last executing test programs: 6.16611317s ago: executing program 2 (id=3763): unshare(0x20000400) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40085507, &(0x7f00000000c0)=0x18) 5.449866805s ago: executing program 0 (id=3769): syz_clone(0x0, &(0x7f00000002c0)="053bcd6833a0cfacc4e607b2d252eff3536e121a95e8d93b379865", 0x1b, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000005c0)=0x9, 0xfc17) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'bridge_slave_1\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05030500d3fc030000004788800509101128", 0x100f, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 5.197920985s ago: executing program 2 (id=3774): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x0) 5.192548335s ago: executing program 1 (id=3775): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) 5.058061364s ago: executing program 2 (id=3777): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x200000, 0xf000, 0x4, 0x9, 0xfd, 0xe4, 0x40, 0x8, 0x0, 0x2b, 0x12, 0x7}, {0x200000, 0x10000, 0x3, 0x0, 0x40, 0x5, 0x7d, 0x6, 0x5, 0x3, 0x3, 0xb5}, {0xeeef0000, 0xf000, 0x0, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa8, 0x4, 0x4}, {0x80a0000, 0x80a0000, 0xf, 0x6, 0x4, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0x10000, 0xe000, 0x15, 0x3, 0x3, 0x6, 0xab, 0x7f, 0x7, 0x2, 0xdb}, {0x1000, 0x100000, 0xc, 0x7, 0xb1, 0x8, 0x21, 0x81, 0x80, 0x0, 0x1}, {0x3000, 0x80a0000, 0x4, 0x1, 0x2, 0x1, 0xb, 0x3, 0x5, 0x81, 0x1, 0x70}, {0x100000, 0x1000, 0x9, 0x5, 0xf, 0x7, 0xc, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0x0, 0x1000}, {0x2000, 0x5}, 0x80000031, 0x0, 0x8080000, 0x2024, 0x3, 0x500, 0x3000, [0xf90000000000, 0x4, 0x80, 0xfff]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.057785901s ago: executing program 0 (id=3778): openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) recvfrom$packet(r1, 0x0, 0x0, 0x40000002, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 4.729738129s ago: executing program 1 (id=3779): r0 = socket$packet(0x11, 0x3, 0x300) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x1}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000005300)=[{0x28, 0x0, 0xfb, 0xfffff034}, {0x80000006, 0x66, 0x0, 0x30}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfb3, @loopback, 0x2000003}, 0x1c) 3.984014503s ago: executing program 1 (id=3780): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 3.834021185s ago: executing program 2 (id=3781): r0 = eventfd2(0x0, 0x80000) ppoll(&(0x7f0000000140)=[{r0, 0x1}, {r0, 0x221}], 0x2, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000180)="889bd933e35dfc63", 0x8}], 0x1) 3.686751503s ago: executing program 2 (id=3782): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x181403, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000000)={0x9f63422128910807, 0x0, {[0x2c, 0xfffeffffff7fff00, 0x80000001, 0x5, 0x3, 0x1000010, 0x9, 0x7fff]}}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="66baf80cb8adc5648e48b89ab6a3fd000000000f23d80f21f835400000900f23f86dbafc0cecb972000040b804000000ba000000000f30b99a020000b800000000430f01c20f30c744240000400000c7442402dfc50000c7442406000000000f011c242642fec719c4c2590df80f38f044b75a0f07d9c9b9800000c0ae2d6666000400000f30", 0x86}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.278039281s ago: executing program 3 (id=3784): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x4000, &(0x7f0000000c40)=@qipcrtr={0x2a, 0x1, 0x8000}, 0x80) 3.122916849s ago: executing program 3 (id=3785): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$inet6_icmp(0xa, 0x2, 0x3a) capset(&(0x7f0000000340)={0x20080522}, &(0x7f00000003c0)={0x0, 0x0, 0x5f22, 0x0, 0x0, 0x3}) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) syz_usb_connect$uac1(0x3, 0xa7, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002000000206b1d0101400001020301090295000301a0a0090904000000010100000a2401900c020201020c240202060203840c0008120daa471fcfda0a0007000500190c240803090034c5e5eb68a3082405010201013f0924030201030301"], &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0}) 2.616974075s ago: executing program 0 (id=3786): syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100207010310b8bdfff3c2fff802030109021b"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x1ff, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0x23ad697ddad057f0}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.438019365s ago: executing program 1 (id=3787): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000040)=0xc) setreuid(r1, r3) 2.437727931s ago: executing program 2 (id=3788): r0 = socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000040)=[{&(0x7f00000001c0)="d6", 0x1}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000500)=""/109, 0x6d}], 0x1, &(0x7f00000006c0)=""/217, 0xd9}, 0x5}, {{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000880)=""/208, 0xd0}], 0x1}, 0x3673}], 0x2, 0x2061, 0x0) 1.897324452s ago: executing program 1 (id=3789): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) lseek(r0, 0x2000, 0x0) 1.576589461s ago: executing program 3 (id=3790): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0xe}, 0x1c) listen(r0, 0x204) 1.272663513s ago: executing program 3 (id=3792): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) read$ptp(r2, 0x0, 0x0) 1.063400222s ago: executing program 0 (id=3793): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) sendto(r0, 0x0, 0x0, 0x8001, 0x0, 0x0) 754.934165ms ago: executing program 0 (id=3794): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x803, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x8000000000000240) 673.741184ms ago: executing program 3 (id=3795): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@redirect_dir_nofollow}, {@metacopy_on}]}) 327.684095ms ago: executing program 3 (id=3796): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x1ff, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 204.465659ms ago: executing program 0 (id=3797): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bind$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) 0s ago: executing program 1 (id=3798): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$inet6_icmp(0xa, 0x2, 0x3a) capset(&(0x7f0000000340)={0x20080522}, &(0x7f00000003c0)={0x0, 0x0, 0x5f22, 0x0, 0x0, 0x3}) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) syz_usb_connect$uac1(0x3, 0xa7, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002000000206b1d0101400001020301090295000301a0a0090904000000010100000a2401900c020201020c240202060203840c0008120daa471fcfda0a0007000500190c240803090034c5e5eb68a3082405010201013f0924030201030301"], &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): ummy_hcd [ 481.524536][ T5703] usb usb3-port1: unable to enumerate USB device [ 481.895368][ T5723] uvcvideo 1-1:4.147: Found multiple Units with ID 6 [ 481.897711][ T5723] uvcvideo 1-1:4.147: Found UVC 0.02 device syz (04f2:b746) [ 481.897901][ T5723] uvcvideo 1-1:4.147: No valid video chain found. [ 481.912060][ T5723] usb 1-1: USB disconnect, device number 106 [ 482.839441][ T5723] usb 2-1: USB disconnect, device number 98 [ 483.666374][ T5714] usb 2-1: new low-speed USB device number 99 using dummy_hcd [ 483.837033][ T5714] usb 2-1: Invalid ep0 maxpacket: 16 [ 483.997780][ T5714] usb 2-1: new low-speed USB device number 100 using dummy_hcd [ 484.189724][ T5714] usb 2-1: Invalid ep0 maxpacket: 16 [ 484.190108][ T5714] usb usb2-port1: attempt power cycle [ 484.553360][ T5714] usb 2-1: new low-speed USB device number 101 using dummy_hcd [ 484.575367][ T5714] usb 2-1: Invalid ep0 maxpacket: 16 [ 484.724653][ T5714] usb 2-1: new low-speed USB device number 102 using dummy_hcd [ 484.746434][ T5714] usb 2-1: Invalid ep0 maxpacket: 16 [ 484.746734][ T5714] usb usb2-port1: unable to enumerate USB device [ 484.766612][ T37] audit: type=1326 audit(2000000016.004:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14805 comm="syz.2.3313" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd775b5ce59 code=0x7fc00000 [ 484.824043][ T5621] Bluetooth: hci3: unexpected event for opcode 0x040e [ 484.863970][ T10] usb 4-1: device descriptor read/64, error -71 [ 485.121069][ T10] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 485.280170][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 485.286442][ T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 126, changing to 7 [ 485.288762][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0023, bcdDevice= 0.40 [ 485.288792][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.288813][ T10] usb 4-1: Product: ࠧ [ 485.288826][ T10] usb 4-1: Manufacturer: 甝왑쳩㬡ଓ䗍䤱柤쪔⭲塾䌦粹듯꠷씪㾺潿嶃슫辔通䚽規桙࿓㝲ॸ [ 485.288839][ T10] usb 4-1: SerialNumber: syz [ 485.365764][ T5843] usb 3-1: new full-speed USB device number 122 using dummy_hcd [ 485.527235][ T5786] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 485.541027][ T5843] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.541054][ T5843] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 485.542195][ T5843] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 485.546294][ T5843] usb 3-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 485.546325][ T5843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.546405][ T5843] usb 3-1: Product: syz [ 485.546420][ T5843] usb 3-1: Manufacturer: syz [ 485.546435][ T5843] usb 3-1: SerialNumber: syz [ 485.561335][ T5843] usb 3-1: config 0 descriptor?? [ 485.659359][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 485.660089][ T10] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 485.684220][ T10] usb 4-1: USB disconnect, device number 104 [ 485.686391][ T5786] usb 1-1: Using ep0 maxpacket: 32 [ 485.691081][ T5786] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.699588][ T5786] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 485.700837][ T5786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.700864][ T5786] usb 1-1: Product: syz [ 485.700879][ T5786] usb 1-1: Manufacturer: syz [ 485.700893][ T5786] usb 1-1: SerialNumber: syz [ 485.747360][ T5786] usb 1-1: config 0 descriptor?? [ 485.840153][ T5786] cdc_ether 1-1:0.0: Descriptor too short [ 485.845160][ T5786] usb 1-1: unsupported MDLM descriptors [ 486.075156][ T5843] uvcvideo 3-1:0.0: Found UVC 34.00 device syz (8086:0b5b) [ 486.075194][ T5843] uvcvideo 3-1:0.0: No valid video chain found. [ 486.084865][ T5843] usb 3-1: USB disconnect, device number 122 [ 486.262411][ T10] usb 1-1: USB disconnect, device number 107 [ 487.252108][T14876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 487.298590][T14876] sg_write: data in/out 1028485/136 bytes for SCSI command 0x0-- guessing data in; [ 487.298590][T14876] program syz.0.3331 not setting count and/or reply_len properly [ 487.546647][ T10] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 487.659109][T14897] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3336'. [ 487.686954][ T10] usb 4-1: device descriptor read/64, error -71 [ 487.727116][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803f836400: rx timeout, send abort [ 487.942150][ T10] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 488.083327][ T10] usb 4-1: device descriptor read/64, error -71 [ 488.199050][ T10] usb usb4-port1: attempt power cycle [ 488.261485][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803f837000: rx timeout, send abort [ 488.265046][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803f836400: abort rx timeout. Force session deactivation [ 488.365694][T14912] FAULT_INJECTION: forcing a failure. [ 488.365694][T14912] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 488.365731][T14912] CPU: 1 UID: 0 PID: 14912 Comm: syz.0.3341 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 488.365757][T14912] Tainted: [L]=SOFTLOCKUP [ 488.365764][T14912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 488.365775][T14912] Call Trace: [ 488.365783][T14912] [ 488.365791][T14912] dump_stack_lvl+0xe8/0x150 [ 488.365819][T14912] should_fail_ex+0x46b/0x600 [ 488.365848][T14912] _copy_from_user+0x2d/0xb0 [ 488.365869][T14912] memdup_user+0x5e/0xd0 [ 488.365892][T14912] security_setselfattr+0x8d/0x830 [ 488.365915][T14912] __x64_sys_lsm_set_self_attr+0xf3/0x130 [ 488.365943][T14912] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.365963][T14912] do_syscall_64+0x174/0x580 [ 488.365985][T14912] ? trace_irq_disable+0x3b/0x140 [ 488.366007][T14912] ? clear_bhb_loop+0x40/0x90 [ 488.366027][T14912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.366045][T14912] RIP: 0033:0x7fd24ecbce59 [ 488.366062][T14912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.366076][T14912] RSP: 002b:00007fd24cf0e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001cc [ 488.366095][T14912] RAX: ffffffffffffffda RBX: 00007fd24ef35fa0 RCX: 00007fd24ecbce59 [ 488.366108][T14912] RDX: 0000000000000020 RSI: 0000200000000000 RDI: 0000000000000064 [ 488.366120][T14912] RBP: 00007fd24cf0e090 R08: 0000000000000000 R09: 0000000000000000 [ 488.366144][T14912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 488.366155][T14912] R13: 00007fd24ef36038 R14: 00007fd24ef35fa0 R15: 00007ffdbef6ba68 [ 488.366185][T14912] [ 488.488384][ T5723] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 488.583555][ T10] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 488.613319][ T10] usb 4-1: device descriptor read/8, error -71 [ 488.658379][ T5723] usb 2-1: Using ep0 maxpacket: 8 [ 488.660396][ T5723] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 488.660424][ T5723] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 488.660450][ T5723] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 488.660475][ T5723] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 488.660515][ T5723] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 488.660537][ T5723] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.796080][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803f837000: abort rx timeout. Force session deactivation [ 488.861710][ T10] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 488.884410][ T10] usb 4-1: device descriptor read/8, error -71 [ 488.892184][ T5723] usb 2-1: GET_CAPABILITIES returned 0 [ 488.892233][ T5723] usbtmc 2-1:16.0: can't read capabilities [ 489.002757][ T10] usb usb4-port1: unable to enumerate USB device [ 489.086122][ T5831] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 489.114348][ T10] usb 2-1: USB disconnect, device number 103 [ 489.246428][ T5831] usb 3-1: Using ep0 maxpacket: 8 [ 489.248591][ T5831] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 489.248640][ T5831] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 489.248665][ T5831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.253773][ T5831] usb 3-1: config 0 descriptor?? [ 489.580604][T14931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3346'. [ 489.590995][ T5831] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 490.012952][T14941] sg_write: data in/out 420828/106 bytes for SCSI command 0x0-- guessing data in; [ 490.012952][T14941] program syz.0.3353 not setting count and/or reply_len properly [ 490.030917][ T5831] usb 3-1: USB disconnect, device number 123 [ 490.336878][ T10] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 490.499395][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 490.499424][ T10] usb 2-1: config 0 has no interfaces? [ 490.501043][ T10] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 490.501072][ T10] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 490.501093][ T10] usb 2-1: Product: syz [ 490.501104][ T10] usb 2-1: Manufacturer: syz [ 490.504649][ T10] usb 2-1: config 0 descriptor?? [ 490.732128][ T5786] usb 2-1: USB disconnect, device number 104 [ 490.817988][ T5723] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 490.914138][ T10] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 490.992498][ T5723] usb 4-1: unable to get BOS descriptor or descriptor too short [ 490.993815][ T5723] usb 4-1: config 1 has an invalid descriptor of length 251, skipping remainder of the config [ 490.993842][ T5723] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 490.993892][ T5723] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 490.993914][ T5723] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 490.993940][ T5723] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 62, changing to 7 [ 490.993954][ T5723] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 26208, setting to 1024 [ 490.993968][ T5723] usb 4-1: config 1 interface 1 has no altsetting 0 [ 490.996975][ T5723] usb 4-1: string descriptor 0 read error: -22 [ 490.997093][ T5723] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 490.997106][ T5723] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.092569][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 491.107767][ T10] usb 1-1: config 114 has an invalid interface number: 240 but max is 0 [ 491.107796][ T10] usb 1-1: config 114 has no interface number 0 [ 491.107837][ T10] usb 1-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 491.107862][ T10] usb 1-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 491.107886][ T10] usb 1-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 491.107913][ T10] usb 1-1: config 114 interface 240 has no altsetting 0 [ 491.112936][ T10] usb 1-1: string descriptor 0 read error: -22 [ 491.113066][ T10] usb 1-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 491.113091][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.126295][T14953] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 491.126486][T14953] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 491.135279][ T10] ir_usb 1-1:114.240: IR Dongle converter detected [ 491.139710][ T5831] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 491.240263][ T5723] usb 4-1: incorrect wMaxPacketSize 0x400 for BADD profile [ 491.313484][ T5831] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 491.313900][ T5831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.313922][ T5831] usb 3-1: Product: syz [ 491.313937][ T5831] usb 3-1: Manufacturer: syz [ 491.313951][ T5831] usb 3-1: SerialNumber: syz [ 491.360764][ T10] usb 1-1: IRDA class descriptor not found, device not bound [ 491.444196][ T5831] usb 3-1: config 0 descriptor?? [ 491.467553][ T5723] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 491.484071][ T10] usb 1-1: USB disconnect, device number 108 [ 491.533460][ T5693] udevd[5693]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 491.729348][ T5831] usb 3-1: USB disconnect, device number 124 [ 491.936693][T14967] sg_write: data in/out 420828/106 bytes for SCSI command 0x0-- guessing data in; [ 491.936693][T14967] program syz.0.3364 not setting count and/or reply_len properly [ 491.999058][T14970] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 492.313252][T14985] FAULT_INJECTION: forcing a failure. [ 492.313252][T14985] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 492.313292][T14985] CPU: 1 UID: 0 PID: 14985 Comm: syz.1.3369 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 492.313319][T14985] Tainted: [L]=SOFTLOCKUP [ 492.313326][T14985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 492.313337][T14985] Call Trace: [ 492.313346][T14985] [ 492.313355][T14985] dump_stack_lvl+0xe8/0x150 [ 492.313386][T14985] should_fail_ex+0x46b/0x600 [ 492.313419][T14985] _copy_from_user+0x2d/0xb0 [ 492.313442][T14985] __mfill_atomic_pte+0x1ca/0x600 [ 492.313479][T14985] mfill_atomic_copy+0x49e/0x15b0 [ 492.313513][T14985] ? __might_fault+0xaf/0x130 [ 492.313535][T14985] ? __might_fault+0xaf/0x130 [ 492.313564][T14985] ? __pfx_mfill_atomic_copy+0x10/0x10 [ 492.313599][T14985] userfaultfd_ioctl+0x257a/0x86c0 [ 492.313633][T14985] ? stack_depot_save_flags+0x33/0x810 [ 492.313666][T14985] ? kasan_save_track+0x4f/0x80 [ 492.313684][T14985] ? kasan_save_track+0x3e/0x80 [ 492.313710][T14985] ? kasan_save_free_info+0x46/0x50 [ 492.313735][T14985] ? __kasan_slab_free+0x5c/0x80 [ 492.313753][T14985] ? kfree+0x1c5/0x6c0 [ 492.313779][T14985] ? tomoyo_path_number_perm+0x501/0x630 [ 492.313806][T14985] ? security_file_ioctl+0xc3/0x2a0 [ 492.313831][T14985] ? __se_sys_ioctl+0x47/0x170 [ 492.313855][T14985] ? do_syscall_64+0x174/0x580 [ 492.313878][T14985] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.313901][T14985] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 492.313956][T14985] ? kasan_quarantine_put+0xbb/0x1f0 [ 492.313992][T14985] ? tomoyo_path_number_perm+0x219/0x630 [ 492.314026][T14985] ? do_vfs_ioctl+0x117b/0x1540 [ 492.314052][T14985] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 492.314109][T14985] ? __fget_files+0x2a/0x420 [ 492.314132][T14985] ? __fget_files+0x2a/0x420 [ 492.314154][T14985] ? __fget_files+0x3a6/0x420 [ 492.314172][T14985] ? __fget_files+0x2a/0x420 [ 492.314195][T14985] ? bpf_lsm_file_ioctl+0x9/0x20 [ 492.314219][T14985] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 492.314244][T14985] __se_sys_ioctl+0xff/0x170 [ 492.314269][T14985] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.314290][T14985] do_syscall_64+0x174/0x580 [ 492.314314][T14985] ? trace_irq_disable+0x3b/0x140 [ 492.314339][T14985] ? clear_bhb_loop+0x40/0x90 [ 492.314363][T14985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.314383][T14985] RIP: 0033:0x7f7109f8ce59 [ 492.314402][T14985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.314418][T14985] RSP: 002b:00007f71081de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 492.314437][T14985] RAX: ffffffffffffffda RBX: 00007f710a205fa0 RCX: 00007f7109f8ce59 [ 492.314449][T14985] RDX: 0000200000000000 RSI: 00000000c028aa03 RDI: 0000000000000003 [ 492.314462][T14985] RBP: 00007f71081de090 R08: 0000000000000000 R09: 0000000000000000 [ 492.314474][T14985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 492.314484][T14985] R13: 00007f710a206038 R14: 00007f710a205fa0 R15: 00007fff1859ae78 [ 492.314512][T14985] [ 492.924138][T14996] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 492.977621][ T5723] usb 3-1: new full-speed USB device number 125 using dummy_hcd [ 493.140898][T14996] kvm: pic: level sensitive irq not supported [ 493.141163][T14996] kvm: pic: non byte read [ 493.141532][T14996] kvm: pic: level sensitive irq not supported [ 493.141589][T14996] kvm: pic: non byte read [ 493.141827][T14996] kvm: pic: level sensitive irq not supported [ 493.141959][T14996] kvm: pic: non byte read [ 493.192881][ T5723] usb 3-1: unable to get BOS descriptor or descriptor too short [ 493.193682][ T5723] usb 3-1: not running at top speed; connect to a high speed hub [ 493.195484][ T5723] usb 3-1: config 1 has an invalid interface number: 174 but max is 0 [ 493.195509][ T5723] usb 3-1: config 1 has no interface number 0 [ 493.195546][ T5723] usb 3-1: config 1 interface 174 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 493.195571][ T5723] usb 3-1: config 1 interface 174 altsetting 15 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 493.195596][ T5723] usb 3-1: config 1 interface 174 altsetting 15 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 493.196034][ T5723] usb 3-1: config 1 interface 174 altsetting 15 endpoint 0x81 has invalid maxpacket 48940, setting to 64 [ 493.196064][ T5723] usb 3-1: config 1 interface 174 altsetting 15 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 493.196089][ T5723] usb 3-1: config 1 interface 174 has no altsetting 0 [ 493.200147][ T5723] usb 3-1: string descriptor 0 read error: -22 [ 493.200364][ T5723] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0700, bcdDevice=ab.98 [ 493.200386][ T5723] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.331160][T14994] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 493.331674][T14994] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 493.338267][ T5723] option 3-1:1.174: GSM modem (1-port) converter detected [ 493.577768][ T5831] usb 3-1: USB disconnect, device number 125 [ 493.608471][ T5831] option 3-1:1.174: device disconnected [ 493.807851][ T5723] usb 4-1: USB disconnect, device number 109 [ 494.483735][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805aed8800: rx timeout, send abort [ 494.634651][ T5831] usb 4-1: new low-speed USB device number 110 using dummy_hcd [ 494.808287][ T5831] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 494.808329][ T5831] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 494.808353][ T5831] usb 4-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 494.808367][ T5831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.811610][ T5831] usb 4-1: config 0 descriptor?? [ 495.018348][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805aed8800: abort rx timeout. Force session deactivation [ 495.018475][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880590bbc00: rx timeout, send abort [ 495.090619][T15016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.091908][T15016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.169140][ T10] usb 1-1: new full-speed USB device number 109 using dummy_hcd [ 495.275963][ T5621] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 495.275977][ T4925] Bluetooth: hci4: command 0x1003 tx timeout [ 495.348525][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 495.349085][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 495.350368][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 495.350391][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 495.390711][ T10] usb 1-1: string descriptor 0 read error: -22 [ 495.390815][ T10] usb 1-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 495.390828][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.467592][ T5831] aquacomputer_d5next 0003:0C70:F0B6.0013: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.3-1/input0 [ 495.553064][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880590bbc00: abort rx timeout. Force session deactivation [ 495.788216][ T10] usb 1-1: USB disconnect, device number 109 [ 495.838355][ T5831] usb 4-1: USB disconnect, device number 110 [ 497.519851][T15081] qnx4: no qnx4 filesystem (no root dir). [ 497.723987][ T5715] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 497.762043][T15088] 9p: Unknown uid 00000000004294967295 [ 497.873954][T15100] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 497.896299][ T5715] usb 3-1: Using ep0 maxpacket: 8 [ 497.901118][ T5715] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 497.901172][ T5715] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 497.901196][ T5715] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 497.901222][ T5715] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 497.901247][ T5715] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 497.901287][ T5715] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 497.901310][ T5715] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.264444][ T5715] usb 3-1: GET_CAPABILITIES returned 0 [ 498.264492][ T5715] usbtmc 3-1:16.0: can't read capabilities [ 498.344122][ T5831] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 498.493394][T15108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.494155][T15108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.558113][ T5831] usb 4-1: Using ep0 maxpacket: 16 [ 498.566035][ T5831] usb 4-1: unable to get BOS descriptor or descriptor too short [ 498.577428][ T5831] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice= 0.40 [ 498.577457][ T5831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.578094][ T5831] usb 4-1: Product: syz [ 498.578111][ T5831] usb 4-1: Manufacturer: syz [ 498.578127][ T5831] usb 4-1: SerialNumber: syz [ 498.939338][T15129] program syz.3.3404 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 499.188363][ T5831] usb 4-1: USB disconnect, device number 111 [ 499.482797][ T5788] udevd[5788]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 499.629001][T15146] netlink: 'syz.0.3412': attribute type 10 has an invalid length. [ 499.662033][T15146] team0: Device dummy0 is up. Set it down before adding it as a team port [ 499.669746][ T5714] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 499.804886][ T5723] usb 3-1: USB disconnect, device number 126 [ 499.840785][ T5714] usb 2-1: Using ep0 maxpacket: 16 [ 499.844244][ T5714] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 499.844264][ T5714] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 499.844278][ T5714] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 499.844290][ T5714] usb 2-1: config 0 interface 0 has no altsetting 0 [ 499.849028][ T5714] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 499.849060][ T5714] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.849081][ T5714] usb 2-1: Product: syz [ 499.849096][ T5714] usb 2-1: Manufacturer: syz [ 499.849111][ T5714] usb 2-1: SerialNumber: syz [ 499.929125][ T5714] usb 2-1: config 0 descriptor?? [ 500.165581][ T5714] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input36 [ 500.168192][ T4961] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 500.247756][ T4961] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 500.290402][ T5801] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 500.311221][ T5831] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 500.332872][ T4961] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 500.363191][ T10] usb 2-1: USB disconnect, device number 105 [ 500.474306][ T5831] usb 1-1: Using ep0 maxpacket: 8 [ 500.488294][ T5831] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 500.490983][ T5831] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 500.491013][ T5831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.491024][ T5831] usb 1-1: Product: syz [ 500.491032][ T5831] usb 1-1: Manufacturer: syz [ 500.491040][ T5831] usb 1-1: SerialNumber: syz [ 500.493454][ T5714] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 500.556306][ T5831] ch9200 1-1:2.0: probe with driver ch9200 failed with error -22 [ 500.578598][ T6374] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 500.708956][ T5714] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.708986][ T5714] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.709009][ T5714] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 500.709031][ T5714] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.713378][ T5714] usb 4-1: config 0 descriptor?? [ 500.797625][ T5723] usb 1-1: USB disconnect, device number 110 [ 500.899261][ T5831] usb 3-1: new low-speed USB device number 127 using dummy_hcd [ 500.936088][T15158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.936769][T15158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.003563][T15166] binder: 15165:15166 ioctl c0046209 200000000000000 returned -22 [ 501.061739][ T5831] usb 3-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 501.061776][ T5831] usb 3-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 501.061804][ T5831] usb 3-1: config 0 interface 0 has no altsetting 0 [ 501.061837][ T5831] usb 3-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.00 [ 501.061860][ T5831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.067820][ T5831] usb 3-1: config 0 descriptor?? [ 501.068834][T15164] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 501.284010][ T10] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 501.376444][ T5714] usbhid 4-1:0.0: can't add hid device: -71 [ 501.376564][ T5714] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 501.396948][ T5714] usb 4-1: USB disconnect, device number 112 [ 501.423422][ T10] usb 2-1: device descriptor read/64, error -71 [ 501.672885][ T5831] usbhid 3-1:0.0: can't add hid device: -71 [ 501.673002][ T5831] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 501.679963][ T5831] usb 3-1: USB disconnect, device number 127 [ 501.694054][ T10] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 501.829298][ T10] usb 2-1: device descriptor read/64, error -71 [ 501.962274][ T10] usb usb2-port1: attempt power cycle [ 502.144634][T15180] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3425'. [ 502.279025][ T5714] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 502.309268][T15187] sg_write: data in/out 393056/136 bytes for SCSI command 0x0-- guessing data in; [ 502.309268][T15187] program syz.2.3428 not setting count and/or reply_len properly [ 502.331682][ T10] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 502.353824][ T10] usb 2-1: device descriptor read/8, error -71 [ 502.449379][ T5714] usb 1-1: Using ep0 maxpacket: 16 [ 502.452469][ T5714] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 502.452503][ T5714] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 502.454931][ T5714] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 502.454961][ T5714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.454983][ T5714] usb 1-1: Product: syz [ 502.454998][ T5714] usb 1-1: Manufacturer: syz [ 502.455013][ T5714] usb 1-1: SerialNumber: syz [ 502.513430][ T5715] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 502.527373][ T5714] usb 1-1: config 0 descriptor?? [ 502.533720][ T5714] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 502.533757][ T5714] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 502.609676][ T10] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 502.631811][ T10] usb 2-1: device descriptor read/8, error -71 [ 502.684471][ T5715] usb 4-1: Using ep0 maxpacket: 32 [ 502.689065][ T5715] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 502.689094][ T5715] usb 4-1: config 0 has no interface number 0 [ 502.689210][ T5715] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 502.689240][ T5715] usb 4-1: config 0 interface 85 has no altsetting 0 [ 502.691827][ T5715] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 502.691857][ T5715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.691937][ T5715] usb 4-1: Product: syz [ 502.691952][ T5715] usb 4-1: Manufacturer: syz [ 502.691967][ T5715] usb 4-1: SerialNumber: syz [ 502.749089][ T10] usb usb2-port1: unable to enumerate USB device [ 502.813357][ T5715] usb 4-1: config 0 descriptor?? [ 502.987342][ T5714] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 502.990425][ T5714] em28xx 1-1:0.0: Config register raw data: 0x41 [ 502.992656][T15176] sg_write: data in/out 2048/136 bytes for SCSI command 0x0-- guessing data in; [ 502.992656][T15176] program syz.0.3423 not setting count and/or reply_len properly [ 503.047675][ T5714] usb 1-1: USB disconnect, device number 111 [ 503.049625][ T10] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 503.083738][ T5714] em28xx 1-1:0.0: Disconnecting em28xx [ 503.139754][ T5714] em28xx 1-1:0.0: Freeing device [ 503.227924][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 503.227977][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 503.228011][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 503.228038][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 503.228060][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 503.247087][ T10] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 503.247118][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 503.247139][ T10] usb 3-1: Product: syz [ 503.247153][ T10] usb 3-1: Manufacturer: syz [ 503.247168][ T10] usb 3-1: SerialNumber: syz [ 503.253290][ T10] usb 3-1: config 0 descriptor?? [ 503.461126][ T5715] appletouch 4-1:0.85: Geyser mode initialized. [ 503.473650][ T5715] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input37 [ 503.499219][ T10] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 503.499244][ T10] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 503.717996][T15192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.719359][T15192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.742200][T15202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.747376][ T10] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 503.747400][ T10] radio-si470x 3-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 503.789380][ T10] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 503.791226][T15202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.835728][ T10] usb 3-1: USB disconnect, device number 2 [ 503.906441][ T5843] usb 4-1: USB disconnect, device number 113 [ 504.067213][T15206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3433'. [ 504.098830][ T5843] appletouch 4-1:0.85: input: appletouch disconnected [ 504.519468][T15218] Invalid argument reading file caps for ./file0 [ 504.759348][T15234] sg_write: data in/out 393056/136 bytes for SCSI command 0x0-- guessing data in; [ 504.759348][T15234] program syz.3.3442 not setting count and/or reply_len properly [ 504.859394][T15236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3443'. [ 505.089996][T15239] vxcan1: tx address claim with dest, not broadcast [ 506.189481][ T4925] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 506.273617][ T4925] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 506.313887][ T4925] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 506.331543][ T4925] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 506.336757][ T4925] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 506.859354][T15272] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3455'. [ 506.986774][T15278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3454'. [ 507.406505][T15265] lo speed is unknown, defaulting to 1000 [ 507.752663][ T5714] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 507.863426][T15276] [U] ^C [ 507.926425][ T5714] usb 3-1: unable to get BOS descriptor or descriptor too short [ 507.927935][ T5714] usb 3-1: config 13 has an invalid interface number: 50 but max is 3 [ 507.927962][ T5714] usb 3-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 507.927983][ T5714] usb 3-1: config 13 has 1 interface, different from the descriptor's value: 4 [ 507.928005][ T5714] usb 3-1: config 13 has no interface number 0 [ 507.928050][ T5714] usb 3-1: config 13 interface 50 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 507.928086][ T5714] usb 3-1: config 13 interface 50 has no altsetting 0 [ 507.985276][ T5714] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=a9.e8 [ 507.985310][ T5714] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.985331][ T5714] usb 3-1: Product: syz [ 507.985346][ T5714] usb 3-1: Manufacturer: syz [ 507.985361][ T5714] usb 3-1: SerialNumber: syz [ 508.075518][T15304] Invalid ELF header type: 2 != 1 [ 508.169747][T15308] Invalid ELF header type: 2 != 1 [ 508.621107][ T5621] Bluetooth: hci4: command tx timeout [ 508.747812][ T5714] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 508.751698][ T5714] usb 3-1: USB disconnect, device number 3 [ 508.796233][ T6111] usb 3-1: Failed to submit usb control message: -19 [ 508.796272][ T6111] usb 3-1: unable to send the bmi data to the device: -19 [ 508.796289][ T6111] usb 3-1: unable to get target info from device [ 508.796315][ T6111] usb 3-1: could not get target info (-19) [ 508.796737][ T6111] usb 3-1: could not probe fw (-19) [ 509.103070][T15265] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.103340][T15265] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.106357][T15265] bridge_slave_0: entered allmulticast mode [ 509.124216][T15265] bridge_slave_0: entered promiscuous mode [ 509.290137][T15265] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.290423][T15265] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.290691][T15265] bridge_slave_1: entered allmulticast mode [ 509.294469][T15265] bridge_slave_1: entered promiscuous mode [ 509.418697][T15265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.447245][T15265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.481164][T15327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3467'. [ 509.936646][T15338] nfs: Unknown parameter 'workdir' [ 510.061926][ T10] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 510.090234][T15265] team0: Port device team_slave_0 added [ 510.101644][T15265] team0: Port device team_slave_1 added [ 510.151810][T15265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 510.151828][T15265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 510.151853][T15265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 510.157057][T15265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 510.157074][T15265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 510.157099][T15265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 510.239329][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 510.261631][ T10] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 510.261660][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.261770][ T10] usb 2-1: Product: syz [ 510.261785][ T10] usb 2-1: Manufacturer: syz [ 510.261800][ T10] usb 2-1: SerialNumber: syz [ 510.288846][ T10] usb 2-1: config 0 descriptor?? [ 510.304006][ T10] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 510.304106][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 510.304125][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 510.304240][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 510.304255][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 510.321809][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 510.323172][ T10] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 510.323225][ T10] usb 2-1: media controller created [ 510.372542][T15340] binder_alloc: 15339: binder_alloc_buf, no vma [ 510.424405][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 510.439291][T15342] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 510.458893][ T10] usb 2-1: selecting invalid altsetting 3 [ 510.458915][ T10] ttusb2: set interface to alts=3 failed [ 510.471791][T15342] Error validating options; rc = [-22] [ 510.498581][ T10] DVB: Unable to find symbol tda10086_attach() [ 510.498594][ T10] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 510.499338][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 510.499352][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 510.499425][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 510.499433][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 510.499471][ T10] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 510.697783][T15344] ttusb2: i2c wr len=104 too high [ 510.768673][ T5715] usb 2-1: USB disconnect, device number 110 [ 510.842454][ T5621] Bluetooth: hci4: command tx timeout [ 510.858590][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 510.858685][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 510.905132][ T5715] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 511.146483][T15354] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3475'. [ 511.267118][ T6377] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.370113][T15360] genirq: Flags mismatch irq 4. 00202000 (pcl812) vs. 00202080 (ttyS0) [ 511.457823][T15364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3479'. [ 511.460979][T15265] hsr_slave_0: entered promiscuous mode [ 511.464284][T15265] hsr_slave_1: entered promiscuous mode [ 511.466480][T15265] debugfs: 'hsr0' already exists in 'hsr' [ 511.466506][T15265] Cannot create hsr debugfs directory [ 511.466734][T15358] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3477'. [ 511.837014][ T5714] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 512.008087][ T5715] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 512.031623][ T5714] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 512.031677][ T5714] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 512.031691][ T5714] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.036681][ T5714] usb 2-1: config 0 descriptor?? [ 512.055450][ T6377] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.097635][ T5714] pwc: Askey VC010 type 2 USB webcam detected. [ 512.189561][ T5715] usb 3-1: Using ep0 maxpacket: 32 [ 512.193712][ T5715] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 512.193744][ T5715] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.234638][ T5715] usb 3-1: config 0 descriptor?? [ 512.500203][ T5715] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 512.531225][ T5714] pwc: recv_control_msg error -32 req 02 val 2b00 [ 512.539571][ T5714] pwc: recv_control_msg error -32 req 02 val 2700 [ 512.540213][ T5714] pwc: recv_control_msg error -32 req 02 val 2c00 [ 512.540894][ T5714] pwc: recv_control_msg error -32 req 04 val 1000 [ 512.541579][ T5714] pwc: recv_control_msg error -32 req 04 val 1300 [ 512.567393][ T6377] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.578988][ T5714] pwc: recv_control_msg error -32 req 04 val 1400 [ 512.582395][ T5714] pwc: recv_control_msg error -32 req 02 val 2000 [ 512.613471][ T5715] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 512.616765][ T5715] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 512.616873][ T5715] usb 3-1: media controller created [ 512.719266][ T5715] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 512.856741][T15372] binder: 15365:15372 ioctl 8983 200000000040 returned -22 [ 513.066236][ T5621] Bluetooth: hci4: command tx timeout [ 513.129279][ T6377] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.640388][T15374] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3483'. [ 513.775603][T15376] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3483'. [ 514.180962][T15385] overlay: Unknown parameter 'fsname' [ 514.356248][T15390] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 514.883937][ T5714] pwc: recv_control_msg error -71 req 04 val 1500 [ 514.884718][ T5714] pwc: recv_control_msg error -71 req 02 val 2500 [ 514.885267][ T5714] pwc: recv_control_msg error -71 req 02 val 2400 [ 514.885880][ T5714] pwc: recv_control_msg error -71 req 02 val 2600 [ 514.886411][ T5714] pwc: recv_control_msg error -71 req 02 val 2900 [ 514.886960][ T5714] pwc: recv_control_msg error -71 req 02 val 2800 [ 514.889800][ T5714] pwc: recv_control_msg error -71 req 04 val 1100 [ 514.890375][ T5714] pwc: recv_control_msg error -71 req 04 val 1200 [ 515.126228][ T5715] az6027: usb out operation failed. (-71) [ 515.130627][ T5715] az6027: usb out operation failed. (-71) [ 515.130645][ T5715] stb0899_attach: Driver disabled by Kconfig [ 515.130731][ T5715] az6027: no front-end attached [ 515.130731][ T5715] [ 515.155143][ T5715] az6027: usb out operation failed. (-71) [ 515.155164][ T5715] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 515.180993][ T5715] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input38 [ 515.286716][ T5715] dvb-usb: schedule remote query interval to 400 msecs. [ 515.286746][ T5715] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 515.291153][ T5621] Bluetooth: hci4: command tx timeout [ 515.365260][ T5715] usb 3-1: USB disconnect, device number 4 [ 515.400985][ T5714] pwc: Registered as video103. [ 515.433463][ T5714] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input39 [ 515.613775][ T5693] udevd[5693]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 515.615669][ T5693] udevd[5693]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 515.663330][T15416] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3491'. [ 515.689698][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1 [ 515.860877][ T5714] usb 2-1: USB disconnect, device number 111 [ 515.900092][ T6377] bond0: left allmulticast mode [ 515.900111][ T6377] @: left allmulticast mode [ 515.900133][ T6377] bond_slave_1: left allmulticast mode [ 516.103064][ T6377] bridge0: port 3(bond0) entered disabled state [ 516.273488][ T5715] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 516.318342][ T6377] bridge_slave_1: left allmulticast mode [ 516.318365][ T6377] bridge_slave_1: left promiscuous mode [ 516.318563][ T6377] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.627753][ T6377] bridge_slave_0: left allmulticast mode [ 516.627779][ T6377] bridge_slave_0: left promiscuous mode [ 516.627991][ T6377] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.722918][ T10] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 516.731804][T15426] sg_write: data in/out 443356/194 bytes for SCSI command 0x0-- guessing data in; [ 516.731804][T15426] program syz.2.3494 not setting count and/or reply_len properly [ 516.865353][T15432] sg_write: data in/out 443356/194 bytes for SCSI command 0x0-- guessing data in; [ 516.865353][T15432] program syz.2.3497 not setting count and/or reply_len properly [ 516.953006][ T10] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 516.953033][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.953045][ T10] usb 1-1: Product: syz [ 516.953053][ T10] usb 1-1: Manufacturer: syz [ 516.953061][ T10] usb 1-1: SerialNumber: syz [ 517.046344][ T10] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 517.168883][ T5831] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 517.514232][ T5621] Bluetooth: hci4: command tx timeout [ 518.014896][ C0] usb 1-1: ath9k_htc: invalid pkt_len (fdfc) [ 518.098495][T15441] overlayfs: failed to resolve './bus': -2 [ 518.374312][ T5831] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 518.378235][ T6377] bond0 (unregistering): (slave 1@): Releasing backup interface [ 518.682458][ T6377] @: left promiscuous mode [ 518.740112][ T5831] ath9k_htc: Failed to initialize the device [ 518.793622][ T6377] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 518.827769][ T5831] usb 1-1: ath9k_htc: USB layer deinitialized [ 518.881606][ T6377] bond_slave_1: left promiscuous mode [ 518.913825][ T6377] bond0 (unregistering): Released all slaves [ 519.345885][T15449] tipc: Started in network mode [ 519.345916][T15449] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 519.654192][T15449] tipc: Enabled bearer , priority 10 [ 519.944599][T15460] fuse: Bad value for 'fd' [ 520.539183][ T32] usb 1-1: USB disconnect, device number 