last executing test programs: 7.939283695s ago: executing program 1 (id=4013): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r1, 0x0, 0x0) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x82d7f) pselect6(0x40, &(0x7f0000000140)={0xc2, 0x1, 0xfffffffffffff01a, 0x0, 0x2, 0x2, 0x1, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0) 7.781461259s ago: executing program 1 (id=4014): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0xc0, 0x0, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8003}, [@NFTA_TABLE_USERDATA={0xaa, 0x6, "39e4983ed3a871bf8e4ad75a6281838754f3306783aede73ab727b9a368648b07679f371ed7cb67f723304d6159e40d076930a5435118902ed95bba8dba2198120a34bcc5b4b34249f7eb4894af4b398add796411fbae8fac88e02821f9359a8921a22980af383d05a813b1b62c33f747a287f7da90c9073cb71dbf51d30f1b69e7e94a302b4ed05775737b18d7eda528bb23ba7a1a5acd8f225b4bac2c169ef9fb534025818"}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x114}, 0x1, 0x0, 0x0, 0x80}, 0x800) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f40600", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 7.652813782s ago: executing program 1 (id=4015): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001300)=ANY=[@ANYBLOB="12010000000000205804115000000000000109022400010000000009040000050300000009210000000122940309058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 7.465104547s ago: executing program 0 (id=4017): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001) 7.356772499s ago: executing program 0 (id=4018): r0 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="120100020000000882052500400001020301090271000301f81005080b020001052008090400000001012000092401fdff0a11004708240a0000057f00090401000001022000090401010101022000090501"], 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000075c0)={0x44, &(0x7f0000000000)={0x60, 0x8, 0x3, "b27078"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.913506319s ago: executing program 1 (id=4024): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) timer_create(0x0, &(0x7f0000000280)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = socket$kcm(0x23, 0x5, 0x0) listen(r1, 0x800) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) accept4(r1, 0x0, 0x0, 0x80000) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$poke(0x13, r4, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x29, 0x9, 0x9, 0x9, 0x4, @empty, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x40, 0x1, 0xddc1, 0x4833e8b7}}) 4.848739611s ago: executing program 3 (id=4025): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000180)=""/100, 0x64) 4.676687665s ago: executing program 3 (id=4026): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r0, 0x0, 0x20040000) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001) 4.433216751s ago: executing program 3 (id=4028): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000207d1e512d00000000000109022400010000000009040000010300020009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x1, 0x3, "9e5b4c"}, 0x0}) 4.10172539s ago: executing program 0 (id=4029): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0xecd}, &(0x7f00000000c0)=0x8) 3.968831662s ago: executing program 0 (id=4030): r0 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='*', 0x1, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(0x0, &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x51, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x32, 0x30, 0x62, 0x67, 0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3c}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r1) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r2, 0x1) 3.967943693s ago: executing program 1 (id=4031): socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x5, 0x57, &(0x7f0000000080)=ANY=[@ANYBLOB="12010102882333404f17cf8af4390102030109024500013f06400409044207000e01", @ANYRESDEC], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) close(r3) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r4, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) sendmmsg$inet_sctp(r4, &(0x7f0000003640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x208, 0xff, 0x8}}], 0x20, 0x4c004}], 0x1, 0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000340)={r5, @in={{0x2, 0x4e22, @local}}}, &(0x7f0000000400)=0x84) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0x0, 0x0, 0x0, 0xb}]}}, 0x0, 0x26}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, r6, 0x1, 0x5}, 0x50) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) 3.828674806s ago: executing program 0 (id=4033): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001300)=ANY=[@ANYBLOB="12010000000000205804115000000000000109022400010000000009040000050300000009210000000122940309058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 3.69798542s ago: executing program 2 (id=4034): syz_open_procfs$userns(0x0, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000002040)='net/snmp6\x00') read$FUSE(r0, &(0x7f0000000000)={0x2020}, 0xfffffc7a) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4622}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 3.618581921s ago: executing program 2 (id=4035): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000180)=""/100, 0x64) 3.562587763s ago: executing program 2 (id=4036): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000001000)='1-', 0x2) 3.456787835s ago: executing program 2 (id=4037): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file1/../file0', [], 0xa, "e265ba00a1bda42297b04ea14a439fadc54e32c58fd10aab898bdfecd5c03bd983383fb952e3a4938617535e20c4"}, 0x42) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1f, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) 3.318455429s ago: executing program 2 (id=4038): r0 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="120100020000000882052500400001020301090271000301f81005080b020001052008090400000001012000092401fdff0a11004708240a0000057f00090401000001022000090401010101022000090501"], 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000075c0)={0x44, &(0x7f0000000000)={0x60, 0x8, 0x3, "b27078"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.517112113s ago: executing program 3 (id=4039): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) timer_create(0x0, &(0x7f0000000280)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = socket$kcm(0x23, 0x5, 0x0) listen(r1, 0x800) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) accept4(r1, 0x0, 0x0, 0x80000) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$poke(0x13, r4, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x29, 0x9, 0x9, 0x9, 0x4, @empty, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x40, 0x1, 0xddc1, 0x4833e8b7}}) 1.095782444s ago: executing program 0 (id=4040): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 591.489216ms ago: executing program 1 (id=4041): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a", 0x10) 437.740069ms ago: executing program 3 (id=4042): r0 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='*', 0x1, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(0x0, &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x51, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x32, 0x30, 0x62, 0x67, 0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3c}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r1) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r2, 0x1) 266.005654ms ago: executing program 3 (id=4043): socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fb, 0x101301) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0', 0xb) unshare(0x2c020400) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'virt_wifi0\x00', 0x0}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) pselect6(0x40, &(0x7f0000000100)={0x6, 0x2, 0x1000, 0x0, 0x801, 0x100}, 0x0, &(0x7f0000000240)={0x1e, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0) connect$inet(r1, 0x0, 0x0) 0s ago: executing program 2 (id=4044): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a", 0x10) kernel console output (not intermixed with test programs): 44] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 783.762142][T15744] Call Trace: [ 783.765444][T15744] [ 783.768396][T15744] dump_stack_lvl+0x18c/0x250 [ 783.773106][T15744] ? show_regs_print_info+0x20/0x20 [ 783.778334][T15744] ? load_image+0x420/0x420 [ 783.782887][T15744] sysfs_create_dir_ns+0x26e/0x2a0 [ 783.788072][T15744] ? __lock_acquire+0x7d80/0x7d80 [ 783.793152][T15744] ? sysfs_warn_dup+0xa0/0xa0 [ 783.797825][T15744] ? rcu_is_watching+0x15/0xb0 [ 783.802584][T15744] ? do_raw_spin_unlock+0x121/0x230 [ 783.807791][T15744] kobject_add_internal+0x617/0xc90 [ 783.813013][T15744] kobject_add+0x164/0x240 [ 783.817444][T15744] ? kobject_init+0x1d0/0x1d0 [ 783.822156][T15744] ? get_device_parent+0x366/0x390 [ 783.827360][T15744] device_add+0x3fa/0xc40 [ 783.831722][T15744] tty_register_device_attr+0x425/0x950 [ 783.837362][T15744] ? tty_register_device+0x30/0x30 [ 783.842521][T15744] ? tty_port_init+0x132/0x1a0 [ 783.847408][T15744] ? gsm_dlci_alloc+0x32a/0x630 [ 783.852297][T15744] ? __might_fault+0xaa/0x120 [ 783.857008][T15744] gsm_activate_mux+0x110/0x2a0 [ 783.861901][T15744] gsmld_ioctl+0xcec/0x1900 [ 783.866452][T15744] ? gsmld_write+0x120/0x120 [ 783.871088][T15744] ? __init_ldsem+0x150/0x150 [ 783.875802][T15744] ? __fget_files+0x28/0x460 [ 783.880434][T15744] ? gsmld_write+0x120/0x120 [ 783.885053][T15744] tty_ioctl+0x9b5/0xdc0 [ 783.889329][T15744] ? tty_get_icount+0xb0/0xb0 [ 783.894039][T15744] __se_sys_ioctl+0xfd/0x170 [ 783.898660][T15744] do_syscall_64+0x55/0xb0 [ 783.903110][T15744] ? clear_bhb_loop+0x40/0x90 [ 783.907820][T15744] ? clear_bhb_loop+0x40/0x90 [ 783.912528][T15744] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 783.918450][T15744] RIP: 0033:0x7f13ec99e0d9 [ 783.922894][T15744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 783.942524][T15744] RSP: 002b:00007f13ed882028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 783.950969][T15744] RAX: ffffffffffffffda RBX: 00007f13ecc26090 RCX: 00007f13ec99e0d9 [ 783.958967][T15744] RDX: 0000200000000200 RSI: 0000000040204706 RDI: 0000000000000003 [ 783.966968][T15744] RBP: 00007f13eca35024 R08: 0000000000000000 R09: 0000000000000000 [ 783.974969][T15744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 783.982968][T15744] R13: 00007f13ecc26128 R14: 00007f13ecc26090 R15: 00007ffe4898f518 [ 783.990957][T15744] [ 784.015828][T15744] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 784.213176][ T23] usb 2-1: USB disconnect, device number 31 [ 784.224490][T15751] loop3: detected capacity change from 0 to 512 [ 784.916202][ T23] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 785.131978][ T23] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 785.148261][ T23] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 785.160968][ T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 785.179809][ T23] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 785.192991][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.221848][ T23] usb 3-1: Product: syz [ 785.231918][ T23] usb 3-1: Manufacturer: syz [ 785.238775][ T23] usb 3-1: SerialNumber: syz [ 785.252808][T15757] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 785.261550][T15757] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 785.271896][ T23] cyberjack 3-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 785.287248][ T23] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 785.479657][ T5809] usb 3-1: USB disconnect, device number 27 [ 785.493596][ T5809] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 785.521005][ T5809] cyberjack 3-1:1.0: device disconnected [ 785.887181][T15776] ima: policy update failed [ 785.905128][ T28] audit: type=1802 audit(1787085894.286:22): pid=15776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.3392" res=0 errno=0 [ 785.985335][T15778] netlink: 'syz.3.3393': attribute type 2 has an invalid length. [ 786.326738][T15790] loop2: detected capacity change from 0 to 512 [ 787.348055][T15799] loop0: detected capacity change from 0 to 16 [ 787.372366][T15799] erofs: (device loop0): mounted with root inode @ nid 36. [ 788.014888][T15819] loop2: detected capacity change from 0 to 512 [ 788.313093][T15821] fuse: Bad value for 'fd' [ 788.592417][T15810] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 788.608953][T15810] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 788.615407][T15810] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 788.799193][T15827] loop1: detected capacity change from 0 to 16 [ 788.828029][T15827] erofs: (device loop1): mounted with root inode @ nid 36. [ 789.046909][ T7016] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 789.248905][ T7016] usb 4-1: unable to get BOS descriptor or descriptor too short [ 789.266718][ T7016] usb 4-1: config 63 has an invalid interface number: 66 but max is 0 [ 789.290017][ T7016] usb 4-1: config 63 has an invalid descriptor of length 55, skipping remainder of the config [ 789.320013][ T7016] usb 4-1: config 63 has no interface number 0 [ 789.335967][ T7016] usb 4-1: config 63 interface 66 has no altsetting 0 [ 789.351790][ T7016] usb 4-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 789.361458][ T7016] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.369961][ T7016] usb 4-1: Product: syz [ 789.379396][ T7016] usb 4-1: Manufacturer: syz [ 789.384049][ T7016] usb 4-1: SerialNumber: syz [ 790.364605][T15843] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 790.388653][T15843] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 790.395435][T15843] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 790.570456][T15855] loop2: detected capacity change from 0 to 512 [ 791.492662][ T7016] usb 4-1: Found UVC 0.07 device syz (174f:8acf) [ 791.499438][ T7016] usb 4-1: No valid video chain found. [ 791.511374][ T7016] usb 4-1: USB disconnect, device number 11 [ 791.645960][ T5777] Bluetooth: hci4: command 0x0c1a tx timeout [ 792.446118][ T5770] Bluetooth: hci2: command 0x0c1a tx timeout [ 792.452231][ T5777] Bluetooth: hci1: command 0x0c1a tx timeout [ 792.649086][T15878] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 792.656817][T15878] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 792.662899][T15878] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 792.956041][ T5855] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 793.156060][ T5855] usb 4-1: Using ep0 maxpacket: 16 [ 793.162719][ T5855] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 793.172998][ T5855] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 793.184104][ T5855] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 793.193352][ T5855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.201386][ T5855] usb 4-1: Product: syz [ 793.205706][ T5855] usb 4-1: Manufacturer: syz [ 793.210369][ T5855] usb 4-1: SerialNumber: syz [ 793.402387][T15900] netlink: 'syz.2.3442': attribute type 2 has an invalid length. [ 793.453390][ T5855] usb 4-1: 0:2 : does not exist [ 793.479884][ T5855] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 793.545898][ T5855] usb 4-1: USB disconnect, device number 12 [ 793.631524][T13686] udevd[13686]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 794.653438][T15909] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 794.660042][T15909] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 794.666639][T15909] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 795.081066][T15935] netlink: 'syz.2.3458': attribute type 2 has an invalid length. [ 795.102697][T15934] netlink: 'syz.0.3457': attribute type 2 has an invalid