+0x14f/0x200 [ 255.412537][ T5813] ? hci_send_to_monitor+0xe2/0x590 [ 255.412563][ T5813] hci_rx_work+0x3ee/0x1030 [ 255.412600][ T5813] ? process_scheduled_works+0xa25/0x1830 [ 255.412633][ T5813] process_scheduled_works+0xb02/0x1830 [ 255.412698][ T5813] ? __pfx_process_scheduled_works+0x10/0x10 [ 255.412735][ T5813] ? assign_work+0x3d5/0x5e0 [ 255.412770][ T5813] worker_thread+0xa50/0xfc0 [ 255.412833][ T5813] kthread+0x388/0x470 [ 255.412856][ T5813] ? __pfx_worker_thread+0x10/0x10 [ 255.412883][ T5813] ? __pfx_kthread+0x10/0x10 [ 255.412908][ T5813] ret_from_fork+0x51e/0xb90 [ 255.412942][ T5813] ? __pfx_ret_from_fork+0x10/0x10 [ 255.412970][ T5813] ? __switch_to+0xc7d/0x1450 [ 255.413002][ T5813] ? __pfx_kthread+0x10/0x10 [ 255.413036][ T5813] ret_from_fork_asm+0x1a/0x30 [ 255.413079][ T5813] [ 255.413178][ T5813] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 255.413219][ T5813] Bluetooth: hci1: failed to register connection device [ 255.866750][ T9540] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 256.240296][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.245403][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.942249][ T9542] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1408'. [ 259.107468][ T5946] udevd[5946]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 260.489428][ T9583] binder: BINDER_SET_CONTEXT_MGR already set [ 260.489446][ T9583] binder: 9582:9583 ioctl 4018620d 200000004a80 returned -16 [ 260.570081][ T10] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 260.594981][ T9587] netlink: 'syz.2.1423': attribute type 15 has an invalid length. [ 260.720166][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 260.737022][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 260.737051][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 260.739616][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 260.739646][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.739667][ T10] usb 1-1: Product: syz [ 260.739682][ T10] usb 1-1: Manufacturer: syz [ 260.739697][ T10] usb 1-1: SerialNumber: syz [ 261.017657][ T10] usb 1-1: 0:2 : does not exist [ 261.031932][ T10] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 261.115393][ T10] usb 1-1: USB disconnect, device number 15 [ 261.269550][ T5946] udevd[5946]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 261.913043][ T9614] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 262.331721][ T5949] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 262.508269][ T5949] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 262.508300][ T5949] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 262.508315][ T5949] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 262.519109][ T5949] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 262.519138][ T5949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.519157][ T5949] usb 4-1: Product: syz [ 262.519170][ T5949] usb 4-1: Manufacturer: syz [ 262.519191][ T5949] usb 4-1: SerialNumber: syz [ 262.525263][ T5949] usb 4-1: config 0 descriptor?? [ 262.526058][ T9617] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 262.526185][ T9617] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 262.540986][ T5949] usb 4-1: ucan: probing device on interface #0 [ 262.736175][ T5949] usb 4-1: ucan: could not read protocol version, ret=-71 [ 262.736203][ T5949] usb 4-1: ucan: probe failed; try to update the device firmware [ 262.825160][ T5949] usb 4-1: USB disconnect, device number 19 [ 262.938599][ T9636] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1445'. [ 262.938625][ T9636] openvswitch: netlink: Flow key attr not present in new flow. [ 263.023439][ T9638] netlink: 'syz.5.1447': attribute type 1 has an invalid length. [ 264.268348][ T9671] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1459'. [ 264.268366][ T9671] openvswitch: netlink: Flow actions attr not present in new flow. [ 265.680137][ T809] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 265.830052][ T809] usb 3-1: Using ep0 maxpacket: 16 [ 265.832754][ T809] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 265.832781][ T809] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 265.838791][ T809] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 265.838822][ T809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.838843][ T809] usb 3-1: Product: syz [ 265.838857][ T809] usb 3-1: Manufacturer: syz [ 265.838871][ T809] usb 3-1: SerialNumber: syz [ 266.134810][ T809] usb 3-1: 0:2 : does not exist [ 266.154276][ T809] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 266.231686][ T809] usb 3-1: USB disconnect, device number 9 [ 266.278721][ T5946] udevd[5946]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 266.467784][ T9718] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 267.341303][ T9731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1478'. [ 267.525044][ T9683] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 267.649839][ T9738] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1480'. [ 267.937339][ T9742] mkiss: ax0: crc mode is auto. [ 268.130192][ T9750] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1484'. [ 269.414182][ T9754] netlink: 'syz.5.1485': attribute type 1 has an invalid length. [ 269.734279][ T9764] netlink: 608 bytes leftover after parsing attributes in process `syz.3.1488'. [ 269.902271][ T31] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 270.060118][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 270.062559][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.062618][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 270.062648][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 270.062671][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 270.062715][ T31] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 270.062738][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.147640][ T31] usb 5-1: config 0 descriptor?? [ 270.301666][ T9777] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1493'. [ 270.534682][ T9784] mkiss: ax0: crc mode is auto. [ 270.760130][ T5949] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 270.819094][ T9788] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 270.912128][ T5949] usb 1-1: Using ep0 maxpacket: 32 [ 270.923344][ T5949] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.923370][ T5949] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 270.923406][ T5949] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 270.923427][ T5949] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.929787][ T5949] usb 1-1: config 0 descriptor?? [ 270.977708][ T9791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1498'. [ 272.910097][ T9769] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 273.015930][ T31] usb 5-1: USB disconnect, device number 18 [ 273.454659][ T9816] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1505'. [ 273.768935][ T9824] netlink: 'syz.4.1507': attribute type 15 has an invalid length. [ 273.805900][ T5887] usb 1-1: USB disconnect, device number 16 [ 273.878641][ T9826] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 274.419599][ T9831] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1511'. [ 274.920788][ T9848] openvswitch: netlink: Flow actions attr not present in new flow. [ 275.564702][ T9860] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1519'. [ 275.739248][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 276.364396][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.367698][ T10] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 276.367717][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.367729][ T10] usb 3-1: Product: syz [ 276.367738][ T10] usb 3-1: Manufacturer: syz [ 276.367746][ T10] usb 3-1: SerialNumber: syz [ 276.415629][ T10] usb 3-1: config 0 descriptor?? [ 276.421162][ T9861] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 276.447028][ T10] usb 3-1: ucan: probing device on interface #0 [ 276.451916][ T10] usb 3-1: ucan: invalid EP count (0) [ 276.451930][ T10] usb 3-1: ucan: probe failed; try to update the device firmware [ 276.626038][ T5949] usb 3-1: USB disconnect, device number 10 [ 277.006296][ T13] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x34 [ 277.059716][ T9883] openvswitch: netlink: Flow actions attr not present in new flow. [ 277.203740][ T5887] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 277.350139][ T5887] usb 6-1: Using ep0 maxpacket: 8 [ 277.353052][ T5887] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.353110][ T5887] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 277.353151][ T5887] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 