last executing test programs: 32.480174787s ago: executing program 2 (id=364): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x17e5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000009060102000000f8ffffff00000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) (fail_nth: 2) 31.222948145s ago: executing program 2 (id=372): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x129480, 0x0) read$dsp(r0, &(0x7f00000000c0)=""/105, 0x69) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x73) recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000002c0)=""/131, 0x83}], 0x1}, 0x2}], 0x1, 0x10122, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000600), 0x4) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0xa481) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000380)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYBLOB="d1d04e2ba8654fcd018a4491c8313dfbe3d19301c8db9024717ccb07b4d685571afae76862101f2ba7c6ea752bb23d79ace1d0316f50fb102a883f25202ebc56f43da2b25781bb9efded59d49150c93113e83f51aa945c3fbc9186be2d9ae3d5180c7e90b51953e47a50c756d4138c45f7f619e0d019df9d55c57fd5fcb7108b9ec677320223f9e3317dd09416a38f79a987c82c2c6b99f5207e6e26d0cf397f14ad67bb3091cd0b1b5d7f604e2d24e8c49c8fdd0393d8d5554b54669ab1671c32f7f630c5bf50a7a9738ceefb16aa4a447881d37560a152bf603aad", @ANYRESDEC, @ANYRESDEC=r0, @ANYRES16=r0, @ANYRESHEX=r3, @ANYRESDEC=r3], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x21, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="2503000000000000000008"], 0x14}}, 0x0) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000d80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r8, &(0x7f0000002dc0)={0x20, 0x0, r9, {0x0, 0x19}}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_create1(0x80000) 30.2815339s ago: executing program 3 (id=375): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x8, 0x2) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000100)=[0x7, 0xfb]) syz_usb_control_io$sierra_net(r0, &(0x7f0000000000)={0x14, &(0x7f0000000080)={0x0, 0x30, 0x2, {0x2, 0x22}}, 0x0}, &(0x7f0000000280)={0x1c, &(0x7f0000000180)={0x0, 0x11, 0x89, "65ef1b6237d527cc42074c018b4fb0f708705e8296f4e5975a94e0ec33e9aa3f21ec83424c9e536635098109d6cb382487d9e8be894e78223066f74c0d748c7f002cbc69ce8c8f737303b0b1ae513eb9df0b041d0cd01595d278ff0e4bf1fc39415f4d44e70f83bb47a3f64b0ee846a1522630313115fdede683050698aab24cd94c190273975db38b"}, &(0x7f00000005c0)={0xa1, 0x1, 0x400, "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"}, 0x0}) 29.128278577s ago: executing program 0 (id=377): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000050000000000000000004000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000571000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30"], 0xf0}}, 0x0) 28.912297924s ago: executing program 0 (id=379): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f00000002c0)='\x00\xff\xff\x00\x02@qGP\xc5\x94\xa6\x8fB\xc3\x93\xe5\xc1a\x05!\x9a\x8b\xeb\xceJP\x1e\xf2\x8a\xd4\xaa\x15@>\xdb\xab\x06\x1b\xe2w\xd8\x1e\xda\xc1\x9f\xe9\xc4c\xdd\xf6^\xcb\xec\xab\x82\xcf\x14\xde\xa5\xef\x162bP\x95/\xefMs\xe0%}\xe4\xf1=\x05\xf6l7\xc1\xe9c\xc3\x7f\tg\xf56\xeasl\xbd\x02\xc1\x8a\xa9\x83\xaf\xfa\x95W+N$\x06R\x92\xe5Z\x97\xfb\xb6e}fW\x8bm\x04\'{\xaf\xe2zd\x91+-\xb1\xd8\ftK|\xb8\xd2\xb6\x7f\xf4\x84\v\x1e\xe6R\xfc\xbcg\x81\xbb\xc4\xcd\xe9\xe5.\x9b\x7f\xeb\x04\xe6,N\x00\x9a\x9d\xf8\xd1\x8aR4;\x7f\x8a\x86\xb7\xd7o\x90\xfd\xa9dJ\xd5.\x18F2\x00\x00\x00\xf2y\x99\xfd\xca\xff*\xd3;\x84F\x8f !N\x1c\xfaI\xa5\x85:\xc1\x9ed\x13\xaf\xd0/\x00\x9b\x0e\xb6\xca\xa5X\xb9]<\n\x90Tk\xa4\xb3\xc4\xa4*\xc2\xf6\x1bw\n6^\xfa\xea\r\xf1\xc1\xd0\xd8\xc7B\x1cP\x02\xcfH\x89\x82G\xcf\x1921\x9e\v4Q\xc6\x9c\xc3\xfd\xf3Z1\xef7cK\xd5\xdc\xbf\x00\xe0{\xa0\xf7\xcd\x82\xf6\x99\xcb\x1a\x17\x02\xd1\x9d(\xa2 \x85\x8e 6zL\xeeqG\t~\xafQ(\xc3\xd8\x05\xcb\xbfB\xb0\xe1b\x0f\xa8f\xe6\xb1\xe8\x9aB\x90\x00\x00\x00') r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000840), &(0x7f0000000880)=0x4) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) 28.855519662s ago: executing program 0 (id=380): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newsa={0x160, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x5, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}, @tfcpad={0x8, 0x16, 0x4}]}, 0x160}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef7], [0x10000, 0x0, 0x0, 0x0, 0x0, 0x6], [0x7]], '\x00', [{0x0, 0x1}, {}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x1, 0x1}, {0x3, 0x6}, {0xfffffffd, 0x4000005f, 0x1}, {}, {}, {0x3}, {0x0, 0x8766}], '\x00', 0x101000}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$SNDRV_PCM_IOCTL_START(r2, 0x4142, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f00000001c0)={0x980903, 0x8081, @name="6736516728a5678c18a4ec047f3f1fa52fe9a9987d0406b3a0c705c611b66f06"}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 28.792814938s ago: executing program 3 (id=381): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x17e5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000009060102000000f8ffffff00000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) (fail_nth: 3) 28.744709733s ago: executing program 0 (id=382): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8, @ANYRESOCT=r1], 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x5, 0x1, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0xffffc000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x200000005c831, 0xffffffffffffffff, 0x7d708000) 28.690619206s ago: executing program 2 (id=383): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x40, 0xb, 0x1d, {0x1d, 0x4, "4f1051d59ae60e15e692a2f25f424d678eed7aa5aab4436eeb55a8"}}, &(0x7f0000000100)={0x0, 0x3, 0x4e, @string={0x4e, 0x3, "f87072f040766aabc704c34fc0900ee97bf973e6f0125922b31129cb3e659fdd870e6d589d8da533bad9620eeff56b7732fae100ba727cb83ffcbd72c86b67a1c049fd94cef5893f0a3a7479"}}}, &(0x7f0000000500)={0x44, &(0x7f0000000280)={0x0, 0xe, 0x6c, "5f36d522f2d9d200ad91de5a1825cf6a87d8e7db23ec6ea957bebd91cabd950f5aa867d557f7a5a03f0df2c8e0a0aba995458ce4b59b485bddeee7f409c3a48ac4e41c6418d70c52f3063152c5879a6620ef5eea5a70def6e0cbd5a63d29e9d45a1ae1624113edf258a09e5a"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000000380)={0x20, 0x81, 0x3, "b005b4"}, &(0x7f0000000580)=ANY=[@ANYBLOB="202a680000006d6604aa81b7aa479cf4715e1604ee0330115f2f950ec49de10c4a065c640b658cecd295a3b3153e7df06814810cbd6c6fcb3848489181db6a73c45471d6b3313de90dad40cbc94d7349cd13c8456b820019ab99387e07c6eb58f5a39e29e6bc6de1154c50eaf9ef2b6525c98b0a922696095355882f1b51554bf8eb0c8ef375f07d3fc56c30a4805f805d74a7343ba7e5294a999f9ac5c69f4268bc8fbf64620b41e679d04ce651a90f9f32149067b1d2491d168ff92a45b2acee221a83db7041db95a287aa53ea778a1afbba1581"], &(0x7f0000000400)={0x20, 0x83, 0x1, 'e'}, &(0x7f0000000440)={0x20, 0x84, 0x1, "c7"}, &(0x7f0000000480)={0x20, 0x85, 0x3, "99b7e8"}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x17e5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) futex(&(0x7f0000000180)=0x2, 0x0, 0x1, &(0x7f0000000080), 0x0, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x400, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x3e) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r4, 0x4008ae48, &(0x7f00000003c0)=0x50000) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000009060102000000f8ffffff00000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 27.566940319s ago: executing program 0 (id=385): r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='hfs\x00', 0x0, 0x0) r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000140)) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f00000000c0)=0x0) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000602, r2, &(0x7f0000000100)={0x8001, 0xa64e, 0x0, 0x2}) 27.447997431s ago: executing program 0 (id=387): pipe(&(0x7f00000000c0)) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f00000003c0)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) (async) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f00000002c0)={&(0x7f0000ffd000/0x2000)=nil}) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r2, 0x550c, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r4, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) write$vga_arbiter(r4, &(0x7f0000000100)=@other={'unlock', ' ', 'io+mem'}, 0xe) (async) write$vga_arbiter(r4, &(0x7f0000000100)=@other={'unlock', ' ', 'io+mem'}, 0xe) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$uac2(r3, 0x0, 0x0) (async) syz_usb_control_io$uac2(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000280)=ANY=[], &(0x7f0000000340)={0x0, 0xa, 0x1, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x85, 0x3, "5ca800"}}) (async) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000280)=ANY=[], &(0x7f0000000340)={0x0, 0xa, 0x1, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x85, 0x3, "5ca800"}}) mknod(&(0x7f0000000180)='./bus\x00', 0xc000, 0x100) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuseblk(&(0x7f00000000c0), &(0x7f00000001c0)='./bus\x00', &(0x7f0000000200), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB="2c726f6f746d6f64653d303030cfe165dcda84c1373030303030303031303043302c757365725f69643d48c26334a1ec1f33785be79921085b900d57b5086616acd5a2f5a704c6ac8bb2e06c12db7c53f85cd1a04a03987baabefaca4725be08fb80c8ed0d701343c7edb6488483fb22f5e0417cead6d37d4915ddadd8f387b3cc8bd43869e2d823f6bff68b5ac2a00cafb22975739c0b31f31e418ffe24530639a929c1f48aa27be8f1bd9d48a2039f63a17ded58d37d66093f95fc4aea97c98b8b5a9f5783c0c26bfb4c58649672d9e0ca734a9997ebb76e893e201bec9a762d9c1495a418fc589e143e6d20357a353aadea050347225201fcbdd098483250054e0be5732c010987bc7de1b95f5d94afd170e79ae6a32a97d600c94d19d24cb0", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async) mount$fuseblk(&(0x7f00000000c0), &(0x7f00000001c0)='./bus\x00', &(0x7f0000000200), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) close(r6) ioctl$KDGETMODE(r6, 0x4b3b, &(0x7f0000000280)) (async) ioctl$KDGETMODE(r6, 0x4b3b, &(0x7f0000000280)) ioctl$SIOCSIFHWADDR(r6, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @local}) openat2(r6, &(0x7f0000000300)='./bus\x00', &(0x7f0000000340)={0x202000, 0x101, 0x18}, 0x18) fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) (async) fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) socket$inet6(0xa, 0x3, 0x3c) socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f0000000380)='./bus\x00', 0x105040, 0x145) (async) open(&(0x7f0000000380)='./bus\x00', 0x105040, 0x145) creat(&(0x7f0000000200)='./bus\x00', 0x84) (async) creat(&(0x7f0000000200)='./bus\x00', 0x84) 27.392571311s ago: executing program 3 (id=388): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000050000001300000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000571000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30"], 0xf0}}, 0x0) 27.310545622s ago: executing program 3 (id=389): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x82002) poll(&(0x7f00000003c0)=[{r0, 0x8000}], 0x1, 0x401) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) statx(0xffffffffffffff9c, &(0x7f0000000140)='./file5\x00', 0x2000, 0x56159817211d7953, &(0x7f0000002500)) sync() sync() r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffd, 0x6c}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x3, 0x0, 0xfd}}, 0xe8) r4 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r4, &(0x7f0000001540)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0xb03, @private2, 0x9}}, 0x24) bind$pptp(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000480), 0x21, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file5\x00', &(0x7f0000000040), &(0x7f0000000080)='./file5\x00', 0x8, 0x3) 26.80212731s ago: executing program 1 (id=390): r0 = socket$kcm(0x10, 0x4, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) r5 = syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b2406050001", @ANYRESDEC], 0x0) syz_usb_control_io$uac1(r5, &(0x7f0000000200)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c09}}}, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000002940)={0x0, 0x0, 0x0, 0x54, 0x0, &(0x7f0000002840)="cb3a0990752bd0d2b255b16df5786a3fdb1c8caefd3bd7ecd337b733279eda192c3459b0b3f0030eba58a05d0f16663ed7cfb73b28bc9355b1a2fe33bb013ed1e54bb3387735c3dd8cb80edc0e720c925cc3d9e0"}) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac004000202080002001f0001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x10, 0x4, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (async) dup3(r2, r1, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) (async) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b2406050001", @ANYRESDEC], 0x0) (async) syz_usb_control_io$uac1(r5, &(0x7f0000000200)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c09}}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000002940)={0x0, 0x0, 0x0, 0x54, 0x0, &(0x7f0000002840)="cb3a0990752bd0d2b255b16df5786a3fdb1c8caefd3bd7ecd337b733279eda192c3459b0b3f0030eba58a05d0f16663ed7cfb73b28bc9355b1a2fe33bb013ed1e54bb3387735c3dd8cb80edc0e720c925cc3d9e0"}) (async) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac004000202080002001f0001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) 26.640343096s ago: executing program 1 (id=391): mount(&(0x7f0000000040)=@filename='\x00', &(0x7f00000000c0)='.\x00', &(0x7f0000000040)='ubifs\x00', 0x0, 0x0) r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)=0x6e) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) 26.519816249s ago: executing program 1 (id=392): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d000100000000090400000303"], 0x0) (async) r1 = socket$inet(0x2, 0x6000000000000001, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r1, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x2100, 0x0) (async) connect$can_bcm(r2, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="0500000067cf"], 0x80}}, 0x3c83f4ba09aac8e3) (async) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001540), 0x40140, 0x0) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f00000015c0)={0x0, 0x1a, &(0x7f0000001580)="519c8c1ab83fbd0271d70f1101d51f018aa13507155f8b78c5ef"}) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000001640)=ANY=[@ANYBLOB="12010002fe4683089e19028031bb0102030109021b00010304b0010904e604010e01000309050d020800fd802a621fc45fd6f37ef9793b803cf53d1ccefe3f47be846a5190180ef652107c87b117488888ffef0ca6f7cad487d322716ea336b0e1851b8a3029a9293eb70a01378ce3d29745c7ea887d09c8c980739762e4d8a370e2e5d105b3d12a9763191b64de72d53c10e9c204"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) (async) r4 = shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ffd000/0x2000)=nil) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) (async) shmctl$SHM_LOCK(r4, 0xb) (async) shmctl$SHM_LOCK(r4, 0xb) (async) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000001, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x4000000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x8, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0xdf, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0xe758, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0xfffffffc, 0x0, 0x0, 0x9, 0xfffffff7, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x1, 0x0, 0xfffc, 0x40000, 0x80000001, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x81, 0x5, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x400, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x80, 0xf, 0xfff, 0x0, 0xcad, 0xfffffffd, 0x1a, 0x0, 0xfffffffd, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x3, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0xfffffff1, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x4, 0x7ff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0xfffffff7, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) r6 = timerfd_create(0x7, 0x81000) ioctl$TFD_IOC_SET_TICKS(r6, 0x40085400, &(0x7f0000001600)=0xe) (async) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_INPUT(r7, &(0x7f0000000500)={0x8, {"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", 0x1000}}, 0x1006) 26.411973813s ago: executing program 3 (id=393): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0xc800) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e"], 0x6) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a40000000001010400000000000000000a0000003c000180070001"], 0xa4}}, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x36, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x15, 0x0, 0x0, @u64=0x20}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x3}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e8823f9f3cb639cfb05bc48c26c0a26237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf1374875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x2000000}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x478}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) clock_adjtime(0x0, &(0x7f0000000080)={0x37db, 0x80000000002f423f, 0xfffffffffffffffc, 0x6, 0x0, 0x5, 0x8, 0x4, 0x10000, 0x80000, 0x2, 0x1, 0x100, 0x400, 0x0, 0x2000000000000, 0x3, 0x8000, 0x5, 0x5, 0x0, 0x3, 0x5e2, 0xf48, 0x37, 0xe22f}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000f0000001c0007800c0004002d3a00000000005f0c0003"], 0x30}, 0x1, 0x0, 0x0, 0x40040050}, 0x20000084) setsockopt$sock_linger(r6, 0x1, 0x3d, &(0x7f00000000c0)={0xfffffffc, 0x2000008}, 0x8) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(r9, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r10, 0x8, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20000011) 26.264706403s ago: executing program 1 (id=394): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x158, 0x10, 0x413, 0x70bd28, 0x25dfdbff, {{@in=@multicast2, @in6=@private0, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x20, 0x20}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, @in=@private=0xa010100, {0x4, 0x7, 0x0, 0x40000000000004, 0xfffffffffffffffb, 0xfffffffffffffffe, 0x100000000000007f}, {0x0, 0x7, 0xcc, 0x5}, {0x5}, 0x0, 0x0, 0x2, 0x1, 0x4, 0x80}, [@algo_aead={0x67, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xd8, 0x40, "e82d3a5eb110e2a4850275b6c002899debbeb0c642e1205ef27e80"}}]}, 0x158}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040084) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newsa={0x13c, 0x10, 0x413, 0x3, 0x25dfdbfb, {{@in=@multicast2, @in6=@private1, 0x0, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x10}, 0x10, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x0, 0xa, 0x1, 0x1}, [@algo_aead={0x4c, 0x12, {{'aegis128l\x00'}, 0x0, 0x40}}]}, 0x13c}}, 0x4000) 26.167202772s ago: executing program 1 (id=395): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x17e5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x112, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000009060102000000f8ffffff00000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 26.070517863s ago: executing program 3 (id=396): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x17e5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000009060102000000f8ffffff00000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) (fail_nth: 4) 25.508417967s ago: executing program 2 (id=397): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) close(r0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_usb_connect(0x0, 0x5d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414003824d0062413"], 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000140)={[&(0x7f0000000200)='\x01']}) 25.316938406s ago: executing program 1 (id=398): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000050000002000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000571000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30"], 0xf0}}, 0x0) 23.396277401s ago: executing program 2 (id=399): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) r1 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r1, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000005c0)={0x34, &(0x7f00000003c0)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) 15.564178314s ago: executing program 2 (id=400): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg$unix(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000100)=""/2, 0x2}], 0x1}, 0x40000000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, 0x0, 0x2f) setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000000), 0x4) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x50, 0x18, 0xa, 0x101, 0x0, 0x0, {0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14b}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$TIOCSERGETLSR(r3, 0x5459, &(0x7f0000000000)) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x2) r5 = syz_usb_connect$uac3(0x5, 0x80, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x582, 0xa3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7e, 0xc0, 0x8, {0x8, 0xb, 0x1, 0x1, 0x1, 0x1, 0x30, 0xb}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0xc, 0x3, 0x2, {0xa, 0x25, 0x25, 0x5, 0x2e, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x74, 0x6, 0xc0, {0xa, 0x25, 0x25, 0x80000000, 0xb, 0xbe1}}}}}}}}]}}, 0x0) r6 = fcntl$dupfd(r3, 0x0, r3) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_control_io$uac3(r5, &(0x7f0000000400)={0x14, &(0x7f0000000180)={0x40, 0x1, 0x1f, {0x1f, 0x1, "09a6694ab96258b6c0b94d7800ade8cf557c0484359e301150027df9d5"}}, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3401}}}, &(0x7f0000000780)={0x44, &(0x7f0000000440)={0x0, 0x12, 0x56, "984dd7504a1f73f39746e56796f577219bbeba8c72fb6f7e791ea0467e6af296fef6a0d80fa4e1e0b939b555f89de6cff2ba7deda4b0bc256027f7fc1b06d9bc6093c8895294a5070fa44159f31f6d6d20e84c2104b3"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0xfc}, &(0x7f0000000600)={0x20, 0x81, 0x3, "e41e7f"}, &(0x7f0000000640)={0x20, 0x82, 0x1, 'E'}, &(0x7f00000006c0)={0x20, 0x83, 0x1, "d2"}, &(0x7f0000000700)={0x20, 0x84, 0x4, "f35f313b"}, &(0x7f0000000740)={0x20, 0x85, 0x3, "0220d8"}}) ioctl$sock_inet_SIOCDELRT(r7, 0x890c, &(0x7f00000000c0)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x22}}, 0x2, 0x0, 0x0, 0x0, 0x200, 0x0, 0x8, 0x6, 0x6}) ioctl$CEC_ADAP_G_PHYS_ADDR(r6, 0x80026101, &(0x7f0000000140)) r8 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r8, 0xc3d33000) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) 11.470174778s ago: executing program 32 (id=387): pipe(&(0x7f00000000c0)) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f00000003c0)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) (async) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f00000002c0)={&(0x7f0000ffd000/0x2000)=nil}) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r2, 0x550c, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r4, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) write$vga_arbiter(r4, &(0x7f0000000100)=@other={'unlock', ' ', 'io+mem'}, 0xe) (async) write$vga_arbiter(r4, &(0x7f0000000100)=@other={'unlock', ' ', 'io+mem'}, 0xe) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$uac2(r3, 0x0, 0x0) (async) syz_usb_control_io$uac2(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000280)=ANY=[], &(0x7f0000000340)={0x0, 0xa, 0x1, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x85, 0x3, "5ca800"}}) (async) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000280)=ANY=[], &(0x7f0000000340)={0x0, 0xa, 0x1, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x85, 0x3, "5ca800"}}) mknod(&(0x7f0000000180)='./bus\x00', 0xc000, 0x100) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuseblk(&(0x7f00000000c0), &(0x7f00000001c0)='./bus\x00', &(0x7f0000000200), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB="2c726f6f746d6f64653d303030cfe165dcda84c1373030303030303031303043302c757365725f69643d48c26334a1ec1f33785be79921085b900d57b5086616acd5a2f5a704c6ac8bb2e06c12db7c53f85cd1a04a03987baabefaca4725be08fb80c8ed0d701343c7edb6488483fb22f5e0417cead6d37d4915ddadd8f387b3cc8bd43869e2d823f6bff68b5ac2a00cafb22975739c0b31f31e418ffe24530639a929c1f48aa27be8f1bd9d48a2039f63a17ded58d37d66093f95fc4aea97c98b8b5a9f5783c0c26bfb4c58649672d9e0ca734a9997ebb76e893e201bec9a762d9c1495a418fc589e143e6d20357a353aadea050347225201fcbdd098483250054e0be5732c010987bc7de1b95f5d94afd170e79ae6a32a97d600c94d19d24cb0", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async) mount$fuseblk(&(0x7f00000000c0), &(0x7f00000001c0)='./bus\x00', &(0x7f0000000200), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB="2c726f6f746d6f64653d303030cfe165dcda84c1373030303030303031303043302c757365725f69643d48c26334a1ec1f33785be79921085b900d57b5086616acd5a2f5a704c6ac8bb2e06c12db7c53f85cd1a04a03987baabefaca4725be08fb80c8ed0d701343c7edb6488483fb22f5e0417cead6d37d4915ddadd8f387b3cc8bd43869e2d823f6bff68b5ac2a00cafb22975739c0b31f31e418ffe24530639a929c1f48aa27be8f1bd9d48a2039f63a17ded58d37d66093f95fc4aea97c98b8b5a9f5783c0c26bfb4c58649672d9e0ca734a9997ebb76e893e201bec9a762d9c1495a418fc589e143e6d20357a353aadea050347225201fcbdd098483250054e0be5732c010987bc7de1b95f5d94afd170e79ae6a32a97d600c94d19d24cb0", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) close(r6) ioctl$KDGETMODE(r6, 0x4b3b, &(0x7f0000000280)) (async) ioctl$KDGETMODE(r6, 0x4b3b, &(0x7f0000000280)) ioctl$SIOCSIFHWADDR(r6, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @local}) openat2(r6, &(0x7f0000000300)='./bus\x00', &(0x7f0000000340)={0x202000, 0x101, 0x18}, 0x18) fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) (async) fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) socket$inet6(0xa, 0x3, 0x3c) socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f0000000380)='./bus\x00', 0x105040, 0x145) (async) open(&(0x7f0000000380)='./bus\x00', 0x105040, 0x145) creat(&(0x7f0000000200)='./bus\x00', 0x84) (async) creat(&(0x7f0000000200)='./bus\x00', 0x84) 10.365467932s ago: executing program 33 (id=396): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x17e5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000009060102000000f8ffffff00000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) (fail_nth: 4) 9.136514298s ago: executing program 34 (id=398): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000050000002000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000571000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30"], 0xf0}}, 0x0) 0s ago: executing program 35 (id=400): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg$unix(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000100)=""/2, 0x2}], 0x1}, 0x40000000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, 0x0, 0x2f) setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000000), 0x4) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x50, 0x18, 0xa, 0x101, 0x0, 0x0, {0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14b}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$TIOCSERGETLSR(r3, 0x5459, &(0x7f0000000000)) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x2) r5 = syz_usb_connect$uac3(0x5, 0x80, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x582, 0xa3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7e, 0xc0, 0x8, {0x8, 0xb, 0x1, 0x1, 0x1, 0x1, 0x30, 0xb}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0xc, 0x3, 0x2, {0xa, 0x25, 0x25, 0x5, 0x2e, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x74, 0x6, 0xc0, {0xa, 0x25, 0x25, 0x80000000, 0xb, 0xbe1}}}}}}}}]}}, 0x0) r6 = fcntl$dupfd(r3, 0x0, r3) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_control_io$uac3(r5, &(0x7f0000000400)={0x14, &(0x7f0000000180)={0x40, 0x1, 0x1f, {0x1f, 0x1, "09a6694ab96258b6c0b94d7800ade8cf557c0484359e301150027df9d5"}}, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3401}}}, &(0x7f0000000780)={0x44, &(0x7f0000000440)={0x0, 0x12, 0x56, "984dd7504a1f73f39746e56796f577219bbeba8c72fb6f7e791ea0467e6af296fef6a0d80fa4e1e0b939b555f89de6cff2ba7deda4b0bc256027f7fc1b06d9bc6093c8895294a5070fa44159f31f6d6d20e84c2104b3"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0xfc}, &(0x7f0000000600)={0x20, 0x81, 0x3, "e41e7f"}, &(0x7f0000000640)={0x20, 0x82, 0x1, 'E'}, &(0x7f00000006c0)={0x20, 0x83, 0x1, "d2"}, &(0x7f0000000700)={0x20, 0x84, 0x4, "f35f313b"}, &(0x7f0000000740)={0x20, 0x85, 0x3, "0220d8"}}) ioctl$sock_inet_SIOCDELRT(r7, 0x890c, &(0x7f00000000c0)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x22}}, 0x2, 0x0, 0x0, 0x0, 0x200, 0x0, 0x8, 0x6, 0x6}) ioctl$CEC_ADAP_G_PHYS_ADDR(r6, 0x80026101, &(0x7f0000000140)) r8 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r8, 0xc3d33000) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): lecting invalid altsetting 0 [ 125.750244][ T1010] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 125.777017][ T1010] usb 4-1: USB disconnect, device number 13 [ 125.937682][ T6029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.938705][ T6029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.135521][ T5722] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 126.301453][ T5722] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 126.301484][ T5722] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.301502][ T5722] usb 3-1: config 1 has no interfaces? [ 126.301532][ T5722] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 126.301556][ T5722] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.525069][ T5769] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 126.672344][ T6035] Invalid argument reading file caps for ./file0 [ 126.676577][ T5769] usb 4-1: Using ep0 maxpacket: 8 [ 126.709687][ T5769] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 126.709720][ T5769] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.784099][ T5769] pvrusb2: Hardware description: Terratec Grabster AV400 [ 126.786492][ T5769] pvrusb2: ********** [ 126.786504][ T5769] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 126.786517][ T5769] pvrusb2: Important functionality might not be entirely working. [ 126.786525][ T5769] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 126.786534][ T5769] pvrusb2: ********** [ 126.869149][ T5701] usb 1-1: USB disconnect, device number 15 [ 127.009377][ T2326] pvrusb2: Invalid write control endpoint [ 127.170379][ T5701] appletouch 1-1:1.0: input: appletouch disconnected [ 127.254471][ T5602] usb 4-1: USB disconnect, device number 14 [ 127.400788][ T2326] pvrusb2: Invalid write control endpoint [ 127.400803][ T2326] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 127.400811][ T2326] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 127.400818][ T2326] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 127.400826][ T2326] pvrusb2: Device being rendered inoperable [ 127.400895][ T2326] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 127.400944][ T2326] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 127.445017][ T2326] pvrusb2: Attached sub-driver cx25840 [ 127.445032][ T2326] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 127.445041][ T2326] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 127.642282][ T6045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.642936][ T6045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.085233][ T5629] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 128.125102][ T5602] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 128.244919][ T5629] usb 1-1: Using ep0 maxpacket: 8 [ 128.252940][ T5629] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 128.252969][ T5629] usb 1-1: config 0 has no interface number 0 [ 128.253120][ T5629] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 128.253144][ T5629] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 128.253169][ T5629] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 128.253257][ T5629] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 128.253303][ T5629] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 128.253327][ T5629] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.275112][ T5602] usb 4-1: Using ep0 maxpacket: 32 [ 128.308445][ T5602] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 128.308473][ T5602] usb 4-1: config 0 has no interface number 0 [ 128.308518][ T5602] usb 4-1: config 0 interface 184 has no altsetting 0 [ 128.315837][ T5602] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 128.315864][ T5602] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.316173][ T5602] usb 4-1: Product: syz [ 128.316187][ T5602] usb 4-1: Manufacturer: syz [ 128.316200][ T5602] usb 4-1: SerialNumber: syz [ 128.393536][ T5602] usb 4-1: config 0 descriptor?? [ 128.413087][ T5629] usb 1-1: config 0 descriptor?? [ 128.489721][ T5629] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 128.677456][ T6049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.678666][ T6049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.738936][ T5722] usb 3-1: string descriptor 0 read error: -71 [ 128.825057][ T5722] usb 3-1: USB disconnect, device number 8 [ 128.933228][ T6057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.951547][ T6057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.086218][ T5602] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 129.086251][ T5602] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 129.200106][ T6061] Invalid argument reading file caps for ./file0 [ 129.462102][ T6065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.462848][ T6065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.715743][ T5602] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 129.715764][ T5602] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 129.715864][ T5602] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 129.716133][ T5602] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61 [ 130.164241][ T6071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.176261][ T6071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.827446][ T6080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.828315][ T6080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.837890][ T5602] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 130.931219][ T5769] usb 1-1: USB disconnect, device number 16 [ 130.979864][ T5769] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 131.038568][ T5602] usb 3-1: Using ep0 maxpacket: 8 [ 131.050764][ T5602] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 131.050784][ T5602] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.074299][ T5602] pvrusb2: Hardware description: Terratec Grabster AV400 [ 131.074315][ T5602] pvrusb2: ********** [ 131.074321][ T5602] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 131.075832][ T5602] pvrusb2: Important functionality might not be entirely working. [ 131.075842][ T5602] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 131.075852][ T5602] pvrusb2: ********** [ 131.284334][ T2326] pvrusb2: Invalid write control endpoint [ 131.415336][ T2326] pvrusb2: Invalid write control endpoint [ 131.415353][ T2326] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 131.415362][ T2326] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 131.415370][ T2326] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 131.415380][ T2326] pvrusb2: Device being rendered inoperable [ 131.427532][ T2326] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 131.427599][ T2326] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 131.428612][ T2326] pvrusb2: Attached sub-driver cx25840 [ 131.428623][ T2326] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 131.428631][ T2326] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 131.495009][ T1010] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 131.510005][ T6076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.510612][ T6076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.556449][ T37] usb 4-1: USB disconnect, device number 15 [ 131.562080][ T6094] Invalid argument reading file caps for ./file0 [ 131.721446][ T6097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.737006][ T6100] netlink: 'syz.3.96': attribute type 9 has an invalid length. [ 131.744241][ T6100] netlink: 8 bytes leftover after parsing attributes in process `syz.3.96'. [ 131.745415][ T6099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.746311][ T6099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.761022][ T6100] netlink: 'syz.3.96': attribute type 9 has an invalid length. [ 131.764256][ T6097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.766788][ T6099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.774448][ T6100] netlink: 8 bytes leftover after parsing attributes in process `syz.3.96'. [ 131.786360][ T6097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.786974][ T6097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.796085][ T6099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.806823][ T6097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.807430][ T6097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.828053][ T6099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.851195][ T6099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.886709][ T6105] pvrusb2: Attempted to execute control transfer when device not ok [ 131.969214][ T6107] Zero length message leads to an empty skb [ 132.345142][ T5602] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 132.498410][ T5602] usb 4-1: unable to get BOS descriptor or descriptor too short [ 132.500244][ T5602] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.500269][ T5602] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 132.503789][ T5602] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 132.503818][ T5602] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.503839][ T5602] usb 4-1: Product: syz [ 132.503853][ T5602] usb 4-1: Manufacturer: syz [ 132.503868][ T5602] usb 4-1: SerialNumber: syz [ 132.505057][ T1010] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 132.541297][ T5602] usb 4-1: selecting invalid altsetting 1 [ 132.664967][ T1010] usb 1-1: Using ep0 maxpacket: 8 [ 132.668213][ T1010] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 132.668242][ T1010] usb 1-1: config 0 has no interface number 0 [ 132.668289][ T1010] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 132.668313][ T1010] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 132.668338][ T1010] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 132.668365][ T1010] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 132.668409][ T1010] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 132.668432][ T1010] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.681126][ T5602] usb 4-1: unit 6 not found! [ 132.831789][ T6113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.847098][ T6113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.868115][ T1010] usb 1-1: config 0 descriptor?? [ 133.037348][ T1010] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 133.037489][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.037749][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.168735][ T6119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.212981][ T6119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.404196][ T5722] usb 3-1: USB disconnect, device number 9 [ 133.714810][ T6121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.750609][ T5629] usb 1-1: USB disconnect, device number 18 [ 133.761736][ T6121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.856161][ T5629] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 134.142286][ T6127] Invalid argument reading file caps for ./file0 [ 134.142793][ T6127] FAULT_INJECTION: forcing a failure. [ 134.142793][ T6127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.142822][ T6127] CPU: 0 UID: 0 PID: 6127 Comm: syz.1.105 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 134.142844][ T6127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 134.142854][ T6127] Call Trace: [ 134.142862][ T6127] [ 134.142871][ T6127] dump_stack_lvl+0xe8/0x150 [ 134.142902][ T6127] should_fail_ex+0x46b/0x600 [ 134.142935][ T6127] _copy_from_user+0x2d/0xb0 [ 134.142962][ T6127] kstrtouint_from_user+0xd6/0x180 [ 134.142990][ T6127] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 134.143033][ T6127] proc_fail_nth_write+0x8e/0x210 [ 134.143056][ T6127] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 134.143084][ T6127] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 134.143108][ T6127] vfs_write+0x2a3/0xba0 [ 134.143142][ T6127] ? __pfx_vfs_write+0x10/0x10 [ 134.143171][ T6127] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 134.143197][ T6127] ? lockdep_hardirqs_on+0x7a/0x110 [ 134.143224][ T6127] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 134.143249][ T6127] ? mutex_lock_nested+0x152/0x1d0 [ 134.143269][ T6127] ? fdget_pos+0x252/0x320 [ 134.143301][ T6127] ksys_write+0x156/0x270 [ 134.143328][ T6127] ? __pfx_ksys_write+0x10/0x10 [ 134.143362][ T6127] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.143385][ T6127] do_syscall_64+0x15f/0xf80 [ 134.143407][ T6127] ? trace_irq_disable+0x3b/0x140 [ 134.143432][ T6127] ? clear_bhb_loop+0x40/0x90 [ 134.143459][ T6127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.143477][ T6127] RIP: 0033:0x7f2b5baad60e [ 134.143506][ T6127] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 134.143522][ T6127] RSP: 002b:00007f2b59d45fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 134.143544][ T6127] RAX: ffffffffffffffda RBX: 00007f2b59d466c0 RCX: 00007f2b5baad60e [ 134.143558][ T6127] RDX: 0000000000000001 RSI: 00007f2b59d460a0 RDI: 0000000000000003 [ 134.143570][ T6127] RBP: 00007f2b59d46090 R08: 0000000000000000 R09: 0000000000000000 [ 134.143582][ T6127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 134.143594][ T6127] R13: 00007f2b5bd66038 R14: 00007f2b5bd65fa0 R15: 00007ffeca81d9c8 [ 134.143628][ T6127] [ 134.193149][ T5722] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 134.465558][ T5722] usb 3-1: device descriptor read/64, error -71 [ 134.734967][ T5722] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 134.872919][ T5602] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 134.875582][ T5722] usb 3-1: device descriptor read/64, error -71 [ 134.887594][ T5602] usb 4-1: USB disconnect, device number 16 [ 134.898337][ T5629] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 134.985493][ T5722] usb usb3-port1: attempt power cycle [ 135.035561][ T5629] usb 1-1: device descriptor read/64, error -71 [ 135.035702][ T5621] udevd[5621]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 135.131819][ T6137] bond0: entered promiscuous mode [ 135.131837][ T6137] bond_slave_0: entered promiscuous mode [ 135.131998][ T6137] bond_slave_1: entered promiscuous mode [ 135.255888][ T5602] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 135.285104][ T5629] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 135.345141][ T5722] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 135.365707][ T5722] usb 3-1: device descriptor read/8, error -71 [ 135.405180][ T5602] usb 4-1: Using ep0 maxpacket: 8 [ 135.407786][ T5602] usb 4-1: unable to get BOS descriptor or descriptor too short [ 135.409011][ T5602] usb 4-1: config 4 interface 0 has no altsetting 0 [ 135.412481][ T5602] usb 4-1: string descriptor 0 read error: -22 [ 135.412589][ T5602] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 135.412614][ T5602] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 135.435152][ T5629] usb 1-1: device descriptor read/64, error -71 [ 135.470107][ T5602] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 135.492094][ T5602] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 135.492516][ T5602] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 135.492583][ T5602] usb 4-1: media controller created [ 135.512763][ T5602] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 135.546445][ T5629] usb usb1-port1: attempt power cycle [ 135.624972][ T5722] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 135.645953][ T5722] usb 3-1: device descriptor read/8, error -71 [ 135.755551][ T5722] usb usb3-port1: unable to enumerate USB device [ 135.895085][ T5629] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 135.915774][ T5629] usb 1-1: device descriptor read/8, error -71 [ 136.155110][ T5629] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 136.189380][ T5629] usb 1-1: device descriptor read/8, error -71 [ 136.305555][ T5629] usb usb1-port1: unable to enumerate USB device [ 136.511708][ T6149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.512359][ T6149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.527113][ T6149] netlink: 36 bytes leftover after parsing attributes in process `syz.1.113'. [ 136.640012][ T5602] zl10353_read_register: readreg error (reg=127, ret==0) [ 136.659491][ T6125] usb 4-1: dvb_usb_au6610: wlen=3, aborting [ 136.777840][ T5602] usb 4-1: USB disconnect, device number 17 [ 136.878818][ T6156] tmpfs: Bad value for 'mpol' [ 136.879524][ T6158] tmpfs: Bad value for 'mpol' [ 137.016121][ T6164] netlink: 24 bytes leftover after parsing attributes in process `syz.2.117'. [ 137.142665][ T6168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.143771][ T6168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.193149][ T6168] netlink: 'syz.1.119': attribute type 10 has an invalid length. [ 137.319042][ T6174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.121'. [ 137.378184][ T6168] bridge0: port 3(netdevsim1) entered blocking state [ 137.378533][ T6168] bridge0: port 3(netdevsim1) entered disabled state [ 137.378730][ T6168] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 137.382915][ T6168] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 137.565058][ T5722] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 137.725602][ T5722] usb 3-1: Using ep0 maxpacket: 32 [ 137.729396][ T5722] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 137.729424][ T5722] usb 3-1: config 0 has no interface number 0 [ 137.732436][ T5722] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 137.732475][ T5722] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.732494][ T5722] usb 3-1: Product: syz [ 137.732507][ T5722] usb 3-1: Manufacturer: syz [ 137.732521][ T5722] usb 3-1: SerialNumber: syz [ 137.798178][ T6184] netlink: 'syz.3.123': attribute type 27 has an invalid length. [ 137.801241][ T5722] usb 3-1: config 0 descriptor?? [ 137.831961][ T5722] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 137.831989][ T5722] usb 3-1: selecting invalid altsetting 1 [ 137.832005][ T5722] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 137.880689][ T5722] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 137.881150][ T5722] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 137.881208][ T5722] usb 3-1: media controller created [ 137.930047][ T5722] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 138.049978][ T6172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.058625][ T6172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.076500][ T5722] usb 3-1: DVB: registering adapter 1 frontend 0 (Zarlink ZL10353 DVB-T)... [ 138.077222][ T5722] dvbdev: dvb_create_media_entity: media entity 'Zarlink ZL10353 DVB-T' registered. [ 138.145261][ T822] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 138.193882][ T5722] DVB: Unable to find symbol mxl5005s_attach() [ 138.311367][ T822] usb 4-1: unable to get BOS descriptor or descriptor too short [ 138.337597][ T822] usb 4-1: config 63 has an invalid interface number: 66 but max is 0 [ 138.337627][ T822] usb 4-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 138.337644][ T822] usb 4-1: config 63 has no interface number 0 [ 138.337675][ T822] usb 4-1: config 63 interface 66 has no altsetting 0 [ 138.352556][ T822] usb 4-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 138.352583][ T822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.352600][ T822] usb 4-1: Product: syz [ 138.352613][ T822] usb 4-1: Manufacturer: syz [ 138.352625][ T822] usb 4-1: SerialNumber: syz [ 138.463491][ T5722] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 138.575668][ T5722] usb 3-1: USB disconnect, device number 14 [ 138.682253][ T6197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.701742][ T6197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.872178][ T822] uvcvideo 4-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 138.872847][ T822] uvcvideo 4-1:63.66: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 138.873424][ T822] uvcvideo 4-1:63.66: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 138.873991][ T822] uvcvideo 4-1:63.66: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 138.874551][ T822] uvcvideo 4-1:63.66: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 138.875942][ T822] uvcvideo 4-1:63.66: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 138.876036][ T822] uvcvideo 4-1:63.66: No streaming interface found for terminal 29. [ 138.876054][ T822] uvcvideo 4-1:63.66: Entity type for entity Output 32773 was not initialized! [ 138.917436][ T822] usb 4-1: USB disconnect, device number 18 [ 139.212973][ T6200] MINIX-fs: unable to read superblock [ 139.406024][ T822] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 139.465157][ T5602] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 139.568616][ T822] usb 4-1: unable to get BOS descriptor or descriptor too short [ 139.569506][ T822] usb 4-1: not running at top speed; connect to a high speed hub [ 139.571593][ T822] usb 4-1: config 63 has an invalid interface number: 66 but max is 0 [ 139.571617][ T822] usb 4-1: config 63 has an invalid descriptor of length 47, skipping remainder of the config [ 139.571636][ T822] usb 4-1: config 63 has no interface number 0 [ 139.571664][ T822] usb 4-1: config 63 interface 66 has no altsetting 0 [ 139.579529][ T822] usb 4-1: string descriptor 0 read error: -22 [ 139.579670][ T822] usb 4-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 139.579691][ T822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.612427][ T1010] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 139.621976][ T822] uvcvideo 4-1:63.66: probe with driver uvcvideo failed with error -22 [ 139.635865][ T5602] usb 1-1: Using ep0 maxpacket: 16 [ 139.650702][ T5602] usb 1-1: config 0 has no interfaces? [ 139.670019][ T5602] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 139.670047][ T5602] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 139.670064][ T5602] usb 1-1: Manufacturer: syz [ 139.688085][ T5602] usb 1-1: config 0 descriptor?? [ 139.831770][ T1010] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 139.831808][ T1010] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 139.831827][ T1010] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 139.831851][ T1010] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 139.831873][ T1010] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 139.831885][ T1010] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 139.892827][ T6203] netlink: 36 bytes leftover after parsing attributes in process `syz.0.128'. [ 139.902598][ T5602] usb 1-1: USB disconnect, device number 23 [ 139.917361][ T1010] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 139.917392][ T1010] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.917412][ T1010] usb 3-1: Product: syz [ 139.917427][ T1010] usb 3-1: Manufacturer: syz [ 139.917441][ T1010] usb 3-1: SerialNumber: syz [ 139.963898][ T1010] usb 3-1: config 0 descriptor?? [ 139.975280][ T1010] hub 3-1:0.0: bad descriptor, ignoring hub [ 139.975324][ T1010] hub 3-1:0.0: probe with driver hub failed with error -5 [ 140.002856][ T6219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.003543][ T6219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.177424][ T6207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.178409][ T6207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.295609][ T5602] usb 3-1: USB disconnect, device number 15 [ 140.731112][ T5602] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 140.799456][ T6226] netlink: 12 bytes leftover after parsing attributes in process `syz.1.134'. [ 140.885634][ T5602] usb 1-1: Using ep0 maxpacket: 8 [ 140.887593][ T5602] usb 1-1: config 8 has an invalid interface number: 37 but max is 0 [ 140.887620][ T5602] usb 1-1: config 8 has no interface number 0 [ 140.887666][ T5602] usb 1-1: config 8 interface 37 altsetting 255 bulk endpoint 0xB has invalid maxpacket 64 [ 140.887691][ T5602] usb 1-1: config 8 interface 37 altsetting 255 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 140.887718][ T5602] usb 1-1: config 8 interface 37 has no altsetting 0 [ 140.890166][ T5602] usb 1-1: New USB device found, idVendor=55aa, idProduct=a103, bcdDevice=2b.c9 [ 140.890194][ T5602] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.890213][ T5602] usb 1-1: Product: syz [ 140.890227][ T5602] usb 1-1: Manufacturer: syz [ 140.890241][ T5602] usb 1-1: SerialNumber: syz [ 140.929974][ T6222] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 141.059012][ T822] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 141.172716][ T5602] ums-sddr55 1-1:8.37: USB Mass Storage device detected [ 141.203700][ T1010] usb 4-1: USB disconnect, device number 19 [ 141.216717][ T822] usb 3-1: Using ep0 maxpacket: 8 [ 141.238035][ T822] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 141.238066][ T822] usb 3-1: config 0 has no interface number 0 [ 141.238111][ T822] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 141.238136][ T822] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 141.238160][ T822] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 141.238185][ T822] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 141.238226][ T822] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 141.238247][ T822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.376379][ T822] usb 3-1: config 0 descriptor?? [ 141.548778][ T5602] usb 1-1: USB disconnect, device number 24 [ 141.592153][ T822] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 141.706850][ T37] usb 3-1: USB disconnect, device number 16 [ 141.742470][ T37] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 141.798860][ T1010] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 141.975197][ T1010] usb 4-1: Using ep0 maxpacket: 32 [ 141.982349][ T1010] usb 4-1: config index 0 descriptor too short (expected 3659, got 75) [ 141.982379][ T1010] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.998468][ T1010] usb 4-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 141.998500][ T1010] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.998526][ T1010] usb 4-1: Product: syz [ 141.998540][ T1010] usb 4-1: Manufacturer: syz [ 141.998552][ T1010] usb 4-1: SerialNumber: syz [ 142.068902][ T1010] usb 4-1: config 0 descriptor?? [ 142.093910][ T1010] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 142.127141][ T6247] netlink: 'syz.1.137': attribute type 10 has an invalid length. [ 142.127166][ T6247] netlink: 40 bytes leftover after parsing attributes in process `syz.1.137'. [ 142.130018][ T6247] dummy0: entered promiscuous mode [ 142.275077][ T822] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 142.356282][ T6247] bridge0: port 4(dummy0) entered blocking state [ 142.357233][ T6247] bridge0: port 4(dummy0) entered disabled state [ 142.357730][ T6247] dummy0: entered allmulticast mode [ 142.405593][ T6247] bridge0: port 4(dummy0) entered blocking state [ 142.405962][ T6247] bridge0: port 4(dummy0) entered forwarding state [ 142.425381][ T822] usb 1-1: Using ep0 maxpacket: 8 [ 142.428229][ T822] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 142.428257][ T822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.451899][ T822] pvrusb2: Hardware description: Terratec Grabster AV400 [ 142.451916][ T822] pvrusb2: ********** [ 142.451922][ T822] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 142.451932][ T822] pvrusb2: Important functionality might not be entirely working. [ 142.451939][ T822] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 142.451949][ T822] pvrusb2: ********** [ 142.689522][ T2326] pvrusb2: Invalid write control endpoint [ 142.954241][ T2326] pvrusb2: Invalid write control endpoint [ 142.954258][ T2326] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 142.954266][ T2326] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 142.954272][ T2326] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 142.954281][ T2326] pvrusb2: Device being rendered inoperable [ 142.954410][ T2326] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 142.954468][ T2326] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 143.008412][ T6267] pvrusb2: Attempted to execute control transfer when device not ok [ 143.126563][ T2326] pvrusb2: Attached sub-driver cx25840 [ 143.126803][ T2326] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 143.126815][ T2326] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 143.487291][ T6265] syzkaller1: entered promiscuous mode [ 143.487318][ T6265] syzkaller1: entered allmulticast mode [ 143.818123][ T1010] gspca_sunplus: reg_r err -71 [ 143.939646][ T6281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.940260][ T6281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.944426][ T6281] netlink: 36 bytes leftover after parsing attributes in process `syz.1.141'. [ 144.573054][ T6300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.573913][ T6300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.775396][ T37] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 144.905123][ T1010] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 144.914606][ T1010] usb 4-1: USB disconnect, device number 20 [ 144.945219][ T37] usb 3-1: Using ep0 maxpacket: 8 [ 144.948205][ T37] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 144.948232][ T37] usb 3-1: config 0 has no interface number 0 [ 144.948278][ T37] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 144.948303][ T37] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 144.948326][ T37] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 144.948352][ T37] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 144.948395][ T37] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 144.948416][ T37] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.960228][ T37] usb 3-1: config 0 descriptor?? [ 145.062282][ T37] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 145.373922][ T6306] netlink: 104 bytes leftover after parsing attributes in process `syz.1.150'. [ 145.468320][ T5701] usb 1-1: USB disconnect, device number 25 [ 145.940696][ T6314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.941345][ T6314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.977840][ T6314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.979549][ T6314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.004428][ T6314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.020418][ T6314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.297961][ T6319] netlink: 'syz.0.153': attribute type 1 has an invalid length. [ 146.364392][ T6322] sg_write: data in/out 44713/14 bytes for SCSI command 0x0-- guessing data in; [ 146.364392][ T6322] program syz.0.153 not setting count and/or reply_len properly [ 146.675442][ T6327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.678397][ T6327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.710221][ T6327] netlink: 12 bytes leftover after parsing attributes in process `syz.1.156'. [ 147.112495][ T6330] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 147.247132][ T6337] tmpfs: Unsupported parameter 'huge' [ 147.555077][ T1010] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 147.764547][ T1010] usb 4-1: unable to get BOS descriptor or descriptor too short [ 147.768138][ T1010] usb 4-1: config 114 has an invalid interface number: 240 but max is 0 [ 147.768493][ T1010] usb 4-1: config 114 has no interface number 0 [ 147.768541][ T1010] usb 4-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 147.768564][ T1010] usb 4-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 147.768729][ T1010] usb 4-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 147.768755][ T1010] usb 4-1: config 114 interface 240 has no altsetting 0 [ 147.783892][ T1010] usb 4-1: string descriptor 0 read error: -22 [ 147.784736][ T1010] usb 4-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 147.784762][ T1010] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.872920][ T6341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.882229][ T6341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.950606][ T6337] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 147.951016][ T6337] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 147.981321][ T1010] ir_usb 4-1:114.240: IR Dongle converter detected [ 148.038703][ T5602] usb 3-1: USB disconnect, device number 17 [ 148.095885][ T5602] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 148.196455][ T6337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.159'. [ 148.242827][ T1010] usb 4-1: IRDA class descriptor not found, device not bound [ 148.495929][ T5722] usb 4-1: USB disconnect, device number 21 [ 148.635307][ T5629] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 148.809049][ T5629] usb 3-1: unable to get BOS descriptor or descriptor too short [ 148.809719][ T5629] usb 3-1: not running at top speed; connect to a high speed hub [ 148.815083][ T5629] usb 3-1: config 5 has an invalid interface number: 227 but max is 0 [ 148.815111][ T5629] usb 3-1: config 5 has no interface number 0 [ 148.840293][ T5629] usb 3-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice=1a.e6 [ 148.840322][ T5629] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.840340][ T5629] usb 3-1: Product: syz [ 148.840353][ T5629] usb 3-1: Manufacturer: syz [ 148.840365][ T5629] usb 3-1: SerialNumber: syz [ 149.170082][ T5629] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:5.227/input/input10 [ 149.253344][ T6355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.265527][ T6355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.274698][ T6355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.281554][ T4966] bcm5974 3-1:5.227: could not read from device [ 149.299057][ T6355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.340752][ T5629] usb 3-1: USB disconnect, device number 18 [ 149.450245][ T5618] udevd[5618]: Error opening device "/dev/input/event4": No such file or directory [ 149.450327][ T5618] udevd[5618]: Unable to EVIOCGABS device "/dev/input/event4" [ 149.450391][ T5618] udevd[5618]: Unable to EVIOCGABS device "/dev/input/event4" [ 149.450454][ T5618] udevd[5618]: Unable to EVIOCGABS device "/dev/input/event4" [ 149.450533][ T5618] udevd[5618]: Unable to EVIOCGABS device "/dev/input/event4" [ 149.506883][ T5719] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 149.663575][ T5719] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 149.663616][ T5719] usb 1-1: can't read configurations, error -61 [ 149.785078][ T5602] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 149.795103][ T5719] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 149.862789][ T6363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.863482][ T6363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.948931][ T5602] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 149.948950][ T5602] usb 4-1: config 0 has no interface number 0 [ 149.948976][ T5602] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 149.948989][ T5602] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 149.949004][ T5602] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 149.949017][ T5602] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 149.949032][ T5602] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 149.949047][ T5602] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 149.949072][ T5602] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 149.949085][ T5602] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.987843][ T5719] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 149.987881][ T5719] usb 1-1: can't read configurations, error -61 [ 149.988519][ T5719] usb usb1-port1: attempt power cycle [ 149.994997][ T5722] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 150.091866][ T5602] usb 4-1: config 0 descriptor?? [ 150.096235][ T6359] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 150.097117][ T6359] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 150.107140][ T6365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.107715][ T6365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.130778][ T6365] netlink: 56 bytes leftover after parsing attributes in process `syz.1.170'. [ 150.145747][ T5722] usb 3-1: Using ep0 maxpacket: 16 [ 150.155296][ T5722] usb 3-1: config 0 has no interfaces? [ 150.155555][ T5602] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 150.157172][ T5722] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 150.157200][ T5722] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 150.157220][ T5722] usb 3-1: Manufacturer: syz [ 150.170974][ T6365] netlink: 56 bytes leftover after parsing attributes in process `syz.1.170'. [ 150.227894][ T5722] usb 3-1: config 0 descriptor?? [ 150.325066][ T5719] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 150.349235][ T5616] Bluetooth: hci2: unexpected event for opcode 0x100b [ 150.360007][ T5719] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 150.360041][ T5719] usb 1-1: can't read configurations, error -61 [ 150.437088][ T6361] netlink: 12 bytes leftover after parsing attributes in process `syz.2.168'. [ 150.456775][ T5602] usb 3-1: USB disconnect, device number 19 [ 150.484992][ T5719] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 150.512174][ T5719] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 150.512213][ T5719] usb 1-1: can't read configurations, error -61 [ 150.512665][ T5719] usb usb1-port1: unable to enumerate USB device [ 151.365294][ T5719] usb 3-1: new low-speed USB device number 20 using dummy_hcd [ 151.539136][ T5719] usb 3-1: unable to get BOS descriptor or descriptor too short [ 151.540955][ T5719] usb 3-1: config 172 has an invalid interface number: 190 but max is 1 [ 151.540981][ T5719] usb 3-1: config 172 has an invalid descriptor of length 0, skipping remainder of the config [ 151.541001][ T5719] usb 3-1: config 172 has no interface number 1 [ 151.541047][ T5719] usb 3-1: config 172 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 151.541070][ T5719] usb 3-1: config 172 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 151.546537][ T5719] usb 3-1: string descriptor 0 read error: -22 [ 151.546681][ T5719] usb 3-1: New USB device found, idVendor=04cb, idProduct=0127, bcdDevice=3a.be [ 151.546702][ T5719] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.571200][ T5719] gspca_main: finepix-2.14.0 probing 04cb:0127 [ 151.819380][ T5602] usb 3-1: USB disconnect, device number 20 [ 152.478823][ T6386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.480609][ T6386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.655061][ T5602] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 152.814992][ T5719] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 152.815442][ T5602] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 152.815470][ T5602] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.859598][ T5602] usb 1-1: config 0 descriptor?? [ 152.989708][ T5719] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 152.989738][ T5719] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.989757][ T5719] usb 3-1: config 0 has no interface number 0 [ 152.989805][ T5719] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.989832][ T5719] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.989855][ T5719] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 152.989898][ T5719] usb 3-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.00 [ 152.989921][ T5719] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.074826][ T5719] usb 3-1: config 0 descriptor?? [ 153.293667][ T5602] hackrf 1-1:0.0: usb_control_msg() failed -71 request 0f [ 153.293696][ T5602] hackrf 1-1:0.0: Could not detect board [ 153.293754][ T5602] hackrf 1-1:0.0: probe with driver hackrf failed with error -71 [ 153.309881][ T6389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.310804][ T6389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.333512][ T6389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.336912][ T6389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.359094][ T5602] usb 1-1: USB disconnect, device number 30 [ 153.375678][ T6389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.376541][ T6389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.413980][ T6389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.415520][ T6389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.428845][ T6389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.431963][ T6389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.527598][ T6392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.528228][ T6392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.567493][ T5629] usb 4-1: USB disconnect, device number 22 [ 153.617617][ T5629] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 153.684075][ T6394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.700550][ T6394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.070401][ T5719] usbhid 3-1:0.1: can't add hid device: -71 [ 154.070525][ T5719] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 154.082645][ T5719] usb 3-1: USB disconnect, device number 21 [ 154.375338][ T5769] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 154.525057][ T5769] usb 1-1: Using ep0 maxpacket: 16 [ 154.527560][ T5769] usb 1-1: config 0 has no interfaces? [ 154.528692][ T5769] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 154.528717][ T5769] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 154.528736][ T5769] usb 1-1: Manufacturer: syz [ 154.546490][ T1010] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 154.583589][ T5769] usb 1-1: config 0 descriptor?? [ 154.700704][ T6405] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 154.766857][ T1010] usb 4-1: Using ep0 maxpacket: 8 [ 154.781121][ T1010] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 154.781148][ T1010] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.806969][ T6401] netlink: 12 bytes leftover after parsing attributes in process `syz.0.179'. [ 154.828076][ T5769] usb 1-1: USB disconnect, device number 31 [ 154.869676][ T1010] pvrusb2: Hardware description: Terratec Grabster AV400 [ 154.869689][ T1010] pvrusb2: ********** [ 154.869693][ T1010] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 154.869699][ T1010] pvrusb2: Important functionality might not be entirely working. [ 154.869703][ T1010] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 154.869709][ T1010] pvrusb2: ********** [ 155.096864][ T2326] pvrusb2: Invalid write control endpoint [ 155.254195][ T2326] pvrusb2: Invalid write control endpoint [ 155.254213][ T2326] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 155.254222][ T2326] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 155.254231][ T2326] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 155.254241][ T2326] pvrusb2: Device being rendered inoperable [ 155.281328][ T2326] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 155.281413][ T2326] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 155.282512][ T2326] pvrusb2: Attached sub-driver cx25840 [ 155.282523][ T2326] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 155.282531][ T2326] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 155.307060][ T6403] pvrusb2: Attempted to execute control transfer when device not ok [ 155.311938][ T5719] usb 4-1: USB disconnect, device number 23 [ 156.359401][ T5629] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 156.380151][ T6413] syz.2.182 (6413) used greatest stack depth: 17888 bytes left [ 156.466829][ T6422] mmap: syz.2.187 (6422) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 156.548477][ T5629] usb 4-1: not running at top speed; connect to a high speed hub [ 156.554241][ T5629] usb 4-1: config 55 has an invalid interface number: 173 but max is 1 [ 156.554272][ T5629] usb 4-1: config 55 has an invalid interface number: 173 but max is 1 [ 156.554292][ T5629] usb 4-1: config 55 has 1 interface, different from the descriptor's value: 2 [ 156.554313][ T5629] usb 4-1: config 55 has no interface number 0 [ 156.554375][ T5629] usb 4-1: config 55 interface 173 has no altsetting 0 [ 156.569618][ T5629] usb 4-1: New USB device found, idVendor=1199, idProduct=0025, bcdDevice=be.2f [ 156.569647][ T5629] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.569665][ T5629] usb 4-1: Product: syz [ 156.569678][ T5629] usb 4-1: Manufacturer: syz [ 156.569690][ T5629] usb 4-1: SerialNumber: syz [ 156.697468][ T6427] loop8: detected capacity change from 0 to 36 [ 156.900238][ T6427] loop8: AHDI p1 p2 [ 156.900515][ T6427] loop8: p1 start 1702000233 is beyond EOD, truncated [ 156.924575][ T5629] sierra 4-1:55.173: Sierra USB modem converter detected [ 157.152577][ T5629] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 157.228311][ T5629] usb 4-1: USB disconnect, device number 24 [ 157.259980][ T6432] netlink: 'syz.1.189': attribute type 21 has an invalid length. [ 157.260106][ T6432] netlink: 'syz.1.189': attribute type 1 has an invalid length. [ 157.260733][ T6433] netlink: 'syz.1.189': attribute type 21 has an invalid length. [ 157.260933][ T6433] netlink: 'syz.1.189': attribute type 1 has an invalid length. [ 157.339970][ T6432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.342273][ T6432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.355713][ T5618] udevd[5618]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 157.438997][ T5616] Bluetooth: hci0: unexpected cc 0x0c05 length: 4 > 1 [ 157.439029][ T5616] Bluetooth: hci0: unexpected event for opcode 0x0c05 [ 157.439107][ T5616] Bluetooth: hci0: unexpected cc 0x0c05 length: 4 > 1 [ 157.439118][ T5616] Bluetooth: hci0: unexpected event for opcode 0x0c05 [ 157.531051][ T5629] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 157.595782][ T5629] sierra 4-1:55.173: device disconnected [ 157.966862][ T5769] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 158.081464][ T6444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.082764][ T6444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.115719][ T5769] usb 3-1: Using ep0 maxpacket: 16 [ 158.118396][ T5769] usb 3-1: config 0 has no interfaces? [ 158.132349][ T5769] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 158.132379][ T5769] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 158.132399][ T5769] usb 3-1: Manufacturer: syz [ 158.166576][ T5769] usb 3-1: config 0 descriptor?? [ 158.385584][ T6439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.191'. [ 158.393151][ T5722] usb 3-1: USB disconnect, device number 22 [ 158.547877][ T6449] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 158.768616][ T6453] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 158.855912][ T6453] netlink: 28 bytes leftover after parsing attributes in process `syz.1.196'. [ 158.863730][ T6454] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 158.935171][ T5769] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 159.105916][ T5769] usb 1-1: unable to get BOS descriptor or descriptor too short [ 159.106996][ T5769] usb 1-1: not running at top speed; connect to a high speed hub [ 159.107064][ T5769] usb 1-1: too many configurations: 139, using maximum allowed: 8 [ 159.115061][ T5769] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 159.115102][ T5769] usb 1-1: can't read configurations, error -61 [ 159.245015][ T5769] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 159.410203][ T5769] usb 1-1: unable to get BOS descriptor or descriptor too short [ 159.412645][ T5769] usb 1-1: not running at top speed; connect to a high speed hub [ 159.412781][ T5769] usb 1-1: too many configurations: 139, using maximum allowed: 8 [ 159.417440][ T5769] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 159.417478][ T5769] usb 1-1: can't read configurations, error -61 [ 159.424726][ T5769] usb usb1-port1: attempt power cycle [ 159.804957][ T5769] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 159.811272][ T6455] syzkaller1: entered promiscuous mode [ 159.811295][ T6455] syzkaller1: entered allmulticast mode [ 159.836490][ T5769] usb 1-1: unable to get BOS descriptor or descriptor