last executing test programs: 5.298258961s ago: executing program 0 (id=1600): r0 = getpid() syz_open_procfs(r0, &(0x7f0000000040)='projid_map\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x0) 4.740712879s ago: executing program 3 (id=1604): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081", 0x7}], 0x1}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0c020320"], 0xf) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x8, 0xffffffffffffffff, 0x80000}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000cc0), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x1000080, &(0x7f0000000800)=ANY=[@ANYBLOB='mpol=interleave,mpol=lgc']) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000ffdbdf25010000ca000000000c41000000030014"], 0x30}, 0x1, 0x0, 0x0, 0x4040040}, 0x4000) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x4}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8050}, 0x4000894) 4.611771282s ago: executing program 3 (id=1605): open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0xf9fdffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) write$P9_RVERSION(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="150000006bffff"], 0x15) 4.573518589s ago: executing program 3 (id=1607): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0xe8302, 0x0) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f0000000140)=0x3b) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3b) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="1201100316c6c824402000080904f9240004036777bd9a7a02204c4798e9964abc820682f31b7ae27af741993ffae3054659de7f9e5d786254ed767d00000000000000000000000000000074e30780021769f257c9f505182a60bc727ee4aaec9578024e6390a416a4ba183e1e328cb2a98816c9a91df2f38000d8b9ae0d73f653ebe16cb60646f4d6bdeeb629dca0791dae259190347d514963126af0cdf1fd49468631e3f510c4361677d9bf033f363725c6f13b9b5aeedfb73cb7bd9da6000000"], 0x0) syz_pidfd_open(r3, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xff07, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f0000000040)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0x0, &(0x7f0000000380)={0x1, 0xf, 0x6, 0x0, 0x3, 0x6, 0xff, 0x6, 0x9}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_generic(r4, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xffffff24, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[], 0xa8}, 0x1, 0x0, 0x0, 0x488d1}, 0x240488d0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040042000000a8001600a400014020000700feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e425e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db7010000827ffad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbeefb415dfc", 0xd9}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000540), 0x106, 0x9}}, 0x20) write$binfmt_aout(r0, &(0x7f0000001440)=ANY=[@ANYRES16=r6], 0xa8a) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e24, 0x9, @private0, 0x8}, r7, 0x8001}}, 0x48) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0) r9 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r8, 0x4004af07, &(0x7f0000000240)=r9) ioctl$VHOST_SET_VRING_KICK(r8, 0x4008af20, &(0x7f0000000040)={0x1, r9}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r8, 0x4004af61, &(0x7f0000000000)=0x1) 4.30763506s ago: executing program 0 (id=1608): syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x210, 0x80, 0x7e, 0x5b, 0x8, 0xcf2, 0x6250, 0x613, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x4c, 0x30, 0x20, "", [{{0x9, 0x4, 0x4d, 0xe, 0x0, 0x3d, 0x67, 0x83, 0x3}}]}}]}}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ncm(0x2, 0x13d, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12b, 0x2, 0x1, 0x7, 0xe0, 0x9, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "7afa"}, {0x5, 0x24, 0x0, 0xe9}, {0xd, 0x24, 0xf, 0x1, 0x71, 0x4, 0xff01, 0x1d}, {0x6, 0x24, 0x1a, 0x604, 0x30}, [@mdlm_detail={0xb3, 0x24, 0x13, 0x9, "8d21c40a9c3dc660e4185d1ed8c125fe591c2153c8219ba2354b80836a063fc167194a9793fd8a1bacb94d40f18fe43adc66fca48187719bf9d0446d7dbfe1094ed3e1d98306d0541ad2ec313c91c23af080c0b011fc7ea46bbbdb5beabacd4159db6c64f7520075c2f4f544d7f19068588f904bf8f8b99a3eaf467b1d53278703e4c79567c6521089d8aeeffa649d466cb33b2afdec773f318eb693851f528fb1b0953d974b5c8260daa804130234"}, @mdlm={0x15, 0x24, 0x12, 0x3}, @obex={0x5, 0x24, 0x15, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x2, 0x5, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xa, 0xfa, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xb, 0x9, 0x53}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x4, 0x9, 0x6, 0xff, 0x94}, 0x8, &(0x7f0000000200)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x5, [{0xea, &(0x7f0000000240)=@string={0xea, 0x3, "7a28aa3c6a6a53aed37c8264c0bd2414e172687ba0a6e4d6cc1da9645a601a388d3e7668069a0c8d7ea6e3c8e360a115c7f611ef0fc31818d57a996a8c98b422f48de94ee6d472e9c9a2a7b15742becc9feb353e1ee93b3d84e321f6b48883476825637338426c57b294792bd412b7447fe208cf635cae7a503704556fc0657e6c1e36202952ba6437753898a179cabb39b86ec8cb74a373e520b64d037828ff8f413dc1d4b03f2deeaf16afd96dcca1512910a4d92bcb521d8810261b0033b5d632e6c1333a06a8ed5a58097c9dedded9451bf4c9bab98805f79d01489a034fb4a4ddbad10a6cb2"}}, {0x6d, &(0x7f0000000340)=@string={0x6d, 0x3, "7da010ac8434f34cbf4f24fd3f74909d91134e05ff6db0b6754c0a3ebbe626d59e55dd4f79aff9b16d68addb0e03fe48ee2ceba235bd2058cf8e286b72761ff17c2424d5cb05d74c1ef82b6640cbe2220082f4dde891b4255b449c82dcba5ad1a6e34bb6f21804fba021b2"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1c01}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x140c}}, {0xe3, &(0x7f0000000440)=@string={0xe3, 0x3, "44c42b45886a5cca6ef5b78e0a2f9d944357b31c54d367567c61ac3b1f370a640a0445af4b2cca76be1eace21e48fe3c2905a1f1300915b4327208077bbb1e9038483e51e73fbd6655944d4bad5e2e27534d5c1c8da9f69e3da04fd667e15ed83ddaa0d8cb96704d218f69220de20abbef8f3b1e9c9755f1d1ab74d2359048b34be95b95af6e62c7f9587df9652589efa335ba46613faa1c078c2992f120fa5a64d94bc025bd2ddfe9c47ca68b119a4412e39e2a5a2ba7cfd082e40c026bb16caa864927dbe76d934ba3057653e0734409af84168aca76294e1db448e4936e6932"}}]}) r0 = syz_usb_connect$cdc_ecm(0x1, 0x8c, &(0x7f00000005c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x1, 0x1, 0xf, 0x10, 0xe, "", [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x37, {{0x9, 0x24, 0x6, 0x0, 0x0, 'gkpp'}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x7, 0x80, 0x15}, [@mdlm_detail={0x3b, 0x24, 0x13, 0x1, "b12efcc6d42ea7e3cac9cc90b80510c2a07f216fd3d229d9a70c04ab84e13195dc924a603d4a028e8342b8bcdd721a80f48830b5e858d1"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x1, 0x7, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x7, 0x4, 0xd}}}}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000001300)={0xa, 0x6, 0x310, 0x1, 0x2, 0x5, 0x40, 0x80}, 0x12b, &(0x7f00000006c0)={0x5, 0xf, 0x12b, 0x6, [@wireless={0xb, 0x10, 0x1, 0x4, 0x2, 0x7, 0x99, 0x2b99, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x9, 0x2, 0x7f}, @generic={0xef, 0x10, 0xa, "2e3a96b24883ef1c90ccb5f0bae93e584736c1af2413706308a5a206e26a27c6681b22134bcf5dbaa98120ec7384c7dd74843131f915d98257d7bf56995419549b76423b28a53a544824e38e463c992242958d08c0c1ad3024d704dcae4486957961befe0c038169a1f1a39438aeb1a8e9d3127c1554385206da8c67ba678762709cd209a1cd747c81cc36bc1c7a5d0c63c0e26428b6ef30cd059ab7efee84d739fcd36d2ad6975f9781300e3ebb9265417d528df2956aeefeda346cf525a0e85aa04161b77e8787d45c949263f58729832f191b55a25730f4b487a87fb030b3120a597b6b875a0866e25b88"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x8, 0x1, 0x400, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "f26f6d9a11c06feb1eb88198fb11abc5"}]}, 0x3, [{0x5f, &(0x7f0000000800)=@string={0x5f, 0x3, "b12a00a603ae601fceb3b179de157d921ee3792a5e67fff674125be4a9e396eaddae6fbe01b95fdf1d05e2bedf9d2a5be7a8d1446efbe248da782706ae6752f80da86ca10ae4f3acf8a8ecab77b438e376b58d2155a47c8a700d480d29"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x455}}, {0x48, &(0x7f00000008c0)=@string={0x48, 0x3, "2aecdc32a0d216cf807b75770bad7b1c4e4fe7a1e8869e1bcb91ee29435e68574ba6a82c6ecc317280585eae0cb84ca1c56ea731532ee4b64e5bc351c0de220b254ac8f91040"}}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="2000000076001f03000000000000000008000000", @ANYRES32, @ANYBLOB="08000500daa4ec0000000000000003f2cc8019c7aef56affbb001c9de5c902728149f2548019e027ab5d8f60821c33756b7b1d961988c47f2b33e2cf615c58b4ae0071e686d8104bb4035fafb2600965de2ef6f42d"], 0x20}], 0x1, 0x0, 0x0, 0x4004010}, 0x0) r2 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101175129205705092006c70102010109022400010200100009045819028ab53800090506020001000006090582020002"], 0x0) r3 = syz_usb_connect$midi(0x1, 0x6a, &(0x7f0000000980)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x1e30275e0953df02, 0x41e, 0x3042, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x58, 0x1, 0x1, 0x80, 0x50, 0x15, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x30, 0x8a, [@midi_out_jack={0x19, 0x24, 0x3, 0x2, 0x5, 0x9, [{0x9, 0x6}, {0x7f, 0x56}, {0x8, 0x43}, {0x9, 0x3}, {0xf, 0x2}, {0x4, 0x9}, {0x8, 0x2}, {0xc, 0x3}, {0xe1, 0x6}], 0x7f}, @midi_out_jack={0x17, 0x24, 0x3, 0x1, 0x36, 0x8, [{0x81, 0xb}, {0x0, 0x10}, {0x9}, {0x6, 0xd0}, {0xf8, 0x1}, {0x8, 0x5}, {0x3, 0x9}, {0x6, 0x9}]}], [{{0x9, 0x5, 0xe, 0xc, 0x10, 0x0, 0x0, 0xaf, {0xd, 0x25, 0x1, 0x9, "3755161bf741a80aeb"}}}]}}}}}]}}, &(0x7f0000000ec0)={0xa, &(0x7f0000000a40)={0xa, 0x6, 0x110, 0x2, 0x6, 0xe, 0xff, 0x2}, 0x1e0, &(0x7f0000000a80)={0x5, 0xf, 0x1e0, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0x4, 0x2, 0x4}, @generic={0xe5, 0x10, 0x3, "463ccfe15d1338c7cb3691bbebd78027e26613f8a60dfef0517eb155dc4210c302026cf59e4facfcb7254443cd35af149fd6e85b88966f2c462fa242b56aacf19efcb93e9863c4c9bd72964755d4a0c2b38f6427f7f970730b642e737f41ce1c79ba8ae802ba5a0c03954a01007447acc86311e3158bae26e03ff59619b801000080b14177db785f6e55ddf6101c1fa054d8c38a27a8ff816b891d9dd7b7f45a4f79a08714df1aef531d714f5cc84a7c52b32a89caff5420bb6b58f4e32618e727509fd4533fdd4b0ed3fad44d78dd4e696adb6e4bade3161f86a9129ea08f571e"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x9, 0x4, 0x14}, @generic={0xdb, 0x10, 0x1, "752b9dbe92485b1d2cd0ab5a412e11e170be7a92284ef12e5034dbedcc47440f11edb80dea92b3d2d9a71a935b3f43a7d53ef5c0549be1d771a1b781918ae47692ba354f811b037c161d99a603cdd260258ab4b7462395e756894ce3973730e98e1b0a1fd2aa209328063655f3091bc7721aac4c96f854571be9a9fc78fa24250da4ddbce83b9a152e2c0fac06ffd56df88e6a4dc70edae919c36d8f7146ad312a14cf2de7313c5eafffbde7786243730db3b0cdb4ca8306c2224549b18b82107fec3ee19f2c095c21db94caa340ec35a7165fb7e39ef6a1"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x3, 0x91, 0x6}]}, 0x8, [{0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x814}}, {0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x446}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x41e}}, {0x44, &(0x7f0000000d80)=@string={0x44, 0x3, "3d8d5cb68df0937243eba29bea39fc56c44d10f02e53aa46f227f56280679c2c213cafb6bacbff03b06716e75f1c646a44690a119b65666f47d0e53c6ee371f0b442"}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x810}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x240a}}, {0xffffffffffffffbd, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x459}}]}) syz_usb_control_io$printer(r3, &(0x7f0000001000)={0x14, &(0x7f0000000f40)={0x20, 0x21, 0x22, {0x22, 0x22, "71515c76706a16f958f5751065c1c6a904bc3c98255099be9b4fe27fada41409"}}, &(0x7f0000000f80)={0x0, 0x3, 0x67, @string={0x67, 0x3, "98d8014b02b914065b53340a3a4271306f980d5125d51158210e3fa0f3956bd22f418b03f11ccd5b0f6d0bdab760cd08c2968cf679ee93f39477ed077f6bfff23b94557dc7259e771ff1d71652f3d498813767eccd988ca09648c2fa6558e8be0674c79add"}}}, &(0x7f00000012c0)={0x34, &(0x7f0000001040)={0x40, 0x10, 0x63, "8e23d4ddd30d59220cc15247304870cd67df1c84644d837d6ba7c561ea67c0bcc9f00554146ba171312610b4fcbce593b74d806ce3a568c507767cf2621385bac802353331e6a28f3633dbd3749c8b3b13928dec589c8e72d43011198888828ca74efe"}, &(0x7f00000010c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000001100)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000001140)={0x20, 0x0, 0xbd, {0xbb, "bb0a0d5c1647a9058e2423361d8bfe71399b9d4b4f5a821b45e593ae39dcd12a497fc5743ae2f395240693f3fa653fdccf1d63de9eba1299579f2198fa7d523045810e642d6341e1eac187be71098435951eb98fe7085c03042e0e7bb7b2be0f861b9ffc38d1516028a1949a2b02e89a5553351d2ce16cb9e5f13c0d980510a9ad99fec2a070c330f437c408e87beded29dd50f6d10377c8d091d941dd50735619a6e45cc04c3ac138caae690cdd3a71a7cc522b7bac3a60099d66"}}, &(0x7f0000001240)={0x20, 0x1, 0x1, 0x17}, &(0x7f0000001280)={0x20, 0x0, 0x1, 0xd}}) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) syz_usb_disconnect(r0) 3.97526033s ago: executing program 1 (id=1611): openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) syz_emit_vhci(&(0x7f0000005740)=ANY=[@ANYBLOB="040f0409"], 0x7) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000540)={0x0, 0xcc, 0x1, [0x2, 0x5, 0x5, 0x7b4, 0x5], [0x10001, 0x5, 0x7, 0x4, 0x8, 0x81, 0x4, 0x9, 0x4, 0x3, 0xdc6, 0x9, 0x81, 0xe6, 0x5, 0xc12, 0x2, 0x2, 0xfffffffffffffffc, 0x2, 0x2, 0x7, 0x80000001, 0x4b9ae696, 0x3, 0xf, 0x9, 0x81, 0x68, 0x10, 0x4, 0xdd, 0x3, 0xac18, 0x4000, 0xfffffffffffffff7, 0xd, 0x4, 0x7f, 0x7ff, 0x0, 0x90b, 0x8, 0x0, 0x8, 0x8, 0xf68, 0x8719, 0x86, 0x8, 0x0, 0x0, 0xa, 0x9, 0x4, 0x8, 0x3, 0x8, 0x800, 0x8, 0x0, 0x100, 0x54f3, 0x9, 0x0, 0x7, 0xfc9, 0xff, 0x7, 0x9, 0x4, 0x200, 0x5, 0xfffffffffffffff9, 0x9, 0x8, 0x6, 0x8, 0x1000, 0x8001, 0x9, 0x3, 0x5, 0xb, 0x5, 0x6, 0x457, 0x79ec, 0x1, 0x7ff, 0x4, 0x8, 0x81, 0x6, 0x3, 0xffffffffffffffff, 0x4a9, 0x7c9, 0x0, 0x101, 0x0, 0xfffffffffffffffa, 0x3, 0x101, 0x8, 0x8, 0x9, 0xcf33, 0xd, 0x3, 0x3ff, 0x61, 0x6, 0x41, 0xf, 0x2, 0x7ff, 0x7, 0xb, 0x5fa, 0xc6]}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000980)={0x1, 0x0, {0x3, 0x0, 0x401, 0x2, 0x7ff}, 0x8}) listen(r0, 0x90004) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c900", @ANYRES8], 0x16) 3.67572693s ago: executing program 2 (id=1612): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) read$FUSE(r0, &(0x7f000000c300)={0x2020}, 0x2020) 3.654460699s ago: executing program 2 (id=1613): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuset.memory_pressure\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x8000, {0x2a00, 0x80010000, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0xa, 0x2000, 0x14, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e6010000005d960001000000002000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c361265420606306003d8a00300", [0x10, 0x3]}}) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x5, 0x40040) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000180)={0x2, 0x1, 0x3, 0x7}) r3 = socket(0x2, 0x80805, 0x0) setsockopt$MRT_TABLE(r3, 0x0, 0xcf, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_START(r2, 0x6f29) r4 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='mand\x00', &(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x2, &(0x7f0000000000)="82f4518976c79f8d42a56b6c009cf52cd5ba26881f9ec00cf877b00f8021fb6e3622cd6bc567276b7103a5ec6b768014283b9ca8bdd8dcdea546bf322db16cd1") 3.63958608s ago: executing program 1 (id=1614): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x2a) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x80) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0100, 0x0) r0 = syz_clone(0x211, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$cont(0x1f, r0, 0xa, 0xf) r1 = msgget$private(0x0, 0x722) msgrcv(r1, 0x0, 0x0, 0xffffff7f00000000, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48, 0x8, 0xffffffffffffffff, 0x0, 0x3ff, 0x0, 0x0, 0x5}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file2\x00'}) 3.552137267s ago: executing program 2 (id=1615): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x70}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x55}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x90}}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x8000, 0x0) (async) syz_usb_connect(0x3, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xe5, 0x60, 0x69, 0x10, 0x557, 0x2011, 0xd61e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x4, 0x0, 0x10, "", [{{0x9, 0x4, 0xfb, 0x80, 0x0, 0xe7, 0x67, 0xce, 0x6}}]}}]}}, 0x0) (async) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f00000005c0)=[@transaction_sg={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003e40), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000004080)={0x0, 0x0, &(0x7f0000004040)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000ffdbdf250100000004000180100002800c000180"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x10) 3.341946757s ago: executing program 1 (id=1616): r0 = socket(0x2, 0x2, 0x0) open_by_handle_at(r0, &(0x7f0000000140)=@FILEID_NILFS_WITH_PARENT={0x20, 0x62, {0xff, 0x80000000, 0xa8, 0x6, 0x80}}, 0x101001) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="2e1221b23bb601c477d3df163e75963d86dd604de11fc90d2f8db0049d90491c3248040000dbb8a10000", 0x2a}, {&(0x7f0000000280)="89cca9ad7f624c060000850875090000", 0x10}], 0x1000000000000278) 2.906168237s ago: executing program 1 (id=1617): syz_open_dev$video4linux(0x0, 0x7fffffff, 0xc06c0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x16c0, 0x5e1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x77, 0x3, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x10, 0x4, 0x1}}}}}]}}]}}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x800004, @mcast2={0xff, 0x3}, 0x7}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0xa40, 0x4800, 0x2}) sendto$inet6(r0, &(0x7f0000000000)="826bb66f", 0x18, 0x6000, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000340)=ANY=[@ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0xe22, 0x3, @loopback, 0xffffffff}, 0x1c) syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc040564a, &(0x7f0000000140)={0xd, 0x0, 0x12, 0x5, 0x2, 0xfffffffa, 0x7}) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt(r4, 0xffffffff, 0x1, 0x0, 0x0) sendto(r4, &(0x7f0000000180)="276b528d2e93eb9a0128", 0xa, 0x4000, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x0, 0x1, 0x1, 0x2, {0xa, 0x4e21, 0x400, @dev={0xfe, 0x80, '\x00', 0x23}, 0x5}}}, 0x80) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f0000000100)={0x2, 0xfffffff8}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) 2.728275174s ago: executing program 2 (id=1618): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0) mlockall(0x3) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x190fe}], 0x1, 0x179c, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4, 0x6b35e9d94325c672, 0xffffffffffffffff, 0x0) 2.62921423s ago: executing program 0 (id=1619): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x454040, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="d800000018007bede00212ba0d8105040a60e000000f040b067c55a1bc0009001e0006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a288747f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d345ef464095cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3099ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40d0ad601edef3d93452a92307f00000e97031e9f05e9f16e9cb50000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r4, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r5, 