last executing test programs: 7.899579385s ago: executing program 3 (id=814): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xa, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x5, "d58838"}]}}}}}}, 0x4a) 7.777908582s ago: executing program 3 (id=815): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000080)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x16, {0x2, 0x4e21, @private}, 'syz_tun\x00'}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000013c0)={0x0, 0x0, 0x0, {0xb, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) r2 = fsopen(&(0x7f0000000380)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000040)={0x20, 0xc, 0x3d, {0x3d, 0x1, "a6a231803d6094a91c9c68db2d1897ba2bbe8fd3d52c7547ee1b3d96f3f617cfb3674dbde2aa3af11ae9f60a88caf1788ad0656f1c76e4a4288d80"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f00000001c0)={0x0, 0x22, 0x6, {[@main=@item_012={0x2, 0x0, 0xb, "2006"}, @main=@item_012={0x2, 0x0, 0xf, "cb35"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x4, 0x1, {0x22, 0x5c5}}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="200ece00000076056a97705eae9260bbf6ec57eded7f52bfa03c0dd55dc3f55b47fac898ea26fcb2d8407d773ff15dc637856ba2f3a836c7aa955f2bbfb3bb610aebda1530c00876c80700325b5fe2f9ba50ef63373ff5760ed723fc47fba44406aded03795b725e2e8e1033beaf26fb9467a63dfeefe27048eabf0a919f3932a379d94adbb901afa4ddc1e1dac718dc4481456153d1dfce334acdcb0cf25e7bfacbbce8f4a10874fbc973db226359842c67887b12025c10ba2e2bf0043e79aa27486146879acb7dfa596aafd6ea7fbf53ee9710"], &(0x7f0000000280)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000340)={0x20, 0x1, 0x33, "cd8c9a55fefb186ff582e5356f127dea4d5dd6e3603a59abd1655c5165a024d6724f20f2dab44e959962743cd2870eb081fde6"}, &(0x7f0000000380)={0x20, 0x3, 0x1, 0xb}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 7.583363055s ago: executing program 1 (id=818): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) r1 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f0000000140)=@qipcrtr, 0x80, 0x0}, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000080)={0xf030000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90f, 0x8000, '\x00', @p_u8=0x0}}) sendmsg$kcm(r1, &(0x7f0000001540)={&(0x7f0000000000)=@qipcrtr={0x2a, 0xffffffff, 0xffff0002}, 0x80, 0x0}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000d40)={0x34, &(0x7f0000000ac0)={0x40, 0x2e, 0x2, "41df"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000200)={0x14, &(0x7f0000000080)={0x60, 0x5, 0x34, {0x34, 0xe, "6ff8f3f4b850a2e5356053794d4852ed9296f4b8c18b3e13473752a57e98cf589eee33b67c5ffb1ce6914d4707c2fa6d0595"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2801}}}, &(0x7f00000003c0)={0x2c, &(0x7f0000000240)={0x20, 0x3, 0x75, "07c90924f8212251710940363c4dbe3896b4fed6ea6f60c7128bd90638ab01e7b92e2f41383eeca6386004d0acf32fe4ba26b1489fa1989d6aecab45842da3778ef9de243a9e8ceb8aaf5ffecc7ee2d7620f09d5bebf10b59062a63893bb065afa00e5f40e1ecce247b922d3f3bf9a5cb801eb9157"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000340)={0xc0, 0x5, 0x2, "c244"}, &(0x7f0000000380)={0x40, 0x5, 0x1, "d5"}}) syz_usb_control_io(r0, 0x0, 0x0) 5.422809899s ago: executing program 0 (id=822): sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa000905"], 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x100) 5.401687892s ago: executing program 1 (id=823): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xa, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x5, "d58838"}]}}}}}}, 0x4a) 5.315109789s ago: executing program 1 (id=824): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x8, 0x12, r0, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x8, 0x12, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) ftruncate(r0, 0x800) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) ioctl$KVM_GET_XSAVE2(r0, 0x9000aecf, &(0x7f0000ffb000/0x3000)=nil) 5.23520324s ago: executing program 1 (id=825): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r2, &(0x7f0000006800)="10", 0x1) 4.674069473s ago: executing program 3 (id=826): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000080)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x16, {0x2, 0x4e21, @private}, 'syz_tun\x00'}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000013c0)={0x0, 0x0, 0x0, {0xb, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) r3 = fsopen(&(0x7f0000000380)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) mq_open(&(0x7f0000000240)='/dev/video#\x00', 0x40, 0x80, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000040)={0x20, 0xc, 0x3d, {0x3d, 0x1, "a6a231803d6094a91c9c68db2d1897ba2bbe8fd3d52c7547ee1b3d96f3f617cfb3674dbde2aa3af11ae9f60a88caf1788ad0656f1c76e4a4288d80"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f00000001c0)={0x0, 0x22, 0x6, {[@main=@item_012={0x2, 0x0, 0xb, "2006"}, @main=@item_012={0x2, 0x0, 0xf, "cb35"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x4, 0x1, {0x22, 0x5c5}}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="200ece00000076056a97705eae9260bbf6ec57eded7f52bfa03c0dd55dc3f55b47fac898ea26fcb2d8407d773ff15dc637856ba2f3a836c7aa955f2bbfb3bb610aebda1530c00876c80700325b5fe2f9ba50ef63373ff5760ed723fc47fba44406aded03795b725e2e8e1033beaf26fb9467a63dfeefe27048eabf0a919f3932a379d94adbb901afa4ddc1e1dac718dc4481456153d1dfce334acdcb0cf25e7bfacbbce8f4a10874fbc973db226359842c67887b12025c10ba2e2bf0043e79aa27486146879acb7dfa596aafd6ea7fbf53ee9710"], &(0x7f0000000280)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000340)={0x20, 0x1, 0x33, "cd8c9a55fefb186ff582e5356f127dea4d5dd6e3603a59abd1655c5165a024d6724f20f2dab44e959962743cd2870eb081fde6"}, &(0x7f0000000380)={0x20, 0x3, 0x1, 0xb}}) socket$inet_sctp(0x2, 0x5, 0x84) syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) 4.11617169s ago: executing program 0 (id=827): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/xfrm_stat\x00') read$FUSE(r0, &(0x7f00000095c0)={0x2020}, 0x2020) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r1, 0x4b49, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000000)={0x0, 0x9, 0x0, 0x0, 0x0, 0x8000}) bind$bt_hci(r2, &(0x7f0000000540)={0x1f, 0x0, 0x1}, 0x6) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e010203010902"], 0x0) openat$sw_sync_info(0xffffff9c, &(0x7f0000000000), 0x8000, 0x0) 3.591083604s ago: executing program 1 (id=828): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open(0x0, 0x400, 0x43) socket$rds(0x15, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000009b80)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x14) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) (fail_nth: 3) 2.911316467s ago: executing program 1 (id=829): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b091c00000000000109022d0001000060000904008002030000000921080400012205000905810320000908070905020340"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(cbc-camellia-asm,sha224-arm64-neon)\x00'}, 0x58) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000140)="fe21") 2.771939145s ago: executing program 0 (id=831): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f00000002c0)=0x1000ae6, 0x4) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0]) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket(0x1e, 0x4, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f00000001c0)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000963000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000240)=0x122c01, 0x4) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000002000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000340)=0x8200, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'}) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000280)=0x20, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0xc, r4, 0x400044}, 0xfffffffffffffe3a) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x0, r4, 0x28, r2}, 0x10) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) 2.427228501s ago: executing program 0 (id=832): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) r1 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f0000000140)=@qipcrtr, 0x80, 0x0}, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000080)={0xf030000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90f, 0x8000, '\x00', @p_u8=0x0}}) sendmsg$kcm(r1, &(0x7f0000001540)={&(0x7f0000000000)=@qipcrtr={0x2a, 0xffffffff, 0xffff0002}, 0x80, 0x0}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000d40)={0x34, &(0x7f0000000ac0)={0x40, 0x2e, 0x2, "41df"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000200)={0x14, &(0x7f0000000080)={0x60, 0x5, 0x34, {0x34, 0xe, "6ff8f3f4b850a2e5356053794d4852ed9296f4b8c18b3e13473752a57e98cf589eee33b67c5ffb1ce6914d4707c2fa6d0595"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2801}}}, &(0x7f00000003c0)={0x2c, &(0x7f0000000240)={0x20, 0x3, 0x75, "07c90924f8212251710940363c4dbe3896b4fed6ea6f60c7128bd90638ab01e7b92e2f41383eeca6386004d0acf32fe4ba26b1489fa1989d6aecab45842da3778ef9de243a9e8ceb8aaf5ffecc7ee2d7620f09d5bebf10b59062a63893bb065afa00e5f40e1ecce247b922d3f3bf9a5cb801eb9157"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000340)={0xc0, 0x5, 0x2, "c244"}, &(0x7f0000000380)={0x40, 0x5, 0x1, "d5"}}) syz_usb_control_io(r0, 0x0, 0x0) 1.579137697s ago: executing program 3 (id=835): sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) syz_open_dev$sndpcmp(0x0, 0x3, 0x100) 1.498184315s ago: executing program 2 (id=837): r0 = userfaultfd(0x801) (async) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) setresuid(0xee00, 0xee00, r1) (async) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x400}) syz_open_dev$video4linux(&(0x7f0000000000), 0x9bf9, 0x80) (async) r2 = socket(0x1e, 0x1, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) (async) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f00000003c0)=@ethtool_channels={0x48, 0x0, 0x4, 0x0, 0x0, 0x2, 0x1, 0x10}}) r4 = socket$kcm(0x10, 0x2, 0x4) close(r4) (async) socket$kcm(0x10, 0x400000002, 0x0) (async) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000740)="5c00000013006bcc9e3be35c6e17aa33074b876c1d0000007ea60864160af36514000cc0080019000900000006001cc00200bc24eab5008000001e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) close(r2) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) write$binfmt_misc(r2, &(0x7f0000000340), 0x2000011a) r5 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x220040, 0x23, 0x11}, 0x18) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000540)={r5, 0xcd8c0, {0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x12, 0x5, 0x0, "b29a6a81aa1c1060900733c4b7837445bae6f774c6786c364a18e6191a535bdb12a84282581f4acbafe78d46d83107d09583ceac72fd4672dc0de89453c286fe", "32cf2a978d06cb317f34009776a5957f1115dab0f3d1622985881ad19c53e9c10c80c44a9af1e7a11527d3359c62e940937e0fa258797ca78f96e1865d25053e", "dc58fb5626e828cb6bb795158beea454eeb92615184fd2b83ecd4dd89f29564b", [0x0, 0x4]}}) (async) ioctl$UFFDIO_CONTINUE(r0, 0xc028aa05, &(0x7f0000000380)={{&(0x7f0000032000/0x4000)=nil, 0x4000}}) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r6) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) write$binfmt_elf32(r7, &(0x7f0000000e00)=ANY=[@ANYBLOB="000200"], 0x58) (async) close(r7) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES64=r7, @ANYRES64=r7, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030001000000050003000000000005000300000000000500030080ff000005000300800000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$NLBL_MGMT_C_REMOVE(r6, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r8, @ANYRESDEC=r5], 0x64}, 0x1, 0x0, 0x0, 0x8888}, 0x2400c053) 1.185505284s ago: executing program 2 (id=838): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x80) pread64(r0, &(0x7f0000000100)=""/28, 0x1c, 0x5) (fail_nth: 2) 1.176880349s ago: executing program 2 (id=839): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, 0x3}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{0xeeee8000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0xd7, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x8080000, 0xdddd1000, 0x9, 0x1, 0x2, 0x0, 0x4, 0x1, 0x81, 0x2, 0xc4, 0x5}, {0x50000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xe, 0x6, 0x3, 0x8, 0x1}, {0x10000, 0x4000, 0x9, 0x1, 0x3, 0x9, 0xd, 0x6, 0x5, 0x5, 0x2e, 0x4b}, {0x80a0000, 0x0, 0xb, 0x0, 0x3, 0x1, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x54000, 0x7000, 0xf, 0xff, 0x3, 0xff, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0xc000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x10, 0x54, 0x1, 0xff, 0x7}, {0xeeef0000, 0x5}, {0x4, 0x9}, 0x40010000, 0x0, 0x54000, 0x300, 0x5, 0xf000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) (async) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000840)={"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"}) (async) syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007a319b203b0905a0fa1e01020301090224f0ed003c44b1c5eef3253d9600e000100309043d00022d16ad00098507020002020000090584", @ANYRESHEX], 0x0) 1.061213962s ago: executing program 2 (id=840): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="200000ef1814110000000000030000000800030001000000080001"], 0x20}, 0x1, 0x0, 0x0, 0x4000808}, 0x20000000) 983.648546ms ago: executing program 2 (id=841): sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341"], 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000200)={0x14, &(0x7f0000000280)={0x0, 0x30, 0x61, {0x61, 0x7, "94f724050c5e87f45799adc1dee4a1352e6b2496f1e5c428831b41d014ba02d9ab14e7cd215d0f7a3664cfc65bd9ad8e52cc17d75267b80b096413de8a52cc908017cf43bb1ec206f12d69aa68545fa07fdc2354c56ab1753f3bc2bea3966e"}}, &(0x7f0000000300)={0x0, 0x3, 0xa9, @string={0xa9, 0x3, "834e0b01382d3a83497e6c6d9cf2193802b5a128ac7d07b4486a3abd71a8d3b7a6db0c1e35288fc9843732b13e604d652bc510d0644b2d523bb1899daf9e5f07932a0d8ea70e152fafc5d12d077eca69d68b9e4da217434c613053e7c373ed5e01e381606793ac96c5b12ef3b1497fa1305ca739bc74112755868cea2cf5f141cd46425f0d386c1b48a85ccd5f776036da372affe4100b63d60c9e27d77bac75545fede8d3d32a"}}}, &(0x7f0000000640)={0x34, &(0x7f00000003c0)={0x20, 0xf, 0x100, "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"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000580)={0xc0, 0xa1, 0x4}, &(0x7f00000005c0)={0x40, 0xa0, 0x4, 0x8}, &(0x7f0000000600)={0xc0, 0xa2, 0x2f, "003eadc17407e577c721e01a1aab6c025b77a51bd1a34e7460a274d937be32464d03d1f31f62223635f24e769aa9c4"}}) 869.837275ms ago: executing program 3 (id=842): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f00000007c0)=ANY=[], 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00030400000004", @ANYRES64=r0], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000a80)={0x24, &(0x7f0000000900)={0x0, 0x8, 0x82, {0x82, 0x5, "8b7d6a97a952c359a789cae171719686ad9d9419d3af27233417e6aa9d6c57363d08803eb7c613cf439e1030fc73fd56a8101df5a771fe0d8987b873fb06f993c44071744f0198d98b951f0e2924825e0b5b2506d65a9210f3e71672b3ad5dcd1518885531b4f7b7480bd73b7b1a136f3fe95ca3a9177e16c073dbd7197f8f15"}}, &(0x7f00000009c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}, &(0x7f0000000a00)={0x0, 0x22, 0x1f, {[@local=@item_012={0x1, 0x2, 0x0, "ad"}, @main=@item_4={0x3, 0x0, 0xc, "7a936208"}, @main=@item_012={0x2, 0x0, 0x8, "e46d"}, @local=@item_4={0x3, 0x2, 0x7, "96ed7780"}, @main=@item_4={0x3, 0x0, 0x9, "1eb7d445"}, @main=@item_4={0x3, 0x0, 0x8, "dba5f126"}, @global=@item_4={0x3, 0x1, 0x5, "ce2252a9"}, @global=@item_012={0x0, 0x1, 0xa}]}}, &(0x7f0000000a40)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x1, 0x1, {0x22, 0x46c}}}}, &(0x7f0000000bc0)={0x2c, &(0x7f0000000ac0)={0x0, 0xe}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x7}, 0xfffffffffffffffe, &(0x7f0000000b80)={0x20, 0x3, 0x1, 0x5}}) 437.600993ms ago: executing program 2 (id=843): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000080)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x16, {0x2, 0x4e21, @private}, 'syz_tun\x00'}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000013c0)={0x0, 0x0, 0x0, {0xb, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) r3 = fsopen(&(0x7f0000000380)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) mq_open(&(0x7f0000000240)='/dev/video#\x00', 0x40, 0x80, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000040)={0x20, 0xc, 0x3d, {0x3d, 0x1, "a6a231803d6094a91c9c68db2d1897ba2bbe8fd3d52c7547ee1b3d96f3f617cfb3674dbde2aa3af11ae9f60a88caf1788ad0656f1c76e4a4288d80"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f00000001c0)={0x0, 0x22, 0x6, {[@main=@item_012={0x2, 0x0, 0xb, "2006"}, @main=@item_012={0x2, 0x0, 0xf, "cb35"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x4, 0x1, {0x22, 0x5c5}}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="200ece00000076056a97705eae9260bbf6ec57eded7f52bfa03c0dd55dc3f55b47fac898ea26fcb2d8407d773ff15dc637856ba2f3a836c7aa955f2bbfb3bb610aebda1530c00876c80700325b5fe2f9ba50ef63373ff5760ed723fc47fba44406aded03795b725e2e8e1033beaf26fb9467a63dfeefe27048eabf0a919f3932a379d94adbb901afa4ddc1e1dac718dc4481456153d1dfce334acdcb0cf25e7bfacbbce8f4a10874fbc973db226359842c67887b12025c10ba2e2bf0043e79aa27486146879acb7dfa596aafd6ea7fbf53ee9710"], &(0x7f0000000280)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000340)={0x20, 0x1, 0x33, "cd8c9a55fefb186ff582e5356f127dea4d5dd6e3603a59abd1655c5165a024d6724f20f2dab44e959962743cd2870eb081fde6"}, &(0x7f0000000380)={0x20, 0x3, 0x1, 0xb}}) socket$inet_sctp(0x2, 0x5, 0x84) syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) 259.141202ms ago: executing program 3 (id=844): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000080)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x16, {0x2, 0x4e21, @private}, 'syz_tun\x00'}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000013c0)={0x0, 0x0, 0x0, {0xb, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) r2 = fsopen(&(0x7f0000000380)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000040)={0x20, 0xc, 0x3d, {0x3d, 0x1, "a6a231803d6094a91c9c68db2d1897ba2bbe8fd3d52c7547ee1b3d96f3f617cfb3674dbde2aa3af11ae9f60a88caf1788ad0656f1c76e4a4288d80"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f00000001c0)={0x0, 