112 [ 520.882145][ T5831] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 521.042536][ T5831] usb 3-1: Using ep0 maxpacket: 16 [ 521.044543][ T5831] usb 3-1: config 251 has an invalid interface number: 202 but max is 0 [ 521.044570][ T5831] usb 3-1: config 251 has no interface number 0 [ 521.044614][ T5831] usb 3-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 521.044629][ T5831] usb 3-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 521.044641][ T5831] usb 3-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 521.044656][ T5831] usb 3-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 521.044670][ T5831] usb 3-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 521.044684][ T5831] usb 3-1: config 251 interface 202 has no altsetting 0 [ 521.046800][ T5831] usb 3-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 521.046829][ T5831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.046850][ T5831] usb 3-1: Product: syz [ 521.046864][ T5831] usb 3-1: Manufacturer: syz [ 521.046875][ T5831] usb 3-1: SerialNumber: syz [ 521.051181][T15473] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 521.074568][ T10] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 521.138726][ T32] usb 2-1: new full-speed USB device number 112 using dummy_hcd [ 521.245711][ T10] usb 1-1: device descriptor read/64, error -71 [ 521.294727][ T5831] cxacru 3-1:251.202: send of cm 0x90 failed (-71) [ 521.294752][ T5831] cxacru 3-1:251.202: usbatm_usb_probe: invalid endpoint 02! [ 521.295076][ T5831] cxacru 3-1:251.202: probe with driver cxacru failed with error -22 [ 521.301668][ T5831] usb 3-1: USB disconnect, device number 5 [ 521.335601][ T5693] udevd[5693]: setting owner of /dev/bus/usb/003/005 to uid=0, gid=0 failed: No such file or directory [ 521.354498][ T32] usb 2-1: config 0 has an invalid interface number: 107 but max is 0 [ 521.354526][ T32] usb 2-1: config 0 has no interface number 0 [ 521.357930][ T5723] tipc: Node number set to 4269801488 [ 521.360326][ T32] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 521.372800][ T32] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 521.372830][ T32] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 521.372852][ T32] usb 2-1: Product: syz [ 521.372868][ T32] usb 2-1: Manufacturer: syz [ 521.372884][ T32] usb 2-1: SerialNumber: syz [ 521.378645][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2 [ 521.447992][ T32] usb 2-1: config 0 descriptor?? [ 521.502509][ T10] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 521.644080][ T10] usb 1-1: device descriptor read/64, error -71 [ 521.684795][ T32] keyspan 2-1:0.107: Keyspan 4 port adapter converter detected [ 521.685204][ T32] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 81 [ 521.692074][ T32] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 1 [ 521.805713][ T10] usb usb1-port1: attempt power cycle [ 521.816285][ T32] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 521.818742][ T32] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 2 [ 521.823187][ T32] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 521.828834][ T32] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 4 [ 521.861840][ T32] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 521.875516][ T32] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 6 [ 521.892303][ T32] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 521.919242][ T32] usb 2-1: USB disconnect, device number 112 [ 521.965255][ T32] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 521.987378][ T32] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 522.027272][ T32] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 522.033481][ T32] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 522.034550][ T32] keyspan 2-1:0.107: device disconnected [ 522.165192][ T10] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 522.187281][ T10] usb 1-1: device descriptor read/8, error -71 [ 522.456342][ T10] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 522.476855][ T10] usb 1-1: device descriptor read/8, error -71 [ 522.593434][ T10] usb usb1-port1: unable to enumerate USB device [ 522.824885][T15505] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 523.320261][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 523.497037][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 523.497071][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.497094][ T10] usb 3-1: Product: syz [ 523.497111][ T10] usb 3-1: Manufacturer: syz [ 523.497126][ T10] usb 3-1: SerialNumber: syz [ 523.967522][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 523.967581][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 524.100577][ T6377] hsr_slave_0: left promiscuous mode [ 524.143354][ T6377] hsr_slave_1: left promiscuous mode [ 524.147940][ T6377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 524.148210][ T6377] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 524.212408][ T6377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 524.212434][ T6377] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 524.239695][T15519] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3514'. [ 524.241803][T15520] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3514'. [ 524.326661][ T5786] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 524.450244][ T6377] veth1_vlan: left promiscuous mode [ 524.459782][T15530] FAULT_INJECTION: forcing a failure. [ 524.459782][T15530] name failslab, interval 1, probability 0, space 0, times 0 [ 524.459814][T15530] CPU: 1 UID: 0 PID: 15530 Comm: syz.0.3516 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 524.459835][T15530] Tainted: [L]=SOFTLOCKUP [ 524.459841][T15530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 524.459851][T15530] Call Trace: [ 524.459857][T15530] [ 524.459864][T15530] dump_stack_lvl+0xe8/0x150 [ 524.459889][T15530] should_fail_ex+0x46b/0x600 [ 524.459914][T15530] should_failslab+0xa8/0x100 [ 524.459933][T15530] kmem_cache_alloc_noprof+0xa4/0x6c0 [ 524.459957][T15530] ? vm_area_dup+0x2b/0x670 [ 524.459973][T15530] ? vm_area_dup+0x2b/0x670 [ 524.459993][T15530] vm_area_dup+0x2b/0x670 [ 524.460014][T15530] dup_mmap+0x8ba/0x1d70 [ 524.460050][T15530] ? __pfx_dup_mmap+0x10/0x10 [ 524.460068][T15530] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 524.460093][T15530] ? copy_mm+0x10f/0x480 [ 524.460118][T15530] ? copy_mm+0x10f/0x480 [ 524.460150][T15530] copy_mm+0x11a/0x480 [ 524.460172][T15530] copy_process+0x1e65/0x42e0 [ 524.460197][T15530] ? copy_process+0xd4e/0x42e0 [ 524.460232][T15530] ? __pfx_copy_process+0x10/0x10 [ 524.460262][T15530] kernel_clone+0x2d7/0x940 [ 524.460281][T15530] ? __pfx_kernel_clone+0x10/0x10 [ 524.460311][T15530] __se_sys_clone3+0x33c/0x360 [ 524.460340][T15530] ? __pfx___se_sys_clone3+0x10/0x10 [ 524.460381][T15530] ? __pfx_ksys_write+0x10/0x10 [ 524.460408][T15530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.460425][T15530] do_syscall_64+0x174/0x580 [ 524.460444][T15530] ? trace_irq_disable+0x3b/0x140 [ 524.460464][T15530] ? clear_bhb_loop+0x40/0x90 [ 524.460482][T15530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.460499][T15530] RIP: 0033:0x7fd24ecbce59 [ 524.460516][T15530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 524.460531][T15530] RSP: 002b:00007fd24cf0def8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 524.460552][T15530] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fd24ecbce59 [ 524.460564][T15530] RDX: 00007fd24cf0df10 RSI: 0000000000000058 RDI: 00007fd24cf0df10 [ 524.460576][T15530] RBP: 00007fd24cf0e090 R08: 0000000000000000 R09: 0000000000000058 [ 524.460588][T15530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 524.460598][T15530] R13: 00007fd24ef36038 R14: 00007fd24ef35fa0 R15: 00007ffdbef6ba68 [ 524.460623][T15530] [ 524.504964][ T5786] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 524.504994][ T5786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.505072][ T5786] usb 2-1: Product: syz [ 524.505087][ T5786] usb 2-1: Manufacturer: syz [ 524.505101][ T5786] usb 2-1: SerialNumber: syz [ 524.664683][ T6377] veth0_vlan: left promiscuous mode [ 524.666675][ T5786] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 525.011145][ T5843] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 525.522451][ T5723] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 525.682875][ T5723] usb 1-1: Using ep0 maxpacket: 16 [ 525.700462][ T5723] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 525.700491][ T5723] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.700511][ T5723] usb 1-1: Product: syz [ 525.700525][ T5723] usb 1-1: Manufacturer: syz [ 525.700539][ T5723] usb 1-1: SerialNumber: syz [ 525.772875][ T5723] r8152-cfgselector 1-1: Unknown version 0x0000 [ 525.772903][ T5723] r8152-cfgselector 1-1: config 0 descriptor?? [ 525.944974][ C0] usb 2-1: ath9k_htc: invalid pkt_len (fdfc) [ 525.983303][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000080. ret = -EPROTO [ 525.983362][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 526.225786][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 526.267203][ T10] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 526.324480][ T5843] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 526.369197][ T10] usb 3-1: USB disconnect, device number 6 [ 526.416321][ T5843] ath9k_htc: Failed to initialize the device [ 526.468799][ T5843] usb 2-1: ath9k_htc: USB layer deinitialized [ 526.572491][ T5831] usb 2-1: USB disconnect, device number 113 [ 526.806470][ T6377] team0 (unregistering): Port device macvlan1 removed [ 527.051430][ T5723] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 527.226838][ T5723] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 527.226872][ T5723] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 527.226917][ T5723] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 527.226940][ T5723] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.323090][ T5723] usb 3-1: config 0 descriptor?? [ 527.460973][ T6377] team0 (unregistering): Port device team_slave_1 removed [ 527.613622][ T6377] team0 (unregistering): Port device team_slave_0 removed [ 528.120699][ T5831] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 528.292888][ T5831] usb 2-1: Using ep0 maxpacket: 32 [ 528.301090][ T5831] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 528.301118][ T5831] usb 2-1: config 0 has no interface number 0 [ 528.345957][ T5831] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 528.345990][ T5831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.346010][ T5831] usb 2-1: Product: syz [ 528.346026][ T5831] usb 2-1: Manufacturer: syz [ 528.346041][ T5831] usb 2-1: SerialNumber: syz [ 528.374492][ T5831] usb 2-1: config 0 descriptor?? [ 528.573820][ T5723] uclogic 0003:256C:006D.0014: failed retrieving string descriptor #200: -71 [ 528.573963][ T5723] uclogic 0003:256C:006D.0014: failed retrieving pen parameters: -71 [ 528.573982][ T5723] uclogic 0003:256C:006D.0014: failed probing pen v2 parameters: -71 [ 528.574068][ T5723] uclogic 0003:256C:006D.0014: failed probing parameters: -71 [ 528.574181][ T5723] uclogic 0003:256C:006D.0014: probe with driver uclogic failed with error -71 [ 528.713404][ T5723] usb 3-1: USB disconnect, device number 7 [ 528.754345][ T5843] r8152-cfgselector 1-1: USB disconnect, device number 117 [ 529.069873][ T5831] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 529.069905][ T5831] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 529.600455][ T5831] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 529.600785][ T5831] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 530.036279][ T6377] IPVS: stop unused estimator thread 0... [ 530.038891][T15265] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 530.155728][T15265] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 530.157232][T15265] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 530.195128][ T5831] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 530.290454][T15265] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 530.306121][T15265] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 530.355445][T15265] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 530.370822][T15265] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 530.405677][ T5831] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 530.405707][ T5831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.405727][ T5831] usb 3-1: Product: syz [ 530.405741][ T5831] usb 3-1: Manufacturer: syz [ 530.405755][ T5831] usb 3-1: SerialNumber: syz [ 530.468395][ T5831] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 530.491573][T15265] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 530.596109][ T5843] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 531.090697][T15265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.100235][ T32] usb 2-1: USB disconnect, device number 114 [ 531.237132][T15265] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.428232][ T6102] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.429182][ T6102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.549565][ T6377] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.549738][ T6377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.662570][ C0] usb 3-1: ath9k_htc: invalid pkt_len (fdfc) [ 531.713416][ T5843] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 531.818548][ T5843] ath9k_htc: Failed to initialize the device [ 531.883020][ T5843] usb 3-1: ath9k_htc: USB layer deinitialized [ 533.639586][ T5714] usb 3-1: USB disconnect, device number 8 [ 533.745063][T15667] netlink: 'syz.2.3541': attribute type 7 has an invalid length. [ 533.745085][T15667] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3541'. [ 534.042141][ T5843] usb 1-1: new full-speed USB device number 118 using dummy_hcd [ 534.143201][T15676] netlink: 'syz.1.3543': attribute type 38 has an invalid length. [ 534.154232][T15265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 534.253896][ T5843] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 534.253924][ T5843] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 534.256667][ T5843] usb 1-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 534.256697][ T5843] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.256719][ T5843] usb 1-1: Product: syz [ 534.256733][ T5843] usb 1-1: Manufacturer: syz [ 534.256749][ T5843] usb 1-1: SerialNumber: syz [ 534.386089][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 534.641361][T15265] veth0_vlan: entered promiscuous mode [ 534.742641][ T5843] usb 1-1: USB disconnect, device number 118 [ 534.791160][T15265] veth1_vlan: entered promiscuous mode [ 534.971904][T15265] veth0_macvtap: entered promiscuous mode [ 534.997030][T15265] veth1_macvtap: entered promiscuous mode [ 535.079607][T15265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 535.121391][T15265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 535.187272][ T1001] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.198285][ T1001] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.209943][ T1001] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.210675][ T6102] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.467862][ T5007] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 535.674566][T15695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3551'. [ 535.737122][ T5007] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 535.737150][ T5007] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.737167][ T5007] usb 2-1: Product: syz [ 535.737179][ T5007] usb 2-1: Manufacturer: syz [ 535.737191][ T5007] usb 2-1: SerialNumber: syz [ 535.787577][ T5007] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 535.901547][ T5831] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 536.523651][ T1001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.523668][ T1001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.760437][ T32] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 536.848695][ C0] usb 2-1: ath9k_htc: invalid pkt_len (fdfc) [ 536.931346][ T32] usb 3-1: Using ep0 maxpacket: 32 [ 536.933864][ T32] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 536.933895][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.979919][ T32] usb 3-1: config 0 descriptor?? [ 536.994988][ T32] gspca_main: sq930x-2.14.0 probing 041e:403c [ 537.021602][ T5831] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 537.176992][ T5831] ath9k_htc: Failed to initialize the device [ 