0xc0383e04, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="64670feea1096f00003e660f38054c880f323e26640fb9a9c94f660fc7b27f1a360f09366764f4660fdd40e69a3a00e300baa000b0e5ee", 0x37}], 0x1, 0x6, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000e80)="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", 0x22a, 0x6d91fb6102d8910c, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$SYNC_IOC_FILE_INFO(r2, 0xc0383e04, &(0x7f0000000780)={""/32, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r9 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r9, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) 2.025545753s ago: executing program 0 (id=1620): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0xc0600, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, 0x0) prlimit64(0x0, 0x6, 0x0, 0x0) r0 = fsopen(&(0x7f0000000240)='btrfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) connect$netlink(r1, &(0x7f0000000100), 0xc) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001800)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xb048}, 0x0, 0x0, '\x00', {0x2, 0xf6d, 0x0, &(0x7f0000000800)=@buf_512="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"}}, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f00000000c0)=0x2001) readv(r2, &(0x7f0000000a80)=[{&(0x7f00000009c0)=""/65, 0x41}], 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) write$sndseq(r3, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time}], 0x38) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_COUNTERS={0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x78}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sched_setaffinity(0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f0000000240)={0x0, 0x107000}) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r7, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 1.407715676s ago: executing program 1 (id=1621): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x60080, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x40384708, &(0x7f0000000040)={0x1, 0xb, 0x0, 0x400000, 0x0, "3eccd800ff00000000000010000000040100"}) 1.376198143s ago: executing program 2 (id=1622): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="6201000000370000040101"], 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x193) mount$afs(&(0x7f0000000180)=@cell={0x25, 'syz0:', 'syz0', '.backup'}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x8000, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r1, 0x0, 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}]}, &(0x7f0000000040)=0x10) 1.07051323s ago: executing program 1 (id=1623): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0xfffffffd}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x4010, 0xffffffffffffffff, 0xd4b24000) socket$nl_route(0x10, 0x3, 0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000100)={{}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x1b, "0062ba7d82000000000000000000f7ffffff00"}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x101000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) open(0x0, 0x2a0001, 0xd2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xffffffff, 0x8000000008000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r5 = getpid() r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_fuse_handle_req(r6, &(0x7f0000000e00)="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", 0x2000, &(0x7f0000008100)={&(0x7f0000002e00)={0x50, 0x0, 0x5, {0x7, 0x2d, 0x9, 0x1006046, 0x4, 0x4881, 0x400, 0xffffffc0, 0x0, 0x0, 0x20, 0x40}}, &(0x7f0000002e80)={0x18, 0x0, 0x10000, {0x81}}, &(0x7f0000002ec0)={0x18, 0xfffffffffffffffe, 0xffffffff, {0x1}}, &(0x7f0000002f00)={0x18, 0x0, 0x6, {0xfffffff8}}, &(0x7f0000002f40)={0x18, 0x0, 0x7a5f1c61, {0xa}}, &(0x7f0000002f80)={0x28, 0xffffffffffffffda, 0x5, {{0x401, 0x2, 0x1, r5}}}, &(0x7f0000002fc0)={0x60, 0x0, 0x4838631b, {{0x800, 0x7f, 0x5, 0x7fffffff, 0x2, 0x10001, 0x5, 0x200}}}, &(0x7f0000003040)={0x18, 0x0, 0x1, {0xfffffffd}}, &(0x7f0000003080)={0x11, 0x0, 0x1, {'\x00'}}, &(0x7f00000030c0)={0x20, 0x7be74c2f81d4c832, 0x1, {0x0, 0x1}}, &(0x7f0000005200)={0x78, 0xfffffffffffffffe, 0x8000, {0x44, 0x9, 0x0, {0x1, 0x5, 0x270, 0x6, 0x80, 0x7ff, 0x0, 0x80000000, 0xfffffff0, 0xa000, 0x46, 0x0, 0x0, 0x2, 0x5}}}, &(0x7f0000005440)={0x90, 0x0, 0xfffffffffffffffb, {0x2, 0x3, 0x7fffffffffffffff, 0xffffffffcd4068f6, 0x6, 0x7fff, {0x2, 0x5, 0x8de4, 0xa, 0x8000000000000001, 0x5, 0x3, 0x5, 0x5895, 0xb000, 0x2, 0x0, 0x0, 0x3, 0x1ff}}}, &(0x7f0000005500)=ANY=[@ANYBLOB="58000000000000003f12c920a5d6ecc7d43a11c3370000000000000400000000000000e4090000000000000f000000ff0000002f6465762f73657175656e63657200000000000000050000000e"], &(0x7f00000078c0)=ANY=[@ANYBLOB="800400000000000008000000000000000100000000000000020000000000000003000000000000000700000000000000030000004000000002000000000000000000007f00000000810000000000000004000000000000000300000000000000030000000000000037040000880600000600000000100000d3000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ba000000040000000000000002000000000000008d6d00000000000008000000090000006c6f77657264697201000000000000000100000000000000010000000100000000000000000000000300000005000000020000000000000000000100000000000700000000000000ff000000000000000100000000000000050000000000000001000000000000000300000000a0000004000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000ffff000000000000030000000000000003000000000000000800000005000000757070657264697204000000000000000200000000000000030000000000000008000000000000000200000005000000030000000000000008000000000000000000000000000000000000000000000005000000000000000500000000000000feffffffe3f8000001000000004000000b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="c900000001000000000000000200000000000000000000000000000007000000ff0100002f5d7d5e5b242800030000000000000003000000000000000200000000000000020000000000000001000000400000000100000000000000a7000000000000000000010000000000010000000000000008000000000000003e0000000000000081050000030000000200000000c0000000080000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0f0000080000000000000005000000000000000c0000000000000008000000ff7f00006f7665726c617900000000000000000000000000000000000002000000000000010400000000000003000000030000000100000000000000060000000000000000000000000000000e00000000000000ff0f000000000000d20000000000000080000000000001005a0e000000a0000006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0400000009000000000000000300000000000000030000000000000002000000010000002d2b00000000000006000000000000000300000000000000fd00000000000000100000000000000000000000010c000005000000000000000100000000000000810000000000000006000000000000000600000000000000000000000000000000800000fcffffff7d00000000c0000009000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000001000000000000001000000000000007d0000000000000012000000010400002f6465762f736e642f6d69646943234423000000000000000200000000000000000000000000000005000000000000000100000000000000030000000100000002000000000000000a00000000000000fc0000000000000001040000000000000e0000000000200001000000000000000004000003000000080000000060000081000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="d80f000009000000000000000300000000000000020000000000000001000000dd0000002d00000000000000"], &(0x7f0000007ec0)={0xa0, 0xffffffffffffffda, 0x2, {{0x3, 0x0, 0x1000, 0xa45, 0x200, 0x8, {0x2, 0x6, 0x0, 0xf, 0x191e, 0xffffffff, 0x40, 0x1ff, 0x6, 0x6000, 0x6, 0x0, 0x0, 0x0, 0x4}}, {0x0, 0x7}}}, &(0x7f0000007f80)={0x20, 0x0, 0x2, {0xe, 0x0, 0x8, 0x8000}}, &(0x7f0000007fc0)={0x130, 0x0, 0x8000000000000000, {0x88, 0x2, 0x0, '\x00', {0x4, 0x328, 0xffffffffffff78bb, 0x6, 0xee00, 0x0, 0x4000, '\x00', 0x12e9c25e, 0xa, 0x6, 0x9, {0x8001, 0x3}, {0xfffffffffffff000, 0x400}, {0x7, 0x2}, {0x4, 0xffffffff}, 0x8, 0x9236, 0x9, 0x644}}}}) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffffff, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000140)='./file1\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000008190400060000000000010902"], 0x0) 931.762011ms ago: executing program 3 (id=1624): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x2a) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x80) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0100, 0x0) r0 = syz_clone(0x211, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = msgget$private(0x0, 0x722) msgrcv(r1, 0x0, 0x0, 0xffffff7f00000000, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48, 0x8, 0xffffffffffffffff, 0x0, 0x3ff, 0x0, 0x0, 0x5}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file2\x00'}) 535.480845ms ago: executing program 3 (id=1625): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84022, &(0x7f0000000080)=ANY=[@ANYBLOB='siz']) 343.541663ms ago: executing program 0 (id=1626): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84022, &(0x7f0000000080)=ANY=[@ANYBLOB='siz']) (fail_nth: 1) 65.09847ms ago: executing program 3 (id=1627): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x18, 0x16, 0xa01, 0x0, 0x0, {0x20, 0x0, 0xf0}, [@nested={0x4, 0xca}]}, 0x18}}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x420000, 0x4) ioctl$OTPGETREGIONINFO(r1, 0x400c4d0f, &(0x7f0000000080)) 221.809µs ago: executing program 0 (id=1628): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = dup2(r0, r0) read$FUSE(r1, &(0x7f0000000a40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x50a) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff030}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r3) sendmsg$NLBL_CIPSOV4_C_REMOVE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r2], 0x1c}, 0x1, 0x0, 0x0, 0x480c4}, 0x4000000) flistxattr(r1, &(0x7f0000000000)=""/89, 0x59) ioctl$XFS_IOC_FSGETXATTRA(r1, 0x801c582d, &(0x7f00000001c0)) 0s ago: executing program 2 (id=1629): r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c1e0309001a03a000", 0x33a) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x2, 0x7}, 0x4) setsockopt$sock_int(r1, 0x1, 0x2c, &(0x7f00000000c0)=0xbfe, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) close_range(0xffffffffffffffff, r0, 0x0) bind$x25(r0, &(0x7f00000000c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) r2 = semget$private(0x0, 0x1, 0x100) semop(r2, &(0x7f0000000000)=[{0x3, 0x1b6, 0x1800}, {0x4, 0xe96c, 0x2000}, {0x0, 0x345a, 0x1800}], 0x3) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x1) kernel console output (not intermixed with test programs): [ T32] usb 4-1: Product: syz [ 183.489301][ T32] usb 4-1: Manufacturer: syz [ 183.489316][ T32] usb 4-1: SerialNumber: syz [ 183.544896][ T32] usb 4-1: config 0 descriptor?? [ 183.747910][ T32] ch341 4-1:0.0: ch341-uart converter detected [ 183.776709][ T6814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.777262][ T6814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.861709][ T32] usb 4-1: failed to send control message: -71 [ 184.861782][ T32] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 184.945187][ T32] usb 4-1: USB disconnect, device number 22 [ 185.003203][ T32] ch341 4-1:0.0: device disconnected [ 185.724690][ T6861] netlink: 128 bytes leftover after parsing attributes in process `syz.3.358'. [ 185.778688][ T199] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 185.938614][ T199] usb 1-1: Using ep0 maxpacket: 32 [ 185.941475][ T199] usb 1-1: too many endpoints for config 0 interface 0 altsetting 254: 223, using maximum allowed: 30 [ 185.941526][ T199] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 185.941557][ T199] usb 1-1: config 0 interface 0 has no altsetting 0 [ 185.941592][ T199] usb 1-1: New USB device found, idVendor=0925, idProduct=8888, bcdDevice= 0.00 [ 185.941616][ T199] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.002125][ T199] usb 1-1: config 0 descriptor?? [ 186.434715][ T6860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.435783][ T6860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.479265][ T199] smartjoyplus 0003:0925:8888.0001: unknown main item tag 0x2 [ 186.479306][ T199] smartjoyplus 0003:0925:8888.0001: unknown main item tag 0x6 [ 186.479335][ T199] smartjoyplus 0003:0925:8888.0001: unknown main item tag 0x0 [ 186.479363][ T199] smartjoyplus 0003:0925:8888.0001: unknown main item tag 0x0 [ 186.479390][ T199] smartjoyplus 0003:0925:8888.0001: unknown main item tag 0x0 [ 186.479417][ T199] smartjoyplus 0003:0925:8888.0001: unknown main item tag 0x0 [ 186.479445][ T199] smartjoyplus 0003:0925:8888.0001: unknown main item tag 0x0 [ 186.479471][ T199] smartjoyplus 0003:0925:8888.0001: unknown main item tag 0x0 [ 186.479498][ T199] smartjoyplus 0003:0925:8888.0001: unknown main item tag 0x0 [ 186.479525][ T199] smartjoyplus 0003:0925:8888.0001: unknown main item tag 0x0 [ 186.479628][ T199] smartjoyplus 0003:0925:8888.0001: collection stack underflow [ 186.479653][ T199] smartjoyplus 0003:0925:8888.0001: item 0 4 0 12 parsing failed [ 186.480573][ T199] smartjoyplus 0003:0925:8888.0001: parse failed [ 186.480653][ T199] smartjoyplus 0003:0925:8888.0001: probe with driver smartjoyplus failed with error -22 [ 186.484589][ T6873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.571921][ T6873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.620495][ T6873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.625489][ T6873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.653789][ T6873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.659173][ T6873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.675236][ T6873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.675683][ T6873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.746683][ T6875] netlink: 'syz.1.364': attribute type 4 has an invalid length. [ 187.121418][ T39] audit: type=1326 audit(2051927233.558:2): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6880 comm="syz.1.367" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f836242de59 code=0x0 [ 187.159746][ T6882] netlink: 'syz.1.367': attribute type 28 has an invalid length. [ 187.159769][ T6882] netlink: 'syz.1.367': attribute type 40 has an invalid length. [ 187.159783][ T6882] netlink: 'syz.1.367': attribute type 17 has an invalid length. [ 188.625958][ T32] usb 1-1: USB disconnect, device number 13 [ 189.073302][ T5741] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 189.264853][ T5741] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 189.264883][ T5741] usb 4-1: config 0 has no interface number 0 [ 189.264937][ T5741] usb 4-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x74, changing to 0x4 [ 189.264963][ T5741] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x4 has invalid maxpacket 252, setting to 64 [ 189.268666][ T5741] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 189.268695][ T5741] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 189.268717][ T5741] usb 4-1: Product: syz [ 189.268732][ T5741] usb 4-1: SerialNumber: syz [ 189.347557][ T5741] usb 4-1: config 0 descriptor?? [ 189.374192][ T5741] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 189.424037][ T6934] netlink: 'syz.2.389': attribute type 3 has an invalid length. [ 189.588416][ T5741] usb 4-1: USB disconnect, device number 23 [ 190.303754][ T6968] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.402'. [ 190.303790][ T6968] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 190.708692][ T823] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 190.858617][ T823] usb 1-1: Using ep0 maxpacket: 16 [ 190.860643][ T823] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 190.860668][ T823] usb 1-1: config 0 has no interface number 0 [ 190.863398][ T823] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 190.863424][ T823] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.863445][ T823] usb 1-1: Product: syz [ 190.863461][ T823] usb 1-1: Manufacturer: syz [ 190.863471][ T823] usb 1-1: SerialNumber: syz [ 190.876279][ T823] usb 1-1: config 0 descriptor?? [ 190.933810][ T823] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 191.409013][ T6976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.413441][ T6976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.478680][ T823] gspca_spca1528: reg_w err -71 [ 191.501684][ T823] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71 [ 191.522219][ T60] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 191.542254][ T60] Bluetooth: hci1: Injecting HCI hardware error event [ 191.542999][ T60] Bluetooth: hci1: hardware error 0x00 [ 191.601410][ T823] usb 1-1: USB disconnect, device number 14 [ 191.850408][ T7002] binder: 7001:7002 ioctl 4018620d 0 returned -22 [ 191.928263][ T7005] netlink: 172 bytes leftover after parsing attributes in process `syz.1.413'. [ 191.928299][ T7005] netlink: 172 bytes leftover after parsing attributes in process `syz.1.413'. [ 192.228661][ T823] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 192.383917][ T823] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.383950][ T823] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 192.386216][ T823] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 192.386236][ T823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 192.386253][ T823] usb 4-1: SerialNumber: syz [ 192.411507][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888032c0bc00: rx timeout, send abort [ 192.478391][ T823] usb 4-1: 0:2 : does not exist [ 192.630228][ T7027] openvswitch: netlink: EtherType 53b is less than min 600 [ 192.906271][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888032c09000: rx timeout, send abort [ 193.406344][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888032c09000: abort rx timeout. Force session deactivation [ 193.639398][ T823] usb 4-1: USB disconnect, device number 24 [ 193.839168][ T60] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 194.280287][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.280413][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.596632][ T39] audit: type=1326 audit(2051927241.935:3): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7107 comm="syz.2.456" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f89cfe2de59 code=0x0 [ 196.805778][ T7154] Invalid source name [ 196.805795][ T7154] UBIFS error (pid: 7154): cannot open "/dev/sg0", error -22 [ 196.848724][ T7154] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 198.262007][ T7205] FAULT_INJECTION: forcing a failure. [ 198.262007][ T7205] name failslab, interval 1, probability 0, space 0, times 0 [ 198.262048][ T7205] CPU: 0 UID: 0 PID: 7205 Comm: syz.0.496 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 198.262077][ T7205] Tainted: [L]=SOFTLOCKUP [ 198.262085][ T7205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 198.262101][ T7205] Call Trace: [ 198.262118][ T7205] [ 198.262127][ T7205] dump_stack_lvl+0xe8/0x150 [ 198.262161][ T7205] should_fail_ex+0x467/0x600 [ 198.262202][ T7205] should_failslab+0xa8/0x100 [ 198.262237][ T7205] __kmalloc_noprof+0xfb/0x790 [ 198.262268][ T7205] ? vkms_crtc_atomic_check+0x3ff/0x760 [ 198.262310][ T7205] ? vkms_crtc_atomic_check+0x3ff/0x760 [ 198.262378][ T7205] vkms_crtc_atomic_check+0x3ff/0x760 [ 198.262426][ T7205] drm_atomic_helper_check_planes+0x581/0x800 [ 198.262465][ T7205] drm_atomic_helper_check+0xa0/0x190 [ 198.262490][ T7205] ? __pfx_vkms_atomic_check+0x10/0x10 [ 198.262522][ T7205] drm_atomic_check_only+0x1639/0x2ff0 [ 198.262576][ T7205] drm_atomic_commit+0x16a/0x2b0 [ 198.262612][ T7205] ? __pfx_drm_atomic_commit+0x10/0x10 [ 198.262645][ T7205] ? drm_atomic_get_crtc_state+0x36c/0x570 [ 198.262674][ T7205] ? __pfx___drm_printfn_info+0x10/0x10 [ 198.262711][ T7205] ? drm_mode_object_get+0xcf/0x140 [ 198.262736][ T7205] ? drm_atomic_set_fb_for_plane+0x1f7/0x280 [ 198.262777][ T7205] drm_atomic_helper_update_plane+0x248/0x3b0 [ 198.262813][ T7205] drm_mode_cursor_common+0xe23/0x15e0 [ 198.262874][ T7205] ? __pfx_drm_mode_cursor_common+0x10/0x10 [ 198.262919][ T7205] ? do_raw_spin_lock+0x12b/0x2f0 [ 198.262966][ T7205] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 198.262991][ T7205] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 198.263025][ T7205] ? drm_mode_cursor_ioctl+0xbb/0x130 [ 198.263064][ T7205] drm_mode_cursor_ioctl+0xd4/0x130 [ 198.263102][ T7205] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 198.263142][ T7205] ? rt_spin_unlock+0x163/0x200 [ 198.263176][ T7205] ? drm_is_current_master+0x1a2/0x210 [ 198.263202][ T7205] drm_ioctl_kernel+0x2e2/0x3b0 [ 198.263237][ T7205] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 198.263271][ T7205] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 198.263313][ T7205] drm_ioctl+0x713/0xba0 [ 198.263362][ T7205] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 198.263394][ T7205] ? __pfx_drm_ioctl+0x10/0x10 [ 198.263438][ T7205] ? __fget_files+0x2a/0x420 [ 198.263475][ T7205] ? bpf_lsm_file_ioctl+0x9/0x20 [ 198.263508][ T7205] ? __pfx_drm_ioctl+0x10/0x10 [ 198.263537][ T7205] __se_sys_ioctl+0xff/0x170 [ 198.263562][ T7205] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.263585][ T7205] do_syscall_64+0x174/0x580 [ 198.263607][ T7205] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.263629][ T7205] ? clear_bhb_loop+0x40/0x90 [ 198.263656][ T7205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.263677][ T7205] RIP: 0033:0x7fdb3a0cde59 [ 198.263698][ T7205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.263717][ T7205] RSP: 002b:00007fdb38326028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 198.263740][ T7205] RAX: ffffffffffffffda RBX: 00007fdb3a355fa0 RCX: 00007fdb3a0cde59 [ 198.263755][ T7205] RDX: 0000200000000280 RSI: 00000000c01c64a3 RDI: 0000000000000003 [ 198.263769][ T7205] RBP: 00007fdb38326090 R08: 0000000000000000 R09: 0000000000000000 [ 198.263782][ T7205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 198.263793][ T7205] R13: 00007fdb3a356038 R14: 00007fdb3a355fa0 R15: 00007ffe3b6b35d8 [ 198.263828][ T7205] [ 199.619928][ T5701] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 199.805436][ T5701] usb 2-1: unable to get BOS descriptor or descriptor too short [ 199.806690][ T5701] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 199.806716][ T5701] usb 2-1: config 1 has no interface number 0 [ 199.806761][ T5701] usb 2-1: config 1 interface 7 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 199.806791][ T5701] usb 2-1: config 1 interface 7 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.806807][ T5701] usb 2-1: config 1 interface 7 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 199.806825][ T5701] usb 2-1: config 1 interface 7 has no altsetting 0 [ 199.810291][ T5701] usb 2-1: string descriptor 0 read error: -22 [ 199.810423][ T5701] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.40 [ 199.810441][ T5701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.942884][ T5701] usbhid 2-1:1.7: can't add hid device: -22 [ 199.943021][ T5701] usbhid 2-1:1.7: probe with driver usbhid failed with error -22 [ 200.129299][ T32] usb 2-1: USB disconnect, device number 14 [ 202.284413][ T7349] netlink: 24 bytes leftover after parsing attributes in process `syz.2.555'. [ 203.535374][ T7377] netlink: 'syz.3.565': attribute type 1 has an invalid length. [ 203.535410][ T7377] netlink: 'syz.3.565': attribute type 1 has an invalid length. [ 205.111026][ T7402] netlink: 'syz.2.575': attribute type 21 has an invalid length. [ 205.111054][ T7402] netlink: 128 bytes leftover after parsing attributes in process `syz.2.575'. [ 205.111179][ T7402] netlink: 'syz.2.575': attribute type 4 has an invalid length. [ 205.111196][ T7402] netlink: 'syz.2.575': attribute type 5 has an invalid length. [ 205.111210][ T7402] netlink: 3 bytes leftover after parsing attributes in process `syz.2.575'. [ 205.262017][ T32] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 205.434978][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 205.435013][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.435042][ T32] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 205.435071][ T32] usb 4-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 205.435088][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.491300][ T32] usb 4-1: config 0 descriptor?? [ 206.049668][ T32] hid_parser_main: 7 callbacks suppressed [ 206.049692][ T32] lenovo 0003:17EF:6067.0002: unknown main item tag 0x0 [ 206.049723][ T32] lenovo 0003:17EF:6067.0002: unknown main item tag 0x0 [ 206.049746][ T32] lenovo 0003:17EF:6067.0002: unknown main item tag 0x0 [ 206.049769][ T32] lenovo 0003:17EF:6067.0002: unknown main item tag 0x0 [ 206.049795][ T32] lenovo 0003:17EF:6067.0002: unknown main item tag 0x0 [ 206.049821][ T32] lenovo 0003:17EF:6067.0002: unknown main item tag 0x0 [ 206.049848][ T32] lenovo 0003:17EF:6067.0002: unknown main item tag 0x0 [ 206.049873][ T32] lenovo 0003:17EF:6067.0002: unknown main item tag 0x0 [ 206.049900][ T32] lenovo 0003:17EF:6067.0002: unknown main item tag 0x0 [ 206.049927][ T32] lenovo 0003:17EF:6067.0002: unknown main item tag 0x0 [ 206.188854][ T7412] netlink: 'syz.2.579': attribute type 49 has an invalid length. [ 206.348867][ T32] lenovo 0003:17EF:6067.0002: hidraw0: USB HID v1.00 Device [HID 17ef:6067] on usb-dummy_hcd.3-1/input0 [ 206.383422][ T32] usb 4-1: USB disconnect, device number 25 [ 206.402961][ T7412] bond0: (slave bond_slave_0): Releasing backup interface [ 206.641866][ T7412] bond_slave_0: entered promiscuous mode [ 206.641895][ T7412] bond_slave_0: entered allmulticast mode [ 206.947024][ T5328] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 207.103455][ T5328] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 207.103485][ T5328] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 207.103505][ T5328] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 207.103526][ T5328] usb 2-1: config 220 has no interface number 2 [ 207.103606][ T5328] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 207.103638][ T5328] usb 2-1: config 220 interface 0 has no altsetting 0 [ 207.103657][ T5328] usb 2-1: config 220 interface 76 has no altsetting 0 [ 207.103693][ T5328] usb 2-1: config 220 interface 1 has no altsetting 0 [ 207.185901][ T5328] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 207.185938][ T5328] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.185960][ T5328] usb 2-1: Product: syz [ 207.185975][ T5328] usb 2-1: Manufacturer: syz [ 207.185991][ T5328] usb 2-1: SerialNumber: syz [ 207.378592][ T7427] FAULT_INJECTION: forcing a failure. [ 207.378592][ T7427] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 207.378694][ T7427] CPU: 0 UID: 0 PID: 7427 Comm: syz.0.585 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 207.378723][ T7427] Tainted: [L]=SOFTLOCKUP [ 207.378730][ T7427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 207.378742][ T7427] Call Trace: [ 207.378750][ T7427] [ 207.378759][ T7427] dump_stack_lvl+0xe8/0x150 [ 207.378795][ T7427] should_fail_ex+0x467/0x600 [ 207.378834][ T7427] _copy_from_user+0x2d/0xb0 [ 207.378860][ T7427] drm_ioctl+0x61c/0xba0 [ 207.378899][ T7427] ? __pfx_drm_mode_mmap_dumb_ioctl+0x10/0x10 [ 207.378922][ T7427] ? __pfx_drm_ioctl+0x10/0x10 [ 207.378963][ T7427] ? __fget_files+0x2a/0x420 [ 207.378998][ T7427] ? bpf_lsm_file_ioctl+0x9/0x20 [ 207.379030][ T7427] ? __pfx_drm_ioctl+0x10/0x10 [ 207.379058][ T7427] __se_sys_ioctl+0xff/0x170 [ 207.379081][ T7427] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.379105][ T7427] do_syscall_64+0x174/0x580 [ 207.379126][ T7427] ? trace_irq_disable+0x3b/0x140 [ 207.379146][ T7427] ? clear_bhb_loop+0x40/0x90 [ 207.379171][ T7427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.379193][ T7427] RIP: 0033:0x7fdb3a0cde59 [ 207.379213][ T7427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.379231][ T7427] RSP: 002b:00007fdb38326028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 207.379253][ T7427] RAX: ffffffffffffffda RBX: 00007fdb3a355fa0 RCX: 00007fdb3a0cde59 [ 207.379268][ T7427] RDX: 0000200000000040 RSI: 00000000c01064b3 RDI: 0000000000000003 [ 207.379282][ T7427] RBP: 00007fdb38326090 R08: 0000000000000000 R09: 0000000000000000 [ 207.379294][ T7427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.379306][ T7427] R13: 00007fdb3a356038 R14: 00007fdb3a355fa0 R15: 00007ffe3b6b35d8 [ 207.379338][ T7427] [ 207.540460][ T823] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 207.615036][ T5328] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 207.615074][ T5328] uvcvideo 2-1:220.0: No valid video chain found. [ 207.615137][ T5328] usb 2-1: selecting invalid altsetting 0 [ 207.677674][ T5328] usb 2-1: selecting invalid altsetting 0 [ 207.677715][ T5328] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 207.696735][ T5328] usb 2-1: USB disconnect, device number 15 [ 207.710895][ T823] usb 4-1: Using ep0 maxpacket: 32 [ 207.718980][ T823] usb 4-1: unable to get BOS descriptor or descriptor too short [ 207.738027][ T823] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 207.738055][ T823] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 207.738077][ T823] usb 4-1: config 14 has no interface number 0 [ 207.738095][ T823] usb 4-1: config 14 has no interface number 1 [ 207.738175][ T823] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 207.738201][ T823] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 207.738228][ T823] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 207.738256][ T823] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 207.738284][ T823] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 207.738311][ T823] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 207.738338][ T823] usb 4-1: config 14 interface 57 has no altsetting 0 [ 207.738357][ T823] usb 4-1: config 14 interface 228 has no altsetting 0 [ 207.826009][ T823] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 207.826103][ T823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.826164][ T823] usb 4-1: Product: syz [ 207.826205][ T823] usb 4-1: Manufacturer: syz [ 207.826254][ T823] usb 4-1: SerialNumber: syz [ 208.446566][ T823] legousbtower 4-1:14.57: interrupt endpoints not found [ 208.894890][ T823] legousbtower 4-1:14.228: LEGO USB Tower firmware version is 81.91 build 29789 [ 208.951645][ T823] legousbtower 4-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 208.957852][ T7454] tipc: Started in network mode [ 208.957885][ T7454] tipc: Node identity ac14140f, cluster identity 4711 [ 209.052418][ T7454] tipc: New replicast peer: 255.255.255.255 [ 209.153445][ T7454] tipc: Enabled bearer , priority 10 [ 209.446264][ T7477] FAULT_INJECTION: forcing a failure. [ 209.446264][ T7477] name failslab, interval 1, probability 0, space 0, times 0 [ 209.446304][ T7477] CPU: 1 UID: 0 PID: 7477 Comm: syz.0.599 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 209.446335][ T7477] Tainted: [L]=SOFTLOCKUP [ 209.446342][ T7477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 209.446355][ T7477] Call Trace: [ 209.446363][ T7477] [ 209.446372][ T7477] dump_stack_lvl+0xe8/0x150 [ 209.446407][ T7477] should_fail_ex+0x467/0x600 [ 209.446448][ T7477] should_failslab+0xa8/0x100 [ 209.446484][ T7477] __kvmalloc_node_noprof+0x176/0x880 [ 209.446520][ T7477] ? keyctl_update_key+0x66/0x140 [ 209.446548][ T7477] ? keyctl_update_key+0x66/0x140 [ 209.446586][ T7477] keyctl_update_key+0x66/0x140 [ 209.446618][ T7477] __se_sys_keyctl+0x617/0x9d0 [ 209.446654][ T7477] ? __pfx___se_sys_keyctl+0x10/0x10 [ 209.446687][ T7477] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 209.446711][ T7477] ? rt_mutex_slowunlock+0x219/0x460 [ 209.446740][ T7477] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 209.446763][ T7477] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 209.446804][ T7477] ? fput+0xa0/0xd0 [ 209.446834][ T7477] ? ksys_write+0x248/0x270 [ 209.446859][ T7477] ? __pfx_ksys_write+0x10/0x10 [ 209.446888][ T7477] ? __x64_sys_keyctl+0x20/0xc0 [ 209.446921][ T7477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.446946][ T7477] do_syscall_64+0x174/0x580 [ 209.446968][ T7477] ? trace_irq_disable+0x3b/0x140 [ 209.446989][ T7477] ? clear_bhb_loop+0x40/0x90 [ 209.447017][ T7477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.447044][ T7477] RIP: 0033:0x7fdb3a0cde59 [ 209.447073][ T7477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.447091][ T7477] RSP: 002b:00007fdb38326028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 209.447114][ T7477] RAX: ffffffffffffffda RBX: 00007fdb3a355fa0 RCX: 00007fdb3a0cde59 [ 209.447130][ T7477] RDX: 00002000000000c0 RSI: 0000000000000000 RDI: 0000000000000002 [ 209.447143][ T7477] RBP: 00007fdb38326090 R08: 0000000000000000 R09: 0000000000000000 [ 209.447156][ T7477] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000001 [ 209.447169][ T7477] R13: 00007fdb3a356038 R14: 00007fdb3a355fa0 R15: 00007ffe3b6b35d8 [ 209.447202][ T7477] [ 210.156054][ C1] usb 4-1: tower_interrupt_in_callback: usb_submit_urb failed (-1) [ 210.200269][ T5701] usb 4-1: USB disconnect, device number 26 [ 210.249824][ T5701] legousbtower 4-1:14.228: LEGO USB Tower #-160 now disconnected [ 210.327232][ T823] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 210.503394][ T823] usb 2-1: Using ep0 maxpacket: 8 [ 210.521056][ T823] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 210.549391][ T823] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 210.549423][ T823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.549445][ T823] usb 2-1: Product: syz [ 210.549461][ T823] usb 2-1: Manufacturer: syz [ 210.549476][ T823] usb 2-1: SerialNumber: syz [ 210.638765][ T823] usb 2-1: config 0 descriptor?? [ 210.694073][ T823] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 210.694147][ T823] usb 2-1: setting power ON [ 210.694167][ T823] dvb-usb: bulk message failed: -22 (2/0) [ 210.879051][ T7490] dvb-usb: bulk message failed: -22 (4/0) [ 210.879073][ T7490] cxusb: i2c read failed [ 210.944098][ T823] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 210.948913][ T823] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 210.949068][ T823] usb 2-1: media controller created [ 211.213180][ T823] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 211.405019][ T823] usb 2-1: selecting invalid altsetting 6 [ 211.405044][ T823] usb 2-1: digital interface selection failed (-22) [ 211.405060][ T823] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 211.433240][ T823] usb 2-1: setting power OFF [ 211.434094][ T823] dvb-usb: bulk message failed: -22 (2/0) [ 211.434133][ T823] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 211.459568][ T823] (NULL device *): no alternate interface [ 211.707909][ T7524] netlink: 'syz.1.615': attribute type 29 has an invalid length. [ 211.707933][ T7524] netlink: 'syz.1.615': attribute type 3 has an invalid length. [ 211.707966][ T7524] netlink: 76 bytes leftover after parsing attributes in process `syz.1.615'. [ 211.713671][ T823] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 211.745131][ T823] usb 2-1: USB disconnect, device number 16 [ 212.130206][ T5687] tipc: Node number set to 2886997007 [ 212.407023][ T823] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 212.573520][ T823] usb 2-1: Using ep0 maxpacket: 8 [ 212.575882][ T823] usb 2-1: config 0 has an invalid interface number: 236 but max is 2 [ 212.575917][ T823] usb 2-1: config 0 has an invalid interface number: 5 but max is 2 [ 212.575936][ T823] usb 2-1: config 0 has an invalid interface number: 223 but max is 2 [ 212.575955][ T823] usb 2-1: config 0 has no interface number 0 [ 212.575973][ T823] usb 2-1: config 0 has no interface number 1 [ 212.575988][ T823] usb 2-1: config 0 has no interface number 2 [ 212.576054][ T823] usb 2-1: config 0 interface 5 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 212.576080][ T823] usb 2-1: config 0 interface 236 has no altsetting 0 [ 212.576097][ T823] usb 2-1: config 0 interface 5 has no altsetting 0 [ 212.576114][ T823] usb 2-1: config 0 interface 223 has no altsetting 0 [ 212.584826][ T823] usb 2-1: New USB device found, idVendor=1430, idProduct=a006, bcdDevice=47.8b [ 212.584857][ T823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.584878][ T823] usb 2-1: Product: syz [ 212.584903][ T823] usb 2-1: Manufacturer: syz [ 212.584918][ T823] usb 2-1: SerialNumber: syz [ 212.763481][ T823] usb 2-1: config 0 descriptor?? [ 213.265819][ T823] usb 2-1: USB disconnect, device number 17 [ 213.357606][ T7557] netlink: 32 bytes leftover after parsing attributes in process `syz.2.627'. [ 213.575604][ T5741] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 213.777544][ T5741] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 213.777576][ T5741] usb 1-1: config 0 has no interface number 0 [ 213.777625][ T5741] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 213.777652][ T5741] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 213.823373][ T5741] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 213.823396][ T5741] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.823411][ T5741] usb 1-1: Product: syz [ 213.823421][ T5741] usb 1-1: Manufacturer: syz [ 213.823432][ T5741] usb 1-1: SerialNumber: syz [ 213.862689][ T5741] usb 1-1: config 0 descriptor?? [ 213.863579][ T7556] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 213.913534][ T5741] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 214.101166][ T5741] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 214.180170][ T7565] netlink: 666 bytes leftover after parsing attributes in process `syz.2.631'. [ 216.492530][ T5328] usb 1-1: USB disconnect, device number 15 [ 216.619104][ T5328] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 216.652311][ T5328] cyberjack 1-1:0.69: device disconnected [ 216.697167][ T5701] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 216.877624][ T5701] usb 4-1: Using ep0 maxpacket: 16 [ 216.880225][ T5701] usb 4-1: config 1 has an invalid descriptor of length 174, skipping remainder of the config [ 216.880252][ T5701] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 216.884490][ T5701] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 216.884530][ T5701] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.884552][ T5701] usb 4-1: Product: syz [ 216.884568][ T5701] usb 4-1: Manufacturer: syz [ 216.884583][ T5701] usb 4-1: SerialNumber: syz [ 216.961787][ T5741] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 217.006751][ T5701] usb 4-1: 0:2 : does not exist [ 217.006841][ T5701] usb 4-1: unit 9 not found! [ 217.156822][ T5741] usb 2-1: Using ep0 maxpacket: 16 [ 217.164019][ T5741] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.164056][ T5741] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.164080][ T5741] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 217.164125][ T5741] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 217.164151][ T5741] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.235421][ T5701] usb 4-1: USB disconnect, device number 27 [ 217.318149][ T5741] usb 2-1: config 0 descriptor?? [ 217.801090][ T5741] hid_parser_main: 28 callbacks suppressed [ 217.801116][ T5741] appleir 0003:05AC:8241.0003: unknown main item tag 0x0 [ 217.801147][ T5741] appleir 0003:05AC:8241.0003: unknown main item tag 0x0 [ 217.801200][ T5741] appleir 0003:05AC:8241.0003: unknown main item tag 0x0 [ 217.801228][ T5741] appleir 0003:05AC:8241.0003: unknown main item tag 0x0 [ 217.801255][ T5741] appleir 0003:05AC:8241.0003: unknown main item tag 0x0 [ 218.126063][ T5741] appleir 0003:05AC:8241.