0x22, 0x6, {[@main=@item_012={0x2, 0x0, 0xb, "2006"}, @main=@item_012={0x2, 0x0, 0xf, "cb35"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x4, 0x1, {0x22, 0x5c5}}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="200ece00000076056a97705eae9260bbf6ec57eded7f52bfa03c0dd55dc3f55b47fac898ea26fcb2d8407d773ff15dc637856ba2f3a836c7aa955f2bbfb3bb610aebda1530c00876c80700325b5fe2f9ba50ef63373ff5760ed723fc47fba44406aded03795b725e2e8e1033beaf26fb9467a63dfeefe27048eabf0a919f3932a379d94adbb901afa4ddc1e1dac718dc4481456153d1dfce334acdcb0cf25e7bfacbbce8f4a10874fbc973db226359842c67887b12025c10ba2e2bf0043e79aa27486146879acb7dfa596aafd6ea7fbf53ee9710"], &(0x7f0000000280)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000340)={0x20, 0x1, 0x33, "cd8c9a55fefb186ff582e5356f127dea4d5dd6e3603a59abd1655c5165a024d6724f20f2dab44e959962743cd2870eb081fde6"}, &(0x7f0000000380)={0x20, 0x3, 0x1, 0xb}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 39.798824ms ago: executing program 0 (id=845): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x20000040) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) (fail_nth: 3) 0s ago: executing program 0 (id=846): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000840), 0x22601, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000a80)={{r0, &(0x7f0000000880)='wpan0\x00', 0x400000, &(0x7f00000008c0)={@align=0x2, {0x100, 0x7, 0x8, 0x6}}, 0x40, &(0x7f0000000900), &(0x7f0000000940)=0x8}, {[0x3, 0x5, 0x6, 0xf]}, 0x6, 0xc5, &(0x7f0000000980)=""/197}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x20000804) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x200}, 0xc) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x3, r4, 0x3891f662b6d1e480, 0x0, @ib={0x1b, 0x2, 0x0, {"c6b2cdb7955c5dbff4903c4f25a3225d"}, 0x2, 0x1, 0x8}}}, 0xa0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f0000001300)={'nat\x00', 0x0, [0x5, 0x88980000, 0x2, 0x7, 0xa]}, &(0x7f0000000140)=0x54) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000240)={0x2, 0x0, r3}) sendmsg$SEG6_CMD_SET_TUNSRC(r6, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="000827bd7000fbdbdf25030000000800020005000000050005000100000014000100fc08000300ffff00001800040080000000fbffffff02000000410000000900000014000400030000000500000005000000080000000500050001000000140001000000000000000000000000000000000100"/130], 0x88}, 0x1, 0x0, 0x0, 0x4040}, 0x8814) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r7) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000600)={'wpan1\x00', 0x0}) connect$inet6(r6, &(0x7f0000000700)={0xa, 0x4e21, 0x800, @remote, 0x5}, 0x1c) sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)={0x30, r8, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_MODE, @IEEE802154_ATTR_DEV_INDEX={0x0, 0x2, r9}]}, 0xffbc}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c090) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000640)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000680)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r10, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x0, @local}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x118) r11 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r11, &(0x7f0000000c80)={0xa, 0x4e22, 0x82, @mcast2, 0x5}, 0x2c) socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$key(0xf, 0x3, 0x2) r13 = syz_open_dev$video4linux(&(0x7f0000000740), 0x58d, 0x80) ioctl$VIDIOC_DV_TIMINGS_CAP(r13, 0xc0905664, &(0x7f0000000780)={0x0, 0x0, '\x00', @raw_data=[0x0, 0x73c, 0xff, 0xa5, 0xffffffa0, 0x6, 0x4, 0xfffffffa, 0x9, 0xfffffffc, 0x72, 0xfffffffe, 0x5, 0x3, 0x80, 0x8, 0x6d95, 0x2, 0x5, 0x10001, 0x5, 0xd, 0x2, 0xffff, 0x6, 0x1df8, 0x10, 0x6, 0x2, 0x6f0b75d4, 0x4, 0x1]}) accept4(r12, 0x0, 0x0, 0x0) r14 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(r14, 0x80044943, &(0x7f0000000b00)) kernel console output (not intermixed with test programs): set+0x4d8/0x11b0 [ 193.107977][ T1211] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 193.287745][ T1211] usb 1-1: Using ep0 maxpacket: 16 [ 193.301322][ T1211] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.311593][ T1211] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 193.322660][ T1211] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 193.332138][ T1211] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.340222][ T1211] usb 1-1: Product: syz [ 193.344908][ T1211] usb 1-1: Manufacturer: syz [ 193.349765][ T1211] usb 1-1: SerialNumber: syz [ 193.568680][ T1211] usb 1-1: 0:2 : does not exist [ 193.586041][ T1211] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 193.700900][ T1211] usb 1-1: USB disconnect, device number 47 [ 193.751211][ T5960] udevd[5960]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 193.992274][ T7455] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 194.146928][ T1211] usb 3-1: USB disconnect, device number 44 [ 194.369268][ T1226] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 194.507706][ T1226] usb 2-1: device descriptor read/64, error -71 [ 194.533441][ T42] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 194.557697][ T1211] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 194.712888][ T1211] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.724050][ T1211] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.727704][ T42] usb 1-1: Using ep0 maxpacket: 16 [ 194.734220][ T1211] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 194.750340][ T42] usb 1-1: config 0 has no interfaces? [ 194.756983][ T1226] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 194.759095][ T42] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 194.765255][ T1211] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.777648][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.792836][ T1211] usb 3-1: config 0 descriptor?? [ 194.827685][ T42] usb 1-1: Product: syz [ 194.831897][ T42] usb 1-1: Manufacturer: syz [ 194.836496][ T42] usb 1-1: SerialNumber: syz [ 194.848321][ T42] usb 1-1: config 0 descriptor?? [ 194.918034][ T1226] usb 2-1: device descriptor read/64, error -71 [ 194.952091][ T7482] Set syz1 is full, maxelem 65536 reached [ 195.038163][ T1226] usb usb2-port1: attempt power cycle [ 195.078224][ T5144] Bluetooth: hci0: unexpected subevent 0x0c length: 248 > 5 [ 195.087168][ T9] usb 1-1: USB disconnect, device number 48 [ 195.240276][ T7499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.251470][ T7499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.377760][ T1226] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 195.398283][ T1226] usb 2-1: device descriptor read/8, error -71 [ 195.408846][ T1211] usb 3-1: string descriptor 0 read error: -71 [ 195.416731][ T1211] uclogic 0003:256C:006D.0005: failed retrieving string descriptor #200: -71 [ 195.427039][ T1211] uclogic 0003:256C:006D.0005: failed retrieving pen parameters: -71 [ 195.435300][ T1211] uclogic 0003:256C:006D.0005: failed probing pen v2 parameters: -71 [ 195.443522][ T1211] uclogic 0003:256C:006D.0005: failed probing parameters: -71 [ 195.451222][ T1211] uclogic 0003:256C:006D.0005: probe with driver uclogic failed with error -71 [ 195.471885][ T1211] usb 3-1: USB disconnect, device number 45 [ 195.638379][ T1226] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 195.680205][ T1226] usb 2-1: device descriptor read/8, error -71 [ 195.787963][ T1226] usb usb2-port1: unable to enumerate USB device [ 195.913947][ T7512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.924049][ T7512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.307780][ T42] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 196.461334][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.486090][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.499900][ T42] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 196.513203][ T42] usb 3-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 196.522634][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.538030][ T42] usb 3-1: config 0 descriptor?? [ 196.780236][ T42] usbhid 3-1:0.0: can't add hid device: -71 [ 196.786709][ T42] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 196.798968][ T42] usb 3-1: USB disconnect, device number 46 [ 197.004686][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 197.016206][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.527710][ T5864] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 197.558116][ T42] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 197.677739][ T5864] usb 2-1: Using ep0 maxpacket: 16 [ 197.685286][ T5864] usb 2-1: config 0 has no interfaces? [ 197.692932][ T5864] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 197.702079][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.710761][ T5864] usb 2-1: Product: syz [ 197.714967][ T5864] usb 2-1: Manufacturer: syz [ 197.719868][ T5864] usb 2-1: SerialNumber: syz [ 197.726981][ T42] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 197.737025][ T5864] usb 2-1: config 0 descriptor?? [ 197.742213][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.750306][ T42] usb 3-1: Product: syz [ 197.756003][ T42] usb 3-1: Manufacturer: syz [ 197.760807][ T42] usb 3-1: SerialNumber: syz [ 197.767774][ T42] usb 3-1: config 0 descriptor?? [ 197.957094][ T5830] Bluetooth: hci1: unexpected subevent 0x0c length: 248 > 5 [ 197.957971][ T1226] usb 2-1: USB disconnect, device number 54 [ 197.985076][ T42] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 198.673549][ T7538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.559'. [ 198.691091][ T7538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.559'. [ 198.698022][ T7504] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 198.710084][ T7538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.559'. [ 198.761525][ T7538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.559'. [ 198.794940][ T7538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.559'. [ 198.826362][ T7540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.837426][ T7538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.559'. [ 198.847501][ T7540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.859245][ T7538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.559'. [ 198.872396][ T7538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.559'. [ 198.883171][ T7538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.559'. [ 198.893605][ T7538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.559'. [ 199.059198][ T42] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 199.070551][ T5830] Bluetooth: hci3: command 0x0406 tx timeout [ 199.076634][ T42] usb 3-1: USB disconnect, device number 47 [ 199.077299][ T5823] Bluetooth: hci1: command 0x0406 tx timeout [ 199.087988][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 199.089698][ T9] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 199.095042][ T5830] Bluetooth: hci0: command 0x0406 tx timeout [ 199.228031][ T1226] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 199.259785][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.270873][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.280672][ T9] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 199.289780][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.300004][ T9] usb 1-1: config 0 descriptor?? [ 199.357841][ T1226] usb 2-1: device descriptor read/64, error -71 [ 199.558892][ T7555] FAULT_INJECTION: forcing a failure. [ 199.558892][ T7555] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.573962][ T7555] CPU: 1 UID: 0 PID: 7555 Comm: syz.3.565 Tainted: G L syzkaller #0 PREEMPT(full) [ 199.573990][ T7555] Tainted: [L]=SOFTLOCKUP [ 199.573996][ T7555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 199.574006][ T7555] Call Trace: [ 199.574013][ T7555] [ 199.574020][ T7555] dump_stack_lvl+0xe8/0x150 [ 199.574052][ T7555] should_fail_ex+0x412/0x560 [ 199.574081][ T7555] _copy_to_iter+0x589/0x17d0 [ 199.574118][ T7555] ? __pfx__copy_to_iter+0x10/0x10 [ 199.574141][ T7555] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 199.574174][ T7555] ? lockdep_hardirqs_on+0x7a/0x110 [ 199.574192][ T7555] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 199.574214][ T7555] ? __skb_try_recv_datagram+0x3d4/0x4d0 [ 199.574233][ T7555] __skb_datagram_iter+0xf8/0x980 [ 199.574248][ T7555] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 199.574268][ T7555] skb_copy_datagram_iter+0xb5/0x270 [ 199.574285][ T7555] netlink_recvmsg+0x2c3/0xa50 [ 199.574310][ T7555] ? __pfx_netlink_recvmsg+0x10/0x10 [ 199.574334][ T7555] ? __pfx_aa_sk_perm+0x10/0x10 [ 199.574354][ T7555] ? __pfx_netlink_recvmsg+0x10/0x10 [ 199.574373][ T7555] sock_recvmsg_nosec+0x186/0x1c0 [ 199.574391][ T7555] ____sys_recvmsg+0x245/0x510 [ 199.574419][ T7555] ? __pfx_____sys_recvmsg+0x10/0x10 [ 199.574450][ T7555] ? import_iovec+0x73/0xa0 [ 199.574469][ T7555] ___sys_recvmsg+0x215/0x590 [ 199.574486][ T7555] ? __pfx____sys_recvmsg+0x10/0x10 [ 199.574516][ T7555] ? __fget_files+0x3a0/0x420 [ 199.574541][ T7555] do_recvmmsg+0x334/0x800 [ 199.574561][ T7555] ? __pfx_do_recvmmsg+0x10/0x10 [ 199.574582][ T7555] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 199.574611][ T7555] __x64_sys_recvmmsg+0x198/0x250 [ 199.574628][ T7555] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 199.574649][ T7555] do_syscall_64+0x14d/0xf80 [ 199.574661][ T7555] ? trace_irq_disable+0x3b/0x150 [ 199.574681][ T7555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.574695][ T7555] ? clear_bhb_loop+0x40/0x90 [ 199.574712][ T7555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.574727][ T7555] RIP: 0033:0x7f489939c629 [ 199.574743][ T7555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.574755][ T7555] RSP: 002b:00007f489a2d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 199.574772][ T7555] RAX: ffffffffffffffda RBX: 00007f4899615fa0 RCX: 00007f489939c629 [ 199.574782][ T7555] RDX: 0000000000000003 RSI: 0000200000001840 RDI: 0000000000000003 [ 199.574791][ T7555] RBP: 00007f489a2d5090 R08: 0000000000000000 R09: 0000000000000000 [ 199.574799][ T7555] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000001 [ 199.574808][ T7555] R13: 00007f4899616038 R14: 00007f4899615fa0 R15: 00007fffed549668 [ 199.574829][ T7555] [ 199.607742][ T1226] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 199.725590][ T7559] capability: warning: `syz.2.566' uses deprecated v2 capabilities in a way that may be insecure [ 199.879587][ T1226] usb 2-1: device descriptor read/64, error -71 [ 199.903502][ T7557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.912404][ T7557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.921387][ T5829] Bluetooth: hci2: unexpected subevent 0x0e length: 248 > 15 [ 199.945882][ T5829] Bluetooth: hci2: Unable to find connection for dst 01:4e:d1:02:00:00 sid 0x00 [ 199.987861][ T9] usb 1-1: string descriptor 0 read error: -71 [ 200.008381][ T9] uclogic 0003:256C:006D.0006: failed retrieving string descriptor #200: -71 [ 200.020657][ T1226] usb usb2-port1: attempt power cycle [ 200.035612][ T9] uclogic 0003:256C:006D.0006: failed retrieving pen parameters: -71 [ 200.041019][ T7562] netlink: 'syz.2.566': attribute type 2 has an invalid length. [ 200.187078][ T9] uclogic 0003:256C:006D.0006: failed probing pen v2 parameters: -71 [ 200.202479][ T9] uclogic 0003:256C:006D.0006: failed probing parameters: -71 [ 200.214804][ T9] uclogic 0003:256C:006D.0006: probe with driver uclogic failed with error -71 [ 200.243676][ T9] usb 1-1: USB disconnect, device number 49 [ 200.437700][ T1226] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 200.468446][ T1226] usb 2-1: device descriptor read/8, error -71 [ 200.717722][ T1226] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 200.738456][ T1226] usb 2-1: device descriptor read/8, error -71 [ 200.848648][ T1226] usb usb2-port1: unable to enumerate USB device [ 200.927698][ T9] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 201.057777][ T9] usb 1-1: device descriptor read/64, error -71 [ 201.297701][ T9] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 201.427701][ T9] usb 1-1: device descriptor read/64, error -71 [ 201.537973][ T9] usb usb1-port1: attempt power cycle [ 201.887723][ T9] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 201.908392][ T9] usb 1-1: device descriptor read/8, error -71 [ 202.157732][ T9] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 202.180003][ T9] usb 1-1: device descriptor read/8, error -71 [ 202.287976][ T9] usb usb1-port1: unable to enumerate USB device [ 202.377822][ T5922] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 202.527709][ T5922] usb 2-1: Using ep0 maxpacket: 8 [ 202.536442][ T5922] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 202.545602][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.553747][ T5922] usb 2-1: Product: syz [ 202.557932][ T5922] usb 2-1: Manufacturer: syz [ 202.562524][ T5922] usb 2-1: SerialNumber: syz [ 202.569098][ T5922] usb 2-1: config 0 descriptor?? [ 202.577852][ T5922] gspca_main: se401-2.14.0 probing 047d:5003 [ 202.979526][ T5922] gspca_se401: Bayer format not supported! [ 203.622201][ T7564] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 203.799977][ T7584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.811399][ T7584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.987741][ T42] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 204.137711][ T42] usb 3-1: Using ep0 maxpacket: 16 [ 204.144809][ T42] usb 3-1: config 166 has an invalid interface number: 177 but max is 1 [ 204.153962][ T42] usb 3-1: config 166 has an invalid interface number: 34 but max is 1 [ 204.157880][ T9] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 204.163208][ T42] usb 3-1: config 166 has no interface number 0 [ 204.176332][ T42] usb 3-1: config 166 has no interface number 1 [ 204.182670][ T42] usb 3-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 204.194618][ T42] usb 3-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 