length. [ 796.055465][T15941] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 796.062959][T15941] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 796.070067][T15941] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 796.346035][ T23] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 796.355973][ T5809] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 796.563905][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 796.577350][ T23] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 796.579862][ T5809] usb 3-1: Using ep0 maxpacket: 16 [ 796.590968][ T23] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 796.610290][ T5809] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 796.615653][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.621041][ T5809] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 796.637049][ T23] usb 4-1: config 0 descriptor?? [ 796.650476][ T23] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 796.650616][ T5809] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 796.668037][ T5809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.676374][ T5809] usb 3-1: Product: syz [ 796.680663][ T5809] usb 3-1: Manufacturer: syz [ 796.685245][ T5809] usb 3-1: SerialNumber: syz [ 796.705892][ T7016] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 796.866020][ T7016] usb 2-1: device descriptor read/64, error -71 [ 796.905269][ T5809] usb 3-1: 0:2 : does not exist [ 796.917493][ T5809] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 796.935529][ T5809] usb 3-1: USB disconnect, device number 28 [ 796.964748][T13686] udevd[13686]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 797.135854][ T7016] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 797.285897][ T7016] usb 2-1: device descriptor read/64, error -71 [ 797.405959][ T5777] Bluetooth: hci4: command 0x0c1a tx timeout [ 797.412145][ T7016] usb usb2-port1: attempt power cycle [ 798.125903][ T5777] Bluetooth: hci2: command 0x0c1a tx timeout [ 798.132092][ T5770] Bluetooth: hci1: command 0x0c1a tx timeout [ 798.402610][ T7016] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 798.441591][ T7016] usb 2-1: device descriptor read/8, error -71 [ 798.505455][T15986] netlink: 'syz.0.3479': attribute type 2 has an invalid length. [ 798.728967][ T7016] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 798.773162][ T7016] usb 2-1: device descriptor read/8, error -71 [ 798.865882][ T23] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 798.906043][ T7016] usb usb2-port1: unable to enumerate USB device [ 799.058464][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 799.075780][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 799.089765][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 799.103088][ T23] usb 3-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 799.117234][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.133787][ T23] usb 3-1: config 0 descriptor?? [ 799.543052][ T5855] usb 4-1: USB disconnect, device number 13 [ 799.558000][ T23] usbhid 3-1:0.0: can't add hid device: -71 [ 799.582973][ T23] usbhid: probe of 3-1:0.0 failed with error -71 [ 799.622877][ T23] usb 3-1: USB disconnect, device number 29 [ 799.965345][T16010] netlink: 'syz.3.3489': attribute type 2 has an invalid length. [ 800.406337][T16020] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.3492'. [ 800.527421][T13883] rpcbind: server 127.0.0.1 not responding, timed out [ 800.635824][ T23] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 800.837927][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 800.858781][ T23] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 800.885977][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.922676][ T23] usb 3-1: config 0 descriptor?? [ 800.957384][ T23] pwc: Askey VC010 type 2 USB webcam detected. [ 801.227049][T16042] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.3503'. [ 801.367677][ T23] pwc: recv_control_msg error -32 req 02 val 2b00 [ 801.382585][ T23] pwc: recv_control_msg error -32 req 02 val 2700 [ 801.600575][ T23] pwc: recv_control_msg error -71 req 04 val 1000 [ 801.619657][ T23] pwc: recv_control_msg error -71 req 04 val 1300 [ 801.629803][ T23] pwc: recv_control_msg error -71 req 04 val 1400 [ 801.642018][ T23] pwc: recv_control_msg error -71 req 02 val 2000 [ 801.653449][ T23] pwc: recv_control_msg error -71 req 02 val 2100 [ 801.671522][ T23] pwc: recv_control_msg error -71 req 04 val 1500 [ 801.678993][ T23] pwc: recv_control_msg error -71 req 02 val 2500 [ 801.696639][ T23] pwc: recv_control_msg error -71 req 02 val 2400 [ 801.703783][ T23] pwc: recv_control_msg error -71 req 02 val 2600 [ 801.711973][ T23] pwc: recv_control_msg error -71 req 02 val 2900 [ 801.726709][ T23] pwc: recv_control_msg error -71 req 02 val 2800 [ 801.734039][ T23] pwc: recv_control_msg error -71 req 04 val 1100 [ 801.741135][ T23] pwc: recv_control_msg error -71 req 04 val 1200 [ 801.758827][ T23] pwc: Registered as video103. [ 801.768929][ T23] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input10 [ 801.813596][ T23] usb 3-1: USB disconnect, device number 30 [ 802.278470][T16065] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.3513'. [ 803.215998][ T7016] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 803.286436][T16092] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.3525'. [ 803.407797][ T7016] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 803.429294][ T7016] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 803.456037][ T7016] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 803.495845][ T7016] usb 3-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 803.510045][ T7016] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.537585][ T7016] usb 3-1: config 0 descriptor?? [ 803.976917][ T7016] usbhid 3-1:0.0: can't add hid device: -71 [ 803.982965][ T7016] usbhid: probe of 3-1:0.0 failed with error -71 [ 804.026020][ T7016] usb 3-1: USB disconnect, device number 31 [ 804.460720][T16110] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.3534'. [ 804.496656][ T7016] smpboot: CPU 1 is now offline [ 805.096846][T12898] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 805.285886][T12898] usb 3-1: device descriptor read/64, error -71 [ 805.575854][T12898] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 805.746775][T12898] usb 3-1: device descriptor read/64, error -71 [ 805.825959][ T5809] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 805.875945][T12898] usb usb3-port1: attempt power cycle [ 806.027397][ T5809] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 806.044530][ T5809] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 806.072471][ T5809] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 806.093981][ T5809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.131322][ T5809] usb 2-1: config 0 descriptor?? [ 806.151925][ T5809] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 806.295971][T12898] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 806.338026][T12898] usb 3-1: device descriptor read/8, error -71 [ 806.630059][T12898] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 806.683297][T12898] usb 3-1: device descriptor read/8, error -71 [ 806.825117][T12898] usb usb3-port1: unable to enumerate USB device [ 807.493681][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 807.500788][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.085045][T16189] netlink: 'syz.3.3566': attribute type 2 has an invalid length. [ 808.591916][T12898] usb 2-1: USB disconnect, device number 36 [ 808.666304][ T5809] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 808.887380][ T5809] usb 1-1: Using ep0 maxpacket: 16 [ 808.927108][T16198] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.3569'. [ 808.976455][ T5809] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 809.034676][ T5809] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 809.273979][ T5809] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 809.325015][ T5809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.376774][ T5809] usb 1-1: Product: syz [ 809.391172][ T5809] usb 1-1: Manufacturer: syz [ 809.429926][ T5809] usb 1-1: SerialNumber: syz [ 809.688394][ T5809] usb 1-1: 0:2 : does not exist [ 809.744539][ T5809] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 809.828980][ T5809] usb 1-1: USB disconnect, device number 24 [ 809.890715][T13686] udevd[13686]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 809.955172][ T7016] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 810.145880][ T7016] usb 4-1: device descriptor read/64, error -71 [ 810.206076][T12898] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 810.376003][T16224] netlink: 'syz.0.3580': attribute type 72 has an invalid length. [ 810.399028][T12898] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 810.416107][ T7016] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 810.432860][T12898] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 810.478599][T12898] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 810.511816][T12898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.547942][T12898] usb 3-1: config 0 descriptor?? [ 810.565440][T12898] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 810.595921][ T7016] usb 4-1: device descriptor read/64, error -71 [ 810.737993][ T7016] usb usb4-port1: attempt power cycle [ 811.160976][ T7016] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 811.218496][ T7016] usb 4-1: device descriptor read/8, error -71 [ 811.316661][T16245] netlink: 'syz.1.3589': attribute type 72 has an invalid length. [ 811.579372][ T7016] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 811.886634][ T7016] usb 4-1: device descriptor read/8, error -71 [ 812.026481][ T7016] usb usb4-port1: unable to enumerate USB device [ 812.474231][T16273] netlink: 'syz.0.3598': attribute type 72 has an invalid length. [ 812.993247][ T7016] usb 3-1: USB disconnect, device number 36 [ 813.332648][T16295] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.3607'. [ 813.605901][T12937] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 813.648783][T16310] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.3613'. [ 813.805854][T12937] usb 1-1: Using ep0 maxpacket: 16 [ 813.828261][T12937] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 813.863417][T12937] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 813.915898][T12937] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 813.939784][T12937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.974347][T16319] loop3: detected capacity change from 0 to 16 [ 813.990426][T12937] usb 1-1: Product: syz [ 813.998249][T12937] usb 1-1: Manufacturer: syz [ 814.012397][T16319] erofs: (device loop3): mounted with root inode @ nid 36. [ 814.024368][T12937] usb 1-1: SerialNumber: syz [ 814.461689][T12937] usb 1-1: 0:2 : does not exist [ 814.497925][T12937] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 814.583353][T12937] usb 1-1: USB disconnect, device number 25 [ 814.648231][T13686] udevd[13686]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 814.675540][T16327] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.3619'. [ 815.244579][ T7016] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 815.274328][T16349] netlink: 'syz.1.3627': attribute type 2 has an invalid length. [ 815.432860][T16356] loop2: detected capacity change from 0 to 16 [ 815.451866][T16354] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.3629'. [ 815.467453][T16356] erofs: (device loop2): mounted with root inode @ nid 36. [ 815.485325][ T7016] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 815.537691][ T7016] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 815.692405][ T7016] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.928206][ T7016] usb 4-1: config 0 descriptor?? [ 815.959650][ T7016] pwc: Askey VC010 type 2 USB webcam detected. [ 816.242396][T16367] netlink: 'syz.1.3633': attribute type 2 has an invalid length. [ 816.369104][ T7016] pwc: recv_control_msg error -32 req 02 val 2b00 [ 816.423229][ T7016] pwc: recv_control_msg error -32 req 02 val 2700 [ 816.477850][ T7016] pwc: recv_control_msg error -71 req 02 val 2c00 [ 816.510228][ T7016] pwc: recv_control_msg error -71 req 04 val 1000 [ 816.537382][ T7016] pwc: recv_control_msg error -71 req 04 val 1300 [ 816.569765][ T7016] pwc: recv_control_msg error -71 req 04 val 1400 [ 816.611227][ T7016] pwc: recv_control_msg error -71 req 02 val 2000 [ 816.645177][ T7016] pwc: recv_control_msg error -71 req 02 val 2100 [ 816.705841][ T7016] pwc: recv_control_msg error -71 req 04 val 1500 [ 816.735263][ T7016] pwc: recv_control_msg error -71 req 02 val 2500 [ 816.762241][ T7016] pwc: recv_control_msg error -71 req 02 val 2400 [ 816.800906][ T7016] pwc: recv_control_msg error -71 req 02 val 2600 [ 816.827802][ T7016] pwc: recv_control_msg error -71 req 02 val 2900 [ 816.851126][ T7016] pwc: recv_control_msg error -71 req 02 val 2800 [ 816.879772][ T7016] pwc: recv_control_msg error -71 req 04 val 1100 [ 816.922941][ T7016] pwc: recv_control_msg error -71 req 04 val 1200 [ 816.969356][ T7016] pwc: Registered as video103. [ 817.003350][ T7016] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input11 [ 817.091182][ T7016] usb 4-1: USB disconnect, device number 18 [ 817.349375][T16394] loop3: detected capacity change from 0 to 16 [ 817.362492][T16394] erofs: (device loop3): mounted with root inode @ nid 36. [ 817.749233][T16382] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 817.762276][T16382] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 817.771099][T16382] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 817.779221][T16382] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 817.787795][T16382] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 818.065881][ T7016] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 818.275971][ T7016] usb 3-1: Using ep0 maxpacket: 16 [ 818.302396][ T7016] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 818.322851][ T7016] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 818.345317][ T7016] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 818.363273][ T7016] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.384998][ T7016] usb 3-1: Product: syz [ 818.396198][ T9] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 818.407545][ T7016] usb 3-1: Manufacturer: syz [ 818.412927][ T7016] usb 3-1: SerialNumber: syz [ 818.566383][T12937] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 818.598952][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 818.611688][ T9] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 818.627645][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.645045][ T7016] usb 3-1: 0:2 : does not exist [ 818.651980][ T9] usb 2-1: config 0 descriptor?? [ 818.672771][ T7016] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 818.680875][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 818.705379][ T7016] usb 3-1: USB disconnect, device number 37 [ 818.748341][T13686] udevd[13686]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 818.777292][T12937] usb 1-1: Using ep0 maxpacket: 32 [ 818.788455][T12937] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 818.801346][T12937] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 818.828070][T12937] usb 1-1: config 0 has no interface number 0 [ 818.837076][T12937] usb 1-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 818.857090][T12937] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 818.871542][T12937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.880069][T12937] usb 