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.1-1/input0 [ 220.545124][ T9] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 220.717091][ T9] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 220.717122][ T9] usb 4-1: config 0 has an invalid descriptor of length 217, skipping remainder of the config [ 220.717142][ T9] usb 4-1: config 0 has no interface number 0 [ 220.717173][ T9] usb 4-1: config 0 interface 126 has no altsetting 0 [ 220.733541][ T9] usb 4-1: New USB device found, idVendor=04dd, idProduct=8007, bcdDevice=df.8e [ 220.733575][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.733596][ T9] usb 4-1: Product: syz [ 220.733611][ T9] usb 4-1: Manufacturer: syz [ 220.733627][ T9] usb 4-1: SerialNumber: syz [ 220.815923][ T9] usb 4-1: config 0 descriptor?? [ 220.852662][ T9] usb 4-1: No union descriptors [ 220.891516][ T5328] usb 2-1: USB disconnect, device number 18 [ 221.161334][ T5741] usb 4-1: USB disconnect, device number 28 [ 221.264828][ T7714] fuse: Bad value for 'fd' [ 221.365678][ T5328] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 221.559951][ T5328] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 221.559988][ T5328] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 221.565920][ T5328] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 221.565949][ T5328] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.565971][ T5328] usb 2-1: Product: syz [ 221.565986][ T5328] usb 2-1: Manufacturer: syz [ 221.566001][ T5328] usb 2-1: SerialNumber: syz [ 221.647949][ T5328] usb 2-1: config 0 descriptor?? [ 221.649926][ T7703] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 221.650052][ T7703] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 221.894259][ T7701] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 221.894392][ T7701] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 222.186674][ T5328] Error reading MAC address [ 222.202526][ T7742] fuse: Unknown parameter '000000000000000000000030x00000000000000040000000000000000000400000000000000000000' [ 222.235019][ T5328] usb 2-1: USB disconnect, device number 19 [ 222.406151][ T7748] netlink: 64 bytes leftover after parsing attributes in process `syz.2.705'. [ 223.171470][ T5328] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 223.343381][ T5328] usb 4-1: no configurations [ 223.343404][ T5328] usb 4-1: can't read configurations, error -22 [ 223.505967][ T5328] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 223.675237][ T5328] usb 4-1: no configurations [ 223.675260][ T5328] usb 4-1: can't read configurations, error -22 [ 223.675628][ T5328] usb usb4-port1: attempt power cycle [ 223.873431][ T5607] Bluetooth: hci3: command 0x0406 tx timeout [ 223.873472][ T5607] Bluetooth: hci2: command 0x0406 tx timeout [ 223.873496][ T5607] Bluetooth: hci0: command 0x0406 tx timeout [ 223.914817][ T7818] ./file0: Can't lookup blockdev [ 224.071791][ T5328] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 224.106242][ T5328] usb 4-1: no configurations [ 224.106276][ T5328] usb 4-1: can't read configurations, error -22 [ 224.252435][ T5328] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 224.282392][ T5328] usb 4-1: no configurations [ 224.282414][ T5328] usb 4-1: can't read configurations, error -22 [ 224.319991][ T5328] usb usb4-port1: unable to enumerate USB device [ 224.439209][ T7832] netlink: 148 bytes leftover after parsing attributes in process `syz.1.737'. [ 224.439397][ T7832] netlink: 56 bytes leftover after parsing attributes in process `syz.1.737'. [ 224.439418][ T7832] netlink: 'syz.1.737': attribute type 1 has an invalid length. [ 224.700191][ T5687] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 224.872686][ T5687] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.872850][ T5687] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 224.875412][ T5687] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 224.875443][ T5687] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.875464][ T5687] usb 2-1: Product: syz [ 224.875480][ T5687] usb 2-1: Manufacturer: syz [ 224.875495][ T5687] usb 2-1: SerialNumber: syz [ 225.197076][ T5687] cdc_ncm 2-1:1.0: bind() failure [ 225.240521][ T5687] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 225.240571][ T5687] cdc_ncm 2-1:1.1: bind() failure [ 225.293282][ T5687] usb 2-1: USB disconnect, device number 20 [ 226.623192][ T5687] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 226.697857][ T5741] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 226.785420][ T5687] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 226.785460][ T5687] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 226.785506][ T5687] usb 4-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 226.785531][ T5687] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.798700][ T5687] usb 4-1: config 0 descriptor?? [ 226.810288][ T7910] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 226.869640][ T5687] smsusb:smsusb_probe: board id=8, interface number 0 [ 226.870200][ T5687] smsusb:smsusb_probe: Device initialized with return code -19 [ 226.879762][ T5741] usb 2-1: Using ep0 maxpacket: 16 [ 226.903157][ T5741] usb 2-1: config 8 has an invalid interface number: 238 but max is 0 [ 226.903189][ T5741] usb 2-1: config 8 has no interface number 0 [ 226.903235][ T5741] usb 2-1: config 8 interface 238 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 226.903259][ T5741] usb 2-1: config 8 interface 238 altsetting 3 has an endpoint descriptor with address 0xC3, changing to 0x83 [ 226.903284][ T5741] usb 2-1: config 8 interface 238 altsetting 3 endpoint 0x83 has an invalid bInterval 167, changing to 7 [ 226.903311][ T5741] usb 2-1: config 8 interface 238 altsetting 3 endpoint 0x83 has invalid maxpacket 9184, setting to 1024 [ 226.903339][ T5741] usb 2-1: config 8 interface 238 altsetting 3 has a duplicate endpoint with address 0x3, skipping [ 226.903363][ T5741] usb 2-1: config 8 interface 238 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 226.903384][ T5741] usb 2-1: config 8 interface 238 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 226.903406][ T5741] usb 2-1: config 8 interface 238 altsetting 3 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 226.903432][ T5741] usb 2-1: config 8 interface 238 altsetting 3 has an endpoint descriptor with address 0x1A, changing to 0xA [ 226.903459][ T5741] usb 2-1: config 8 interface 238 altsetting 3 endpoint 0xA has an invalid bInterval 20, changing to 7 [ 226.903484][ T5741] usb 2-1: config 8 interface 238 altsetting 3 endpoint 0xA has invalid maxpacket 10111, setting to 1024 [ 226.903512][ T5741] usb 2-1: config 8 interface 238 altsetting 3 has 9 endpoint descriptors, different from the interface descriptor's value: 7 [ 226.903540][ T5741] usb 2-1: config 8 interface 238 has no altsetting 0 [ 226.909303][ T5741] usb 2-1: New USB device found, idVendor=6615, idProduct=0001, bcdDevice=88.ab [ 226.909335][ T5741] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.909357][ T5741] usb 2-1: Product: 富듳鶒禄윿ጯ竒ઋଉ뛼䣋Ꝉ褞ō푖Ａ螫讨ࠍ駅竟㝹֡㫃ᴟ䞝覃ꚲ㫦躘噻收꧓㍠嫚謹쩏珷睚硩㣳 [ 226.909380][ T5741] usb 2-1: Manufacturer: Ễ偅°⏯盝贇葒芎僻큱ꭂ玄Іﮠ挧ꆃ嬤ୣȶ霛隭喣ܒᝠÍ꣤䴖〢잝䔘Ù꽣꺰䒑䂶花別﷓囀뮻㓜流ᗓ孅訸癨즲젉似ʵ昙該僊婇ꄷ淜옣䉭竭ሼ떲Ř菉鯿亜亩딚乹 [ 226.909407][ T5741] usb 2-1: SerialNumber: syz [ 227.171373][ T7910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.176434][ T7910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.205139][ T7910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.210442][ T7910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.231265][ T7910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.231855][ T7910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.251669][ T7910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.252368][ T7910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.270332][ T7910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.270964][ T7910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.370659][ T5687] usb 4-1: USB disconnect, device number 33 [ 227.473020][ T5741] usb 2-1: USB disconnect, device number 21 [ 228.005351][ T7965] openvswitch: netlink: IP tunnel dst address not specified [ 229.190145][ T8023] netlink: 104 bytes leftover after parsing attributes in process `syz.2.818'. [ 229.368054][ T60] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 229.368076][ T60] CPU: 1 UID: 0 PID: 60 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 229.368098][ T60] Tainted: [L]=SOFTLOCKUP [ 229.368104][ T60] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 229.368114][ T60] Workqueue: hci2 hci_rx_work [ 229.368144][ T60] Call Trace: [ 229.368150][ T60] [ 229.368157][ T60] dump_stack_lvl+0xe8/0x150 [ 229.368181][ T60] sysfs_create_dir_ns+0x271/0x2a0 [ 229.368209][ T60] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 229.368237][ T60] ? rt_spin_unlock+0x163/0x200 [ 229.368262][ T60] kobject_add_internal+0x62c/0xce0 [ 229.368291][ T60] kobject_add+0x163/0x240 [ 229.368309][ T60] ? rt_spin_unlock+0x157/0x200 [ 229.368334][ T60] ? __pfx_kobject_add+0x10/0x10 [ 229.368358][ T60] ? get_device_parent+0x370/0x3a0 [ 229.368383][ T60] device_add+0x3fa/0xb80 [ 229.368405][ T60] hci_conn_add_sysfs+0xd5/0x210 [ 229.368431][ T60] le_conn_complete_evt+0xfef/0x1580 [ 229.368459][ T60] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 229.368478][ T60] ? lockdep_hardirqs_on+0x7a/0x110 [ 229.368494][ T60] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 229.368510][ T60] ? rt_mutex_slowunlock+0x219/0x460 [ 229.368532][ T60] ? skb_pull_data+0xf0/0x200 [ 229.368553][ T60] hci_le_conn_complete_evt+0x187/0x470 [ 229.368577][ T60] hci_event_packet+0x67a/0xf10 [ 229.368602][ T60] ? reacquire_held_locks+0x117/0x1a0 [ 229.368651][ T60] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 229.368679][ T60] ? __pfx_hci_event_packet+0x10/0x10 [ 229.368716][ T60] ? rt_spin_unlock+0x157/0x200 [ 229.368758][ T60] ? hci_send_to_monitor+0xe2/0x590 [ 229.368804][ T60] hci_rx_work+0x3ee/0x1020 [ 229.368837][ T60] ? process_one_work+0x7fd/0x1480 [ 229.368855][ T60] process_one_work+0xaaf/0x1480 [ 229.368888][ T60] ? __pfx_process_one_work+0x10/0x10 [ 229.368903][ T60] ? do_raw_spin_lock+0x12b/0x2f0 [ 229.368931][ T60] ? assign_work+0x3cf/0x5d0 [ 229.368952][ T60] worker_thread+0xb05/0x10d0 [ 229.368987][ T60] kthread+0x388/0x470 [ 229.369010][ T60] ? __pfx_worker_thread+0x10/0x10 [ 229.369026][ T60] ? __pfx_kthread+0x10/0x10 [ 229.369071][ T60] ret_from_fork+0x514/0xb70 [ 229.369106][ T60] ? __pfx_ret_from_fork+0x10/0x10 [ 229.369138][ T60] ? __switch_to+0xc89/0x1420 [ 229.369173][ T60] ? __pfx_kthread+0x10/0x10 [ 229.369198][ T60] ret_from_fork_asm+0x1a/0x30 [ 229.369233][ T60] [ 229.371053][ T60] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 229.371100][ T60] Bluetooth: hci2: failed to register connection device [ 229.853534][ T8045] netlink: 56 bytes leftover after parsing attributes in process `syz.0.827'. [ 229.877122][ T8043] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 229.877145][ T8043] overlayfs: missing 'lowerdir' [ 230.498168][ T8048] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.828'. [ 230.498189][ T8048] openvswitch: netlink: Message has 512 unknown bytes. [ 230.613546][ T8052] openvswitch: netlink: Message has 12 unknown bytes. [ 230.613586][ T8052] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.249962][ T823] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 231.410217][ T823] usb 4-1: Using ep0 maxpacket: 32 [ 231.415853][ T823] usb 4-1: no configurations [ 231.415872][ T823] usb 4-1: can't read configurations, error -22 [ 231.549206][ T823] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 231.709473][ T823] usb 4-1: Using ep0 maxpacket: 32 [ 231.710615][ T823] usb 4-1: no configurations [ 231.710632][ T823] usb 4-1: can't read configurations, error -22 [ 231.711372][ T823] usb usb4-port1: attempt power cycle [ 232.094211][ T823] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 232.116437][ T823] usb 4-1: Using ep0 maxpacket: 32 [ 232.117131][ T823] usb 4-1: no configurations [ 232.117146][ T823] usb 4-1: can't read configurations, error -22 [ 232.256020][ T823] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 232.278764][ T823] usb 4-1: Using ep0 maxpacket: 32 [ 232.280895][ T823] usb 4-1: no configurations [ 232.280911][ T823] usb 4-1: can't read configurations, error -22 [ 232.281332][ T823] usb usb4-port1: unable to enumerate USB device [ 232.969896][ T8164] netlink: 240 bytes leftover after parsing attributes in process `syz.2.881'. [ 233.049101][ T8162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.542571][ T8191] vxcan0: tx drop: invalid da for name 0x0000008000000000 [ 234.292642][ T8218] netlink: 16 bytes leftover after parsing attributes in process `syz.1.905'. [ 234.398953][ T8232] netlink: 32 bytes leftover after parsing attributes in process `syz.1.912'. [ 234.536405][ T8238] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 234.536405][ T8238] Please contact the netfilter-devel mailing list or update your nftables rules. [ 234.950027][ T8257] fuse: fd is not a fuse device [ 235.022026][ T5741] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 235.184911][ T5741] usb 2-1: unable to get BOS descriptor or descriptor too short [ 235.185000][ T5741] usb 2-1: too many configurations: 255, using maximum allowed: 8 [ 235.186180][ T5741] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 255 [ 235.186219][ T5741] usb 2-1: can't read configurations, error -22 [ 235.323147][ T5741] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 235.359058][ T8276] netlink: 12 bytes leftover after parsing attributes in process `syz.0.932'. [ 235.485831][ T5741] usb 2-1: unable to get BOS descriptor or descriptor too short [ 235.485913][ T5741] usb 2-1: too many configurations: 255, using maximum allowed: 8 [ 235.487082][ T5741] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 255 [ 235.487119][ T5741] usb 2-1: can't read configurations, error -22 [ 235.487517][ T5741] usb usb2-port1: attempt power cycle [ 235.771328][ T8298] raw_sendmsg: syz.2.941 forgot to set AF_INET. Fix it! [ 235.855648][ T5741] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 235.880700][ T5741] usb 2-1: unable to get BOS descriptor or descriptor too short [ 235.880795][ T5741] usb 2-1: too many configurations: 255, using maximum allowed: 8 [ 235.881955][ T5741] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 255 [ 235.881992][ T5741] usb 2-1: can't read configurations, error -22 [ 236.015916][ T5741] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 236.042005][ T5741] usb 2-1: unable to get BOS descriptor or descriptor too short [ 236.042084][ T5741] usb 2-1: too many configurations: 255, using maximum allowed: 8 [ 236.043544][ T5741] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 255 [ 236.043582][ T5741] usb 2-1: can't read configurations, error -22 [ 236.043945][ T5741] usb usb2-port1: unable to enumerate USB device [ 236.835363][ T8337] netlink: 32 bytes leftover after parsing attributes in process `syz.2.958'. [ 238.493089][ T60] Bluetooth: hci3: unexpected event for opcode 0x2062 [ 238.612519][ T5701] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 238.785651][ T5701] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.788167][ T5701] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 238.788194][ T5701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.788221][ T5701] usb 2-1: Product: syz [ 238.788232][ T5701] usb 2-1: Manufacturer: syz [ 238.788243][ T5701] usb 2-1: SerialNumber: syz [ 238.835255][ T5701] usb 2-1: config 0 descriptor?? [ 238.870236][ T5701] pegasus_notetaker 2-1:0.0: Invalid number of endpoints [ 238.870274][ T5701] pegasus_notetaker 2-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 239.366029][ T9] usb 2-1: USB disconnect, device number 26 [ 239.585812][ T8417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.986'. [ 240.202092][ T60] Bluetooth: hci2: unexpected event for opcode 0x0c1c [ 240.356603][ T5687] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 240.528652][ T5687] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 240.528689][ T5687] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 240.528720][ T5687] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 240.532881][ T5687] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 240.532913][ T5687] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.532935][ T5687] usb 4-1: Product: syz [ 240.532952][ T5687] usb 4-1: Manufacturer: syz [ 240.532968][ T5687] usb 4-1: SerialNumber: syz [ 240.606876][ T5687] usb 4-1: config 0 descriptor?? [ 240.636392][ T5687] iguanair 4-1:0.0: probe with driver iguanair failed with error -12 [ 240.738665][ T5257] veth0_vlan: left promiscuous mode [ 240.848531][ T32] usb 4-1: USB disconnect, device number 38 [ 240.935357][ T5687] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 240.958304][ T9] veth0_vlan: entered promiscuous mode [ 241.070253][ T5687] usb 2-1: device descriptor read/64, error -71 [ 241.331451][ T5687] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 241.467254][ T5687] usb 2-1: device descriptor read/64, error -71 [ 241.583757][ T5687] usb usb2-port1: attempt power cycle [ 241.957081][ T5687] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 