204.205773][ T42] usb 3-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 204.216686][ T42] usb 3-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 204.229403][ T42] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 204.240882][ T42] usb 3-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 204.251183][ T42] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 204.262428][ T42] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 204.272534][ T42] usb 3-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 204.285995][ T42] usb 3-1: config 166 interface 177 has no altsetting 0 [ 204.292991][ T42] usb 3-1: config 166 interface 34 has no altsetting 0 [ 204.302483][ T42] usb 3-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 204.311782][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.319867][ T42] usb 3-1: Product: syz [ 204.324090][ T42] usb 3-1: Manufacturer: syz [ 204.329664][ T42] usb 3-1: SerialNumber: syz [ 204.330857][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 204.345055][ T9] usb 1-1: config 0 has no interfaces? [ 204.353000][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 204.362461][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.372055][ T9] usb 1-1: Product: syz [ 204.376344][ T9] usb 1-1: Manufacturer: syz [ 204.381884][ T9] usb 1-1: SerialNumber: syz [ 204.389683][ T9] usb 1-1: config 0 descriptor?? [ 204.444408][ T7589] program syz.3.577 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 204.500342][ T7591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.509668][ T7591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.601602][ T5829] Bluetooth: hci0: unexpected subevent 0x0e length: 248 > 15 [ 204.608979][ T5922] usb 1-1: USB disconnect, device number 54 [ 204.615121][ T5829] Bluetooth: hci0: Unable to find connection for dst 01:4e:d1:02:00:00 sid 0x00 [ 205.022699][ T5922] usb 2-1: USB disconnect, device number 59 [ 205.155989][ T7596] FAULT_INJECTION: forcing a failure. [ 205.155989][ T7596] name failslab, interval 1, probability 0, space 0, times 0 [ 205.170420][ T7596] CPU: 1 UID: 0 PID: 7596 Comm: syz.3.580 Tainted: G L syzkaller #0 PREEMPT(full) [ 205.170446][ T7596] Tainted: [L]=SOFTLOCKUP [ 205.170452][ T7596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 205.170461][ T7596] Call Trace: [ 205.170467][ T7596] [ 205.170474][ T7596] dump_stack_lvl+0xe8/0x150 [ 205.170503][ T7596] should_fail_ex+0x412/0x560 [ 205.170529][ T7596] should_failslab+0xa8/0x100 [ 205.170549][ T7596] __kmalloc_cache_noprof+0x88/0x660 [ 205.170567][ T7596] ? vhost_task_create+0x123/0x380 [ 205.170589][ T7596] vhost_task_create+0x123/0x380 [ 205.170606][ T7596] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 205.170632][ T7596] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 205.170658][ T7596] ? __pfx_vhost_task_create+0x10/0x10 [ 205.170683][ T7596] ? __pfx_vhost_task_fn+0x10/0x10 [ 205.170707][ T7596] ? __lock_acquire+0x6b5/0x2cf0 [ 205.170735][ T7596] kvm_mmu_post_init_vm+0x14c/0x300 [ 205.170757][ T7596] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 205.170781][ T7596] ? __mutex_trylock_common+0x158/0x260 [ 205.170807][ T7596] ? __pfx___mutex_trylock_common+0x10/0x10 [ 205.170832][ T7596] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 205.170849][ T7596] ? register_lock_class+0x31/0x2e0 [ 205.170872][ T7596] ? __lock_acquire+0x6b5/0x2cf0 [ 205.170906][ T7596] ? kasan_quarantine_put+0xbb/0x1f0 [ 205.170935][ T7596] ? kvm_vcpu_ioctl+0x280/0xfd0 [ 205.170959][ T7596] ? do_raw_write_lock+0x11d/0x260 [ 205.170991][ T7596] kvm_vcpu_ioctl+0xa62/0xfd0 [ 205.171014][ T7596] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 205.171030][ T7596] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 205.171068][ T7596] ? __fget_files+0x2a/0x420 [ 205.171095][ T7596] ? __fget_files+0x2a/0x420 [ 205.171116][ T7596] ? __fget_files+0x3a0/0x420 [ 205.171138][ T7596] ? __fget_files+0x2a/0x420 [ 205.171164][ T7596] ? bpf_lsm_file_ioctl+0x9/0x20 [ 205.171186][ T7596] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 205.171204][ T7596] __se_sys_ioctl+0xfc/0x170 [ 205.171227][ T7596] do_syscall_64+0x14d/0xf80 [ 205.171244][ T7596] ? trace_irq_disable+0x3b/0x150 [ 205.171268][ T7596] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.171286][ T7596] ? clear_bhb_loop+0x40/0x90 [ 205.171308][ T7596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.171326][ T7596] RIP: 0033:0x7f489939c629 [ 205.171342][ T7596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.171356][ T7596] RSP: 002b:00007f489a2d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 205.171375][ T7596] RAX: ffffffffffffffda RBX: 00007f4899615fa0 RCX: 00007f489939c629 [ 205.171387][ T7596] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 205.171398][ T7596] RBP: 00007f489a2d5090 R08: 0000000000000000 R09: 0000000000000000 [ 205.171409][ T7596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.171419][ T7596] R13: 00007f4899616038 R14: 00007f4899615fa0 R15: 00007fffed549668 [ 205.171448][ T7596] [ 205.497964][ T7598] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 205.642873][ T7609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.652057][ T7609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.757854][ T5922] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 205.900887][ T5922] usb 2-1: device descriptor read/64, error -71 [ 205.943116][ T7618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.952928][ T7618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.137759][ T5922] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 206.267785][ T5922] usb 2-1: device descriptor read/64, error -71 [ 206.378228][ T5922] usb usb2-port1: attempt power cycle [ 206.583184][ T7621] FAULT_INJECTION: forcing a failure. [ 206.583184][ T7621] name failslab, interval 1, probability 0, space 0, times 0 [ 206.596785][ T7621] CPU: 1 UID: 0 PID: 7621 Comm: syz.3.587 Tainted: G L syzkaller #0 PREEMPT(full) [ 206.596822][ T7621] Tainted: [L]=SOFTLOCKUP [ 206.596829][ T7621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 206.596839][ T7621] Call Trace: [ 206.596846][ T7621] [ 206.596853][ T7621] dump_stack_lvl+0xe8/0x150 [ 206.596882][ T7621] should_fail_ex+0x412/0x560 [ 206.596914][ T7621] should_failslab+0xa8/0x100 [ 206.596935][ T7621] __kmalloc_cache_noprof+0x88/0x660 [ 206.596955][ T7621] ? vhost_task_create+0x123/0x380 [ 206.596979][ T7621] vhost_task_create+0x123/0x380 [ 206.596996][ T7621] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 206.597023][ T7621] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 206.597051][ T7621] ? __pfx_vhost_task_create+0x10/0x10 [ 206.597076][ T7621] ? __pfx_vhost_task_fn+0x10/0x10 [ 206.597102][ T7621] ? __lock_acquire+0x6b5/0x2cf0 [ 206.597130][ T7621] kvm_mmu_post_init_vm+0x14c/0x300 [ 206.597149][ T7621] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 206.597175][ T7621] ? __mutex_trylock_common+0x158/0x260 [ 206.597202][ T7621] ? __pfx___mutex_trylock_common+0x10/0x10 [ 206.597227][ T7621] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 206.597243][ T7621] ? register_lock_class+0x31/0x2e0 [ 206.597263][ T7621] ? __lock_acquire+0x6b5/0x2cf0 [ 206.597286][ T7621] ? kasan_quarantine_put+0xbb/0x1f0 [ 206.597309][ T7621] ? kvm_vcpu_ioctl+0x280/0xfd0 [ 206.597329][ T7621] ? do_raw_write_lock+0x11d/0x260 [ 206.597355][ T7621] kvm_vcpu_ioctl+0xa62/0xfd0 [ 206.597373][ T7621] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 206.597385][ T7621] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 206.597415][ T7621] ? __fget_files+0x2a/0x420 [ 206.597436][ T7621] ? __fget_files+0x2a/0x420 [ 206.597454][ T7621] ? __fget_files+0x3a0/0x420 [ 206.597472][ T7621] ? __fget_files+0x2a/0x420 [ 206.597492][ T7621] ? bpf_lsm_file_ioctl+0x9/0x20 [ 206.597510][ T7621] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 206.597523][ T7621] __se_sys_ioctl+0xfc/0x170 [ 206.597541][ T7621] do_syscall_64+0x14d/0xf80 [ 206.597556][ T7621] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.597570][ T7621] ? clear_bhb_loop+0x40/0x90 [ 206.597590][ T7621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.597605][ T7621] RIP: 0033:0x7f489939c629 [ 206.597622][ T7621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.597635][ T7621] RSP: 002b:00007f489a2d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 206.597654][ T7621] RAX: ffffffffffffffda RBX: 00007f4899615fa0 RCX: 00007f489939c629 [ 206.597665][ T7621] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 206.597676][ T7621] RBP: 00007f489a2d5090 R08: 0000000000000000 R09: 0000000000000000 [ 206.597687][ T7621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.597696][ T7621] R13: 00007f4899616038 R14: 00007f4899615fa0 R15: 00007fffed549668 [ 206.597721][ T7621] [ 206.957702][ T5922] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 206.973566][ T7623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.986575][ T7623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.989186][ T5922] usb 2-1: device descriptor read/8, error -71 [ 207.238154][ T5922] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 207.265291][ T5922] usb 2-1: device descriptor read/8, error -71 [ 207.379444][ T5922] usb usb2-port1: unable to enumerate USB device [ 207.550564][ T7625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.561828][ T7625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.144012][ T7627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.155820][ T7627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.167495][ T7627] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 208.183972][ T7627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.194107][ T7627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.393577][ T7636] netlink: 'syz.3.592': attribute type 2 has an invalid length. [ 208.507689][ T10] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 208.527918][ T7601] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 208.667984][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 208.696248][ T10] usb 2-1: config 0 has no interfaces? [ 208.704057][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 208.719436][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.730239][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 208.744108][ T10] usb 2-1: Product: syz [ 208.753631][ T10] usb 2-1: Manufacturer: syz [ 208.758358][ T10] usb 2-1: SerialNumber: syz [ 208.774737][ T10] usb 2-1: config 0 descriptor?? [ 208.907888][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 208.936689][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 208.990400][ T5829] Bluetooth: hci1: unexpected subevent 0x0e length: 248 > 15 [ 208.998010][ T5829] Bluetooth: hci1: Unable to find connection for dst 01:4e:d1:02:00:00 sid 0x00 [ 209.007557][ T5922] usb 2-1: USB disconnect, device number 64 [ 209.238270][ T7648] netlink: 'syz.2.596': attribute type 33 has an invalid length. [ 209.246988][ T7648] __nla_validate_parse: 22 callbacks suppressed [ 209.247006][ T7648] netlink: 164 bytes leftover after parsing attributes in process `syz.2.596'. [ 209.329270][ T5921] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 209.389168][ T7650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.389771][ T42] ums-realtek 3-1:166.177: USB Mass Storage device detected [ 209.405263][ T7650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.430534][ T7654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.439343][ T7654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.491127][ T42] ums-realtek 3-1:166.34: USB Mass Storage device detected [ 209.499498][ T5921] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 209.509200][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.519040][ T5921] usb 1-1: Product: syz [ 209.523220][ T5921] usb 1-1: Manufacturer: syz [ 209.528044][ T5921] usb 1-1: SerialNumber: syz [ 209.535397][ T5921] usb 1-1: config 0 descriptor?? [ 209.557106][ T42] ums-realtek 3-1:166.34: probe with driver ums-realtek failed with error -5 [ 209.570435][ T42] uvcvideo 3-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 209.578127][ T42] uvcvideo 3-1:166.34: No valid video chain found. [ 209.651767][ T7658] FAULT_INJECTION: forcing a failure. [ 209.651767][ T7658] name failslab, interval 1, probability 0, space 0, times 0 [ 209.665657][ T7658] CPU: 0 UID: 0 PID: 7658 Comm: syz.1.599 Tainted: G L syzkaller #0 PREEMPT(full) [ 209.665684][ T7658] Tainted: [L]=SOFTLOCKUP [ 209.665691][ T7658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 209.665700][ T7658] Call Trace: [ 209.665707][ T7658] [ 209.665714][ T7658] dump_stack_lvl+0xe8/0x150 [ 209.665744][ T7658] should_fail_ex+0x412/0x560 [ 209.665773][ T7658] should_failslab+0xa8/0x100 [ 209.665795][ T7658] __kmalloc_cache_noprof+0x88/0x660 [ 209.665815][ T7658] ? vhost_task_create+0x123/0x380 [ 209.665838][ T7658] vhost_task_create+0x123/0x380 [ 209.665855][ T7658] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 209.665881][ T7658] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 209.665908][ T7658] ? __pfx_vhost_task_create+0x10/0x10 [ 209.665932][ T7658] ? __pfx_vhost_task_fn+0x10/0x10 [ 209.665958][ T7658] ? __lock_acquire+0x6b5/0x2cf0 [ 209.665986][ T7658] kvm_mmu_post_init_vm+0x14c/0x300 [ 209.666005][ T7658] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 209.666031][ T7658] ? __mutex_trylock_common+0x158/0x260 [ 209.666060][ T7658] ? __pfx___mutex_trylock_common+0x10/0x10 [ 209.666085][ T7658] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 209.666102][ T7658] ? register_lock_class+0x31/0x2e0 [ 209.666125][ T7658] ? __lock_acquire+0x6b5/0x2cf0 [ 209.666155][ T7658] ? kasan_quarantine_put+0xbb/0x1f0 [ 209.666181][ T7658] ? kvm_vcpu_ioctl+0x280/0xfd0 [ 209.666197][ T7658] ? do_raw_write_lock+0x11d/0x260 [ 209.666224][ T7658] kvm_vcpu_ioctl+0xa62/0xfd0 [ 209.666247][ T7658] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 209.666263][ T7658] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 209.666300][ T7658] ? __fget_files+0x2a/0x420 [ 209.666317][ T7658] ? __fget_files+0x2a/0x420 [ 209.666329][ T7658] ? __fget_files+0x3a0/0x420 [ 209.666341][ T7658] ? __fget_files+0x2a/0x420 [ 209.666355][ T7658] ? bpf_lsm_file_ioctl+0x9/0x20 [ 209.666375][ T7658] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 209.666393][ T7658] __se_sys_ioctl+0xfc/0x170 [ 209.666424][ T7658] do_syscall_64+0x14d/0xf80 [ 209.666440][ T7658] ? trace_irq_disable+0x3b/0x150 [ 209.666457][ T7658] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.666468][ T7658] ? clear_bhb_loop+0x40/0x90 [ 209.666480][ T7658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.666490][ T7658] RIP: 0033:0x7f8071b9c629 [ 209.666502][ T7658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.666513][ T7658] RSP: 002b:00007f8072a5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 209.666532][ T7658] RAX: ffffffffffffffda RBX: 00007f8071e15fa0 RCX: 00007f8071b9c629 [ 209.666545][ T7658] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 209.666555][ T7658] RBP: 00007f8072a5f090 R08: 0000000000000000 R09: 0000000000000000 [ 209.666566][ T7658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.666577][ T7658] R13: 00007f8071e16038 R14: 00007f8071e15fa0 R15: 00007ffd0497def8 [ 209.666601][ T7658] [ 209.978222][ T5921] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 210.025786][ T7660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.049809][ T7660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.098625][ T7662] netlink: 32 bytes leftover after parsing attributes in process `syz.1.601'. [ 210.242407][ T7673] warning: `syz.1.604' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 210.688451][ T5922] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 210.863671][ T5922] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 210.873481][ T5922] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 210.885778][ T5922] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 210.903496][ T5922] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 210.912858][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.921385][ T5922] usb 2-1: Product: syz [ 210.925626][ T5922] usb 2-1: Manufacturer: syz [ 210.930530][ T5922] usb 2-1: SerialNumber: syz [ 211.153310][ T5922] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 65 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 211.305096][ T7687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.319118][ T7687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.352176][ T1226] usb 2-1: USB disconnect, device number 65 [ 211.363745][ T1226] usblp0: removed [ 211.476755][ T5921] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 211.488678][ T5921] usb 1-1: USB disconnect, device number 55 [ 211.592149][ T7689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.604240][ T7689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.614121][ T5829] Bluetooth: hci2: unexpected subevent 0x0e length: 248 > 15 [ 211.623444][ T5829] Bluetooth: hci2: Unable to find connection for dst 01:4e:d1:02:00:00 sid 0x00 [ 211.881226][ T7691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.893306][ T7691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.902766][ T7693] binder: 7692:7693 ioctl 400c620e 2000000014c0 returned -22 [ 211.912724][ T7693] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 212.167740][ T1211] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 212.223211][ T7697] openvswitch: netlink: IPv6 tunnel dst address is zero [ 212.241920][ T7697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.250532][ T1226] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 212.259086][ T7697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.319160][ T1211] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 212.328061][ T1211] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.338907][ T1211] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 212.360232][ T1211] usb 2-1: config 1 has no interface number 