1-1: Product: syz [ 818.884274][T12937] usb 1-1: Manufacturer: syz [ 818.892976][T12937] usb 1-1: SerialNumber: syz [ 818.903746][T12937] usb 1-1: config 0 descriptor?? [ 818.916183][T12937] radio-si470x 1-1:0.35: could not find interrupt in endpoint [ 818.928625][T12937] radio-si470x: probe of 1-1:0.35 failed with error -5 [ 819.071923][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 819.079185][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 819.096697][ T9] pwc: recv_control_msg error -71 req 02 val 2c00 [ 819.103654][ T9] pwc: recv_control_msg error -71 req 04 val 1000 [ 819.117581][ T9] pwc: recv_control_msg error -71 req 04 val 1300 [ 819.134161][T12937] radio-raremono 1-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 819.142306][ T9] pwc: recv_control_msg error -71 req 04 val 1400 [ 819.151679][ T9] pwc: recv_control_msg error -71 req 02 val 2000 [ 819.158764][ T9] pwc: recv_control_msg error -71 req 02 val 2100 [ 819.168390][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 819.182595][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 819.203411][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 819.239706][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 819.260298][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 819.277433][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 819.291552][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 819.316913][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 819.335279][T12937] videodev: could not get a free minor [ 819.342578][ T9] pwc: Registered as video103. [ 819.360705][T12937] radio-raremono 1-1:0.35: could not register video device [ 819.377102][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input12 [ 819.400730][T16421] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 819.416484][T12937] radio-raremono: probe of 1-1:0.35 failed with error -23 [ 819.457434][T16421] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 819.465887][T12937] usbhid 1-1:0.35: couldn't find an input interrupt endpoint [ 819.484408][ T9] usb 2-1: USB disconnect, device number 37 [ 819.507754][T16421] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 819.605390][T12937] usb 1-1: USB disconnect, device number 26 [ 819.930264][T16438] loop2: detected capacity change from 0 to 16 [ 820.010377][T16438] erofs: (device loop2): mounted with root inode @ nid 36. [ 820.516023][T16443] netlink: 'syz.3.3661': attribute type 2 has an invalid length. [ 820.686322][ T5777] Bluetooth: hci4: command 0x0c1a tx timeout [ 820.875821][T12937] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 821.076065][T12937] usb 2-1: Using ep0 maxpacket: 16 [ 821.100148][T12937] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 821.148392][T12937] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 821.216338][T12937] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 821.247998][T12937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.286629][T12937] usb 2-1: Product: syz [ 821.297117][T12937] usb 2-1: Manufacturer: syz [ 821.315144][T12937] usb 2-1: SerialNumber: syz [ 821.485938][ T5777] Bluetooth: hci2: command 0x0c1a tx timeout [ 821.549937][T12937] usb 2-1: 0:2 : does not exist [ 821.563676][T12937] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 821.571853][ T5777] Bluetooth: hci1: command 0x0c1a tx timeout [ 821.613100][T12937] usb 2-1: USB disconnect, device number 38 [ 821.785541][T16456] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 821.801465][T16456] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 821.815078][T16456] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 822.167098][T16478] loop3: detected capacity change from 0 to 16 [ 822.194624][T16478] erofs: (device loop3): mounted with root inode @ nid 36. [ 823.086427][ T5777] Bluetooth: hci4: command 0x0c1a tx timeout [ 823.465982][ T9] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 823.694770][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 823.729174][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 823.770237][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 823.807710][ T5777] Bluetooth: hci2: command 0x0c1a tx timeout [ 823.835837][ T9] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 823.866009][T12937] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 823.885460][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.903223][ T5777] Bluetooth: hci1: command 0x0c1a tx timeout [ 823.934177][ T9] usb 2-1: config 0 descriptor?? [ 823.942711][T16511] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.3685'. [ 824.112620][T12937] usb 1-1: Using ep0 maxpacket: 16 [ 824.157400][T12937] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 824.215827][T12937] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 824.263531][T12937] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 824.292139][T16517] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.3688'. [ 824.309390][T12937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.340769][T12937] usb 1-1: Product: syz [ 824.365892][T12937] usb 1-1: Manufacturer: syz [ 824.385127][T12937] usb 1-1: SerialNumber: syz [ 824.399995][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 824.449078][ T9] usbhid: probe of 2-1:0.0 failed with error -71 [ 824.495867][ T5809] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 824.507690][ T9] usb 2-1: USB disconnect, device number 39 [ 824.584889][T16520] netlink: 'syz.3.3690': attribute type 2 has an invalid length. [ 824.719991][T12937] usb 1-1: 0:2 : does not exist [ 824.728610][ T5809] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 824.769602][T12937] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 824.786757][ T5809] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 824.860098][T12937] usb 1-1: USB disconnect, device number 27 [ 824.870430][ T5809] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 824.943683][T13686] udevd[13686]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 824.960502][ T5809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.022557][ T5809] usb 3-1: config 0 descriptor?? [ 825.084639][ T5809] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 826.617898][T16548] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.3698'. [ 826.639654][T16549] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.3697'. [ 826.938187][T16560] netlink: 'syz.0.3702': attribute type 2 has an invalid length. [ 827.077204][T16565] netlink: 'syz.1.3703': attribute type 2 has an invalid length. [ 828.108625][T16579] syz.1.3707 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 828.168046][T16579] CPU: 0 PID: 16579 Comm: syz.1.3707 Not tainted syzkaller #0 [ 828.175538][T16579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 828.185576][T16579] Call Trace: [ 828.188870][T16579] [ 828.191788][T16579] dump_stack_lvl+0x18c/0x250 [ 828.196482][T16579] ? show_regs_print_info+0x20/0x20 [ 828.201665][T16579] ? load_image+0x420/0x420 [ 828.206152][T16579] ? ___ratelimit+0x478/0x610 [ 828.210821][T16579] ? radix_tree_cpu_dead+0x160/0x160 [ 828.216091][T16579] dump_header+0xd8/0x820 [ 828.220410][T16579] oom_kill_process+0x390/0x580 [ 828.225249][T16579] out_of_memory+0xe0e/0x1200 [ 828.229923][T16579] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 828.235553][T16579] ? mutex_lock_nested+0x20/0x20 [ 828.240568][T16579] ? unregister_oom_notifier+0x20/0x20 [ 828.246018][T16579] mem_cgroup_out_of_memory+0x2c2/0x390 [ 828.251549][T16579] ? try_charge_memcg+0xc91/0x17c0 [ 828.256645][T16579] ? drain_local_stock+0x630/0x630 [ 828.261768][T16579] ? do_raw_spin_unlock+0x121/0x230 [ 828.266955][T16579] try_charge_memcg+0xca1/0x17c0 [ 828.271886][T16579] ? folio_flags+0x120/0x120 [ 828.276457][T16579] ? percpu_ref_tryget+0x15/0x180 [ 828.281464][T16579] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 828.287183][T16579] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 828.293147][T16579] ? percpu_ref_tryget+0x15/0x180 [ 828.298155][T16579] ? percpu_ref_tryget+0x15/0x180 [ 828.303160][T16579] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 828.308885][T16579] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 828.314607][T16579] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 828.320418][T16579] obj_cgroup_charge+0x36e/0x630 [ 828.325347][T16579] ? get_obj_cgroup_from_current+0xd4/0x280 [ 828.331229][T16579] ? obj_cgroup_charge+0xed/0x630 [ 828.336237][T16579] ? mod_objcg_mlstate+0x320/0x320 [ 828.341334][T16579] ? percpu_ref_tryget+0x15/0x180 [ 828.346345][T16579] ? get_obj_cgroup_from_current+0xd4/0x280 [ 828.352224][T16579] ? get_obj_cgroup_from_current+0xd4/0x280 [ 828.358123][T16579] slab_pre_alloc_hook+0x2e2/0x300 [ 828.363248][T16579] kmem_cache_alloc+0x5a/0x2c0 [ 828.367997][T16579] ? prepare_creds+0x30/0x5d0 [ 828.372661][T16579] prepare_creds+0x30/0x5d0 [ 828.377150][T16579] lookup_user_key+0x38a/0x1140 [ 828.382029][T16579] ? lookup_user_key_possessed+0x40/0x40 [ 828.387649][T16579] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 828.393618][T16579] ? futex_wake+0x42a/0x4f0 [ 828.398152][T16579] keyctl_session_to_parent+0x28/0x9d0 [ 828.403620][T16579] ? __lock_acquire+0x7d80/0x7d80 [ 828.408634][T16579] __se_sys_keyctl+0x812/0xb50 [ 828.413387][T16579] ? __x64_sys_keyctl+0xc0/0xc0 [ 828.418221][T16579] ? do_futex+0x35d/0x3e0 [ 828.422534][T16579] ? __ia32_sys_get_robust_list+0x110/0x110 [ 828.428411][T16579] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 828.434381][T16579] ? lock_chain_count+0x20/0x20 [ 828.439216][T16579] ? lockdep_hardirqs_on+0x98/0x150 [ 828.444397][T16579] ? __x64_sys_keyctl+0x20/0xc0 [ 828.449231][T16579] do_syscall_64+0x55/0xb0 [ 828.453629][T16579] ? clear_bhb_loop+0x40/0x90 [ 828.458295][T16579] ? clear_bhb_loop+0x40/0x90 [ 828.462955][T16579] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 828.468829][T16579] RIP: 0033:0x7f6fc479e0d9 [ 828.473227][T16579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 828.492814][T16579] RSP: 002b:00007f6fc565d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 828.501207][T16579] RAX: ffffffffffffffda RBX: 00007f6fc4a25fa0 RCX: 00007f6fc479e0d9 [ 828.509161][T16579] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000012 [ 828.517197][T16579] RBP: 00007f6fc4835024 R08: 0000000000000000 R09: 0000000000000000 [ 828.525147][T16579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 828.533103][T16579] R13: 00007f6fc4a26038 R14: 00007f6fc4a25fa0 R15: 00007ffe0c8b0d18 [ 828.541065][T16579] [ 828.587540][T16583] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.3708'. [ 828.682863][T16579] memory: usage 0kB, limit 0kB, failcnt 19 [ 828.705697][T16579] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 828.729444][T16579] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 828.753730][T16579] Memory cgroup stats for /syz1/test: [ 828.754093][T16579] cache 0 [ 828.777661][T16585] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.3709'. [ 828.788386][T16579] rss 0 [ 828.795658][T16579] rss_huge 0 [ 828.806709][T16579] shmem 0 [ 828.810851][T16579] mapped_file 0 [ 828.820997][T16579] dirty 0 [ 828.829775][T16579] writeback 0 [ 828.841299][T16579] workingset_refault_anon 0 [ 828.860628][ T5809] usb 3-1: USB disconnect, device number 38 [ 828.883262][T16579] workingset_refault_file 0 [ 828.946142][T16579] swap 0 [ 828.949028][T16579] pgpgin 0 [ 828.952036][T16579] pgpgout 0 [ 828.986905][T16579] pgfault 0 [ 828.990049][T16579] pgmajfault 0 [ 828.993399][T16579] inactive_anon 0 [ 829.048093][T16579] active_anon 0 [ 829.051588][T16579] inactive_file 0 [ 829.055200][T16579] active_file 0 [ 829.106303][T16579] unevictable 0 [ 829.109798][T16579] hierarchical_memory_limit 0 [ 829.114454][T16579] hierarchical_memsw_limit 9223372036854771712 [ 829.185112][T16579] total_cache 0 [ 829.193478][T16579] total_rss 0 [ 829.218539][T16579] total_rss_huge 0 [ 829.249139][T16579] total_shmem 0 [ 829.267841][T16579] total_mapped_file 0 [ 829.271975][T16579] total_dirty 0 [ 829.275419][T16579] total_writeback 0 [ 829.311448][T16579] total_workingset_refault_anon 0 [ 829.359146][T16579] total_workingset_refault_file 0 [ 829.369260][T16579] total_swap 0 [ 829.372649][T16579] total_pgpgin 0 [ 829.391521][T16579] total_pgpgout 0 [ 829.406062][T16601] netlink: 'syz.2.3715': attribute type 2 has an invalid length. [ 829.413897][T16579] total_pgfault 0 [ 829.423997][T16579] total_pgmajfault 0 [ 829.428292][T16579] total_inactive_anon 0 [ 829.444193][T16579] total_active_anon 0 [ 829.462477][T16579] total_inactive_file 0 [ 829.481217][T16579] total_active_file 0 [ 829.491141][T16579] total_unevictable 0 [ 829.495184][T16579] anon_cost 0 [ 829.514901][T16579] file_cost 0 [ 829.526061][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 829.539324][T16579] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.3707,pid=16578,uid=0 [ 829.573834][T16604] netlink: 'syz.0.3716': attribute type 2 has an invalid length. [ 829.598810][T16579] Memory cgroup out of memory: Killed process 16579 (syz.1.3707) total-vm:102244kB, anon-rss:1376kB, file-rss:22656kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 829.766223][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 829.802236][ T9] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 829.855018][ T9] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 829.890690][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.931851][ T9] usb 4-1: Product: syz [ 829.959837][ T9] usb 4-1: Manufacturer: syz [ 830.001711][ T9] usb 4-1: SerialNumber: syz [ 830.264218][ T9] usb 4-1: USB disconnect, device number 19 [ 830.785960][ T9] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 830.987448][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 831.001002][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 831.018839][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 831.028848][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.042270][ T9] usb 1-1: config 0 descriptor?? [ 831.058854][ T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 831.086199][ T5809] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 831.266385][ T5809] usb 4-1: Using ep0 maxpacket: 16 [ 831.281948][ T5809] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 831.314856][ T5809] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 831.340057][ T5809] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 831.356300][ T5809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.375667][ T5809] usb 4-1: Product: syz [ 831.388365][ T5809] usb 4-1: Manufacturer: syz [ 831.402357][ T5809] usb 4-1: SerialNumber: syz [ 831.609673][T16639] netlink: 'syz.2.3729': attribute type 2 has an invalid length. [ 831.633816][ T5809] usb 4-1: 0:2 : does not exist [ 831.649549][ T5809] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 831.684239][ T5809] usb 4-1: USB disconnect, device number 20 [ 831.706775][ T9] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 831.742763][T13686] udevd[13686]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 831.946296][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 831.957136][ T9] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 831.969976][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 832.014517][ T9] usb 2-1: config 0 has no interface number 0 [ 832.039772][ T9] usb 2-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 832.082463][ T9] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 832.102565][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.122023][ T9] usb 2-1: Product: syz [ 832.134287][ T9] usb 2-1: Manufacturer: syz [ 832.145806][ T9] usb 2-1: SerialNumber: syz [ 832.201822][ T9] usb 2-1: config 0 descriptor?? [ 832.234142][ T9] radio-si470x 2-1:0.35: could not find interrupt in endpoint [ 832.284796][ T9] radio-si470x: probe of 2-1:0.35 failed with error -5 [ 832.449279][ T9] radio-raremono 2-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 832.641180][ T9] radio-raremono 2-1:0.35: raremono_cmd_main failed (-71) [ 832.668083][ T9] radio-raremono 2-1:0.35: V4L2 device registered as radio48 [ 832.724254][ T9] usb 2-1: USB disconnect, device number 40 [ 832.754696][ T9] radio-raremono 2-1:0.35: Thanko's Raremono disconnected [ 832.834696][T16657] netlink: 'syz.3.3733': attribute type 2 has an invalid length. [ 834.094089][T12898] usb 1-1: USB disconnect, device number 28 [ 834.206000][ T9] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 834.398441][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 834.422056][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 834.443503][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 834.481645][ T9] usb 3-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 834.508049][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.532938][ T9] usb 3-1: config 0 descriptor?? [ 834.766618][T16681] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 834.774009][T16681] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 834.786424][T16681] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 834.794857][T16681] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 834.805600][T16681] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 834.952696][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 834.975436][ T9] usbhid: probe of 3-1:0.0 failed with error -71 [ 835.014102][ T9] usb 3-1: USB disconnect, device number 39 [ 835.198291][T16706] netlink: 'syz.1.3751': attribute type 2 has an invalid length. [ 835.485990][T12898] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 835.710308][T12898] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 835.771001][T12898] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 835.798852][T12898] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 835.812412][T12898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.848924][T12898] usb 4-1: config 0 descriptor?? [ 835.885417][T12898] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 836.455479][T16720] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 836.462073][T16720] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 836.472735][T16720] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 836.765885][T12898] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 836.957032][T12898] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 836.969224][T12898] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 836.988298][T12898] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 837.015979][ T9] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 837.024790][T12898] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 837.040643][T12898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.064660][T12898] usb 2-1: Product: syz [ 837.074536][T12898] usb 2-1: Manufacturer: syz [ 837.084705][T12898] usb 2-1: SerialNumber: syz [ 837.101942][T16728] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 837.120486][T12898] cyberjack 2-1:1.0: required endpoints missing [ 837.236141][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 837.267507][ T9] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 837.294447][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 837.328855][T12898] usb 2-1: USB disconnect, device number 41 [ 837.342447][ T9] usb 1-1: config 0 has no interface number 0 [ 837.375612][ T9] usb 1-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 837.432475][ T9] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 837.458106][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.485557][ T9] usb 1-1: Product: syz [ 837.506094][ T9] usb 1-1: Manufacturer: syz [ 837.522301][ T9] usb 1-1: SerialNumber: syz [ 837.542295][ T9] usb 1-1: config 0 descriptor?? [ 837.579211][ T9] radio-si470x 1-1:0.35: could not find interrupt in endpoint [ 837.609616][ T9] radio-si470x: probe of 1-1:0.35 failed with error -5 [ 837.725937][ T5770] Bluetooth: hci4: command 0x0c1a tx timeout [ 837.779276][ T9] radio-raremono 1-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 837.994703][ T9] radio-raremono 1-1:0.35: raremono_cmd_main failed (-71) [ 838.035279][ T9] radio-raremono 1-1:0.35: V4L2 device registered as radio48 [ 838.089330][ T9] usb 1-1: USB disconnect, device number 29 [ 838.128734][ T9] radio-raremono 1-1:0.35: Thanko's Raremono disconnected [ 838.317002][T16765] loop2: detected capacity change from 0 to 16 [ 838.338384][T16765] erofs: (device loop2): mounted with root inode @ nid 36. [ 838.709588][ T5770] Bluetooth: hci1: command 0x0c1a tx timeout [ 838.715695][ T5770] Bluetooth: hci2: command 0x0c1a tx timeout [ 838.748960][ T9] usb 4-1: USB disconnect, device number 21 [ 838.771923][T16755] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 838.802680][T16755] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 838.830935][T16755] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 838.853651][T16755] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 838.986668][T16773] loop8: detected capacity change from 0 to 7 [ 839.020854][T16773] Dev loop8: unable to read RDB block 7 [ 839.033443][T16773] loop8: unable to read partition table [ 839.047151][T16773] loop8: partition table beyond EOD, truncated [ 839.064637][T16773] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 839.588185][ T9] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 839.855591][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 839.927675][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 839.966643][T16768] Bluetooth: hci4: command 0x0c1a tx timeout [ 839.993893][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 840.065128][ T9] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 840.103132][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.145813][ T9] usb 3-1: Product: syz [ 840.160659][ T9] usb 3-1: Manufacturer: syz [ 840.170487][ T9] usb 3-1: SerialNumber: syz [ 840.192441][T16781] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 840.206958][ T9] cyberjack 3-1:1.0: required endpoints missing [ 840.411274][ T9] usb 3-1: USB disconnect, device number 40 [ 840.773151][T16790] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 840.784342][T16790] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 840.790856][T16790] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 840.903300][T16800] loop3: detected capacity change from 0 to 16 [ 840.936800][T16800] erofs: (device loop3): mounted with root inode @ nid 36. [ 841.116425][ T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 841.385097][T16808] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 841.391862][T16808] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 841.417550][T16808] vhci_hcd vhci_hcd.0: Device attached [ 841.445886][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 841.456054][ T9] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 841.470050][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 841.480607][ T9] usb 1-1: config 0 has no interface number 0 [ 841.491887][ T9] usb 1-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 841.509307][ T9] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 841.518696][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.529362][ T9] usb 1-1: Product: syz [ 841.533576][ T9] usb 1-1: Manufacturer: syz [ 841.538980][ T9] usb 1-1: SerialNumber: syz [ 841.555249][ T9] usb 1-1: config 0 descriptor?? [ 841.564825][ T9] radio-si470x 1-1:0.35: could not find interrupt in endpoint [ 841.578261][ T9] radio-si470x: probe of 1-1:0.35 failed with error -5 [ 841.685894][ T5809] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 841.699524][T16810] vhci_hcd: sendmsg failed!, ret=-107 for 48 [ 841.709636][T13887] vhci_hcd: stop threads [ 841.714978][T13887] vhci_hcd: release socket [ 841.722983][T13887] vhci_hcd: disconnect device [ 841.801261][ T9] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 841.827987][ T9] usbhid 1-1:0.35: couldn't find an input interrupt endpoint [ 841.853308][ T9] usb 1-1: USB disconnect, device number 30 [ 842.046152][T16768] Bluetooth: hci4: command 0x0c1a tx timeout [ 842.845951][T16768] Bluetooth: hci1: command 0x0c1a tx timeout [ 842.852003][ T5777] Bluetooth: hci2: command 0x0c1a tx timeout [ 842.864094][T16845] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.3802'. [ 842.946005][T16847] Config c/1 of g9 needs at least one function. [ 842.952828][T16847] udc dummy_udc.0: failed to start g9: -22 [ 842.961406][T16847] configfs-gadget.g9: probe of gadget.0 failed with error -22 [ 842.970056][T16847] UDC core: g9: couldn't find an available UDC or it's busy [ 842.989365][T16821] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 843.002150][T16821] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 843.020491][T16821] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 843.305957][T12898] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 843.518776][T12898] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 843.565562][T12898] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 843.601081][T12898] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 843.630938][T12898] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 843.653051][T12898] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 843.677618][T12898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.685621][T12898] usb 1-1: Product: syz [ 843.697430][T12898] usb 1-1: Manufacturer: syz [ 843.705059][T16866] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.3811'. [ 843.716599][T12898] usb 1-1: SerialNumber: syz [ 843.737419][T16831] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 843.751540][T16831] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 843.779581][T12898] cyberjack 1-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 843.793966][T12898] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 843.801143][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 843.851918][T12898] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 844.001060][T12898] usb 1-1: USB disconnect, device number 31 [ 844.022135][T12898] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 844.033090][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 844.054644][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 844.084712][T12898] cyberjack 1-1:1.0: device disconnected [ 844.093600][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 844.131365][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 844.151944][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.182261][ T9] usb 4-1: Product: syz [ 844.193458][ T9] usb 4-1: Manufacturer: syz [ 844.206494][T16768] Bluetooth: hci4: command 0x0c1a tx timeout [ 844.234740][ T9] usb 4-1: SerialNumber: syz [ 844.470716][ T9] usb 4-1: 0:2 : does not exist [ 844.492968][ T9] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 844.533417][ T9] usb 4-1: USB disconnect, device number 22 [ 844.593732][T13686] udevd[13686]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 844.702357][T16868] loop1: detected capacity change from 0 to 32768 [ 844.720230][T16868] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 844.754406][T16868] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 844.784877][T16868] syz.1.3812: attempt to access beyond end of device [ 844.784877][T16868] loop1: rw=12288, sector=196608, nr_sectors = 8 limit=32768 [ 844.818860][T16868] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 844.818860][T16868] inode = 1 18 [ 844.818860][T16868] function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 844.866078][T16868] gfs2: fsid=syz:syz.0: G: s:SH n:2/12 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:2 [ 844.891187][T16868] gfs2: fsid=syz:syz.0: H: s:SH f:eEcH e:0 p:0 [(none)] init_inodes+0xdb/0x320 [ 844.905388][T16868] gfs2: fsid=syz:syz.0: I: n:1/18 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 844.915304][T16868] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 845.011051][T16768] Bluetooth: hci2: command 0x0c1a tx timeout [ 845.086338][T16768] Bluetooth: hci1: command 0x0c1a tx timeout [ 845.113216][T16871] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 845.121931][T16871] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 845.132527][T16871] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 845.425691][T16890] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.3820'. [ 845.577898][T16893] binder_alloc: 16891: pid 16891 spamming oneway? 2 buffers allocated for a total size of 5120 [ 845.955946][ T9] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 846.151624][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 846.190548][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 846.226389][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 846.272207][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 846.320985][ T9] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 846.338006][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.353092][ T9] usb 1-1: Product: syz [ 846.367370][ T9] usb 1-1: Manufacturer: syz [ 846.379337][ T9] usb 1-1: SerialNumber: syz [ 846.398423][T16896] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 846.413671][T16896] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 846.438888][ T9] cyberjack 1-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 846.459926][ T9] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 846.491449][ T9] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 846.641366][ T9] usb 1-1: USB disconnect, device number 32 [ 846.659174][ T9] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 846.689553][ T9] cyberjack 1-1:1.0: device disconnected [ 846.846188][ T5809] vhci_hcd: vhci_device speed not set [ 847.145230][T16900] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 847.151877][T16900] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 847.161627][T16900] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 847.445844][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 847.529200][T16915] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 847.581977][T16915] CPU: 0 PID: 16915 Comm: syz.2.3831 Not tainted syzkaller #0 [ 847.589469][T16915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 847.599534][T16915] Call Trace: [ 847.602799][T16915] [ 847.605718][T16915] dump_stack_lvl+0x18c/0x250 [ 847.610480][T16915] ? show_regs_print_info+0x20/0x20 [ 847.615776][T16915] ? load_image+0x420/0x420 [ 847.620278][T16915] sysfs_create_dir_ns+0x26e/0x2a0 [ 847.625373][T16915] ? __lock_acquire+0x7d80/0x7d80 [ 847.630385][T16915] ? sysfs_warn_dup+0xa0/0xa0 [ 847.635045][T16915] ? rcu_is_watching+0x15/0xb0 [ 847.639819][T16915] ? do_raw_spin_unlock+0x121/0x230 [ 847.645008][T16915] kobject_add_internal+0x617/0xc90 [ 847.650196][T16915] kobject_add+0x164/0x240 [ 847.654602][T16915] ? kobject_init+0x1d0/0x1d0 [ 847.659264][T16915] ? get_device_parent+0x366/0x390 [ 847.664359][T16915] device_add+0x3fa/0xc40 [ 847.668672][T16915] tty_register_device_attr+0x425/0x950 [ 847.674208][T16915] ? tty_register_device+0x30/0x30 [ 847.679324][T16915] ? tty_port_init+0x132/0x1a0 [ 847.684085][T16915] ? gsm_dlci_alloc+0x32a/0x630 [ 847.689012][T16915] ? __might_fault+0xaa/0x120 [ 847.693674][T16915] gsm_activate_mux+0x110/0x2a0 [ 847.698513][T16915] gsmld_ioctl+0xcec/0x1900 [ 847.703006][T16915] ? gsmld_write+0x120/0x120 [ 847.707583][T16915] ? __init_ldsem+0x150/0x150 [ 847.712244][T16915] ? __fget_files+0x28/0x460 [ 847.716822][T16915] ? gsmld_write+0x120/0x120 [ 847.721402][T16915] tty_ioctl+0x9b5/0xdc0 [ 847.725650][T16915] ? tty_get_icount+0xb0/0xb0 [ 847.730309][T16915] __se_sys_ioctl+0xfd/0x170 [ 847.734884][T16915] do_syscall_64+0x55/0xb0 [ 847.739286][T16915] ? clear_bhb_loop+0x40/0x90 [ 847.743945][T16915] ? clear_bhb_loop+0x40/0x90 [ 847.748691][T16915] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 847.754568][T16915] RIP: 0033:0x7fec4579e0d9 [ 847.758966][T16915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 847.778554][T16915] RSP: 002b:00007fec466b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 847.786965][T16915] RAX: ffffffffffffffda RBX: 00007fec45a26090 RCX: 00007fec4579e0d9 [ 847.794928][T16915] RDX: 0000200000000200 RSI: 0000000040204706 RDI: 0000000000000003 [ 847.802882][T16915] RBP: 00007fec45835024 R08: 0000000000000000 R09: 0000000000000000 [ 847.810832][T16915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 847.818783][T16915] R13: 00007fec45a26128 R14: 00007fec45a26090 R15: 00007ffcd38ec4e8 [ 847.826746][T16915] [ 847.865940][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 847.877245][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 847.892801][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 847.923464][T16915] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 847.950551][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 847.980747][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.038360][ T9] usb 4-1: Product: syz [ 848.069880][ T9] usb 4-1: Manufacturer: syz [ 848.110536][ T9] usb 4-1: SerialNumber: syz [ 848.355000][ T9] usb 4-1: 0:2 : does not exist [ 848.366824][T16768] Bluetooth: hci4: command 0x0c1a tx timeout [ 848.415060][ T9] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 848.482362][ T9] usb 4-1: USB disconnect, device number 23 [ 848.590367][T13686] udevd[13686]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 848.620317][T16919] loop8: detected capacity change from 0 to 7 [ 848.650377][T16919] Dev loop8: unable to read RDB block 7 [ 848.679578][T16919] loop8: unable to read partition table [ 848.690375][T16919] loop8: partition table beyond EOD, truncated [ 848.715656][T16919] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 848.966715][ T7016] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 849.169792][T16768] Bluetooth: hci1: command 0x0c1a tx timeout [ 849.175990][ T5777] Bluetooth: hci2: command 0x0c1a tx timeout [ 849.188476][ T7016] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 849.210465][ T7016] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 849.231810][ T7016] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 849.257119][ T7016] usb 1-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 849.278187][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 849.286379][ T7016] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.304959][ T7016] usb 1-1: config 0 descriptor?? [ 849.475865][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 849.489622][ T9] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 849.506493][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 849.528576][ T9] usb 4-1: config 0 has no interface number 0 [ 849.545666][ T9] usb 4-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 849.578353][ T9] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 849.590809][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.609027][ T9] usb 4-1: Product: syz [ 849.620942][ T9] usb 4-1: Manufacturer: syz [ 849.630042][ T9] usb 4-1: SerialNumber: syz [ 849.647977][ T9] usb 4-1: config 0 descriptor?? [ 849.667617][ T9] radio-si470x 4-1:0.35: could not find interrupt in endpoint [ 849.699472][ T9] radio-si470x: probe of 4-1:0.35 failed with error -5 [ 849.870952][ T9] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 849.891983][ T9] usbhid 4-1:0.35: couldn't find an input interrupt endpoint [ 849.912678][ T9] usb 4-1: USB disconnect, device number 24 [ 849.952323][ T7016] usbhid 1-1:0.0: can't add hid device: -71 [ 849.974153][ T7016] usbhid: probe of 1-1:0.0 failed with error -71 [ 849.986291][T16868] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 850.008992][ T7016] usb 1-1: USB disconnect, device number 33 [ 850.015472][T16868] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 850.038118][T16868] gfs2: fsid=syz:syz.0: File system withdrawn [ 850.056525][T16868] CPU: 0 PID: 16868 Comm: syz.1.3812 Not tainted syzkaller #0 [ 850.064047][T16868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 850.074187][T16868] Call Trace: [ 850.077458][T16868] [ 850.080376][T16868] dump_stack_lvl+0x18c/0x250 [ 850.085046][T16868] ? show_regs_print_info+0x20/0x20 [ 850.090230][T16868] ? load_image+0x420/0x420 [ 850.094722][T16868] ? kobject_uevent_env+0x368/0x890 [ 850.099930][T16868] gfs2_withdraw+0xe16/0x1400 [ 850.104618][T16868] ? gfs2_lm+0x240/0x240 [ 850.108858][T16868] ? wake_bit_function+0x200/0x200 [ 850.113989][T16868] ? gfs2_consist_inode_i+0xf5/0x110 [ 850.119258][T16868] gfs2_jdesc_check+0x13b/0x290 [ 850.124092][T16868] init_journal+0xd26/0x22f0 [ 850.128696][T16868] ? init_inodes+0xdb/0x320 [ 850.133217][T16868] ? _compound_head+0x120/0x120 [ 850.138060][T16868] ? vsnprintf+0x1ac7/0x1ba0 [ 850.142661][T16868] ? snprintf+0xe9/0x140 [ 850.146900][T16868] ? init_inodes+0xdb/0x320 [ 850.151392][T16868] ? vscnprintf+0x80/0x80 [ 850.155712][T16868] ? gfs2_glock_nq_num+0x179/0x1b0 [ 850.160809][T16868] init_inodes+0xdb/0x320 [ 850.165141][T16868] gfs2_fill_super+0x1828/0x1f90 [ 850.170069][T16868] ? gfs2_reconfigure+0xb20/0xb20 [ 850.175076][T16868] ? init_locking+0xb8/0x200 [ 850.179648][T16868] ? setup_bdev_super+0x56b/0x660 [ 850.184654][T16868] get_tree_bdev+0x3e5/0x520 [ 850.189222][T16868] ? kfree+0x31/0x1a0 [ 850.193190][T16868] ? gfs2_reconfigure+0xb20/0xb20 [ 850.198198][T16868] ? setup_bdev_super+0x660/0x660 [ 850.203222][T16868] gfs2_get_tree+0x51/0x1e0 [ 850.207733][T16868] vfs_get_tree+0x8c/0x280 [ 850.212133][T16868] do_new_mount+0x24a/0xa40 [ 850.216624][T16868] __se_sys_mount+0x2e7/0x3d0 [ 850.221287][T16868] ? __x64_sys_mount+0xc0/0xc0 [ 850.226034][T16868] ? lockdep_hardirqs_on+0x98/0x150 [ 850.231229][T16868] ? __x64_sys_mount+0x20/0xc0 [ 850.235983][T16868] do_syscall_64+0x55/0xb0 [ 850.240379][T16868] ? clear_bhb_loop+0x40/0x90 [ 850.245037][T16868] ? clear_bhb_loop+0x40/0x90 [ 850.249698][T16868] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 850.255574][T16868] RIP: 0033:0x7f6fc479f34a [ 850.260100][T16868] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 850.279724][T16868] RSP: 002b:00007f6fc565ce58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 850.288128][T16868] RAX: ffffffffffffffda RBX: 00007f6fc565cee0 RCX: 00007f6fc479f34a [ 850.296084][T16868] RDX: 00002000000124c0 RSI: 0000200000012500 RDI: 00007f6fc565cea0 [ 850.304041][T16868] RBP: 00002000000124c0 R08: 00007f6fc565cee0 R09: 0000000000000000 [ 850.311996][T16868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500 [ 850.319946][T16868] R13: 00007f6fc565cea0 R14: 0000000000012620 R15: 0000200000000180 [ 850.327916][T16868] [ 850.400394][T16868] gfs2: fsid=syz:syz.0: my journal (0) is bad: -5 [ 850.599061][T16927] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 850.605382][T16927] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 850.635549][T16927] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 851.155943][T16943] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 851.164410][T16943] CPU: 0 PID: 16943 Comm: syz.3.3842 Not tainted syzkaller #0 [ 851.171867][T16943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 851.181922][T16943] Call Trace: [ 851.185187][T16943] [ 851.188104][T16943] dump_stack_lvl+0x18c/0x250 [ 851.192770][T16943] ? show_regs_print_info+0x20/0x20 [ 851.197949][T16943] ? load_image+0x420/0x420 [ 851.202444][T16943] sysfs_create_dir_ns+0x26e/0x2a0 [ 851.207537][T16943] ? __lock_acquire+0x7d80/0x7d80 [ 851.212546][T16943] ? sysfs_warn_dup+0xa0/0xa0 [ 851.217202][T16943] ? rcu_is_watching+0x15/0xb0 [ 851.221952][T16943] ? do_raw_spin_unlock+0x121/0x230 [ 851.227132][T16943] kobject_add_internal+0x617/0xc90 [ 851.232318][T16943] kobject_add+0x164/0x240 [ 851.236721][T16943] ? kobject_init+0x1d0/0x1d0 [ 851.241385][T16943] ? get_device_parent+0x366/0x390 [ 851.246478][T16943] device_add+0x3fa/0xc40 [ 851.250794][T16943] tty_register_device_attr+0x425/0x950 [ 851.256326][T16943] ? tty_register_device+0x30/0x30 [ 851.261427][T16943] ? tty_port_init+0x132/0x1a0 [ 851.266168][T16943] ? gsm_dlci_alloc+0x32a/0x630 [ 851.270999][T16943] ? __might_fault+0xaa/0x120 [ 851.275658][T16943] gsm_activate_mux+0x110/0x2a0 [ 851.280495][T16943] gsmld_ioctl+0xcec/0x1900 [ 851.285014][T16943] ? gsmld_write+0x120/0x120 [ 851.289701][T16943] ? __init_ldsem+0x150/0x150 [ 851.294374][T16943] ? __fget_files+0x28/0x460 [ 851.298960][T16943] ? gsmld_write+0x120/0x120 [ 851.303538][T16943] tty_ioctl+0x9b5/0xdc0 [ 851.307771][T16943] ? tty_get_icount+0xb0/0xb0 [ 851.312429][T16943] __se_sys_ioctl+0xfd/0x170 [ 851.317004][T16943] do_syscall_64+0x55/0xb0 [ 851.321407][T16943] ? clear_bhb_loop+0x40/0x90 [ 851.326100][T16943] ? clear_bhb_loop+0x40/0x90 [ 851.330763][T16943] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 851.336639][T16943] RIP: 0033:0x7f138af9e0d9 [ 851.341039][T16943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 851.360633][T16943] RSP: 002b:00007f138bef0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 851.369029][T16943] RAX: ffffffffffffffda RBX: 00007f138b226090 RCX: 00007f138af9e0d9 [ 851.376984][T16943] RDX: 0000200000000200 RSI: 0000000040204706 RDI: 0000000000000003 [ 851.384935][T16943] RBP: 00007f138b035024 R08: 0000000000000000 R09: 0000000000000000 [ 851.392888][T16943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 851.400838][T16943] R13: 00007f138b226128 R14: 00007f138b226090 R15: 00007fff0eb7e7b8 [ 851.408799][T16943] [ 851.454365][ T7016] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 851.562218][T16943] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 851.763311][ T7016] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 851.803518][ T7016] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 851.874183][ T7016] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 851.885853][ T5777] Bluetooth: hci4: command 0x0c1a tx timeout [ 851.936841][ T7016] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 852.014449][ T7016] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 852.058478][ T7016] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.108899][ T7016] usb 2-1: Product: syz [ 852.123737][ T7016] usb 2-1: Manufacturer: syz [ 852.149364][ T7016] usb 2-1: SerialNumber: syz [ 852.189867][T16935] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 852.226942][T16935] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 852.249754][ T7016] cyberjack 2-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 852.487340][T16952] loop2: detected capacity change from 0 to 32768 [ 852.516416][T16952] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 852.524630][T16952] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 852.539346][ T7016] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 852.557587][T16952] syz.2.3845: attempt to access beyond end of device [ 852.557587][T16952] loop2: rw=12288, sector=196608, nr_sectors = 8 limit=32768 [ 852.571691][T16952] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 852.571691][T16952] inode = 1 18 [ 852.571691][T16952] function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 852.590259][T16952] gfs2: fsid=syz:syz.0: G: s:SH n:2/12 f:qob t:SH d:EX/0 a:0 v:0 r:4 m:20 p:2 [ 852.599387][T16952] gfs2: fsid=syz:syz.0: H: s:SH f:eEcH e:0 p:0 [(none)] init_inodes+0xdb/0x320 [ 852.608719][T16952] gfs2: fsid=syz:syz.0: I: n:1/18 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 852.618060][T16952] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 852.625433][ T5777] Bluetooth: hci2: command 0x0c1a tx timeout [ 852.679277][ T7016] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 852.688788][ T5777] Bluetooth: hci1: command 0x0c1a tx timeout [ 852.755159][ T7016] usb 2-1: USB disconnect, device number 42 [ 852.812107][ T7016] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 852.877865][ T7016] cyberjack 2-1:1.0: device disconnected [ 853.728573][T16955] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 853.734966][T16955] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 853.751839][T16955] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 854.545863][ T9] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 854.737461][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 854.764443][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 854.786046][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 854.809824][ T9] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 854.825885][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.849978][ T9] usb 2-1: Product: syz [ 854.863488][ T9] usb 2-1: Manufacturer: syz [ 854.873129][ T9] usb 2-1: SerialNumber: syz [ 854.887112][T16983] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 854.901647][T16983] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 854.910765][ T9] cyberjack 2-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 854.922998][ T9] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 854.942912][ T9] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 855.116602][ T9] usb 2-1: USB disconnect, device number 43 [ 855.132182][ T9] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 855.151295][ T9] cyberjack 2-1:1.0: device disconnected [ 855.719484][T16995] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 855.727077][T16995] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 855.733159][T16995] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 856.005794][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 856.065796][ T7016] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 856.185810][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 856.192364][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 856.203761][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 856.221064][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 856.231837][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.241174][ T9] usb 4-1: Product: syz [ 856.245470][ T9] usb 4-1: Manufacturer: syz [ 856.250317][ T7016] usb 1-1: Using ep0 maxpacket: 32 [ 856.256064][ T9] usb 4-1: SerialNumber: syz [ 856.266618][ T7016] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 856.287730][ T7016] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 856.302088][ T7016] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 856.311716][ T7016] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.328492][ T7016] usb 1-1: config 0 descriptor?? [ 856.489671][ T9] usb 4-1: 0:2 : does not exist [ 856.506644][ T9] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 856.545897][ T9] usb 4-1: USB disconnect, device number 25 [ 856.609626][T13686] udevd[13686]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 856.747544][ T7016] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0 [ 856.760444][ T7016] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0 [ 856.768935][ T7016] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0 [ 856.778655][ T7016] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0 [ 856.786240][ T7016] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0 [ 856.804938][ T7016] koneplus 0003:1E7D:2D51.