241.983978][ T5687] usb 2-1: device descriptor read/8, error -71 [ 242.235077][ T5687] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 242.257158][ T5687] usb 2-1: device descriptor read/8, error -71 [ 242.377743][ T5687] usb usb2-port1: unable to enumerate USB device [ 245.727352][ T8650] kernel profiling enabled (shift: 5) [ 245.894245][ T8661] dvmrp0: entered allmulticast mode [ 247.061725][ T8721] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1096'. [ 247.150688][ T9] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 247.321400][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 247.325992][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 247.326024][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.326044][ T9] usb 4-1: Product: syz [ 247.326064][ T9] usb 4-1: Manufacturer: syz [ 247.326075][ T9] usb 4-1: SerialNumber: syz [ 247.330210][ T9] usb 4-1: config 0 descriptor?? [ 247.548200][ T9] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 247.962161][ T9] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 247.996371][ T9] usb 4-1: USB disconnect, device number 39 [ 248.118387][ T8741] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1103'. [ 248.499143][ T8757] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1110'. [ 248.638862][ T261] af_packet: tpacket_rcv: packet too big, clamped from 24 to 4294967272. macoff=96 [ 248.995731][ T9] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 249.278727][ T9] usb 4-1: device descriptor read/64, error -71 [ 249.534347][ T9] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 249.684042][ T9] usb 4-1: device descriptor read/64, error -71 [ 249.774296][ T8796] Invalid ELF header magic: != ELF [ 249.775441][ T8796] Invalid ELF header magic: != ELF [ 249.802976][ T9] usb usb4-port1: attempt power cycle [ 250.174631][ T9] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 250.196502][ T9] usb 4-1: device descriptor read/8, error -71 [ 250.484447][ T9] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 250.519665][ T9] usb 4-1: device descriptor read/8, error -71 [ 250.653702][ T8837] openvswitch: netlink: Actions may not be safe on all matching packets [ 250.670309][ T9] usb usb4-port1: unable to enumerate USB device [ 251.376708][ T4911] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 251.421919][ T4911] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 251.432982][ T4911] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 251.455345][ T4911] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 251.456155][ T4911] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 252.698009][ T6243] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.184978][ T6243] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.681237][ T60] Bluetooth: hci4: command tx timeout [ 253.885012][ T6243] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.403901][ T6243] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.576729][ T8851] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.579453][ T8851] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.580601][ T8851] bridge_slave_0: entered allmulticast mode [ 254.600397][ T8851] bridge_slave_0: entered promiscuous mode [ 254.668485][ T8851] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.675951][ T8851] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.680914][ T8851] bridge_slave_1: entered allmulticast mode [ 254.713029][ T8923] ALSA: mixer_oss: invalid index 20000 [ 254.714992][ T8851] bridge_slave_1: entered promiscuous mode [ 255.067240][ T8851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.085739][ T8851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.475618][ T8851] team0: Port device team_slave_0 added [ 255.502840][ T8851] team0: Port device team_slave_1 added [ 255.902113][ T60] Bluetooth: hci4: command tx timeout [ 256.218396][ T8851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.218416][ T8851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.218446][ T8851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.272645][ T8851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.272664][ T8851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.272697][ T8851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.458566][ T199] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 256.623437][ T199] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 256.623474][ T199] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 256.623503][ T199] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 256.667572][ T199] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 256.667606][ T199] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.667629][ T199] usb 2-1: Product: syz [ 256.667645][ T199] usb 2-1: Manufacturer: syz [ 256.667661][ T199] usb 2-1: SerialNumber: syz [ 256.711518][ T199] usb 2-1: config 0 descriptor?? [ 256.713392][ T8952] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 256.713522][ T8952] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 256.750816][ T199] usb 2-1: ucan: probing device on interface #0 [ 256.828910][ T8959] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1171'. [ 256.956536][ T199] usb 2-1: ucan: could not read protocol version, ret=-71 [ 256.956562][ T199] usb 2-1: ucan: probe failed; try to update the device firmware [ 257.018917][ T199] usb 2-1: USB disconnect, device number 31 [ 257.145427][ T6243] bridge_slave_1: left allmulticast mode [ 257.171925][ T6243] bridge_slave_1: left promiscuous mode [ 257.205723][ T6243] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.354776][ T8972] netlink: 'syz.2.1173': attribute type 10 has an invalid length. [ 257.451825][ T6243] bridge_slave_0: left allmulticast mode [ 257.451863][ T6243] bridge_slave_0: left promiscuous mode [ 257.452138][ T6243] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.125047][ T60] Bluetooth: hci4: command tx timeout [ 258.948334][ T6243] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.012479][ T6243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.063613][ T6243] bond0 (unregistering): Released all slaves [ 259.170078][ T5257] 8021q: adding VLAN 0 to HW filter on device eth1 [ 259.268117][ T8851] hsr_slave_0: entered promiscuous mode [ 259.275248][ T8851] hsr_slave_1: entered promiscuous mode [ 259.281286][ T8851] debugfs: 'hsr0' already exists in 'hsr' [ 259.281314][ T8851] Cannot create hsr debugfs directory [ 259.956948][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 259.957068][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.354772][ T60] Bluetooth: hci4: command tx timeout [ 260.871812][ T9019] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 260.871834][ T9019] overlayfs: missing 'lowerdir' [ 261.494877][ T5257] 8021q: adding VLAN 0 to HW filter on device eth2 [ 263.597499][ T6243] hsr_slave_0: left promiscuous mode [ 263.638722][ T6243] hsr_slave_1: left promiscuous mode [ 263.640116][ T6243] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.647890][ T6243] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.686110][ T6243] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.686141][ T6243] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.814064][ T6243] veth1_macvtap: left promiscuous mode [ 263.814326][ T6243] veth0_macvtap: left promiscuous mode [ 263.816852][ T6243] veth1_vlan: left promiscuous mode [ 263.817260][ T6243] veth0_vlan: left promiscuous mode [ 265.552014][ T6243] team0 (unregistering): Port device team_slave_1 removed [ 265.617410][ T6243] team0 (unregistering): Port device team_slave_0 removed [ 265.941444][ T5257] 8021q: adding VLAN 0 to HW filter on device eth3 [ 266.755659][ T9120] tmpfs: Bad value for 'nr_inodes' [ 266.755659][ T9121] tmpfs: Unsupported parameter 'huge' [ 267.004737][ T32] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 267.239925][ T32] usb 2-1: Using ep0 maxpacket: 32 [ 267.244866][ T32] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 267.244898][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.244919][ T32] usb 2-1: Product: syz [ 267.244935][ T32] usb 2-1: Manufacturer: syz [ 267.244950][ T32] usb 2-1: SerialNumber: syz [ 267.259269][ T32] usb 2-1: config 0 descriptor?? [ 267.308528][ T32] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 267.309331][ T32] dvb-usb: bulk message failed: -22 (4/0) [ 267.309352][ T32] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 267.309480][ T32] dvb-usb: bulk message failed: -22 (5/0) [ 267.309495][ T32] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 267.511419][ T32] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 267.524350][ T32] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 267.524531][ T32] usb 2-1: media controller created [ 267.570762][ T9116] dvb-usb: bulk message failed: -22 (7/0) [ 267.570785][ T9116] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 267.570847][ T9116] ttusb2: i2c transfer failed. [ 267.683488][ T32] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 267.770241][ T32] usb 2-1: selecting invalid altsetting 3 [ 267.770257][ T32] ttusb2: set interface to alts=3 failed [ 267.847538][ T32] DVB: Unable to find symbol tda10086_attach() [ 267.847556][ T32] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 267.865342][ T32] dvb-usb: bulk message failed: -22 (4/0) [ 267.865367][ T32] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 267.865504][ T32] dvb-usb: bulk message failed: -22 (5/0) [ 267.865519][ T32] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 267.865590][ T32] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 268.479368][ T9155] fuse: fd is not a fuse device [ 269.408054][ T8851] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 269.485887][ T8851] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 269.489931][ T8851] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 269.544245][ T8851] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 269.585627][ T8851] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 269.793460][ T8851] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 269.802956][ T8851] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 269.877589][ T199] usb 2-1: USB disconnect, device number 32 [ 269.983029][ T8851] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 270.023752][ T199] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 270.862313][ T9212] netlink: 'syz.2.1225': attribute type 10 has an invalid length. [ 270.954490][ T8851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.192252][ T8851] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.287822][ T6448] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.288090][ T6448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.366956][ T6455] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.369849][ T6455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.426226][ T9222] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1227'. [ 272.097941][ T9239] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 272.507924][ T32] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 272.554940][ T8851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.673010][ T32] usb 4-1: unable to get BOS descriptor or descriptor too short [ 272.674377][ T32] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 272.674395][ T32] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 272.683733][ T32] usb 4-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 272.683818][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.683874][ T32] usb 4-1: Product: syz [ 272.683917][ T32] usb 4-1: Manufacturer: syz [ 272.683961][ T32] usb 4-1: SerialNumber: syz [ 272.972415][ T8851] veth0_vlan: entered promiscuous mode [ 273.285361][ T8851] veth1_vlan: entered promiscuous mode [ 273.408071][ T9244] could not allocate digest TFM handle cryptd(sha1-asm) [ 273.785908][ T8851] veth0_macvtap: entered promiscuous mode [ 273.838568][ T32] usb 4-1: selecting invalid altsetting 1 [ 273.838593][ T32] snd-usb-us122l 4-1:1.1: usb_set_interface error [ 273.839391][ T32] snd-usb-us122l 4-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 273.880448][ T32] usb 4-1: USB disconnect, device number 44 [ 273.893601][ T8851] veth1_macvtap: entered promiscuous mode [ 274.139442][ T8851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.250334][ T9274] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1238'. [ 274.274698][ T9274] 9p: Bad value for 'aname' [ 274.295501][ T8851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.423387][ T6241] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.428323][ T6241] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.428370][ T6241] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.428404][ T6241] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.437075][ T9276] netlink: 'syz.3.1239': attribute type 64 has an invalid length. [ 275.385031][ T9285] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1243'. [ 275.619580][ T6249] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.619601][ T6249] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.660240][ T5701] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 275.741485][ T6238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.741505][ T6238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.865638][ T5701] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.869927][ T5701] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 275.869960][ T5701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.869982][ T5701] usb 2-1: Product: syz [ 275.870007][ T5701] usb 2-1: Manufacturer: syz [ 275.870023][ T5701] usb 2-1: SerialNumber: syz [ 275.929423][ T5701] usb 2-1: config 0 descriptor?? [ 275.949190][ T5701] pegasus_notetaker 2-1:0.0: Invalid number of endpoints [ 275.949241][ T5701] pegasus_notetaker 2-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 276.157748][ T5687] usb 2-1: USB disconnect, device number 33 [ 276.279990][ T5701] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 276.440172][ T5701] usb 1-1: Using ep0 maxpacket: 32 [ 276.443544][ T5701] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 276.443573][ T5701] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 276.443604][ T5701] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 276.443627][ T5701] usb 1-1: config 1 has no interface number 0 [ 276.443675][ T5701] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 276.443703][ T5701] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 276.443746][ T5701] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 276.443772][ T5701] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.587128][ T5701] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 276.797583][ T5701] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 277.259356][ T9301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.260000][ T9301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.420297][ T5798] usb 1-1: USB disconnect, device number 16 [ 277.440515][ T5798] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 278.431637][ T9342] overlay: Unknown parameter '/dev/ubi_ctrl' [ 278.682563][ T9348] fuse: fd is not a fuse device [ 279.143829][ T5798] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 279.314388][ T5798] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.335582][ T5798] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 279.335612][ T5798] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.335633][ T5798] usb 2-1: Product: syz [ 279.335649][ T5798] usb 2-1: Manufacturer: syz [ 279.335664][ T5798] usb 2-1: SerialNumber: syz [ 279.356817][ T5798] usb 2-1: config 0 descriptor?? [ 279.403922][ T5798] pegasus_notetaker 2-1:0.0: Invalid number of endpoints [ 279.403963][ T5798] pegasus_notetaker 2-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 279.540424][ T9358] veth0_vlan: entered allmulticast mode [ 279.607961][ T5798] usb 2-1: USB disconnect, device number 34 [ 279.941818][ T9375] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1273'. [ 279.972830][ T9375] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 280.359054][ T9384] input: syz1 as /devices/virtual/input/input16 [ 280.866274][ T5701] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 281.014414][ T5701] usb 2-1: device descriptor read/64, error -71 [ 281.313285][ T5701] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 281.465217][ T5701] usb 2-1: device descriptor read/64, error -71 [ 281.587275][ T5701] usb usb2-port1: attempt power cycle [ 281.964834][ T5701] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 281.998597][ T5701] usb 2-1: device descriptor read/8, error -71 [ 282.160228][ T9431] ptrace attach of "ci-upstream-rust-kasan-gce/syz-executor exec"[9433] was attempted by "ci-upstream-rust-kasan-gce/syz-executor exec"[9431] [ 282.264076][ T5701] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 282.286350][ T5701] usb 2-1: device descriptor read/8, error -71 [ 282.417788][ T5701] usb usb2-port1: unable to enumerate USB device [ 283.225806][ T5741] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 283.390127][ T5741] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.390183][ T5741] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 283.390211][ T5741] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.400343][ T5741] usb 4-1: config 0 descriptor?? [ 283.638804][ T5741] usbhid 4-1:0.0: can't add hid device: -71 [ 283.638932][ T5741] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 283.661630][ T5741] usb 4-1: USB disconnect, device number 45 [ 284.204316][ T5741] usb 4-1: new low-speed USB device number 46 using dummy_hcd [ 284.369315][ T5741] usb 4-1: Invalid ep0 maxpacket: 64 [ 284.509775][ T5741] usb 4-1: new low-speed USB device number 47 using dummy_hcd [ 284.669842][ T5741] usb 4-1: Invalid ep0 maxpacket: 64 [ 284.670242][ T5741] usb usb4-port1: attempt power cycle [ 285.117115][ T9] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 285.173669][ T5741] usb 4-1: new low-speed USB device number 48 using dummy_hcd [ 285.198342][ T5741] usb 4-1: Invalid ep0 maxpacket: 64 [ 285.298776][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 285.309652][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 285.309683][ T9] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 285.309708][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 285.331432][ T5741] usb 4-1: new low-speed USB device number 49 using dummy_hcd [ 285.351877][ T9] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 285.351912][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.351935][ T9] usb 2-1: Product: syz [ 285.351952][ T9] usb 2-1: Manufacturer: syz [ 285.351969][ T9] usb 2-1: SerialNumber: syz [ 285.383294][ T5741] usb 4-1: Invalid ep0 maxpacket: 64 [ 285.406449][ T9] usb 2-1: config 0 descriptor?? [ 285.440302][ T5741] usb usb4-port1: unable to enumerate USB device [ 286.350283][ T9467] sg_write: data in/out 