277.353174][ T5887] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 277.353218][ T5887] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 277.353243][ T5887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.431369][ T5887] usb 6-1: config 0 descriptor?? [ 277.434975][ T6008] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x34 [ 277.774113][ T31] usb 6-1: USB disconnect, device number 3 [ 277.780817][ T9901] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 278.290184][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 278.442811][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 278.442847][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 278.442874][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 278.447022][ T10] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 278.447042][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.447054][ T10] usb 3-1: Product: syz [ 278.447062][ T10] usb 3-1: Manufacturer: syz [ 278.447070][ T10] usb 3-1: SerialNumber: syz [ 278.519076][ T10] usb 3-1: config 0 descriptor?? [ 278.524809][ T9909] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 278.524995][ T9909] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 278.631332][ T10] usb 3-1: ucan: probing device on interface #0 [ 278.887159][ T10] usb 3-1: ucan: could not read protocol version, ret=0 [ 278.887178][ T10] usb 3-1: ucan: probe failed; try to update the device firmware [ 279.240101][ T31] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 279.404681][ T31] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.407864][ T31] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 279.407895][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.407915][ T31] usb 6-1: Product: syz [ 279.407929][ T31] usb 6-1: Manufacturer: syz [ 279.407944][ T31] usb 6-1: SerialNumber: syz [ 279.472845][ T31] usb 6-1: config 0 descriptor?? [ 279.477786][ T31] usb 6-1: ucan: probing device on interface #0 [ 279.477804][ T31] usb 6-1: ucan: invalid EP count (0) [ 279.477813][ T31] usb 6-1: ucan: probe failed; try to update the device firmware [ 279.539173][ T9936] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1546'. [ 279.698553][ T31] usb 6-1: USB disconnect, device number 4 [ 280.170166][ T31] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 280.330302][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 280.345567][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.345645][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 280.345677][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 280.345700][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 280.345746][ T31] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 280.345771][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.424531][ T31] usb 1-1: config 0 descriptor?? [ 280.471898][ T9544] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x34 [ 280.774326][ T992] usb 1-1: USB disconnect, device number 17 [ 281.113725][ T5921] usb 3-1: USB disconnect, device number 11 [ 281.256627][ T9972] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1559'. [ 283.332925][ T9995] netlink: 'syz.5.1569': attribute type 1 has an invalid length. [ 283.622383][T10008] netlink: 'syz.2.1575': attribute type 15 has an invalid length. [ 283.755800][T10011] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1572'. [ 284.408742][ T992] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 284.570024][ T992] usb 1-1: Using ep0 maxpacket: 8 [ 284.583499][ T992] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.583554][ T992] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 284.583580][ T992] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 284.583621][ T992] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 284.583660][ T992] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 284.583681][ T992] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.592497][ T992] usb 1-1: config 0 descriptor?? [ 284.840066][ T809] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 284.859247][ T992] usb 1-1: USB disconnect, device number 18 [ 284.942643][T10021] mkiss: ax0: crc mode is auto. [ 284.992570][ T809] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.992608][ T809] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 284.992653][ T809] usb 5-1: New USB device found, idVendor=04b3, idProduct=3108, bcdDevice= 0.00 [ 284.992678][ T809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.046329][ T809] usb 5-1: config 0 descriptor?? [ 285.461856][ T809] usbhid 5-1:0.0: can't add hid device: -71 [ 285.461997][ T809] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 285.514061][ T809] usb 5-1: USB disconnect, device number 19 [ 285.579737][T10035] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1586'. [ 286.171992][T10042] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.1587'. [ 286.746051][T10044] netlink: 'syz.0.1588': attribute type 1 has an invalid length. [ 287.411024][T10050] mkiss: ax0: crc mode is auto. [ 287.743187][T10067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1597'. [ 287.798542][T10070] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1598'. [ 287.861057][T10067] bond0: (slave bond_slave_0): Releasing backup interface [ 287.879748][T10072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1600'. [ 288.388208][T10084] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1601'. [ 289.333506][T10086] netlink: 'syz.3.1604': attribute type 1 has an invalid length. [ 289.790691][T10098] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 290.157733][T10106] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1612'. [ 290.480377][T10112] netlink: 'syz.3.1615': attribute type 1 has an invalid length. [ 290.680034][ T809] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 290.831069][ T809] usb 1-1: Using ep0 maxpacket: 16 [ 290.835176][ T809] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 290.835211][ T809] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 290.837728][ T809] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 290.837759][ T809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.837780][ T809] usb 1-1: Product: syz [ 290.837794][ T809] usb 1-1: Manufacturer: syz [ 290.837809][ T809] usb 1-1: SerialNumber: syz [ 290.950553][ T809] usb 1-1: config 0 descriptor?? [ 290.973645][ T809] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 290.973684][ T809] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 291.560099][T10143] netlink: 'syz.3.1630': attribute type 1 has an invalid length. [ 291.589063][ T809] em28xx 1-1:0.0: unknown em28xx chip ID (122) [ 291.802972][ T37] audit: type=1326 audit(1772952523.975:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10113 comm="syz.0.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021336c799 code=0x7ffc0000 [ 291.805804][ T37] audit: type=1326 audit(1772952523.985:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10113 comm="syz.0.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021336c799 code=0x7ffc0000 [ 291.805858][ T37] audit: type=1326 audit(1772952523.985:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10113 comm="syz.0.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021336c799 code=0x7ffc0000 [ 291.807638][ T37] audit: type=1326 audit(1772952523.985:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10113 comm="syz.0.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021336c799 code=0x7ffc0000 [ 291.809202][ T37] audit: type=1326 audit(1772952523.985:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10113 comm="syz.0.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f021336c42b code=0x7ffc0000 [ 291.820522][ T37] audit: type=1326 audit(1772952523.995:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10113 comm="syz.0.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f021336c42b code=0x7ffc0000 [ 291.820572][ T37] audit: type=1326 audit(1772952524.005:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10113 comm="syz.0.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f021332cfce code=0x7ffc0000 [ 291.880037][ T809] em28xx 1-1:0.0: Config register raw data: 0x7a [ 291.880063][ T809] em28xx 1-1:0.0: I2S Audio (5 sample rate(s)) [ 291.880079][ T809] em28xx 1-1:0.0: No AC97 audio processor [ 292.022123][ T37] audit: type=1326 audit(1772952524.205:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10113 comm="syz.0.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021336c799 code=0x7ffc0000 [ 292.022181][ T37] audit: type=1326 audit(1772952524.205:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10113 comm="syz.0.