537.227470][T15700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.228033][T15700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.246930][T15700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.248649][ T5831] usb 2-1: ath9k_htc: USB layer deinitialized [ 537.304251][T15700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.426117][T15707] FAULT_INJECTION: forcing a failure. [ 537.426117][T15707] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 537.426142][T15707] CPU: 0 UID: 0 PID: 15707 Comm: syz.0.3555 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 537.426163][T15707] Tainted: [L]=SOFTLOCKUP [ 537.426170][T15707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 537.426182][T15707] Call Trace: [ 537.426191][T15707] [ 537.426201][T15707] dump_stack_lvl+0xe8/0x150 [ 537.426235][T15707] should_fail_ex+0x46b/0x600 [ 537.426268][T15707] _copy_from_user+0x2d/0xb0 [ 537.426282][T15707] video_usercopy+0x36f/0x1450 [ 537.426302][T15707] ? __pfx_subdev_do_ioctl_lock+0x10/0x10 [ 537.426317][T15707] ? __pfx_video_usercopy+0x10/0x10 [ 537.426352][T15707] ? __fget_files+0x2a/0x420 [ 537.426376][T15707] ? __fget_files+0x2a/0x420 [ 537.426395][T15707] ? __fget_files+0x3a6/0x420 [ 537.426418][T15707] v4l2_ioctl+0x190/0x1e0 [ 537.426441][T15707] ? __pfx_v4l2_ioctl+0x10/0x10 [ 537.426456][T15707] __se_sys_ioctl+0xff/0x170 [ 537.426470][T15707] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.426482][T15707] do_syscall_64+0x174/0x580 [ 537.426506][T15707] ? trace_irq_disable+0x3b/0x140 [ 537.426531][T15707] ? clear_bhb_loop+0x40/0x90 [ 537.426555][T15707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.426574][T15707] RIP: 0033:0x7fd24ecbce59 [ 537.426592][T15707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 537.426603][T15707] RSP: 002b:00007fd24ceed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 537.426615][T15707] RAX: ffffffffffffffda RBX: 00007fd24ef36090 RCX: 00007fd24ecbce59 [ 537.426623][T15707] RDX: 0000200000000100 RSI: 00000000c040563e RDI: 0000000000000004 [ 537.426631][T15707] RBP: 00007fd24ceed090 R08: 0000000000000000 R09: 0000000000000000 [ 537.426637][T15707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 537.426644][T15707] R13: 00007fd24ef36128 R14: 00007fd24ef36090 R15: 00007ffdbef6ba68 [ 537.426671][T15707] [ 537.493130][ T32] gspca_sq930x: reg_r 001f failed -71 [ 537.493222][ T32] sq930x 3-1:0.0: probe with driver sq930x failed with error -71 [ 537.527112][ T6102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.527134][ T6102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.677037][ T32] usb 3-1: USB disconnect, device number 10 [ 538.295614][T15711] netlink: 'syz.2.3557': attribute type 10 has an invalid length. [ 538.609856][T15711] team0: Port device dummy0 added [ 538.990415][ T5714] usb 2-1: USB disconnect, device number 115 [ 539.062312][T15720] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20000 [ 539.128332][T15724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3559'. [ 539.336572][ T5831] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 539.499511][ T5831] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 539.499541][ T5831] usb 3-1: config 0 has no interface number 0 [ 539.499584][ T5831] usb 3-1: config 0 interface 41 altsetting 2 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 539.499615][ T5831] usb 3-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 539.499639][ T5831] usb 3-1: config 0 interface 41 has no altsetting 0 [ 539.548555][ T5831] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 539.548587][ T5831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.548609][ T5831] usb 3-1: Product: syz [ 539.548624][ T5831] usb 3-1: Manufacturer: syz [ 539.548640][ T5831] usb 3-1: SerialNumber: syz [ 539.582942][ T5703] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 539.602433][ T5831] usb 3-1: config 0 descriptor?? [ 539.611449][ T5831] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -22 [ 539.719663][T15735] comedi comedi4: bad chanlist[0]=0x0000000b chan=11 range length=2 [ 539.732183][ T5843] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 539.744903][ T5703] usb 2-1: Using ep0 maxpacket: 8 [ 539.757007][ T5703] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 539.779534][ T5703] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 539.779567][ T5703] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 539.779593][ T5703] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 539.779617][ T5703] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 539.779659][ T5703] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 539.779682][ T5703] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.925155][ T5843] usb 4-1: Using ep0 maxpacket: 32 [ 539.927142][ T5843] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 539.927169][ T5843] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 539.927189][ T5843] usb 4-1: config 0 interface 0 has no altsetting 0 [ 539.982851][ T5843] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 539.982884][ T5843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.982904][ T5843] usb 4-1: Product: syz [ 539.982919][ T5843] usb 4-1: Manufacturer: syz [ 539.982934][ T5843] usb 4-1: SerialNumber: syz [ 540.026415][ T5843] usb 4-1: config 0 descriptor?? [ 540.271340][T15743] comedi comedi3: comedi_config --init_data is deprecated [ 540.274274][T15744] comedi comedi3: comedi_config --init_data is deprecated [ 540.468667][ T5843] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 540.576998][ T5703] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 540.677847][T15747] usbtmc 2-1:16.0: simple usb_control_msg returned 0 [ 540.703337][ T5843] gs_usb 4-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 540.722073][ T5843] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -121 [ 540.775477][ T5703] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 540.775509][ T5703] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.775529][ T5703] usb 1-1: Product: syz [ 540.775544][ T5703] usb 1-1: Manufacturer: syz [ 540.775558][ T5703] usb 1-1: SerialNumber: syz [ 540.817609][ T5703] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 540.857513][ T32] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 541.585949][ T5831] usb 2-1: USB disconnect, device number 116 [ 541.663495][ C1] usb 1-1: ath9k_htc: invalid pkt_len (fdfc) [ 541.977362][ T32] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 542.042009][ T32] ath9k_htc: Failed to initialize the device [ 542.132862][ T5831] usb 3-1: USB disconnect, device number 11 [ 542.256467][ T32] usb 1-1: ath9k_htc: USB layer deinitialized [ 542.744907][ T5714] usb 4-1: USB disconnect, device number 114 [ 542.815990][T15751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3570'. [ 543.139385][T15763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3573'. [ 543.698040][T15775] netlink: zone id is out of range [ 543.698058][T15775] netlink: zone id is out of range [ 543.698066][T15775] netlink: zone id is out of range [ 543.698074][T15775] netlink: zone id is out of range [ 543.698082][T15775] netlink: zone id is out of range [ 543.698089][T15775] netlink: zone id is out of range [ 543.698097][T15775] netlink: zone id is out of range [ 543.698104][T15775] netlink: zone id is out of range [ 543.698112][T15775] netlink: zone id is out of range [ 543.698120][T15775] netlink: zone id is out of range [ 544.203481][ T5007] usb 1-1: USB disconnect, device number 119 [ 544.317353][T15790] Invalid logical block size (21930) [ 544.853650][ T5843] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 545.017388][ T5843] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 545.017419][ T5843] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.051110][ T5843] usb 2-1: config 0 descriptor?? [ 545.055168][ T5843] ums-realtek 2-1:0.0: USB Mass Storage device detected [ 545.466165][ T5714] usb 2-1: USB disconnect, device number 117 [ 545.916261][ T4925] Bluetooth: hci2: link tx timeout [ 545.916597][ T4925] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 546.008352][ T5007] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 546.177157][ T5007] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 546.177276][ T5007] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.177296][ T5007] usb 3-1: Product: syz [ 546.177312][ T5007] usb 3-1: Manufacturer: syz [ 546.177327][ T5007] usb 3-1: SerialNumber: syz [ 546.237881][ T5007] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 546.249750][ T5843] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 546.780923][T15844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3603'. [ 546.797044][T15844] genirq: Flags mismatch irq 4. 00202000 (pcl812) vs. 00202080 (ttyS0) [ 546.939186][ T5621] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 547.237341][ C0] usb 3-1: ath9k_htc: invalid pkt_len (fdfc) [ 547.499037][ T5843] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 547.575293][ T5843] ath9k_htc: Failed to initialize the device [ 547.608721][ T5843] usb 3-1: ath9k_htc: USB layer deinitialized [ 547.907235][T15868] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3611'. [ 548.140474][ T5621] Bluetooth: hci2: command 0x0406 tx timeout [ 548.842487][T15878] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 549.226179][T15885] genirq: Flags mismatch irq 4. 00202000 (pcl812) vs. 00202080 (ttyS0) [ 549.346630][ T5843] usb 3-1: USB disconnect, device number 12 [ 549.403762][T15893] FAULT_INJECTION: forcing a failure. [ 549.403762][T15893] name failslab, interval 1, probability 0, space 0, times 0 [ 549.403798][T15893] CPU: 0 UID: 0 PID: 15893 Comm: syz.2.3622 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 549.403825][T15893] Tainted: [L]=SOFTLOCKUP [ 549.403832][T15893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 549.403844][T15893] Call Trace: [ 549.403852][T15893] [ 549.403860][T15893] dump_stack_lvl+0xe8/0x150 [ 549.403888][T15893] should_fail_ex+0x46b/0x600 [ 549.403917][T15893] should_failslab+0xa8/0x100 [ 549.403940][T15893] __kvmalloc_node_noprof+0x181/0x910 [ 549.403962][T15893] ? __kvmalloc_node_noprof+0x423/0x910 [ 549.403984][T15893] ? io_alloc_cache_init+0x42/0x140 [ 549.404005][T15893] ? io_alloc_cache_init+0x42/0x140 [ 549.404030][T15893] io_alloc_cache_init+0x42/0x140 [ 549.404055][T15893] io_rsrc_cache_init+0x26/0x50 [ 549.404075][T15893] io_ring_ctx_alloc+0x565/0xd20 [ 549.404108][T15893] io_uring_create+0x50/0x9a0 [ 549.404140][T15893] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 549.404166][T15893] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 549.404186][T15893] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 549.404224][T15893] ? __pfx_ksys_write+0x10/0x10 [ 549.404254][T15893] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.404276][T15893] do_syscall_64+0x174/0x580 [ 549.404299][T15893] ? trace_irq_disable+0x3b/0x140 [ 549.404322][T15893] ? clear_bhb_loop+0x40/0x90 [ 549.404345][T15893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.404364][T15893] RIP: 0033:0x7fd775b5ce59 [ 549.404382][T15893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 549.404398][T15893] RSP: 002b:00007fd773dadee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 549.404419][T15893] RAX: ffffffffffffffda RBX: 0000200000000888 RCX: 00007fd775b5ce59 [ 549.404433][T15893] RDX: 0000200000000908 RSI: 0000200000000888 RDI: 0000000000000024 [ 549.404446][T15893] RBP: 0000200000000880 R08: 0000200000001540 R09: 0000000000000000 [ 549.404460][T15893] R10: 0000200000000910 R11: 0000000000000206 R12: 0000200000000908 [ 549.404473][T15893] R13: 0000200000000910 R14: 00007fd773dadfd8 R15: 0000000000000000 [ 549.404501][T15893] [ 549.929400][ T5843] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 550.058575][T15913] IPVS: set_ctl: invalid protocol: 98 224.0.0.1:20000 [ 550.089346][ T5843] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 550.089383][ T5843] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 550.089405][ T5843] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 550.089447][ T5843] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 550.089533][ T5843] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.100478][ T5843] usb 3-1: config 0 descriptor?? [ 550.739607][T15933] FAULT_INJECTION: forcing a failure. [ 550.739607][T15933] name failslab, interval 1, probability 0, space 0, times 0 [ 550.739641][T15933] CPU: 1 UID: 0 PID: 15933 Comm: syz.0.3630 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 550.739663][T15933] Tainted: [L]=SOFTLOCKUP [ 550.739669][T15933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 550.739678][T15933] Call Trace: [ 550.739685][T15933] [ 550.739691][T15933] dump_stack_lvl+0xe8/0x150 [ 550.739716][T15933] should_fail_ex+0x46b/0x600 [ 550.739742][T15933] should_failslab+0xa8/0x100 [ 550.739763][T15933] kmem_cache_alloc_noprof+0xa4/0x6c0 [ 550.739788][T15933] ? do_getname_kernel+0x54/0x230 [ 550.739811][T15933] ? do_getname_kernel+0x54/0x230 [ 550.739833][T15933] ? __get_fs_type+0x21/0x280 [ 550.739855][T15933] do_getname_kernel+0x54/0x230 [ 550.739877][T15933] ? kern_path+0x1b/0x150 [ 550.739893][T15933] kern_path+0x25/0x150 [ 550.739910][T15933] tomoyo_mount_permission+0x795/0x9d0 [ 550.739933][T15933] ? tomoyo_mount_permission+0x2b3/0x9d0 [ 550.739974][T15933] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 550.740028][T15933] security_sb_mount+0xe4/0x320 [ 550.740047][T15933] path_mount+0xbc/0x10e0 [ 550.740060][T15933] ? user_path_at+0xd4/0x160 [ 550.740080][T15933] ? user_path_at+0xd4/0x160 [ 550.740097][T15933] __se_sys_mount+0x31d/0x420 [ 550.740116][T15933] ? __pfx___se_sys_mount+0x10/0x10 [ 550.740135][T15933] ? __x64_sys_mount+0x20/0xc0 [ 550.740149][T15933] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.740166][T15933] do_syscall_64+0x174/0x580 [ 550.740184][T15933] ? trace_irq_disable+0x3b/0x140 [ 550.740202][T15933] ? clear_bhb_loop+0x40/0x90 [ 550.740220][T15933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.740235][T15933] RIP: 0033:0x7fd24ecbce59 [ 550.740250][T15933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 550.740264][T15933] RSP: 002b:00007fd24cf0e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 550.740281][T15933] RAX: ffffffffffffffda RBX: 00007fd24ef35fa0 RCX: 00007fd24ecbce59 [ 550.740291][T15933] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 0000200000000280 [ 550.740302][T15933] RBP: 00007fd24cf0e090 R08: 0000000000000000 R09: 0000000000000000 [ 550.740313][T15933] R10: 000000000220c004 R11: 0000000000000246 R12: 0000000000000002 [ 550.740323][T15933] R13: 00007fd24ef36038 R14: 00007fd24ef35fa0 R15: 00007ffdbef6ba68 [ 550.740348][T15933] [ 550.777574][ T37] audit: type=1400 audit(2000000077.698:11): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=15926 comm="syz.3.3628" [ 550.832360][ T5843] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 550.961203][T15935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.961756][T15935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.089776][ T32] usb 3-1: USB disconnect, device number 13 [ 551.364979][ T5843] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 551.493318][ T5714] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 551.530153][ T5843] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 551.530183][ T5843] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.530194][ T5843] usb 1-1: Product: syz [ 551.530202][ T5843] usb 1-1: Manufacturer: syz [ 551.530209][ T5843] usb 1-1: SerialNumber: syz [ 551.583022][ T5843] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 551.617117][ T5007] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 551.675027][ T5714] usb 4-1: Using ep0 maxpacket: 16 [ 551.677798][ T5714] usb 4-1: config 1 has an invalid interface descriptor of length 8, skipping [ 551.677822][ T5714] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 551.677839][ T5714] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 551.681767][ T5714] usb 4-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 551.681799][ T5714] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.681820][ T5714] usb 4-1: Product: syz [ 551.681835][ T5714] usb 4-1: Manufacturer: syz [ 551.681850][ T5714] usb 4-1: SerialNumber: syz [ 551.717853][ T32] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 551.922537][ T32] usb 2-1: Using ep0 maxpacket: 32 [ 551.926903][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 551.926936][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.929371][ T32] usb 2-1: New USB device found, idVendor=25dd, idProduct=f3d2, bcdDevice=d2.37 [ 551.929400][ T32] usb 2-1: New USB device strings: Mfr=84, Product=45, SerialNumber=0 [ 551.929485][ T32] usb 2-1: Product: syz [ 551.929500][ T32] usb 2-1: Manufacturer: syz [ 552.008759][T15962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.011137][ T32] usb 2-1: config 0 descriptor?? [ 552.022712][T15962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.162983][ T5714] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 552.445677][ T5714] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 552.473947][ T5714] usb 4-1: USB disconnect, device number 115 [ 552.517706][ C0] usb 1-1: ath9k_htc: invalid pkt_len (fdfc) [ 552.562917][T15953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.572803][T15953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.589752][ T5693] udevd[5693]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 552.646338][T15953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.665837][T15953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.774124][ T5007] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 552.972284][ T32] usbhid 2-1:0.0: can't add hid device: -71 [ 552.974210][ T32] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 553.010745][ T5007] ath9k_htc: Failed to initialize the device [ 553.023904][ T32] usb 2-1: USB disconnect, device number 118 [ 553.387644][T15985] loop3: detected capacity change from 0 to 7 [ 553.389785][ T5007] usb 1-1: ath9k_htc: USB layer deinitialized [ 553.502480][T15985] Dev loop3: unable to read RDB block 7 [ 553.502523][T15985] loop3: unable to read partition table [ 553.503067][T15985] loop3: partition table beyond EOD, truncated [ 553.503402][T15985] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 553.702820][T15988] Dev loop3: unable to read RDB block 7 [ 553.702849][T15988] loop3: unable to read partition table [ 553.703492][T15988] loop3: partition table beyond EOD, truncated [ 554.072400][T15994] libceph: resolve ' [ 554.072400][T15994] -&fYǝa2i [ 554.072400][T15994] .?