last executing test programs: 5.583860548s ago: executing program 2 (id=316): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='hfsplus\x00', 0x8041, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f00000001c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000300)={0x4, 0x0, 0x0, 0x170, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@linear={0x0, 0x2000, 0x0, 0x38, 'linear\x00', {@ram={'/dev/ram', 0x0}, 0x20, '0'}}]}) ioctl$DM_DEV_SUSPEND(r0, 0xc138fd06, &(0x7f0000000480)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x5800, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TARGET_MSG(r0, 0xc138fd0e, &(0x7f0000000940)={0x4, 0x0, 0x0, 0x2c, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, {0x0, @stats_create={'@stats_create ', '-', 0x20, '/1', ' 2 precise_timestamps histogram:1,2'}}}) mknodat$dm(0xffffffffffffff9c, &(0x7f0000000740)='./dm0\x00', 0x6180, r1) r2 = openat$dm_dev(0xffffffffffffff9c, &(0x7f0000000780)='./dm0\x00', 0x2, 0x0) pwrite64(r2, &(0x7f00000007c0)="0102030405060708", 0x8, 0x1000) ioctl$DM_DEV_REMOVE(r0, 0xc138fd04, &(0x7f0000000800)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x20000, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}}) 5.283065969s ago: executing program 2 (id=317): syz_usb_connect$uac1(0x0, 0x81, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x7fd, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x3, 0x1, 0x8d, 0xa0, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x3, 0x4, 0x4, 0x1}, @as_header={0x7, 0x24, 0x1, 0x4, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x6, 0xf1, 0x9, {0x7, 0x25, 0x1, 0x8, 0x70, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xe6, 0x1, 0x7, {0x7, 0x25, 0x1, 0x0, 0xf, 0x4}}}}}}}}]}}, 0x0) 4.457689003s ago: executing program 1 (id=327): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x200002, 0x200003, 0x801, 0x4, 0x7, 0x4}) setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000000180)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 4.420593967s ago: executing program 1 (id=328): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f00000003c0)={&(0x7f0000000400)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000000440), 0x0, &(0x7f0000001100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}], 0x20}, 0x0) 4.351835594s ago: executing program 1 (id=329): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)='t', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000e40)="31fd", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000006c0)="77a47ab22899566ca67fb9d1f81c0b25994cd4b0d7dac876f176ff6fb1472dc59b97e3c149ad99095f707ca3609152345db33ee23d2fd6f1e3339595341e8be2128b48fe40b23d7560c27681ef97418965f868f17058b5d3a034decff66f3658fdd93f3fbe38bfe22c21a6e1ceb9b7676ab0fc3b865cfaad428816467b918a5363c59bdec1f6b9289c20983a50fcffe8", 0x90}, {&(0x7f0000000780)="7460629f0a7b9dbaab3552107e043287fabf1d4dc41dcfb0d43cb7d61d1e26f0f7a77fbc850de54ed7f1c3ca323e0a0f1f002003f4971d9532e8085a81389b4ccb9e38f9bb73e0df0f7ccd", 0x4b}], 0x2}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000b80)="707951f902b9b75992a223694f8f696e0e226227dd7e6144cbaa29adc89e40244c5fac831954461fa40e17ba7aed291ae95be7d5de418df274be408d1c545a27c885036f71d620248640a6835d7dbd81b3863b25bd0c3c9266b1d298aa8ab5f62cb2ddf46527af2a22c167a2811c60e1054a0f129d16d9669507df592342023d847f12ca487c3f08e1d13cf35c275224afa549", 0x93}, {&(0x7f0000000c40)="1c7a34f0ffb7d96ee0386dc77757a4b76c67fcc2fde9481e0faaac324da5fbc44a0c124920", 0x25}, {&(0x7f0000000c80)="1a71b445af10c15ccf203f6f9a315f50e8463c710dc579c9215abc23ce33b0a4769e7226d2bfd2091b53b2c086607efa6fd790fd5b9b282c0005bac90d972380103b91b9e14e7e844ee9a9ec85406a1acb6baf7ee3f4bd9f9f9fec7f3fd4d34b0085ee1fb44936be165369164c648fc0f5d0189f066e0f33052602b0e4b9bfcc1cd2f0", 0x83}, {&(0x7f0000000d40)="528eb332bd3b33c7a76f9e34a94048450d52fc5a5786fbbb8f96a762e5731b347a8f5ffb6114db486c1aa5b52772894b597147d2e8c22fdb0e5a42eb03d5d2c139b4b7df", 0x44}], 0x4}}, {{0x0, 0x0, &(0x7f0000003840)=[{&(0x7f0000000f80)="a84d952383bd620520da8bca3550", 0xe}, {&(0x7f0000000fc0)="90d3b7cb22a31b96", 0x8}, {&(0x7f00000010c0)="54beb0d18a3efc749772bc9033ed2889795f1600acfe5158baaf10105622cda5f732e35f20a708757d32952d04801229846af6ca9b8f5d6e158f005cf4c3b67133c24978b520f0c2df504cd44a90f833a20d4f840221b16673ffd3c02e311ff606bf93e8a61bf3bd0d112a1412c0184c8b826f0e3e85b8bae908e659c355ae40117cf2b23f9ffa5563acb6b39b72d5119f0a8fda6ced51b7f9cc36399567c9ec250534ea2cb8631d90f6b54309064d450546207d5d4a44f81c11e3ac39819b5b780a6570927f55c8d96730d92a9293cb8965b16196943a1f80c44a8de83f8d729377451449b3a6b12f8504fd41df84d26d761ec490", 0xf5}, {&(0x7f0000001080)="7e1e89d3ffc6ba9ae5a34f16b65e2d6555e5f2549e15", 0x16}, {&(0x7f0000001700)="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", 0x2f5}], 0x5}}], 0x5, 0x40028d0) 4.351727084s ago: executing program 1 (id=330): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="18000000011401002dbd7000f7dbdf250800010002"], 0x18}, 0x1, 0x0, 0x0, 0x180d1}, 0x2000d014) 4.350537124s ago: executing program 1 (id=339): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r1, 0x30b, 0xfffffffc, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x404c857}, 0x20060000) 3.22246127s ago: executing program 1 (id=342): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000200)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000240)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000340)={0x34, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 3.2216009s ago: executing program 2 (id=332): syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x41) syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') r0 = socket$nl_audit(0x10, 0x3, 0x9) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYRES8=r0], 0xce) 2.623912471s ago: executing program 2 (id=345): mkdirat(0xffffffffffffff9c, &(0x7f0000000940)='./mnt\x00', 0x1ff) umount2(0x0, 0x0) creat(&(0x7f0000000c80)='./mnt/dir2\x00', 0x202) r0 = fanotify_init(0x8, 0x40000) fanotify_mark(r0, 0x2, 0x4000997d, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b2406050001", @ANYRES64=r1], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="200704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f00000001c0)={0x84, &(0x7f0000000280)={0x0, 0x3, 0x2, "8e0a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r2, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f0000000600)=ANY=[@ANYBLOB='\x00\v3'], 0x0, 0x0}) 2.078682677s ago: executing program 0 (id=347): socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = memfd_create(&(0x7f00000005c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8054}, 0x44054) 967.907721ms ago: executing program 3 (id=356): syz_emit_vhci(&(0x7f0000000f80)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x9}, {0x2, [{0xc9, 0xffff}, {0xc8, 0x3}]}}}, 0xc) 507.930458ms ago: executing program 4 (id=366): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000001ac0)=0x5, 0x4) 507.738958ms ago: executing program 4 (id=367): fanotify_mark(0xffffffffffffffff, 0x105, 0x5000003a, 0xffffffffffffffff, 0x0) 507.631008ms ago: executing program 4 (id=368): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newsa={0x140, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@broadcast, 0x0, 0xecdf, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in6=@remote, 0x100, 0x32}, @in6=@private1, {0x0, 0x0, 0x401, 0x8001, 0x0, 0x4, 0x0, 0xffffffffffffffff}, {0x1, 0x3, 0x80000000}, {0x0, 0xfffffffe}, 0x0, 0x0, 0xa}, [@algo_crypt={0x4d, 0x2, {{'cbc(cast5)\x00'}, 0x28, "387cc250ec"}}]}, 0x140}, 0x1, 0x0, 0x0, 0x4008084}, 0x20040050) 472.646571ms ago: executing program 3 (id=369): r0 = openat$kvm(0x0, &(0x7f0000000980), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r2, &(0x7f00000009c0)={0x0, 0x0}) 334.957656ms ago: executing program 3 (id=370): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001140)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001180), 0x0, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001200)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000001400)={'syzkaller0\x00', @multicast}) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000001500)={'syzkaller0\x00'}) 199.881229ms ago: executing program 2 (id=371): socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x2, 0x0) r0 = memfd_create(&(0x7f00000005c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0 and [ 80.192076][ T21] pwc: recv_control_msg error -32 req 04 val 1500 [ 80.247300][ T21] pwc: recv_control_msg error -32 req 02 val 2500 [ 80.263177][ T4597] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 80.292084][ T21] pwc: recv_control_msg error -32 req 02 val 2400 [ 80.302258][ T4177] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 80.311318][ T4177] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.319737][ T4177] usb 1-1: Product: syz [ 80.324104][ T4177] usb 1-1: SerialNumber: syz [ 80.332249][ T21] pwc: recv_control_msg error -32 req 02 val 2600 [ 80.342747][ T4582] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 80.551958][ T4345] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 80.572340][ T4279] scsi host1: usb-storage 3-1:1.0 [ 80.592029][ T21] pwc: recv_control_msg error -71 req 02 val 2800 [ 80.612235][ T21] pwc: recv_control_msg error -71 req 04 val 1100 [ 80.622151][ T4177] cdc_ether: probe of 1-1:1.0 failed with error -71 [ 80.631563][ T4177] usb 1-1: USB disconnect, device number 5 [ 80.637628][ T21] pwc: recv_control_msg error -71 req 04 val 1200 [ 80.650774][ T21] pwc: Registered as video103. [ 80.658052][ T21] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 80.675178][ T21] usb 2-1: USB disconnect, device number 4 [ 80.779304][ T4279] usb 3-1: USB disconnect, device number 5 [ 80.791994][ T4345] usb 5-1: Using ep0 maxpacket: 32 [ 81.072107][ T4345] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 81.097282][ T4345] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.125935][ T4345] usb 5-1: Product: syz [ 81.130144][ T4345] usb 5-1: Manufacturer: syz [ 81.136293][ T4345] usb 5-1: SerialNumber: syz [ 81.156973][ T4345] usb 5-1: config 0 descriptor?? [ 81.207039][ T4345] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 81.411991][ T4202] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 81.551961][ T4177] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 81.806194][ T4202] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 81.822166][ T4202] usb 1-1: config 0 has no interface number 0 [ 81.832275][ T4202] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 81.871768][ T4640] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 81.937410][ T4642] device syzkaller1 entered promiscuous mode [ 82.078825][ T4202] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 82.096222][ T4177] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 82.101847][ T4202] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.108151][ T4177] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.114104][ T4202] usb 1-1: Product: syz [ 82.126017][ T4202] usb 1-1: Manufacturer: syz [ 82.136132][ T4202] usb 1-1: SerialNumber: syz [ 82.146926][ T4202] usb 1-1: config 0 descriptor?? [ 82.163909][ T4177] usb 4-1: Product: syz [ 82.174717][ T4177] usb 4-1: Manufacturer: syz [ 82.179363][ T4177] usb 4-1: SerialNumber: syz [ 82.207989][ T4202] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 82.224812][ T4177] usb 4-1: config 0 descriptor?? [ 82.236042][ T4651] ======================================================= [ 82.236042][ T4651] WARNING: The mand mount option has been deprecated and [ 82.236042][ T4651] and is ignored by this kernel. Remove the mand [ 82.236042][ T4651] option from the mount to silence this warning. [ 