too short [ 159.837099][ T5769] usb 1-1: not running at top speed; connect to a high speed hub [ 159.837169][ T5769] usb 1-1: too many configurations: 139, using maximum allowed: 8 [ 159.878449][ T5769] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 159.878492][ T5769] usb 1-1: can't read configurations, error -61 [ 159.947733][ T6464] input: syz0 as /devices/virtual/input/input11 [ 160.015500][ T5769] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 160.053279][ T5769] usb 1-1: unable to get BOS descriptor or descriptor too short [ 160.061215][ T5769] usb 1-1: not running at top speed; connect to a high speed hub [ 160.061288][ T5769] usb 1-1: too many configurations: 139, using maximum allowed: 8 [ 160.065267][ T5769] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 160.065307][ T5769] usb 1-1: can't read configurations, error -61 [ 160.072502][ T5769] usb usb1-port1: unable to enumerate USB device [ 160.662705][ T6468] input: syz0 as /devices/virtual/input/input12 [ 160.958203][ T822] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 161.138443][ T822] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.138502][ T822] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 161.138524][ T822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.186009][ T822] usb 3-1: config 0 descriptor?? [ 161.248336][ T822] pwc: Askey VC010 type 2 USB webcam detected. [ 161.627615][ T822] pwc: recv_control_msg error -32 req 02 val 2b00 [ 161.835000][ T822] pwc: recv_control_msg error -32 req 02 val 2c00 [ 161.838216][ T822] pwc: recv_control_msg error -32 req 04 val 1000 [ 161.839783][ T822] pwc: recv_control_msg error -32 req 04 val 1300 [ 161.842181][ T822] pwc: recv_control_msg error -32 req 04 val 1400 [ 161.854061][ T822] pwc: recv_control_msg error -32 req 02 val 2000 [ 161.882653][ T822] pwc: recv_control_msg error -32 req 02 val 2100 [ 162.088962][ T822] pwc: recv_control_msg error -71 req 02 val 2500 [ 162.097252][ T822] pwc: recv_control_msg error -71 req 02 val 2400 [ 162.097779][ T822] pwc: recv_control_msg error -71 req 02 val 2600 [ 162.098219][ T822] pwc: recv_control_msg error -71 req 02 val 2900 [ 162.099925][ T822] pwc: recv_control_msg error -71 req 02 val 2800 [ 162.100582][ T822] pwc: recv_control_msg error -71 req 04 val 1100 [ 162.101204][ T822] pwc: recv_control_msg error -71 req 04 val 1200 [ 162.177548][ T822] pwc: Registered as video103. [ 162.199280][ T822] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input13 [ 162.256769][ T37] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 162.448429][ T37] usb 1-1: Using ep0 maxpacket: 16 [ 162.499726][ T822] usb 3-1: USB disconnect, device number 23 [ 162.539629][ T37] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 162.539663][ T37] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 162.573458][ T37] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 162.573489][ T37] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.573508][ T37] usb 1-1: Product: syz [ 162.573523][ T37] usb 1-1: Manufacturer: syz [ 162.573536][ T37] usb 1-1: SerialNumber: syz [ 162.671388][ T37] usb 1-1: config 0 descriptor?? [ 162.694301][ T37] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 162.694332][ T37] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 163.292667][ T37] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 163.321943][ T37] em28xx 1-1:0.0: Config register raw data: 0x54 [ 163.445038][ T5701] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 163.535011][ T37] em28xx 1-1:0.0: AC97 command still being executed: not handled properly! [ 163.535037][ T37] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 163.535052][ T37] em28xx 1-1:0.0: No AC97 audio processor [ 163.598909][ T5701] usb 3-1: unable to get BOS descriptor or descriptor too short [ 163.600530][ T5701] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 163.600580][ T5701] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 163.636752][ T5701] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 163.636785][ T5701] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.636806][ T5701] usb 3-1: Product: syz [ 163.636821][ T5701] usb 3-1: Manufacturer: syz [ 163.636836][ T5701] usb 3-1: SerialNumber: syz [ 163.686498][ T822] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 163.732570][ T5769] usb 1-1: USB disconnect, device number 36 [ 163.747141][ T5769] em28xx 1-1:0.0: Disconnecting em28xx [ 163.842211][ T822] usb 4-1: Using ep0 maxpacket: 16 [ 163.863207][ T822] usb 4-1: config 0 has no interfaces? [ 163.872284][ T822] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 163.872325][ T822] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 163.872410][ T822] usb 4-1: Manufacturer: syz [ 163.936885][ T822] usb 4-1: config 0 descriptor?? [ 164.061744][ T5769] em28xx 1-1:0.0: Freeing device [ 164.147647][ T6498] netlink: 12 bytes leftover after parsing attributes in process `syz.3.205'. [ 164.181568][ T37] usb 4-1: USB disconnect, device number 25 [ 164.363292][ T6516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.206'. [ 165.175098][ T5616] Bluetooth: hci0: command 0x0c1a tx timeout [ 165.212100][ T5629] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 165.212127][ T5629] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 167.255065][ T5629] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 167.255095][ T5629] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 167.255100][ T5616] Bluetooth: hci1: command 0x0c1a tx timeout [ 168.788237][ T5701] usb 3-1: unit 4: unexpected type 0x03 [ 169.335084][ T5616] Bluetooth: hci2: command 0x0c1a tx timeout [ 169.335234][ T5629] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 169.335254][ T5629] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 171.415143][ T5616] Bluetooth: hci3: command 0x0c1a tx timeout [ 171.415229][ T5629] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 171.415328][ T5629] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 172.877835][ T5629] usb 3-1: USB disconnect, device number 24 [ 173.005509][ T6592] random: crng reseeded on system resumption [ 173.823028][ T6606] xfrm0 speed is unknown, defaulting to 1000 [ 173.834699][ T6606] xfrm0 speed is unknown, defaulting to 1000 [ 173.852355][ T5629] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 173.900191][ T6615] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 173.920400][ T6606] xfrm0 speed is unknown, defaulting to 1000 [ 173.985714][ T6615] netlink: 4 bytes leftover after parsing attributes in process `syz.3.218'. [ 174.021316][ T5629] usb 3-1: Using ep0 maxpacket: 16 [ 174.023336][ T5629] usb 3-1: config 0 has no interfaces? [ 174.024567][ T5629] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 174.024586][ T5629] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 174.024598][ T5629] usb 3-1: Manufacturer: syz [ 174.025052][ T5769] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 174.055623][ T5629] usb 3-1: config 0 descriptor?? [ 174.107850][ T6615] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 174.107882][ T6615] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 174.108148][ T6615] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 174.108169][ T6615] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 174.225093][ T5769] usb 1-1: Using ep0 maxpacket: 32 [ 174.255493][ T5769] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 174.255524][ T5769] usb 1-1: config 0 has no interface number 0 [ 174.289505][ T5769] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 174.289538][ T5769] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.289559][ T5769] usb 1-1: Product: syz [ 174.289573][ T5769] usb 1-1: Manufacturer: syz [ 174.289587][ T5769] usb 1-1: SerialNumber: syz [ 174.305910][ T6605] netlink: 12 bytes leftover after parsing attributes in process `syz.2.216'. [ 174.365519][ T5769] usb 1-1: config 0 descriptor?? [ 174.385650][ T1010] usb 3-1: USB disconnect, device number 25 [ 174.796192][ T5769] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 174.796227][ T5769] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 175.105096][ T6635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.110484][ T6635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.123682][ T6635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.124287][ T6635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.288873][ T6606] infiniband syz1: set active [ 175.289079][ T6606] infiniband syz1: added xfrm0 [ 175.505696][ T37] xfrm0 speed is unknown, defaulting to 1000 [ 175.678123][ T6606] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 175.678167][ T6606] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 175.678207][ T6606] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 175.805867][ T1010] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 175.965038][ T1010] usb 4-1: Using ep0 maxpacket: 16 [ 175.965908][ T1010] usb 4-1: no configurations [ 175.965925][ T1010] usb 4-1: can't read configurations, error -22 [ 176.018153][ T6606] RDS/IB: syz1: added [ 176.021927][ T6606] smc: adding ib device syz1 with port count 1 [ 176.022541][ T6606] smc: ib device syz1 port 1 has no pnetid [ 176.028709][ T5629] xfrm0 speed is unknown, defaulting to 1000 [ 176.105221][ T1010] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 176.299388][ T1010] usb 4-1: Using ep0 maxpacket: 16 [ 176.304045][ T1010] usb 4-1: no configurations [ 176.304067][ T1010] usb 4-1: can't read configurations, error -22 [ 176.304468][ T1010] usb usb4-port1: attempt power cycle [ 176.306649][ T6606] xfrm0 speed is unknown, defaulting to 1000 [ 176.596666][ T6657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.602101][ T6657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.605094][ T5629] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 176.655142][ T1010] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 176.676391][ T1010] usb 4-1: Using ep0 maxpacket: 16 [ 176.677262][ T1010] usb 4-1: no configurations [ 176.677278][ T1010] usb 4-1: can't read configurations, error -22 [ 176.767184][ T5629] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 176.767236][ T5629] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 176.767264][ T5629] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 176.767319][ T5629] usb 3-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 176.767344][ T5629] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.815078][ T1010] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 176.834185][ T5629] usb 3-1: config 0 descriptor?? [ 176.862417][ T1010] usb 4-1: Using ep0 maxpacket: 16 [ 176.863644][ T1010] usb 4-1: no configurations [ 176.863663][ T1010] usb 4-1: can't read configurations, error -22 [ 176.891944][ T1010] usb usb4-port1: unable to enumerate USB device [ 177.347751][ T5629] uclogic 0003:5543:0004.0002: unknown main item tag 0x2 [ 177.347797][ T5629] uclogic 0003:5543:0004.0002: unknown main item tag 0x4 [ 177.347826][ T5629] uclogic 0003:5543:0004.0002: unknown main item tag 0x5 [ 177.347852][ T5629] uclogic 0003:5543:0004.0002: unknown main item tag 0x7 [ 177.347878][ T5629] uclogic 0003:5543:0004.0002: item fetching failed at offset 18/40 [ 177.356228][ T6661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.380274][ T5629] uclogic 0003:5543:0004.0002: parse failed [ 177.382984][ T5629] uclogic 0003:5543:0004.0002: probe with driver uclogic failed with error -22 [ 177.425042][ T6661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.452096][ T6661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.231'. [ 177.497490][ T6606] xfrm0 speed is unknown, defaulting to 1000 [ 177.835800][ T6606] xfrm0 speed is unknown, defaulting to 1000 [ 178.247690][ T6606] xfrm0 speed is unknown, defaulting to 1000 [ 179.000943][ T6679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.005667][ T6679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.022330][ T5769] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 179.022629][ T5769] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 179.050656][ T5769] usb 1-1: USB disconnect, device number 37 [ 179.208234][ T1010] IPVS: starting estimator thread 0... [ 179.210665][ T6681] IPVS: ip_vs_edit_dest(): server weight less than zero [ 179.294019][ T1010] usb 3-1: USB disconnect, device number 26 [ 179.307319][ T6682] IPVS: using max 7 ests per chain, 16800 per kthread [ 179.451483][ T6689] tipc: Enabling of bearer rejected, failed to enable media [ 179.930685][ T6702] netlink: 'syz.2.245': attribute type 1 has an invalid length. [ 180.131941][ T6714] XFS (nbd2): no-recovery mounts must be read-only. [ 180.149384][ T6706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.149992][ T6706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.387503][ T5769] usb 4-1: new low-speed USB device number 30 using dummy_hcd [ 180.495349][ T822] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 180.538393][ T5769] usb 4-1: config 16 has an invalid descriptor of length 185, skipping remainder of the config [ 180.538455][ T5769] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt [ 180.538479][ T5769] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 180.538504][ T5769] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 180.538518][ T5769] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.602376][ T5769] usbtmc 4-1:16.0: bulk endpoints not found [ 180.674975][ T822] usb 1-1: Using ep0 maxpacket: 32 [ 180.676827][ T822] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 180.676860][ T822] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 180.676875][ T822] usb 1-1: config 0 interface 0 has no altsetting 0 [ 180.676896][ T822] usb 1-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 180.676909][ T822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.682745][ T822] usb 1-1: config 0 descriptor?? [ 180.725050][ T37] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 180.883240][ T37] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 180.883401][ T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.883471][ T37] usb 3-1: Product: syz [ 180.883486][ T37] usb 3-1: Manufacturer: syz [ 180.883499][ T37] usb 3-1: SerialNumber: syz [ 180.929419][ T37] usb 3-1: config 0 descriptor?? [ 180.961069][ T37] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 181.104462][ T5769] usb 4-1: USB disconnect, device number 30 [ 181.353688][ T822] hid-alps 0003:044E:120C.0003: unknown main item tag 0x0 [ 181.353730][ T822] hid-alps 0003:044E:120C.0003: unknown main item tag 0x0 [ 181.353755][ T822] hid-alps 0003:044E:120C.0003: unknown main item tag 0x0 [ 181.353781][ T822] hid-alps 0003:044E:120C.0003: unknown main item tag 0x0 [ 181.353805][ T822] hid-alps 0003:044E:120C.0003: unknown main item tag 0x0 [ 181.353831][ T822] hid-alps 0003:044E:120C.0003: unknown main item tag 0x0 [ 181.478705][ T822] hid-alps 0003:044E:120C.0003: hidraw0: USB HID v0.04 Device [HID 044e:120c] on usb-dummy_hcd.0-1/input0 [ 181.559814][ T5629] usb 1-1: USB disconnect, device number 38 [ 181.667963][ T6724] comedi comedi3: pcl812: I/O base address not correctly aligned [ 181.814956][ T37] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 181.815055][ T37] sq905c 3-1:0.0: probe with driver sq905c failed with error -71 [ 181.841598][ T37] usb 3-1: USB disconnect, device number 27 [ 182.007545][ T6733] fido_id[6733]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 182.353990][ T6744] block nbd0: NBD_DISCONNECT [ 182.354700][ T6744] overlayfs: failed lookup in lower (newroot/50, name='file0', err=-40): overlapping layers [ 182.453549][ T6744] overlayfs: failed lookup in lower (newroot/50, name='file0', err=-40): overlapping layers [ 182.575753][ T6748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.585126][ T6748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.781567][ T1010] hid_parser_main: 41 callbacks suppressed [ 182.781593][ T1010] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 182.817480][ T1010] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 182.926602][ T5769] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 183.024075][ T6756] fido_id[6756]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 183.075022][ T5769] usb 4-1: Using ep0 maxpacket: 16 [ 183.075964][ T5769] usb 4-1: no configurations [ 183.075980][ T5769] usb 4-1: can't read configurations, error -22 [ 183.205534][ T5769] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 183.230002][ T6763] nftables ruleset with unbound set [ 183.271425][ T6763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.262'. [ 183.296096][ T6763] netlink: 372 bytes leftover after parsing attributes in process `syz.2.262'. [ 183.365009][ T5769] usb 4-1: Using ep0 maxpacket: 16 [ 183.365721][ T5769] usb 4-1: no configurations [ 183.365738][ T5769] usb 4-1: can't read configurations, error -22 [ 183.391426][ T5769] usb usb4-port1: attempt power cycle [ 183.535752][ T1010] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 183.696861][ T1010] usb 3-1: Using ep0 maxpacket: 16 [ 183.700415][ T1010] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.705562][ T1010] usb 3-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 183.705590][ T1010] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.705607][ T1010] usb 3-1: Product: syz [ 183.705620][ T1010] usb 3-1: Manufacturer: syz [ 183.705632][ T1010] usb 3-1: SerialNumber: syz [ 183.716058][ T1010] usb 3-1: config 0 descriptor?? [ 183.735533][ T1010] kobil_sct 3-1:0.0: required endpoints missing [ 183.747699][ T5769] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 183.773219][ T5769] usb 4-1: Using ep0 maxpacket: 16 [ 183.780437][ T5769] usb 4-1: no configurations [ 183.780458][ T5769] usb 4-1: can't read configurations, error -22 [ 183.860589][ T6761] syz.0.260 (6761) used greatest stack depth: 16816 bytes left [ 183.920314][ T5769] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 183.934502][ T5629] usb 3-1: USB disconnect, device number 28 [ 183.945640][ T5769] usb 4-1: Using ep0 maxpacket: 16 [ 183.946459][ T5769] usb 4-1: no configurations [ 183.946477][ T5769] usb 4-1: can't read configurations, error -22 [ 183.948381][ T5769] usb usb4-port1: unable to enumerate USB device [ 184.021366][ T6770] netlink: 'syz.0.264': attribute type 11 has an invalid length. [ 184.905021][ T5602] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 184.945331][ T5769] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 185.055463][ T5602] usb 1-1: Using ep0 maxpacket: 8 [ 185.056523][ T6785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.058604][ T6785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.059741][ T5602] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 185.059769][ T5602] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.074474][ T5602] pvrusb2: Hardware description: Terratec Grabster AV400 [ 185.074491][ T5602] pvrusb2: ********** [ 185.074505][ T5602] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 185.074516][ T5602] pvrusb2: Important functionality might not be entirely working. [ 185.074525][ T5602] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 185.074535][ T5602] pvrusb2: ********** [ 185.075856][ T5769] usb 3-1: device descriptor read/64, error -71 [ 185.278385][ T2326] pvrusb2: Invalid write control endpoint [ 185.325144][ T5769] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 185.355950][ T2326] pvrusb2: Invalid write control endpoint [ 185.355966][ T2326] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 185.355975][ T2326] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 185.355984][ T2326] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 185.355994][ T2326] pvrusb2: Device being rendered inoperable [ 185.356074][ T2326] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 185.356124][ T2326] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 185.357323][ T2326] pvrusb2: Attached sub-driver cx25840 [ 185.357337][ T2326] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 185.357347][ T2326] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 185.455105][ T5769] usb 3-1: device descriptor read/64, error -71 [ 185.484133][ T6783] netlink: 'syz.0.270': attribute type 3 has an invalid length. [ 185.484151][ T6783] netlink: 'syz.0.270': attribute type 2 has an invalid length. [ 185.484158][ T6783] netlink: 132 bytes leftover after parsing attributes in process `syz.0.270'. [ 185.511386][ T6783] pvrusb2: Attempted to execute control transfer when device not ok [ 185.512800][ T1010] usb 1-1: USB disconnect, device number 39 [ 185.565562][ T5769] usb usb3-port1: attempt power cycle [ 185.739824][ T6791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.743731][ T6791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.915789][ T5769] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 185.936645][ T5769] usb 3-1: device descriptor read/8, error -71 [ 185.966554][ T38] audit: type=1326 audit(1777852583.472:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6798 comm="syz.3.275" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fba8107cdd9 code=0x0 [ 186.010941][ T6801] netlink: 44 bytes leftover after parsing attributes in process `syz.3.275'. [ 186.010959][ T6801] netlink: 43 bytes leftover after parsing attributes in process `syz.3.275'. [ 186.010969][ T6801] netlink: 'syz.3.275': attribute type 5 has an invalid length. [ 186.010976][ T6801] netlink: 43 bytes leftover after parsing attributes in process `syz.3.275'. [ 186.175157][ T5769] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 186.195918][ T5769] usb 3-1: device descriptor read/8, error -71 [ 186.308450][ T5769] usb usb3-port1: unable to enumerate USB device [ 186.410481][ T6810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.412671][ T6810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.970164][ T6815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.970831][ T6815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.055014][ T5602] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 187.205052][ T5602] usb 4-1: Using ep0 maxpacket: 16 [ 187.207159][ T5602] usb 4-1: config 0 has no interfaces? [ 187.208320][ T5602] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 187.208337][ T5602] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 187.208350][ T5602] usb 4-1: Manufacturer: syz [ 187.211669][ T5602] usb 4-1: config 0 descriptor?? [ 187.463900][ T5602] usb 4-1: USB disconnect, device number 35 [ 187.558410][ T6824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.559089][ T6824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.733122][ T6828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.733770][ T6828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.850877][ T6831] netlink: 44 bytes leftover after parsing attributes in process `syz.2.284'. [ 188.165657][ T6839] Bluetooth: MGMT ver 1.23 [ 188.298662][ T6847] binder: BINDER_SET_CONTEXT_MGR already set [ 188.298679][ T6847] binder: 6840:6847 ioctl 4018620d 200000000100 returned -16 [ 188.337375][ T6842] binder_alloc: binder_alloc_mmap_handler: 6840 200000ffd000-200001000000 already mapped failed -16 [ 188.347043][ T6844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.347651][ T6844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.348108][ T6847] binder: BINDER_SET_CONTEXT_MGR already set [ 188.348118][ T6847] binder: 6840:6847 ioctl 4018620d 200000004a80 returned -16 [ 188.348469][ T6842] binder_alloc: 6840: binder_alloc_buf, no vma [ 188.388812][ T6846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.399138][ T6846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.615202][ T5602] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 188.766569][ T5602] usb 1-1: not running at top speed; connect to a high speed hub [ 188.767848][ T5602] usb 1-1: config 1 interface 0 has no altsetting 0 [ 188.770550][ T5602] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 188.770573][ T5602] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.770586][ T5602] usb 1-1: Product: syz [ 188.770596][ T5602] usb 1-1: Manufacturer: 򡔑 [ 188.770604][ T5602] usb 1-1: SerialNumber: syz [ 189.043170][ T5602] usbhid 1-1:1.0: can't add hid device: -71 [ 189.043307][ T5602] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 189.066627][ T6861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.067293][ T6861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.109203][ T5602] usb 1-1: USB disconnect, device number 40 [ 189.241580][ T6862] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 189.827893][ T1010] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 189.959950][ T6866] xfrm0 speed is unknown, defaulting to 1000 [ 190.012955][ T1010] usb 1-1: Using ep0 maxpacket: 8 [ 190.021062][ T1010] usb 1-1: config 8 has an invalid interface number: 37 but max is 0 [ 190.021092][ T1010] usb 1-1: config 8 has no interface number 0 [ 190.021141][ T1010] usb 1-1: config 8 interface 37 altsetting 255 bulk endpoint 0xB has invalid maxpacket 64 [ 190.021168][ T1010] usb 1-1: config 8 interface 37 altsetting 255 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 190.021192][ T1010] usb 1-1: config 8 interface 37 has no altsetting 0 [ 190.037121][ T6876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.041190][ T6876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.067088][ T1010] usb 1-1: New USB device found, idVendor=55aa, idProduct=a103, bcdDevice=2b.c9 [ 190.067130][ T1010] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.067148][ T1010] usb 1-1: Product: syz [ 190.067162][ T1010] usb 1-1: Manufacturer: syz [ 190.067174][ T1010] usb 1-1: SerialNumber: syz [ 190.154001][ T6870] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 190.370253][ T1010] ums-sddr55 1-1:8.37: USB Mass Storage device detected [ 190.505227][ T1010] usb 1-1: USB disconnect, device number 41 [ 190.515038][ T822] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 190.671295][ T6867] xfrm0 speed is unknown, defaulting to 1000 [ 190.690236][ T822] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 190.690270][ T822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.690292][ T822] usb 4-1: Product: syz [ 190.690306][ T822] usb 4-1: Manufacturer: syz [ 190.690321][ T822] usb 4-1: SerialNumber: syz [ 190.999814][ T6884] 9p: Bad value for 'rfdno' [ 191.020666][ T6884] 9p: Bad value for 'rfdno' [ 191.165248][ T822] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 191.165321][ T822] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 191.400982][ T6895] IPVS: set_ctl: invalid protocol: 59 172.30.0.2:20002 [ 191.676219][ T5629] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 191.844937][ T5629] usb 1-1: Using ep0 maxpacket: 8 [ 191.881468][ T5629] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 191.881502][ T5629] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.881523][ T5629] usb 1-1: Product: syz [ 191.881538][ T5629] usb 1-1: Manufacturer: syz [ 191.881551][ T5629] usb 1-1: SerialNumber: syz [ 191.896465][ T5629] usb 1-1: config 0 descriptor?? [ 191.897340][ T6902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.898320][ T6902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.131798][ T5629] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 192.187122][ T6879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.188284][ T6879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.794151][ T5629] usb write operation failed. (-71) [ 192.812801][ T822] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPIPE [ 192.812862][ T822] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 192.828222][ T5629] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 192.828797][ T5629] dvbdev: DVB: registering new adapter (Terratec H7) [ 192.828844][ T5629] usb 1-1: media controller created [ 192.829298][ T5629] usb read operation failed. (-71) [ 192.829739][ T5629] usb write operation failed. (-71) [ 192.873380][ T5629] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 192.902882][ T5629] usb 1-1: USB disconnect, device number 42 [ 192.917840][ T822] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 192.970266][ T822] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 193.161349][ T6880] syzkaller1: entered promiscuous mode [ 193.161387][ T6880] syzkaller1: entered allmulticast mode [ 194.187720][ T6916] netlink: 9 bytes leftover after parsing attributes in process `syz.1.310'. [ 194.225712][ T6916] netlink: 9 bytes leftover after parsing attributes in process `syz.1.310'. [ 194.337629][ T822] usb 4-1: USB disconnect, device number 36 [ 194.474323][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.474444][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.676199][ T6918] overlayfs: unescaped trailing colons in lowerdir mount option. [ 195.014000][ T6929] autofs4:pid:6929:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(2.1), cmd(0xc0189374) [ 195.014031][ T6929] autofs4:pid:6929:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 195.183927][ T6933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.314'. [ 195.635024][ T5769] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 195.765053][ T5629] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 195.772150][ T6940] fuse: Unknown parameter 'g-|' [ 195.787817][ T5769] usb 4-1: Using ep0 maxpacket: 16 [ 195.790066][ T5769] usb 4-1: config 0 has no interfaces? [ 195.805968][ T5769] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 195.806001][ T5769] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 195.806023][ T5769] usb 4-1: Manufacturer: syz [ 195.840520][ T5769] usb 4-1: config 0 descriptor?? [ 195.928869][ T5629] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 195.928906][ T5629] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 195.928930][ T5629] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 195.928954][ T5629] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 195.931982][ T5629] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 195.932013][ T5629] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.932033][ T5629] usb 1-1: Product: syz [ 195.932048][ T5629] usb 1-1: Manufacturer: syz [ 195.932062][ T5629] usb 1-1: SerialNumber: syz [ 195.953033][ T5629] usb 1-1: config 0 descriptor?? [ 196.086180][ T6946] netlink: 'syz.2.319': attribute type 5 has an invalid length. [ 196.115992][ T1010] usb 4-1: USB disconnect, device number 37 [ 196.194251][ T6938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.247661][ T6938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.418437][ T5629] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 196.516672][ T5769] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 196.665027][ T5769] usb 3-1: Using ep0 maxpacket: 16 [ 196.668682][ T5769] usb 3-1: unable to get BOS descriptor or descriptor too short [ 196.671007][ T5769] usb 3-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 196.671030][ T5769] usb 3-1: config 12 has 0 interfaces, different from the descriptor's value: 1 [ 196.678578][ T5769] usb 3-1: New USB device found, idVendor=0565, idProduct=f302, bcdDevice=5b.db [ 196.678610][ T5769] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.678631][ T5769] usb 3-1: Product: syz [ 196.678647][ T5769] usb 3-1: Manufacturer: syz [ 196.678662][ T5769] usb 3-1: SerialNumber: syz [ 196.753067][ T5769] usb 3-1: rejected 1 configuration due to insufficient available bus power [ 196.753095][ T5769] usb 3-1: no configuration chosen from 1 choice [ 197.187543][ T5602] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 197.984605][ T6983] netlink: 9 bytes leftover after parsing attributes in process `syz.1.327'. [ 198.005551][ T6983] netlink: 9 bytes leftover after parsing attributes in process `syz.1.327'. [ 198.159983][ T6985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.161512][ T6985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.276316][ T5602] usb 4-1: device descriptor read/64, error -71 [ 198.515096][ T5602] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 198.570725][ T5629] usb 1-1: USB disconnect, device number 43 [ 198.667505][ T5602] usb 4-1: config 0 has an invalid descriptor of length 141, skipping remainder of the config [ 198.667535][ T5602] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 198.667575][ T5602] usb 4-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 198.667599][ T5602] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.672587][ T5602] usb 4-1: config 0 descriptor?? [ 198.756364][ T6990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.758406][ T6990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.876028][ T37] usb 4-1: USB disconnect, device number 39 [ 198.975160][ T5629] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 199.126668][ T5629] usb 1-1: Using ep0 maxpacket: 32 [ 199.127501][ T5629] usb 1-1: too many configurations: 164, using maximum allowed: 8 [ 199.128793][ T5629] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 199.129905][ T5629] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 199.131073][ T5629] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 199.132384][ T5629] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 199.133638][ T5629] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 199.136757][ T5629] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 199.164415][ T37] usb 3-1: USB disconnect, device number 33 [ 199.185397][ T5629] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 199.234756][ T5629] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 199.235111][ T5629] usb 1-1: New USB device found, idVendor=0582, idProduct=0009, bcdDevice= 0.00 [ 199.235137][ T5629] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.512561][ T5629] usb 1-1: string descriptor 0 read error: -71 [ 199.520117][ T5629] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 199.520716][ T5629] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 199.526698][ T5629] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 199.527581][ T5629] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 199.533222][ T5629] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 199.788970][ T7001] netlink: 24 bytes leftover after parsing attributes in process `syz.2.334'. [ 200.042915][ T5629] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 200.046995][ T5629] usb 1-1: USB disconnect, device number 44 [ 200.065024][ T5602] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 200.216426][ T5602] usb 4-1: Using ep0 maxpacket: 16 [ 200.219469][ T5602] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 200.219500][ T5602] usb 4-1: config 1 has no interface number 0 [ 200.219536][ T5602] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 200.219551][ T5602] usb 4-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 200.219564][ T5602] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 200.219578][ T5602] usb 4-1: config 1 interface 105 has no altsetting 0 [ 200.221806][ T5602] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 200.221839][ T5602] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 200.221851][ T5602] usb 4-1: Product: syz [ 200.221859][ T5602] usb 4-1: Manufacturer: syz [ 200.221868][ T5602] usb 4-1: SerialNumber: syz [ 200.277953][ T5769] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 200.310213][ T7002] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 200.385968][ T5629] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 200.475062][ T5769] usb 3-1: Using ep0 maxpacket: 16 [ 200.479939][ T5769] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 200.479961][ T5769] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 200.479974][ T5769] usb 3-1: Product: syz [ 200.479982][ T5769] usb 3-1: Manufacturer: syz [ 200.479990][ T5769] usb 3-1: SerialNumber: syz [ 200.535788][ T5629] usb 1-1: Using ep0 maxpacket: 32 [ 200.538620][ T5602] aqc111 4-1:1.105: probe with driver aqc111 failed with error -22 [ 200.559874][ T5629] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 200.559901][ T5629] usb 1-1: config 0 has no interface number 0 [ 200.559950][ T5629] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 200.565903][ T5629] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 200.565931][ T5629] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.565950][ T5629] usb 1-1: Product: syz [ 200.565963][ T5629] usb 1-1: Manufacturer: syz [ 200.565978][ T5629] usb 1-1: SerialNumber: syz [ 200.665903][ T5629] usb 1-1: config 0 descriptor?? [ 200.670634][ T6999] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 200.742073][ T7005] netlink: 256 bytes leftover after parsing attributes in process `syz.2.336'. [ 200.921430][ T7003] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 200.932220][ T6999] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 200.966214][ T5769] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 200.992552][ T5769] usb 3-1: USB disconnect, device number 34 [ 201.139373][ T5602] usb 4-1: USB disconnect, device number 40 [ 201.339215][ T5629] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 201.339554][ T5629] asix 1-1:0.188: probe with driver asix failed with error -61 [ 201.635045][ T37] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 201.673484][ T7018] netlink: 9 bytes leftover after parsing attributes in process `syz.2.340'. [ 201.695307][ T7018] netlink: 9 bytes leftover after parsing attributes in process `syz.2.340'. [ 201.798539][ T37] usb 4-1: Using ep0 maxpacket: 16 [ 201.800907][ T37] usb 4-1: config 0 has no interfaces? [ 201.844236][ T37] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 201.844265][ T37] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 201.844282][ T37] usb 4-1: Manufacturer: syz [ 201.865442][ T37] usb 4-1: config 0 descriptor?? [ 202.078866][ T5769] usb 4-1: USB disconnect, device number 41 [ 202.742312][ T5769] usb 1-1: USB disconnect, device number 45 [ 203.433566][ T7050] netlink: 9 bytes leftover after parsing attributes in process `syz.2.349'. [ 203.456822][ T7050] netlink: 9 bytes leftover after parsing attributes in process `syz.2.349'. [ 203.875102][ T5629] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 