&*&' (ret=-3): failed [ 554.739122][T16011] loop3: detected capacity change from 0 to 7 [ 554.797605][ T5703] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 554.814860][T16013] overlayfs: overlapping lowerdir path [ 554.824232][T16011] Dev loop3: unable to read RDB block 7 [ 554.824304][T16011] loop3: unable to read partition table [ 554.824462][T16011] loop3: partition table beyond EOD, truncated [ 554.824488][T16011] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 554.874085][T16016] Dev loop3: unable to read RDB block 7 [ 554.874130][T16016] loop3: unable to read partition table [ 554.877216][T16016] loop3: partition table beyond EOD, truncated [ 554.982206][T16018] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3654'. [ 555.004036][ T5703] usb 4-1: Using ep0 maxpacket: 32 [ 555.014961][ T10] usb 1-1: USB disconnect, device number 120 [ 555.043759][ T5703] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 555.043787][ T5703] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.043804][ T5703] usb 4-1: Product: syz [ 555.043821][ T5703] usb 4-1: Manufacturer: syz [ 555.043833][ T5703] usb 4-1: SerialNumber: syz [ 555.098849][ T5703] usb 4-1: config 0 descriptor?? [ 555.320690][ T5703] peak_usb 4-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 555.320721][ T5703] peak_usb 4-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 555.449789][ T5703] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71 [ 555.464618][ T5703] usb 4-1: USB disconnect, device number 116 [ 555.494021][ T10] usb 1-1: new full-speed USB device number 121 using dummy_hcd [ 555.580036][ T32] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 555.655991][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 555.656534][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 555.657804][ T10] usb 1-1: config 88 has an invalid interface number: 235 but max is 0 [ 555.657829][ T10] usb 1-1: config 88 has no interface number 0 [ 555.657862][ T10] usb 1-1: config 88 interface 235 has no altsetting 0 [ 555.661008][ T10] usb 1-1: string descriptor 0 read error: -22 [ 555.661136][ T10] usb 1-1: New USB device found, idVendor=0458, idProduct=704a, bcdDevice=31.e6 [ 555.661150][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.727075][ T10] gspca_main: gspca_sn9c20x-2.14.0 probing 0458:704a [ 555.752048][ T32] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 555.752115][ T32] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 555.754965][ T32] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 555.754994][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.755015][ T32] usb 3-1: Product: syz [ 555.755029][ T32] usb 3-1: Manufacturer: syz [ 555.755044][ T32] usb 3-1: SerialNumber: syz [ 555.819434][ T32] cdc_mbim 3-1:1.0: skipping garbage [ 556.193850][ T10] gspca_sn9c20x: Write register 1001 failed -71 [ 556.193941][ T10] gspca_sn9c20x: Device initialization failed [ 556.194024][ T10] gspca_sn9c20x 1-1:88.235: probe with driver gspca_sn9c20x failed with error -71 [ 556.206333][ T10] usb 1-1: USB disconnect, device number 121 [ 556.558092][T16046] trusted_key: syz.3.3664 sent an empty control message without MSG_MORE. [ 556.977391][ T4925] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 556.977430][ T4925] CPU: 1 UID: 0 PID: 4925 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 556.977466][ T4925] Tainted: [L]=SOFTLOCKUP [ 556.977475][ T4925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 556.977489][ T4925] Workqueue: hci4 hci_rx_work [ 556.977518][ T4925] Call Trace: [ 556.977527][ T4925] [ 556.977538][ T4925] dump_stack_lvl+0xe8/0x150 [ 556.977569][ T4925] sysfs_create_dir_ns+0x271/0x2a0 [ 556.977603][ T4925] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 556.977627][ T4925] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 556.977662][ T4925] ? rt_spin_unlock+0x160/0x200 [ 556.977686][ T4925] kobject_add_internal+0x631/0xd10 [ 556.977728][ T4925] kobject_add+0x163/0x240 [ 556.977765][ T4925] ? __pfx_kobject_add+0x10/0x10 [ 556.977804][ T4925] ? get_device_parent+0x370/0x3a0 [ 556.977834][ T4925] device_add+0x408/0xb90 [ 556.977863][ T4925] hci_conn_add_sysfs+0xd5/0x210 [ 556.977889][ T4925] le_conn_complete_evt+0x10e6/0x16b0 [ 556.977927][ T4925] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 556.977955][ T4925] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 556.977978][ T4925] ? lockdep_hardirqs_on+0x7a/0x110 [ 556.978001][ T4925] ? skb_pull_data+0xfb/0x200 [ 556.978031][ T4925] hci_le_conn_complete_evt+0x187/0x470 [ 556.978062][ T4925] hci_event_packet+0x659/0xef0 [ 556.978088][ T4925] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 556.978105][ T4925] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 556.978128][ T4925] ? __pfx_hci_event_packet+0x10/0x10 [ 556.978147][ T4925] ? rt_spin_unlock+0x14f/0x200 [ 556.978173][ T4925] ? hci_send_to_monitor+0xe2/0x590 [ 556.978205][ T4925] hci_rx_work+0x3ee/0x1040 [ 556.978235][ T4925] ? process_one_work+0x8be/0x1630 [ 556.978259][ T4925] process_one_work+0x98b/0x1630 [ 556.978309][ T4925] ? __pfx_process_one_work+0x10/0x10 [ 556.978335][ T4925] ? do_raw_spin_lock+0x12b/0x2f0 [ 556.978372][ T4925] worker_thread+0xb49/0x1140 [ 556.978436][ T4925] kthread+0x388/0x470 [ 556.978463][ T4925] ? __pfx_worker_thread+0x10/0x10 [ 556.978492][ T4925] ? __pfx_kthread+0x10/0x10 [ 556.978517][ T4925] ret_from_fork+0x514/0xb70 [ 556.978545][ T4925] ? __pfx_ret_from_fork+0x10/0x10 [ 556.978570][ T4925] ? __switch_to+0xc79/0x1410 [ 556.978593][ T4925] ? __pfx_kthread+0x10/0x10 [ 556.978619][ T4925] ret_from_fork_asm+0x1a/0x30 [ 556.978662][ T4925] [ 556.980972][ T4925] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 556.981020][ T4925] Bluetooth: hci4: failed to register connection device [ 557.032791][T16020] kvm: pic: non byte read [ 557.291687][ T32] cdc_mbim 3-1:1.0: bind() failure [ 557.313535][ T32] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 557.333548][ T32] usb 3-1: USB disconnect, device number 14 [ 557.352544][ T5703] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 557.386229][ T10] usb 1-1: new full-speed USB device number 122 using dummy_hcd [ 557.517509][ T5703] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 557.517542][ T5703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.517563][ T5703] usb 2-1: Product: syz [ 557.517579][ T5703] usb 2-1: Manufacturer: syz [ 557.517595][ T5703] usb 2-1: SerialNumber: syz [ 557.565953][ T5703] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 557.570255][ T10] usb 1-1: config index 0 descriptor too short (expected 28277, got 36) [ 557.570284][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 557.570304][ T10] usb 1-1: config 0 has no interfaces? [ 557.570333][ T10] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 557.570356][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.581553][ T10] usb 1-1: config 0 descriptor?? [ 557.666599][ T32] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 557.815025][T16058] netlink: 'syz.0.3668': attribute type 5 has an invalid length. [ 558.267939][T16078] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3675'. [ 558.268551][T16078] Unknown options in mask b7f2 [ 558.511835][ C1] usb 2-1: ath9k_htc: invalid pkt_len (fdfc) [ 558.846693][ T32] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 558.945954][ T32] ath9k_htc: Failed to initialize the device [ 559.073419][ T32] usb 2-1: ath9k_htc: USB layer deinitialized [ 559.123893][T16091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3679'. [ 559.467428][ T5007] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 559.630643][ T5007] usb 3-1: Using ep0 maxpacket: 32 [ 559.633093][ T5007] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 559.633210][ T5007] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 559.633248][ T5007] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 559.633272][ T5007] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 559.636738][ T5007] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 559.636770][ T5007] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.636791][ T5007] usb 3-1: Product: syz [ 559.636806][ T5007] usb 3-1: Manufacturer: syz [ 559.636821][ T5007] usb 3-1: SerialNumber: syz [ 559.654193][T16099] FAULT_INJECTION: forcing a failure. [ 559.654193][T16099] name failslab, interval 1, probability 0, space 0, times 0 [ 559.654227][T16099] CPU: 0 UID: 0 PID: 16099 Comm: syz.3.3682 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 559.654256][T16099] Tainted: [L]=SOFTLOCKUP [ 559.654264][T16099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 559.654275][T16099] Call Trace: [ 559.654283][T16099] [ 559.654291][T16099] dump_stack_lvl+0xe8/0x150 [ 559.654318][T16099] should_fail_ex+0x46b/0x600 [ 559.654349][T16099] should_failslab+0xa8/0x100 [ 559.654371][T16099] kmem_cache_alloc_noprof+0xa4/0x6c0 [ 559.654401][T16099] ? skb_clone+0x212/0x3a0 [ 559.654424][T16099] ? skb_clone+0x212/0x3a0 [ 559.654454][T16099] skb_clone+0x212/0x3a0 [ 559.654482][T16099] __netlink_deliver_tap+0x424/0x8b0 [ 559.654516][T16099] ? netlink_deliver_tap+0x2e/0x1b0 [ 559.654542][T16099] netlink_deliver_tap+0x19c/0x1b0 [ 559.654567][T16099] netlink_sendskb+0x68/0x140 [ 559.654591][T16099] netlink_rcv_skb+0x2b6/0x4b0 [ 559.654616][T16099] ? __pfx_genl_rcv_msg+0x10/0x10 [ 559.654645][T16099] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 559.654682][T16099] genl_rcv+0x28/0x40 [ 559.654703][T16099] netlink_unicast+0x780/0x920 [ 559.654733][T16099] netlink_sendmsg+0x813/0xb40 [ 559.654765][T16099] ? __pfx_netlink_sendmsg+0x10/0x10 [ 559.654791][T16099] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 559.654815][T16099] ? aa_sock_msg_perm+0x122/0x200 [ 559.654833][T16099] ? __pfx_netlink_sendmsg+0x10/0x10 [ 559.654854][T16099] sock_sendmsg_nosec+0x13a/0x180 [ 559.654880][T16099] ____sys_sendmsg+0x55c/0x870 [ 559.654904][T16099] ? __pfx_____sys_sendmsg+0x10/0x10 [ 559.654936][T16099] ? import_iovec+0x73/0xa0 [ 559.654961][T16099] ___sys_sendmsg+0x2a5/0x360 [ 559.654983][T16099] ? __lock_acquire+0x6b5/0x2d10 [ 559.655010][T16099] ? __pfx____sys_sendmsg+0x10/0x10 [ 559.655065][T16099] ? __fget_files+0x2a/0x420 [ 559.655085][T16099] ? __fget_files+0x3a6/0x420 [ 559.655114][T16099] __x64_sys_sendmsg+0x1b7/0x290 [ 559.655197][T16099] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 559.655251][T16099] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.655271][T16099] do_syscall_64+0x174/0x580 [ 559.655302][T16099] ? trace_irq_disable+0x3b/0x140 [ 559.655325][T16099] ? clear_bhb_loop+0x40/0x90 [ 559.655349][T16099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.655369][T16099] RIP: 0033:0x7ffb588cce59 [ 559.655389][T16099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 559.655406][T16099] RSP: 002b:00007ffb56b1e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 559.655429][T16099] RAX: ffffffffffffffda RBX: 00007ffb58b45fa0 RCX: 00007ffb588cce59 [ 559.655442][T16099] RDX: 0000000000000080 RSI: 0000200000000300 RDI: 0000000000000003 [ 559.655456][T16099] RBP: 00007ffb56b1e090 R08: 0000000000000000 R09: 0000000000000000 [ 559.655468][T16099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 559.655480][T16099] R13: 00007ffb58b46038 R14: 00007ffb58b45fa0 R15: 00007ffca10a3678 [ 559.655511][T16099] [ 559.697959][ T5007] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 559.698055][ T5007] imon 3-1:155.0: unable to initialize intf0, err -19 [ 559.698073][ T5007] imon:imon_probe: failed to initialize context! [ 559.698084][ T5007] imon 3-1:155.0: unable to register, err -19 [ 560.236404][ T5007] usb 1-1: USB disconnect, device number 122 [ 560.492241][ T5714] usb 3-1: USB disconnect, device number 15 [ 560.682047][T16109] FAULT_INJECTION: forcing a failure. [ 560.682047][T16109] name failslab, interval 1, probability 0, space 0, times 0 [ 560.682092][T16109] CPU: 1 UID: 0 PID: 16109 Comm: syz.0.3685 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 560.682122][T16109] Tainted: [L]=SOFTLOCKUP [ 560.682130][T16109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 560.682142][T16109] Call Trace: [ 560.682150][T16109] [ 560.682160][T16109] dump_stack_lvl+0xe8/0x150 [ 560.682190][T16109] should_fail_ex+0x46b/0x600 [ 560.682223][T16109] should_failslab+0xa8/0x100 [ 560.682247][T16109] __kmalloc_cache_noprof+0xa0/0x6d0 [ 560.682270][T16109] ? alloc_async+0x4d/0xc0 [ 560.682290][T16109] ? alloc_async+0x4d/0xc0 [ 560.682315][T16109] alloc_async+0x4d/0xc0 [ 560.682337][T16109] proc_do_submiturb+0xb12/0x37e0 [ 560.682366][T16109] ? proc_do_submiturb+0x19f0/0x37e0 [ 560.682401][T16109] proc_submiturb+0x134/0x1a0 [ 560.682433][T16109] ? __pfx_proc_submiturb+0x10/0x10 [ 560.682464][T16109] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 560.682489][T16109] ? lockdep_hardirqs_on+0x7a/0x110 [ 560.682513][T16109] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 560.682537][T16109] ? mutex_lock_nested+0x152/0x1d0 [ 560.682565][T16109] ? usbdev_ioctl+0x14b/0x20c0 [ 560.682594][T16109] usbdev_ioctl+0x109a/0x20c0 [ 560.682625][T16109] ? __pfx_usbdev_ioctl+0x10/0x10 [ 560.682646][T16109] ? __fget_files+0x2a/0x420 [ 560.682664][T16109] ? __fget_files+0x3a6/0x420 [ 560.682681][T16109] ? __fget_files+0x2a/0x420 [ 560.682702][T16109] ? bpf_lsm_file_ioctl+0x9/0x20 [ 560.682725][T16109] ? __pfx_usbdev_ioctl+0x10/0x10 [ 560.682751][T16109] __se_sys_ioctl+0xff/0x170 [ 560.682776][T16109] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.682798][T16109] do_syscall_64+0x174/0x580 [ 560.682819][T16109] ? trace_irq_disable+0x3b/0x140 [ 560.682849][T16109] ? clear_bhb_loop+0x40/0x90 [ 560.682873][T16109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.682891][T16109] RIP: 0033:0x7fd24ecbce59 [ 560.682909][T16109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 560.682927][T16109] RSP: 002b:00007fd24cf0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 560.682948][T16109] RAX: ffffffffffffffda RBX: 00007fd24ef35fa0 RCX: 00007fd24ecbce59 [ 560.682962][T16109] RDX: 0000200000000000 RSI: 000000008038550a RDI: 0000000000000003 [ 560.682975][T16109] RBP: 00007fd24cf0e090 R08: 0000000000000000 R09: 0000000000000000 [ 560.682988][T16109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 560.683000][T16109] R13: 00007fd24ef36038 R14: 00007fd24ef35fa0 R15: 00007ffdbef6ba68 [ 560.683030][T16109] [ 560.992559][ T5714] usb 2-1: USB disconnect, device number 119 [ 561.169702][T16121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3690'. [ 561.731903][T16140] netlink: 