82.236042][ T4651] ======================================================= [ 82.278250][ T4653] udc-core: couldn't find an available UDC or it's busy [ 82.297541][ T4651] FAULT_INJECTION: forcing a failure. [ 82.297541][ T4651] name fail_futex, interval 1, probability 0, space 0, times 1 [ 82.302027][ T4345] gspca_ov534_9: reg_w failed -71 [ 82.312684][ T4651] CPU: 0 PID: 4651 Comm: syz.1.99 Not tainted syzkaller #0 [ 82.323211][ T4651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 82.333624][ T4651] Call Trace: [ 82.336918][ T4651] [ 82.339866][ T4651] dump_stack_lvl+0x188/0x250 [ 82.344583][ T4651] ? show_regs_print_info+0x20/0x20 [ 82.349798][ T4651] ? load_image+0x410/0x410 [ 82.354330][ T4651] ? kfree+0xef/0x2a0 [ 82.358337][ T4651] should_fail+0x383/0x4b0 [ 82.362770][ T4651] get_futex_key+0x1a1/0x12d0 [ 82.367466][ T4651] ? __lock_acquire+0x13b3/0x7d40 [ 82.372543][ T4651] ? futex_wait_restart+0x250/0x250 [ 82.377760][ T4651] futex_wake+0x101/0x540 [ 82.382109][ T4651] ? futex_wait+0x680/0x680 [ 82.386702][ T4651] ? ucma_write+0x25b/0x2f0 [ 82.391389][ T4651] ? verify_lock_unused+0x140/0x140 [ 82.396859][ T4651] ? verify_lock_unused+0x140/0x140 [ 82.402076][ T4651] do_futex+0xd83/0x12b0 [ 82.406329][ T4651] ? security_file_permission+0x75/0xa0 [ 82.411885][ T4651] ? file_end_write+0xd8/0x250 [ 82.416656][ T4651] ? vfs_write+0xaa6/0xd70 [ 82.421174][ T4651] ? futex_exit_release+0x1c0/0x1c0 [ 82.426469][ T4651] ? __context_tracking_exit+0x4c/0x80 [ 82.431940][ T4651] __se_sys_futex+0x389/0x420 [ 82.436629][ T4651] ? __x64_sys_futex+0xf0/0xf0 [ 82.441401][ T4651] ? __x64_sys_futex+0x1d/0xf0 [ 82.446176][ T4651] do_syscall_64+0x4c/0xa0 [ 82.450606][ T4651] ? clear_bhb_loop+0x30/0x80 [ 82.455298][ T4651] ? clear_bhb_loop+0x30/0x80 [ 82.460121][ T4651] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 82.466011][ T4651] RIP: 0033:0x7fd364dd5559 [ 82.470422][ T4651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.490032][ T4651] RSP: 002b:00007fd36302c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 82.498437][ T4651] RAX: ffffffffffffffda RBX: 00007fd36505bfa8 RCX: 00007fd364dd5559 [ 82.502050][ T4177] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 82.506405][ T4651] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd36505bfac [ 82.522812][ T4651] RBP: 00007fd36505bfa0 R08: 000e868cdfedd3f0 R09: 0000000000000000 [ 82.530792][ T4651] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 82.538758][ T4651] R13: 00007fd36505c038 R14: 00007ffe73a8c580 R15: 00007ffe73a8c668 [ 82.546903][ T4651] [ 82.575936][ T4202] usb 1-1: USB disconnect, device number 6 [ 82.591349][ T4202] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 82.718195][ T4345] gspca_ov534_9: Unknown sensor 0000 [ 82.718256][ T4345] ov534_9: probe of 5-1:0.0 failed with error -22 [ 82.740747][ T4345] usb 5-1: USB disconnect, device number 5 [ 83.261911][ T4345] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 83.504019][ T4345] usb 2-1: Using ep0 maxpacket: 8 [ 83.610510][ T4692] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 83.632098][ T4345] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 83.647285][ T4345] usb 2-1: config 0 has no interface number 0 [ 83.653752][ T4345] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 83.669610][ T4345] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 83.680825][ T4345] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 83.694141][ T4345] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 83.703496][ T4345] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.718422][ T4345] usb 2-1: config 0 descriptor?? [ 83.763310][ T4345] ldusb 2-1:0.55: Interrupt in endpoint not found [ 83.922020][ T4202] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 83.943269][ T4279] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 83.969040][ T2301] usb 2-1: USB disconnect, device number 5 [ 84.201974][ T4279] usb 3-1: Using ep0 maxpacket: 32 [ 84.207287][ T4202] usb 1-1: Using ep0 maxpacket: 32 [ 84.352193][ T4279] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 84.360814][ T4279] usb 3-1: config 0 has no interface number 0 [ 84.367134][ T4279] usb 3-1: config 0 interface 184 has no altsetting 0 [ 84.522171][ T4202] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 84.531401][ T4202] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.539727][ T4202] usb 1-1: Product: syz [ 84.544264][ T4279] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 84.553404][ T4202] usb 1-1: Manufacturer: syz [ 84.558550][ T4279] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.566798][ T4202] usb 1-1: SerialNumber: syz [ 84.571874][ T4279] usb 3-1: Product: syz [ 84.576184][ T4279] usb 3-1: Manufacturer: syz [ 84.580888][ T4279] usb 3-1: SerialNumber: syz [ 84.586462][ T4202] usb 1-1: config 0 descriptor?? [ 84.593308][ T4279] usb 3-1: config 0 descriptor?? [ 84.625153][ T4202] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 84.643383][ T4279] smsc75xx v1.0.0 [ 84.772075][ T1108] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 84.779960][ T2301] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 85.183265][ T2301] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.193642][ T1108] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 85.204487][ T2301] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 85.213695][ T2301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.224399][ T2301] usb 2-1: config 0 descriptor?? [ 85.275607][ T2301] pwc: Askey VC010 type 2 USB webcam detected. [ 85.392247][ T1108] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 85.401899][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.409938][ T1108] usb 5-1: Product: syz [ 85.417200][ T1108] usb 5-1: Manufacturer: syz [ 85.421865][ T1108] usb 5-1: SerialNumber: syz [ 85.452097][ T4177] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32 [ 85.467432][ T1108] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 85.492473][ T4279] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 85.503762][ T4279] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 85.533570][ T4279] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 85.544476][ T4279] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 85.555020][ T4279] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 85.565489][ T4279] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 85.575089][ T4279] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 85.585508][ T4279] usb 3-1: USB disconnect, device number 6 [ 85.713528][ T2301] pwc: recv_control_msg error -32 req 02 val 2b00 [ 85.720130][ T4202] gspca_ov534_9: reg_w failed -71 [ 85.764013][ T2301] pwc: recv_control_msg error -32 req 02 val 2700 [ 85.802661][ T2301] pwc: recv_control_msg error -32 req 02 val 2c00 [ 85.842134][ T2301] pwc: recv_control_msg error -32 req 04 val 1000 [ 85.883059][ T2301] pwc: recv_control_msg error -32 req 04 val 1300 [ 85.922062][ T2301] pwc: recv_control_msg error -32 req 04 val 1400 [ 85.962014][ T2301] pwc: recv_control_msg error -32 req 02 val 2000 [ 86.002030][ T2301] pwc: recv_control_msg error -32 req 02 val 2100 [ 86.026564][ T4705] device-mapper: multipath round-robin: repeat_count > 1 is deprecated, using 1 instead [ 86.045541][ T2301] pwc: recv_control_msg error -32 req 04 val 1500 [ 86.060732][ T4705] device-mapper: table: 248:0: multipath: unknown path selector type [ 86.069204][ T4705] device-mapper: ioctl: error adding target to table [ 86.096659][ T2301] pwc: recv_control_msg error -32 req 02 val 2500 [ 86.106887][ T1108] usb 5-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 86.121999][ T4202] gspca_ov534_9: Unknown sensor 0000 [ 86.122061][ T4202] ov534_9: probe of 1-1:0.0 failed with error -22 [ 86.155165][ T4202] usb 1-1: USB disconnect, device number 7 [ 86.182192][ T2301] pwc: recv_control_msg error -32 req 02 val 2400 [ 86.210946][ T1108] usb 5-1: USB disconnect, device number 6 [ 86.301284][ T4345] usb 4-1: USB disconnect, device number 4 [ 86.376015][ T4718] process 'syz.3.127' launched '/dev/fd/6' with NULL argv: empty string added [ 86.409827][ T4718] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 86.442059][ T2301] pwc: recv_control_msg error -71 req 02 val 2900 [ 86.462128][ T2301] pwc: recv_control_msg error -71 req 02 val 2800 [ 86.482013][ T2301] pwc: recv_control_msg error -71 req 04 val 1100 [ 86.502418][ T2301] pwc: recv_control_msg error -71 req 04 val 1200 [ 86.518339][ T2301] pwc: Registered as video103. [ 86.525085][ T2301] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7 [ 86.545186][ T2301] usb 2-1: USB disconnect, device number 6 [ 86.651873][ T4202] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 86.764798][ T23] cfg80211: failed to load regulatory.db [ 87.012102][ T4202] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.024538][ T4741] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 87.162306][ T4202] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 87.171671][ T4202] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 87.180182][ T4202] usb 1-1: Product: syz [ 87.184553][ T4202] usb 1-1: Manufacturer: syz [ 87.331913][ T2301] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 87.339537][ T1108] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 87.422000][ T4279] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 87.472070][ T4202] usb 1-1: selecting invalid altsetting 1 [ 87.477896][ T4202] speedtch 1-1:1.0: speedtch_bind: setting interface to 1 failed (-22)! [ 87.487279][ T4202] speedtch 1-1:1.0: usbatm_usb_probe: bind failed: -22! [ 87.494662][ T4202] speedtch: probe of 1-1:1.0 failed with error -22 [ 87.552260][ T4202] usb 1-1: selecting invalid altsetting 1 [ 87.552842][ T4747] netlink: 'syz.4.137': attribute type 29 has an invalid length. [ 87.558149][ T4202] speedtch 1-1:1.1: speedtch_bind: setting interface to 1 failed (-22)! [ 87.566779][ T4747] netlink: 'syz.4.137': attribute type 29 has an invalid length. [ 87.579306][ T4202] speedtch 1-1:1.1: usbatm_usb_probe: bind failed: -22! [ 87.590215][ T1108] usb 3-1: Using ep0 maxpacket: 32 [ 87.595003][ T4747] netlink: 'syz.4.137': attribute type 29 has an invalid length. [ 87.595670][ T4202] speedtch: probe of 1-1:1.1 failed with error -22 [ 87.616215][ T4202] usb 1-1: USB disconnect, device number 8 [ 87.782318][ T4279] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.793164][ T4279] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 87.802217][ T4279] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 87.815330][ T4279] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 87.824624][ T4279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.862086][ T2301] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 87.871368][ T2301] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.879735][ T1108] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 87.891272][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.899373][ T1108] usb 3-1: Product: syz [ 87.903712][ T2301] usb 2-1: Product: syz [ 87.907915][ T2301] usb 2-1: Manufacturer: syz [ 87.912578][ T1108] usb 3-1: Manufacturer: syz [ 87.917182][ T1108] usb 3-1: SerialNumber: syz [ 87.921953][ T2301] usb 2-1: SerialNumber: syz [ 87.928816][ T1108] usb 3-1: config 0 descriptor?? [ 87.934936][ T2301] usb 2-1: config 0 descriptor?? [ 87.941996][ T23] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 87.973762][ T1108] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 88.085447][ T4345] usb 4-1: USB disconnect, device number 5 [ 88.182104][ T2301] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 88.322048][ T23] usb 5-1: config 7 descriptor has 1 excess byte, ignoring [ 88.329340][ T23] usb 5-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 88.502165][ T23] usb 5-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 88.512436][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.523155][ T23] usb 5-1: Product: syz [ 88.528738][ T23] usb 5-1: Manufacturer: syz [ 88.533606][ T23] usb 5-1: SerialNumber: syz [ 88.573299][ T23] rndis_wlan 5-1:7.0: skipping garbage [ 88.578936][ T23] usb 5-1: bad CDC descriptors [ 88.589890][ T23] rndis_host 5-1:7.0: skipping garbage [ 88.595471][ T23] usb 5-1: bad CDC descriptors [ 88.601122][ T23] option 5-1:7.0: GSM modem (1-port) converter detected [ 88.901946][ T4279] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 88.961975][ T23] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 89.052094][ T1108] gspca_ov534_9: reg_w failed -71 [ 89.151934][ T4279] usb 4-1: Using ep0 maxpacket: 16 [ 89.274528][ T4279] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.285775][ T4279] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.296903][ T4279] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 89.310219][ T4279] usb 4-1: config 0 interface 0 has no altsetting 0 [ 89.320715][ T4279] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 89.332968][ T4279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.349957][ T4279] usb 4-1: config 0 descriptor?? [ 89.451901][ T1108] gspca_ov534_9: Unknown sensor 0000 [ 89.451962][ T1108] ov534_9: probe of 3-1:0.0 failed with error -22 [ 89.468452][ T1108] usb 3-1: USB disconnect, device number 7 [ 89.532456][ T23] usb 1-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 89.541659][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.550014][ T23] usb 1-1: Product: syz [ 89.554629][ T23] usb 1-1: Manufacturer: syz [ 89.559262][ T23] usb 1-1: SerialNumber: syz [ 89.593856][ T4767] Zero length message leads to an empty skb [ 89.602956][ T23] ums-karma 1-1:1.0: USB Mass Storage device detected [ 89.611168][ T23] ums-karma 1-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 89.611168][ T23] Please send a copy of this message to and [ 90.035069][ T4279] usb 4-1: USB disconnect, device number 6 [ 90.281216][ T23] ums-karma: probe of 1-1:1.0 failed with error -5 [ 90.295223][ T23] usb 1-1: USB disconnect, device number 9 [ 90.510857][ T4784] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 90.658628][ T23] usb 5-1: USB disconnect, device number 7 [ 90.672458][ T23] option 5-1:7.0: device disconnected [ 91.102191][ T2301] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32 [ 91.235050][ T4800] FAULT_INJECTION: forcing a failure. [ 91.235050][ T4800] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 91.250160][ T4800] CPU: 1 PID: 4800 Comm: syz.2.156 Not tainted syzkaller #0 [ 91.257480][ T4800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 91.267961][ T4800] Call Trace: [ 91.271262][ T4800] [ 91.274203][ T4800] dump_stack_lvl+0x188/0x250 [ 91.279392][ T4800] ? show_regs_print_info+0x20/0x20 [ 91.285092][ T4800] ? load_image+0x410/0x410 [ 91.289819][ T4800] ? mark_lock+0x94/0x320 [ 91.294840][ T4800] should_fail+0x383/0x4b0 [ 91.299747][ T4800] prepare_alloc_pages+0x1e3/0x5b0 [ 91.305150][ T4800] __alloc_pages+0x11b/0x480 [ 91.310180][ T4800] ? zone_statistics+0x170/0x170 [ 91.315169][ T4800] ? rcu_lock_acquire+0x30/0x30 [ 91.320063][ T4800] ? alloc_pages+0x452/0x560 [ 91.325053][ T4800] __get_free_pages+0x8/0x30 [ 91.330254][ T4800] __tlb_remove_page_size+0x1f2/0x3f0 [ 91.336040][ T4800] unmap_page_range+0xfcf/0x2410 [ 91.341678][ T4800] unmap_vmas+0x131/0x250 [ 91.346113][ T4800] ? unmap_page_range+0x2410/0x2410 [ 91.351330][ T4800] ? __mutex_lock_common+0x435/0x2400 [ 91.356977][ T4800] ? exit_mm_release+0x16/0x30 [ 91.361844][ T4800] exit_mmap+0x3b9/0x640 [ 91.366198][ T4800] ? vm_brk+0x20/0x20 [ 91.370211][ T4800] ? uprobe_clear_state+0x2f6/0x460 [ 91.375513][ T4800] __mmput+0x115/0x390 [ 91.379596][ T4800] exit_mm+0x632/0x7b0 [ 91.383962][ T4800] ? perf_pmu_migrate_context+0xb70/0xb70 [ 91.390064][ T4800] ? do_exit+0x2110/0x2110 [ 91.394569][ T4800] ? __ia32_sys_timer_delete+0x40/0x40 [ 91.400228][ T4800] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 91.405929][ T4800] ? tty_audit_exit+0x149/0x1f0 [ 91.410858][ T4800] do_exit+0x5b8/0x2110 [ 91.412784][ T4802] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 91.415040][ T4800] ? put_task_struct+0x80/0x80 [ 91.435112][ T4800] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 91.441139][ T4800] ? _raw_spin_lock_irq+0xb7/0xf0 [ 91.446374][ T4800] do_group_exit+0x12c/0x2f0 [ 91.451074][ T4800] ? lockdep_hardirqs_on+0x94/0x140 [ 91.456688][ T4800] get_signal+0x7eb/0x12e0 [ 91.461432][ T4800] arch_do_signal_or_restart+0xe6/0x12a0 [ 91.469748][ T4800] ? futex_exit_release+0x1c0/0x1c0 [ 91.475450][ T4800] ? get_sigframe_size+0x10/0x10 [ 91.480758][ T4800] ? __context_tracking_exit+0x4c/0x80 [ 91.486245][ T4800] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 91.492266][ T4800] ? exit_to_user_mode_loop+0x3b/0x130 [ 91.497750][ T4800] exit_to_user_mode_loop+0x9e/0x130 [ 91.503238][ T4800] exit_to_user_mode_prepare+0xee/0x180 [ 91.508912][ T4800] syscall_exit_to_user_mode+0x16/0x40 [ 91.514378][ T4800] do_syscall_64+0x58/0xa0 [ 91.518809][ T4800] ? clear_bhb_loop+0x30/0x80 [ 91.523492][ T4800] ? clear_bhb_loop+0x30/0x80 [ 91.528273][ T4800] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 91.534301][ T4800] RIP: 0033:0x7fb99c1cc559 [ 91.538732][ T4800] Code: Unable to access opcode bytes at RIP 0x7fb99c1cc52f. [ 91.546294][ T4800] RSP: 002b:00007fb99a4230e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 91.555075][ T4800] RAX: 0000000000000001 RBX: 00007fb99c452fa8 RCX: 00007fb99c1cc559 [ 91.563063][ T4800] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb99c452fac [ 91.571049][ T4800] RBP: 00007fb99c452fa0 R08: 000af30605f9c1d0 R09: 0000000000000000 [ 91.579035][ T4800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.587019][ T4800] R13: 00007fb99c453038 R14: 00007ffd920cdb60 R15: 00007ffd920cdc48 [ 91.595204][ T4800] [ 91.743965][ T2301] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 91.942038][ T4345] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 91.991945][ T2301] usb 5-1: Using ep0 maxpacket: 32 [ 92.070333][ T1108] usb 2-1: USB disconnect, device number 7 [ 92.272430][ T2301] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 92.290351][ T2301] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.292999][ T4830] FAULT_INJECTION: forcing a failure. [ 92.292999][ T4830] name failslab, interval 1, probability 0, space 0, times 1 [ 92.301201][ T2301] usb 5-1: Product: syz [ 92.317948][ T4830] CPU: 1 PID: 4830 Comm: syz.1.168 Not tainted syzkaller #0 [ 92.326470][ T4830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 92.334747][ T2301] usb 5-1: Manufacturer: syz [ 92.336921][ T4830] Call Trace: [ 92.336934][ T4830] [ 92.347927][ T4830] dump_stack_lvl+0x188/0x250 [ 92.351951][ T2301] usb 5-1: SerialNumber: syz [ 92.353512][ T4830] ? show_regs_print_info+0x20/0x20 [ 92.353544][ T4830] ? load_image+0x410/0x410 [ 92.353572][ T4830] should_fail+0x383/0x4b0 [ 92.368507][ T4279] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 92.372895][ T4830] should_failslab+0x5/0x20 [ 92.372925][ T4830] slab_pre_alloc_hook+0x51/0xc0 [ 92.372944][ T4830] __kmalloc_node_track_caller+0x68/0x3a0 [ 92.372960][ T4830] ? __tcp_send_ack+0x9d/0x5d0 [ 92.372977][ T4830] ? __alloc_skb+0xf4/0x750 [ 92.408066][ T4830] ? __tcp_send_ack+0x9d/0x5d0 [ 92.413669][ T4830] __alloc_skb+0x22c/0x750 [ 92.419673][ T4830] __tcp_send_ack+0x9d/0x5d0 [ 92.424520][ T4830] tcp_fin+0xf7/0x4c0 [ 92.430822][ T4830] tcp_data_queue+0x3ff4/0x5770 [ 92.436397][ T4830] ? tcp_urg+0xba0/0xba0 [ 92.440898][ T4830] ? tcp_validate_incoming+0x1d60/0x1d90 [ 92.448032][ T4830] tcp_rcv_state_process+0x27d9/0x41e0 [ 92.453877][ T4830] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 92.460495][ T4830] ? tcp_finish_connect+0x4d0/0x4d0 [ 92.465986][ T4830] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 92.472091][ T4830] ? __local_bh_enable_ip+0x136/0x1c0 [ 92.477754][ T4830] ? lockdep_hardirqs_on+0x94/0x140 [ 92.483781][ T4830] tcp_v6_do_rcv+0x8fd/0x1200 [ 92.488594][ T4830] __release_sock+0x1e6/0x460 [ 92.493559][ T4830] release_sock+0x5b/0x1b0 [ 92.498543][ T4830] ? tcp_set_state+0x520/0x520 [ 92.503665][ T4830] inet_shutdown+0x299/0x370 [ 92.509005][ T4830] __x64_sys_shutdown+0x16d/0x1d0 [ 92.514129][ T4830] do_syscall_64+0x4c/0xa0 [ 92.518685][ T4830] ? clear_bhb_loop+0x30/0x80 [ 92.525274][ T4830] ? clear_bhb_loop+0x30/0x80 [ 92.530741][ T4830] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 92.537175][ T4830] RIP: 0033:0x7fd364dd5559 [ 92.542200][ T4830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.563592][ T4830] RSP: 002b:00007fd36302c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000030 [ 92.572189][ T4830] RAX: ffffffffffffffda RBX: 00007fd36505bfa0 RCX: 00007fd364dd5559 [ 92.581180][ T4830] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000003 [ 92.590980][ T4830] RBP: 00007fd364e6cb20 R08: 0000000000000000 R09: 0000000000000000 [ 92.599974][ T4830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.609094][ T4830] R13: 00007fd36505c038 R14: 00007fd36505bfa0 R15: 00007ffe73a8c668 [ 92.617796][ T4830] [ 92.631552][ T2301] usb 5-1: config 0 descriptor?? [ 92.642087][ T4345] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 92.697161][ T2301] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 92.872280][ T4345] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 92.882475][ T4345] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.890721][ T4345] usb 1-1: Product: syz [ 92.896336][ T4345] usb 1-1: Manufacturer: syz [ 92.903360][ T4345] usb 1-1: SerialNumber: syz [ 92.952133][ T4279] usb 4-1: config 7 descriptor has 1 excess byte, ignoring [ 92.964535][ T4345] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 92.967542][ T4279] usb 4-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 93.142053][ T4279] usb 4-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 93.158768][ T4279] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.171536][ T4279] usb 4-1: Product: syz [ 93.177026][ T4279] usb 4-1: Manufacturer: syz [ 93.182760][ T4279] usb 4-1: SerialNumber: syz [ 93.233682][ T4279] rndis_wlan 4-1:7.0: skipping garbage [ 93.239873][ T4279] usb 4-1: bad CDC descriptors [ 93.246834][ T4279] rndis_host 4-1:7.0: skipping garbage [ 93.252866][ T4279] usb 4-1: bad CDC descriptors [ 93.264748][ T4279] option 4-1:7.0: GSM modem (1-port) converter detected [ 93.617282][ T4345] usb 1-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 93.640638][ T4345] usb 1-1: USB disconnect, device number 10 [ 93.782074][ T2301] gspca_ov534_9: reg_w failed -71 [ 93.841973][ T4279] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 94.171914][ T2301] gspca_ov534_9: Unknown sensor 0000 [ 94.171985][ T2301] ov534_9: probe of 5-1:0.0 failed with error -22 [ 94.206808][ T2301] usb 5-1: USB disconnect, device number 8 [ 94.277097][ T4857] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 94.362133][ T4279] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 94.376318][ T4279] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.391599][ T4279] usb 2-1: Product: syz [ 94.399678][ T4279] usb 2-1: Manufacturer: syz [ 94.410210][ T4279] usb 2-1: SerialNumber: syz [ 94.446325][ T4279] usb 2-1: config 0 descriptor?? [ 94.712093][ T4279] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 94.728074][ T4872] jffs2: notice: (4872) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 95.117024][ T4283] usb 4-1: USB disconnect, device