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021336c799 code=0x7ffc0000 [ 292.022210][ T37] audit: type=1326 audit(1772952524.205:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10113 comm="syz.0.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f021336c799 code=0x7ffc0000 [ 292.101129][ T5804] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 292.126092][T10151] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1631'. [ 292.249131][ T809] usb 1-1: USB disconnect, device number 19 [ 293.155281][ T5813] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 293.359110][T10175] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1638'. [ 293.359297][T10175] nbd: nbd64 already in use [ 293.864274][ T5813] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 293.864308][ T5813] CPU: 1 UID: 0 PID: 5813 Comm: kworker/u9:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 293.864343][ T5813] Tainted: [L]=SOFTLOCKUP [ 293.864350][ T5813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 293.864365][ T5813] Workqueue: hci3 hci_rx_work [ 293.864400][ T5813] Call Trace: [ 293.864410][ T5813] [ 293.864420][ T5813] dump_stack_lvl+0xe8/0x150 [ 293.864459][ T5813] sysfs_create_dir_ns+0x271/0x2a0 [ 293.864486][ T5813] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 293.864514][ T5813] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 293.864545][ T5813] ? rt_spin_unlock+0x160/0x200 [ 293.864574][ T5813] kobject_add_internal+0x631/0xd10 [ 293.864620][ T5813] kobject_add+0x163/0x240 [ 293.864659][ T5813] ? __pfx_kobject_add+0x10/0x10 [ 293.864714][ T5813] ? get_device_parent+0x370/0x3a0 [ 293.864755][ T5813] device_add+0x408/0xb80 [ 293.864795][ T5813] hci_conn_add_sysfs+0xd5/0x210 [ 293.864827][ T5813] le_conn_complete_evt+0xf1d/0x1430 [ 293.864875][ T5813] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 293.864919][ T5813] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 293.864949][ T5813] ? lockdep_hardirqs_on+0x7a/0x110 [ 293.864982][ T5813] ? skb_pull_data+0xfb/0x200 [ 293.865012][ T5813] hci_le_conn_complete_evt+0x187/0x470 [ 293.865055][ T5813] hci_event_packet+0x7af/0x12c0 [ 293.865090][ T5813] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 293.865123][ T5813] ? __pfx_hci_event_packet+0x10/0x10 [ 293.865150][ T5813] ? rt_spin_unlock+0x14f/0x200 [ 293.865186][ T5813] ? hci_send_to_monitor+0xe2/0x590 [ 293.865211][ T5813] hci_rx_work+0x3ee/0x1030 [ 293.865248][ T5813] ? process_scheduled_works+0xa25/0x1830 [ 293.865283][ T5813] process_scheduled_works+0xb02/0x1830 [ 293.865349][ T5813] ? __pfx_process_scheduled_works+0x10/0x10 [ 293.865388][ T5813] ? assign_work+0x3d5/0x5e0 [ 293.865426][ T5813] worker_thread+0xa50/0xfc0 [ 293.865492][ T5813] kthread+0x388/0x470 [ 293.865516][ T5813] ? __pfx_worker_thread+0x10/0x10 [ 293.865545][ T5813] ? __pfx_kthread+0x10/0x10 [ 293.865571][ T5813] ret_from_fork+0x51e/0xb90 [ 293.865608][ T5813] ? __pfx_ret_from_fork+0x10/0x10 [ 293.865637][ T5813] ? __switch_to+0xc7d/0x1450 [ 293.865679][ T5813] ? __pfx_kthread+0x10/0x10 [ 293.865706][ T5813] ret_from_fork_asm+0x1a/0x30 [ 293.865748][ T5813] [ 293.867818][ T5813] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 293.867967][ T5813] Bluetooth: hci3: failed to register connection device [ 293.922672][T10179] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1642'. [ 294.338608][T10182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1640'. [ 295.199308][ T5946] udevd[5946]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 295.800986][ T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 295.950100][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 295.959555][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.959593][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.959636][ T10] usb 5-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 295.959659][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.979722][ T10] usb 5-1: config 0 descriptor?? [ 296.002560][ T5804] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 296.123992][T10221] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1655'. [ 296.196619][ T5921] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 296.567236][ T5921] usb 3-1: device descriptor read/64, error -71 [ 296.870059][ T5921] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 296.893837][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 296.893981][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 296.923546][ T10] usb 5-1: USB disconnect, device number 20 [ 297.000289][ T5921] usb 3-1: device descriptor read/64, error -71 [ 297.110752][ T5921] usb usb3-port1: attempt power cycle [ 297.337306][T10233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1658'. [ 297.609854][ T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 298.190202][ T5921] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 298.210164][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 298.211033][ T5921] usb 3-1: device descriptor read/8, error -71 [ 298.221763][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 298.221800][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 298.221826][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 298.221851][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 298.221896][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 298.221919][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.465829][ T10] usb 4-1: GET_CAPABILITIES returned 0 [ 298.465884][ T10] usbtmc 4-1:16.0: can't read capabilities [ 298.482871][ T5921] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 298.504327][T10238] mkiss: ax0: crc mode is auto. [ 298.504827][ T5921] usb 3-1: device descriptor read/8, error -71 [ 298.595595][ T5946] udevd[5946]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 298.610485][ T5921] usb usb3-port1: unable to enumerate USB device [ 298.657981][ T31] usb 4-1: USB disconnect, device number 20 [ 298.811206][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 298.962151][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 298.964565][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 298.964600][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 298.964627][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 298.964661][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 298.964706][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 298.964731][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.227991][ T9] usb 6-1: usb_control_msg returned -71 [ 299.228050][ T9] usbtmc 6-1:16.0: can't read capabilities [ 299.290772][ T9] usb 6-1: USB disconnect, device number 5 [ 299.479350][ T5804] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 299.553782][T10265] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1668'. [ 300.573420][ T5946] udevd[5946]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 300.944145][T10296] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 301.035184][T10298] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1679'. [ 301.206328][T10298] bond0: (slave bond_slave_0): Releasing backup interface [ 301.217684][T10302] netlink: 'syz.2.1680': attribute type 15 has an invalid length. [ 301.500070][ T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 301.653950][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 301.656006][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 301.656038][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 301.658718][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 301.658746][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.658766][ T9] usb 1-1: Product: syz [ 301.658781][ T9] usb 1-1: Manufacturer: syz [ 301.658795][ T9] usb 1-1: SerialNumber: syz [ 301.675741][ T9] usb 1-1: config 0 descriptor?? [ 301.707243][ T9] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 301.707277][ T9] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 301.737182][T10311] netlink: 620 bytes leftover after parsing attributes in process `syz.4.1685'. [ 302.357853][ T37] kauditd_printk_skb: 6 callbacks suppressed [ 302.357872][ T37] audit: type=1326 audit(1772952534.535:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10303 comm="syz.0.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021336c799 code=0x7ffc0000 [ 302.357913][ T37] audit: type=1326 audit(1772952534.535:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10303 comm="syz.0.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021336c799 code=0x7ffc0000 [ 302.357950][ T37] audit: type=1326 audit(1772952534.535:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10303 comm="syz.0.