331741/136 bytes for SCSI command 0x0-- guessing data in; [ 286.350283][ T9467] program syz.0.1303 not setting count and/or reply_len properly [ 286.390331][ T9469] trusted_key: syz.3.1304 sent an empty control message without MSG_MORE. [ 286.522945][ T9] gs_usb 2-1:0.0: Couldn't send data format (err=-110) [ 286.522999][ T9] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -110 [ 286.632763][ T9471] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1305'. [ 286.735958][ T9] usb 2-1: USB disconnect, device number 39 [ 286.979750][ T5741] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 287.083512][ T5701] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 287.147503][ T5741] usb 1-1: Using ep0 maxpacket: 32 [ 287.149608][ T5741] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 287.149634][ T5741] usb 1-1: config 0 has no interface number 0 [ 287.149683][ T5741] usb 1-1: config 0 interface 12 has no altsetting 0 [ 287.152014][ T5741] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 287.152043][ T5741] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.152064][ T5741] usb 1-1: Product: syz [ 287.152079][ T5741] usb 1-1: Manufacturer: syz [ 287.152095][ T5741] usb 1-1: SerialNumber: syz [ 287.201252][ T5741] usb 1-1: config 0 descriptor?? [ 287.347016][ T5701] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 287.347051][ T5701] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.347074][ T5701] usb 4-1: Product: syz [ 287.347090][ T5701] usb 4-1: Manufacturer: syz [ 287.347106][ T5701] usb 4-1: SerialNumber: syz [ 287.393227][ T5701] usb 4-1: config 0 descriptor?? [ 287.640127][ T5701] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 287.879240][ T9473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.890640][ T9473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.550879][ T5741] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 288.550932][ T5741] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 288.550950][ T5741] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 288.551040][ T5741] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 288.585696][ T5741] usb 1-1: USB disconnect, device number 17 [ 288.656676][ T5816] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 288.835779][ T5816] usb 2-1: Using ep0 maxpacket: 8 [ 288.837877][ T5816] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 288.837930][ T5816] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 288.837950][ T5816] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 288.838010][ T5816] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 288.838029][ T5816] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 288.839226][ T5816] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 288.839296][ T5816] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 288.839360][ T5816] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 288.839380][ T5816] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 288.839398][ T5816] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 288.840574][ T5816] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 288.840625][ T5816] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 288.840645][ T5816] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 288.840705][ T5816] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 288.840724][ T5816] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 288.844425][ T5816] usb 2-1: string descriptor 0 read error: -22 [ 288.844580][ T5816] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 288.844599][ T5816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.100280][ T5816] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 289.603370][ T5816] usb 2-1: USB disconnect, device number 40 [ 290.178423][ T9513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1321'. [ 290.392498][ T5701] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 290.422728][ T5701] usb 4-1: USB disconnect, device number 50 [ 290.425726][ T9517] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.261481][ T32] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 291.421794][ T32] usb 4-1: Using ep0 maxpacket: 8 [ 291.437162][ T32] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 291.437314][ T32] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 291.437381][ T32] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 291.437463][ T32] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 291.437532][ T32] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 291.437643][ T32] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 291.437704][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.710274][ T32] usb 4-1: GET_CAPABILITIES returned 0 [ 291.710328][ T32] usbtmc 4-1:16.0: can't read capabilities [ 292.002887][ T32] usb 4-1: USB disconnect, device number 51 [ 292.109344][ T9554] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1337'. [ 292.254090][ T9557] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1337'. [ 292.658363][ T9563] tmpfs: Bad value for 'size' [ 293.498543][ T9589] overlayfs: failed to clone upperpath [ 293.548333][ T9] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 293.584004][ T9591] netlink: 'syz.3.1352': attribute type 40 has an invalid length. [ 293.676589][ T823] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 293.722455][ T9] usb 1-1: config 0 has an invalid interface number: 16 but max is 0 [ 293.722485][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 293.722507][ T9] usb 1-1: config 0 has no interface number 0 [ 293.724913][ T9] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 293.724944][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.724965][ T9] usb 1-1: Product: syz [ 293.724981][ T9] usb 1-1: Manufacturer: syz [ 293.724996][ T9] usb 1-1: SerialNumber: syz [ 293.791373][ T9] usb 1-1: config 0 descriptor?? [ 293.914006][ T823] usb 2-1: Using ep0 maxpacket: 32 [ 293.918381][ T823] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 293.918411][ T823] usb 2-1: config 0 has no interface number 0 [ 293.918461][ T823] usb 2-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 293.918485][ T823] usb 2-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 293.918516][ T823] usb 2-1: config 0 interface 12 has no altsetting 0 [ 293.971620][ T823] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 293.971652][ T823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.971674][ T823] usb 2-1: Product: syz [ 293.971690][ T823] usb 2-1: Manufacturer: syz [ 293.971706][ T823] usb 2-1: SerialNumber: syz [ 293.987924][ T823] usb 2-1: config 0 descriptor?? [ 294.016970][ T823] f81534 2-1:0.12: unsupported endpoint max packet size [ 294.089002][ T9] usb 1-1: USB disconnect, device number 18 [ 294.171259][ T5798] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 294.235372][ T823] usb 2-1: USB disconnect, device number 41 [ 294.303207][ T9600] fuse: fd is not a fuse device [ 294.328340][ T5798] usb 4-1: Using ep0 maxpacket: 8 [ 294.332714][ T5798] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 294.332744][ T5798] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.332773][ T5798] usb 4-1: Product: syz [ 294.332789][ T5798] usb 4-1: Manufacturer: syz [ 294.332804][ T5798] usb 4-1: SerialNumber: syz [ 294.346217][ T5798] usb 4-1: config 0 descriptor?? [ 294.600734][ T5798] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 295.194453][ T9] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 295.354079][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 295.356493][ T9] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 295.359693][ T9] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 295.359727][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.359750][ T9] usb 2-1: Product: syz [ 295.359765][ T9] usb 2-1: Manufacturer: syz [ 295.359781][ T9] usb 2-1: SerialNumber: syz [ 295.427091][ T9] ch9200 2-1:2.0: probe with driver ch9200 failed with error -22 [ 295.683037][ T9] usb 2-1: USB disconnect, device number 42 [ 295.896083][ T9598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.908748][ T9598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.305405][ T9617] IPVS: length: 37 != 24 [ 296.366696][ T5798] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 296.406234][ T5798] usb 4-1: USB disconnect, device number 52 [ 297.047136][ T9636] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1372'. [ 297.086254][ T823] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 297.247923][ T823] usb 2-1: config 0 has an invalid interface number: 16 but max is 0 [ 297.247954][ T823] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.247975][ T823] usb 2-1: config 0 has no interface number 0 [ 297.275563][ T823] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 297.275594][ T823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.275616][ T823] usb 2-1: Product: syz [ 297.275647][ T823] usb 2-1: Manufacturer: syz [ 297.275663][ T823] usb 2-1: SerialNumber: syz [ 297.315570][ T823] usb 2-1: config 0 descriptor?? [ 297.576913][ T823] usb 2-1: USB disconnect, device number 43 [ 298.463858][ T5701] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 298.498761][ T9658] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1381'. [ 298.592178][ T9] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 298.624000][ T5701] usb 1-1: Using ep0 maxpacket: 16 [ 298.626619][ T5701] usb 1-1: unable to get BOS descriptor or descriptor too short [ 298.627894][ T5701] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 298.627918][ T5701] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 298.630348][ T5701] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 298.630375][ T5701] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.630402][ T5701] usb 1-1: Product: syz [ 298.630414][ T5701] usb 1-1: Manufacturer: syz [ 298.630429][ T5701] usb 1-1: SerialNumber: syz [ 298.773604][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 298.773662][ T823] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 298.777280][ T9] usb 4-1: config 2 has an invalid interface number: 49 but max is 0 [ 298.777309][ T9] usb 4-1: config 2 has no interface number 0 [ 298.777343][ T9] usb 4-1: too many endpoints for config 2 interface 49 altsetting 56: 52, using maximum allowed: 30 [ 298.777461][ T9] usb 4-1: config 2 interface 49 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 298.777494][ T9] usb 4-1: config 2 interface 49 has no altsetting 0 [ 298.777530][ T9] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 298.777612][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.916737][ T5701] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 298.916786][ T5701] cdc_ncm 1-1:1.0: bind() failure [ 298.938275][ T5701] usb 1-1: USB disconnect, device number 19 [ 298.979337][ T823] usb 2-1: config 2 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 298.979372][ T823] usb 2-1: config 2 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.979395][ T823] usb 2-1: config 2 interface 0 has no altsetting 0 [ 298.979435][ T823] usb 2-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 298.979458][ T823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.123902][ T9] usb 4-1: string descriptor 0 read error: -71 [ 299.153151][ T9] usb 4-1: USB disconnect, device number 53 [ 299.698536][ T9658] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1381'. [ 299.706571][ T9658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.726368][ T9658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.785216][ T823] usbhid 2-1:2.0: can't add hid device: -71 [ 299.785345][ T823] usbhid 2-1:2.0: probe with driver usbhid failed with error -71 [ 299.828491][ T823] usb 2-1: USB disconnect, device number 44 [ 299.915519][ T9675] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 300.355211][ T823] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 300.521143][ T823] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 300.521174][ T823] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 300.521200][ T823] usb 2-1: Product: syz [ 300.521211][ T823] usb 2-1: SerialNumber: syz [ 300.555715][ T823] usb 2-1: config 0 descriptor?? [ 300.809583][ T9695] binder: 9694:9695 ioctl c0306201 0 returned -14 [ 300.825738][ T823] hso 2-1:0.0: Failed to find BULK eps [ 300.879711][ T9695] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1391'. [ 301.401946][ T9710] netlink: 504 bytes leftover after parsing attributes in process `syz.0.1397'. [ 301.401970][ T9710] netlink: 32728 bytes leftover after parsing attributes in process `syz.0.1397'. [ 302.289013][ T9733] nbd: must specify an index to disconnect [ 303.101943][ T9] usb 2-1: USB disconnect, device number 45 [ 304.598698][ T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 304.606589][ T9776] netlink: 5946 bytes leftover after parsing attributes in process `syz.2.1423'. [ 304.736346][ T9] usb 1-1: device descriptor read/64, error -71 [ 305.015610][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 305.153087][ T9] usb 1-1: device descriptor read/64, error -71 [ 305.272653][ T9] usb usb1-port1: attempt power cycle [ 305.655490][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 305.666879][ T9] usb 1-1: device descriptor read/8, error -71 [ 305.798456][ T9796] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1430'. [ 305.804580][ T9797] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1430'. [ 305.847855][ T199] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 305.889950][ T9801] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1431'. [ 305.936638][ T9] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 305.957914][ T9] usb 1-1: device descriptor read/8, error -71 [ 306.022236][ T199] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.038610][ T199] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 306.038641][ T199] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.038663][ T199] usb 4-1: Product: syz [ 306.038677][ T199] usb 4-1: Manufacturer: syz [ 306.038694][ T199] usb 4-1: SerialNumber: syz [ 306.073104][ T9] usb usb1-port1: unable to enumerate USB device [ 306.078501][ T199] usb 4-1: config 0 descriptor?? [ 306.096092][ T199] pegasus_notetaker 4-1:0.0: Invalid number of endpoints [ 306.097872][ T199] pegasus_notetaker 4-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 306.311097][ T199] usb 4-1: USB disconnect, device number 54 [ 306.694629][ T9819] netlink: 4548 bytes leftover after parsing attributes in process `syz.1.1438'. [ 306.836073][ T9823] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1439'. [ 306.836073][ T9821] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1439'. [ 306.836102][ T9821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1439'. [ 308.220090][ T60] Bluetooth: hci3: command 0x0406 tx timeout [ 308.419098][ T9874] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1455'. [ 308.419445][ T9874] FAULT_INJECTION: forcing a failure. [ 308.419445][ T9874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 308.419477][ T9874] CPU: 0 UID: 0 PID: 9874 Comm: syz.3.1455 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 308.419503][ T9874] Tainted: [L]=SOFTLOCKUP [ 308.419510][ T9874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 308.419531][ T9874] Call Trace: [ 308.419539][ T9874] [ 308.419547][ T9874] dump_stack_lvl+0xe8/0x150 [ 308.419577][ T9874] should_fail_ex+0x467/0x600 [ 308.419613][ T9874] _copy_from_user+0x2d/0xb0 [ 308.419643][ T9874] kstrtouint_from_user+0xd6/0x180 [ 308.419678][ T9874] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 308.419705][ T9874] ? __lock_acquire+0x6df/0x2e40 [ 308.419724][ T9874] ? btrfs_find_item+0x1b0/0x530 [ 308.419749][ T9874] ? lock_acquire+0x115/0x350 [ 308.419769][ T9874] proc_fail_nth_write+0x8e/0x210 [ 308.419811][ T9874] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 308.419847][ T9874] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 308.419876][ T9874] vfs_write+0x29f/0xbb0 [ 308.419904][ T9874] ? __pfx_vfs_write+0x10/0x10 [ 308.419926][ T9874] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 308.419946][ T9874] ? lockdep_hardirqs_on+0x7a/0x110 [ 308.419967][ T9874] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 308.419987][ T9874] ? mutex_lock_nested+0x152/0x1d0 [ 308.420011][ T9874] ? fdget_pos+0x252/0x320 [ 308.420053][ T9874] ksys_write+0x156/0x270 [ 308.420077][ T9874] ? __pfx_ksys_write+0x10/0x10 [ 308.420106][ T9874] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.420127][ T9874] do_syscall_64+0x174/0x580 [ 308.420146][ T9874] ? trace_irq_disable+0x3b/0x140 [ 308.420164][ T9874] ? clear_bhb_loop+0x40/0x90 [ 308.420187][ T9874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.420206][ T9874] RIP: 0033:0x7f1cc83ee68e [ 308.420225][ T9874] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 308.420241][ T9874] RSP: 002b:00007f1cc6685fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 308.420261][ T9874] RAX: ffffffffffffffda RBX: 00007f1cc66866c0 RCX: 00007f1cc83ee68e [ 308.420276][ T9874] RDX: 0000000000000001 RSI: 00007f1cc66860a0 RDI: 0000000000000004 [ 308.420289][ T9874] RBP: 00007f1cc6686090 R08: 0000000000000000 R09: 0000000000000000 [ 308.420302][ T9874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.420312][ T9874] R13: 00007f1cc86b6038 R14: 00007f1cc86b5fa0 R15: 00007ffcee596f58 [ 308.420343][ T9874] [ 308.425255][ T823] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 308.784372][ T823] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.797077][ T823] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 308.797113][ T823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.797128][ T823] usb 2-1: Product: syz [ 308.797138][ T823] usb 2-1: Manufacturer: syz [ 308.797149][ T823] usb 2-1: SerialNumber: syz [ 308.830985][ T823] usb 2-1: config 0 descriptor?? [ 308.859701][ T823] pegasus_notetaker 2-1:0.0: Invalid number of endpoints [ 308.859730][ T823] pegasus_notetaker 2-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 309.091954][ T823] usb 2-1: USB disconnect, device number 46 [ 309.570289][ T9888] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1460'. [ 309.606147][ T9888] IPVS: Error connecting to the multicast addr [ 311.673430][ T5798] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 311.727334][ T9933] netlink: 'syz.0.1473': attribute type 11 has an invalid length. [ 311.727359][ T9933] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1473'. [ 311.843849][ T5798] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.847536][ T5798] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 311.847566][ T5798] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.847587][ T5798] usb 2-1: Product: syz [ 311.847602][ T5798] usb 2-1: Manufacturer: syz [ 311.847618][ T5798] usb 2-1: SerialNumber: syz [ 311.929142][ T5798] usb 2-1: config 0 descriptor?? [ 311.967831][ T5798] pegasus_notetaker 2-1:0.0: Invalid number of endpoints [ 