204.028151][ T5629] usb 3-1: unable to get BOS descriptor or descriptor too short [ 204.029453][ T5629] usb 3-1: config 1 interface 0 has no altsetting 0 [ 204.032844][ T5629] usb 3-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.40 [ 204.032874][ T5629] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.032894][ T5629] usb 3-1: Product: syz [ 204.032909][ T5629] usb 3-1: Manufacturer: syz [ 204.032924][ T5629] usb 3-1: SerialNumber: syz [ 204.226614][ T37] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 204.300486][ T5629] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input14 [ 204.329550][ T4966] bcm5974 3-1:1.0: could not read from device [ 204.341702][ T5629] usb 3-1: USB disconnect, device number 35 [ 204.355737][ T5602] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 204.395600][ T37] usb 1-1: Using ep0 maxpacket: 16 [ 204.400419][ T37] usb 1-1: config 0 has no interfaces? [ 204.402703][ T37] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 204.402734][ T37] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 204.402752][ T37] usb 1-1: Manufacturer: syz [ 204.441146][ T37] usb 1-1: config 0 descriptor?? [ 204.472748][ T5618] udevd[5618]: Error opening device "/dev/input/event4": No such file or directory [ 204.472807][ T5618] udevd[5618]: Unable to EVIOCGABS device "/dev/input/event4" [ 204.472856][ T5618] udevd[5618]: Unable to EVIOCGABS device "/dev/input/event4" [ 204.472900][ T5618] udevd[5618]: Unable to EVIOCGABS device "/dev/input/event4" [ 204.472947][ T5618] udevd[5618]: Unable to EVIOCGABS device "/dev/input/event4" [ 204.473001][ T5618] udevd[5618]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 204.514018][ T4981] udevd[4981]: worker [5618] terminated by signal 6 (Aborted) [ 204.514069][ T4981] udevd[4981]: worker [5618] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input14/event4' [ 204.565123][ T5602] usb 4-1: Using ep0 maxpacket: 16 [ 204.570139][ T5602] usb 4-1: config 0 has no interfaces? [ 204.571795][ T5602] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 204.571828][ T5602] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 204.571849][ T5602] usb 4-1: Manufacturer: syz [ 204.611279][ T5602] usb 4-1: config 0 descriptor?? [ 204.875170][ T7060] FAULT_INJECTION: forcing a failure. [ 204.875170][ T7060] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.875211][ T7060] CPU: 0 UID: 0 PID: 7060 Comm: syz.3.353 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 204.875240][ T7060] Tainted: [L]=SOFTLOCKUP [ 204.875248][ T7060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 204.875260][ T7060] Call Trace: [ 204.875268][ T7060] [ 204.875277][ T7060] dump_stack_lvl+0xe8/0x150 [ 204.875310][ T7060] should_fail_ex+0x46b/0x600 [ 204.875344][ T7060] _copy_from_user+0x2d/0xb0 [ 204.875375][ T7060] ___sys_sendmsg+0x1c6/0x360 [ 204.875402][ T7060] ? __lock_acquire+0x6b5/0x2d10 [ 204.875437][ T7060] ? __pfx____sys_sendmsg+0x10/0x10 [ 204.875500][ T7060] ? __fget_files+0x2a/0x420 [ 204.875522][ T7060] ? __fget_files+0x3a6/0x420 [ 204.875554][ T7060] __x64_sys_sendmsg+0x1c3/0x2a0 [ 204.875585][ T7060] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 204.875620][ T7060] ? rcu_is_watching+0x15/0xb0 [ 204.875651][ T7060] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.875675][ T7060] do_syscall_64+0x15f/0xf80 [ 204.875707][ T7060] ? trace_irq_disable+0x3b/0x140 [ 204.875734][ T7060] ? clear_bhb_loop+0x40/0x90 [ 204.875761][ T7060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.875781][ T7060] RIP: 0033:0x7fba8107cdd9 [ 204.875801][ T7060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.875819][ T7060] RSP: 002b:00007fba7f2b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 204.875842][ T7060] RAX: ffffffffffffffda RBX: 00007fba812f6090 RCX: 00007fba8107cdd9 [ 204.875857][ T7060] RDX: 0000000004000050 RSI: 0000200000000000 RDI: 0000000000000006 [ 204.875871][ T7060] RBP: 00007fba7f2b5090 R08: 0000000000000000 R09: 0000000000000000 [ 204.875884][ T7060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.875897][ T7060] R13: 00007fba812f6128 R14: 00007fba812f6090 R15: 00007ffd7095c708 [ 204.875930][ T7060] [ 204.957293][ T5629] usb 4-1: USB disconnect, device number 42 [ 205.258394][ T7057] Set syz1 is full, maxelem 6117 reached [ 205.314461][ T1010] usb 1-1: USB disconnect, device number 46 [ 205.447034][ T5769] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 205.595035][ T5769] usb 3-1: Using ep0 maxpacket: 16 [ 205.597559][ T5769] usb 3-1: config 0 has no interfaces? [ 205.600365][ T5769] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 205.600395][ T5769] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 205.600414][ T5769] usb 3-1: Manufacturer: syz [ 205.640844][ T5769] usb 3-1: config 0 descriptor?? [ 205.861365][ T37] usb 3-1: USB disconnect, device number 36 [ 206.205209][ T5629] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 206.366938][ T5629] usb 1-1: Using ep0 maxpacket: 32 [ 206.369386][ T5629] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 206.369416][ T5629] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 206.369440][ T5629] usb 1-1: config 0 interface 0 has no altsetting 0 [ 206.372537][ T5629] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 206.372566][ T5629] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.372587][ T5629] usb 1-1: Product: syz [ 206.372601][ T5629] usb 1-1: Manufacturer: syz [ 206.372616][ T5629] usb 1-1: SerialNumber: syz [ 206.411090][ T5629] usb 1-1: config 0 descriptor?? [ 206.544536][ T7071] capability: warning: `syz.2.358' uses 32-bit capabilities (legacy support in use) [ 206.682766][ T7073] netlink: 9 bytes leftover after parsing attributes in process `syz.2.359'. [ 206.725515][ T7073] netlink: 9 bytes leftover after parsing attributes in process `syz.2.359'. [ 206.839106][ T5629] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 207.062769][ T5629] gs_usb 1-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 207.085503][ T5629] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -22 [ 207.295088][ T5701] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 207.446385][ T5701] usb 4-1: Using ep0 maxpacket: 32 [ 207.458150][ T5701] usb 4-1: unable to get BOS descriptor or descriptor too short [ 207.459742][ T5701] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 207.459770][ T5701] usb 4-1: config 0 has no interface number 0 [ 207.459840][ T5701] usb 4-1: config 0 interface 251 has no altsetting 0 [ 207.488886][ T5701] usb 4-1: New USB device found, idVendor=2304, idProduct=023f, bcdDevice=9e.f2 [ 207.488915][ T5701] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.488933][ T5701] usb 4-1: Product: syz [ 207.488946][ T5701] usb 4-1: Manufacturer: syz [ 207.488959][ T5701] usb 4-1: SerialNumber: syz [ 207.532004][ T5701] usb 4-1: config 0 descriptor?? [ 208.007980][ T5701] usb 4-1: USB disconnect, device number 43 [ 208.386926][ T5629] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 208.436831][ T7094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.437641][ T7094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.556474][ T5629] usb 3-1: Using ep0 maxpacket: 16 [ 208.565796][ T5629] usb 3-1: config 0 has no interfaces? [ 208.572279][ T5629] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 208.572312][ T5629] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 208.572333][ T5629] usb 3-1: Manufacturer: syz [ 208.610612][ T5629] usb 3-1: config 0 descriptor?? [ 208.664165][ T7105] netlink: 9 bytes leftover after parsing attributes in process `syz.1.368'. [ 208.682396][ T7103] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 208.705591][ T7105] netlink: 9 bytes leftover after parsing attributes in process `syz.1.368'. [ 208.794778][ T7108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.795955][ T7108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.822832][ T5769] usb 3-1: USB disconnect, device number 37 [ 208.935016][ T5701] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 208.970474][ T5629] usb 1-1: USB disconnect, device number 47 [ 209.085087][ T5701] usb 4-1: Using ep0 maxpacket: 16 [ 209.087451][ T5701] usb 4-1: config 0 has no interfaces? [ 209.088585][ T5701] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 209.088625][ T5701] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 209.088645][ T5701] usb 4-1: Manufacturer: syz [ 209.093937][ T5701] usb 4-1: config 0 descriptor?? [ 209.399109][ T7114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.399810][ T7114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.745900][ T7103] Set syz1 is full, maxelem 6117 reached [ 209.762199][ T5629] usb 4-1: USB disconnect, device number 44 [ 209.805028][ T5769] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 209.966118][ T5769] usb 3-1: Using ep0 maxpacket: 32 [ 209.974320][ T5769] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 209.974349][ T5769] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.974367][ T5769] usb 3-1: Product: syz [ 209.974380][ T5769] usb 3-1: Manufacturer: syz [ 209.974393][ T5769] usb 3-1: SerialNumber: syz [ 210.003027][ T5769] usb 3-1: config 0 descriptor?? [ 210.053696][ T5769] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 210.485003][ T5719] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 210.617347][ T5602] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 210.635036][ T5719] usb 1-1: Using ep0 maxpacket: 32 [ 210.637811][ T5719] usb 1-1: unable to get BOS descriptor or descriptor too short [ 210.639452][ T5719] usb 1-1: config index 0 descriptor too short (expected 28865, got 105) [ 210.639481][ T5719] usb 1-1: config 200 has too many interfaces: 228, using maximum allowed: 32 [ 210.639502][ T5719] usb 1-1: config 200 has an invalid descriptor of length 163, skipping remainder of the config [ 210.639522][ T5719] usb 1-1: config 200 has 0 interfaces, different from the descriptor's value: 228 [ 210.642640][ T5719] usb 1-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 210.642669][ T5719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.642690][ T5719] usb 1-1: Product: syz [ 210.642704][ T5719] usb 1-1: Manufacturer: syz [ 210.642718][ T5719] usb 1-1: SerialNumber: syz [ 210.765047][ T5602] usb 4-1: Using ep0 maxpacket: 16 [ 210.774505][ T5602] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 210.816916][ T5602] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 210.817009][ T5602] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.817029][ T5602] usb 4-1: Product: syz [ 210.817040][ T5602] usb 4-1: Manufacturer: syz [ 210.817048][ T5602] usb 4-1: SerialNumber: syz [ 210.872535][ T5602] r8152-cfgselector 4-1: Unknown version 0x0000 [ 210.872561][ T5602] r8152-cfgselector 4-1: config 0 descriptor?? [ 210.971985][ T5719] usb 1-1: USB disconnect, device number 48 [ 211.249952][ T7117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.250607][ T7117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.284488][ T5719] r8152-cfgselector 4-1: USB disconnect, device number 45 [ 211.359630][ T5769] gspca_ov534_9: reg_w failed -71 [ 211.535414][ T7134] netlink: 9 bytes leftover after parsing attributes in process `syz.0.377'. [ 211.579377][ T7134] netlink: 9 bytes leftover after parsing attributes in process `syz.0.377'. [ 211.645449][ T5769] gspca_ov534_9: Unknown sensor 0000 [ 211.645546][ T5769] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 211.647172][ T7136] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 211.647202][ T7136] overlayfs: failed to set xattr on upper [ 211.647210][ T7136] overlayfs: ...falling back to redirect_dir=nofollow. [ 211.647219][ T7136] overlayfs: ...falling back to uuid=null. [ 211.647448][ T7136] overlayfs: conflicting lowerdir path [ 211.655969][ T5769] usb 3-1: USB disconnect, device number 38 [ 211.692965][ T7137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.701659][ T7137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.105249][ T37] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 212.135209][ T5719] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 212.205128][ T5701] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 212.255050][ T37] usb 1-1: Using ep0 maxpacket: 16 [ 212.257637][ T37] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.257664][ T37] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 212.260204][ T37] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 212.260235][ T37] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.260256][ T37] usb 1-1: Product: syz [ 212.260270][ T37] usb 1-1: Manufacturer: syz [ 212.260284][ T37] usb 1-1: SerialNumber: syz [ 212.335758][ T5719] usb 4-1: Using ep0 maxpacket: 16 [ 212.345862][ T5719] usb 4-1: config 0 has no interfaces? [ 212.354979][ T5701] usb 3-1: Using ep0 maxpacket: 16 [ 212.361223][ T5719] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 212.361254][ T5719] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 212.361273][ T5719] usb 4-1: Manufacturer: syz [ 212.364163][ T5701] usb 3-1: config 0 has no interfaces? [ 212.367769][ T5701] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 212.367794][ T5701] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 212.367811][ T5701] usb 3-1: Manufacturer: syz [ 212.399114][ T5701] usb 3-1: config 0 descriptor?? [ 212.424025][ T37] usb 1-1: 0:2 : does not exist [ 212.430561][ T5719] usb 4-1: config 0 descriptor?? [ 212.495320][ T7149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.498355][ T7149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.498518][ T37] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 212.583694][ T37] usb 1-1: USB disconnect, device number 49 [ 212.641437][ T5769] usb 4-1: USB disconnect, device number 46 [ 212.672858][ T5621] udevd[5621]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 213.069535][ T7152] hfs: can't find a HFS filesystem on dev nbd0 [ 213.155006][ T7155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.155703][ T7155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.221291][ T7157] netlink: 9 bytes leftover after parsing attributes in process `syz.3.388'. [ 213.255548][ T7157] netlink: 9 bytes leftover after parsing attributes in process `syz.3.388'. [ 213.850574][ T7168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.851157][ T7168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.856208][ T7168] binder: BINDER_SET_CONTEXT_MGR already set [ 213.856221][ T7168] binder: 7167:7168 ioctl 4018620d 2000000000c0 returned -16 [ 213.858648][ T7168] binder_alloc: binder_alloc_mmap_handler: 7167 200000ffd000-200001000000 already mapped failed -16 [ 213.860463][ T7168] binder: BINDER_SET_CONTEXT_MGR already set [ 213.860475][ T7168] binder: 7167:7168 ioctl 4018620d 200000000040 returned -16 [ 213.863507][ T7169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.864343][ T7169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.008456][ T37] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 214.040762][ T7173] Invalid source name [ 214.040779][ T7173] UBIFS error (pid: 7173): cannot open "ubifs", error -22 [ 214.164561][ T7175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.173342][ T7175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.265726][ T37] usb 1-1: Using ep0 maxpacket: 8 [ 214.281782][ T37] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 214.281814][ T37] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.281864][ T37] usb 1-1: Product: syz [ 214.281880][ T37] usb 1-1: Manufacturer: syz [ 214.281894][ T37] usb 1-1: SerialNumber: syz [ 214.323345][ T7180] netlink: 84 bytes leftover after parsing attributes in process `syz.3.393'. [ 214.363302][ T7180] netlink: 'syz.3.393': attribute type 1 has an invalid length. [ 214.363317][ T7180] netlink: 224 bytes leftover after parsing attributes in process `syz.3.393'. [ 214.371225][ T37] usb 1-1: config 0 descriptor?? [ 214.572589][ T7184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.574925][ T7184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.607467][ T37] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 214.877218][ T5769] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 215.052161][ T5629] usb 3-1: USB disconnect, device number 39 [ 215.086146][ T5769] usb 4-1: Using ep0 maxpacket: 16 [ 215.088496][ T5769] usb 4-1: config 0 has no interfaces? [ 215.090180][ T5769] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 215.090216][ T5769] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 215.090229][ T5769] usb 4-1: Manufacturer: syz [ 215.141475][ T5769] usb 4-1: config 0 descriptor?? [ 215.174671][ T37] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 215.175056][ T37] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 215.175107][ T37] usb 1-1: media controller created [ 215.241378][ T37] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 215.303815][ T7160] fuseblk: Bad value for 'rootmode' [ 215.309652][ T7190] fuseblk: Bad value for 'rootmode' [ 215.363514][ T7186] FAULT_INJECTION: forcing a failure. [ 215.363514][ T7186] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.363557][ T7186] CPU: 1 UID: 0 PID: 7186 Comm: syz.3.396 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 215.363586][ T7186] Tainted: [L]=SOFTLOCKUP [ 215.363593][ T7186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 215.363605][ T7186] Call Trace: [ 215.363613][ T7186] [ 215.363622][ T7186] dump_stack_lvl+0xe8/0x150 [ 215.363655][ T7186] should_fail_ex+0x46b/0x600 [ 215.363688][ T7186] _copy_from_iter+0x1d3/0x1670 [ 215.363723][ T7186] ? trace_kmem_cache_alloc+0x29/0xe0 [ 215.363747][ T7186] ? __alloc_skb+0x27d/0x7d0 [ 215.363771][ T7186] ? __pfx__copy_from_iter+0x10/0x10 [ 215.363796][ T7186] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 215.363821][ T7186] ? __alloc_skb+0x27d/0x7d0 [ 215.363849][ T7186] ? netlink_sendmsg+0x650/0xb40 [ 215.363874][ T7186] ? skb_put+0x11b/0x210 [ 215.363901][ T7186] netlink_sendmsg+0x6c0/0xb40 [ 215.363937][ T7186] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.363965][ T7186] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 215.364000][ T7186] ? aa_sock_msg_perm+0x122/0x200 [ 215.364028][ T7186] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.364061][ T7186] sock_sendmsg_nosec+0x112/0x150 [ 215.364096][ T7186] ____sys_sendmsg+0x55c/0x870 [ 215.364129][ T7186] ? __pfx_____sys_sendmsg+0x10/0x10 [ 215.364166][ T7186] ? import_iovec+0x73/0xa0 [ 215.364197][ T7186] ___sys_sendmsg+0x2a5/0x360 [ 215.364222][ T7186] ? __lock_acquire+0x6b5/0x2d10 [ 215.364253][ T7186] ? __pfx____sys_sendmsg+0x10/0x10 [ 215.364310][ T7186] ? __fget_files+0x2a/0x420 [ 215.364330][ T7186] ? __fget_files+0x3a6/0x420 [ 215.364360][ T7186] __x64_sys_sendmsg+0x1c3/0x2a0 [ 215.364390][ T7186] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 215.364427][ T7186] ? __pfx_ksys_write+0x10/0x10 [ 215.364462][ T7186] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.364486][ T7186] do_syscall_64+0x15f/0xf80 [ 215.364513][ T7186] ? trace_irq_disable+0x3b/0x140 [ 215.364538][ T7186] ? clear_bhb_loop+0x40/0x90 [ 215.364562][ T7186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.364582][ T7186] RIP: 0033:0x7fba8107cdd9 [ 215.364603][ T7186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.364620][ T7186] RSP: 002b:00007fba7f2d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 215.364644][ T7186] RAX: ffffffffffffffda RBX: 00007fba812f5fa0 RCX: 00007fba8107cdd9 [ 215.364659][ T7186] RDX: 0000000004000050 RSI: 0000200000000000 RDI: 0000000000000006 [ 215.364672][ T7186] RBP: 00007fba7f2d6090 R08: 0000000000000000 R09: 0000000000000000 [ 215.364684][ T7186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.364696][ T7186] R13: 00007fba812f6038 R14: 00007fba812f5fa0 R15: 00007ffd7095c708 [ 215.364726][ T7186] [ 215.441780][ T7193] netlink: 9 bytes leftover after parsing attributes in process `syz.1.398'. [ 215.449489][ T5701] usb 4-1: USB disconnect, device number 47 [ 215.532048][ T5769] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 215.804796][ T37] i2c i2c-1: Added multiplexed i2c bus 2 [ 215.804823][ T37] rtl2830 1-0010: Realtek RTL2830 successfully attached [ 215.826366][ T37] usb 1-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2830 (DVB-T))... [ 215.845788][ T37] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2830 (DVB-T)' registered. [ 216.855657][ T37] DVB: Unable to find symbol mxl5005s_attach() [ 229.411797][ T60] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 229.465598][ T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 229.467126][ T60] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 229.482096][ T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 229.484366][ T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 229.721363][ T5616] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 229.722665][ T5616] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 229.723104][ T5616] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 229.725932][ T5616] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 229.762389][ T5616] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 230.878848][ T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 230.921087][ T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 230.982729][ T7206] xfrm0 speed is unknown, defaulting to 1000 [ 231.068659][ T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 231.072378][ T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 231.074341][ T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 231.666334][ T1010] usb 2-1: USB disconnect, device number 6 [ 231.916700][ T5616] Bluetooth: hci4: command tx timeout [ 232.145283][ T60] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 232.201450][ T60] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 232.226422][ T60] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 232.227918][ T60] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 232.228944][ T60] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 233.056274][ T7233] xfrm0 speed is unknown, defaulting to 1000 [ 233.300518][ T60] Bluetooth: hci5: command tx timeout [ 234.017379][ T60] Bluetooth: hci4: command tx timeout [ 234.283519][ T7206] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.283961][ T7206] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.284706][ T7206] bridge_slave_0: entered allmulticast mode [ 234.289425][ T7206] bridge_slave_0: entered promiscuous mode [ 234.327437][ T7229] xfrm0 speed is unknown, defaulting to 1000 [ 234.368391][ T7206] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.369328][ T7206] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.386442][ T7206] bridge_slave_1: entered allmulticast mode [ 234.401303][ T7206] bridge_slave_1: entered promiscuous mode [ 234.437748][ T60] Bluetooth: hci6: command tx timeout [ 234.655165][ T7206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.688930][ T7206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.778460][ T7206] team0: Port device team_slave_0 added [ 234.816474][ T7206] team0: Port device team_slave_1 added [ 235.389656][ T60] Bluetooth: hci5: command tx timeout [ 236.115787][ T60] Bluetooth: hci4: command tx timeout [ 236.519064][ T60] Bluetooth: hci6: command tx timeout [ 237.486451][ T60] Bluetooth: hci5: command tx timeout [ 238.211980][ T60] Bluetooth: hci4: command tx timeout [ 238.614694][ T60] Bluetooth: hci6: command tx timeout [ 239.581272][ T60] Bluetooth: hci5: command tx timeout [ 240.708461][ T60] Bluetooth: hci6: command tx timeout [ 240.836691][ T5616] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 240.848491][ T5616] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 240.912996][ T5616] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 240.918618][ T5616] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 240.919489][ T5616] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 243.042572][ T60] Bluetooth: hci7: command tx timeout [ 245.132410][ T60] Bluetooth: hci7: command tx timeout [ 247.221405][ T60] Bluetooth: hci7: command tx timeout [ 249.309746][ T60] Bluetooth: hci7: command tx timeout [ 256.373952][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.374020][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 290.354854][ T5616] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 290.395285][ T5616] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 290.396943][ T5616] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 290.398585][ T5616] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 290.428748][ T5616] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 291.373754][ T5616] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 291.425098][ T5616] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 291.426958][ T5616] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 291.429327][ T5616] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 291.456901][ T5616] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 292.370633][ T60] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 292.409872][ T60] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 292.412894][ T60] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 292.414428][ T60] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 292.415328][ T60] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 292.560022][ T5616] Bluetooth: hci8: command tx timeout [ 293.600278][ T5616] Bluetooth: hci9: command tx timeout [ 294.560355][ T5616] Bluetooth: hci10: command tx timeout [ 294.640360][ T5616] Bluetooth: hci8: command tx timeout [ 295.680559][ T5616] Bluetooth: hci9: command tx timeout [ 296.640641][ T5616] Bluetooth: hci10: command tx timeout [ 296.720767][ T60] Bluetooth: hci8: command tx timeout [ 297.760968][ T5616] Bluetooth: hci9: command tx timeout [ 298.720975][ T5616] Bluetooth: hci10: command tx timeout [ 298.801121][ T5616] Bluetooth: hci8: command tx timeout [ 299.841192][ T5616] Bluetooth: hci9: command tx timeout [ 300.801194][ T5616] Bluetooth: hci10: command tx timeout [ 301.406388][ T60] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 301.481121][ T60] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 301.491551][ T60] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 301.494259][ T60] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 301.509028][ T60] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 303.601561][ T60] Bluetooth: hci11: command tx timeout [ 305.681810][ T60] Bluetooth: hci11: command tx timeout [ 307.761915][ T60] Bluetooth: hci11: command tx timeout [ 309.842076][ T60] Bluetooth: hci11: command tx timeout [ 317.849194][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.849313][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.912533][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 320.912555][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7160 [ 320.912583][ C0] rcu: (detected by 0, t=10502 jiffies, g=29589, q=11006 ncpus=2) [ 320.912595][ C0] task:syz.0.387 state:R running task stack:26872 pid:7160 tgid:7158 ppid:5615 task_flags:0x40054c flags:0x00080001 [ 320.912629][ C0] Call Trace: [ 320.912637][ C0] [ 320.912643][ C0] sched_show_task+0x4aa/0x5f0 [ 320.912665][ C0] ? __pfx_sched_show_task+0x10/0x10 [ 320.912677][ C0] ? rcu_dump_cpu_stacks+0x79/0x4e0 [ 320.912694][ C0] ? wq_watchdog_touch+0xf9/0x160 [ 320.912709][ C0] print_other_cpu_stall+0xfca/0x1380 [ 320.912729][ C0] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 320.912744][ C0] ? __pfx_css_rstat_updated+0x10/0x10 [ 320.912767][ C0] rcu_sched_clock_irq+0x939/0x1050 [ 320.912784][ C0] update_process_times+0x234/0x2d0 [ 320.912801][ C0] tick_nohz_handler+0x42b/0x770 [ 320.912821][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 320.912839][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 320.912854][ C0] __hrtimer_run_queues+0x3bc/0xb10 [ 320.912876][ C0] hrtimer_interrupt+0x455/0x950 [ 320.912901][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 320.912918][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 320.912934][ C0] [ 320.912937][ C0] [ 320.912942][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 320.912955][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 320.912971][ C0] Code: f7 e8 2d 75 6b f6 f7 c3 00 02 00 00 74 05 e8 90 2b 97 f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 f4 04 5e f6 65 8b 05 9d e2 5e 07 85 c0 74 18 5b 41 5e e9 01 3d [ 320.912981][ C0] RSP: 0018:ffffc9000d6c7828 EFLAGS: 00000206 [ 320.912991][ C0] RAX: 0000000000000006 RBX: 0000000000000246 RCX: 0000000080000001 [ 320.912999][ C0] RDX: 0000000000000006 RSI: ffffffff8d76ae19 RDI: 0000000000000001 [ 320.913006][ C0] RBP: ffffc9000d6c7940 R08: ffffffff8fac8af7 R09: 1ffffffff1f5915e [ 320.913014][ C0] R10: dffffc0000000000 R11: fffffbfff1f5915f R12: dffffc0000000000 [ 320.913022][ C0] R13: 1ffff92001ad8f10 R14: ffffffff8e9e1460 R15: ffffffff8e9e1460 [ 320.913039][ C0] rt_mutex_slowunlock+0x4a7/0x8b0 [ 320.913052][ C0] ? reacquire_held_locks+0x104/0x190 [ 320.913064][ C0] ? rt_spin_lock+0x1e0/0x400 [ 320.913077][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 320.913090][ C0] ? rt_spin_unlock+0x14f/0x200 [ 320.913103][ C0] ? rt_spin_unlock+0x160/0x200 [ 320.913116][ C0] vga_arb_release+0x27c/0x5c0 [ 320.913133][ C0] ? __pfx_vga_arb_release+0x10/0x10 [ 320.913146][ C0] __fput+0x461/0xa70 [ 320.913164][ C0] task_work_run+0x1d9/0x270 [ 320.913177][ C0] ? __pfx_task_work_run+0x10/0x10 [ 320.913188][ C0] ? rt_spin_unlock+0x160/0x200 [ 320.913203][ C0] do_exit+0x70f/0x22c0 [ 320.913220][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 320.913236][ C0] ? __pfx_do_exit+0x10/0x10 [ 320.913250][ C0] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 320.913262][ C0] ? reacquire_held_locks+0x104/0x190 [ 320.913273][ C0] ? rt_spin_lock+0x1e0/0x400 [ 320.913290][ C0] do_group_exit+0x21b/0x2d0 [ 320.913305][ C0] ? rt_spin_unlock+0x160/0x200 [ 320.913318][ C0] get_signal+0x1284/0x1330 [ 320.913341][ C0] arch_do_signal_or_restart+0xbc/0x830 [ 320.913355][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 320.913366][ C0] ? do_sys_openat2+0x14c/0x200 [ 320.913385][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.913397][ C0] exit_to_user_mode_loop+0x86/0x480 [ 320.913420][ C0] ? rcu_is_watching+0x15/0xb0 [ 320.913431][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.913443][ C0] do_syscall_64+0x33e/0xf80 [ 320.913457][ C0] ? trace_irq_disable+0x3b/0x140 [ 320.913472][ C0] ? clear_bhb_loop+0x40/0x90 [ 320.913485][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.913496][ C0] RIP: 0033:0x7fe7d5c2cdd9 [ 320.913507][ C0] Code: Unable to access opcode bytes at 0x7fe7d5c2cdaf. [ 320.913513][ C0] RSP: 002b:00007fe7d3e65028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 320.913524][ C0] RAX: fffffffffffffffa RBX: 00007fe7d5ea6090 RCX: 00007fe7d5c2cdd9 [ 320.913531][ C0] RDX: 0000000000000145 RSI: 0000000000105040 RDI: 0000200000000380 [ 320.913539][ C0] RBP: 00007fe7d5cc2d69 R08: 0000000000000000 R09: 0000000000000000 [ 320.913546][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 320.913552][ C0] R13: 00007fe7d5ea6128 R14: 00007fe7d5ea6090 R15: 00007ffefcb9ba88 [ 320.913568][ C0] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 320.913573][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10450 jiffies! g29589 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 320.913585][ C0] rcu: Possible timer handling issue on cpu=0 timer-softirq=13667 [ 320.913592][ C0] rcu: rcu_preempt kthread starved for 10451 jiffies! g29589 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 320.913603][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 320.913609][ C0] rcu: RCU grace-period kthread stack dump: [ 320.913613][ C0] task:rcu_preempt state:I stack:27736 pid:18 tgid:18 ppid:2 task_flags:0x208040 flags:0x00080000 [ 320.913642][ C0] Call Trace: [ 320.913645][ C0] [ 320.913651][ C0] __schedule+0x169e/0x54f0 [ 320.913674][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 320.913691][ C0] ? __pfx___schedule+0x10/0x10 [ 320.913708][ C0] ? schedule+0x90/0x360 [ 320.913722][ C0] schedule+0x164/0x360 [ 320.913735][ C0] schedule_timeout+0x158/0x2c0 [ 320.913750][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 320.913763][ C0] ? __pfx_process_timeout+0x10/0x10 [ 320.913778][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 320.913792][ C0] ? prepare_to_swait_event+0x340/0x370 [ 320.913809][ C0] rcu_gp_fqs_loop+0x312/0x11b0 [ 320.913825][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 320.913840][ C0] ? rcu_gp_init+0x136b/0x1610 [ 320.913856][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 320.913871][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 320.913885][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 320.913901][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 320.913917][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 320.913932][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 320.913945][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 320.913960][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 320.913974][ C0] ? __kthread_parkme+0x19c/0x1f0 [ 320.913990][ C0] kthread+0x388/0x470 [ 320.914005][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 320.914018][ C0] ? __pfx_kthread+0x10/0x10 [ 320.914034][ C0] ret_from_fork+0x514/0xb70 [ 320.914049][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 320.914061][ C0] ? __switch_to+0xc79/0x1410 [ 320.914074][ C0] ? __pfx_kthread+0x10/0x10 [ 320.914089][ C0] ret_from_fork_asm+0x1a/0x30 [ 320.914111][ C0] [ 320.914115][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 320.914125][ C0] CPU: 0 UID: 0 PID: 7160 Comm: syz.0.387 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 320.914140][ C0] Tainted: [L]=SOFTLOCKUP [ 320.914144][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 320.914150][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 320.914164][ C0] Code: f7 e8 2d 75 6b f6 f7 c3 00 02 00 00 74 05 e8 90 2b 97 f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 f4 04 5e f6 65 8b 05 9d e2 5e 07 85 c0 74 18 5b 41 5e e9 01 3d [ 320.914174][ C0] RSP: 0018:ffffc9000d6c7828 EFLAGS: 00000206 [ 320.914182][ C0] RAX: 0000000000000006 RBX: 0000000000000246 RCX: 0000000080000001 [ 320.914189][ C0] RDX: 0000000000000006 RSI: ffffffff8d76ae19 RDI: 0000000000000001 [ 320.914195][ C0] RBP: ffffc9000d6c7940 R08: ffffffff8fac8af7 R09: 1ffffffff1f5915e [ 320.914203][ C0] R10: dffffc0000000000 R11: fffffbfff1f5915f R12: dffffc0000000000 [ 320.914210][ C0] R13: 1ffff92001ad8f10 R14: ffffffff8e9e1460 R15: ffffffff8e9e1460 [ 320.914218][ C0] FS: 0000000000000000(0000) GS:ffff888125cd3000(0000) knlGS:0000000000000000 [ 320.914227][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 320.914234][ C0] CR2: 00007f9d75645f40 CR3: 00000000799f6000 CR4: 00000000003526f0 [ 320.914246][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 320.914252][ C0] DR3: 0000000000000000 DR6: 00000000ffff4ff0 DR7: 0000000000000400 [ 320.914259][ C0] Call Trace: [ 320.914263][ C0] [ 320.914267][ C0] rt_mutex_slowunlock+0x4a7/0x8b0 [ 320.914280][ C0] ? reacquire_held_locks+0x104/0x190 [ 320.914291][ C0] ? rt_spin_lock+0x1e0/0x400 [ 320.914303][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 320.914316][ C0] ? rt_spin_unlock+0x14f/0x200 [ 320.914329][ C0] ? rt_spin_unlock+0x160/0x200 [ 320.914342][ C0] vga_arb_release+0x27c/0x5c0 [ 320.914356][ C0] ? __pfx_vga_arb_release+0x10/0x10 [ 320.914369][ C0] __fput+0x461/0xa70 [ 320.914385][ C0] task_work_run+0x1d9/0x270 [ 320.914397][ C0] ? __pfx_task_work_run+0x10/0x10 [ 320.914408][ C0] ? rt_spin_unlock+0x160/0x200 [ 320.914428][ C0] do_exit+0x70f/0x22c0 [ 320.914443][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 320.914459][ C0] ? __pfx_do_exit+0x10/0x10 [ 320.914472][ C0] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 320.914484][ C0] ? reacquire_held_locks+0x104/0x190 [ 320.914494][ C0] ? rt_spin_lock+0x1e0/0x400 [ 320.914510][ C0] do_group_exit+0x21b/0x2d0 [ 320.914525][ C0] ? rt_spin_unlock+0x160/0x200 [ 320.914538][ C0] get_signal+0x1284/0x1330 [ 320.914558][ C0] arch_do_signal_or_restart+0xbc/0x830 [ 320.914572][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 320.914583][ C0] ? do_sys_openat2+0x14c/0x200 [ 320.914600][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.914612][ C0] exit_to_user_mode_loop+0x86/0x480 [ 320.914625][ C0] ? rcu_is_watching+0x15/0xb0 [ 320.914637][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.914648][ C0] do_syscall_64+0x33e/0xf80 [ 320.914661][ C0] ? trace_irq_disable+0x3b/0x140 [ 320.914674][ C0] ? clear_bhb_loop+0x40/0x90 [ 320.914687][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.914698][ C0] RIP: 0033:0x7fe7d5c2cdd9 [ 320.914707][ C0] Code: Unable to access opcode bytes at 0x7fe7d5c2cdaf. [ 320.914713][ C0] RSP: 002b:00007fe7d3e65028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 320.914722][ C0] RAX: fffffffffffffffa RBX: 00007fe7d5ea6090 RCX: 00007fe7d5c2cdd9 [ 320.914730][ C0] RDX: 0000000000000145 RSI: 0000000000105040 RDI: 0000200000000380 [ 320.914737][ C0] RBP: 00007fe7d5cc2d69 R08: 0000000000000000 R09: 0000000000000000 [ 320.914743][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 320.914749][ C0] R13: 00007fe7d5ea6128 R14: 00007fe7d5ea6090 R15: 00007ffefcb9ba88 [ 320.914764][ C0] [ 350.434987][ T5616] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 350.995309][ T5616] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 351.014708][ T5616] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 351.029073][ T5616] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 351.030157][ T5616] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 353.283174][ T60] Bluetooth: hci12: command tx timeout [ 355.363231][ T5613] Bluetooth: hci12: command tx timeout [ 355.775782][ T5613] Bluetooth: hci6: command 0x0406 tx timeout [ 355.775945][ T5613] Bluetooth: hci4: command 0x0406 tx timeout [ 355.775972][ T5613] Bluetooth: hci5: command 0x0406 tx timeout [ 357.443126][ T5620] Bluetooth: hci12: command tx timeout [ 359.523207][ T5620] Bluetooth: hci12: command tx timeout