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021336c799 code=0x7ffc0000 [ 302.357986][ T37] audit: type=1326 audit(1772952534.535:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10303 comm="syz.0.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f021336c42b code=0x7ffc0000 [ 302.358022][ T37] audit: type=1326 audit(1772952534.535:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10303 comm="syz.0.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f021336c42b code=0x7ffc0000 [ 302.359545][ T37] audit: type=1326 audit(1772952534.535:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10303 comm="syz.0.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f021332cfce code=0x7ffc0000 [ 302.368393][ T9] em28xx 1-1:0.0: chip ID is em2874 [ 302.565584][ T37] audit: type=1326 audit(1772952534.735:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10303 comm="syz.0.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021336c799 code=0x7ffc0000 [ 302.570010][ T37] audit: type=1326 audit(1772952534.745:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10303 comm="syz.0.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021336c799 code=0x7ffc0000 [ 302.602554][ T37] audit: type=1326 audit(1772952534.785:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10303 comm="syz.0.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f021336c799 code=0x7ffc0000 [ 302.603965][ T9] usb 1-1: USB disconnect, device number 20 [ 302.614486][ T9] em28xx 1-1:0.0: Disconnecting em28xx [ 302.619166][ T37] audit: type=1326 audit(1772952534.795:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10303 comm="syz.0.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f021332cfce code=0x7ffc0000 [ 302.733172][ T9] em28xx 1-1:0.0: Freeing device [ 302.910236][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 303.069988][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 303.073085][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.073154][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 303.073184][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 303.073206][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 303.073251][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 303.073275][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.087143][ T10] usb 3-1: config 0 descriptor?? [ 303.151047][ T31] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 303.300201][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 303.307363][ T31] usb 4-1: config 0 has an invalid interface number: 151 but max is 1 [ 303.307394][ T31] usb 4-1: config 0 has no interface number 1 [ 303.307464][ T31] usb 4-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 303.307487][ T31] usb 4-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 303.307513][ T31] usb 4-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 303.307539][ T31] usb 4-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 303.307564][ T31] usb 4-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 303.307615][ T31] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 303.307640][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 303.307662][ T31] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 303.315476][ T5887] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 303.378204][ T10] usb 3-1: USB disconnect, device number 16 [ 303.436602][ T31] usb 4-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 303.436635][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.436656][ T31] usb 4-1: Product: syz [ 303.436671][ T31] usb 4-1: Manufacturer: syz [ 303.436686][ T31] usb 4-1: SerialNumber: syz [ 303.473759][ T31] usb 4-1: config 0 descriptor?? [ 303.474751][T10329] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 303.496256][ T31] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 303.512666][ T31] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 303.589985][ T5887] usb 6-1: Using ep0 maxpacket: 8 [ 303.593026][ T5887] usb 6-1: config 0 has no interfaces? [ 303.602703][ T5887] usb 6-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 303.602742][ T5887] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.602764][ T5887] usb 6-1: Product: syz [ 303.602778][ T5887] usb 6-1: Manufacturer: syz [ 303.602793][ T5887] usb 6-1: SerialNumber: syz [ 303.655355][ T31] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 303.657012][ T5887] usb 6-1: config 0 descriptor?? [ 303.713230][T10329] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1693'. [ 303.713366][T10329] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1693'. [ 303.904050][ T10] usb 6-1: USB disconnect, device number 6 [ 304.157388][T10349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1700'. [ 304.159294][ T10] usb 4-1: USB disconnect, device number 21 [ 305.130040][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 305.300175][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 305.302656][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 305.302687][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 305.310105][ T5921] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 305.315679][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 305.315705][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.315724][ T9] usb 4-1: Product: syz [ 305.315737][ T9] usb 4-1: Manufacturer: syz [ 305.315749][ T9] usb 4-1: SerialNumber: syz [ 305.333689][ T9] usb 4-1: config 0 descriptor?? [ 305.353369][ T9] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 305.353403][ T9] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 305.461493][ T5921] usb 1-1: too many configurations: 36, using maximum allowed: 8 [ 305.528001][ T5921] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 305.529430][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.529456][ T5921] usb 1-1: Product: syz [ 305.529471][ T5921] usb 1-1: Manufacturer: syz [ 305.529486][ T5921] usb 1-1: SerialNumber: syz [ 305.708645][ T5921] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 305.799857][ T10] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 306.055455][ T9] em28xx 4-1:0.0: chip ID is em2874 [ 306.131144][ T5921] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 306.277731][ T31] usb 4-1: USB disconnect, device number 22 [ 306.280110][ T5921] usb 6-1: Using ep0 maxpacket: 8 [ 306.286591][ T5921] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.286721][ T5921] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 306.286748][ T5921] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 306.286769][ T5921] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 306.286880][ T5921] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 306.286902][ T5921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.363836][ T31] em28xx 4-1:0.0: Disconnecting em28xx [ 306.410225][ T31] em28xx 4-1:0.0: Freeing device [ 306.467484][ T5921] usb 6-1: config 0 descriptor?? [ 306.740810][ T31] usb 6-1: USB disconnect, device number 7 [ 307.040348][ T10] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 307.041288][ T10] ath9k_htc: Failed to initialize the device [ 307.112934][ T10] usb 1-1: ath9k_htc: USB layer deinitialized [ 307.268484][T10387] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1716'. [ 308.142477][ T31] usb 1-1: USB disconnect, device number 21 [ 308.271294][ T5887] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 308.430098][ T5887] usb 3-1: Using ep0 maxpacket: 16 [ 308.433662][ T5887] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 308.433696][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 308.438242][ T5887] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 308.438273][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.438295][ T5887] usb 3-1: Product: syz [ 308.438310][ T5887] usb 3-1: Manufacturer: syz [ 308.438325][ T5887] usb 3-1: SerialNumber: syz [ 308.514253][ T5887] usb 3-1: config 0 descriptor?? [ 308.535620][ T5887] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 308.535658][ T5887] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 308.760092][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 308.910040][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 308.912726][ T10] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 308.912758][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.926574][ T10] usb 6-1: config 0 descriptor?? [ 308.954495][ T10] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 309.051963][ T5921] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 309.149163][ T10] gspca_vc032x: reg_r err -32 [ 309.149184][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 309.149196][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 309.149206][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 