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.0-1/input0 [ 856.905851][T12898] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 857.006112][ T5777] Bluetooth: hci4: command 0x0c1a tx timeout [ 857.097170][T12898] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 857.117765][T12898] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 857.154125][T12898] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 857.178821][ T7016] usb 1-1: USB disconnect, device number 34 [ 857.195994][T12898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.229021][T12898] usb 2-1: config 0 descriptor?? [ 857.257615][T12898] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 857.648917][T16952] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 857.657905][T16952] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 857.664853][T16952] gfs2: fsid=syz:syz.0: File system withdrawn [ 857.671050][T16952] CPU: 0 PID: 16952 Comm: syz.2.3845 Not tainted syzkaller #0 [ 857.678511][T16952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 857.688571][T16952] Call Trace: [ 857.691837][T16952] [ 857.694754][T16952] dump_stack_lvl+0x18c/0x250 [ 857.699423][T16952] ? show_regs_print_info+0x20/0x20 [ 857.704606][T16952] ? load_image+0x420/0x420 [ 857.709097][T16952] ? kobject_uevent_env+0x368/0x890 [ 857.714561][T16952] gfs2_withdraw+0xe16/0x1400 [ 857.719266][T16952] ? gfs2_lm+0x240/0x240 [ 857.723577][T16952] ? wake_bit_function+0x200/0x200 [ 857.728674][T16952] ? gfs2_consist_inode_i+0xf5/0x110 [ 857.733944][T16952] gfs2_jdesc_check+0x13b/0x290 [ 857.738779][T16952] init_journal+0xd26/0x22f0 [ 857.743360][T16952] ? init_inodes+0xdb/0x320 [ 857.747849][T16952] ? _compound_head+0x120/0x120 [ 857.752685][T16952] ? vsnprintf+0x1ac7/0x1ba0 [ 857.757278][T16952] ? snprintf+0xe9/0x140 [ 857.761519][T16952] ? init_inodes+0xdb/0x320 [ 857.766022][T16952] ? vscnprintf+0x80/0x80 [ 857.770339][T16952] ? gfs2_glock_nq_num+0x179/0x1b0 [ 857.775450][T16952] init_inodes+0xdb/0x320 [ 857.779779][T16952] gfs2_fill_super+0x1828/0x1f90 [ 857.784718][T16952] ? gfs2_reconfigure+0xb20/0xb20 [ 857.789738][T16952] ? init_locking+0xb8/0x200 [ 857.794311][T16952] ? setup_bdev_super+0x56b/0x660 [ 857.799330][T16952] get_tree_bdev+0x3e5/0x520 [ 857.803900][T16952] ? kfree+0x31/0x1a0 [ 857.807873][T16952] ? gfs2_reconfigure+0xb20/0xb20 [ 857.812886][T16952] ? setup_bdev_super+0x660/0x660 [ 857.817911][T16952] gfs2_get_tree+0x51/0x1e0 [ 857.822397][T16952] vfs_get_tree+0x8c/0x280 [ 857.826796][T16952] do_new_mount+0x24a/0xa40 [ 857.831290][T16952] __se_sys_mount+0x2e7/0x3d0 [ 857.835951][T16952] ? __x64_sys_mount+0xc0/0xc0 [ 857.840715][T16952] ? lockdep_hardirqs_on+0x98/0x150 [ 857.845911][T16952] ? __x64_sys_mount+0x20/0xc0 [ 857.850666][T16952] do_syscall_64+0x55/0xb0 [ 857.855060][T16952] ? clear_bhb_loop+0x40/0x90 [ 857.859718][T16952] ? clear_bhb_loop+0x40/0x90 [ 857.864401][T16952] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 857.870272][T16952] RIP: 0033:0x7fec4579f34a [ 857.874670][T16952] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 857.894256][T16952] RSP: 002b:00007fec466b3e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 857.902648][T16952] RAX: ffffffffffffffda RBX: 00007fec466b3ee0 RCX: 00007fec4579f34a [ 857.910601][T16952] RDX: 00002000000124c0 RSI: 0000200000012500 RDI: 00007fec466b3ea0 [ 857.918582][T16952] RBP: 00002000000124c0 R08: 00007fec466b3ee0 R09: 0000000000000000 [ 857.926551][T16952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500 [ 857.934500][T16952] R13: 00007fec466b3ea0 R14: 0000000000012620 R15: 0000200000000180 [ 857.942476][T16952] [ 857.947176][T16952] gfs2: fsid=syz:syz.0: my journal (0) is bad: -5 [ 858.026106][ T5777] Bluetooth: hci1: command 0x0c1a tx timeout [ 858.032129][ T5777] Bluetooth: hci2: command 0x0c1a tx timeout [ 859.149040][T17021] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 859.193669][T17021] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 859.241311][T17021] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 859.817521][T12937] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 860.233821][T17049] loop3: detected capacity change from 0 to 32768 [ 860.241297][T12937] usb 3-1: Using ep0 maxpacket: 32 [ 860.268215][T17049] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 860.276617][T17049] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 860.286487][T17049] syz.3.3882: attempt to access beyond end of device [ 860.286487][T17049] loop3: rw=12288, sector=196608, nr_sectors = 8 limit=32768 [ 860.302266][T17049] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 860.302266][T17049] inode = 1 18 [ 860.302266][T17049] function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 860.321111][T17049] gfs2: fsid=syz:syz.0: G: s:SH n:2/12 f:qob t:SH d:EX/0 a:0 v:0 r:4 m:20 p:2 [ 860.330156][T17049] gfs2: fsid=syz:syz.0: H: s:SH f:eEcH e:0 p:0 [(none)] init_inodes+0xdb/0x320 [ 860.339265][T17049] gfs2: fsid=syz:syz.0: I: n:1/18 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 860.347755][T17049] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 860.366025][ T5777] Bluetooth: hci4: command 0x0c1a tx timeout [ 860.385125][T12937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 860.447703][T12937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 860.481583][T12937] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 860.530635][T12937] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 860.565556][T12937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.599825][T12937] usb 3-1: config 0 descriptor?? [ 860.681942][ T7016] usb 2-1: USB disconnect, device number 44 [ 860.688087][T12898] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 860.907807][T12898] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 860.940470][T12898] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 860.964080][T12898] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 860.992594][T12898] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 861.022255][T12898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.060680][T12898] usb 1-1: Product: syz [ 861.075079][T12898] usb 1-1: Manufacturer: syz [ 861.086218][T12937] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0007/input/input13 [ 861.106314][T12898] usb 1-1: SerialNumber: syz [ 861.120956][T17052] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 861.146227][T17052] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 861.170027][T12898] cyberjack 1-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 861.181743][T12898] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 861.190776][T12898] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 861.246596][T16768] Bluetooth: hci2: command 0x0c1a tx timeout [ 861.252720][ T5777] Bluetooth: hci1: command 0x0c1a tx timeout [ 861.267958][T12937] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0007/input/input14 [ 861.379726][T12937] kye 0003:0458:5011.0007: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 861.426253][T12898] usb 1-1: USB disconnect, device number 35 [ 861.454565][T12898] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 861.482081][T12937] usb 3-1: USB disconnect, device number 41 [ 861.510748][T12898] cyberjack 1-1:1.0: device disconnected [ 861.533301][T17062] fido_id[17062]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 861.895324][T17060] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 861.913051][T17060] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 861.940957][T17060] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 862.145103][T17076] netlink: 'syz.2.3899': attribute type 2 has an invalid length. [ 862.325989][T12937] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 862.516390][T12937] usb 1-1: Using ep0 maxpacket: 8 [ 862.530682][T12937] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 862.548484][T12937] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 862.559819][T12937] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 862.574294][T12937] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 862.587810][T12937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.616907][T12937] usb 1-1: Product: syz [ 862.633552][T12937] usb 1-1: Manufacturer: syz [ 862.655313][T12937] usb 1-1: SerialNumber: syz [ 863.166758][ T5777] Bluetooth: hci4: command 0x0c1a tx timeout [ 863.322830][T12937] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 863.342324][T12937] usb 1-1: clock source 0 is not valid, cannot use [ 863.354925][T12937] usb 1-1: 1:1: cannot get freq (v2/v3): err -32 [ 863.558025][T17093] gadgetfs: bound to dummy_udc driver [ 863.584226][T17093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 863.605136][T17093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 863.670648][ T7016] usb 1-1: USB disconnect, device number 36 [ 863.686548][T12898] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 863.899535][T12898] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 863.909695][T12898] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 863.920884][T12898] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 863.937989][T12898] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 863.949552][T12898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.958001][T12898] usb 3-1: Product: syz [ 863.962245][T12898] usb 3-1: Manufacturer: syz [ 863.972396][T16768] Bluetooth: hci2: command 0x0c1a tx timeout [ 863.979337][ T5777] Bluetooth: hci1: command 0x0c1a tx timeout [ 863.996260][T12898] usb 3-1: SerialNumber: syz [ 864.004367][T17090] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 864.015317][T17090] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 864.027174][T12898] cyberjack 3-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 864.041834][T12898] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 864.449937][T12898] usb 3-1: USB disconnect, device number 42 [ 864.468314][T12898] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 864.490242][T12898] cyberjack 3-1:1.0: device disconnected [ 865.335968][T12898] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 865.411995][T17049] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 865.420897][T17049] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 865.427512][T17049] gfs2: fsid=syz:syz.0: File system withdrawn [ 865.433593][T17049] CPU: 0 PID: 17049 Comm: syz.3.3882 Not tainted syzkaller #0 [ 865.441048][T17049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 865.451181][T17049] Call Trace: [ 865.454447][T17049] [ 865.457362][T17049] dump_stack_lvl+0x18c/0x250 [ 865.462028][T17049] ? show_regs_print_info+0x20/0x20 [ 865.467208][T17049] ? load_image+0x420/0x420 [ 865.471716][T17049] ? kobject_uevent_env+0x368/0x890 [ 865.476902][T17049] gfs2_withdraw+0xe16/0x1400 [ 865.481569][T17049] ? gfs2_lm+0x240/0x240 [ 865.485791][T17049] ? wake_bit_function+0x200/0x200 [ 865.490893][T17049] ? gfs2_consist_inode_i+0xf5/0x110 [ 865.496165][T17049] gfs2_jdesc_check+0x13b/0x290 [ 865.500999][T17049] init_journal+0xd26/0x22f0 [ 865.505577][T17049] ? init_inodes+0xdb/0x320 [ 865.510085][T17049] ? _compound_head+0x120/0x120 [ 865.514916][T17049] ? vsnprintf+0x1ac7/0x1ba0 [ 865.519495][T17049] ? snprintf+0xe9/0x140 [ 865.523722][T17049] ? init_inodes+0xdb/0x320 [ 865.528217][T17049] ? vscnprintf+0x80/0x80 [ 865.532618][T17049] ? gfs2_glock_nq_num+0x179/0x1b0 [ 865.537731][T17049] init_inodes+0xdb/0x320 [ 865.542046][T17049] gfs2_fill_super+0x1828/0x1f90 [ 865.546975][T17049] ? gfs2_reconfigure+0xb20/0xb20 [ 865.551992][T17049] ? init_locking+0xb8/0x200 [ 865.556566][T17049] ? setup_bdev_super+0x56b/0x660 [ 865.561573][T17049] get_tree_bdev+0x3e5/0x520 [ 865.566144][T17049] ? kfree+0x31/0x1a0 [ 865.570128][T17049] ? gfs2_reconfigure+0xb20/0xb20 [ 865.575135][T17049] ? setup_bdev_super+0x660/0x660 [ 865.580147][T17049] gfs2_get_tree+0x51/0x1e0 [ 865.584632][T17049] vfs_get_tree+0x8c/0x280 [ 865.589031][T17049] do_new_mount+0x24a/0xa40 [ 865.593517][T17049] __se_sys_mount+0x2e7/0x3d0 [ 865.598182][T17049] ? __x64_sys_mount+0xc0/0xc0 [ 865.602949][T17049] ? lockdep_hardirqs_on+0x98/0x150 [ 865.608131][T17049] ? __x64_sys_mount+0x20/0xc0 [ 865.612876][T17049] do_syscall_64+0x55/0xb0 [ 865.617274][T17049] ? clear_bhb_loop+0x40/0x90 [ 865.622017][T17049] ? clear_bhb_loop+0x40/0x90 [ 865.626672][T17049] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 865.632546][T17049] RIP: 0033:0x7f138af9f34a [ 865.636945][T17049] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 865.656530][T17049] RSP: 002b:00007f138beefe58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 865.664925][T17049] RAX: ffffffffffffffda RBX: 00007f138beefee0 RCX: 00007f138af9f34a [ 865.672876][T17049] RDX: 00002000000124c0 RSI: 0000200000012500 RDI: 00007f138beefea0 [ 865.680832][T17049] RBP: 00002000000124c0 R08: 00007f138beefee0 R09: 0000000000000000 [ 865.688783][T17049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500 [ 865.696748][T17049] R13: 00007f138beefea0 R14: 0000000000012620 R15: 0000200000000180 [ 865.704709][T17049] [ 865.708868][T17049] gfs2: fsid=syz:syz.0: my journal (0) is bad: -5 [ 865.781846][T12937] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 865.797737][T12898] usb 3-1: device descriptor read/64, error -71 [ 865.975952][T12937] usb 1-1: device descriptor read/64, error -71 [ 866.092594][T12898] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 866.250565][T12937] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 866.258517][T12898] usb 3-1: device descriptor read/64, error -71 [ 866.389249][T12898] usb usb3-port1: attempt power cycle [ 866.428270][T12937] usb 1-1: device descriptor read/64, error -71 [ 866.460226][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 866.561260][T12937] usb usb1-port1: attempt power cycle [ 866.629089][ T9] usb 4-1: device descriptor read/64, error -71 [ 866.809357][T12898] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 866.860354][T12898] usb 3-1: device descriptor read/8, error -71 [ 866.898119][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 866.982016][T12937] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 867.034387][T12937] usb 1-1: device descriptor read/8, error -71 [ 867.066776][ T9] usb 4-1: device descriptor read/64, error -71 [ 867.138336][T12898] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 867.191678][ T9] usb usb4-port1: attempt power cycle [ 867.199507][T12898] usb 3-1: device descriptor read/8, error -71 [ 867.306932][T12937] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 867.325952][T12898] usb usb3-port1: unable to enumerate USB device [ 867.351038][T12937] usb 1-1: device descriptor read/8, error -71 [ 867.491210][T12937] usb usb1-port1: unable to enumerate USB device [ 867.623610][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 867.674924][ T9] usb 4-1: device descriptor read/8, error -71 [ 867.951426][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 868.004746][ T9] usb 4-1: device descriptor read/8, error -71 [ 868.136031][ T9] usb usb4-port1: unable to enumerate USB device [ 868.147076][T17121] binder: BINDER_SET_CONTEXT_MGR already set [ 868.176195][T17121] binder: 17120:17121 ioctl 4018620d 200000000300 returned -16 [ 868.587034][T12898] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 868.787650][T12898] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 868.809141][T12898] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 868.857587][T12898] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 