'syz.3.3693': attribute type 10 has an invalid length. [ 561.794345][T16133] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3692'. [ 561.837460][T16143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3693'. [ 562.037740][T16140] team0: Device wg2 is of different type [ 562.158196][ T5714] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 562.158393][ T5703] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 562.399211][ T5714] usb 2-1: Using ep0 maxpacket: 32 [ 562.406232][ T5714] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 562.406374][ T5703] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 562.406402][ T5703] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 562.445760][ T5703] usb 3-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 562.445794][ T5703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.446074][ T5703] usb 3-1: Product: syz [ 562.446088][ T5703] usb 3-1: Manufacturer: syz [ 562.446103][ T5703] usb 3-1: SerialNumber: syz [ 562.448783][ T5714] usb 2-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice= 0.40 [ 562.448807][ T5714] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.448817][ T5714] usb 2-1: Product: syz [ 562.448825][ T5714] usb 2-1: Manufacturer: syz [ 562.448832][ T5714] usb 2-1: SerialNumber: syz [ 562.602321][ T5007] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 562.698544][ T32] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 562.773343][ T5007] usb 1-1: Using ep0 maxpacket: 8 [ 562.866318][ T5007] usb 1-1: config 0 has no interfaces? [ 562.866355][ T5007] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 562.866377][ T5007] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.898385][ T5007] usb 1-1: config 0 descriptor?? [ 562.965395][ T32] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 562.965414][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.965426][ T32] usb 4-1: Product: syz [ 562.965433][ T32] usb 4-1: Manufacturer: syz [ 562.965441][ T32] usb 4-1: SerialNumber: syz [ 563.037319][ T32] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 563.072020][ T5703] usb 3-1: USB disconnect, device number 16 [ 563.141887][ T5723] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 563.632496][ T5007] usb 1-1: USB disconnect, device number 123 [ 563.932797][ C1] usb 4-1: ath9k_htc: invalid pkt_len (fdfc) [ 564.313232][ T5723] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 564.388235][ T5723] ath9k_htc: Failed to initialize the device [ 564.900857][ T5723] usb 4-1: ath9k_htc: USB layer deinitialized [ 565.197365][ T5714] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 565.238931][ T5714] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 565.299466][ T5714] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 565.409328][ T5714] usb 2-1: USB disconnect, device number 120 [ 565.414520][T16179] netlink: 'syz.0.3702': attribute type 2 has an invalid length. [ 565.832359][T16188] netlink: 'syz.0.3705': attribute type 10 has an invalid length. [ 566.055787][ T5007] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 566.098966][ T10] usb 4-1: USB disconnect, device number 117 [ 566.317387][ T5007] usb 3-1: Using ep0 maxpacket: 8 [ 566.372926][ T5007] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 566.372983][ T5007] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 566.373009][ T5007] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.378955][ T5007] usb 3-1: config 0 descriptor?? [ 566.394337][ T5007] iowarrior 3-1:0.0: no interrupt-in endpoint found [ 566.408684][ T5714] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 566.579705][ T5714] usb 1-1: Using ep0 maxpacket: 8 [ 566.589960][ T5714] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 566.589991][ T5714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.590011][ T5714] usb 1-1: Product: syz [ 566.590025][ T5714] usb 1-1: Manufacturer: syz [ 566.590034][ T5714] usb 1-1: SerialNumber: syz [ 566.595736][ T5714] usb 1-1: config 0 descriptor?? [ 566.657799][ T5714] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 566.703621][ T5723] usb 3-1: USB disconnect, device number 17 [ 566.707145][ T5714] dvb-usb: bulk message failed: -22 (2/0) [ 566.771184][ T5714] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 566.778655][ T5714] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 566.778714][ T5714] usb 1-1: media controller created [ 566.829780][ T5714] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 567.001582][T16191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.006673][T16191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.036773][ T5714] dvb-usb: bulk message failed: -22 (1/0) [ 567.085169][ T5714] DVB: Unable to find symbol mt352_attach() [ 567.085180][ T5714] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 567.189838][ T5714] rc_core: IR keymap rc-dvico-portable not found [ 567.189861][ T5714] Registered IR keymap rc-empty [ 567.191656][ T5714] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 567.196034][ T5714] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input40 [ 567.198992][ T5714] dvb-usb: schedule remote query interval to 100 msecs. [ 567.199016][ T5714] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 567.270620][ T5714] usb 1-1: USB disconnect, device number 124 [ 567.425553][ T5723] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 567.473978][ T5714] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 567.584905][ T5723] usb 2-1: Using ep0 maxpacket: 8 [ 567.587796][ T5723] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 567.587845][ T5723] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 567.587869][ T5723] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.594345][ T5723] usb 2-1: config 0 descriptor?? [ 567.838182][ T5723] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 568.001759][ T5714] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 568.193683][ T5714] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 568.193715][ T5714] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.193736][ T5714] usb 3-1: Product: syz [ 568.193750][ T5714] usb 3-1: Manufacturer: syz [ 568.193823][ T5714] usb 3-1: SerialNumber: syz [ 568.249401][ T5714] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 568.314045][ T5723] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 568.642766][ T37] audit: type=1326 audit(2000000094.448:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16252 comm="syz.3.3723" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffb588cce59 code=0x0 [ 568.712383][T16254] tmpfs: Unknown parameter '' [ 568.745615][T16255] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 568.996428][ T5714] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 569.129864][ C1] usb 3-1: ath9k_htc: invalid pkt_len (fdfc) [ 569.159870][ T5714] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 569.159906][ T5714] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 569.159919][ T5714] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.207374][ T5714] usb 4-1: config 0 descriptor?? [ 569.225670][ T5714] pwc: Askey VC010 type 2 USB webcam detected. [ 569.349164][ T5703] usb 1-1: new low-speed USB device number 125 using dummy_hcd [ 569.520910][ T5723] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 569.545715][ T5703] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 569.546057][ T5703] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 569.546089][ T5703] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 569.546119][ T5703] usb 1-1: config 0 interface 0 has no altsetting 0 [ 569.546265][ T5703] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 569.546291][ T5703] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.573016][ T5703] usb 1-1: config 0 descriptor?? [ 569.581990][T16260] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 569.589062][ T5723] ath9k_htc: Failed to initialize the device [ 569.646339][ T5714] pwc: recv_control_msg error -32 req 02 val 2b00 [ 569.655758][ T5714] pwc: recv_control_msg error -32 req 02 val 2700 [ 569.657253][ T5714] pwc: recv_control_msg error -32 req 02 val 2c00 [ 569.736239][ T5723] usb 3-1: ath9k_htc: USB layer deinitialized [ 570.035396][T16260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.036053][T16260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.179893][ T5703] hid_parser_main: 49 callbacks suppressed [ 570.179922][ T5703] kovaplus 0003:1E7D:2D50.0016: unknown main item tag 0x0 [ 570.180097][ T5703] kovaplus 0003:1E7D:2D50.0016: unknown main item tag 0x0 [ 570.180259][ T5703] kovaplus 0003:1E7D:2D50.0016: unknown main item tag 0x0 [ 570.180391][ T5703] kovaplus 0003:1E7D:2D50.0016: unknown main item tag 0x0 [ 570.180423][ T5703] kovaplus 0003:1E7D:2D50.0016: unknown main item tag 0x0 [ 570.180453][ T5703] kovaplus 0003:1E7D:2D50.0016: unknown main item tag 0x0 [ 570.180581][ T5703] kovaplus 0003:1E7D:2D50.0016: unknown main item tag 0x0 [ 570.180612][ T5703] kovaplus 0003:1E7D:2D50.0016: unknown main item tag 0x0 [ 570.180735][ T5703] kovaplus 0003:1E7D:2D50.0016: unknown main item tag 0x0 [ 570.180765][ T5703] kovaplus 0003:1E7D:2D50.0016: unknown main item tag 0x0 [ 570.382562][ T5703] kovaplus 0003:1E7D:2D50.0016: hidraw0: USB HID v0.05 Device [HID 1e7d:2d50] on usb-dummy_hcd.0-1/input0 [ 570.456366][ T5722] usb 2-1: USB disconnect, device number 121 [ 570.624941][ T10] usb 1-1: USB disconnect, device number 125 [ 570.823051][T16264] fido_id[16264]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 571.364228][ T10] usb 3-1: USB disconnect, device number 18 [ 571.929691][ T5714] pwc: recv_control_msg error -71 req 04 val 1000 [ 571.931874][ T5714] pwc: recv_control_msg error -71 req 04 val 1300 [ 571.932739][ T5714] pwc: recv_control_msg error -71 req 04 val 1400 [ 571.934168][ T5714] pwc: recv_control_msg error -71 req 02 val 2000 [ 571.936745][ T5714] pwc: recv_control_msg error -71 req 02 val 2100 [ 571.939378][ T5714] pwc: recv_control_msg error -71 req 04 val 1500 [ 571.940871][ T5714] pwc: recv_control_msg error -71 req 02 val 2500 [ 571.941319][ T5714] pwc: recv_control_msg error -71 req 02 val 2400 [ 571.941926][ T5714] pwc: recv_control_msg error -71 req 02 val 2600 [ 571.942378][ T5714] pwc: recv_control_msg error -71 req 02 val 2900 [ 571.943307][ T5714] pwc: recv_control_msg error -71 req 02 val 2800 [ 571.944654][ T5714] pwc: recv_control_msg error -71 req 04 val 1100 [ 571.946053][ T5714] pwc: recv_control_msg error -71 req 04 val 1200 [ 571.993290][ T5714] pwc: Registered as video103. [ 572.016425][ T5714] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input41 [ 572.171824][ T10] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 572.301326][ T5714] usb 4-1: USB disconnect, device number 118 [ 572.316717][ T10] usb 2-1: device descriptor read/64, error -71 [ 572.577910][ T10] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 572.717032][ T10] usb 2-1: device descriptor read/64, error -71 [ 572.791818][ T5714] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 572.835046][ T10] usb usb2-port1: attempt power cycle [ 572.962797][ T5714] usb 4-1: Using ep0 maxpacket: 8 [ 572.965116][ T5714] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 572.965153][ T5714] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 572.965195][ T5714] usb 4-1: New USB device found, idVendor=046d, idProduct=c539, bcdDevice= 0.00 [ 572.965219][ T5714] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.969874][ T5714] usb 4-1: config 0 descriptor?? [ 573.198091][ T10] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 573.205225][T16311] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3739'. [ 573.226060][ T10] usb 2-1: device descriptor read/8, error -71 [ 573.277375][T16311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3739'. [ 573.438871][ T5786] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 573.476083][ T10] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 573.498166][ T10] usb 2-1: device descriptor read/8, error -71 [ 573.608303][ T5786] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 573.608334][ T5786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.608350][ T5786] usb 3-1: Product: syz [ 573.608358][ T5786] usb 3-1: Manufacturer: syz [ 573.608366][ T5786] usb 3-1: SerialNumber: syz [ 573.616192][ T10] usb usb2-port1: unable to enumerate USB device [ 573.656373][ T5786] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 573.676464][T16306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.678663][T16306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.705103][ T10] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 573.710858][ T5714] usb 4-1: USB disconnect, device number 119 [ 574.016582][T16314] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3740'. [ 574.077754][T16316] binder: 16315:16316 ioctl 40046205 0 returned -22 [ 574.242046][ T5621] Bluetooth: hci2: connection err: -111 [ 574.519377][ C0] usb 3-1: ath9k_htc: invalid pkt_len (fdfc) [ 574.759117][ T5714] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 574.909581][ T10] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 574.932998][ T5714] usb 4-1: Using ep0 maxpacket: 8 [ 574.949632][ T5714] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 574.949683][ T5714] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 574.949702][ T5714] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 574.949723][ T5714] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 574.949742][ T5714] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 574.949776][ T5714] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 574.949794][ T5714] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.184250][ T10] ath9k_htc: Failed to initialize the device [ 575.256076][ T5714] usb 4-1: GET_CAPABILITIES returned 0 [ 575.256124][ T5714] usbtmc 4-1:16.0: can't read capabilities [ 575.375732][ T10] usb 3-1: ath9k_htc: USB layer deinitialized [ 576.141549][ T5723] usb 4-1: USB disconnect, device number 120 [ 576.456699][ T4925] Bluetooth: hci2: command 0x0406 tx timeout [ 576.498094][ T5703] libceph: connect (1)[c::]:6789 error -101 [ 576.522138][ T5703] libceph: mon0 (1)[c::]:6789 connect error [ 576.553285][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 576.553364][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 576.653116][ T5703] libceph: connect (1)[c::]:6789 error -101 [ 576.653323][ T5703] libceph: mon0 (1)[c::]:6789 connect error [ 576.667437][T16328] ceph: No mds server is up or the cluster is laggy [ 576.761429][ T5007] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 576.789610][ T5786] usb 3-1: USB disconnect, device number 19 [ 576.951296][ T5007] usb 2-1: Using ep0 maxpacket: 16 [ 576.953717][ T5007] usb 2-1: unable to get BOS descriptor or descriptor too short [ 576.954886][ T5007] usb 2-1: config 1 has an invalid descriptor of length 193, skipping remainder of the config [ 576.954911][ T5007] usb 2-1: config 1 has 3 interfaces, different from the descriptor's value: 11 [ 576.954989][ T5007] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 576.955017][ T5007] usb 2-1: config 1 interface 1 has no altsetting 1 [ 576.955035][ T5007] usb 2-1: config 1 interface 2 has no altsetting 0 [ 576.957950][ T5007] usb 2-1: New USB device found, idVendor=2a39, idProduct=3fa0, bcdDevice= 0.40 [ 576.957980][ T5007] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.958001][ T5007] usb 2-1: Product: syz [ 576.958016][ T5007] usb 2-1: Manufacturer: syz [ 576.958031][ T5007] usb 2-1: SerialNumber: syz [ 577.353080][T16344] loop3: detected capacity change from 0 to 7 [ 577.356369][T16344] Dev loop3: unable to read RDB block 7 [ 577.356423][T16344] loop3: unable to read partition table [ 577.356618][T16344] loop3: partition table beyond EOD, truncated [ 577.356637][T16344] loop_reread_partitions: partition scan of loop3 (被x˖ ) failed (rc=-5) [ 577.476819][T16353] libceph: resolve ' [ 577.476819][T16353] -&fYǝa2i [ 577.476819][T16353] .?