309.149215][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 309.149225][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 309.149234][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 309.149243][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 309.149252][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 309.149261][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 309.149270][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 309.149279][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 309.149296][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 309.149305][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 309.149314][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 309.149323][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 309.149332][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 309.149341][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 309.149350][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 309.149359][ T10] gspca_vc032x: Unknown sensor... [ 309.149442][ T10] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 309.204091][ T37] kauditd_printk_skb: 21 callbacks suppressed [ 309.204109][ T37] audit: type=1326 audit(1772952541.385:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10402 comm="syz.2.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9ddf9c799 code=0x7ffc0000 [ 309.204158][ T37] audit: type=1326 audit(1772952541.385:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10402 comm="syz.2.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9ddf9c799 code=0x7ffc0000 [ 309.204202][ T37] audit: type=1326 audit(1772952541.385:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10402 comm="syz.2.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fa9ddf58bec code=0x7ffc0000 [ 309.204244][ T37] audit: type=1326 audit(1772952541.385:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10402 comm="syz.2.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fa9ddf58c4e code=0x7ffc0000 [ 309.204290][ T37] audit: type=1326 audit(1772952541.385:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10402 comm="syz.2.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa9ddf9c42b code=0x7ffc0000 [ 309.204324][ T5887] em28xx 3-1:0.0: chip ID is em2874 [ 309.204333][ T37] audit: type=1326 audit(1772952541.385:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10402 comm="syz.2.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa9ddf9c42b code=0x7ffc0000 [ 309.204378][ T37] audit: type=1326 audit(1772952541.385:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10402 comm="syz.2.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa9ddf9c42b code=0x7ffc0000 [ 309.204680][ T37] audit: type=1326 audit(1772952541.385:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10402 comm="syz.2.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa9ddf5cfce code=0x7ffc0000 [ 309.232092][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.232126][ T5921] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 309.232165][ T5921] usb 4-1: New USB device found, idVendor=04b3, idProduct=3108, bcdDevice= 0.00 [ 309.232186][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.248013][ T5921] usb 4-1: config 0 descriptor?? [ 309.407879][ T37] audit: type=1326 audit(1772952541.585:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10402 comm="syz.2.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9ddf9c799 code=0x7ffc0000 [ 309.408857][ T37] audit: type=1326 audit(1772952541.585:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10402 comm="syz.2.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9ddf9c799 code=0x7ffc0000 [ 309.556216][ T5887] usb 3-1: USB disconnect, device number 17 [ 309.567561][ T5887] em28xx 3-1:0.0: Disconnecting em28xx [ 309.597895][ T5887] em28xx 3-1:0.0: Freeing device [ 309.670621][ T5921] usbhid 4-1:0.0: can't add hid device: -71 [ 309.670753][ T5921] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 309.725245][ T5921] usb 4-1: USB disconnect, device number 23 [ 309.941085][T10443] netlink: 'syz.4.1739': attribute type 15 has an invalid length. [ 310.347335][T10449] binder: 10448:10449 ioctl 4018620d 0 returned -22 [ 311.577492][ T5808] usb 6-1: USB disconnect, device number 8 [ 312.144689][ T5813] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 312.165140][T10478] binder: 10476:10478 ioctl 4018620d 0 returned -22 [ 312.260068][ T36] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 312.389989][ T36] usb 5-1: device descriptor read/64, error -71 [ 312.563169][ T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 312.642104][ T36] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 312.709996][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 312.712827][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.712886][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 312.712916][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 312.712937][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 312.712980][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 312.713003][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.724846][ T10] usb 3-1: config 0 descriptor?? [ 312.793020][ T36] usb 5-1: device descriptor read/64, error -71 [ 312.900365][ T36] usb usb5-port1: attempt power cycle [ 312.982127][T10507] binder: 10506:10507 ioctl 4018620d 0 returned -22 [ 312.982744][ T5808] usb 3-1: USB disconnect, device number 18 [ 313.234399][T10514] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1768'. [ 313.270040][ T36] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 313.297694][ T36] usb 5-1: device descriptor read/8, error -71 [ 313.540037][ T36] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 313.570447][ T36] usb 5-1: device descriptor read/8, error -71 [ 313.630027][ T5949] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 313.680583][ T36] usb usb5-port1: unable to enumerate USB device [ 313.794826][ T5949] usb 4-1: too many configurations: 36, using maximum allowed: 8 [ 313.853338][ T5949] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 313.853373][ T5949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.853395][ T5949] usb 4-1: Product: syz [ 313.853410][ T5949] usb 4-1: Manufacturer: syz [ 313.853424][ T5949] usb 4-1: SerialNumber: syz [ 313.916975][ T5949] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 313.961874][ T5921] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 314.420069][ T36] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 314.530674][T10537] binder: 10536:10537 ioctl c0306201 0 returned -14 [ 314.582422][ T36] usb 3-1: Using ep0 maxpacket: 32 [ 314.586651][ T36] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 314.586684][ T36] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.607511][ T36] usb 3-1: config 0 descriptor?? [ 314.650132][ T36] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 314.882952][ T36] gspca_vc032x: reg_r err -32 [ 314.882975][ T36] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.882986][ T36] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.882995][ T36] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.883004][ T36] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.883014][ T36] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.883022][ T36] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.883032][ T36] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.883041][ T36] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.883051][ T36] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.883061][ T36] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.883068][ T36] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.883077][ T36] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.883085][ T36] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.883092][ T36] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.883101][ T36] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.883109][ T36] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.883118][ T36] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.883127][ T36] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.883135][ T36] gspca_vc032x: Unknown sensor... [ 314.883226][ T36] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 315.120298][ T5921] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 315.120886][ T5921] ath9k_htc: Failed to initialize the device [ 315.258379][ T5921] usb 4-1: ath9k_htc: USB layer deinitialized [ 315.680751][ T5813] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 315.680783][ T5813] CPU: 1 UID: 0 PID: 5813 Comm: kworker/u9:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 