number 7 [ 95.156038][ T4283] option 4-1:7.0: device disconnected [ 95.470968][ T4904] syz.4.188 uses obsolete (PF_INET,SOCK_PACKET) [ 95.494866][ T4906] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 95.540529][ T4904] device syzkaller1 entered promiscuous mode [ 95.792025][ T23] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 95.972243][ T21] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 96.052017][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 96.382193][ T23] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 96.391761][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.401751][ T21] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 96.420757][ T23] usb 1-1: Product: syz [ 96.429151][ T23] usb 1-1: Manufacturer: syz [ 96.436010][ T23] usb 1-1: SerialNumber: syz [ 96.448833][ T23] usb 1-1: config 0 descriptor?? [ 96.475133][ T2301] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 96.492363][ T21] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 96.505893][ T23] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 96.722049][ T2301] usb 4-1: Using ep0 maxpacket: 32 [ 96.737654][ T21] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 96.760779][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.770614][ T21] usb 5-1: Product: syz [ 96.778743][ T21] usb 5-1: Manufacturer: syz [ 96.785701][ T21] usb 5-1: SerialNumber: syz [ 96.842410][ T2301] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 96.852323][ T2301] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 96.853299][ T21] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 96.861080][ T2301] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 96.881111][ T2301] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 96.896891][ T2301] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 96.897533][ T21] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 96.907015][ T2301] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 96.920622][ T21] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 96.929845][ T2301] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 96.962712][ T2301] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 96.981921][ T2301] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 96.991618][ T2301] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.009494][ T2301] usb 4-1: config 0 descriptor?? [ 97.276719][ T2301] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 97.292804][ T2301] usb 4-1: USB disconnect, device number 8 [ 97.309612][ T2301] usblp0: removed [ 97.612056][ T23] gspca_ov534_9: reg_w failed -71 [ 97.653578][ T4279] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32 [ 98.002035][ T23] gspca_ov534_9: Unknown sensor 0000 [ 98.002116][ T23] ov534_9: probe of 1-1:0.0 failed with error -22 [ 98.042159][ T23] usb 1-1: USB disconnect, device number 11 [ 98.146764][ T4177] usb 5-1: USB disconnect, device number 9 [ 98.167626][ T4177] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 98.193606][ T4177] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 98.207565][ T4177] ti_usb_3410_5052 5-1:2.0: device disconnected [ 98.491909][ T23] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 98.601389][ T4279] usb 2-1: USB disconnect, device number 8 [ 98.707459][ T5002] jffs2: notice: (5002) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 98.751915][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 98.829386][ T5005] netlink: 'syz.1.209': attribute type 21 has an invalid length. [ 98.838285][ T5005] netlink: 'syz.1.209': attribute type 5 has an invalid length. [ 98.846936][ T4202] Bluetooth: hci4: command 0x0405 tx timeout [ 98.852039][ T5005] netlink: 152 bytes leftover after parsing attributes in process `syz.1.209'. [ 98.872015][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 98.907312][ T23] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 98.920100][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.958384][ T23] usb 1-1: config 0 descriptor?? [ 99.065106][ T5009] device syzkaller1 entered promiscuous mode [ 99.234704][ T23] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 99.256008][ T5015] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 99.462613][ T4283] usb 1-1: USB disconnect, device number 12 [ 99.592018][ T4202] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 99.661960][ T4279] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 99.872007][ T4202] usb 4-1: Using ep0 maxpacket: 32 [ 100.117084][ T4283] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 100.196845][ T4202] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 100.210272][ T4202] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.226248][ T4202] usb 4-1: Product: syz [ 100.230855][ T4202] usb 4-1: Manufacturer: syz [ 100.239600][ T4279] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 100.252786][ T4202] usb 4-1: SerialNumber: syz [ 100.258257][ T4279] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.271092][ T4202] usb 4-1: config 0 descriptor?? [ 100.281249][ T4279] usb 3-1: Product: syz [ 100.289613][ T4279] usb 3-1: Manufacturer: syz [ 100.297499][ T4279] usb 3-1: SerialNumber: syz [ 100.328676][ T4202] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 100.339300][ T4279] usb 3-1: config 0 descriptor?? [ 100.532364][ T4283] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.549351][ T4283] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 100.567887][ T4283] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.594899][ T4283] usb 2-1: config 0 descriptor?? [ 100.612310][ T4279] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 100.664357][ T4283] pwc: Askey VC010 type 2 USB webcam detected. [ 100.922081][ T4282] Bluetooth: hci4: command 0x0405 tx timeout [ 101.082352][ T4283] pwc: recv_control_msg error -32 req 02 val 2b00 [ 101.142054][ T4283] pwc: recv_control_msg error -32 req 02 val 2700 [ 101.184424][ T4283] pwc: recv_control_msg error -32 req 02 val 2c00 [ 101.222170][ T4283] pwc: recv_control_msg error -32 req 04 val 1000 [ 101.275340][ T4283] pwc: recv_control_msg error -32 req 04 val 1300 [ 101.336373][ T4283] pwc: recv_control_msg error -32 req 04 val 1400 [ 101.385261][ T4283] pwc: recv_control_msg error -32 req 02 val 2000 [ 101.412373][ T4202] gspca_ov534_9: reg_w failed -71 [ 101.432110][ T4283] pwc: recv_control_msg error -32 req 02 val 2100 [ 101.472011][ T4283] pwc: recv_control_msg error -32 req 04 val 1500 [ 101.522039][ T4283] pwc: recv_control_msg error -32 req 02 val 2500 [ 101.782065][ T4283] pwc: recv_control_msg error -71 req 02 val 2600 [ 101.802066][ T4283] pwc: recv_control_msg error -71 req 02 val 2900 [ 101.822080][ T4202] gspca_ov534_9: Unknown sensor 0000 [ 101.822146][ T4202] ov534_9: probe of 4-1:0.0 failed with error -22 [ 101.834660][ T4283] pwc: recv_control_msg error -71 req 02 val 2800 [ 101.846604][ T4202] usb 4-1: USB disconnect, device number 9 [ 101.872339][ T4283] pwc: recv_control_msg error -71 req 04 val 1100 [ 101.920491][ T4283] pwc: recv_control_msg error -71 req 04 val 1200 [ 101.932812][ T4283] pwc: Registered as video103. [ 101.939361][ T4283] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input8 [ 101.966474][ T4283] usb 2-1: USB disconnect, device number 9 [ 102.078943][ T5094] FAULT_INJECTION: forcing a failure. [ 102.078943][ T5094] name failslab, interval 1, probability 0, space 0, times 0 [ 102.082993][ T5096] FAULT_INJECTION: forcing a failure. [ 102.082993][ T5096] name failslab, interval 1, probability 0, space 0, times 0 [ 102.102867][ T5094] CPU: 0 PID: 5094 Comm: syz.0.231 Not tainted syzkaller #0 [ 102.116959][ T5094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 102.127027][ T5094] Call Trace: [ 102.130329][ T5094] [ 102.133493][ T5094] dump_stack_lvl+0x188/0x250 [ 102.138197][ T5094] ? show_regs_print_info+0x20/0x20 [ 102.143404][ T5094] ? load_image+0x410/0x410 [ 102.148397][ T5094] ? __might_sleep+0xf0/0xf0 [ 102.153513][ T5094] ? __lock_acquire+0x7d40/0x7d40 [ 102.158602][ T5094] should_fail+0x383/0x4b0 [ 102.163029][ T5094] should_failslab+0x5/0x20 [ 102.167826][ T5094] slab_pre_alloc_hook+0x51/0xc0 [ 102.173026][ T5094] kmem_cache_alloc_node+0x47/0x2c0 [ 102.179261][ T5094] ? __alloc_skb+0xf4/0x750 [ 102.183909][ T5094] __alloc_skb+0xf4/0x750 [ 102.188339][ T5094] alloc_uevent_skb+0x7d/0x230 [ 102.193813][ T5094] kobject_uevent_net_broadcast+0x2e6/0x530 [ 102.199729][ T5094] kobject_uevent_env+0x550/0x890 [ 102.204773][ T5094] ? dummy_udc_set_speed+0xd0/0xd0 [ 102.209995][ T5094] udc_bind_to_driver+0x4d5/0x5f0 [ 102.215027][ T5094] usb_gadget_probe_driver+0x1fb/0x380 [ 102.220501][ T5094] raw_ioctl+0x115e/0x3750 [ 102.226323][ T5094] ? tomoyo_path_number_perm+0x5f7/0x6b0 [ 102.233093][ T5094] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 102.238760][ T5094] ? make_qualifier+0x3b0/0x3b0 [ 102.244301][ T5094] ? bpf_lsm_file_ioctl+0x5/0x10 [ 102.249384][ T5094] ? security_file_ioctl+0x7c/0xa0 [ 102.254510][ T5094] ? make_qualifier+0x3b0/0x3b0 [ 102.259564][ T5094] __se_sys_ioctl+0xfa/0x170 [ 102.265525][ T5094] do_syscall_64+0x4c/0xa0 [ 102.270150][ T5094] ? clear_bhb_loop+0x30/0x80 [ 102.275023][ T5094] ? clear_bhb_loop+0x30/0x80 [ 102.279732][ T5094] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.285635][ T5094] RIP: 0033:0x7f57c26a71eb [ 102.290331][ T5094] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 102.312523][ T5094] RSP: 002b:00007f57c08fbf00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 102.321406][ T5094] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f57c26a71eb [ 102.329788][ T5094] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 102.338033][ T5094] RBP: 00007f57c08fcfd0 R08: 0000000000000001 R09: 00000000ffffffff [ 102.347491][ T5094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.355573][ T5094] R13: 00002000000001c0 R14: 0000000000000000 R15: 0000000000000000 [ 102.363732][ T5094] [ 102.366841][ T5096] CPU: 1 PID: 5096 Comm: syz.3.232 Not tainted syzkaller #0 [ 102.374248][ T5096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 102.375063][ T4282] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 102.390786][ T5096] Call Trace: [ 102.390804][ T5096] [ 102.390812][ T5096] dump_stack_lvl+0x188/0x250 [ 102.390841][ T5096] ? show_regs_print_info+0x20/0x20 [ 102.390859][ T5096] ? load_image+0x410/0x410 [ 102.390879][ T5096] ? __lock_acquire+0x7d40/0x7d40 [ 102.390904][ T5096] should_fail+0x383/0x4b0 [ 102.390925][ T5096] should_failslab+0x5/0x20 [ 102.390940][ T5096] slab_pre_alloc_hook+0x51/0xc0 [ 102.390957][ T5096] kmem_cache_alloc_trace+0x47/0x290 [ 102.390972][ T5096] ? cryptomgr_notify+0x18a/0x9b0 [ 102.390988][ T5096] ? __lock_acquire+0x7d40/0x7d40 [ 102.391008][ T5096] cryptomgr_notify+0x18a/0x9b0 [ 102.391026][ T5096] ? down_read+0x1aa/0x2e0 [ 102.391048][ T5096] blocking_notifier_call_chain+0x103/0x1b0 [ 102.391074][ T5096] crypto_alg_mod_lookup+0x495/0x6d0 [ 102.391100][ T5096] crypto_alloc_tfm_node+0x14e/0x360 [ 102.391127][ T5096] software_key_query+0x157/0x830 [ 102.391150][ T5096] ? public_key_destroy+0x80/0x80 [ 102.391178][ T5096] ? __might_fault+0xb3/0x110 [ 102.391199][ T5096] ? _copy_from_user+0x111/0x170 [ 102.391218][ T5096] keyctl_pkey_params_get_2+0x231/0x490 [ 102.391243][ T5096] ? keyctl_pkey_e_d_s+0x300/0x300 [ 102.391278][ T5096] keyctl_pkey_e_d_s+0xcb/0x300 [ 102.526263][ T5096] ? keyctl_pkey_params_get+0x4c0/0x4c0 [ 102.531849][ T5096] ? do_futex+0xdc2/0x12b0 [ 102.536392][ T5096] ? vfs_write+0xaa6/0xd70 [ 102.540932][ T5096] __se_sys_keyctl+0x6c6/0xa20 [ 102.546017][ T5096] ? __x64_sys_keyctl+0xc0/0xc0 [ 102.551073][ T5096] ? __context_tracking_exit+0x4c/0x80 [ 102.556556][ T5096] ? __lock_acquire+0x7d40/0x7d40 [ 102.561672][ T5096] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 102.567764][ T5096] ? lock_chain_count+0x20/0x20 [ 102.572636][ T5096] ? lockdep_hardirqs_on+0x94/0x140 [ 102.577864][ T5096] ? __x64_sys_keyctl+0x1c/0xc0 [ 102.582768][ T5096] do_syscall_64+0x4c/0xa0 [ 102.587885][ T5096] ? clear_bhb_loop+0x30/0x80 [ 102.592706][ T5096] ? clear_bhb_loop+0x30/0x80 [ 102.597814][ T5096] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.603742][ T5096] RIP: 0033:0x7ff577e16559 [ 102.608498][ T5096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.628859][ T5096] RSP: 002b:00007ff57606d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 102.640139][ T5096] RAX: ffffffffffffffda RBX: 00007ff57809cfa0 RCX: 00007ff577e16559 [ 102.648474][ T5096] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000019 [ 102.656941][ T5096] RBP: 00007ff577eadb20 R08: 0000000000000000 R09: 0000000000000000 [ 102.665140][ T5096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.673984][ T5096] R13: 00007ff57809d038 R14: 00007ff57809cfa0 R15: 00007ffe61c90e78 [ 102.682609][ T5096] [ 102.694163][ T4202] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 102.842273][ T4282] usb 5-1: Using ep0 maxpacket: 8 [ 102.972271][ T4282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 102.992056][ T4282] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 103.001706][ T4282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.016414][ T1108] Bluetooth: hci4: command 0x0405 tx timeout [ 103.031620][ T4282] usb 5-1: config 0 descriptor?? [ 103.053292][ T4283] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 103.262216][ T4202] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 103.280865][ T4202] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.293135][ T4282] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 103.317942][ T4202] usb 1-1: Product: syz [ 103.329357][ T4202] usb 1-1: Manufacturer: syz [ 103.346738][ T4202] usb 1-1: SerialNumber: syz [ 103.442014][ T4283] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 103.453686][ T4283] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 103.488424][ T5111] netlink: 132 bytes leftover after parsing attributes in process `syz.1.236'. [ 103.544065][ T23] usb 5-1: USB disconnect, device number 10 [ 103.644952][ T4283] usb 4-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00 [ 103.654435][ T4283] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.662623][ T4283] usb 4-1: Product: syz [ 103.667012][ T4283] usb 4-1: Manufacturer: syz [ 103.671620][ T4283] usb 4-1: SerialNumber: syz [ 103.791955][ T21] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 103.862151][ T4202] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 103.892340][ T4202] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -71 [ 103.931882][ T4202] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 103.944009][ T4283] kaweth 4-1:1.0: Firmware present in device. [ 103.950377][ T4202] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 103.961700][ T4202] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 103.971024][ T4202] lan78xx: probe of 1-1:1.0 failed with error -71 [ 103.981173][ T4202] usb 1-1: USB disconnect, device number 13 [ 104.082165][ T4279] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32 [ 104.132227][ T4283] kaweth 4-1:1.0: Statistics collection: 0 [ 104.138620][ T4283] kaweth 4-1:1.0: Multicast filter limit: 0 [ 104.145441][ T4283] kaweth 4-1:1.0: MTU: 0 [ 104.149804][ T4283] kaweth 4-1:1.0: Read MAC address 00:00:00:00:00:00 [ 104.312022][ T21] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 104.331891][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.343550][ T21] usb 2-1: Product: syz [ 104.360422][ T21] usb 2-1: Manufacturer: syz [ 104.365420][ T21] usb 2-1: SerialNumber: syz [ 104.380521][ T21] usb 2-1: config 0 descriptor?? [ 104.409261][ T4279] usb 3-1: USB disconnect, device number 8 [ 104.483861][ T5122] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 104.641983][ T21] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 104.809707][ T4283] kaweth 4-1:1.0: kaweth interface created at eth1 [ 104.872054][ T4279] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 105.038243][ T4283] usb 4-1: USB disconnect, device number 10 [ 105.132111][ T4279] usb 3-1: Using ep0 maxpacket: 32 [ 105.432216][ T4279] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 105.447262][ T4279] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.455864][ T4279] usb 3-1: Product: syz [ 105.460147][ T4279] usb 3-1: Manufacturer: syz [ 105.470311][ T4279] usb 3-1: SerialNumber: syz [ 105.475452][ T4202] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 105.496763][ T4279] usb 3-1: config 0 descriptor?? [ 105.554493][ T4279] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 105.562125][ T21] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 105.587590][ T21] usb 2-1: USB disconnect, device number 10 [ 105.662143][ T4283] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 105.912079][ T1108] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 105.982280][ T4202] usb 5-1: unable to get BOS descriptor or descriptor too short [ 106.042210][ T4283] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.053859][ T4283] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.064868][ T4202] usb 5-1: config 129 has an invalid interface number: 135 but max is 0 [ 106.074287][ T4283] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 106.090829][ T4202] usb 5-1: config 129 has an invalid interface number: 5 but max is 0 [ 106.101070][ T4202] usb 5-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 106.111388][ T4283] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 106.122798][ T4202] usb 5-1: config 129 has no interface number 0 [ 106.130426][ T4202] usb 5-1: config 129 has no interface number 1 [ 106.139198][ T4283] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.149919][ T4202] usb 5-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 106.166835][ T4283] usb 1-1: config 0 descriptor?? [ 106.172046][ T1108] usb 4-1: Using ep0 maxpacket: 8 [ 106.177508][ T4202] usb 5-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 106.193568][ T4202] usb 5-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 106.215762][ T4202] usb 5-1: config 129 interface 135 has no altsetting 0 [ 106.222995][ T4202] usb 5-1: config 129 interface 5 has no altsetting 0 [ 106.311988][ T21] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 106.345616][ T1108] usb 4-1: unable to get BOS descriptor or descriptor too short [ 106.432588][ T1108] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 106.443542][ T1108] usb 4-1: config 0 has no interface number 0 [ 106.450983][ T1108] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 106.466687][ T1108] usb 4-1: config 0 interface 88 has no altsetting 0 [ 106.492139][ T4202] usb 5-1: string descriptor 0 read error: -22 [ 106.499329][ T4202] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 106.513265][ T4202] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.551974][ T21] usb 2-1: Using ep0 maxpacket: 32 [ 106.567894][ T4202] usb 5-1: MIDIStreaming interface descriptor not found [ 106.642622][ T4279] gspca_ov534_9: reg_w failed -71 [ 106.651316][ T4283] plantronics 0003:047F:FFFF.0002: ignoring exceeding usage max [ 106.664888][ T1108] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 106.672301][ T21] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 106.681619][ T4283] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 106.694905][ T21] usb 2-1: config 0 has no interface number 0 [ 106.709667][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 106.721628][ T1108] usb 4-1: Product: syz [ 106.728142][ T1108] usb 4-1: Manufacturer: syz [ 106.738982][ T1108] usb 4-1: SerialNumber: syz [ 106.751612][ T4283] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 106.770118][ T1108] usb 4-1: config 0 descriptor?? [ 106.772516][ T4345] usb 5-1: USB disconnect, device number 11 [ 106.851628][ T23] usb 1-1: USB disconnect, device number 14 [ 106.858257][ T21] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 106.871504][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.885086][ T21] usb 2-1: Product: syz [ 106.898685][ T21] usb 2-1: Manufacturer: syz [ 106.903738][ T21] usb 2-1: SerialNumber: syz [ 106.910432][ T5178] fido_id[5178]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 106.927840][ T21] usb 2-1: config 0 descriptor?? [ 106.972939][ T21] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 107.082037][ T4279] gspca_ov534_9: Unknown sensor 0000 [ 107.082108][ T4279] ov534_9: probe of 3-1:0.0 failed with error -22 [ 107.103760][ T4279] usb 3-1: USB disconnect, device number 9 [ 107.117156][ T1108] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input9 [ 107.141614][ T1108] usb 4-1: USB disconnect, device number 11 [ 107.191584][ T21] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 107.205074][ T21] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 107.592125][ T4279] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 107.638413][ T1108] usb 2-1: USB disconnect, device number 11 [ 107.641900][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 107.655011][ T1108] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 107.698360][ T1108] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 107.717132][ T1108] quatech2 2-1:0.51: device disconnected [ 108.197896][ T5197] FAULT_INJECTION: forcing a failure. [ 108.197896][ T5197] name failslab, interval 1, probability 0, space 0, times 0 [ 108.217256][ T4279] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 108.228837][ T5197] CPU: 1 PID: 5197 Comm: syz.4.256 Not tainted syzkaller #0 [ 108.236169][ T5197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 108.239112][ T4279] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.246233][ T5197] Call Trace: [ 108.246251][ T5197] [ 108.246259][ T5197] dump_stack_lvl+0x188/0x250 [ 108.246286][ T5197] ? show_regs_print_info+0x20/0x20 [ 108.246311][ T5197] ? load_image+0x410/0x410 [ 108.274973][ T5197] ? __might_sleep+0xf0/0xf0 [ 108.277792][ T4279] usb 3-1: Product: syz [ 108.279662][ T5197] ? __lock_acquire+0x7d40/0x7d40 [ 108.289526][ T5197] ? aa_get_newest_label+0xf5/0x5a0 [ 108.291863][ T4279] usb 3-1: Manufacturer: syz [ 108.294760][ T5197] should_fail+0x383/0x4b0 [ 108.299531][ T4279] usb 3-1: SerialNumber: syz [ 108.303955][ T5197] should_failslab+0x5/0x20 [ 108.303982][ T5197] slab_pre_alloc_hook+0x51/0xc0 [ 108.303998][ T5197] ? skb_clone+0x1bd/0x350 [ 108.304014][ T5197] kmem_cache_alloc+0x3d/0x280 [ 108.304033][ T5197] skb_clone+0x1bd/0x350 [ 108.332438][ T5197] ? nfnetlink_rcv+0x4a7/0x2450 [ 108.337695][ T5197] nfnetlink_rcv+0x4e0/0x2450 [ 108.342485][ T5197] ? lockdep_hardirqs_on+0x94/0x140 [ 108.347831][ T5197] ? __local_bh_enable_ip+0x136/0x1c0 [ 108.353237][ T5197] ? _local_bh_enable+0xa0/0xa0 [ 108.358380][ T5197] ? __dev_queue_xmit+0x1b64/0x2e50 [ 108.365210][ T5197] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 108.370974][ T5197] ? dev_queue_xmit+0x20/0x20 [ 108.375970][ T5197] ? memcpy+0x3c/0x60 [ 108.380019][ T5197] ? __copy_skb_header+0x3ba/0x4f0 [ 108.385293][ T5197] ? skb_clone+0x1f1/0x350 [ 108.389822][ T5197] ? rcu_lock_release+0x5/0x20 [ 108.395436][ T5197] ? __lock_acquire+0x7d40/0x7d40 [ 108.400855][ T5197] netlink_unicast+0x78f/0x940 [ 108.405853][ T5197] netlink_sendmsg+0x8ba/0xbe0 [ 108.410729][ T5197] ? netlink_getsockopt+0x570/0x570 [ 108.415942][ T5197] ? aa_sock_msg_perm+0x94/0x150 [ 108.421099][ T5197] ? apparmor_socket_sendmsg+0x88/0x230 [ 