1 [ 212.368919][ T1211] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 212.383791][ T1211] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 212.399323][ T1211] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 212.408857][ T1211] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.416866][ T1211] usb 2-1: Product: syz [ 212.422555][ T1211] usb 2-1: Manufacturer: syz [ 212.432591][ T1211] usb 2-1: SerialNumber: syz [ 212.438316][ T1226] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.451112][ T1226] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.463901][ T1226] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 212.473067][ T1226] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.485410][ T1226] usb 1-1: config 0 descriptor?? [ 212.586226][ T7701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.596256][ T7701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.673695][ T1211] usb 2-1: No endpoint at altset 1, falling back to MIDI 1.0 [ 212.681260][ T1211] usb 2-1: MIDIStreaming interface descriptor not found [ 212.746645][ T1211] usb 2-1: USB disconnect, device number 66 [ 212.809379][ T5821] udevd[5821]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 212.854071][ T7704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.865056][ T7704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.883924][ T7704] FAULT_INJECTION: forcing a failure. [ 212.883924][ T7704] name failslab, interval 1, probability 0, space 0, times 0 [ 212.896887][ T7704] CPU: 1 UID: 0 PID: 7704 Comm: syz.3.616 Tainted: G L syzkaller #0 PREEMPT(full) [ 212.896915][ T7704] Tainted: [L]=SOFTLOCKUP [ 212.896921][ T7704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 212.896932][ T7704] Call Trace: [ 212.896940][ T7704] [ 212.896948][ T7704] dump_stack_lvl+0xe8/0x150 [ 212.896977][ T7704] should_fail_ex+0x412/0x560 [ 212.897005][ T7704] should_failslab+0xa8/0x100 [ 212.897018][ T7704] ? sctp_get_port_local+0x6f2/0x1730 [ 212.897029][ T7704] kmem_cache_alloc_noprof+0x87/0x650 [ 212.897044][ T7704] ? ima_match_policy+0x2146/0x21e0 [ 212.897058][ T7704] sctp_get_port_local+0x6f2/0x1730 [ 212.897083][ T7704] ? __pfx_sctp_get_port_local+0x10/0x10 [ 212.897105][ T7704] ? sctp_bind_addr_match+0x28b/0x2b0 [ 212.897133][ T7704] sctp_do_bind+0x4f1/0x9d0 [ 212.897159][ T7704] sctp_connect_new_asoc+0x270/0x6b0 [ 212.897179][ T7704] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 212.897199][ T7704] ? __local_bh_enable_ip+0xd0/0x130 [ 212.897219][ T7704] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 212.897238][ T7704] ? security_sctp_bind_connect+0x7e/0x2c0 [ 212.897258][ T7704] sctp_sendmsg+0x1528/0x2c10 [ 212.897294][ T7704] ? __pfx_sctp_sendmsg+0x10/0x10 [ 212.897337][ T7704] ? aa_sk_perm+0x6d5/0x900 [ 212.897359][ T7704] ? __pfx_aa_sk_perm+0x10/0x10 [ 212.897369][ T7704] ? sock_rps_record_flow+0x19/0x400 [ 212.897385][ T7704] ? inet_sendmsg+0x2f4/0x370 [ 212.897406][ T7704] sock_sendmsg_nosec+0x128/0x1d0 [ 212.897432][ T7704] ____sys_sendmsg+0x589/0x8c0 [ 212.897465][ T7704] ? __pfx_____sys_sendmsg+0x10/0x10 [ 212.897485][ T7704] ? import_iovec+0x73/0xa0 [ 212.897496][ T7704] ___sys_sendmsg+0x2a5/0x360 [ 212.897513][ T7704] ? __pfx____sys_sendmsg+0x10/0x10 [ 212.897533][ T7704] ? kstrtouint+0x6e/0xe0 [ 212.897583][ T7704] ? __fget_files+0x2a/0x420 [ 212.897605][ T7704] ? __fget_files+0x3a0/0x420 [ 212.897634][ T7704] __sys_sendmmsg+0x27c/0x4e0 [ 212.897662][ T7704] ? __pfx___sys_sendmmsg+0x10/0x10 [ 212.897684][ T7704] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 212.897723][ T7704] ? ksys_write+0x242/0x270 [ 212.897741][ T7704] ? __pfx_ksys_write+0x10/0x10 [ 212.897762][ T7704] __x64_sys_sendmmsg+0xa0/0xc0 [ 212.897788][ T7704] do_syscall_64+0x14d/0xf80 [ 212.897804][ T7704] ? trace_irq_disable+0x3b/0x150 [ 212.897827][ T7704] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.897842][ T7704] ? clear_bhb_loop+0x40/0x90 [ 212.897863][ T7704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.897881][ T7704] RIP: 0033:0x7f489939c629 [ 212.897898][ T7704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.897912][ T7704] RSP: 002b:00007f489a2d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 212.897930][ T7704] RAX: ffffffffffffffda RBX: 00007f4899615fa0 RCX: 00007f489939c629 [ 212.897966][ T7704] RDX: 0000000000000001 RSI: 0000200000000880 RDI: 0000000000000004 [ 212.897977][ T7704] RBP: 00007f489a2d5090 R08: 0000000000000000 R09: 0000000000000000 [ 212.897992][ T7704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.898002][ T7704] R13: 00007f4899616038 R14: 00007f4899615fa0 R15: 00007fffed549668 [ 212.898026][ T7704] [ 213.313144][ T1226] usb 1-1: string descriptor 0 read error: -71 [ 213.319859][ T1226] uclogic 0003:256C:006D.0007: failed retrieving string descriptor #200: -71 [ 213.329093][ T1226] uclogic 0003:256C:006D.0007: failed retrieving pen parameters: -71 [ 213.337176][ T1226] uclogic 0003:256C:006D.0007: failed probing pen v2 parameters: -71 [ 213.347892][ T1226] uclogic 0003:256C:006D.0007: failed probing parameters: -71 [ 213.355665][ T1226] uclogic 0003:256C:006D.0007: probe with driver uclogic failed with error -71 [ 213.374365][ T1226] usb 1-1: USB disconnect, device number 56 [ 213.802044][ T7710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.827099][ T7712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.838601][ T7710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.849080][ T7712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.884179][ T7712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.893222][ T7712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.107794][ T5921] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 214.227744][ T42] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 214.262312][ T5921] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 214.271657][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.280131][ T5921] usb 1-1: Product: syz [ 214.285637][ T5921] usb 1-1: Manufacturer: syz [ 214.290292][ T5921] usb 1-1: SerialNumber: syz [ 214.296595][ T5921] usb 1-1: config 0 descriptor?? [ 214.377737][ T42] usb 2-1: Using ep0 maxpacket: 16 [ 214.384828][ T42] usb 2-1: config 0 has no interfaces? [ 214.399789][ T42] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 214.409679][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.418104][ T42] usb 2-1: Product: syz [ 214.425847][ T42] usb 2-1: Manufacturer: syz [ 214.432235][ T42] usb 2-1: SerialNumber: syz [ 214.440995][ T42] usb 2-1: config 0 descriptor?? [ 214.482566][ T7718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.501985][ T7718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.508146][ T5921] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 214.630522][ T7722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.639469][ T7722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.650829][ T5829] Bluetooth: hci1: unexpected subevent 0x0e length: 248 > 15 [ 214.658453][ T5829] Bluetooth: hci1: Unable to find connection for dst 01:4e:d1:02:00:00 sid 0x00 [ 214.659116][ T42] usb 2-1: USB disconnect, device number 67 [ 215.048320][ T7725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.057099][ T7725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.212854][ T7727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.228058][ T7727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.763434][ T1211] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 215.785634][ T7741] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.632'. [ 215.798933][ T7741] tc_dump_action: action bad kind [ 215.809855][ T7741] netlink: 620 bytes leftover after parsing attributes in process `syz.3.632'. [ 215.942503][ T1211] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.953871][ T1211] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.963736][ T1211] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 215.973598][ T1211] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.987079][ T5921] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 215.996818][ T1211] usb 2-1: config 0 descriptor?? [ 215.999856][ T5921] usb 1-1: USB disconnect, device number 57 [ 216.100205][ T7747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.111291][ T7747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.161191][ T7749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.170032][ T7749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.673492][ T7753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.682953][ T7753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.807806][ T42] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 216.832848][ T1211] usb 2-1: string descriptor 0 read error: -71 [ 216.839585][ T1211] uclogic 0003:256C:006D.0008: failed retrieving string descriptor #200: -71 [ 216.848674][ T1211] uclogic 0003:256C:006D.0008: failed retrieving pen parameters: -71 [ 216.856812][ T1211] uclogic 0003:256C:006D.0008: failed probing pen v2 parameters: -71 [ 216.865036][ T1211] uclogic 0003:256C:006D.0008: failed probing parameters: -71 [ 216.872933][ T1211] uclogic 0003:256C:006D.0008: probe with driver uclogic failed with error -71 [ 216.885494][ T1211] usb 2-1: USB disconnect, device number 68 [ 216.957760][ T42] usb 1-1: Using ep0 maxpacket: 16 [ 216.964198][ T42] usb 1-1: config 0 has no interfaces? [ 216.971505][ T42] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 216.980702][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.988811][ T42] usb 1-1: Product: syz [ 216.991479][ T7763] FAULT_INJECTION: forcing a failure. [ 216.991479][ T7763] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 216.992981][ T42] usb 1-1: Manufacturer: syz [ 216.992999][ T42] usb 1-1: SerialNumber: syz [ 216.995674][ T42] usb 1-1: config 0 descriptor?? [ 217.018396][ T7763] CPU: 0 UID: 0 PID: 7763 Comm: syz.2.641 Tainted: G L syzkaller #0 PREEMPT(full) [ 217.018424][ T7763] Tainted: [L]=SOFTLOCKUP [ 217.018431][ T7763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 217.018442][ T7763] Call Trace: [ 217.018449][ T7763] [ 217.018457][ T7763] dump_stack_lvl+0xe8/0x150 [ 217.018486][ T7763] should_fail_ex+0x412/0x560 [ 217.018515][ T7763] prepare_alloc_pages+0x22a/0x650 [ 217.018543][ T7763] __alloc_frozen_pages_noprof+0x12f/0x380 [ 217.018567][ T7763] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 217.018591][ T7763] ? __pfx_policy_nodemask+0x10/0x10 [ 217.018615][ T7763] ? __lock_acquire+0x6b5/0x2cf0 [ 217.018640][ T7763] alloc_pages_mpol+0x232/0x4a0 [ 217.018665][ T7763] vma_alloc_folio_noprof+0xea/0x210 [ 217.018687][ T7763] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 217.018717][ T7763] do_pte_missing+0x1673/0x3780 [ 217.018752][ T7763] handle_mm_fault+0x1bec/0x3310 [ 217.018796][ T7763] ? handle_mm_fault+0xee/0x3310 [ 217.018826][ T7763] ? __pfx_handle_mm_fault+0x10/0x10 [ 217.018866][ T7763] ? lock_mm_and_find_vma+0xa7/0x340 [ 217.018886][ T7763] do_user_addr_fault+0x75b/0x1340 [ 217.018922][ T7763] exc_page_fault+0x6a/0xc0 [ 217.018949][ T7763] asm_exc_page_fault+0x26/0x30 [ 217.018966][ T7763] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 217.018990][ T7763] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 7f 45 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 217.019005][ T7763] RSP: 0018:ffffc9000c987638 EFLAGS: 00050202 [ 217.019023][ T7763] RAX: ffffffff84b67701 RBX: ffff88806c3fc000 RCX: 0000000000000e78 [ 217.019036][ T7763] RDX: 0000000000000000 RSI: ffff88806c3fc000 RDI: 0000200000002700 [ 217.019048][ T7763] RBP: ffffc9000c9877b0 R08: ffff88806c3fce77 R09: 1ffff1100d87f9ce [ 217.019062][ T7763] R10: dffffc0000000000 R11: ffffed100d87f9cf R12: dffffc0000000000 [ 217.019075][ T7763] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000e78 [ 217.019094][ T7763] ? _copy_to_iter+0x3c1/0x17d0 [ 217.019124][ T7763] _copy_to_iter+0x493/0x17d0 [ 217.019161][ T7763] ? __pfx__copy_to_iter+0x10/0x10 [ 217.019185][ T7763] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 217.019210][ T7763] ? lockdep_hardirqs_on+0x7a/0x110 [ 217.019227][ T7763] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 217.019252][ T7763] ? __skb_try_recv_datagram+0x3d4/0x4d0 [ 217.019277][ T7763] __skb_datagram_iter+0xf8/0x980 [ 217.019297][ T7763] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 217.019323][ T7763] skb_copy_datagram_iter+0xb5/0x270 [ 217.019346][ T7763] netlink_recvmsg+0x2c3/0xa50 [ 217.019378][ T7763] ? __pfx_netlink_recvmsg+0x10/0x10 [ 217.019403][ T7763] ? __pfx_aa_sk_perm+0x10/0x10 [ 217.019430][ T7763] ? __pfx_netlink_recvmsg+0x10/0x10 [ 217.019453][ T7763] sock_recvmsg_nosec+0x186/0x1c0 [ 217.019478][ T7763] ____sys_recvmsg+0x245/0x510 [ 217.019511][ T7763] ? __pfx_____sys_recvmsg+0x10/0x10 [ 217.019551][ T7763] ? import_iovec+0x73/0xa0 [ 217.019571][ T7763] ___sys_recvmsg+0x215/0x590 [ 217.019587][ T7763] ? get_pid_task+0x20/0x1f0 [ 217.019617][ T7763] ? __pfx____sys_recvmsg+0x10/0x10 [ 217.019656][ T7763] ? __fget_files+0x3a0/0x420 [ 217.019690][ T7763] __x64_sys_recvmsg+0x1ba/0x2a0 [ 217.019710][ T7763] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 217.019736][ T7763] ? __pfx_ksys_write+0x10/0x10 [ 217.019765][ T7763] do_syscall_64+0x14d/0xf80 [ 217.019781][ T7763] ? trace_irq_disable+0x3b/0x150 [ 217.019811][ T7763] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.019829][ T7763] ? clear_bhb_loop+0x40/0x90 [ 217.019852][ T7763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.019869][ T7763] RIP: 0033:0x7f2bb519c629 [ 217.019886][ T7763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.019901][ T7763] RSP: 002b:00007f2bb60f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 217.019919][ T7763] RAX: ffffffffffffffda RBX: 00007f2bb5415fa0 RCX: 00007f2bb519c629 [ 217.019933][ T7763] RDX: 0000000000032120 RSI: 0000200000000380 RDI: 0000000000000003 [ 217.019944][ T7763] RBP: 00007f2bb60f6090 R08: 0000000000000000 R09: 0000000000000000 [ 217.019957][ T7763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.019968][ T7763] R13: 00007f2bb5416038 R14: 00007f2bb5415fa0 R15: 00007ffeef91d9e8 [ 217.019995][ T7763] [ 217.165680][ T7766] syzkaller1: entered promiscuous mode [ 217.444403][ T42] usb 1-1: USB disconnect, device number 58 [ 217.450252][ T7766] syzkaller1: entered allmulticast mode [ 217.455700][ T5829] Bluetooth: hci0: unexpected subevent 0x0e length: 248 > 15 [ 217.484113][ T5829] Bluetooth: hci0: Unable to find connection for dst 01:4e:d1:02:00:00 sid 0x00 [ 217.672623][ T7781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.682605][ T7781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.887719][ T42] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 218.051831][ T42] usb 2-1: config 0 has no interfaces? [ 218.059403][ T42] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 218.068532][ T42] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 218.076690][ T42] usb 2-1: Product: syz [ 218.080907][ T42] usb 2-1: Manufacturer: syz [ 218.085514][ T42] usb 2-1: SerialNumber: syz [ 218.093055][ T42] usb 2-1: config 0 descriptor?? [ 218.245267][ T7790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.275288][ T7790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.304521][ T42] usb 2-1: USB disconnect, device number 69 [ 218.362782][ T7794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.373203][ T7794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.687732][ T42] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 218.839209][ T7798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.850037][ T7798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.868277][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.882324][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.907696][ T42] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 218.926096][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.950569][ T42] usb 1-1: config 0 descriptor?? [ 218.995736][ T7805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.011589][ T7805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.026571][ T7805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.035507][ T7805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.257792][ T1211] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 219.388050][ T1211] usb 2-1: device descriptor read/64, error -71 [ 219.457346][ T7809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.466506][ T7809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.590267][ T7811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.659'. [ 219.637795][ T1211] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 219.760564][ T7814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.767724][ T1211] usb 2-1: device descriptor read/64, error -71 [ 219.771834][ T7814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.784904][ T42] usb 1-1: string descriptor 0 read error: -71 [ 219.795148][ T42] uclogic 0003:256C:006D.0009: failed retrieving string descriptor #200: -71 [ 219.804280][ T42] uclogic 0003:256C:006D.0009: failed retrieving pen parameters: -71 [ 219.812516][ T42] uclogic 0003:256C:006D.0009: failed probing pen v2 parameters: -71 [ 219.821371][ T42] uclogic 0003:256C:006D.0009: failed probing parameters: -71 [ 219.830012][ T42] uclogic 0003:256C:006D.0009: probe with driver uclogic failed with error -71 [ 219.844372][ T42] usb 1-1: USB disconnect, device number 59 [ 219.878382][ T1211] usb usb2-port1: attempt power cycle [ 220.217690][ T1211] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 220.252015][ T1211] usb 2-1: device descriptor read/8, error -71 [ 220.274037][ T7821] netlink: 'syz.3.661': attribute type 4 has an invalid length. [ 220.505707][ T1211] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 220.542861][ T1211] usb 2-1: device descriptor read/8, error -71 [ 220.658111][ T1211] usb usb2-port1: unable to enumerate USB device [ 220.697470][ T7829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.907878][ T7829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.912421][ T7826] netlink: 'syz.0.662': attribute type 4 has an invalid length. [ 221.424792][ T7845] FAULT_INJECTION: forcing a failure. [ 221.424792][ T7845] name failslab, interval 1, probability 0, space 0, times 0 [ 221.439361][ T7845] CPU: 0 UID: 0 PID: 7845 Comm: syz.0.666 Tainted: G L syzkaller #0 PREEMPT(full) [ 221.439392][ T7845] Tainted: [L]=SOFTLOCKUP [ 221.439398][ T7845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 221.439408][ T7845] Call Trace: [ 221.439414][ T7845] [ 221.439422][ T7845] dump_stack_lvl+0xe8/0x150 [ 221.439463][ T7845] should_fail_ex+0x412/0x560 [ 221.439492][ T7845] should_failslab+0xa8/0x100 [ 221.439515][ T7845] __kmalloc_cache_noprof+0x88/0x660 [ 221.439536][ T7845] ? vhost_task_create+0x123/0x380 [ 221.439559][ T7845] vhost_task_create+0x123/0x380 [ 221.439578][ T7845] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 221.439604][ T7845] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 221.439630][ T7845] ? __pfx_vhost_task_create+0x10/0x10 [ 221.439652][ T7845] ? __pfx_vhost_task_fn+0x10/0x10 [ 221.439675][ T7845] ? __lock_acquire+0x6b5/0x2cf0 [ 221.439699][ T7845] kvm_mmu_post_init_vm+0x14c/0x300 [ 221.439719][ T7845] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 221.439744][ T7845] ? __mutex_trylock_common+0x158/0x260 [ 221.439769][ T7845] ? __pfx___mutex_trylock_common+0x10/0x10 [ 221.439802][ T7845] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 221.439821][ T7845] ? register_lock_class+0x31/0x2e0 [ 221.439845][ T7845] ? __lock_acquire+0x6b5/0x2cf0 [ 221.439871][ T7845] ? kasan_quarantine_put+0xbb/0x1f0 [ 221.439898][ T7845] ? kvm_vcpu_ioctl+0x280/0xfd0 [ 221.439920][ T7845] ? do_raw_write_lock+0x11d/0x260 [ 221.439949][ T7845] kvm_vcpu_ioctl+0xa62/0xfd0 [ 221.439970][ T7845] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 221.439983][ T7845] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 221.440016][ T7845] ? __fget_files+0x2a/0x420 [ 221.440038][ T7845] ? __fget_files+0x2a/0x420 [ 221.440050][ T7845] ? __fget_files+0x3a0/0x420 [ 221.440063][ T7845] ? __fget_files+0x2a/0x420 [ 221.440078][ T7845] ? bpf_lsm_file_ioctl+0x9/0x20 [ 221.440090][ T7845] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 221.440100][ T7845] __se_sys_ioctl+0xfc/0x170 [ 221.440113][ T7845] do_syscall_64+0x14d/0xf80 [ 221.440122][ T7845] ? trace_irq_disable+0x3b/0x150 [ 221.440136][ T7845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.440146][ T7845] ? clear_bhb_loop+0x40/0x90 [ 221.440158][ T7845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.440168][ T7845] RIP: 0033:0x7fb18fd9c629 [ 221.440180][ T7845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.440191][ T7845] RSP: 002b:00007fb190c83028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 221.440203][ T7845] RAX: ffffffffffffffda RBX: 00007fb190016090 RCX: 00007fb18fd9c629 [ 221.440210][ T7845] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 221.440216][ T7845] RBP: 00007fb190c83090 R08: 0000000000000000 R09: 0000000000000000 [ 221.440222][ T7845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.440228][ T7845] R13: 00007fb190016128 R14: 00007fb190016090 R15: 00007ffdf3d564a8 [ 221.440243][ T7845] [ 221.779842][ T7848] ======================================================= [ 221.779842][ T7848] WARNING: The mand mount option has been deprecated and [ 221.779842][ T7848] and is ignored by this kernel. Remove the mand [ 221.779842][ T7848] option from the mount to silence this warning. [ 221.779842][ T7848] ======================================================= [ 221.829110][ T7848] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 222.014606][ T7853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.027184][ T7853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.228778][ T5810] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 222.290856][ T7857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.302770][ T7857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.377955][ T5810] usb 1-1: Using ep0 maxpacket: 16 [ 222.384922][ T5810] usb 1-1: config 0 has no interfaces? [ 222.392289][ T5810] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 222.401543][ T5810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.409668][ T5810] usb 1-1: Product: syz [ 222.413833][ T5810] usb 1-1: Manufacturer: syz [ 222.418499][ T5810] usb 1-1: SerialNumber: syz [ 222.424803][ T5810] usb 1-1: config 0 descriptor?? [ 222.437701][ T42] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 222.574701][ T7860] input: syz0 as /devices/virtual/input/input26 [ 222.585552][ T7860] FAULT_INJECTION: forcing a failure. [ 222.585552][ T7860] name failslab, interval 1, probability 0, space 0, times 0 [ 222.604683][ T7860] CPU: 0 UID: 0 PID: 7860 Comm: syz.2.673 Tainted: G L syzkaller #0 PREEMPT(full) [ 222.604711][ T7860] Tainted: [L]=SOFTLOCKUP [ 222.604717][ T7860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 222.604727][ T7860] Call Trace: [ 222.604734][ T7860] [ 222.604740][ T7860] dump_stack_lvl+0xe8/0x150 [ 222.604769][ T7860] should_fail_ex+0x412/0x560 [ 222.604798][ T7860] should_failslab+0xa8/0x100 [ 222.604819][ T7860] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 222.604840][ T7860] ? kasprintf+0xe2/0x140 [ 222.604862][ T7860] kvasprintf+0xeb/0x1a0 [ 222.604881][ T7860] ? __pfx_kvasprintf+0x10/0x10 [ 222.604900][ T7860] ? kasan_save_stack+0x4d/0x60 [ 222.604923][ T7860] kasprintf+0xe2/0x140 [ 222.604938][ T7860] ? do_syscall_64+0x14d/0xf80 [ 222.604954][ T7860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.604976][ T7860] ? __pfx_kasprintf+0x10/0x10 [ 222.604994][ T7860] ? __lock_acquire+0x6b5/0x2cf0 [ 222.605020][ T7860] ? __pfx_input_devnode+0x10/0x10 [ 222.605039][ T7860] device_get_devnode+0x16b/0x2a0 [ 222.605067][ T7860] devtmpfs_delete_node+0xf8/0x230 [ 222.605092][ T7860] ? __pfx_devtmpfs_delete_node+0x10/0x10 [ 222.605132][ T7860] ? __pfx_klist_children_put+0x10/0x10 [ 222.605154][ T7860] ? _raw_spin_unlock+0x28/0x50 [ 222.605177][ T7860] ? klist_del+0xc7/0x110 [ 222.605196][ T7860] device_del+0x2ce/0x8f0 [ 222.605224][ T7860] ? __pfx___mutex_lock+0x10/0x10 [ 222.605243][ T7860] ? __pfx_device_del+0x10/0x10 [ 222.605262][ T7860] ? do_raw_spin_lock+0x12b/0x2f0 [ 222.605288][ T7860] cdev_device_del+0x27/0xf0 [ 222.605311][ T7860] evdev_disconnect+0x4c/0xb0 [ 222.605334][ T7860] __input_unregister_device+0x3a3/0x640 [ 222.605359][ T7860] input_unregister_device+0x9b/0x100 [ 222.605381][ T7860] uinput_destroy_device+0x6c1/0x8c0 [ 222.605411][ T7860] uinput_ioctl_handler+0x73c/0x14a0 [ 222.605441][ T7860] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 222.605482][ T7860] ? __fget_files+0x2a/0x420 [ 222.605513][ T7860] ? __fget_files+0x3a0/0x420 [ 222.605538][ T7860] ? bpf_lsm_file_ioctl+0x9/0x20 [ 222.605558][ T7860] ? __pfx_uinput_ioctl+0x10/0x10 [ 222.605580][ T7860] __se_sys_ioctl+0xfc/0x170 [ 222.605601][ T7860] do_syscall_64+0x14d/0xf80 [ 222.605617][ T7860] ? trace_irq_disable+0x3b/0x150 [ 222.605640][ T7860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.605657][ T7860] ? clear_bhb_loop+0x40/0x90 [ 222.605681][ T7860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.605697][ T7860] RIP: 0033:0x7f2bb519c629 [ 222.605714][ T7860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.605729][ T7860] RSP: 002b:00007f2bb60f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 222.605748][ T7860] RAX: ffffffffffffffda RBX: 00007f2bb5415fa0 RCX: 00007f2bb519c629 [ 222.605761][ T7860] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 222.605771][ T7860] RBP: 00007f2bb60f6090 R08: 0000000000000000 R09: 0000000000000000 [ 222.605781][ T7860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.605791][ T7860] R13: 00007f2bb5416038 R14: 00007f2bb5415fa0 R15: 00007ffeef91d9e8 [ 222.605817][ T7860] [ 222.608880][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.719876][ T1211] usb 1-1: USB disconnect, device number 60 [ 222.721176][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.956132][ T42] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 222.968089][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.981939][ T42] usb 2-1: config 0 descriptor?? [ 223.063840][ T7868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.073823][ T7868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.535540][ T7870] input: syz0 as /devices/virtual/input/input27 [ 223.621365][ T7873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.630723][ T7873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.662797][ T7873] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 223.812105][ T42] usb 2-1: string descriptor 0 read error: -71 [ 223.819027][ T42] uclogic 0003:256C:006D.000A: failed retrieving string descriptor #200: -71 [ 223.827963][ T42] uclogic 0003:256C:006D.000A: failed retrieving pen parameters: -71 [ 223.836084][ T42] uclogic 0003:256C:006D.000A: failed probing pen v2 parameters: -71 [ 223.844307][ T42] uclogic 0003:256C:006D.000A: failed probing parameters: -71 [ 223.851896][ T42] uclogic 0003:256C:006D.000A: probe with driver uclogic failed with error -71 [ 223.870276][ T42] usb 2-1: USB disconnect, device number 74 [ 224.250343][ T7876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.261470][ T7876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.607777][ T1211] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 224.760032][ T1211] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 224.767804][ T1211] usb 2-1: can't read configurations, error -61 [ 224.907808][ T1211] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 224.974750][ T7883] kvm: vcpu 0: requested 1792 ns lapic timer period limited to 200000 ns [ 225.119908][ T1211] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 225.127548][ T1211] usb 2-1: can't read configurations, error -61 [ 225.137232][ T1211] usb usb2-port1: attempt power cycle [ 225.367856][ T7886] netlink: 152 bytes leftover after parsing attributes in process `syz.3.682'. [ 225.394961][ T7886] input: syz0 as /devices/virtual/input/input28 [ 225.487800][ T1211] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 225.510250][ T1211] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 225.518727][ T1211] usb 2-1: can't read configurations, error -61 [ 225.667806][ T1211] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 225.690215][ T1211] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 225.698130][ T1211] usb 2-1: can't read configurations, error -61 [ 225.704718][ T1211] usb usb2-port1: unable to enumerate USB device [ 225.876935][ T7895] input: syz0 as /devices/virtual/input/input29 [ 225.931680][ T7897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.941616][ T7897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.249450][ T7899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.258264][ T7899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.484565][ T7901] input: syz0 as /devices/virtual/input/input30 [ 226.549979][ T7903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.571932][ T7903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.828771][ T5921] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 226.871700][ T7907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.880791][ T7907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.991554][ T5921] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 227.001768][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.009877][ T5921] usb 1-1: Product: syz [ 227.014127][ T5921] usb 1-1: Manufacturer: syz [ 227.018748][ T5921] usb 1-1: SerialNumber: syz [ 227.025430][ T5921] usb 1-1: config 0 descriptor?? [ 227.235188][ T5921] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 227.461103][ T7917] FAULT_INJECTION: forcing a failure. [ 227.461103][ T7917] name failslab, interval 1, probability 0, space 0, times 0 [ 227.499057][ T7917] CPU: 0 UID: 0 PID: 7917 Comm: syz.1.695 Tainted: G L syzkaller #0 PREEMPT(full) [ 227.499085][ T7917] Tainted: [L]=SOFTLOCKUP [ 227.499091][ T7917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 227.499101][ T7917] Call Trace: [ 227.499108][ T7917] [ 227.499115][ T7917] dump_stack_lvl+0xe8/0x150 [ 227.499146][ T7917] should_fail_ex+0x412/0x560 [ 227.499176][ T7917] should_failslab+0xa8/0x100 [ 227.499198][ T7917] __kmalloc_cache_noprof+0x88/0x660 [ 227.499219][ T7917] ? device_add+0xbe/0xb70 [ 227.499245][ T7917] device_add+0xbe/0xb70 [ 227.499282][ T7917] input_register_device+0x9d3/0x1160 [ 227.499311][ T7917] uinput_create_device+0x422/0x670 [ 227.499344][ T7917] uinput_ioctl_handler+0x417/0x14a0 [ 227.499375][ T7917] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 227.499410][ T7917] ? __fget_files+0x2a/0x420 [ 227.499434][ T7917] ? __fget_files+0x3a0/0x420 [ 227.499461][ T7917] ? bpf_lsm_file_ioctl+0x9/0x20 [ 227.499484][ T7917] ? __pfx_uinput_ioctl+0x10/0x10 [ 227.499508][ T7917] __se_sys_ioctl+0xfc/0x170 [ 227.499529][ T7917] do_syscall_64+0x14d/0xf80 [ 227.499547][ T7917] ? trace_irq_disable+0x3b/0x150 [ 227.499571][ T7917] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.499589][ T7917] ? clear_bhb_loop+0x40/0x90 [ 227.499614][ T7917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.499632][ T7917] RIP: 0033:0x7f8071b9c629 [ 227.499649][ T7917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.499664][ T7917] RSP: 002b:00007f8072a5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 227.499682][ T7917] RAX: ffffffffffffffda RBX: 00007f8071e15fa0 RCX: 00007f8071b9c629 [ 227.499695][ T7917] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 227.499706][ T7917] RBP: 00007f8072a5f090 R08: 0000000000000000 R09: 0000000000000000 [ 227.499717][ T7917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.499727][ T7917] R13: 00007f8071e16038 R14: 00007f8071e15fa0 R15: 00007ffd0497def8 [ 227.499756][ T7917] [ 227.916247][ T7924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.948163][ T7924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.057359][ T7927] input: syz0 as /devices/virtual/input/input32 [ 228.326870][ T7931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.335864][ T7931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.457693][ T42] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 228.607725][ T42] usb 2-1: Using ep0 maxpacket: 16 [ 228.615958][ T42] usb 2-1: config 0 has no interfaces? [ 228.626930][ T42] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 228.636729][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.645102][ T42] usb 2-1: Product: syz [ 228.649702][ T42] usb 2-1: Manufacturer: syz [ 228.655468][ T42] usb 2-1: SerialNumber: syz [ 228.664828][ T42] usb 2-1: config 0 descriptor?? [ 228.679186][ T7935] FAULT_INJECTION: forcing a failure. [ 228.679186][ T7935] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.692683][ T7935] CPU: 1 UID: 0 PID: 7935 Comm: syz.3.701 Tainted: G L syzkaller #0 PREEMPT(full) [ 228.692714][ T7935] Tainted: [L]=SOFTLOCKUP [ 228.692721][ T7935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 228.692731][ T7935] Call Trace: [ 228.692741][ T7935] [ 228.692750][ T7935] dump_stack_lvl+0xe8/0x150 [ 228.692784][ T7935] should_fail_ex+0x412/0x560 [ 228.692814][ T7935] _copy_from_user+0x2d/0xb0 [ 228.692834][ T7935] kstrtouint_from_user+0xd6/0x180 [ 228.692861][ T7935] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 228.692900][ T7935] proc_fail_nth_write+0x8e/0x210 [ 228.692927][ T7935] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 228.692956][ T7935] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 228.692982][ T7935] vfs_write+0x29a/0xb90 [ 228.693018][ T7935] ? __pfx_vfs_write+0x10/0x10 [ 228.693038][ T7935] ? __fget_files+0x2a/0x420 [ 228.693066][ T7935] ? __fget_files+0x3a0/0x420 [ 228.693089][ T7935] ? __fget_files+0x2a/0x420 [ 228.693120][ T7935] ksys_write+0x150/0x270 [ 228.693141][ T7935] ? __pfx_ksys_write+0x10/0x10 [ 228.693170][ T7935] do_syscall_64+0x14d/0xf80 [ 228.693190][ T7935] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.693208][ T7935] ? clear_bhb_loop+0x40/0x90 [ 228.693230][ T7935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.693248][ T7935] RIP: 0033:0x7f489935cece [ 228.693265][ T7935] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 228.693280][ T7935] RSP: 002b:00007f489a292fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 228.693300][ T7935] RAX: ffffffffffffffda RBX: 00007f489a2936c0 RCX: 00007f489935cece [ 228.693313][ T7935] RDX: 0000000000000001 RSI: 00007f489a2930a0 RDI: 0000000000000008 [ 228.693324][ T7935] RBP: 00007f489a293090 R08: 0000000000000000 R09: 0000000000000000 [ 228.693334][ T7935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.693344][ T7935] R13: 00007f4899616218 R14: 00007f4899616180 R15: 00007fffed549668 [ 228.693373][ T7935] [ 228.919801][ T42] usb 2-1: USB disconnect, device number 79 [ 229.227926][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 229.324351][ T7946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.335256][ T7946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.377383][ T7948] input: syz0 as /devices/virtual/input/input33 [ 229.565360][ T7959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.577222][ T7959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.709031][ T5921] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 229.797789][ T5864] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 229.919515][ T5921] usb 1-1: USB disconnect, device number 61 [ 229.951360][ T5864] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 229.977189][ T5864] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.993560][ T5864] usb 2-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 230.026000][ T5864] usb 2-1: config 0 interface 0 has no altsetting 0 [ 230.036074][ T5864] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 230.045887][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 230.055020][ T5864] usb 2-1: Product: syz [ 230.059253][ T5864] usb 2-1: Manufacturer: syz [ 230.063851][ T5864] usb 2-1: SerialNumber: syz [ 230.075204][ T5864] usb 2-1: config 0 descriptor?? [ 230.081352][ T7966] ptrace attach of "./syz-executor exec"[5827] was attempted by "ԓ7E\x09Ż P9Fd#fmiZjT̜>0(UɈ6MX \x5cnC3*)VVu/kP8\x09Jtޜp柵-\x0a&1~q=]\x22옌C\x0aZAJ.E:4h{WcIW\x1bKaYr-:B/Rc,?