315.680815][ T5813] Tainted: [L]=SOFTLOCKUP [ 315.680823][ T5813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 315.680837][ T5813] Workqueue: hci2 hci_rx_work [ 315.680870][ T5813] Call Trace: [ 315.680879][ T5813] [ 315.680889][ T5813] dump_stack_lvl+0xe8/0x150 [ 315.680924][ T5813] sysfs_create_dir_ns+0x271/0x2a0 [ 315.680951][ T5813] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 315.680977][ T5813] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 315.681007][ T5813] ? rt_spin_unlock+0x160/0x200 [ 315.681034][ T5813] kobject_add_internal+0x631/0xd10 [ 315.681078][ T5813] kobject_add+0x163/0x240 [ 315.681116][ T5813] ? __pfx_kobject_add+0x10/0x10 [ 315.681156][ T5813] ? get_device_parent+0x370/0x3a0 [ 315.681193][ T5813] device_add+0x408/0xb80 [ 315.681230][ T5813] hci_conn_add_sysfs+0xd5/0x210 [ 315.681260][ T5813] le_conn_complete_evt+0xf1d/0x1430 [ 315.681306][ T5813] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 315.681341][ T5813] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 315.681377][ T5813] ? lockdep_hardirqs_on+0x7a/0x110 [ 315.681409][ T5813] ? skb_pull_data+0xfb/0x200 [ 315.681436][ T5813] hci_le_conn_complete_evt+0x187/0x470 [ 315.681477][ T5813] hci_event_packet+0x7af/0x12c0 [ 315.681524][ T5813] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 315.681555][ T5813] ? __pfx_hci_event_packet+0x10/0x10 [ 315.681581][ T5813] ? rt_spin_unlock+0x14f/0x200 [ 315.681615][ T5813] ? hci_send_to_monitor+0xe2/0x590 [ 315.681642][ T5813] hci_rx_work+0x3ee/0x1030 [ 315.681673][ T5813] ? preempt_schedule_thunk+0x16/0x30 [ 315.681702][ T5813] ? process_scheduled_works+0xa25/0x1830 [ 315.681734][ T5813] process_scheduled_works+0xb02/0x1830 [ 315.681796][ T5813] ? __pfx_process_scheduled_works+0x10/0x10 [ 315.681836][ T5813] ? assign_work+0x3d5/0x5e0 [ 315.681873][ T5813] worker_thread+0xa50/0xfc0 [ 315.681935][ T5813] kthread+0x388/0x470 [ 315.681960][ T5813] ? __pfx_worker_thread+0x10/0x10 [ 315.681987][ T5813] ? __pfx_kthread+0x10/0x10 [ 315.682013][ T5813] ret_from_fork+0x51e/0xb90 [ 315.682046][ T5813] ? __pfx_ret_from_fork+0x10/0x10 [ 315.682071][ T5813] ? __switch_to+0xc7d/0x1450 [ 315.682101][ T5813] ? __pfx_kthread+0x10/0x10 [ 315.682126][ T5813] ret_from_fork_asm+0x1a/0x30 [ 315.682167][ T5813] [ 315.692193][ T5813] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 315.692247][ T5813] Bluetooth: hci2: failed to register connection device [ 315.761255][T10563] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1783'. [ 316.483910][T10563] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR [ 316.537624][T10563] block (null): Could not allocate knbd recv work queue. [ 316.720143][ T36] usb 4-1: USB disconnect, device number 24 [ 316.736865][T10563] nbd: failed to add new device [ 317.194835][T10584] binder: 10583:10584 ioctl c0306201 0 returned -14 [ 317.560463][ T5921] usb 3-1: USB disconnect, device number 19 [ 317.607525][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.607601][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.139088][ T5813] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 318.195989][T10607] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1796'. [ 319.228143][ T6021] udevd[6021]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 319.254426][ T5946] udevd[5946]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 319.367172][T10621] binder: BINDER_SET_CONTEXT_MGR already set [ 319.367191][T10621] binder: 10619:10621 ioctl 4018620d 200000004a80 returned -16 [ 319.367442][T10621] binder: 10619:10621 ioctl c0306201 0 returned -14 [ 319.869530][T10638] binder: 10631:10638 ioctl c0306201 0 returned -14 [ 319.882401][T10638] binder: 10631:10638 ioctl 5402 0 returned -22 [ 319.990029][ T5921] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 320.272463][ T5921] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 320.272498][ T5921] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 320.272524][ T5921] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 320.279366][ T5921] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 320.279397][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.279418][ T5921] usb 5-1: Product: syz [ 320.279433][ T5921] usb 5-1: Manufacturer: syz [ 320.279446][ T5921] usb 5-1: SerialNumber: syz [ 320.353996][ T5921] usb 5-1: config 0 descriptor?? [ 320.354999][T10628] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 320.355130][T10628] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 320.387928][ T5921] usb 5-1: ucan: probing device on interface #0 [ 320.608326][ T5921] usb 5-1: ucan: could not read protocol version, ret=0 [ 320.608356][ T5921] usb 5-1: ucan: probe failed; try to update the device firmware [ 320.764116][ T5804] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 320.764193][ T5804] CPU: 0 UID: 0 PID: 5804 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 320.764227][ T5804] Tainted: [L]=SOFTLOCKUP [ 320.764236][ T5804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 320.764250][ T5804] Workqueue: hci4 hci_rx_work [ 320.764286][ T5804] Call Trace: [ 320.764295][ T5804] [ 320.764306][ T5804] dump_stack_lvl+0xe8/0x150 [ 320.764344][ T5804] sysfs_create_dir_ns+0x271/0x2a0 [ 320.764371][ T5804] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 320.764398][ T5804] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 320.764440][ T5804] ? rt_spin_unlock+0x160/0x200 [ 320.764467][ T5804] kobject_add_internal+0x631/0xd10 [ 320.764513][ T5804] kobject_add+0x163/0x240 [ 320.764554][ T5804] ? __pfx_kobject_add+0x10/0x10 [ 320.764596][ T5804] ? get_device_parent+0x370/0x3a0 [ 320.764649][ T5804] device_add+0x408/0xb80 [ 320.764685][ T5804] hci_conn_add_sysfs+0xd5/0x210 [ 320.764715][ T5804] le_conn_complete_evt+0xf1d/0x1430 [ 320.764756][ T5804] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 320.764784][ T5804] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 320.764811][ T5804] ? lockdep_hardirqs_on+0x7a/0x110 [ 320.764842][ T5804] ? skb_pull_data+0xfb/0x200 [ 320.764870][ T5804] hci_le_conn_complete_evt+0x187/0x470 [ 320.764909][ T5804] hci_event_packet+0x7af/0x12c0 [ 320.764943][ T5804] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 320.764975][ T5804] ? __pfx_hci_event_packet+0x10/0x10 [ 320.765002][ T5804] ? rt_spin_unlock+0x14f/0x200 [ 320.765037][ T5804] ? hci_send_to_monitor+0xe2/0x590 [ 320.765064][ T5804] hci_rx_work+0x3ee/0x1030 [ 320.765102][ T5804] ? process_scheduled_works+0xa25/0x1830 [ 320.765136][ T5804] process_scheduled_works+0xb02/0x1830 [ 320.765201][ T5804] ? __pfx_process_scheduled_works+0x10/0x10 [ 320.765241][ T5804] ? assign_work+0x3d5/0x5e0 [ 320.765278][ T5804] worker_thread+0xa50/0xfc0 [ 320.765344][ T5804] kthread+0x388/0x470 [ 320.765369][ T5804] ? __pfx_worker_thread+0x10/0x10 [ 320.765398][ T5804] ? __pfx_kthread+0x10/0x10 [ 320.765434][ T5804] ret_from_fork+0x51e/0xb90 [ 320.765470][ T5804] ? __pfx_ret_from_fork+0x10/0x10 [ 320.765499][ T5804] ? __switch_to+0xc7d/0x1450 [ 320.765537][ T5804] ? __pfx_kthread+0x10/0x10 [ 320.765562][ T5804] ret_from_fork_asm+0x1a/0x30 [ 320.765605][ T5804] [ 320.772062][ T5804] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 320.772204][ T5804] Bluetooth: hci4: failed to register connection device [ 322.337057][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 322.634785][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.634925][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 322.635129][ T9] usb 1-1: New USB device found, idVendor=04b3, idProduct=3108, bcdDevice= 0.00 [ 322.635268][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.911775][ T9] usb 1-1: config 0 descriptor?? [ 323.147969][T10651] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1809'. [ 323.582891][ T31] usb 5-1: USB disconnect, device number 25 [ 323.869232][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 323.869319][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 323.893882][ T9] usb 1-1: USB disconnect, device number 22 [ 324.101521][T10663] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1814'. [ 324.399764][ T5946] udevd[5946]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 324.896274][ T36] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 325.044036][ T36] usb 5-1: Using ep0 maxpacket: 32 [ 325.046929][ T36] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 325.046959][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.058365][ T36] usb 5-1: config 0 descriptor?? [ 325.109084][ T36] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 325.173911][T10683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1822'. [ 325.466720][ T5804] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 325.678107][T10693] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1824'. [ 326.882207][ T36] gspca_vc032x: reg_w err -110 [ 326.882232][ T36] gspca_vc032x: I2c Bus Busy Wait 00 [ 326.882243][ T36] gspca_vc032x: I2c Bus Busy Wait 00 [ 326.882252][ T36] gspca_vc032x: I2c Bus Busy Wait 00 [ 326.882261][ T36] gspca_vc032x: I2c Bus Busy Wait 00 [ 326.882269][ T36] gspca_vc032x: I2c Bus Busy Wait 00 [ 326.882278][ T36] gspca_vc032x: I2c Bus Busy Wait 00 [ 326.882287][ T36] gspca_vc032x: I2c Bus Busy Wait 00 [ 326.882295][ T36] gspca_vc032x: I2c Bus Busy Wait 00 [ 326.882303][ T36] gspca_vc032x: I2c Bus Busy Wait 00 [ 326.882312][ T36] gspca_vc032x: I2c Bus Busy Wait 00 [ 326.882322][ T36] gspca_vc032x: I2c Bus Busy Wait 00 [ 326.882330][ T36] gspca_vc032x: I2c Bus Busy Wait 00 [ 326.882338][ T36] gspca_vc032x: I2c Bus Busy Wait 00 [ 326.882347][ T36] gspca_vc032x: I2c Bus Busy Wait 00 [ 326.882355][ T36] gspca_vc032x: I2c Bus Busy Wait 00 [ 326.882363][ T36] gspca_vc032x: I2c Bus Busy Wait 00 [ 326.882378][ T36] gspca_vc032x: I2c Bus Busy Wait 00 [ 326.882386][ T36] gspca_vc032x: I2c Bus Busy Wait 00 [ 326.882394][ T36] gspca_vc032x: Unknown sensor... [ 326.882492][ T36] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 326.927326][ T9] usb 5-1: USB disconnect, device number 26 [ 327.551591][ T5946] udevd[5946]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 328.807948][T10729] binder: BINDER_SET_CONTEXT_MGR already set [ 328.807967][T10729] binder: 10728:10729 ioctl 4018620d 200000004a80 returned -16 [ 328.858692][T10733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1837'. [ 329.110066][ T992] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 329.260106][ T992] usb 6-1: Using ep0 maxpacket: 32 [ 329.262586][ T992] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 329.262616][ T992] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.273921][ T992] usb 6-1: config 0 descriptor?? [ 329.321578][ T992] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 329.400033][ T9] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 329.576682][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.576786][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 329.576833][ T9] usb 5-1: New USB device found, idVendor=04b3, idProduct=3108, bcdDevice= 0.00 [ 329.576858][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.605257][ T9] usb 5-1: config 0 descriptor?? [ 330.036916][ T9] hid (null): unknown global tag 0xc [ 330.036953][ T9] hid (null): report_id 3658677002 is invalid [ 330.171237][ T9] hid_parser_main: 28 callbacks suppressed [ 330.171264][ T9] lenovo 0003:04B3:3108.0006: unknown main item tag 0x0 [ 330.171299][ T9] lenovo 0003:04B3:3108.0006: unknown main item tag 0x0 [ 330.171890][ T9] lenovo 0003:04B3:3108.0006: unknown main item tag 0x0 [ 330.171920][ T9] lenovo 0003:04B3:3108.0006: unknown main item tag 0x0 [ 330.171946][ T9] lenovo 0003:04B3:3108.0006: unknown main item tag 0x0 [ 330.171971][ T9] lenovo 0003:04B3:3108.0006: unknown main item tag 0x0 [ 330.172561][ T9] lenovo 0003:04B3:3108.0006: unknown main item tag 0x0 [ 330.172587][ T9] lenovo 0003:04B3:3108.0006: unknown main item tag 0x0 [ 330.172611][ T9] lenovo 0003:04B3:3108.0006: unknown main item tag 0x0 [ 330.172634][ T9] lenovo 0003:04B3:3108.0006: unknown global tag 0xc [ 330.173192][ T9] lenovo 0003:04B3:3108.0006: item 0 1 1 12 parsing failed [ 330.176387][ T9] lenovo 0003:04B3:3108.0006: hid_parse failed [ 330.176700][ T9] lenovo 0003:04B3:3108.0006: probe with driver lenovo failed with error -22 [ 330.251384][ T10] usb 5-1: USB disconnect, device number 27 [ 330.888764][ T992] gspca_vc032x: reg_w err -110 [ 330.888780][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.888787][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.888792][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.888797][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.888802][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.888808][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.888812][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.888817][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.888822][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.888827][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.888832][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.888836][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.888842][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.888846][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.888851][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.888856][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.888860][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.888865][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.888870][ T992] gspca_vc032x: Unknown sensor... [ 330.888924][ T992] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 330.940099][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 330.975473][ T5921] usb 6-1: USB disconnect, device number 9 [ 331.180353][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 331.182732][ T9] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 331.182764][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.203994][ T9] usb 4-1: config 0 descriptor?? [ 331.223435][ T9] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 332.025727][T10764] binder: 10762:10764 ioctl c0306201 0 returned -14 [ 332.173300][T10771] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1852'. [ 332.296404][T10773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1853'. [ 332.296439][T10773] openvswitch: netlink: nsh attr 1 has unexpected len 0 expected 8 [ 332.358295][T10773] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 332.688684][ T9] gspca_vc032x: reg_w err -71 [ 332.688699][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 332.688706][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 332.688712][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 332.688716][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 332.688721][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 332.688726][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 332.688731][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 332.688736][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 332.688740][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 332.688745][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 332.688750][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 332.688755][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 332.688759][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 332.688764][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 332.688769][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 332.688773][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 332.688778][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 332.688783][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 332.688788][ T9] gspca_vc032x: Unknown sensor... [ 332.688841][ T9] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 332.709791][ T9] usb 4-1: USB disconnect, device number 25 [ 333.340055][ T992] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 333.522160][ T992] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 333.522183][ T992] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 333.522198][ T992] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 333.524481][ T992] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 333.524503][ T992] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.524515][ T992] usb 6-1: Product: syz [ 333.524524][ T992] usb 6-1: Manufacturer: syz [ 333.524532][ T992] usb 6-1: SerialNumber: syz [ 333.538792][ T992] usb 6-1: config 0 descriptor?? [ 333.539817][T10788] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 333.540898][T10788] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 333.543351][ T992] usb 6-1: ucan: probing device on interface #0 [ 333.870083][ T992] usb 6-1: ucan: could not read protocol version, ret=0 [ 333.870112][ T992] usb 6-1: ucan: probe failed; try to update the device firmware [ 334.603476][T10807] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.1861'. [ 335.879419][T10819] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1867'. [ 336.001445][T10819] netlink: 'syz.2.1867': attribute type 1 has an invalid length. [ 336.110116][ T31] usb 6-1: USB disconnect, device number 10 [ 336.204645][ T992] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 336.360058][ T992] usb 5-1: Using ep0 maxpacket: 32 [ 336.363193][ T992] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 336.363224][ T992] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.372684][ T992] usb 5-1: config 0 descriptor?? [ 336.387372][ T992] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 336.578056][ T5813] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 337.140069][ T31] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 337.309974][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 337.312352][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 337.312412][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 337.312441][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 337.312463][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 337.312506][ T31] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 337.312531][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.319429][ T31] usb 1-1: config 0 descriptor?? [ 337.488146][ T992] gspca_vc032x: reg_w err -71 [ 337.488169][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.488182][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.488191][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.488201][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.488212][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.488221][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.488231][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.488239][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.488249][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.488258][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.488268][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.488277][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.488287][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.488296][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.488305][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.488313][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.488322][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.488331][ T992] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.488339][ T992] gspca_vc032x: Unknown sensor... [ 337.488433][ T992] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 337.519210][T10854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1881'. [ 337.519430][ T992] usb 5-1: USB disconnect, device number 28 [ 337.690815][T10854] netlink: 'syz.2.1881': attribute type 1 has an invalid length. [ 337.700143][ T5921] usb 1-1: USB disconnect, device number 23 [ 338.450152][ T5808] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 338.579998][ T5808] usb 4-1: device descriptor read/64, error -71 [ 338.820226][ T5808] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 338.950197][ T5808] usb 4-1: device descriptor read/64, error -71 [ 338.967437][T10888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1893'. [ 339.065337][ T5808] usb usb4-port1: attempt power cycle [ 339.600038][ T5808] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 339.621257][ T5808] usb 4-1: device descriptor read/8, error -71 [ 339.870039][ T5808] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 339.930123][ T5808] usb 4-1: device descriptor read/8, error -71 [ 340.040602][ T5808] usb usb4-port1: unable to enumerate USB device [ 340.640026][ T5808] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 340.748286][T10904] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1896'. [ 340.803182][ T5808] usb 3-1: Using ep0 maxpacket: 8 [ 340.809248][ T5808] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.809321][ T5808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 340.809352][ T5808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 340.809375][ T5808] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 340.809421][ T5808] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 340.809445][ T5808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.834399][ T5808] usb 3-1: config 0 descriptor?? [ 340.925947][T10904] netlink: 'syz.5.1896': attribute type 1 has an invalid length. [ 341.093864][ T992] usb 3-1: USB disconnect, device number 20 [ 341.291732][ T992] ================================================================== [ 341.291752][ T992] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130 [ 341.291785][ T992] Read of size 8 at addr ffffc9000e57a008 by task kworker/0:2/992 [ 341.291804][ T992] [ 341.291820][ T992] CPU: 0 UID: 0 PID: 992 Comm: kworker/0:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 341.291849][ T992] Tainted: [L]=SOFTLOCKUP [ 341.291857][ T992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 341.291871][ T992] Workqueue: usb_hub_wq hub_event [ 341.291903][ T992] Call Trace: [ 341.291912][ T992] [ 341.291921][ T992] dump_stack_lvl+0xe8/0x150 [ 341.291952][ T992] print_report+0xba/0x230 [ 341.291978][ T992] ? __list_add_valid_or_report+0x4e/0x130 [ 341.291997][ T992] kasan_report+0x117/0x150 [ 341.292029][ T992] ? __list_add_valid_or_report+0x4e/0x130 [ 341.292053][ T992] __list_add_valid_or_report+0x4e/0x130 [ 341.292075][ T992] kcov_remote_stop+0x457/0x680 [ 341.292102][ T992] hub_event+0x49d8/0x4f60 [ 341.292154][ T992] ? __pfx_hub_event+0x10/0x10 [ 341.292188][ T992] ? process_scheduled_works+0xa25/0x1830 [ 341.292215][ T992] ? process_scheduled_works+0xa25/0x1830 [ 341.292242][ T992] process_scheduled_works+0xb02/0x1830 [ 341.292282][ T992] ? __pfx_process_scheduled_works+0x10/0x10 [ 341.292313][ T992] ? assign_work+0x3d5/0x5e0 [ 341.292341][ T992] worker_thread+0xa50/0xfc0 [ 341.292393][ T992] kthread+0x388/0x470 [ 341.292414][ T992] ? __pfx_worker_thread+0x10/0x10 [ 341.292441][ T992] ? __pfx_kthread+0x10/0x10 [ 341.292462][ T992] ret_from_fork+0x51e/0xb90 [ 341.292491][ T992] ? __pfx_ret_from_fork+0x10/0x10 [ 341.292517][ T992] ? __switch_to+0xc7d/0x1450 [ 341.292543][ T992] ? __pfx_kthread+0x10/0x10 [ 341.292564][ T992] ret_from_fork_asm+0x1a/0x30 [ 341.292591][ T992] [ 341.292598][ T992] [ 341.292603][ T992] The buggy address belongs to a vmalloc virtual mapping [ 341.292621][ T992] Memory state around the buggy address: [ 341.292632][ T992] ffffc9000e579f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 341.292646][ T992] ffffc9000e579f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 341.292659][ T992] >ffffc9000e57a000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 341.292670][ T992] ^ [ 341.292680][ T992] ffffc9000e57a080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 341.292694][ T992] ffffc9000e57a100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 341.292704][ T992] ================================================================== [ 341.292717][ T992] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 341.292734][ T992] CPU: 0 UID: 0 PID: 992 Comm: kworker/0:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 341.292761][ T992] Tainted: [L]=SOFTLOCKUP [ 341.292768][ T992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 341.292779][ T992] Workqueue: usb_hub_wq hub_event [ 341.292805][ T992] Call Trace: [ 341.292811][ T992] [ 341.292819][ T992] vpanic+0x56c/0xa60 [ 341.292848][ T992] ? __pfx_vpanic+0x10/0x10 [ 341.292878][ T992] panic+0xc5/0xd0 [ 341.292904][ T992] ? __pfx_panic+0x10/0x10 [ 341.292929][ T992] ? __list_add_valid_or_report+0x4e/0x130 [ 341.292944][ T992] ? rcu_is_watching+0x15/0xb0 [ 341.292966][ T992] ? __list_add_valid_or_report+0x4e/0x130 [ 341.292979][ T992] check_panic_on_warn+0x89/0xb0 [ 341.292994][ T992] ? __list_add_valid_or_report+0x4e/0x130 [ 341.293007][ T992] end_report+0x73/0x180 [ 341.293030][ T992] ? __list_add_valid_or_report+0x4e/0x130 [ 341.293045][ T992] kasan_report+0x128/0x150 [ 341.293069][ T992] ? __list_add_valid_or_report+0x4e/0x130 [ 341.293088][ T992] __list_add_valid_or_report+0x4e/0x130 [ 341.293106][ T992] kcov_remote_stop+0x457/0x680 [ 341.293128][ T992] hub_event+0x49d8/0x4f60 [ 341.293171][ T992] ? __pfx_hub_event+0x10/0x10 [ 341.293198][ T992] ? process_scheduled_works+0xa25/0x1830 [ 341.293219][ T992] ? process_scheduled_works+0xa25/0x1830 [ 341.293240][ T992] process_scheduled_works+0xb02/0x1830 [ 341.293273][ T992] ? __pfx_process_scheduled_works+0x10/0x10 [ 341.293297][ T992] ? assign_work+0x3d5/0x5e0 [ 341.293319][ T992] worker_thread+0xa50/0xfc0 [ 341.293362][ T992] kthread+0x388/0x470 [ 341.293379][ T992] ? __pfx_worker_thread+0x10/0x10 [ 341.293399][ T992] ? __pfx_kthread+0x10/0x10 [ 341.293415][ T992] ret_from_fork+0x51e/0xb90 [ 341.293438][ T992] ? __pfx_ret_from_fork+0x10/0x10 [ 341.293458][ T992] ? __switch_to+0xc7d/0x1450 [ 341.293479][ T992] ? __pfx_kthread+0x10/0x10 [ 341.293495][ T992] ret_from_fork_asm+0x1a/0x30 [ 341.293518][ T992] [ 341.295040][ T992] Kernel Offset: disabled