108.427022][ T5197] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 108.432698][ T5197] ? security_socket_sendmsg+0x7c/0xa0 [ 108.438304][ T5197] ? netlink_getsockopt+0x570/0x570 [ 108.444309][ T5197] ____sys_sendmsg+0x5be/0x8f0 [ 108.445145][ T4279] usb 3-1: config 0 descriptor?? [ 108.450250][ T5197] ? __sys_sendmsg_sock+0x30/0x30 [ 108.462924][ T5197] ? import_iovec+0x6f/0xa0 [ 108.468842][ T5197] ___sys_sendmsg+0x236/0x2e0 [ 108.473551][ T5197] ? __sys_sendmsg+0x290/0x290 [ 108.478994][ T5197] __se_sys_sendmsg+0x1b7/0x2a0 [ 108.483952][ T5197] ? __x64_sys_sendmsg+0x80/0x80 [ 108.488919][ T5197] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 108.494943][ T5197] ? lockdep_hardirqs_on+0x94/0x140 [ 108.500247][ T5197] do_syscall_64+0x4c/0xa0 [ 108.504703][ T5197] ? clear_bhb_loop+0x30/0x80 [ 108.509666][ T5197] ? clear_bhb_loop+0x30/0x80 [ 108.514468][ T5197] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 108.520482][ T5197] RIP: 0033:0x7fece4396559 [ 108.525031][ T5197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.544968][ T5197] RSP: 002b:00007fece25ed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 108.553411][ T5197] RAX: ffffffffffffffda RBX: 00007fece461cfa0 RCX: 00007fece4396559 [ 108.561836][ T5197] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 108.570756][ T5197] RBP: 00007fece442db20 R08: 0000000000000000 R09: 0000000000000000 [ 108.579465][ T5197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.588175][ T5197] R13: 00007fece461d038 R14: 00007fece461cfa0 R15: 00007ffeee570d78 [ 108.596297][ T5197] [ 108.719820][ T5202] FAULT_INJECTION: forcing a failure. [ 108.719820][ T5202] name failslab, interval 1, probability 0, space 0, times 0 [ 108.745454][ T5202] CPU: 1 PID: 5202 Comm: syz.4.259 Not tainted syzkaller #0 [ 108.752782][ T5202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 108.762946][ T5202] Call Trace: [ 108.766499][ T5202] [ 108.769461][ T5202] dump_stack_lvl+0x188/0x250 [ 108.774459][ T5202] ? show_regs_print_info+0x20/0x20 [ 108.780081][ T5202] ? load_image+0x410/0x410 [ 108.784837][ T5202] ? __lock_acquire+0x7d40/0x7d40 [ 108.790017][ T5202] should_fail+0x383/0x4b0 [ 108.794603][ T5202] should_failslab+0x5/0x20 [ 108.799233][ T5202] slab_pre_alloc_hook+0x51/0xc0 [ 108.802464][ T4279] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 108.804286][ T5202] kmem_cache_alloc_trace+0x47/0x290 [ 108.817979][ T5202] ? cryptomgr_notify+0x18a/0x9b0 [ 108.823021][ T5202] ? __lock_acquire+0x7d40/0x7d40 [ 108.828070][ T5202] cryptomgr_notify+0x18a/0x9b0 [ 108.833056][ T5202] ? down_read+0x1aa/0x2e0 [ 108.837740][ T5202] blocking_notifier_call_chain+0x103/0x1b0 [ 108.843771][ T5202] crypto_alg_mod_lookup+0x495/0x6d0 [ 108.849065][ T5202] crypto_alloc_tfm_node+0x14e/0x360 [ 108.854366][ T5202] software_key_query+0x157/0x830 [ 108.859543][ T5202] ? public_key_destroy+0x80/0x80 [ 108.864598][ T5202] ? __might_fault+0xb3/0x110 [ 108.869603][ T5202] ? _copy_from_user+0x111/0x170 [ 108.874551][ T5202] keyctl_pkey_params_get_2+0x231/0x490 [ 108.880569][ T5202] ? keyctl_pkey_e_d_s+0x300/0x300 [ 108.885784][ T5202] keyctl_pkey_e_d_s+0xcb/0x300 [ 108.890727][ T5202] ? keyctl_pkey_params_get+0x4c0/0x4c0 [ 108.896556][ T5202] ? do_futex+0xdc2/0x12b0 [ 108.901059][ T5202] ? vfs_write+0xaa6/0xd70 [ 108.905913][ T5202] __se_sys_keyctl+0x6c6/0xa20 [ 108.910694][ T5202] ? __x64_sys_keyctl+0xc0/0xc0 [ 108.915675][ T5202] ? __context_tracking_exit+0x4c/0x80 [ 108.921268][ T5202] ? __lock_acquire+0x7d40/0x7d40 [ 108.926531][ T5202] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 108.934055][ T5202] ? lock_chain_count+0x20/0x20 [ 108.938909][ T5202] ? lockdep_hardirqs_on+0x94/0x140 [ 108.944132][ T5202] ? __x64_sys_keyctl+0x1c/0xc0 [ 108.948975][ T5202] do_syscall_64+0x4c/0xa0 [ 108.953384][ T5202] ? clear_bhb_loop+0x30/0x80 [ 108.958072][ T5202] ? clear_bhb_loop+0x30/0x80 [ 108.962757][ T5202] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 108.968683][ T5202] RIP: 0033:0x7fece4396559 [ 108.973114][ T5202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.993478][ T5202] RSP: 002b:00007fece25ed028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 109.002240][ T5202] RAX: ffffffffffffffda RBX: 00007fece461cfa0 RCX: 00007fece4396559 [ 109.010405][ T5202] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000019 [ 109.018400][ T5202] RBP: 00007fece442db20 R08: 0000000000000000 R09: 0000000000000000 [ 109.026448][ T5202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.034530][ T5202] R13: 00007fece461d038 R14: 00007fece461cfa0 R15: 00007ffeee570d78 [ 109.042499][ T5202] [ 109.071058][ T5210] FAULT_INJECTION: forcing a failure. [ 109.071058][ T5210] name failslab, interval 1, probability 0, space 0, times 0 [ 109.101987][ T5210] CPU: 1 PID: 5210 Comm: syz.0.261 Not tainted syzkaller #0 [ 109.109412][ T5210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 109.120745][ T5210] Call Trace: [ 109.124046][ T5210] [ 109.126989][ T5210] dump_stack_lvl+0x188/0x250 [ 109.131781][ T5210] ? show_regs_print_info+0x20/0x20 [ 109.136999][ T5210] ? load_image+0x410/0x410 [ 109.141565][ T5210] ? __might_sleep+0xf0/0xf0 [ 109.146176][ T5210] ? __lock_acquire+0x7d40/0x7d40 [ 109.151254][ T5210] should_fail+0x383/0x4b0 [ 109.155697][ T5210] should_failslab+0x5/0x20 [ 109.160220][ T5210] slab_pre_alloc_hook+0x51/0xc0 [ 109.165512][ T5210] ? security_inode_alloc+0x30/0x110 [ 109.170836][ T5210] kmem_cache_alloc+0x3d/0x280 [ 109.176765][ T5210] security_inode_alloc+0x30/0x110 [ 109.182011][ T5210] inode_init_always+0x8e5/0xc90 [ 109.186994][ T5210] new_inode_pseudo+0x8e/0x210 [ 109.191885][ T5210] __sock_create+0x128/0x910 [ 109.196539][ T5210] start_sync_thread+0xdc8/0x2890 [ 109.202228][ T5210] ? sync_thread_master+0x900/0x900 [ 109.207471][ T5210] ? sb_queue_tail+0x3e0/0x3e0 [ 109.212273][ T5210] ? __lock_acquire+0x7d40/0x7d40 [ 109.217345][ T5210] ? __might_fault+0xb3/0x110 [ 109.222050][ T5210] do_ip_vs_set_ctl+0x40f/0xa10 [ 109.226947][ T5210] ? local_bh_enable+0x20/0x20 [ 109.232685][ T5210] ? mutex_unlock+0x10/0x10 [ 109.237325][ T5210] ? __local_bh_enable_ip+0x136/0x1c0 [ 109.242816][ T5210] ? lockdep_hardirqs_on+0x94/0x140 [ 109.248363][ T5210] ? __local_bh_enable_ip+0x136/0x1c0 [ 109.254053][ T5210] nf_setsockopt+0x25f/0x280 [ 109.258676][ T5210] ip_setsockopt+0x29c3/0x31e0 [ 109.263736][ T5210] ? ipv4_pktinfo_prepare+0x6b0/0x6b0 [ 109.269212][ T5210] ? __mutex_trylock_common+0x15c/0x260 [ 109.274888][ T5210] ? rcu_lock_release+0x20/0x20 [ 109.279759][ T5210] ? aa_label_sk_perm+0x3e6/0x540 [ 109.284887][ T5210] ? __mutex_lock_common+0x435/0x2400 [ 109.291007][ T5210] tcp_setsockopt+0x229/0x1e60 [ 109.295864][ T5210] ? tcp_set_window_clamp+0x1a0/0x1a0 [ 109.301834][ T5210] ? mutex_lock_io_nested+0x60/0x60 [ 109.307314][ T5210] ? __lock_acquire+0x7d40/0x7d40 [ 109.313966][ T5210] ? sock_common_setsockopt+0x32/0xb0 [ 109.320212][ T5210] ? sock_common_recvmsg+0x1c0/0x1c0 [ 109.326106][ T5210] smc_setsockopt+0x1b7/0xa30 [ 109.331011][ T5210] ? smc_shutdown+0x5c0/0x5c0 [ 109.335709][ T5210] ? aa_sock_opt_perm+0x74/0x100 [ 109.340964][ T5210] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 109.346619][ T5210] ? security_socket_setsockopt+0x7a/0xa0 [ 109.352361][ T5210] ? smc_shutdown+0x5c0/0x5c0 [ 109.357561][ T5210] __sys_setsockopt+0x2bf/0x3d0 [ 109.362502][ T5210] __x64_sys_setsockopt+0xb1/0xc0 [ 109.367894][ T5210] do_syscall_64+0x4c/0xa0 [ 109.372668][ T5210] ? clear_bhb_loop+0x30/0x80 [ 109.377584][ T5210] ? clear_bhb_loop+0x30/0x80 [ 109.382420][ T5210] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 109.389946][ T5210] RIP: 0033:0x7f57c26a7559 [ 109.394621][ T5210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.414684][ T5210] RSP: 002b:00007f57c08fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 109.423747][ T5210] RAX: ffffffffffffffda RBX: 00007f57c292dfa0 RCX: 00007f57c26a7559 [ 109.431708][ T5210] RDX: 000000000000048b RSI: 0000000000000000 RDI: 0000000000000003 [ 109.439679][ T5210] RBP: 00007f57c273eb20 R08: 0000000000000018 R09: 0000000000000000 [ 109.447681][ T5210] R10: 0000200000001f40 R11: 0000000000000246 R12: 0000000000000000 [ 109.460139][ T5210] R13: 00007f57c292e038 R14: 00007f57c292dfa0 R15: 00007ffdd6d86cb8 [ 109.468640][ T5210] [ 109.475214][ T21] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 109.484595][ T5210] socket: no more sockets [ 109.489140][ T5210] IPVS: Error during creation of socket; terminating [ 109.568910][ T5218] device syzkaller1 entered promiscuous mode [ 109.722012][ T21] usb 2-1: Using ep0 maxpacket: 32 [ 109.842046][ T4282] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 109.842072][ T21] usb 2-1: config 0 interface 0 has no altsetting 0 [ 109.860896][ T21] usb 2-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 109.875569][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.908839][ T21] usb 2-1: config 0 descriptor?? [ 109.963730][ T21] usb 2-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 109.983993][ T21] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 109.999790][ T21] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 110.017925][ T21] usb 2-1: media controller created [ 110.038632][ T21] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 110.113699][ T4282] usb 1-1: Using ep0 maxpacket: 8 [ 110.184061][ T21] set interface failed [ 110.184434][ T21] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 110.207453][ T21] error writing reg: 0xff, val: 0x00 [ 110.256091][ T21] dvb_usb_mxl111sf: probe of 2-1:0.0 failed with error -22 [ 110.289940][ T21] usb 2-1: USB disconnect, device number 12 [ 110.335170][ T4282] usb 1-1: unable to get BOS descriptor or descriptor too short [ 110.437694][ T5265] tipc: Started in network mode [ 110.443866][ T4282] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 110.452371][ T4282] usb 1-1: config 0 has no interface number 0 [ 110.458717][ T5265] tipc: Node identity 7f000001, cluster identity 4711 [ 110.468006][ T4282] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 110.481766][ T5265] tipc: Enabling of bearer rejected, failed to enable media [ 110.490442][ T4282] usb 1-1: config 0 interface 88 has no altsetting 0 [ 110.589522][ T5265] tipc: Enabling of bearer rejected, failed to enable media [ 110.702380][ T4282] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 110.711988][ T4282] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 110.726954][ T4282] usb 1-1: Product: syz [ 110.732129][ T4282] usb 1-1: Manufacturer: syz [ 110.750029][ T4282] usb 1-1: SerialNumber: syz [ 110.786813][ T4282] usb 1-1: config 0 descriptor?? [ 110.810673][ T5276] FAULT_INJECTION: forcing a failure. [ 110.810673][ T5276] name failslab, interval 1, probability 0, space 0, times 0 [ 110.830590][ T5276] CPU: 0 PID: 5276 Comm: syz.1.273 Not tainted syzkaller #0 [ 110.837920][ T5276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 110.847991][ T5276] Call Trace: [ 110.851298][ T5276] [ 110.854248][ T5276] dump_stack_lvl+0x188/0x250 [ 110.858955][ T5276] ? show_regs_print_info+0x20/0x20 [ 110.864169][ T5276] ? load_image+0x410/0x410 [ 110.868703][ T5276] ? __lock_acquire+0x7d40/0x7d40 [ 110.873747][ T5276] should_fail+0x383/0x4b0 [ 110.878188][ T5276] should_failslab+0x5/0x20 [ 110.882702][ T5276] slab_pre_alloc_hook+0x51/0xc0 [ 110.887661][ T5276] kmem_cache_alloc_trace+0x47/0x290 [ 110.893078][ T5276] ? cryptomgr_notify+0x18a/0x9b0 [ 110.898111][ T5276] ? __lock_acquire+0x7d40/0x7d40 [ 110.903151][ T5276] cryptomgr_notify+0x18a/0x9b0 [ 110.907996][ T5276] ? down_read+0x1aa/0x2e0 [ 110.912408][ T5276] blocking_notifier_call_chain+0x103/0x1b0 [ 110.918302][ T5276] crypto_alg_mod_lookup+0x495/0x6d0 [ 110.923579][ T5276] crypto_alloc_tfm_node+0x14e/0x360 [ 110.928859][ T5276] software_key_query+0x157/0x830 [ 110.934496][ T5276] ? public_key_destroy+0x80/0x80 [ 110.939539][ T5276] ? __might_fault+0xb3/0x110 [ 110.944214][ T5276] ? _copy_from_user+0x111/0x170 [ 110.949145][ T5276] keyctl_pkey_params_get_2+0x231/0x490 [ 110.954706][ T5276] ? keyctl_pkey_e_d_s+0x300/0x300 [ 110.959840][ T5276] keyctl_pkey_e_d_s+0xcb/0x300 [ 110.964701][ T5276] ? keyctl_pkey_params_get+0x4c0/0x4c0 [ 110.970246][ T5276] ? do_futex+0xdc2/0x12b0 [ 110.974667][ T5276] ? vfs_write+0xaa6/0xd70 [ 110.979107][ T5276] __se_sys_keyctl+0x6c6/0xa20 [ 110.983872][ T5276] ? __x64_sys_keyctl+0xc0/0xc0 [ 110.988724][ T5276] ? __context_tracking_exit+0x4c/0x80 [ 110.994181][ T5276] ? __lock_acquire+0x7d40/0x7d40 [ 110.999287][ T5276] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 111.005806][ T5276] ? lock_chain_count+0x20/0x20 [ 111.011549][ T5276] ? lockdep_hardirqs_on+0x94/0x140 [ 111.017088][ T5276] ? __x64_sys_keyctl+0x1c/0xc0 [ 111.021956][ T5276] do_syscall_64+0x4c/0xa0 [ 111.026370][ T5276] ? clear_bhb_loop+0x30/0x80 [ 111.031397][ T5276] ? clear_bhb_loop+0x30/0x80 [ 111.036327][ T5276] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 111.042618][ T5276] RIP: 0033:0x7fd364dd5559 [ 111.047059][ T5276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.066684][ T5276] RSP: 002b:00007fd36302c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 111.075181][ T5276] RAX: ffffffffffffffda RBX: 00007fd36505bfa0 RCX: 00007fd364dd5559 [ 111.083148][ T5276] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000019 [ 111.091240][ T5276] RBP: 00007fd364e6cb20 R08: 0000000000000000 R09: 0000000000000000 [ 111.099308][ T5276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.107646][ T5276] R13: 00007fd36505c038 R14: 00007fd36505bfa0 R15: 00007ffe73a8c668 [ 111.116434][ T5276] [ 111.210533][ T5283] FAULT_INJECTION: forcing a failure. [ 111.210533][ T5283] name failslab, interval 1, probability 0, space 0, times 0 [ 111.229952][ T5283] CPU: 0 PID: 5283 Comm: syz.3.276 Not tainted syzkaller #0 [ 111.238446][ T5283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 111.249824][ T5283] Call Trace: [ 111.253464][ T5283] [ 111.256496][ T5283] dump_stack_lvl+0x188/0x250 [ 111.261443][ T5283] ? show_regs_print_info+0x20/0x20 [ 111.266950][ T5283] ? load_image+0x410/0x410 [ 111.273114][ T5283] ? __lock_acquire+0x7d40/0x7d40 [ 111.278621][ T5283] should_fail+0x383/0x4b0 [ 111.283269][ T5283] should_failslab+0x5/0x20 [ 111.287799][ T5283] slab_pre_alloc_hook+0x51/0xc0 [ 111.293498][ T5283] __kmalloc+0x6b/0x340 [ 111.298036][ T5283] ? start_sync_thread+0xb5b/0x2890 [ 111.304154][ T5283] start_sync_thread+0xb5b/0x2890 [ 111.309313][ T5283] ? sync_thread_master+0x900/0x900 [ 111.315087][ T5283] ? sb_queue_tail+0x3e0/0x3e0 [ 111.319888][ T5283] ? __might_fault+0xb7/0x110 [ 111.324594][ T5283] ? __lock_acquire+0x7d40/0x7d40 [ 111.330709][ T5283] ? __might_fault+0xb3/0x110 [ 111.336228][ T5283] do_ip_vs_set_ctl+0x40f/0xa10 [ 111.341938][ T5283] ? local_bh_enable+0x20/0x20 [ 111.346842][ T5283] ? mutex_unlock+0x10/0x10 [ 111.351720][ T5283] ? __local_bh_enable_ip+0x136/0x1c0 [ 111.357375][ T5283] ? lockdep_hardirqs_on+0x94/0x140 [ 111.363567][ T5283] ? __local_bh_enable_ip+0x136/0x1c0 [ 111.369385][ T5283] nf_setsockopt+0x25f/0x280 [ 111.374113][ T5283] ip_setsockopt+0x29c3/0x31e0 [ 111.379073][ T5283] ? ipv4_pktinfo_prepare+0x6b0/0x6b0 [ 111.384841][ T5283] ? __mutex_trylock_common+0x15c/0x260 [ 111.390996][ T5283] ? rcu_lock_release+0x20/0x20 [ 111.397050][ T5283] ? aa_label_sk_perm+0x3e6/0x540 [ 111.402298][ T5283] ? __mutex_lock_common+0x435/0x2400 [ 111.407969][ T5283] tcp_setsockopt+0x229/0x1e60 [ 111.413566][ T5283] ? tcp_set_window_clamp+0x1a0/0x1a0 [ 111.420016][ T5283] ? mutex_lock_io_nested+0x60/0x60 [ 111.425519][ T5283] ? __lock_acquire+0x7d40/0x7d40 [ 111.431462][ T5283] ? sock_common_setsockopt+0x32/0xb0 [ 111.437196][ T5283] ? sock_common_recvmsg+0x1c0/0x1c0 [ 111.443084][ T5283] smc_setsockopt+0x1b7/0xa30 [ 111.447909][ T5283] ? smc_shutdown+0x5c0/0x5c0 [ 111.453320][ T5283] ? aa_sock_opt_perm+0x74/0x100 [ 111.459092][ T5283] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 111.466372][ T5283] ? security_socket_setsockopt+0x7a/0xa0 [ 111.472791][ T5283] ? smc_shutdown+0x5c0/0x5c0 [ 111.477778][ T5283] __sys_setsockopt+0x2bf/0x3d0 [ 111.483539][ T5283] __x64_sys_setsockopt+0xb1/0xc0 [ 111.488746][ T5283] do_syscall_64+0x4c/0xa0 [ 111.494294][ T5283] ? clear_bhb_loop+0x30/0x80 [ 111.500114][ T5283] ? clear_bhb_loop+0x30/0x80 [ 111.506331][ T5283] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 111.512718][ T5283] RIP: 0033:0x7ff577e16559 [ 111.517628][ T5283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.538682][ T5283] RSP: 002b:00007ff57606d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 111.547319][ T5283] RAX: ffffffffffffffda RBX: 00007ff57809cfa0 RCX: 00007ff577e16559 [ 111.555393][ T5283] RDX: 000000000000048b RSI: 0000000000000000 RDI: 0000000000000003 [ 111.563808][ T5283] RBP: 00007ff577eadb20 R08: 0000000000000018 R09: 0000000000000000 [ 111.571797][ T5283] R10: 0000200000001f40 R11: 0000000000000246 R12: 0000000000000000 [ 111.579899][ T5283] R13: 00007ff57809d038 R14: 00007ff57809cfa0 R15: 00007ffe61c90e78 [ 111.587933][ T5283] [ 111.675823][ T4282] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input10 [ 111.729204][ T4282] usb 1-1: USB disconnect, device number 15 [ 111.736362][ C0] usb_acecad 1-1:0.88: can't resubmit intr, dummy_hcd.0-1/input0, status -19 [ 112.061916][ T21] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 112.092141][ T4345] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 112.227123][ T4279] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32 [ 112.262166][ T4279] usb 3-1: USB disconnect, device number 10 [ 112.331946][ T4345] usb 4-1: Using ep0 maxpacket: 8 [ 112.362137][ T4282] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 112.422107][ T21] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.561975][ T21] usb 5-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 112.571186][ T21] usb 5-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 112.592069][ T21] usb 5-1: Product: syz [ 112.596281][ T21] usb 5-1: Manufacturer: syz [ 112.622014][ T4345] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 112.622347][ T4282] usb 1-1: Using ep0 maxpacket: 32 [ 112.631137][ T4345] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.631161][ T4345] usb 4-1: Product: syz [ 112.631173][ T4345] usb 4-1: Manufacturer: syz [ 112.631186][ T4345] usb 4-1: SerialNumber: syz [ 112.644103][ T21] usb 5-1: Found UVC 1.00 device syz (225a:e1d4) [ 112.666309][ T4345] usb 4-1: config 0 descriptor?? [ 112.703937][ T4345] radio-usb-si4713 4-1:0.0: Si4713 development board discovered: (10C4:8244) [ 112.795269][ T4282] usb 1-1: config 0 interface 0 has no altsetting 0 [ 112.805558][ T4282] usb 1-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 112.827722][ T4282] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.851669][ T4282] usb 1-1: config 0 descriptor?? [ 112.893039][ T21] usb 5-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 112.922124][ T21] uvcvideo 5-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 112.923259][ T4282] usb 1-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 112.931138][ T21] uvcvideo 5-1:1.1: Failed to initialize the device (-5). [ 112.964336][ T21] usb 5-1: USB disconnect, device number 12 [ 112.974931][ T4282] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 113.012542][ T4282] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 113.023968][ T5348] FAULT_INJECTION: forcing a failure. [ 113.023968][ T5348] name failslab, interval 1, probability 0, space 0, times 0 [ 113.042961][ T4282] usb 1-1: media controller created [ 113.059230][ T5348] CPU: 0 PID: 5348 Comm: syz.2.289 Not tainted syzkaller #0 [ 113.066573][ T5348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 113.077001][ T5348] Call Trace: [ 113.080386][ T5348] [ 113.083323][ T5348] dump_stack_lvl+0x188/0x250 [ 113.088018][ T5348] ? show_regs_print_info+0x20/0x20 [ 113.093236][ T5348] ? load_image+0x410/0x410 [ 113.097769][ T5348] ? __lock_acquire+0x7d40/0x7d40 [ 113.102991][ T5348] should_fail+0x383/0x4b0 [ 113.107957][ T5348] should_failslab+0x5/0x20 [ 113.112484][ T5348] slab_pre_alloc_hook+0x51/0xc0 [ 113.117456][ T5348] __kmalloc+0x6b/0x340 [ 113.121663][ T5348] ? start_sync_thread+0xb5b/0x2890 [ 113.126915][ T5348] start_sync_thread+0xb5b/0x2890 [ 113.131990][ T5348] ? sync_thread_master+0x900/0x900 [ 113.137409][ T5348] ? sb_queue_tail+0x3e0/0x3e0 [ 113.142215][ T5348] ? __might_fault+0xb7/0x110 [ 113.147113][ T5348] ? __lock_acquire+0x7d40/0x7d40 [ 113.152361][ T5348] ? __might_fault+0xb3/0x110 [ 113.157294][ T5348] do_ip_vs_set_ctl+0x40f/0xa10 [ 113.162450][ T5348] ? local_bh_enable+0x20/0x20 [ 113.167528][ T5348] ? mutex_unlock+0x10/0x10 [ 113.172332][ T5348] ? __local_bh_enable_ip+0x136/0x1c0 [ 113.178089][ T5348] ? lockdep_hardirqs_on+0x94/0x140 [ 113.183550][ T5348] ? __local_bh_enable_ip+0x136/0x1c0 [ 113.188989][ T5348] nf_setsockopt+0x25f/0x280 [ 113.193738][ T5348] ip_setsockopt+0x29c3/0x31e0 [ 113.199042][ T5348] ? ipv4_pktinfo_prepare+0x6b0/0x6b0 [ 113.204909][ T5348] ? __mutex_trylock_common+0x15c/0x260 [ 113.210880][ T5348] ? rcu_lock_release+0x20/0x20 [ 113.215854][ T5348] ? aa_label_sk_perm+0x3e6/0x540 [ 113.221531][ T5348] ? __mutex_lock_common+0x435/0x2400 [ 113.226963][ T5348] tcp_setsockopt+0x229/0x1e60 [ 113.231956][ T5348] ? tcp_set_window_clamp+0x1a0/0x1a0 [ 113.237448][ T5348] ? mutex_lock_io_nested+0x60/0x60 [ 113.242872][ T5348] ? __lock_acquire+0x7d40/0x7d40 [ 113.248230][ T5348] ? sock_common_setsockopt+0x32/0xb0 [ 113.254530][ T5348] ? sock_common_recvmsg+0x1c0/0x1c0 [ 113.259841][ T5348] smc_setsockopt+0x1b7/0xa30 [ 113.264579][ T5348] ? smc_shutdown+0x5c0/0x5c0 [ 113.269282][ T5348] ? aa_sock_opt_perm+0x74/0x100 [ 113.274245][ T5348] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 113.280228][ T5348] ? security_socket_setsockopt+0x7a/0xa0 [ 113.285977][ T5348] ? smc_shutdown+0x5c0/0x5c0 [ 113.290789][ T5348] __sys_setsockopt+0x2bf/0x3d0 [ 113.295763][ T5348] __x64_sys_setsockopt+0xb1/0xc0 [ 113.300855][ T5348] do_syscall_64+0x4c/0xa0 [ 113.305402][ T5348] ? clear_bhb_loop+0x30/0x80 [ 113.311257][ T5348] ? clear_bhb_loop+0x30/0x80 [ 113.316967][ T5348] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 113.323950][ T5348] RIP: 0033:0x7fb99c1cc559 [ 113.329473][ T5348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.352332][ T5348] RSP: 002b:00007fb99a423028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 113.361672][ T5348] RAX: ffffffffffffffda RBX: 00007fb99c452fa0 RCX: 00007fb99c1cc559 [ 113.370239][ T5348] RDX: 000000000000048b RSI: 0000000000000000 RDI: 0000000000000003 [ 113.379282][ T5348] RBP: 00007fb99c263b20 R08: 0000000000000018 R09: 0000000000000000 [ 113.388763][ T5348] R10: 0000200000001f40 R11: 0000000000000246 R12: 0000000000000000 [ 113.397316][ T5348] R13: 00007fb99c453038 R14: 00007fb99c452fa0 R15: 00007ffd920cdc48 [ 113.407265][ T5348] [ 113.423843][ T4282] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 113.502115][ T4282] set interface failed [ 113.502141][ T4282] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 113.514517][ T4282] error writing reg: 0xff, val: 0x00 [ 113.547348][ T5351] device syzkaller1 entered promiscuous mode [ 113.563558][ T4282] dvb_usb_mxl111sf: probe of 1-1:0.0 failed with error -22 [ 113.599890][ T4182] udevd[4182]: Error opening device "/dev/input/event4": No