&*&' (ret=-3): failed [ 577.787810][ T4976] Dev loop3: unable to read RDB block 7 [ 577.788022][ T4976] loop3: unable to read partition table [ 577.795144][ T4976] loop3: partition table beyond EOD, truncated [ 577.860191][ T5007] usb 2-1: 1:9 : UAC_AS_GENERAL descriptor not found [ 577.950120][ T5007] usb 2-1: selecting invalid altsetting 0 [ 578.109164][ T5007] usb 2-1: USB disconnect, device number 126 [ 578.683092][ T4925] Bluetooth: hci2: command 0x0406 tx timeout [ 578.852067][ T5714] hid_parser_main: 23 callbacks suppressed [ 578.852100][ T5714] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 578.933588][ T5714] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 579.129820][T16387] fido_id[16387]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 579.406779][T16396] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3770'. [ 580.170216][ T5722] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 580.351428][ T5722] usb 4-1: Using ep0 maxpacket: 16 [ 580.379172][ T5722] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 580.379200][ T5722] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 580.411792][ T5722] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 580.411823][ T5722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.411843][ T5722] usb 4-1: Product: syz [ 580.411858][ T5722] usb 4-1: Manufacturer: syz [ 580.411873][ T5722] usb 4-1: SerialNumber: syz [ 580.471028][ T5722] usb 4-1: 0:2 : does not exist [ 580.677251][ T5722] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 580.751279][ T5722] usb 4-1: USB disconnect, device number 121 [ 580.858162][ T5693] udevd[5693]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 582.104464][ T5007] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 582.266625][ T5007] usb 4-1: Using ep0 maxpacket: 32 [ 582.272473][ T5007] usb 4-1: unable to get BOS descriptor or descriptor too short [ 582.273826][ T5007] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 582.273849][ T5007] usb 4-1: config 1 has an invalid descriptor of length 218, skipping remainder of the config [ 582.273869][ T5007] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 582.281407][ T5007] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 582.281437][ T5007] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.281456][ T5007] usb 4-1: Product: syz [ 582.281471][ T5007] usb 4-1: Manufacturer: syz [ 582.281485][ T5007] usb 4-1: SerialNumber: syz [ 582.639118][ T5786] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 582.704086][ T5007] usb 4-1: 0:2 : does not exist [ 582.805390][ T5786] usb 1-1: Using ep0 maxpacket: 16 [ 582.845896][ T5007] usb 4-1: USB disconnect, device number 122 [ 583.077807][ T5693] udevd[5693]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 583.125963][ T5786] usb 1-1: unable to get BOS descriptor or descriptor too short [ 583.127270][ T5786] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 583.127308][ T5786] usb 1-1: can't read configurations, error -71 [ 584.037317][ T4925] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 584.089399][ T4925] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 584.134283][ T4925] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 584.143634][ T4925] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 584.165017][ T4925] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 584.338695][T16463] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 584.818687][T12817] ================================================================== [ 584.818769][T12817] BUG: KASAN: slab-use-after-free in rt_spin_lock+0x83/0x400 [ 584.818859][T12817] Read of size 1 at addr ffff8880591587e8 by task syz.2.264[ 584.818859][T12817] Read of size 1 at addr ffff8880591587e8 by task syz.2.2647/12817 [ 584.818875][T12817] [ 584.818920][T12817] CPU: 1 UID: 0 PID: 12817 Comm: syz.2.2647 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 584.818972][T12817] Tainted: [L]=SOFTLOCKUP [ 584.818977][T12817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 584.818984][T12817] Call Trace: [ 584.818989][T12817] [ 584.818994][T12817] dump_stack_lvl+0xe8/0x150 [ 584.819009][T12817] print_address_description+0x55/0x1e0 [ 584.819023][T12817] ? rt_spin_lock+0x83/0x400 [ 584.819032][T12817] print_report+0x58/0x70 [ 584.819044][T12817] kasan_report+0x117/0x150 [ 584.819057][T12817] ? rt_spin_lock+0x83/0x400 [ 584.819067][T12817] ? bt_accept_unlink+0x7d/0x2f0 [ 584.819080][T12817] __kasan_check_byte+0x2a/0x40 [ 584.819090][T12817] lock_acquire+0x84/0x350 [ 584.819104][T12817] ? __local_bh_disable_ip+0x3c/0x420 [ 584.819121][T12817] rt_spin_lock+0x83/0x400 [ 584.819130][T12817] ? bt_accept_unlink+0x7d/0x2f0 [ 584.819143][T12817] ? __pfx_rt_spin_lock+0x10/0x10 [ 584.819151][T12817] ? __local_bh_disable_ip+0x3c/0x420 [ 584.819166][T12817] ? rcu_is_watching+0x15/0xb0 [ 584.819182][T12817] ? bt_accept_unlink+0x61/0x2f0 [ 584.819195][T12817] bt_accept_unlink+0x7d/0x2f0 [ 584.819207][T12817] ? lockdep_hardirqs_on+0x7a/0x110 [ 584.819220][T12817] ? bt_accept_unlink+0x61/0x2f0 [ 584.819232][T12817] l2cap_sock_teardown_cb+0x17e/0x490 [ 584.819245][T12817] l2cap_chan_del+0x99/0x600 [ 584.819256][T12817] l2cap_conn_del+0x33d/0x570 [ 584.819272][T12817] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 584.819287][T12817] hci_conn_hash_flush+0x10d/0x260 [ 584.819304][T12817] hci_dev_close_sync+0x85d/0x1150 [ 584.819319][T12817] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 584.819333][T12817] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 584.819346][T12817] ? hci_unregister_dev+0x22a/0x5b0 [ 584.819361][T12817] hci_unregister_dev+0x232/0x5b0 [ 584.819373][T12817] vhci_release+0x155/0x1b0 [ 584.819385][T12817] ? __pfx_vhci_release+0x10/0x10 [ 584.819395][T12817] __fput+0x461/0xa70 [ 584.819408][T12817] task_work_run+0x1d9/0x270 [ 584.819421][T12817] ? __pfx_task_work_run+0x10/0x10 [ 584.819433][T12817] ? do_exit+0x70a/0x22c0 [ 584.819444][T12817] ? kmem_cache_free+0x187/0x6c0 [ 584.819455][T12817] ? put_net+0x191/0x260 [ 584.819476][T12817] ? do_exit+0x70a/0x22c0 [ 584.819488][T12817] do_exit+0x70f/0x22c0 [ 584.819499][T12817] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 584.819513][T12817] ? __pfx_do_exit+0x10/0x10 [ 584.819523][T12817] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 584.819533][T12817] ? reacquire_held_locks+0x104/0x190 [ 584.819547][T12817] ? rt_spin_lock+0x1e0/0x400 [ 584.819559][T12817] do_group_exit+0x21b/0x2d0 [ 584.819571][T12817] ? rt_spin_unlock+0x160/0x200 [ 584.819580][T12817] get_signal+0x1284/0x1330 [ 584.819599][T12817] arch_do_signal_or_restart+0xbc/0x840 [ 584.819610][T12817] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 584.819622][T12817] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 584.819634][T12817] ? __se_sys_clock_nanosleep+0x35b/0x3b0 [ 584.819648][T12817] exit_to_user_mode_loop+0x104/0x710 [ 584.819661][T12817] ? rcu_is_watching+0x15/0xb0 [ 584.819676][T12817] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.819686][T12817] do_syscall_64+0x353/0x580 [ 584.819699][T12817] ? trace_irq_disable+0x3b/0x140 [ 584.819712][T12817] ? clear_bhb_loop+0x40/0x90 [ 584.819724][T12817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.819734][T12817] RIP: 0033:0x7fd775b1d68e [ 584.819744][T12817] Code: Unable to access opcode bytes at 0x7fd775b1d664. [ 584.819777][T12817] RSP: 002b:00007fd773dadf58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 584.819790][T12817] RAX: fffffffffffffdfc RBX: 00007fd773dae6c0 RCX: 00007fd775b1d68e [ 584.819798][T12817] RDX: 00007fd773dadfb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 584.819805][T12817] RBP: 00007fd775bf2d6f R08: 0000000000000000 R09: 0000000000000000 [ 584.819812][T12817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 584.819819][T12817] R13: 00007fd775dd6038 R14: 00007fd775dd5fa0 R15: 00007ffd17b4a138 [ 584.819830][T12817] [ 584.819834][T12817] [ 584.819837][T12817] Allocated by task 6102: [ 584.819865][T12817] kasan_save_track+0x3e/0x80 [ 584.819874][T12817] __kasan_kmalloc+0x93/0xb0 [ 584.819883][T12817] __kmalloc_node_track_caller_noprof+0x3a7/0x820 [ 584.819894][T12817] __alloc_skb+0x2c1/0x7d0 [ 584.819903][T12817] nsim_dev_trap_report_work+0x29f/0xbd0 [ 584.819917][T12817] process_one_work+0x98b/0x1630 [ 584.819939][T12817] worker_thread+0xb49/0x1140 [ 584.819960][T12817] kthread+0x388/0x470 [ 584.819976][T12817] ret_from_fork+0x514/0xb70 [ 584.819993][T12817] ret_from_fork_asm+0x1a/0x30 [ 584.820005][T12817] [ 584.820008][T12817] Freed by task 6102: [ 584.820013][T12817] kasan_save_track+0x3e/0x80 [ 584.820021][T12817] kasan_save_free_info+0x46/0x50 [ 584.820033][T12817] __kasan_slab_free+0x5c/0x80 [ 584.820042][T12817] kfree+0x1c5/0x6c0 [ 584.820064][T12817] skb_release_data+0x828/0xa60 [ 584.820080][T12817] __kfree_skb+0x5d/0x210 [ 584.820095][T12817] nsim_dev_trap_report_work+0x809/0xbd0 [ 584.820118][T12817] process_one_work+0x98b/0x1630 [ 584.820138][T12817] worker_thread+0xb49/0x1140 [ 584.820161][T12817] kthread+0x388/0x470 [ 584.820177][T12817] ret_from_fork+0x514/0xb70 [ 584.820195][T12817] ret_from_fork_asm+0x1a/0x30 [ 584.820215][T12817] [ 584.820220][T12817] The buggy address belongs to the object at ffff888059158000 [ 584.820220][T12817] which belongs to the cache kmalloc-4k of size 4096 [ 584.820298][T12817] The buggy address is located 2024 bytes inside of [ 584.820298][T12817] freed 4096-byte region [ffff888059158000, ffff888059159000) [ 584.820318][T12817] [ 584.820323][T12817] The buggy address belongs to the physical page: [ 584.820344][T12817] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x59158 [ 584.820361][T12817] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 584.820378][T12817] flags: 0x80000000000040(head|node=0|zone=1) [ 584.820394][T12817] page_type: f5(slab) [ 584.820412][T12817] raw: 0080000000000040 ffff88813fe31140 dead000000000100 dead000000000122 [ 584.820428][T12817] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 584.820445][T12817] head: 0080000000000040 ffff88813fe31140 dead000000000100 dead000000000122 [ 584.820468][T12817] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 584.820485][T12817] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 584.820502][T12817] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 584.820513][T12817] page dumped because: kasan: bad access detected [ 584.820526][T12817] page_owner tracks the page as allocated [ 584.820533][T12817] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5898, tgid 5897 (syz.2.41), ts 100253059562, free_ts 100166097248 [ 584.820566][T12817] post_alloc_hook+0x1f9/0x250 [ 584.820592][T12817] get_page_from_freelist+0x265c/0x26e0 [ 584.820612][T12817] __alloc_frozen_pages_noprof+0x18d/0x380 [ 584.820631][T12817] allocate_slab+0x76/0x5d0 [ 584.820653][T12817] refill_objects+0x2d9/0x350 [ 584.820675][T12817] __pcs_replace_empty_main+0x331/0x690 [ 584.820697][T12817] __kmalloc_noprof+0x56d/0x7e0 [ 584.820713][T12817] tomoyo_realpath_from_path+0xe3/0x5d0 [ 584.820733][T12817] tomoyo_path_number_perm+0x246/0x630 [ 584.820759][T12817] security_file_ioctl+0xc3/0x2a0 [ 584.820783][T12817] __se_sys_ioctl+0x47/0x170 [ 584.820805][T12817] do_syscall_64+0x174/0x580 [ 584.820826][T12817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.820844][T12817] page last free pid 5895 tgid 5895 stack trace: [ 584.820855][T12817] __free_frozen_pages+0x10af/0x1190 [ 584.820871][T12817] __slab_free+0x252/0x2a0 [ 584.820888][T12817] qlist_free_all+0x99/0x100 [ 584.820912][T12817] kasan_quarantine_reduce+0x148/0x160 [ 584.820939][T12817] __kasan_slab_alloc+0x22/0x80 [ 584.820955][T12817] __kmalloc_noprof+0x3b4/0x7e0 [ 584.820972][T12817] security_task_alloc+0x4d/0x330 [ 584.820996][T12817] copy_process+0x1c81/0x42e0 [ 584.821021][T12817] kernel_clone+0x2d7/0x940 [ 584.821036][T12817] __se_sys_clone3+0x33c/0x360 [ 584.821053][T12817] do_syscall_64+0x174/0x580 [ 584.821074][T12817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.821092][T12817] [ 584.821096][T12817] Memory state around the buggy address: [ 584.821133][T12817] ffff888059158680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 584.821145][T12817] ffff888059158700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 584.821158][T12817] >ffff888059158780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 584.821167][T12817] ^ [ 584.821179][T12817] ffff888059158800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 584.821191][T12817] ffff888059158880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 584.821201][T12817] ================================================================== [ 584.847601][T12817] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 584.847627][T12817] CPU: 1 UID: 0 PID: 12817 Comm: syz.2.2647 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 584.847655][T12817] Tainted: [L]=SOFTLOCKUP [ 584.847662][T12817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 584.847674][T12817] Call Trace: [ 584.847682][T12817] [ 584.847690][T12817] vpanic+0x56c/0xa60 [ 584.847723][T12817] ? __pfx_vpanic+0x10/0x10 [ 584.847748][T12817] ? __pfx___schedule+0x10/0x10 [ 584.847772][T12817] panic+0xc5/0xd0 [ 584.847808][T12817] ? __pfx_panic+0x10/0x10 [ 584.847834][T12817] ? preempt_schedule_common+0x82/0xd0 [ 584.847857][T12817] ? rt_spin_lock+0x83/0x400 [ 584.847874][T12817] check_panic_on_warn+0x89/0xb0 [ 584.847897][T12817] ? rt_spin_lock+0x83/0x400 [ 584.847913][T12817] end_report+0x73/0x170 [ 584.847934][T12817] ? rt_spin_lock+0x83/0x400 [ 584.847949][T12817] kasan_report+0x128/0x150 [ 584.847968][T12817] ? rt_spin_lock+0x83/0x400 [ 584.847995][T12817] ? bt_accept_unlink+0x7d/0x2f0 [ 584.848017][T12817] __kasan_check_byte+0x2a/0x40 [ 584.848037][T12817] lock_acquire+0x84/0x350 [ 584.848062][T12817] ? __local_bh_disable_ip+0x3c/0x420 [ 584.848091][T12817] rt_spin_lock+0x83/0x400 [ 584.848107][T12817] ? bt_accept_unlink+0x7d/0x2f0 [ 584.848129][T12817] ? __pfx_rt_spin_lock+0x10/0x10 [ 584.848146][T12817] ? __local_bh_disable_ip+0x3c/0x420 [ 584.848171][T12817] ? rcu_is_watching+0x15/0xb0 [ 584.848205][T12817] ? bt_accept_unlink+0x61/0x2f0 [ 584.848229][T12817] bt_accept_unlink+0x7d/0x2f0 [ 584.848250][T12817] ? lockdep_hardirqs_on+0x7a/0x110 [ 584.848272][T12817] ? bt_accept_unlink+0x61/0x2f0 [ 584.848294][T12817] l2cap_sock_teardown_cb+0x17e/0x490 [ 584.848395][T12817] l2cap_chan_del+0x99/0x600 [ 584.848410][T12817] l2cap_conn_del+0x33d/0x570 [ 584.848437][T12817] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 584.848462][T12817] hci_conn_hash_flush+0x10d/0x260 [ 584.848488][T12817] hci_dev_close_sync+0x85d/0x1150 [ 584.848520][T12817] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 584.848545][T12817] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 584.848569][T12817] ? hci_unregister_dev+0x22a/0x5b0 [ 584.848591][T12817] hci_unregister_dev+0x232/0x5b0 [ 584.848613][T12817] vhci_release+0x155/0x1b0 [ 584.848632][T12817] ? __pfx_vhci_release+0x10/0x10 [ 584.848651][T12817] __fput+0x461/0xa70 [ 584.848673][T12817] task_work_run+0x1d9/0x270 [ 584.848696][T12817] ? __pfx_task_work_run+0x10/0x10 [ 584.848718][T12817] ? do_exit+0x70a/0x22c0 [ 584.848737][T12817] ? kmem_cache_free+0x187/0x6c0 [ 584.848756][T12817] ? put_net+0x191/0x260 [ 584.848780][T12817] ? do_exit+0x70a/0x22c0 [ 584.848802][T12817] do_exit+0x70f/0x22c0 [ 584.848823][T12817] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 584.848848][T12817] ? __pfx_do_exit+0x10/0x10 [ 584.848867][T12817] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 584.848886][T12817] ? reacquire_held_locks+0x104/0x190 [ 584.848912][T12817] ? rt_spin_lock+0x1e0/0x400 [ 584.848934][T12817] do_group_exit+0x21b/0x2d0 [ 584.848956][T12817] ? rt_spin_unlock+0x160/0x200 [ 584.848974][T12817] get_signal+0x1284/0x1330 [ 584.849008][T12817] arch_do_signal_or_restart+0xbc/0x840 [ 584.849028][T12817] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 584.849050][T12817] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 584.849074][T12817] ? __se_sys_clock_nanosleep+0x35b/0x3b0 [ 584.849100][T12817] exit_to_user_mode_loop+0x104/0x710 [ 584.849124][T12817] ? rcu_is_watching+0x15/0xb0 [ 584.849151][T12817] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.849172][T12817] do_syscall_64+0x353/0x580 [ 584.849195][T12817] ? trace_irq_disable+0x3b/0x140 [ 584.849218][T12817] ? clear_bhb_loop+0x40/0x90 [ 584.849238][T12817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.849258][T12817] RIP: 0033:0x7fd775b1d68e [ 584.849275][T12817] Code: Unable to access opcode bytes at 0x7fd775b1d664. [ 584.849287][T12817] RSP: 002b:00007fd773dadf58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 584.849320][T12817] RAX: fffffffffffffdfc RBX: 00007fd773dae6c0 RCX: 00007fd775b1d68e [ 584.849335][T12817] RDX: 00007fd773dadfb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 584.849347][T12817] RBP: 00007fd775bf2d6f R08: 0000000000000000 R09: 0000000000000000 [ 584.849359][T12817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 584.849371][T12817] R13: 00007fd775dd6038 R14: 00007fd775dd5fa0 R15: 00007ffd17b4a138 [ 584.849393][T12817] [ 584.849736][T12817] Kernel Offset: disabled