868.867242][T17132] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 868.874650][T17132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 868.884572][T12898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.908099][T12898] usb 3-1: config 0 descriptor?? [ 868.946135][T12898] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 868.979710][T17132] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 869.013713][T17132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 869.966929][T17146] loop3: detected capacity change from 0 to 32768 [ 870.098259][T17146] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 870.106607][T17146] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 870.125662][T17146] syz.3.3926: attempt to access beyond end of device [ 870.125662][T17146] loop3: rw=12288, sector=196608, nr_sectors = 8 limit=32768 [ 870.139909][T17146] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 870.139909][T17146] inode = 1 18 [ 870.139909][T17146] function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 870.158464][T17146] gfs2: fsid=syz:syz.0: G: s:SH n:2/12 f:qob t:SH d:EX/0 a:0 v:0 r:4 m:20 p:2 [ 870.167419][T17146] gfs2: fsid=syz:syz.0: H: s:SH f:eEcH e:0 p:0 [(none)] init_inodes+0xdb/0x320 [ 870.176491][T17146] gfs2: fsid=syz:syz.0: I: n:1/18 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 870.184885][T17146] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 870.192267][T12898] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 870.289880][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.299560][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.369201][T12898] usb 2-1: device descriptor read/64, error -71 [ 870.656833][T17156] netlink: 'syz.0.3933': attribute type 2 has an invalid length. [ 870.669082][T12898] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 870.847452][T12898] usb 2-1: device descriptor read/64, error -71 [ 870.990262][T12898] usb usb2-port1: attempt power cycle [ 871.435920][T12898] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 871.488381][T12898] usb 2-1: device descriptor read/8, error -71 [ 871.663439][ T5807] usb 3-1: USB disconnect, device number 47 [ 871.766080][T12898] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 871.807105][T12898] usb 2-1: device descriptor read/8, error -71 [ 871.836114][ T9] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 871.926198][T12898] usb usb2-port1: unable to enumerate USB device [ 871.995882][ T9] usb 1-1: device descriptor read/64, error -71 [ 872.265814][ T9] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 872.417446][ T9] usb 1-1: device descriptor read/64, error -71 [ 872.537837][ T9] usb usb1-port1: attempt power cycle [ 872.945773][ T9] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 872.988645][ T9] usb 1-1: device descriptor read/8, error -71 [ 873.275825][ T9] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 873.317899][ T9] usb 1-1: device descriptor read/8, error -71 [ 873.455999][ T9] usb usb1-port1: unable to enumerate USB device [ 873.605771][ T9] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 873.785919][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 873.794576][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 873.809607][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 873.819841][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 873.837736][ T9] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 873.848687][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.860464][ T9] usb 2-1: config 0 descriptor?? [ 874.279600][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 874.290756][ T9] usbhid: probe of 2-1:0.0 failed with error -71 [ 874.300422][ T9] usb 2-1: USB disconnect, device number 49 [ 875.045878][ T9] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 875.237203][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 875.250964][T17146] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 875.260010][T17146] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 875.266612][T17146] gfs2: fsid=syz:syz.0: File system withdrawn [ 875.272659][T17146] CPU: 0 PID: 17146 Comm: syz.3.3926 Not tainted syzkaller #0 [ 875.280110][T17146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 875.290269][T17146] Call Trace: [ 875.293540][T17146] [ 875.296456][T17146] dump_stack_lvl+0x18c/0x250 [ 875.301127][T17146] ? show_regs_print_info+0x20/0x20 [ 875.306308][T17146] ? load_image+0x420/0x420 [ 875.310799][T17146] ? kobject_uevent_env+0x368/0x890 [ 875.316010][T17146] gfs2_withdraw+0xe16/0x1400 [ 875.320683][T17146] ? gfs2_lm+0x240/0x240 [ 875.324917][T17146] ? wake_bit_function+0x200/0x200 [ 875.330041][T17146] ? gfs2_consist_inode_i+0xf5/0x110 [ 875.335398][T17146] gfs2_jdesc_check+0x13b/0x290 [ 875.340233][T17146] init_journal+0xd26/0x22f0 [ 875.344815][T17146] ? init_inodes+0xdb/0x320 [ 875.349322][T17146] ? _compound_head+0x120/0x120 [ 875.354154][T17146] ? vsnprintf+0x1ac7/0x1ba0 [ 875.358836][T17146] ? snprintf+0xe9/0x140 [ 875.363062][T17146] ? init_inodes+0xdb/0x320 [ 875.367544][T17146] ? vscnprintf+0x80/0x80 [ 875.371856][T17146] ? gfs2_glock_nq_num+0x179/0x1b0 [ 875.376966][T17146] init_inodes+0xdb/0x320 [ 875.381290][T17146] gfs2_fill_super+0x1828/0x1f90 [ 875.386231][T17146] ? gfs2_reconfigure+0xb20/0xb20 [ 875.391236][T17146] ? init_locking+0xb8/0x200 [ 875.395810][T17146] ? setup_bdev_super+0x56b/0x660 [ 875.400816][T17146] get_tree_bdev+0x3e5/0x520 [ 875.405385][T17146] ? kfree+0x31/0x1a0 [ 875.409348][T17146] ? gfs2_reconfigure+0xb20/0xb20 [ 875.414351][T17146] ? setup_bdev_super+0x660/0x660 [ 875.419361][T17146] gfs2_get_tree+0x51/0x1e0 [ 875.423848][T17146] vfs_get_tree+0x8c/0x280 [ 875.428247][T17146] do_new_mount+0x24a/0xa40 [ 875.432734][T17146] __se_sys_mount+0x2e7/0x3d0 [ 875.437395][T17146] ? __x64_sys_mount+0xc0/0xc0 [ 875.442139][T17146] ? lockdep_hardirqs_on+0x98/0x150 [ 875.447317][T17146] ? __x64_sys_mount+0x20/0xc0 [ 875.452060][T17146] do_syscall_64+0x55/0xb0 [ 875.456453][T17146] ? clear_bhb_loop+0x40/0x90 [ 875.461110][T17146] ? clear_bhb_loop+0x40/0x90 [ 875.465767][T17146] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 875.471643][T17146] RIP: 0033:0x7f138af9f34a [ 875.476041][T17146] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 875.495628][T17146] RSP: 002b:00007f138beefe58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 875.504021][T17146] RAX: ffffffffffffffda RBX: 00007f138beefee0 RCX: 00007f138af9f34a [ 875.511973][T17146] RDX: 00002000000124c0 RSI: 0000200000012500 RDI: 00007f138beefea0 [ 875.519922][T17146] RBP: 00002000000124c0 R08: 00007f138beefee0 R09: 0000000000000000 [ 875.527876][T17146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500 [ 875.535826][T17146] R13: 00007f138beefea0 R14: 0000000000012620 R15: 0000200000000180 [ 875.543785][T17146] [ 875.547975][T17146] gfs2: fsid=syz:syz.0: my journal (0) is bad: -5 [ 875.621756][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 875.686385][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 875.717446][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.766029][ T9] usb 1-1: config 0 descriptor?? [ 875.789604][ T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 876.155787][ T9] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 876.307552][ T9] usb 4-1: device descriptor read/64, error -71 [ 876.527680][T17200] overlayfs: failed to resolve './file2': -2 [ 876.596065][ T9] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 876.794507][ T9] usb 4-1: device descriptor read/64, error -71 [ 876.926060][ T9] usb usb4-port1: attempt power cycle [ 877.334497][T17208] (null): rxe_set_mtu: Set mtu to 4096 [ 877.350095][ T9] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 877.363173][T17208] lo speed is unknown, defaulting to 1000 [ 877.383239][T17208] lo speed is unknown, defaulting to 1000 [ 877.401888][T17208] lo speed is unknown, defaulting to 1000 [ 877.411548][ T9] usb 4-1: device descriptor read/8, error -71 [ 877.696896][ T9] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 877.778713][ T9] usb 4-1: device descriptor read/8, error -71 [ 877.789946][T17208] infiniband syz0: set active [ 877.809061][T12898] lo speed is unknown, defaulting to 1000 [ 877.826143][T17208] infiniband syz0: added lo [ 877.926478][ T9] usb usb4-port1: unable to enumerate USB device [ 877.955479][T17208] RDS/IB: syz0: added [ 877.979910][T17208] smc: adding ib device syz0 with port count 1 [ 877.998035][T17208] smc: ib device syz0 port 1 has pnetid [ 878.040551][ T5807] lo speed is unknown, defaulting to 1000 [ 878.065115][T17208] lo speed is unknown, defaulting to 1000 [ 878.312960][T17208] lo speed is unknown, defaulting to 1000 [ 878.328737][ T5807] usb 1-1: USB disconnect, device number 45 [ 878.520764][T17208] lo speed is unknown, defaulting to 1000 [ 878.530138][T17222] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.3957'. [ 878.639415][T17208] lo speed is unknown, defaulting to 1000 [ 879.286182][ T5807] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 879.375861][T12898] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 879.466171][ T5807] usb 3-1: Using ep0 maxpacket: 8 [ 879.475574][ T5807] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 879.485466][ T5807] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.495209][ T5807] usb 3-1: Product: syz [ 879.500111][ T5807] usb 3-1: Manufacturer: syz [ 879.504751][ T5807] usb 3-1: SerialNumber: syz [ 879.515296][ T5807] usb 3-1: config 0 descriptor?? [ 879.535944][ T9] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 879.556158][T12898] usb 4-1: Using ep0 maxpacket: 32 [ 879.564514][T12898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 879.602119][T12898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 879.627492][T12898] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 879.648450][T12898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.665033][T12898] usb 4-1: config 0 descriptor?? [ 879.723592][ T5807] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 879.738866][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 879.752124][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 879.763036][ T5807] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 879.772594][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 879.789802][ T5807] usb 3-1: USB disconnect, device number 48 [ 879.821667][ T9] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 879.838218][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.849626][ T9] usb 1-1: Product: syz [ 879.853847][ T9] usb 1-1: Manufacturer: syz [ 879.859162][ T9] usb 1-1: SerialNumber: syz [ 879.877579][T17239] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 879.884997][T17239] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 879.896223][ T9] cyberjack 1-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 879.922400][ T9] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 880.079984][T12898] koneplus 0003:1E7D:2D51.0008: unknown main item tag 0x0 [ 880.090973][T12898] koneplus 0003:1E7D:2D51.0008: unknown main item tag 0x0 [ 880.105041][T12898] koneplus 0003:1E7D:2D51.0008: unknown main item tag 0x0 [ 880.114758][T12898] koneplus 0003:1E7D:2D51.0008: unknown main item tag 0x0 [ 880.122433][T12898] koneplus 0003:1E7D:2D51.0008: unknown main item tag 0x0 [ 880.145431][T12898] koneplus 0003:1E7D:2D51.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.3-1/input0 [ 880.289719][T12898] koneplus 0003:1E7D:2D51.0008: couldn't init struct koneplus_device [ 880.314447][ T5807] usb 1-1: USB disconnect, device number 46 [ 880.340936][T12898] koneplus 0003:1E7D:2D51.0008: couldn't install mouse [ 880.354699][ T5807] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 880.392284][T12898] koneplus: probe of 0003:1E7D:2D51.0008 failed with error -71 [ 880.422178][ T5807] cyberjack 1-1:1.0: device disconnected [ 880.452285][T12898] usb 4-1: USB disconnect, device number 34 [ 880.568722][T17252] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.3970'. [ 880.815932][ T9] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 881.026322][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 881.032810][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 881.049355][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 881.063234][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 881.073754][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.094045][ T9] usb 2-1: Product: syz [ 881.101267][ T9] usb 2-1: Manufacturer: syz [ 881.118072][ T9] usb 2-1: SerialNumber: syz [ 881.174475][T17262] binder_alloc: 17261: binder_alloc_buf, no vma [ 881.181630][ T5807] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 881.353631][ T9] usb 2-1: 0:2 : does not exist [ 881.379265][ T5807] usb 1-1: Using ep0 maxpacket: 32 [ 881.410990][ T9] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 881.422564][ T5807] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 881.463811][ T5807] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 881.484297][ T9] usb 2-1: USB disconnect, device number 50 [ 881.527357][ T5807] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 881.564985][T13686] udevd[13686]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 881.611501][ T5807] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 881.647385][ T5807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.697581][ T5807] usb 1-1: config 0 descriptor?? [ 881.916355][T12937] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 881.939426][T17279] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.3983'. [ 882.045846][T12898] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 882.107876][T12937] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 882.119243][T12937] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 882.130331][T12937] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 882.149389][ T5807] usbhid 1-1:0.0: can't add hid device: -71 [ 882.158363][ T5807] usbhid: probe of 1-1:0.0 failed with error -71 [ 882.167247][T12937] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 882.182402][T12937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.192656][ T5807] usb 1-1: USB disconnect, device number 47 [ 882.201792][T12937] usb 3-1: Product: syz [ 882.213357][T12937] usb 3-1: Manufacturer: syz [ 882.219485][T12937] usb 3-1: SerialNumber: syz [ 882.226111][T12898] usb 4-1: Using ep0 maxpacket: 32 [ 882.238323][T17273] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 882.251150][T12898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 882.262922][T17273] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 882.274702][T12898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 882.285605][T12937] cyberjack 3-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 882.296739][T12898] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 882.309956][T12937] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 882.320791][T12898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.347475][T12898] usb 4-1: config 0 descriptor?? [ 882.718437][T12937] usb 3-1: USB disconnect, device number 49 [ 882.740049][T12937] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 882.759017][T12937] cyberjack 3-1:1.0: device disconnected [ 882.778407][T12898] usbhid 4-1:0.0: can't add hid device: -71 [ 882.784406][T12898] usbhid: probe of 4-1:0.0 failed with error -71 [ 882.797342][ T5807] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 882.813760][T12898] usb 4-1: USB disconnect, device number 35 [ 882.965847][ T5807] usb 2-1: device descriptor read/64, error -71 [ 