311.967876][ T5798] pegasus_notetaker 2-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 312.161823][ T5701] usb 2-1: USB disconnect, device number 47 [ 312.178590][ T9945] netlink: 'syz.2.1479': attribute type 16 has an invalid length. [ 312.178613][ T9945] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.1479'. [ 312.184389][ T199] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 312.291205][ T5798] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 312.391772][ T199] usb 4-1: unable to get BOS descriptor or descriptor too short [ 312.395343][ T199] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 312.427491][ T199] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 312.427524][ T199] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.427546][ T199] usb 4-1: Product: syz [ 312.427577][ T199] usb 4-1: Manufacturer: syz [ 312.427594][ T199] usb 4-1: SerialNumber: syz [ 312.490823][ T5798] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 312.490857][ T5798] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.527608][ T5798] usb 1-1: config 0 descriptor?? [ 312.574113][ T5798] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 312.710699][ T199] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 312.920926][ T199] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 312.920957][ T199] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 312.975155][ T5798] gspca_cpia1: usb_control_msg 03, error -32 [ 312.981800][ T5798] gspca_cpia1: usb_control_msg 03, error -71 [ 312.983776][ T5798] gspca_cpia1: usb_control_msg 01, error -71 [ 312.983808][ T5798] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 313.013676][ T5798] usb 1-1: USB disconnect, device number 24 [ 313.362320][ T199] usb 4-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 313.418240][ T199] usb 4-1: USB disconnect, device number 55 [ 313.495346][ T5911] udevd[5911]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 313.509424][ T5701] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 313.691333][ T5701] usb 2-1: Using ep0 maxpacket: 8 [ 313.694887][ T5701] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 313.694949][ T5701] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 313.694979][ T5701] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 313.695006][ T5701] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 313.695034][ T5701] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 313.719830][ T5701] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 313.720393][ T5701] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 313.720415][ T5701] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 313.720433][ T5701] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 313.720451][ T5701] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 313.800986][ T5701] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 313.801030][ T5701] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 313.801051][ T5701] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 313.801069][ T5701] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 313.851304][ T5701] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 313.869547][ T5701] usb 2-1: string descriptor 0 read error: -22 [ 313.869667][ T5701] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 313.869686][ T5701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.926076][ T5701] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 314.190524][ T32] usb 2-1: USB disconnect, device number 48 [ 314.206580][ T4911] Bluetooth: hci0: command 0x0406 tx timeout [ 314.707947][ T5816] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 314.732439][ T39] audit: type=1326 audit(2051927353.429:4): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=9987 comm="syz.0.1496" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0dc9eede59 code=0x0 [ 314.881845][ T5816] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.884440][ T5816] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 314.884469][ T5816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.884492][ T5816] usb 2-1: Product: syz [ 314.884507][ T5816] usb 2-1: Manufacturer: syz [ 314.884523][ T5816] usb 2-1: SerialNumber: syz [ 314.932483][ T5816] usb 2-1: config 0 descriptor?? [ 314.939356][ T5816] pegasus_notetaker 2-1:0.0: Invalid number of endpoints [ 314.939415][ T5816] pegasus_notetaker 2-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 315.153980][ T32] usb 2-1: USB disconnect, device number 49 [ 315.589507][T10006] dvmrp0: entered allmulticast mode [ 315.770974][T10010] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 315.774534][T10010] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 315.818146][T10010] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 315.818252][T10010] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 315.933955][T10010] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 316.272085][ T39] audit: type=1326 audit(2051927354.861:5): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10019 comm="syz.2.1509" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f89cfe2de59 code=0x0 [ 316.363609][ T5816] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 316.480048][ T199] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 316.501396][ T5816] usb 2-1: device descriptor read/64, error -71 [ 316.651096][ T199] usb 1-1: Using ep0 maxpacket: 16 [ 316.654707][ T199] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 316.657419][ T199] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 316.657447][ T199] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.657544][ T199] usb 1-1: Product: syz [ 316.657562][ T199] usb 1-1: Manufacturer: syz [ 316.657576][ T199] usb 1-1: SerialNumber: syz [ 316.665506][ T199] usb 1-1: config 0 descriptor?? [ 316.710241][ T199] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 316.726562][ T199] usb 1-1: Detected FT232R [ 316.757909][ T5816] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 316.897024][ T5816] usb 2-1: device descriptor read/64, error -71 [ 317.011571][ T199] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 317.012935][ T199] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 317.013465][ T199] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 317.021462][ T5816] usb usb2-port1: attempt power cycle [ 317.047659][ T199] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 317.061765][ T199] usb 1-1: USB disconnect, device number 25 [ 317.067454][ T199] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 317.070994][ T199] ftdi_sio 1-1:0.0: device disconnected [ 317.388423][ T5816] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 317.410491][ T5816] usb 2-1: device descriptor read/8, error -71 [ 317.415071][T10024] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1510'. [ 317.473400][T10026] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 317.666299][ T5816] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 317.688122][ T5816] usb 2-1: device descriptor read/8, error -71 [ 317.810773][ T5816] usb usb2-port1: unable to enumerate USB device [ 317.965462][ T4911] Bluetooth: hci4: command 0x0c1a tx timeout [ 317.965513][ T5605] Bluetooth: hci3: command 0x0c1a tx timeout [ 317.965730][ T60] Bluetooth: hci0: command 0x0406 tx timeout [ 318.046701][T10035] netlink: 'syz.0.1515': attribute type 4 has an invalid length. [ 318.081826][T10035] netlink: 'syz.0.1515': attribute type 4 has an invalid length. [ 318.269776][T10043] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1519'. [ 318.435580][ T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 318.617509][ T9] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 318.617544][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.617567][ T9] usb 1-1: Product: syz [ 318.617582][ T9] usb 1-1: Manufacturer: syz [ 318.617598][ T9] usb 1-1: SerialNumber: syz [ 318.628821][ T9] usb 1-1: config 0 descriptor?? [ 318.677769][ T9] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 319.104020][ T9] gspca_sunplus: reg_w_riv err -71 [ 319.104131][ T9] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 319.128201][ T9] usb 1-1: USB disconnect, device number 26 [ 319.133527][ T199] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 319.258884][T10058] FAULT_INJECTION: forcing a failure. [ 319.258884][T10058] name failslab, interval 1, probability 0, space 0, times 0 [ 319.258926][T10058] CPU: 0 UID: 0 PID: 10058 Comm: syz.1.1525 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 319.258948][T10058] Tainted: [L]=SOFTLOCKUP [ 319.258954][T10058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 319.258963][T10058] Call Trace: [ 319.258969][T10058] [ 319.258975][T10058] dump_stack_lvl+0xe8/0x150 [ 319.258999][T10058] should_fail_ex+0x467/0x600 [ 319.259027][T10058] should_failslab+0xa8/0x100 [ 319.259052][T10058] __kmalloc_cache_noprof+0xa1/0x670 [ 319.259075][T10058] ? __se_sys_mount+0x166/0x420 [ 319.259097][T10058] ? __se_sys_mount+0x166/0x420 [ 319.259119][T10058] ? memdup_user+0x99/0xd0 [ 319.259162][T10058] __se_sys_mount+0x166/0x420 [ 319.259190][T10058] ? __pfx___se_sys_mount+0x10/0x10 [ 319.259219][T10058] ? __x64_sys_mount+0x20/0xc0 [ 319.259242][T10058] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.259260][T10058] do_syscall_64+0x174/0x580 [ 319.259276][T10058] ? trace_irq_disable+0x3b/0x140 [ 319.259291][T10058] ? clear_bhb_loop+0x40/0x90 [ 319.259310][T10058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.259326][T10058] RIP: 0033:0x7f836242de59 [ 319.259340][T10058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.259354][T10058] RSP: 002b:00007f8360686028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 319.259370][T10058] RAX: ffffffffffffffda RBX: 00007f83626b5fa0 RCX: 00007f836242de59 [ 319.259382][T10058] RDX: 0000200000000040 RSI: 0000200000000380 RDI: 0000000000000000 [ 319.259393][T10058] RBP: 00007f8360686090 R08: 0000200000000600 R09: 0000000000000000 [ 319.259403][T10058] R10: 0000000000800048 R11: 0000000000000246 R12: 0000000000000001 [ 319.259413][T10058] R13: 00007f83626b6038 R14: 00007f83626b5fa0 R15: 00007ffc1ffa4478 [ 319.259437][T10058] [ 319.290470][ T199] usb 4-1: Using ep0 maxpacket: 8 [ 319.316056][ T199] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 319.316257][ T199] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 319.316342][ T199] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 319.316414][ T199] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 319.316487][ T199] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 319.322739][ T199] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 319.322894][ T199] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 319.322976][ T199] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 319.323043][ T199] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 319.323115][ T199] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 319.334441][ T199] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 319.334582][ T199] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 319.334667][ T199] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 319.334739][ T199] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 319.334811][ T199] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 319.443604][ T199] usb 4-1: string descriptor 0 read error: -22 [ 319.443999][ T199] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 319.444071][ T199] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.775829][ T199] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 320.010613][ T5741] usb 4-1: USB disconnect, device number 56 [ 320.189715][ T60] Bluetooth: hci4: command 0x0c1a tx timeout [ 320.252157][ T199] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 320.433872][ T199] usb 2-1: Using ep0 maxpacket: 16 [ 320.440291][ T199] usb 2-1: unable to get BOS descriptor or descriptor too short [ 320.441687][ T199] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 320.453770][ T199] usb 2-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40 [ 320.453852][ T199] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.453905][ T199] usb 2-1: Product: syz [ 320.453947][ T199] usb 2-1: Manufacturer: syz [ 320.454003][ T199] usb 2-1: SerialNumber: syz [ 320.730762][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 320.732172][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 320.736483][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 320.738652][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 320.739635][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 320.881565][ T199] snd-ua101 2-1:1.1: sample format descriptor not found [ 320.881594][ T199] snd-ua101 2-1:1.0: invalid num_altsetting [ 321.074092][ T199] usb 2-1: USB disconnect, device number 54 [ 321.306059][T10083] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1535'. [ 321.341775][T10085] 9p: Bad value for 'aname' [ 321.876486][ T199] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 322.132960][ T5701] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 322.134879][ T199] usb 1-1: not running at top speed; connect to a high speed hub [ 322.136690][ T199] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 322.136726][ T199] usb 1-1: can't read configurations, error -61 [ 322.249008][T10097] syz.2.1542 (10097) used greatest stack depth: 17080 bytes left [ 322.288590][ T199] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 322.303856][ T5701] usb 2-1: Using ep0 maxpacket: 8 [ 322.306328][ T5701] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 322.310431][ T5701] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 322.310462][ T5701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.310485][ T5701] usb 2-1: Product: syz [ 322.310501][ T5701] usb 2-1: Manufacturer: syz [ 322.310516][ T5701] usb 2-1: SerialNumber: syz [ 322.325637][ T5701] usb 2-1: config 0 descriptor?? [ 322.399150][ T5701] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 322.413123][ T60] Bluetooth: hci4: command 0x0c1a tx timeout [ 322.457827][ T199] usb 1-1: not running at top speed; connect to a high speed hub [ 322.468736][ T199] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 322.468774][ T199] usb 1-1: can't read configurations, error -61 [ 322.499798][ T199] usb usb1-port1: attempt power cycle [ 322.589472][T10096] kAFS: unable to lookup cell '' [ 322.590827][ T5701] gspca_zc3xx: reg_w_i err -71 [ 322.664635][T10105] 9p: Bad value for 'aname' [ 322.891647][ T199] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 322.932122][ T199] usb 1-1: not running at top speed; connect to a high speed hub [ 322.934099][ T199] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 322.934137][ T199] usb 1-1: can't read configurations, error -61 [ 322.991940][T10110] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1547'. [ 323.073231][ T199] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 323.101523][ T199] usb 1-1: not running at top speed; connect to a high speed hub [ 323.103307][ T199] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 323.103347][ T199] usb 1-1: can't read configurations, error -61 [ 323.103740][ T199] usb usb1-port1: unable to enumerate USB device [ 323.212230][ T5701] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 323.212334][ T5701] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 323.219874][ T5701] usb 2-1: USB disconnect, device number 55 [ 324.708242][ T32] usb 2-1: new low-speed USB device number 56 using dummy_hcd [ 324.871578][ T32] usb 2-1: unable to get BOS descriptor or descriptor too short [ 324.872930][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 324.872963][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 324.872990][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC is Bulk; changing to Interrupt [ 324.873006][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 324.873022][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 15912, setting to 8 [ 324.876709][ T32] usb 2-1: string descriptor 0 read error: -22 [ 324.876851][ T32] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 324.876884][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.981133][ T32] usb 2-1: config 0 descriptor?? [ 324.984266][T10138] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 324.984467][T10138] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 325.024510][ T32] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 325.590755][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 325.590864][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 325.692135][ T5741] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 325.729893][T10138] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1556'. [ 325.738322][T10138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.738945][T10138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.765385][T10138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.766694][T10138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.811595][ T5701] usb 2-1: USB disconnect, device number 56 [ 325.867034][ T5741] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 325.867065][ T5741] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.867084][ T5741] usb 1-1: Product: syz [ 325.867102][ T5741] usb 1-1: Manufacturer: syz [ 325.867112][ T5741] usb 1-1: SerialNumber: syz [ 325.872446][ T5741] usb 1-1: config 0 descriptor?? [ 326.098034][ T5741] usb 1-1: ignoring: probably an ADSL modem [ 326.705569][T10165] bridge0: entered promiscuous mode [ 326.705720][T10165] bridge0: entered allmulticast mode [ 327.053647][T10172] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1568'. [ 327.401979][T10182] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 327.402005][T10182] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 328.403780][T10203] tipc: Failed to obtain node identity [ 328.403831][T10203] tipc: Enabling of bearer rejected, failed to enable media [ 328.597598][ T5741] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 328.631873][ T5741] usb 1-1: USB disconnect, device number 31 [ 329.100059][ T5701] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 329.185553][ T5741] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 329.260293][ T5701] usb 4-1: Using ep0 maxpacket: 16 [ 329.278142][ T5701] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 329.278190][ T5701] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 329.278207][ T5701] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 329.301960][ T5701] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 329.302081][ T5701] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 329.302136][ T5701] usb 4-1: Manufacturer: syz [ 329.351336][ T5701] usb 4-1: config 0 descriptor?? [ 329.361588][ T5741] usb 1-1: Using ep0 maxpacket: 16 [ 329.365143][ T5741] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50077, setting to 1024 [ 329.365176][ T5741] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 329.365218][ T5741] usb 1-1: New USB device found, idVendor=1430, idProduct=474c, bcdDevice= 0.00 [ 329.365324][ T5741] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.433843][ T5741] usb 1-1: config 0 descriptor?? [ 329.572464][ T32] usb 4-1: USB disconnect, device number 57 [ 329.659979][ T5741] usbhid 1-1:0.0: can't add hid device: -71 [ 329.660112][ T5741] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 329.682234][ T5741] usb 1-1: USB disconnect, device number 32 [ 330.564265][ T5741] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 330.666324][ T60] Bluetooth: hci3: Malformed LE Event: 0x0b [ 330.703003][ T5741] usb 2-1: device descriptor read/64, error -71 [ 330.713662][ T32] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 330.878810][ T32] usb 4-1: Using ep0 maxpacket: 32 [ 330.881559][ T32] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.881585][ T32] usb 4-1: config 0 has no interfaces? [ 330.881616][ T32] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 330.881640][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.941140][ T32] usb 4-1: config 0 descriptor?? [ 331.002231][ T5741] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 331.141021][ T5741] usb 2-1: device descriptor read/64, error -71 [ 331.161015][ T5701] usb 4-1: USB disconnect, device number 58 [ 331.259864][ T5741] usb usb2-port1: attempt power cycle [ 331.645014][ T5741] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 331.665143][ T5741] usb 2-1: device descriptor read/8, error -71 [ 331.921248][ T5741] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 331.957670][ T5741] usb 2-1: device descriptor read/8, error -71 [ 331.970720][T10250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1597'. [ 332.071133][ T5741] usb usb2-port1: unable to enumerate USB device [ 333.047032][T10274] tmpfs: Bad value for 'mpol' [ 333.534567][ T5741] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 333.661813][ T32] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 333.672507][ T5741] usb 4-1: device descriptor read/64, error -71 [ 333.786737][ T60] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 333.856942][ T32] usb 1-1: unable to get BOS descriptor or descriptor too short [ 333.857545][ T32] usb 1-1: not running at top speed; connect to a high speed hub [ 333.858771][ T32] usb 1-1: config 1 has an invalid interface number: 77 but max is 0 [ 333.858794][ T32] usb 1-1: config 1 has no interface number 0 [ 333.858829][ T32] usb 1-1: config 1 interface 77 has no altsetting 0 [ 333.905466][ T32] usb 1-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 6.13 [ 333.905498][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.905519][ T32] usb 1-1: Product: syz [ 333.905532][ T32] usb 1-1: Manufacturer: syz [ 333.905546][ T32] usb 1-1: SerialNumber: syz [ 334.043336][ T5741] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 334.181291][ T5741] usb 4-1: device descriptor read/64, error -71 [ 334.201766][T10285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.206747][T10285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.221580][T10285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.222670][T10285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.243384][T10285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.244475][T10285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.291935][T10285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.305949][T10285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.316522][T10299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1615'. [ 334.340658][ T5741] usb usb4-port1: attempt power cycle [ 334.537706][ T32] ums_eneub6250 1-1:1.77: USB Mass Storage device detected [ 334.631166][ T32] usb 1-1: USB disconnect, device number 33 [ 334.732336][ T5741] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 334.759340][ T5741] usb 4-1: device descriptor read/8, error -71 [ 335.010984][ T5741] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 335.030513][ T5741] usb 4-1: device descriptor read/8, error -71 [ 335.092645][ T32] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 335.151926][ T5741] usb usb4-port1: unable to enumerate USB device [ 335.251661][ T32] usb 2-1: Using ep0 maxpacket: 16 [ 335.253794][ T32] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 335.253844][ T32] usb 2-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.00 [ 335.253871][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.275502][ T32] usb 2-1: config 0 descriptor?? [ 335.625990][ T32] usbhid 2-1:0.0: can't add hid device: -71 [ 335.626117][ T32] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 335.690009][ T32] usb 2-1: USB disconnect, device number 61 [ 336.226977][ T5741] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 336.385916][ T5741] usb 1-1: Using ep0 maxpacket: 8 [ 336.390163][ T5741] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 336.390235][ T5741] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 336.390268][ T5741] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 336.390286][ T5741] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 336.390305][ T5741] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 336.392483][ T5741] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 336.392520][ T5741] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 336.392541][ T5741] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 336.392559][ T5741] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 336.392578][ T5741] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 336.536872][ T5741] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 336.536922][ T5741] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 336.536943][ T5741] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 336.536961][ T5741] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 336.536980][ T5741] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 336.541755][ T5741] usb 1-1: string descriptor 0 read error: -22 [ 336.541888][ T5741] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 336.541907][ T5741] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.822436][ T5741] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 336.860837][T10322] kAFS: unable to lookup cell 'syz0' [ 336.933620][ T5328] usb 1-1: USB disconnect, device number 34 [ 337.597859][T10337] FAULT_INJECTION: forcing a failure. [ 337.597859][T10337] name failslab, interval 1, probability 0, space 0, times 0 [ 337.597904][T10337] CPU: 1 UID: 0 PID: 10337 Comm: syz.0.1626 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 337.597936][T10337] Tainted: [L]=SOFTLOCKUP [ 337.597944][T10337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 337.597959][T10337] Call Trace: [ 337.597967][T10337] [ 337.597977][T10337] dump_stack_lvl+0xe8/0x150 [ 337.598012][T10337] should_fail_ex+0x467/0x600 [ 337.598053][T10337] should_failslab+0xa8/0x100 [ 337.598089][T10337] __kmalloc_cache_noprof+0xa1/0x670 [ 337.598121][T10337] ? __se_sys_mount+0x166/0x420 [ 337.598153][T10337] ? __se_sys_mount+0x166/0x420 [ 337.598192][T10337] __se_sys_mount+0x166/0x420 [ 337.598233][T10337] ? __pfx___se_sys_mount+0x10/0x10 [ 337.598277][T10337] ? __x64_sys_mount+0x20/0xc0 [ 337.598318][T10337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.598343][T10337] do_syscall_64+0x174/0x580 [ 337.598367][T10337] ? trace_irq_disable+0x3b/0x140 [ 337.598388][T10337] ? clear_bhb_loop+0x40/0x90 [ 337.598417][T10337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.598440][T10337] RIP: 0033:0x7f0dc9eede59 [ 337.598463][T10337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.598483][T10337] RSP: 002b:00007f0dc8125028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 337.598508][T10337] RAX: ffffffffffffffda RBX: 00007f0dca176090 RCX: 00007f0dc9eede59 [ 337.598508][T10337] RAX: ffffffffffffffda RBX: 00007f0dca176090 RCX: 00007f0dc9eede59 [ 337.598525][T10337] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000000 [ 337.598540][T10337] RBP: 00007f0dc8125090 R08: 0000200000000080 R09: 0000000000000000 [ 337.598555][T10337] R10: 0000000000084022 R11: 0000000000000246 R12: 0000000000000001 [ 337.598569][T10337] R13: 00007f0dca176128 R14: 00007f0dca176090 R15: 00007ffdd7618e48 [ 337.598604][T10337] [ 338.038624][ T60] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 338.038840][ T60] Bluetooth: hci0: Injecting HCI hardware error event [ 338.067252][ T5605] Bluetooth: hci0: hardware error 0x00 [ 338.187101][ T5605] ================================================================== [ 338.187122][ T5605] BUG: KASAN: slab-use-after-free in rt_spin_lock+0x83/0x400 [ 338.187161][ T5605] Read of size 1 at addr ffff88802c5fe7e8 by task kworker/u9:3/5605 [ 338.187180][ T5605] [ 338.187196][ T5605] CPU: 1 UID: 0 PID: 5605 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 338.187226][ T5605] Tainted: [L]=SOFTLOCKUP [ 338.187234][ T5605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 338.187249][ T5605] Workqueue: hci0 hci_error_reset [ 338.187287][ T5605] Call Trace: [ 338.187295][ T5605] [ 338.187341][ T5605] dump_stack_lvl+0xe8/0x150 [ 338.187445][ T5605] print_address_description+0x55/0x1e0 [ 338.187554][ T5605] ? rt_spin_lock+0x83/0x400 [ 338.187629][ T5605] print_report+0x58/0x70 [ 338.187706][ T5605] kasan_report+0x117/0x150 [ 338.187756][ T5605] ? rt_spin_lock+0x83/0x400 [ 338.187789][ T5605] __kasan_check_byte+0x2a/0x40 [ 338.187857][ T5605] lock_acquire+0x7d/0x350 [ 338.187913][ T5605] ? lock_acquire+0x115/0x350 [ 338.187973][ T5605] rt_spin_lock+0x83/0x400 [ 338.188046][ T5605] ? bt_accept_unlink+0x7d/0x2f0 [ 338.188111][ T5605] ? __pfx_rt_spin_lock+0x10/0x10 [ 338.188192][ T5605] ? rcu_is_watching+0x15/0xb0 [ 338.188253][ T5605] ? __local_bh_disable_ip+0x3c/0x420 [ 338.188278][ T5605] ? bt_accept_unlink+0x61/0x2f0 [ 338.188331][ T5605] bt_accept_unlink+0x7d/0x2f0 [ 338.188394][ T5605] ? bt_accept_unlink+0x61/0x2f0 [ 338.188465][ T5605] l2cap_sock_teardown_cb+0x17e/0x490 [ 338.188560][ T5605] l2cap_chan_del+0x98/0x600 [ 338.188653][ T5605] l2cap_conn_del+0x2f2/0x520 [ 338.188745][ T5605] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 338.188796][ T5605] hci_conn_hash_flush+0x105/0x260 [ 338.188829][ T5605] hci_dev_close_sync+0x7fc/0x10a0 [ 338.188861][ T5605] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 338.188888][ T5605] ? lockdep_hardirqs_on+0x7a/0x110 [ 338.188910][ T5605] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 338.188932][ T5605] ? mutex_lock_nested+0x152/0x1d0 [ 338.188961][ T5605] ? hci_error_reset+0x11f/0x4c0 [ 338.188999][ T5605] hci_error_reset+0x127/0x4c0 [ 338.189034][ T5605] ? process_one_work+0x7fd/0x1480 [ 338.189058][ T5605] process_one_work+0xaaf/0x1480 [ 338.189081][ T5605] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 338.189122][ T5605] ? __pfx_process_one_work+0x10/0x10 [ 338.189145][ T5605] ? do_raw_spin_lock+0x12b/0x2f0 [ 338.189180][ T5605] ? assign_work+0x3cf/0x5d0 [ 338.189205][ T5605] worker_thread+0xb05/0x10d0 [ 338.189242][ T5605] kthread+0x388/0x470 [ 338.189273][ T5605] ? __pfx_worker_thread+0x10/0x10 [ 338.189297][ T5605] ? __pfx_kthread+0x10/0x10 [ 338.189329][ T5605] ret_from_fork+0x514/0xb70 [ 338.189361][ T5605] ? __pfx_ret_from_fork+0x10/0x10 [ 338.189392][ T5605] ? __switch_to+0xc89/0x1420 [ 338.189420][ T5605] ? __pfx_kthread+0x10/0x10 [ 338.189450][ T5605] ret_from_fork_asm+0x1a/0x30 [ 338.189492][ T5605] [ 338.189500][ T5605] [ 338.189512][ T5605] Allocated by task 10291: [ 338.189525][ T5605] kasan_save_track+0x3e/0x80 [ 338.189553][ T5605] __kasan_kmalloc+0x93/0xb0 [ 338.189582][ T5605] __kmalloc_noprof+0x415/0x790 [ 338.189611][ T5605] sk_prot_alloc+0xe7/0x210 [ 338.189642][ T5605] sk_alloc+0x3a/0x390 [ 338.189670][ T5605] bt_sock_alloc+0x3b/0x340 [ 338.189690][ T5605] l2cap_sock_create+0x15a/0x300 [ 338.189720][ T5605] bt_sock_create+0x163/0x240 [ 338.189825][ T5605] __sock_create+0x4e8/0x960 [ 338.189851][ T5605] __sys_socket+0xd9/0x320 [ 338.189876][ T5605] __x64_sys_socket+0x7a/0x90 [ 338.189901][ T5605] do_syscall_64+0x174/0x580 [ 338.189921][ T5605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.189943][ T5605] [ 338.189948][ T5605] Freed by task 10290: [ 338.189959][ T5605] kasan_save_track+0x3e/0x80 [ 338.189986][ T5605] kasan_save_free_info+0x40/0x50 [ 338.190008][ T5605] __kasan_slab_free+0x5c/0x80 [ 338.190037][ T5605] kfree+0x1c5/0x6c0 [ 338.190060][ T5605] __sk_destruct+0x754/0x9e0 [ 338.190092][ T5605] l2cap_sock_release+0x1b3/0x250 [ 338.190120][ T5605] __sock_release+0xa0/0x1f0 [ 338.190142][ T5605] sock_close+0x1c/0x30 [ 338.190163][ T5605] __fput+0x42a/0xa80 [ 338.190190][ T5605] task_work_run+0x1d9/0x270 [ 338.190219][ T5605] exit_to_user_mode_loop+0x1fa/0x730 [ 338.190237][ T5605] do_syscall_64+0x353/0x580 [ 338.190255][ T5605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.190275][ T5605] [ 338.190280][ T5605] The buggy address belongs to the object at ffff88802c5fe000 [ 338.190280][ T5605] which belongs to the cache kmalloc-4k of size 4096 [ 338.190300][ T5605] The buggy address is located 2024 bytes inside of [ 338.190300][ T5605] freed 4096-byte region [ffff88802c5fe000, ffff88802c5ff000) [ 338.190323][ T5605] [ 338.190329][ T5605] The buggy address belongs to the physical page: [ 338.190348][ T5605] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2c5f8 [ 338.190373][ T5605] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 338.190393][ T5605] flags: 0x80000000000040(head|node=0|zone=1) [ 338.190416][ T5605] page_type: f5(slab) [ 338.190436][ T5605] raw: 0080000000000040 ffff88813fe3a140 dead000000000100 dead000000000122 [ 338.190454][ T5605] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 338.190475][ T5605] head: 0080000000000040 ffff88813fe3a140 dead000000000100 dead000000000122 [ 338.190493][ T5605] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 338.190513][ T5605] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 338.190530][ T5605] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 338.190541][ T5605] page dumped because: kasan: bad access detected [ 338.190552][ T5605] page_owner tracks the page as allocated [ 338.190560][ T5605] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 18900562855 [ 338.190596][ T5605] post_alloc_hook+0x1f9/0x250 [ 338.190623][ T5605] get_page_from_freelist+0x264c/0x26c0 [ 338.190656][ T5605] __alloc_frozen_pages_noprof+0x222/0x5b0 [ 338.190689][ T5605] allocate_slab+0x7c/0x5e0 [ 338.190710][ T5605] refill_objects+0x2d8/0x350 [ 338.190733][ T5605] __pcs_replace_empty_main+0x330/0x690 [ 338.190761][ T5605] __kmalloc_cache_noprof+0x467/0x670 [ 338.190791][ T5605] kobject_uevent_env+0x28c/0x9e0 [ 338.190820][ T5605] really_probe+0x774/0xae0 [ 338.190851][ T5605] __driver_probe_device+0x1e8/0x360 [ 338.190881][ T5605] driver_probe_device+0x4f/0x240 [ 338.190913][ T5605] __device_attach_driver+0x270/0x410 [ 338.190945][ T5605] bus_for_each_drv+0x25b/0x2f0 [ 338.190967][ T5605] __device_attach+0x2c7/0x450 [ 338.190995][ T5605] device_initial_probe+0xa1/0xd0 [ 338.191026][ T5605] bus_probe_device+0x12d/0x220 [ 338.191048][ T5605] page_owner free stack trace missing [ 338.191056][ T5605] [ 338.191061][ T5605] Memory state around the buggy address: [ 338.191073][ T5605] ffff88802c5fe680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 338.191088][ T5605] ffff88802c5fe700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 338.191102][ T5605] >ffff88802c5fe780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 338.191113][ T5605] ^ [ 338.191125][ T5605] ffff88802c5fe800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 338.191140][ T5605] ffff88802c5fe880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 338.191152][ T5605] ================================================================== [ 338.196201][ T5605] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 338.196226][ T5605] CPU: 1 UID: 0 PID: 5605 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 338.196257][ T5605] Tainted: [L]=SOFTLOCKUP [ 338.196265][ T5605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 338.196279][ T5605] Workqueue: hci0 hci_error_reset [ 338.196319][ T5605] Call Trace: [ 338.196327][ T5605] [ 338.196335][ T5605] vpanic+0x5d9/0xad0 [ 338.196362][ T5605] ? __pfx_vpanic+0x10/0x10 [ 338.196388][ T5605] ? __pfx___schedule+0x10/0x10 [ 338.196424][ T5605] panic+0xc5/0xd0 [ 338.196445][ T5605] ? __pfx_panic+0x10/0x10 [ 338.196466][ T5605] ? preempt_schedule_thunk+0x16/0x40 [ 338.196493][ T5605] ? rt_spin_lock+0x83/0x400 [ 338.196526][ T5605] check_panic_on_warn+0x89/0xb0 [ 338.196558][ T5605] ? rt_spin_lock+0x83/0x400 [ 338.196587][ T5605] end_report+0x73/0x170 [ 338.196619][ T5605] ? rt_spin_lock+0x83/0x400 [ 338.196646][ T5605] kasan_report+0x128/0x150 [ 338.196687][ T5605] ? rt_spin_lock+0x83/0x400 [ 338.196719][ T5605] __kasan_check_byte+0x2a/0x40 [ 338.196760][ T5605] lock_acquire+0x7d/0x350 [ 338.196782][ T5605] ? lock_acquire+0x115/0x350 [ 338.196805][ T5605] rt_spin_lock+0x83/0x400 [ 338.196833][ T5605] ? bt_accept_unlink+0x7d/0x2f0 [ 338.196858][ T5605] ? __pfx_rt_spin_lock+0x10/0x10 [ 338.196888][ T5605] ? rcu_is_watching+0x15/0xb0 [ 338.196912][ T5605] ? __local_bh_disable_ip+0x3c/0x420 [ 338.196936][ T5605] ? bt_accept_unlink+0x61/0x2f0 [ 338.196961][ T5605] bt_accept_unlink+0x7d/0x2f0 [ 338.196985][ T5605] ? bt_accept_unlink+0x61/0x2f0 [ 338.197017][ T5605] l2cap_sock_teardown_cb+0x17e/0x490 [ 338.197054][ T5605] l2cap_chan_del+0x98/0x600 [ 338.197089][ T5605] l2cap_conn_del+0x2f2/0x520 [ 338.197120][ T5605] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 338.197150][ T5605] hci_conn_hash_flush+0x105/0x260 [ 338.197183][ T5605] hci_dev_close_sync+0x7fc/0x10a0 [ 338.197216][ T5605] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 338.197244][ T5605] ? lockdep_hardirqs_on+0x7a/0x110 [ 338.197265][ T5605] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 338.197288][ T5605] ? mutex_lock_nested+0x152/0x1d0 [ 338.197315][ T5605] ? hci_error_reset+0x11f/0x4c0 [ 338.197351][ T5605] hci_error_reset+0x127/0x4c0 [ 338.197386][ T5605] ? process_one_work+0x7fd/0x1480 [ 338.197409][ T5605] process_one_work+0xaaf/0x1480 [ 338.197432][ T5605] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 338.197473][ T5605] ? __pfx_process_one_work+0x10/0x10 [ 338.197495][ T5605] ? do_raw_spin_lock+0x12b/0x2f0 [ 338.197530][ T5605] ? assign_work+0x3cf/0x5d0 [ 338.197555][ T5605] worker_thread+0xb05/0x10d0 [ 338.197592][ T5605] kthread+0x388/0x470 [ 338.197621][ T5605] ? __pfx_worker_thread+0x10/0x10 [ 338.197645][ T5605] ? __pfx_kthread+0x10/0x10 [ 338.197675][ T5605] ret_from_fork+0x514/0xb70 [ 338.197707][ T5605] ? __pfx_ret_from_fork+0x10/0x10 [ 338.197744][ T5605] ? __switch_to+0xc89/0x1420 [ 338.197772][ T5605] ? __pfx_kthread+0x10/0x10 [ 338.197803][ T5605] ret_from_fork_asm+0x1a/0x30 [ 338.197841][ T5605] [ 338.198449][ T5605] Kernel Offset: disabled