_*g{^~4+slL4F1U6\x0d{qLb\x22a7QU'|iE*͕BfuDdEs\x5cVx\x0dϋU9W-8h_0 ?gݗ0%'i!A\x07E:L_\x5c*qr{;F&eѬ#G[JT7bd]s-*@8k§V@a̿ ,(n+YΦ9°N̬&fI\x0c鑒Bఱވֱ\x0bF8@c41lZQRG 8`֗.,Ug4mi3GD5amz*ٷ2Swi\x22:층T\x0a jzQd@1lA@d'Zc\x07[8I# s:HfW_E-L T*С&xP@밭!T߁yۍ\x09k<D$ˉ`UNΰɆu\x09RHɷVԟDO=H\x0750Gp\x093Yjp 5CfV$͑<&\x5cIz0>b!^t_uˀOԂnHHL(ߋR#hu𚌣9HWcٴq\x1bǢ}1%nǣR* [ 230.084982][ T5864] hub 2-1:0.0: bad descriptor, ignoring hub [ 230.193564][ T5864] hub 2-1:0.0: probe with driver hub failed with error -5 [ 230.259664][ T7970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.274445][ T7970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.293237][ T5864] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 230.306646][ T5960] udevd[5960]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 230.339747][ T5864] usb 2-1: USB disconnect, device number 80 [ 230.357892][ T5921] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 230.487721][ T5921] usb 1-1: device descriptor read/64, error -71 [ 230.727744][ T5921] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 230.869093][ T5921] usb 1-1: device descriptor read/64, error -71 [ 230.895211][ T7979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.906185][ T7979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.956003][ T7981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.966494][ T7981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.997958][ T5921] usb usb1-port1: attempt power cycle [ 231.097907][ T5864] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 231.247713][ T5864] usb 2-1: Using ep0 maxpacket: 16 [ 231.254958][ T5864] usb 2-1: config 0 has no interfaces? [ 231.264977][ T5864] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 231.274198][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.283051][ T5864] usb 2-1: Product: syz [ 231.287231][ T5864] usb 2-1: Manufacturer: syz [ 231.292031][ T5864] usb 2-1: SerialNumber: syz [ 231.301686][ T5864] usb 2-1: config 0 descriptor?? [ 231.337850][ T5921] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 231.359081][ T5921] usb 1-1: device descriptor read/8, error -71 [ 231.448015][ T7983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.456835][ T7983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.523903][ T9] usb 2-1: USB disconnect, device number 81 [ 231.597739][ T5921] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 231.619968][ T5921] usb 1-1: device descriptor read/8, error -71 [ 231.659729][ T7988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.670330][ T7988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.728755][ T5921] usb usb1-port1: unable to enumerate USB device [ 232.089368][ T7992] FAULT_INJECTION: forcing a failure. [ 232.089368][ T7992] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.104782][ T7992] CPU: 1 UID: 0 PID: 7992 Comm: syz.2.723 Tainted: G L syzkaller #0 PREEMPT(full) [ 232.104800][ T7992] Tainted: [L]=SOFTLOCKUP [ 232.104804][ T7992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 232.104811][ T7992] Call Trace: [ 232.104816][ T7992] [ 232.104820][ T7992] dump_stack_lvl+0xe8/0x150 [ 232.104840][ T7992] should_fail_ex+0x412/0x560 [ 232.104857][ T7992] _copy_from_iter+0x1d3/0x1670 [ 232.104873][ T7992] ? rcu_is_watching+0x15/0xb0 [ 232.104890][ T7992] ? __pfx__copy_from_iter+0x10/0x10 [ 232.104907][ T7992] ? netlink_sendmsg+0x650/0xb40 [ 232.104930][ T7992] ? skb_put+0x11b/0x210 [ 232.104945][ T7992] netlink_sendmsg+0x6c0/0xb40 [ 232.104962][ T7992] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.104975][ T7992] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 232.104993][ T7992] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.105005][ T7992] sock_sendmsg_nosec+0x18f/0x1d0 [ 232.105018][ T7992] ____sys_sendmsg+0x589/0x8c0 [ 232.105037][ T7992] ? __pfx_____sys_sendmsg+0x10/0x10 [ 232.105055][ T7992] ? import_iovec+0x73/0xa0 [ 232.105066][ T7992] ___sys_sendmsg+0x2a5/0x360 [ 232.105082][ T7992] ? __pfx____sys_sendmsg+0x10/0x10 [ 232.105111][ T7992] ? __fget_files+0x2a/0x420 [ 232.105125][ T7992] ? __fget_files+0x3a0/0x420 [ 232.105143][ T7992] __x64_sys_sendmsg+0x1bd/0x2a0 [ 232.105158][ T7992] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 232.105176][ T7992] ? __pfx_ksys_write+0x10/0x10 [ 232.105191][ T7992] do_syscall_64+0x14d/0xf80 [ 232.105201][ T7992] ? trace_irq_disable+0x3b/0x150 [ 232.105215][ T7992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.105225][ T7992] ? clear_bhb_loop+0x40/0x90 [ 232.105237][ T7992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.105247][ T7992] RIP: 0033:0x7f2bb519c629 [ 232.105257][ T7992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.105265][ T7992] RSP: 002b:00007f2bb60f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 232.105277][ T7992] RAX: ffffffffffffffda RBX: 00007f2bb5415fa0 RCX: 00007f2bb519c629 [ 232.105284][ T7992] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 232.105290][ T7992] RBP: 00007f2bb60f6090 R08: 0000000000000000 R09: 0000000000000000 [ 232.105296][ T7992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.105301][ T7992] R13: 00007f2bb5416038 R14: 00007f2bb5415fa0 R15: 00007ffeef91d9e8 [ 232.105316][ T7992] [ 232.390998][ T7995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.400858][ T7995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.402901][ T7996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.419010][ T7996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.487787][ T9] usb 2-1: new low-speed USB device number 82 using dummy_hcd [ 232.627731][ T9] usb 2-1: device descriptor read/64, error -71 [ 232.867750][ T9] usb 2-1: new low-speed USB device number 83 using dummy_hcd [ 232.953214][ T7998] input: syz0 as /devices/virtual/input/input34 [ 232.973675][ T7998] FAULT_INJECTION: forcing a failure. [ 232.973675][ T7998] name failslab, interval 1, probability 0, space 0, times 0 [ 232.988878][ T7998] CPU: 0 UID: 0 PID: 7998 Comm: syz.3.727 Tainted: G L syzkaller #0 PREEMPT(full) [ 232.988907][ T7998] Tainted: [L]=SOFTLOCKUP [ 232.988914][ T7998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 232.988924][ T7998] Call Trace: [ 232.988931][ T7998] [ 232.988938][ T7998] dump_stack_lvl+0xe8/0x150 [ 232.988967][ T7998] should_fail_ex+0x412/0x560 [ 232.988997][ T7998] should_failslab+0xa8/0x100 [ 232.989019][ T7998] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 232.989040][ T7998] ? kasprintf+0xe2/0x140 [ 232.989063][ T7998] kvasprintf+0xeb/0x1a0 [ 232.989083][ T7998] ? __pfx_kvasprintf+0x10/0x10 [ 232.989105][ T7998] ? kasan_save_stack+0x4d/0x60 [ 232.989129][ T7998] kasprintf+0xe2/0x140 [ 232.989144][ T7998] ? do_syscall_64+0x14d/0xf80 [ 232.989160][ T7998] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.989183][ T7998] ? __pfx_kasprintf+0x10/0x10 [ 232.989202][ T7998] ? __lock_acquire+0x6b5/0x2cf0 [ 232.989227][ T7998] ? __pfx_input_devnode+0x10/0x10 [ 232.989247][ T7998] device_get_devnode+0x16b/0x2a0 [ 232.989275][ T7998] devtmpfs_delete_node+0xf8/0x230 [ 232.989303][ T7998] ? __pfx_devtmpfs_delete_node+0x10/0x10 [ 232.989344][ T7998] ? __pfx_klist_children_put+0x10/0x10 [ 232.989367][ T7998] ? _raw_spin_unlock+0x28/0x50 [ 232.989390][ T7998] ? klist_del+0xc7/0x110 [ 232.989410][ T7998] device_del+0x2ce/0x8f0 [ 232.989437][ T7998] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 232.989462][ T7998] ? __pfx_device_del+0x10/0x10 [ 232.989484][ T7998] ? do_raw_spin_lock+0x12b/0x2f0 [ 232.989508][ T7998] cdev_device_del+0x27/0xf0 [ 232.989529][ T7998] mousedev_disconnect+0x203/0x2f0 [ 232.989553][ T7998] __input_unregister_device+0x3a3/0x640 [ 232.989578][ T7998] input_unregister_device+0x9b/0x100 [ 232.989609][ T7998] uinput_destroy_device+0x6c1/0x8c0 [ 232.989639][ T7998] uinput_ioctl_handler+0x73c/0x14a0 [ 232.989670][ T7998] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 232.989704][ T7998] ? __fget_files+0x2a/0x420 [ 232.989727][ T7998] ? __fget_files+0x3a0/0x420 [ 232.989755][ T7998] ? bpf_lsm_file_ioctl+0x9/0x20 [ 232.989776][ T7998] ? __pfx_uinput_ioctl+0x10/0x10 [ 232.989800][ T7998] __se_sys_ioctl+0xfc/0x170 [ 232.989819][ T7998] do_syscall_64+0x14d/0xf80 [ 232.989835][ T7998] ? trace_irq_disable+0x3b/0x150 [ 232.989865][ T7998] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.989883][ T7998] ? clear_bhb_loop+0x40/0x90 [ 232.989905][ T7998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.989922][ T7998] RIP: 0033:0x7f489939c629 [ 232.989941][ T7998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.989956][ T7998] RSP: 002b:00007f489a2d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 232.989975][ T7998] RAX: ffffffffffffffda RBX: 00007f4899615fa0 RCX: 00007f489939c629 [ 232.989988][ T7998] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 232.989998][ T7998] RBP: 00007f489a2d5090 R08: 0000000000000000 R09: 0000000000000000 [ 232.990009][ T7998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.990019][ T7998] R13: 00007f4899616038 R14: 00007f4899615fa0 R15: 00007fffed549668 [ 232.990046][ T7998] [ 233.343588][ T9] usb 2-1: device descriptor read/64, error -71 [ 233.386243][ T8003] openvswitch: netlink: Multiple metadata blocks provided [ 233.424744][ T8002] openvswitch: netlink: Multiple metadata blocks provided [ 233.425041][ T8004] netlink: 48 bytes leftover after parsing attributes in process `syz.2.728'. [ 233.445783][ T8003] netlink: 48 bytes leftover after parsing attributes in process `syz.2.728'. [ 233.459131][ T9] usb usb2-port1: attempt power cycle [ 233.576755][ T8008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.585865][ T8008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.727706][ T5864] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 233.797815][ T9] usb 2-1: new low-speed USB device number 84 using dummy_hcd [ 233.828274][ T9] usb 2-1: device descriptor read/8, error -71 [ 233.857693][ T5864] usb 1-1: device descriptor read/64, error -71 [ 234.074043][ T8011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.082554][ T9] usb 2-1: new low-speed USB device number 85 using dummy_hcd [ 234.085430][ T8011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.100739][ T5864] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 234.109932][ T9] usb 2-1: device descriptor read/8, error -71 [ 234.218745][ T9] usb usb2-port1: unable to enumerate USB device [ 234.237673][ T5864] usb 1-1: device descriptor read/64, error -71 [ 234.348410][ T5864] usb usb1-port1: attempt power cycle [ 234.646929][ T8013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.656183][ T8013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.688010][ T5864] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 234.708150][ T5864] usb 1-1: device descriptor read/8, error -71 [ 234.957663][ T5864] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 234.978119][ T5864] usb 1-1: device descriptor read/8, error -71 [ 235.089155][ T5864] usb usb1-port1: unable to enumerate USB device [ 235.222585][ T8019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.233475][ T8019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.477833][ T10] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 235.629310][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.640343][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.650357][ T10] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 235.659706][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.671033][ T10] usb 2-1: config 0 descriptor?? [ 236.113512][ T8034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.123972][ T8034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.620024][ T8038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.631846][ T8038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.699071][ T10] uclogic 0003:256C:006D.000B: failed retrieving string descriptor #200: -71 [ 236.711487][ T10] uclogic 0003:256C:006D.000B: failed retrieving pen parameters: -71 [ 236.719942][ T10] uclogic 0003:256C:006D.000B: failed probing pen v2 parameters: -71 [ 236.731053][ T10] uclogic 0003:256C:006D.000B: failed probing parameters: -71 [ 236.740315][ T10] uclogic 0003:256C:006D.000B: probe with driver uclogic failed with error -71 [ 236.758097][ T42] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 236.764164][ T10] usb 2-1: USB disconnect, device number 86 [ 236.927802][ T42] usb 1-1: Using ep0 maxpacket: 16 [ 236.934702][ T42] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.946016][ T42] usb 1-1: config 0 interface 0 has no altsetting 0 [ 236.952784][ T42] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 236.962814][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.974483][ T42] usb 1-1: config 0 descriptor?? [ 237.192377][ T8036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.220118][ T8053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.230947][ T8036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.241793][ T8055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.252430][ T8053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.263855][ T8055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.527700][ T10] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 237.687767][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 237.695820][ T10] usb 2-1: config 0 has no interfaces? [ 237.703600][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 237.713601][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.721854][ T10] usb 2-1: Product: syz [ 237.726042][ T10] usb 2-1: Manufacturer: syz [ 237.730765][ T10] usb 2-1: SerialNumber: syz [ 237.737784][ T10] usb 2-1: config 0 descriptor?? [ 237.853299][ T42] usbhid 1-1:0.0: can't add hid device: -71 [ 237.861804][ T8062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.871137][ T42] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 237.879308][ T8062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.890299][ T42] usb 1-1: USB disconnect, device number 70 [ 237.946506][ T10] usb 2-1: USB disconnect, device number 87 [ 238.426355][ T8066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.439702][ T8066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.470510][ T8067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.479831][ T8067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.797684][ T5864] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 238.957677][ T5864] usb 1-1: Using ep0 maxpacket: 32 [ 238.966283][ T5864] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 238.975511][ T5864] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.983680][ T5864] usb 1-1: Product: syz [ 238.988381][ T5864] usb 1-1: Manufacturer: syz [ 238.993018][ T5864] usb 1-1: SerialNumber: syz [ 239.001073][ T5864] usb 1-1: config 0 descriptor?? [ 239.117655][ T8079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.126538][ T8079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.211000][ T5864] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 071 [ 239.407674][ T10] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 239.427044][ T5864] usb 1-1: USB disconnect, device number 71 [ 239.559970][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.571012][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.581945][ T10] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 239.591681][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.601519][ T10] usb 2-1: config 0 descriptor?? [ 239.674633][ T8083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.685162][ T8083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.328456][ T8093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.337729][ T8093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.472635][ T8095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.485535][ T8095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.617202][ T10] uclogic 0003:256C:006D.000C: failed retrieving string descriptor #200: -71 [ 240.631399][ T10] uclogic 0003:256C:006D.000C: failed retrieving pen parameters: -71 [ 240.639768][ T10] uclogic 0003:256C:006D.000C: failed probing pen v2 parameters: -71 [ 240.648011][ T10] uclogic 0003:256C:006D.000C: failed probing parameters: -71 [ 240.655517][ T10] uclogic 0003:256C:006D.000C: probe with driver uclogic failed with error -71 [ 240.670079][ T10] usb 2-1: USB disconnect, device number 88 [ 240.817780][ T42] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 240.980943][ T42] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 240.992685][ T42] usb 1-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 240.999045][ T8107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.009377][ T42] usb 1-1: config 0 interface 0 has no altsetting 0 [ 241.015964][ T8107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.024037][ T42] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 241.040463][ T42] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 241.049288][ T42] usb 1-1: Product: syz [ 241.053558][ T42] usb 1-1: Manufacturer: syz [ 241.058270][ T42] usb 1-1: SerialNumber: syz [ 241.077159][ T42] usb 1-1: config 0 descriptor?? [ 241.087557][ T42] hub 1-1:0.0: bad descriptor, ignoring hub [ 241.094530][ T8109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.097065][ T42] hub 1-1:0.0: probe with driver hub failed with error -5 [ 241.107811][ T8109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.173813][ T42] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 241.188560][ T5960] udevd[5960]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 241.308155][ T8114] netlink: 'syz.1.778': attribute type 1 has an invalid length. [ 241.408169][ T42] usb 1-1: USB disconnect, device number 72 [ 241.568859][ T8118] netlink: 36 bytes leftover after parsing attributes in process `syz.3.779'. [ 241.617879][ T10] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 241.768046][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 241.779013][ T10] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 251, changing to 11 [ 241.793556][ T10] usb 2-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 241.822425][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 241.834330][ T8129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.843365][ T8129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.860793][ T8129] netlink: 'syz.3.783': attribute type 21 has an invalid length. [ 241.868797][ T8129] netlink: 'syz.3.783': attribute type 1 has an invalid length. [ 241.879501][ T8129] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.891798][ T8129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.902206][ T8129] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.912284][ T8129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.922726][ T10] usb 2-1: New USB device found, idVendor=1477, idProduct=1022, bcdDevice= 0.40 [ 241.938109][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.946181][ T10] usb 2-1: Product: ࠚ [ 241.951617][ T10] usb 2-1: Manufacturer: Ꭰ径ꑝᱜ㎵魲쨼臾劀⭥茆訂淪覘鎗᪹觍펨蚊鬉獵亼묫ᛔ璪蝌咽맱䶺燼Ꝉ攀 [ 241.965918][ T10] usb 2-1: SerialNumber: syz [ 242.177815][ T1226] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 242.337675][ T1226] usb 1-1: Using ep0 maxpacket: 16 [ 242.344615][ T1226] usb 1-1: config 0 has no interfaces? [ 242.352405][ T1226] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 242.361570][ T1226] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.370386][ T1226] usb 1-1: Product: syz [ 242.374600][ T1226] usb 1-1: Manufacturer: syz [ 242.379525][ T1226] usb 1-1: SerialNumber: syz [ 242.386239][ T1226] usb 1-1: config 0 descriptor?? [ 242.591382][ T8133] tipc: Enabling of bearer rejected, media not registered [ 242.600209][ T5829] Bluetooth: hci0: unexpected subevent 0x0e length: 248 > 15 [ 242.604042][ T1226] usb 1-1: USB disconnect, device number 73 [ 242.607686][ T5829] Bluetooth: hci0: Unable to find connection for dst 01:4e:d1:02:00:00 sid 0x00 [ 242.779402][ T8137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.794614][ T8137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.818536][ T8139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.827361][ T8139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.223274][ T8141] netlink: 1335 bytes leftover after parsing attributes in process `syz.0.788'. [ 243.375023][ T8145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.389433][ T8145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.428880][ T10] usbhid 2-1:1.0: can't add hid device: -71 [ 243.434938][ T10] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 243.461753][ T10] usb 2-1: USB disconnect, device number 89 [ 243.786283][ T8159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.797819][ T42] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 243.803681][ T8159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.820007][ T5829] Bluetooth: hci3: unexpected subevent 0x0c length: 248 > 5 [ 243.969908][ T42] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 243.979548][ T42] usb 1-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 243.990953][ T42] usb 1-1: config 0 interface 0 has no altsetting 0 [ 243.999604][ T42] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 244.008704][ T42] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 244.016879][ T42] usb 1-1: Product: syz [ 244.021252][ T42] usb 1-1: Manufacturer: syz [ 244.027648][ T42] usb 1-1: SerialNumber: syz [ 244.035063][ T42] usb 1-1: config 0 descriptor?? [ 244.043577][ T42] hub 1-1:0.0: bad descriptor, ignoring hub [ 244.049569][ T42] hub 1-1:0.0: probe with driver hub failed with error -5 [ 244.102518][ T42] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 244.138191][ T5960] udevd[5960]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 244.349035][ T5864] usb 1-1: USB disconnect, device number 74 [ 244.364106][ T8167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.374029][ T8167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.438003][ T42] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 244.589577][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.600567][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.610424][ T42] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 244.619540][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.629937][ T42] usb 2-1: config 0 descriptor?? [ 245.014953][ T8176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.024225][ T8176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.035060][ T1226] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 245.208562][ T1226] usb 1-1: Using ep0 maxpacket: 32 [ 245.216549][ T1226] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 245.226655][ T1226] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.237255][ T1226] usb 1-1: config 0 descriptor?? [ 245.450252][ T1226] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 245.460784][ T1226] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 245.471162][ T1226] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 245.479527][ T1226] usb 1-1: media controller created [ 245.498051][ T1226] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 245.649459][ T42] uclogic 0003:256C:006D.000D: failed retrieving string descriptor #200: -71 [ 245.659117][ T42] uclogic 0003:256C:006D.000D: failed retrieving pen parameters: -71 [ 245.667219][ T42] uclogic 0003:256C:006D.000D: failed probing pen v2 parameters: -71 [ 245.675703][ T42] uclogic 0003:256C:006D.000D: failed probing parameters: -71 [ 245.683344][ T42] uclogic 0003:256C:006D.000D: probe with driver uclogic failed with error -71 [ 245.696473][ T42] usb 2-1: USB disconnect, device number 90 [ 245.903839][ T8180] kvm: pic: non byte write [ 245.909874][ T8180] FAULT_INJECTION: forcing a failure. [ 245.909874][ T8180] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.923334][ T8180] CPU: 1 UID: 0 PID: 8180 Comm: syz.2.803 Tainted: G L syzkaller #0 PREEMPT(full) [ 245.923357][ T8180] Tainted: [L]=SOFTLOCKUP [ 245.923362][ T8180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 245.923383][ T8180] Call Trace: [ 245.923391][ T8180] [ 245.923398][ T8180] dump_stack_lvl+0xe8/0x150 [ 245.923425][ T8180] should_fail_ex+0x412/0x560 [ 245.923451][ T8180] _copy_to_user+0x31/0xb0 [ 245.923470][ T8180] simple_read_from_buffer+0xe1/0x170 [ 245.923496][ T8180] proc_fail_nth_read+0x1bb/0x230 [ 245.923522][ T8180] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 245.923545][ T8180] ? rw_verify_area+0x2a6/0x4d0 [ 245.923566][ T8180] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 245.923589][ T8180] vfs_read+0x20c/0xa70 [ 245.923604][ T8180] ? fdget_pos+0x246/0x320 [ 245.923654][ T8180] ? __pfx___mutex_lock+0x10/0x10 [ 245.923673][ T8180] ? __pfx_vfs_read+0x10/0x10 [ 245.923691][ T8180] ? __fget_files+0x2a/0x420 [ 245.923718][ T8180] ? __fget_files+0x3a0/0x420 [ 245.923743][ T8180] ? __fget_files+0x2a/0x420 [ 245.923771][ T8180] ksys_read+0x150/0x270 [ 245.923791][ T8180] ? __pfx_ksys_read+0x10/0x10 [ 245.923818][ T8180] do_syscall_64+0x14d/0xf80 [ 245.923834][ T8180] ? trace_irq_disable+0x3b/0x150 [ 245.923856][ T8180] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.923877][ T8180] ? clear_bhb_loop+0x40/0x90 [ 245.923899][ T8180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.923918][ T8180] RIP: 0033:0x7f2bb515cece [ 245.923936][ T8180] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 245.923952][ T8180] RSP: 002b:00007f2bb60f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 245.923971][ T8180] RAX: ffffffffffffffda RBX: 00007f2bb60f66c0 RCX: 00007f2bb515cece [ 245.923984][ T8180] RDX: 000000000000000f RSI: 00007f2bb60f60a0 RDI: 0000000000000006 [ 245.923996][ T8180] RBP: 00007f2bb60f6090 R08: 0000000000000000 R09: 0000000000000000 [ 245.924007][ T8180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.924017][ T8180] R13: 00007f2bb5416038 R14: 00007f2bb5415fa0 R15: 00007ffeef91d9e8 [ 245.924045][ T8180] [ 246.317422][ T8188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.327060][ T8188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.359730][ T8188] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 246.439006][ T10] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 246.487699][ T1226] stb0899_attach: Driver disabled by Kconfig [ 246.493734][ T1226] az6027: no front-end attached [ 246.493734][ T1226] [ 246.503602][ T1226] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 246.512166][ T1226] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input35 [ 246.529433][ T1226] dvb-usb: schedule remote query interval to 400 msecs. [ 246.536414][ T1226] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 246.597806][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 246.606012][ T10] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 246.615230][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.624298][ T10] usb 2-1: Product: syz [ 246.628536][ T10] usb 2-1: Manufacturer: syz [ 246.633134][ T10] usb 2-1: SerialNumber: syz [ 246.639645][ T10] usb 2-1: config 0 descriptor?? [ 246.726456][ T1226] usb 1-1: USB disconnect, device number 75 [ 246.762473][ T1226] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 246.851221][ T10] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 091 [ 247.052599][ T42] usb 2-1: USB disconnect, device number 91 [ 247.058124][ T8194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.070681][ T8194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.360865][ T8198] FAULT_INJECTION: forcing a failure. [ 247.360865][ T8198] name failslab, interval 1, probability 0, space 0, times 0 [ 247.373546][ T8198] CPU: 0 UID: 0 PID: 8198 Comm: syz.3.810 Tainted: G L syzkaller #0 PREEMPT(full) [ 247.373573][ T8198] Tainted: [L]=SOFTLOCKUP [ 247.373579][ T8198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 247.373589][ T8198] Call Trace: [ 247.373597][ T8198] [ 247.373602][ T8198] dump_stack_lvl+0xe8/0x150 [ 247.373621][ T8198] should_fail_ex+0x412/0x560 [ 247.373638][ T8198] should_failslab+0xa8/0x100 [ 247.373651][ T8198] __kmalloc_cache_noprof+0x88/0x660 [ 247.373664][ T8198] ? vhost_task_create+0x123/0x380 [ 247.373677][ T8198] vhost_task_create+0x123/0x380 [ 247.373687][ T8198] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 247.373716][ T8198] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 247.373733][ T8198] ? __pfx_vhost_task_create+0x10/0x10 [ 247.373746][ T8198] ? __pfx_vhost_task_fn+0x10/0x10 [ 247.373760][ T8198] ? __lock_acquire+0x6b5/0x2cf0 [ 247.373782][ T8198] kvm_mmu_post_init_vm+0x14c/0x300 [ 247.373794][ T8198] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 247.373815][ T8198] ? __mutex_trylock_common+0x158/0x260 [ 247.373832][ T8198] ? __pfx___mutex_trylock_common+0x10/0x10 [ 247.373847][ T8198] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 247.373858][ T8198] ? register_lock_class+0x31/0x2e0 [ 247.373871][ T8198] ? __lock_acquire+0x6b5/0x2cf0 [ 247.373887][ T8198] ? kasan_quarantine_put+0xbb/0x1f0 [ 247.373904][ T8198] ? kvm_vcpu_ioctl+0x280/0xfd0 [ 247.373918][ T8198] ? do_raw_write_lock+0x11d/0x260 [ 247.373936][ T8198] kvm_vcpu_ioctl+0xa62/0xfd0 [ 247.373948][ T8198] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 247.373963][ T8198] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 247.373983][ T8198] ? __fget_files+0x2a/0x420 [ 247.374007][ T8198] ? __fget_files+0x2a/0x420 [ 247.374035][ T8198] ? __fget_files+0x3a0/0x420 [ 247.374060][ T8198] ? __fget_files+0x2a/0x420 [ 247.374086][ T8198] ? bpf_lsm_file_ioctl+0x9/0x20 [ 247.374107][ T8198] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 247.374117][ T8198] __se_sys_ioctl+0xfc/0x170 [ 247.374129][ T8198] do_syscall_64+0x14d/0xf80 [ 247.374139][ T8198] ? trace_irq_disable+0x3b/0x150 [ 247.374153][ T8198] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.374163][ T8198] ? clear_bhb_loop+0x40/0x90 [ 247.374175][ T8198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.374185][ T8198] RIP: 0033:0x7f489939c629 [ 247.374197][ T8198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.374205][ T8198] RSP: 002b:00007f489a2d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 247.374222][ T8198] RAX: ffffffffffffffda RBX: 00007f4899615fa0 RCX: 00007f489939c629 [ 247.374233][ T8198] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 247.374244][ T8198] RBP: 00007f489a2d5090 R08: 0000000000000000 R09: 0000000000000000 [ 247.374253][ T8198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.374262][ T8198] R13: 00007f4899616038 R14: 00007f4899615fa0 R15: 00007fffed549668 [ 247.374290][ T8198] [ 247.827676][ T1226] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 247.831093][ T8203] kvm: pic: non byte write [ 247.977753][ T1226] usb 1-1: Using ep0 maxpacket: 8 [ 247.991229][ T1226] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.001617][ T1226] usb 1-1: config 0 has no interfaces? [ 248.038419][ T1226] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 248.049193][ T1226] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.061036][ T1226] usb 1-1: Product: syz [ 248.065573][ T1226] usb 1-1: Manufacturer: syz [ 248.077901][ T8211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.089325][ T8213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.090509][ T8211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.097978][ T1226] usb 1-1: SerialNumber: syz [ 248.113905][ T8213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.148572][ T1226] usb 1-1: config 0 descriptor?? [ 248.417732][ T1226] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 248.567689][ T1226] usb 2-1: Using ep0 maxpacket: 32 [ 248.574916][ T1226] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 248.584156][ T1226] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.594051][ T1226] usb 2-1: config 0 descriptor?? [ 248.731392][ T8223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.740237][ T8223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.804895][ T1226] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 248.813631][ T1226] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 248.823668][ T1226] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 248.830864][ T1226] usb 2-1: media controller created [ 248.843714][ T1226] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 249.277261][ T8226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.287883][ T8226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.403761][ T8228] netlink: 'syz.2.821': attribute type 4 has an invalid length. [ 249.411558][ T8228] netlink: 17 bytes leftover after parsing attributes in process `syz.2.821'. [ 249.837659][ T1226] stb0899_attach: Driver disabled by Kconfig [ 249.843695][ T1226] az6027: no front-end attached [ 249.843695][ T1226] [ 249.851247][ T1226] az6027: usb out operation failed. (-71) [ 249.857209][ T1226] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 249.865880][ T1226] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input36 [ 249.881291][ T1226] dvb-usb: schedule remote query interval to 400 msecs. [ 249.888490][ T1226] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 249.903249][ T1226] usb 2-1: USB disconnect, device number 92 [ 249.939369][ T1226] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 250.286622][ T5864] usb 1-1: USB disconnect, device number 76 [ 250.667680][ T5864] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 250.748743][ T1226] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 250.821413][ T5864] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 250.829786][ T5864] usb 1-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 250.840767][ T5864] usb 1-1: config 0 interface 0 has no altsetting 0 [ 250.849481][ T5864] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 250.858716][ T5864] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 250.866881][ T5864] usb 1-1: Product: syz [ 250.871194][ T5864] usb 1-1: Manufacturer: syz [ 250.875793][ T5864] usb 1-1: SerialNumber: syz [ 250.882576][ T5864] usb 1-1: config 0 descriptor?? [ 250.889584][ T5864] hub 1-1:0.0: bad descriptor, ignoring hub [ 250.895535][ T5864] hub 1-1:0.0: probe with driver hub failed with error -5 [ 250.908136][ T1226] usb 2-1: Using ep0 maxpacket: 32 [ 250.915472][ T1226] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 250.927832][ T1226] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 250.940064][ T1226] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 250.951607][ T1226] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 250.968448][ T1226] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 250.978478][ T5864] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 250.978510][ T1226] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.000000][ T1226] usb 2-1: Product: syz [ 251.004217][ T1226] usb 2-1: Manufacturer: syz [ 251.009176][ T1226] usb 2-1: SerialNumber: syz [ 251.027155][ T5960] udevd[5960]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 251.027910][ C0] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 251.057041][ T1226] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input37 [ 251.125810][ T8239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.140738][ T8239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.229261][ T1211] usb 1-1: USB disconnect, device number 77 [ 251.237948][ T1226] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 251.248679][ T1226] (id 0x00) [ 251.297666][ T1226] rc_core: IR keymap rc-imon-pad not found [ 251.303524][ T1226] Registered IR keymap rc-empty [ 251.308897][ T1226] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 251.320224][ T1226] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 251.449747][ T1226] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 251.461674][ T1226] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input38 [ 251.475531][ T1226] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:93> initialized [ 251.628974][ T5864] usb 2-1: USB disconnect, device number 93 [ 251.947671][ T1226] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 252.117847][ T1226] usb 1-1: Using ep0 maxpacket: 16 [ 252.127211][ T1226] usb 1-1: config 0 has no interfaces? [ 252.135121][ T1226] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 252.144596][ T1226] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.154174][ T1226] usb 1-1: Product: syz [ 252.158528][ T1226] usb 1-1: Manufacturer: syz [ 252.163264][ T1226] usb 1-1: SerialNumber: syz [ 252.172076][ T1226] usb 1-1: config 0 descriptor?? [ 252.260408][ T8246] FAULT_INJECTION: forcing a failure. [ 252.260408][ T8246] name fail_futex, interval 1, probability 0, space 0, times 1 [ 252.273429][ T8246] CPU: 0 UID: 0 PID: 8246 Comm: syz.1.828 Tainted: G L syzkaller #0 PREEMPT(full) [ 252.273458][ T8246] Tainted: [L]=SOFTLOCKUP [ 252.273465][ T8246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 252.273475][ T8246] Call Trace: [ 252.273483][ T8246] [ 252.273488][ T8246] dump_stack_lvl+0xe8/0x150 [ 252.273506][ T8246] should_fail_ex+0x412/0x560 [ 252.273526][ T8246] get_futex_key+0x1ac/0x1690 [ 252.273544][ T8246] ? __pfx_get_futex_key+0x10/0x10 [ 252.273553][ T8246] ? futex_private_hash+0xb4/0x390 [ 252.273564][ T8246] ? futex_private_hash+0xb4/0x390 [ 252.273579][ T8246] futex_wait_multiple_setup+0x103/0x6d0 [ 252.273601][ T8246] futex_wait_multiple+0xaf/0x3a0 [ 252.273619][ T8246] __se_sys_futex_waitv+0x206/0x2b0 [ 252.273634][ T8246] ? __pfx___se_sys_futex_waitv+0x10/0x10 [ 252.273653][ T8246] ? __x64_sys_futex_waitv+0x20/0xc0 [ 252.273666][ T8246] do_syscall_64+0x14d/0xf80 [ 252.273677][ T8246] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.273687][ T8246] ? clear_bhb_loop+0x40/0x90 [ 252.273700][ T8246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.273710][ T8246] RIP: 0033:0x7f8071b9c629 [ 252.273721][ T8246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.273729][ T8246] RSP: 002b:00007f8072a3e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 252.273740][ T8246] RAX: ffffffffffffffda RBX: 00007f8071e16090 RCX: 00007f8071b9c629 [ 252.273747][ T8246] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000001080 [ 252.273753][ T8246] RBP: 00007f8072a3e090 R08: 0000000000000001 R09: 0000000000000000 [ 252.273760][ T8246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.273765][ T8246] R13: 00007f8071e16128 R14: 00007f8071e16090 R15: 00007ffd0497def8 [ 252.273780][ T8246] [ 252.386765][ T5864] usb 1-1: USB disconnect, device number 78 [ 253.012494][ T8250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.028102][ T8250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.057767][ T9] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 253.135659][ T8252] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 253.208663][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 253.215386][ T9] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 253.229099][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 253.235752][ T9] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 253.245148][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.255912][ T9] usb 2-1: config 0 descriptor?? [ 253.576774][ T5864] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 253.587359][ T8259] netlink: 'syz.2.833': attribute type 12 has an invalid length. [ 253.595422][ T8259] netlink: 132 bytes leftover after parsing attributes in process `syz.2.833'. [ 253.635818][ T8261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.644706][ T8261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.737657][ T5864] usb 1-1: Using ep0 maxpacket: 32 [ 253.744624][ T5864] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 253.754018][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.764407][ T5864] usb 1-1: config 0 descriptor?? [ 253.982729][ T5864] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 253.995887][ T5864] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 254.012443][ T5864] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 254.019713][ T5864] usb 1-1: media controller created [ 254.036098][ T5864] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 254.176596][ T8265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.187485][ T8265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.294198][ T8271] netlink: 'syz.2.837': attribute type 25 has an invalid length. [ 254.302657][ T8271] netlink: 'syz.2.837': attribute type 28 has an invalid length. [ 254.356189][ T8273] FAULT_INJECTION: forcing a failure. [ 254.356189][ T8273] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.369987][ T8273] CPU: 1 UID: 0 PID: 8273 Comm: syz.2.838 Tainted: G L syzkaller #0 PREEMPT(full) [ 254.370007][ T8273] Tainted: [L]=SOFTLOCKUP [ 254.370014][ T8273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 254.370025][ T8273] Call Trace: [ 254.370032][ T8273] [ 254.370039][ T8273] dump_stack_lvl+0xe8/0x150 [ 254.370072][ T8273] should_fail_ex+0x412/0x560 [ 254.370103][ T8273] _copy_from_user+0x2d/0xb0 [ 254.370115][ T8273] kstrtouint_from_user+0xd6/0x180 [ 254.370129][ T8273] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 254.370150][ T8273] proc_fail_nth_write+0x8e/0x210 [ 254.370174][ T8273] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 254.370203][ T8273] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 254.370229][ T8273] vfs_write+0x29a/0xb90 [ 254.370250][ T8273] ? __pfx_vfs_write+0x10/0x10 [ 254.370261][ T8273] ? __fget_files+0x2a/0x420 [ 254.370277][ T8273] ? __fget_files+0x3a0/0x420 [ 254.370289][ T8273] ? __fget_files+0x2a/0x420 [ 254.370308][ T8273] ksys_write+0x150/0x270 [ 254.370329][ T8273] ? __pfx_ksys_write+0x10/0x10 [ 254.370358][ T8273] do_syscall_64+0x14d/0xf80 [ 254.370376][ T8273] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.370393][ T8273] ? clear_bhb_loop+0x40/0x90 [ 254.370405][ T8273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.370415][ T8273] RIP: 0033:0x7f2bb515cece [ 254.370426][ T8273] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 254.370435][ T8273] RSP: 002b:00007f2bb60f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 254.370446][ T8273] RAX: ffffffffffffffda RBX: 00007f2bb60f66c0 RCX: 00007f2bb515cece [ 254.370454][ T8273] RDX: 0000000000000001 RSI: 00007f2bb60f60a0 RDI: 0000000000000003 [ 254.370465][ T8273] RBP: 00007f2bb60f6090 R08: 0000000000000000 R09: 0000000000000000 [ 254.370476][ T8273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.370487][ T8273] R13: 00007f2bb5416038 R14: 00007f2bb5415fa0 R15: 00007ffeef91d9e8 [ 254.370516][ T8273] [ 254.753228][ T8282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.762241][ T8282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.929583][ T8284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.940488][ T8284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.207638][ T5864] stb0899_attach: Driver disabled by Kconfig [ 255.213772][ T5864] az6027: no front-end attached [ 255.213772][ T5864] [ 255.222332][ T5864] az6027: usb out operation failed. (-71) [ 255.228789][ T5864] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 255.239308][ T5864] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input39 [ 255.255676][ T5864] dvb-usb: schedule remote query interval to 400 msecs. [ 255.264995][ T5864] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 255.279486][ T5864] usb 1-1: USB disconnect, device number 79 [ 255.341088][ T5864] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 255.363009][ T8286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.373196][ T8286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.491202][ T8289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.502021][ T8289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.851906][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 255.858285][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 255.870919][ T30] INFO: task kworker/1:2:797 blocked for more than 143 seconds. [ 255.882097][ T9] usb 2-1: USB disconnect, device number 94 [ 255.884430][ T8293] base_sock_release(ffff888077655a40) sk=ffff888029a56000 [ 255.891886][ T30] Tainted: G L syzkaller #0 [ 255.904126][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 255.915364][ T30] task:kworker/1:2 state:D stack:21576 pid:797 tgid:797 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 255.927583][ T30] Workqueue: usb_hub_wq hub_event [ 255.932735][ T30] Call Trace: [ 255.936020][ T30] [ 255.950367][ T30] __schedule+0x15dd/0x5300 [ 255.955345][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 255.960432][ T30] ? __pfx___schedule+0x10/0x10 [ 255.965318][ T30] ? schedule+0x90/0x360 [ 255.970367][ T30] schedule+0x164/0x360 [ 255.975614][ T30] schedule_timeout+0xc3/0x2c0 [ 255.980827][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 255.985884][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 255.986852][ T8297] binder_alloc: 8296: binder_alloc_buf, no vma [ 255.991534][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 256.002950][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 256.008450][ T30] ? wait_for_completion+0x274/0x5e0 [ 256.013763][ T30] wait_for_completion+0x2cc/0x5e0 [ 256.020507][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 256.026179][ T30] i2c_del_adapter+0x5c0/0x790 [ 256.031012][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 256.036229][ T30] ? __pfx_i2c_del_adapter+0x10/0x10 [ 256.042734][ T30] ? dvb_usbv2_exit+0x935/0xb60 [ 256.047652][ T30] dvb_usbv2_probe+0x4c3/0x3d40 [ 256.052536][ T30] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 256.058418][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 256.064253][ T30] ? __pm_runtime_set_status+0x9d4/0xcd0 [ 256.069948][ T30] usb_probe_interface+0x668/0xc90 [ 256.075086][ T30] ? __pfx_usb_probe_interface+0x10/0x10 [ 256.080807][ T30] really_probe+0x267/0xaf0 [ 256.085479][ T30] __driver_probe_device+0x18c/0x320 [ 256.090804][ T30] driver_probe_device+0x4f/0x240 [ 256.095844][ T30] __device_attach_driver+0x2d4/0x4c0 [ 256.101355][ T30] bus_for_each_drv+0x258/0x2f0 [ 256.106214][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 256.112182][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 256.117677][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 256.122869][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 256.128917][ T30] __device_attach+0x2c5/0x450 [ 256.133705][ T30] ? __pfx___device_attach+0x10/0x10 [ 256.139129][ T30] ? _raw_spin_unlock+0x28/0x50 [ 256.144835][ T30] device_initial_probe+0xa1/0xd0 [ 256.149925][ T30] bus_probe_device+0x12a/0x220 [ 256.154798][ T30] ? device_add+0x726/0xb70 [ 256.159398][ T30] device_add+0x7b6/0xb70 [ 256.163737][ T30] usb_set_configuration+0x1a87/0x2110 [ 256.169249][ T30] usb_generic_driver_probe+0x8d/0x150 [ 256.174753][ T30] usb_probe_device+0x1c4/0x3b0 [ 256.179767][ T30] ? __pfx_usb_probe_device+0x10/0x10 [ 256.185153][ T30] really_probe+0x267/0xaf0 [ 256.189918][ T30] __driver_probe_device+0x18c/0x320 [ 256.195240][ T30] driver_probe_device+0x4f/0x240 [ 256.200921][ T30] __device_attach_driver+0x2d4/0x4c0 [ 256.206326][ T30] bus_for_each_drv+0x258/0x2f0 [ 256.211219][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 256.217130][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 256.222631][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 256.227861][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 256.233664][ T30] __device_attach+0x2c5/0x450 [ 256.238652][ T30] ? __pfx___device_attach+0x10/0x10 [ 256.243959][ T30] ? _raw_spin_unlock+0x28/0x50 [ 256.249495][ T30] device_initial_probe+0xa1/0xd0 [ 256.254736][ T30] bus_probe_device+0x12a/0x220 [ 256.260740][ T30] ? device_add+0x726/0xb70 [ 256.265291][ T30] device_add+0x7b6/0xb70 [ 256.270099][ T30] usb_new_device+0xa08/0x16f0 [ 256.275072][ T30] ? __pfx_usb_new_device+0x10/0x10 [ 256.280519][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 256.285762][ T30] hub_event+0x2a1c/0x4f30 [ 256.290306][ T30] ? __pfx_hub_event+0x10/0x10 [ 256.295096][ T30] ? process_one_work+0x87c/0x1650 [ 256.300266][ T30] process_one_work+0x949/0x1650 [ 256.305225][ T30] ? __pfx_process_one_work+0x10/0x10 [ 256.310691][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 256.315744][ T30] worker_thread+0xb46/0x1140 [ 256.320515][ T30] kthread+0x388/0x470 [ 256.324591][ T30] ? __pfx_worker_thread+0x10/0x10 [ 256.330008][ T30] ? __pfx_kthread+0x10/0x10 [ 256.334614][ T30] ret_from_fork+0x51e/0xb90 [ 256.339255][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 256.344485][ T30] ? __switch_to+0xc7d/0x1450 [ 256.350825][ T30] ? __pfx_kthread+0x10/0x10 [ 256.355530][ T30] ret_from_fork_asm+0x1a/0x30 [ 256.360426][ T30] [ 256.363619][ T30] [ 256.363619][ T30] Showing all locks held in the system: [ 256.372341][ T30] 1 lock held by khungtaskd/30: [ 256.377223][ T30] #0: ffffffff8e960320 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 256.387874][ T30] 5 locks held by kworker/1:2/797: [ 256.393006][ T30] #0: ffff88802228ed48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x855/0x1650 [ 256.410571][ T30] #1: ffffc90004127c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x87c/0x1650 [ 256.425574][ T30] #2: ffff88802b268198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 256.434572][ T30] #3: ffff88807bf87198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 256.443876][ T30] #4: ffff8880303e7160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 256.454336][ T30] 2 locks held by getty/5581: [ 256.459079][ T30] #0: ffff88803807a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 256.468915][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 256.479112][ T30] [ 256.481529][ T30] ============================================= [ 256.481529][ T30] [ 256.495531][ T30] NMI backtrace for cpu 1 [ 256.495545][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 256.495559][ T30] Tainted: [L]=SOFTLOCKUP [ 256.495563][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 256.495569][ T30] Call Trace: [ 256.495573][ T30] [ 256.495578][ T30] dump_stack_lvl+0xe8/0x150 [ 256.495596][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 256.495610][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 256.495623][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 256.495637][ T30] sys_info+0x135/0x170 [ 256.495648][ T30] watchdog+0xfd9/0x1030 [ 256.495666][ T30] ? watchdog+0x21a/0x1030 [ 256.495682][ T30] kthread+0x388/0x470 [ 256.495692][ T30] ? __pfx_watchdog+0x10/0x10 [ 256.495705][ T30] ? __pfx_kthread+0x10/0x10 [ 256.495714][ T30] ret_from_fork+0x51e/0xb90 [ 256.495727][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 256.495738][ T30] ? __switch_to+0xc7d/0x1450 [ 256.495751][ T30] ? __pfx_kthread+0x10/0x10 [ 256.495760][ T30] ret_from_fork_asm+0x1a/0x30 [ 256.495780][ T30] [ 256.495784][ T30] Sending NMI from CPU 1 to CPUs 0: [ 256.611823][ C0] NMI backtrace for cpu 0 [ 256.611842][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 256.611862][ C0] Tainted: [L]=SOFTLOCKUP [ 256.611868][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 256.611877][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 256.611909][ C0] Code: 9e 73 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 d0 0f 00 fb f4 bc e6 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 256.611928][ C0] RSP: 0018:ffffffff8e607dc0 EFLAGS: 00000246 [ 256.611941][ C0] RAX: 00000000003f9b9f RBX: ffffffff819add7d RCX: 0000000080000001 [ 256.611953][ C0] RDX: 0000000000000001 RSI: ffffffff8e017d97 RDI: ffffffff8c29e380 [ 256.611963][ C0] RBP: ffffffff8e607eb0 R08: ffff8880b843395b R09: 1ffff1101708672b [ 256.611974][ C0] R10: dffffc0000000000 R11: ffffed101708672c R12: ffffffff9033d9b0 [ 256.611985][ C0] R13: 1ffffffff1cd29d8 R14: 0000000000000000 R15: 0000000000000000 [ 256.611995][ C0] FS: 0000000000000000(0000) GS:ffff888125003000(0000) knlGS:0000000000000000 [ 256.612008][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 256.612018][ C0] CR2: 0000200000004a80 CR3: 000000007e074000 CR4: 00000000003526f0 [ 256.612032][ C0] Call Trace: [ 256.612039][ C0] [ 256.612045][ C0] default_idle+0x9/0x20 [ 256.612061][ C0] default_idle_call+0x72/0xb0 [ 256.612077][ C0] do_idle+0x1bd/0x500 [ 256.612096][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 256.612112][ C0] ? __pfx_do_idle+0x10/0x10 [ 256.612133][ C0] cpu_startup_entry+0x43/0x60 [ 256.612152][ C0] rest_init+0x2de/0x300 [ 256.612169][ C0] start_kernel+0x38a/0x3e0 [ 256.612189][ C0] x86_64_start_reservations+0x24/0x30 [ 256.612236][ C0] x86_64_start_kernel+0x143/0x1c0 [ 256.612257][ C0] common_startup_64+0x13e/0x147 [ 256.612291][ C0] [ 256.801106][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 256.807966][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 256.818636][ T30] Tainted: [L]=SOFTLOCKUP [ 256.822937][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 256.832967][ T30] Call Trace: [ 256.836241][ T30] [ 256.839170][ T30] vpanic+0x56c/0xa60 [ 256.843149][ T30] ? __pfx___schedule+0x10/0x10 [ 256.847992][ T30] ? __pfx_vpanic+0x10/0x10 [ 256.852477][ T30] ? __pfx_console_unlock+0x10/0x10 [ 256.857664][ T30] panic+0xc5/0xd0 [ 256.861372][ T30] ? __pfx_panic+0x10/0x10 [ 256.865782][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 256.871137][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 256.877275][ T30] watchdog+0x1023/0x1030 [ 256.881591][ T30] ? watchdog+0x21a/0x1030 [ 256.885991][ T30] kthread+0x388/0x470 [ 256.890038][ T30] ? __pfx_watchdog+0x10/0x10 [ 256.894711][ T30] ? __pfx_kthread+0x10/0x10 [ 256.899384][ T30] ret_from_fork+0x51e/0xb90 [ 256.903968][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 256.909064][ T30] ? __switch_to+0xc7d/0x1450 [ 256.913724][ T30] ? __pfx_kthread+0x10/0x10 [ 256.918297][ T30] ret_from_fork_asm+0x1a/0x30 [ 256.923047][ T30] [ 256.926405][ T30] Kernel Offset: disabled [ 256.930715][ T30] Rebooting in 86400 seconds..