882.999769][T17290] (null): rxe_set_mtu: Set mtu to 4096 [ 883.006201][T17290] rdma_rxe: rxe_newlink: failed to add lo [ 883.259616][ T5807] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 883.426034][ T5807] usb 2-1: device descriptor read/64, error -71 [ 883.504447][T17300] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.3992'. [ 883.557847][ T5807] usb usb2-port1: attempt power cycle [ 883.812202][T17308] loop8: detected capacity change from 0 to 7 [ 883.826740][T17308] Dev loop8: unable to read RDB block 7 [ 883.846036][T17308] loop8: unable to read partition table [ 883.851841][T17308] loop8: partition table beyond EOD, truncated [ 883.879678][T17308] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 883.981578][ T5807] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 884.028321][ T5807] usb 2-1: device descriptor read/8, error -71 [ 884.275856][T12898] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 884.317430][ T5807] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 884.346252][ T5807] usb 2-1: device descriptor read/8, error -71 [ 884.466135][ T5807] usb usb2-port1: unable to enumerate USB device [ 884.478053][T12937] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 884.486581][T12898] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 884.498348][T12898] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 884.509101][T12898] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 884.523672][T12898] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 884.538681][T12898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.547078][T12898] usb 4-1: Product: syz [ 884.551321][T12898] usb 4-1: Manufacturer: syz [ 884.557902][T12898] usb 4-1: SerialNumber: syz [ 884.566776][T17313] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 884.580371][T17313] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 884.589658][T12898] cyberjack 4-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 884.602540][T12898] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 884.686040][T12937] usb 3-1: Using ep0 maxpacket: 32 [ 884.695245][T12937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 884.708512][T12937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 884.718648][T12937] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 884.729897][T12937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.751241][T12937] usb 3-1: config 0 descriptor?? [ 884.996725][T12898] usb 4-1: USB disconnect, device number 36 [ 885.017749][T12898] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 885.041717][T12898] cyberjack 4-1:1.0: device disconnected [ 885.174657][T12937] usbhid 3-1:0.0: can't add hid device: -71 [ 885.185217][T12937] usbhid: probe of 3-1:0.0 failed with error -71 [ 885.199239][T12937] usb 3-1: USB disconnect, device number 50 [ 885.855923][T12898] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 885.893910][T17330] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 885.910013][T17332] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.4007'. [ 886.026080][T12898] usb 4-1: device descriptor read/64, error -71 [ 886.133084][T17338] svc: failed to register nfsdv3 RPC service (errno 111). [ 886.142478][T17338] svc: failed to register nfsaclv3 RPC service (errno 111). [ 886.305907][T12898] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 886.467432][T12898] usb 4-1: device descriptor read/64, error -71 [ 886.507920][T12937] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 886.606695][T12898] usb usb4-port1: attempt power cycle [ 886.717729][T12937] usb 3-1: unable to get BOS descriptor or descriptor too short [ 886.734677][T12937] usb 3-1: config 63 has an invalid interface number: 66 but max is 0 [ 886.754291][T12937] usb 3-1: config 63 has an invalid descriptor of length 52, skipping remainder of the config [ 886.785509][T12937] usb 3-1: config 63 has no interface number 0 [ 886.801878][T12937] usb 3-1: config 63 interface 66 has no altsetting 0 [ 886.821524][T12937] usb 3-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 886.834832][T12937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.844360][T12937] usb 3-1: Product: syz [ 886.849731][T12937] usb 3-1: Manufacturer: syz [ 886.854491][T12937] usb 3-1: SerialNumber: syz [ 887.017817][T12898] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 887.067293][T12898] usb 4-1: device descriptor read/8, error -71 [ 887.191908][ T9] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 888.465921][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 888.473278][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 888.489339][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 888.500465][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 888.513623][T12898] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 888.523367][ T9] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 888.532918][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.545894][ T9] usb 2-1: config 0 descriptor?? [ 888.567816][ T7016] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 888.592711][T12898] usb 4-1: device descriptor read/8, error -71 [ 888.726419][T12898] usb usb4-port1: unable to enumerate USB device [ 888.744977][T17362] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.4020'. [ 888.755861][ T7016] usb 1-1: Using ep0 maxpacket: 8 [ 888.768775][ T7016] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 888.780803][ T7016] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 888.790999][ T7016] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 888.804232][ T7016] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 888.814780][ T7016] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.827948][ T7016] usb 1-1: Product: syz [ 888.832320][ T7016] usb 1-1: Manufacturer: syz [ 888.838080][ T7016] usb 1-1: SerialNumber: syz [ 888.969449][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 888.980889][ T9] usbhid: probe of 2-1:0.0 failed with error -71 [ 888.996646][ T9] usb 2-1: USB disconnect, device number 55 [ 889.455876][ T7016] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 889.473925][T12937] usb 3-1: USB disconnect, device number 51 [ 889.520208][ T7016] usb 1-1: clock source 0 is not valid, cannot use [ 889.648248][T17370] netlink: 'syz.1.4024': attribute type 2 has an invalid length. [ 889.765576][ T7016] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 889.892999][ T7016] usb 1-1: USB disconnect, device number 48 [ 889.964567][T13105] udevd[13105]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 890.406017][T12937] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 890.609148][T12937] usb 4-1: Using ep0 maxpacket: 32 [ 890.635434][T12937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 890.695299][T12937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 890.718569][T12937] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 890.747473][T12937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.789422][T12937] usb 4-1: config 0 descriptor?? [ 890.836208][ T9] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 890.996120][ T7016] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 891.015157][T17399] loop8: detected capacity change from 0 to 7 [ 891.023912][T17399] Dev loop8: unable to read RDB block 7 [ 891.032029][T17399] loop8: unable to read partition table [ 891.039285][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 891.049234][T17399] loop8: partition table beyond EOD, truncated [ 891.059326][ T9] usb 2-1: config 63 has an invalid interface number: 66 but max is 0 [ 891.074400][T17399] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 891.086067][ T9] usb 2-1: config 63 has an invalid descriptor of length 52, skipping remainder of the config [ 891.100504][ T9] usb 2-1: config 63 has no interface number 0 [ 891.126391][ T9] usb 2-1: config 63 interface 66 has no altsetting 0 [ 891.148888][ T9] usb 2-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 891.182933][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.197845][ T7016] usb 1-1: Using ep0 maxpacket: 32 [ 891.206820][ T9] usb 2-1: Product: syz [ 891.211009][ T9] usb 2-1: Manufacturer: syz [ 891.226062][ T7016] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 891.240536][T12937] usbhid 4-1:0.0: can't add hid device: -71 [ 891.252955][T12937] usbhid: probe of 4-1:0.0 failed with error -71 [ 891.261819][ T9] usb 2-1: SerialNumber: syz [ 891.266890][ T7016] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 891.289870][T12937] usb 4-1: USB disconnect, device number 41 [ 891.300025][ T7016] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 891.326737][ T7016] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 891.338736][ T7016] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.354195][ T7016] usb 1-1: config 0 descriptor?? [ 891.608393][T17357] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 892.803850][ T7016] usbhid 1-1:0.0: can't add hid device: -71 [ 892.829094][ T7016] usbhid: probe of 1-1:0.0 failed with error -71 [ 892.842952][ T7016] usb 1-1: USB disconnect, device number 49 [ 892.895774][T17357] usb 3-1: Using ep0 maxpacket: 8 [ 892.908425][T17357] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 892.932127][T17357] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 892.951654][T17357] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 892.984504][T17357] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 893.004194][T17357] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.022170][T17357] usb 3-1: Product: syz [ 893.031396][T17405] netlink: 'syz.3.4039': attribute type 2 has an invalid length. [ 893.039415][T17357] usb 3-1: Manufacturer: syz [ 893.047673][T17357] usb 3-1: SerialNumber: syz [ 893.674002][T17357] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 893.693317][T17357] usb 3-1: clock source 0 is not valid, cannot use [ 893.717747][ T7016] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 893.880600][ T9] usb 2-1: USB disconnect, device number 56 [ 893.914131][T17357] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 893.967711][ T7016] usb 1-1: Using ep0 maxpacket: 8 [ 893.997505][ T7016] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 894.018643][T17357] usb 3-1: USB disconnect, device number 52 [ 894.042491][ T7016] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.073844][ T7016] usb 1-1: Product: syz [ 894.104547][ T7016] usb 1-1: Manufacturer: syz [ 894.112038][T13105] udevd[13105]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 894.134860][ T7016] usb 1-1: SerialNumber: syz [ 894.153478][ T7016] usb 1-1: config 0 descriptor?? [ 894.303073][T17417] dummy_hcd dummy_hcd.0: remove, state 1 [ 894.312787][T17417] usb usb1: USB disconnect, device number 1 [ 894.369843][ T7016] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 894.391559][T17417] usb 1-1: USB disconnect, device number 50 [ 894.482059][T17417] dummy_hcd dummy_hcd.0: stopped [ 894.510793][T17417] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 894.572465][T17408] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 894.584329][T17408] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 894.592783][T17408] CPU: 0 PID: 17408 Comm: syz.0.4040 Not tainted syzkaller #0 [ 894.600216][T17408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 894.610247][T17408] RIP: 0010:set_link_state+0x27/0x1000 [ 894.615716][T17408] Code: 0f 1f 00 55 41 57 41 56 41 55 41 54 53 48 83 ec 38 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 00 49 cb fa 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 1b cc 23 fb 49 8b 0e 4d 8d a6 93 00 [ 894.635298][T17408] RSP: 0018:ffffc900032e7b18 EFLAGS: 00010046 [ 894.641339][T17408] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff888024ab1e00 [ 894.649299][T17408] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 894.657245][T17408] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 894.665195][T17408] R10: dffffc0000000000 R11: fffff5200065cf4c R12: 0000000000000a06 [ 894.673156][T17408] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 894.681103][T17408] FS: 000055556fd46500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 894.690023][T17408] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 894.696591][T17408] CR2: 000000110c4306ea CR3: 000000006645c000 CR4: 00000000003506f0 [ 894.704540][T17408] Call Trace: [ 894.707813][T17408] [ 894.710725][T17408] ? mutex_lock_nested+0x20/0x20 [ 894.715647][T17408] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 894.721535][T17408] dummy_pullup+0xc1/0x120 [ 894.725932][T17408] ? dummy_set_selfpowered+0x150/0x150 [ 894.731369][T17408] usb_gadget_disconnect_locked+0x120/0x440 [ 894.737256][T17408] gadget_unbind_driver+0xc2/0x3e0 [ 894.742359][T17408] ? gadget_bind_driver+0x770/0x770 [ 894.747535][T17408] device_release_driver_internal+0x408/0x6f0 [ 894.753583][T17408] driver_detach+0x1f3/0x2d0 [ 894.758155][T17408] bus_remove_driver+0x221/0x2f0 [ 894.763084][T17408] usb_gadget_unregister_driver+0x4e/0x70 [ 894.768785][T17408] raw_release+0xda/0x260 [ 894.773227][T17408] ? raw_open+0x520/0x520 [ 894.777536][T17408] __fput+0x221/0x940 [ 894.781499][T17408] task_work_run+0x1d4/0x260 [ 894.786069][T17408] ? task_work_cancel+0x220/0x220 [ 894.791072][T17408] ? exit_to_user_mode_loop+0x3b/0x110 [ 894.796510][T17408] exit_to_user_mode_loop+0xe6/0x110 [ 894.801789][T17408] exit_to_user_mode_prepare+0xee/0x180 [ 894.807313][T17408] syscall_exit_to_user_mode+0x1a/0x50 [ 894.812759][T17408] do_syscall_64+0x61/0xb0 [ 894.817155][T17408] ? clear_bhb_loop+0x40/0x90 [ 894.821814][T17408] ? clear_bhb_loop+0x40/0x90 [ 894.826466][T17408] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 894.832336][T17408] RIP: 0033:0x7f13ec99e0d9 [ 894.836729][T17408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 894.856312][T17408] RSP: 002b:00007ffe4898f678 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 894.864705][T17408] RAX: 0000000000000000 RBX: 00007ffe4898f760 RCX: 00007f13ec99e0d9 [ 894.872673][T17408] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 894.880622][T17408] RBP: 00000000000da1de R08: 0000000000000001 R09: 0000000000000000 [ 894.888574][T17408] R10: 0000001b32220000 R11: 0000000000000246 R12: 00007ffe4898f7a0 [ 894.896521][T17408] R13: 00007f13ecc25fac R14: 00000000000da6db R15: 00007f13ecc25fa0 [ 894.904475][T17408] [ 894.907472][T17408] Modules linked in: [ 894.911369][T17408] ---[ end trace 0000000000000000 ]--- [ 894.916800][T17408] RIP: 0010:set_link_state+0x27/0x1000 [ 894.922246][T17408] Code: 0f 1f 00 55 41 57 41 56 41 55 41 54 53 48 83 ec 38 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 00 49 cb fa 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 1b cc 23 fb 49 8b 0e 4d 8d a6 93 00 [ 894.942196][T17408] RSP: 0018:ffffc900032e7b18 EFLAGS: 00010046 [ 894.948241][T17408] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff888024ab1e00 [ 894.956190][T17408] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 894.964140][T17408] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 894.972091][T17408] R10: dffffc0000000000 R11: fffff5200065cf4c R12: 0000000000000a06 [ 894.980038][T17408] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 894.987984][T17408] FS: 000055556fd46500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 894.996902][T17408] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 895.003460][T17408] CR2: 000000110c4306ea CR3: 000000006645c000 CR4: 00000000003506f0 [ 895.011476][T17408] Kernel panic - not syncing: Fatal exception [ 895.017564][T17408] Kernel Offset: disabled [ 895.021889][T17408] Rebooting in 86400 seconds..