such file or directory [ 113.622068][ T4282] usb 1-1: USB disconnect, device number 16 [ 113.638909][ T4182] udevd[4182]: Unable to EVIOCGABS device "/dev/input/event4" [ 113.661259][ T4182] udevd[4182]: Unable to EVIOCGABS device "/dev/input/event4" [ 114.072205][ T4345] radio-usb-si4713: probe of 4-1:0.0 failed with error -71 [ 114.090811][ T4345] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 114.121272][ T4345] usb 4-1: USB disconnect, device number 12 [ 114.231755][ T5389] netlink: 12 bytes leftover after parsing attributes in process `syz.0.301'. [ 114.322115][ T2858] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 114.332542][ T21] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 114.702243][ T21] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 230, changing to 7 [ 114.872098][ T2858] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 114.882788][ T21] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 114.892200][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.901779][ T21] usb 2-1: Product: syz [ 114.901891][ T2858] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.914445][ T21] usb 2-1: Manufacturer: syz [ 114.919311][ T21] usb 2-1: SerialNumber: syz [ 114.924423][ T2858] usb 5-1: Product: syz [ 114.931538][ T2858] usb 5-1: Manufacturer: syz [ 114.937941][ T2858] usb 5-1: SerialNumber: syz [ 114.948175][ T2858] usb 5-1: config 0 descriptor?? [ 115.212134][ T2858] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 115.302249][ T21] usb 2-1: 1:1 : format type 0 is detected, processed as PCM [ 115.309773][ T21] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 115.332122][ T21] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 115.361588][ T21] usb 2-1: USB disconnect, device number 13 [ 115.592979][ T4181] udevd[4181]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 115.759648][ T5419] FAULT_INJECTION: forcing a failure. [ 115.759648][ T5419] name failslab, interval 1, probability 0, space 0, times 0 [ 115.778900][ T5419] CPU: 1 PID: 5419 Comm: syz.1.304 Not tainted syzkaller #0 [ 115.786328][ T5419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 115.796395][ T5419] Call Trace: [ 115.799782][ T5419] [ 115.802715][ T5419] dump_stack_lvl+0x188/0x250 [ 115.807413][ T5419] ? show_regs_print_info+0x20/0x20 [ 115.813570][ T5419] ? load_image+0x410/0x410 [ 115.818447][ T5419] ? __lock_acquire+0x7d40/0x7d40 [ 115.824523][ T5419] should_fail+0x383/0x4b0 [ 115.830189][ T5419] should_failslab+0x5/0x20 [ 115.834713][ T5419] slab_pre_alloc_hook+0x51/0xc0 [ 115.839952][ T5419] __kmalloc+0x6b/0x340 [ 115.844104][ T5419] ? start_sync_thread+0xb5b/0x2890 [ 115.849321][ T5419] start_sync_thread+0xb5b/0x2890 [ 115.854379][ T5419] ? sync_thread_master+0x900/0x900 [ 115.860134][ T5419] ? sb_queue_tail+0x3e0/0x3e0 [ 115.864900][ T5419] ? __might_fault+0xb7/0x110 [ 115.869573][ T5419] ? __lock_acquire+0x7d40/0x7d40 [ 115.874710][ T5419] ? __might_fault+0xb3/0x110 [ 115.879391][ T5419] do_ip_vs_set_ctl+0x40f/0xa10 [ 115.884375][ T5419] ? local_bh_enable+0x20/0x20 [ 115.891744][ T5419] ? mutex_unlock+0x10/0x10 [ 115.897018][ T5419] ? __local_bh_enable_ip+0x136/0x1c0 [ 115.903236][ T5419] ? lockdep_hardirqs_on+0x94/0x140 [ 115.909063][ T5419] ? __local_bh_enable_ip+0x136/0x1c0 [ 115.915513][ T5419] nf_setsockopt+0x25f/0x280 [ 115.920307][ T5419] ip_setsockopt+0x29c3/0x31e0 [ 115.925103][ T5419] ? ipv4_pktinfo_prepare+0x6b0/0x6b0 [ 115.930477][ T5419] ? __mutex_trylock_common+0x15c/0x260 [ 115.936284][ T5419] ? rcu_lock_release+0x20/0x20 [ 115.942498][ T5419] ? aa_label_sk_perm+0x3e6/0x540 [ 115.947893][ T5419] ? __mutex_lock_common+0x435/0x2400 [ 115.953679][ T5419] tcp_setsockopt+0x229/0x1e60 [ 115.959086][ T5419] ? tcp_set_window_clamp+0x1a0/0x1a0 [ 115.964925][ T5419] ? mutex_lock_io_nested+0x60/0x60 [ 115.972048][ T5419] ? __lock_acquire+0x7d40/0x7d40 [ 115.977208][ T5419] ? sock_common_setsockopt+0x32/0xb0 [ 115.983046][ T5419] ? sock_common_recvmsg+0x1c0/0x1c0 [ 115.989928][ T5419] smc_setsockopt+0x1b7/0xa30 [ 115.994826][ T5419] ? smc_shutdown+0x5c0/0x5c0 [ 115.999509][ T5419] ? aa_sock_opt_perm+0x74/0x100 [ 116.004863][ T5419] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 116.012381][ T5419] ? security_socket_setsockopt+0x7a/0xa0 [ 116.018620][ T5419] ? smc_shutdown+0x5c0/0x5c0 [ 116.024382][ T5419] __sys_setsockopt+0x2bf/0x3d0 [ 116.030032][ T5419] __x64_sys_setsockopt+0xb1/0xc0 [ 116.035095][ T5419] do_syscall_64+0x4c/0xa0 [ 116.039547][ T5419] ? clear_bhb_loop+0x30/0x80 [ 116.044266][ T5419] ? clear_bhb_loop+0x30/0x80 [ 116.048948][ T5419] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 116.054937][ T5419] RIP: 0033:0x7fd364dd5559 [ 116.059340][ T5419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.080453][ T5419] RSP: 002b:00007fd36302c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 116.089016][ T5419] RAX: ffffffffffffffda RBX: 00007fd36505bfa0 RCX: 00007fd364dd5559 [ 116.097010][ T5419] RDX: 000000000000048b RSI: 0000000000000000 RDI: 0000000000000003 [ 116.105092][ T5419] RBP: 00007fd364e6cb20 R08: 0000000000000018 R09: 0000000000000000 [ 116.113770][ T5419] R10: 0000200000001f40 R11: 0000000000000246 R12: 0000000000000000 [ 116.123150][ T5419] R13: 00007fd36505c038 R14: 00007fd36505bfa0 R15: 00007ffe73a8c668 [ 116.132464][ T5419] [ 116.298355][ T4282] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 116.318228][ T5434] usb usb2: usbfs: process 5434 (syz.2.311) did not claim interface 0 before use [ 116.471516][ T5442] netlink: 12 bytes leftover after parsing attributes in process `syz.2.313'. [ 116.534787][ T4279] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 116.628555][ T1204] block nbd2: Attempted send on invalid socket [ 116.636614][ T1204] blk_update_request: I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 116.846622][ T4282] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 116.861268][ T4282] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.871388][ T4282] usb 1-1: Product: syz [ 116.884385][ T4282] usb 1-1: Manufacturer: syz [ 116.889130][ T4282] usb 1-1: SerialNumber: syz [ 116.909122][ T4282] usb 1-1: config 0 descriptor?? [ 116.952042][ T4279] usb 4-1: unable to get BOS descriptor or descriptor too short [ 116.991977][ T4279] usb 4-1: not running at top speed; connect to a high speed hub [ 117.071612][ T5459] jffs2: notice: (5459) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 117.088559][ T4279] usb 4-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.102527][ T4279] usb 4-1: config 1 interface 0 has no altsetting 0 [ 117.162215][ T4282] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 117.171746][ T5466] FAULT_INJECTION: forcing a failure. [ 117.171746][ T5466] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 117.192950][ T5466] CPU: 0 PID: 5466 Comm: syz.1.325 Not tainted syzkaller #0 [ 117.200372][ T5466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 117.210851][ T5466] Call Trace: [ 117.214222][ T5466] [ 117.217449][ T5466] dump_stack_lvl+0x188/0x250 [ 117.222132][ T5466] ? show_regs_print_info+0x20/0x20 [ 117.227345][ T5466] ? load_image+0x410/0x410 [ 117.231938][ T5466] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 117.238009][ T5466] ? lock_chain_count+0x20/0x20 [ 117.242528][ T4345] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 117.242896][ T5466] should_fail+0x383/0x4b0 [ 117.242929][ T5466] prepare_alloc_pages+0x1e3/0x5b0 [ 117.259987][ T5466] __alloc_pages+0x11b/0x480 [ 117.264585][ T5466] ? zone_statistics+0x170/0x170 [ 117.269573][ T5466] ? __debug_object_init+0x253/0xc80 [ 117.274858][ T5466] ? alloc_pages+0x452/0x560 [ 117.279461][ T5466] __get_free_pages+0x8/0x30 [ 117.284070][ T5466] __genradix_ptr_alloc+0xda/0x350 [ 117.289286][ T5466] __genradix_prealloc+0x3e/0x80 [ 117.294454][ T5466] sctp_stream_init+0x10c/0x3c0 [ 117.299361][ T5466] sctp_association_new+0x10bf/0x2400 [ 117.304775][ T5466] sctp_unpack_cookie+0x7d6/0xe30 [ 117.309894][ T5466] ? sctp_make_temp_asoc+0x150/0x150 [ 117.315480][ T5466] ? __lock_acquire+0x13b3/0x7d40 [ 117.320528][ T5466] sctp_sf_do_5_2_4_dupcook+0x46b/0x1220 [ 117.326302][ T5466] ? sctp_sf_discard_chunk+0x3d0/0x3d0 [ 117.332363][ T5466] ? slab_free_freelist_hook+0xec/0x170 [ 117.338303][ T5466] ? sctp_inq_pop+0xc7d/0x1030 [ 117.343520][ T5466] ? sctp_assoc_bh_rcv+0x128/0x630 [ 117.348637][ T5466] ? sctp_backlog_rcv+0x157/0x3b0 [ 117.353847][ T5466] ? verify_lock_unused+0x140/0x140 [ 117.359569][ T5466] ? __sys_sendto+0x46d/0x620 [ 117.364678][ T5466] ? do_syscall_64+0x4c/0xa0 [ 117.369409][ T5466] sctp_do_sm+0x245/0x5690 [ 117.373924][ T5466] ? __lock_acquire+0x13b3/0x7d40 [ 117.379252][ T5466] ? sctp_generate_t3_rtx_event+0x340/0x340 [ 117.385265][ T5466] ? mark_lock+0x94/0x320 [ 117.389887][ T5466] ? skb_pull+0x8f/0x130 [ 117.394286][ T5466] ? sctp_inq_pop+0xc2e/0x1030 [ 117.399452][ T5466] sctp_assoc_bh_rcv+0x3ee/0x630 [ 117.404570][ T5466] sctp_backlog_rcv+0x157/0x3b0 [ 117.409488][ T5466] __release_sock+0x1e6/0x460 [ 117.414180][ T5466] release_sock+0x5b/0x1b0 [ 117.418700][ T5466] sctp_sendmsg+0x1bdd/0x2940 [ 117.423378][ T5466] ? sctp_getsockopt+0x8a0/0x8a0 [ 117.428549][ T5466] ? aa_af_perm+0x340/0x340 [ 117.433220][ T5466] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 117.439726][ T5466] ? aa_sock_msg_perm+0x94/0x150 [ 117.445176][ T5466] ? sock_rps_record_flow+0x17/0x3b0 [ 117.450925][ T5466] ? inet_sendmsg+0x7a/0x2a0 [ 117.455707][ T5466] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 117.461103][ T5466] __sys_sendto+0x46d/0x620 [ 117.465701][ T5466] ? __ia32_sys_getpeername+0x80/0x80 [ 117.471080][ T5466] ? lock_chain_count+0x20/0x20 [ 117.476035][ T5466] __x64_sys_sendto+0xda/0xf0 [ 117.480732][ T5466] do_syscall_64+0x4c/0xa0 [ 117.485160][ T5466] ? clear_bhb_loop+0x30/0x80 [ 117.489849][ T5466] ? clear_bhb_loop+0x30/0x80 [ 117.494539][ T5466] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 117.500548][ T5466] RIP: 0033:0x7fd364dd5559 [ 117.505008][ T5466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.525561][ T5466] RSP: 002b:00007fd36302c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 117.534059][ T5466] RAX: ffffffffffffffda RBX: 00007fd36505bfa0 RCX: 00007fd364dd5559 [ 117.542566][ T5466] RDX: 0000000000034000 RSI: 0000200000000200 RDI: 0000000000000006 [ 117.550611][ T5466] RBP: 00007fd364e6cb20 R08: 0000200000000240 R09: 000000000000001c [ 117.558605][ T5466] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000000 [ 117.567652][ T5466] R13: 00007fd36505c038 R14: 00007fd36505bfa0 R15: 00007ffe73a8c668 [ 117.575649][ T5466] [ 117.632949][ T4279] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 117.642659][ T4279] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.651355][ T4279] usb 4-1: Product: syz [ 117.656041][ T4279] usb 4-1: Manufacturer: syz [ 117.660793][ T4279] usb 4-1: SerialNumber: syz [ 117.752224][ T4345] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 230, changing to 7 [ 117.772450][ T5483] capability: warning: `syz.1.327' uses deprecated v2 capabilities in a way that may be insecure [ 117.942133][ T4345] usb 3-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 117.951245][ T4345] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.959328][ T4345] usb 3-1: Product: syz [ 117.963579][ T4345] usb 3-1: Manufacturer: syz [ 117.968167][ T4345] usb 3-1: SerialNumber: syz [ 118.002184][ T4279] cdc_ether: probe of 4-1:1.0 failed with error -71 [ 118.019474][ T4279] usb 4-1: USB disconnect, device number 13 [ 118.342191][ T4345] usb 3-1: 1:1 : format type 0 is detected, processed as PCM [ 118.351776][ T4345] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 118.371991][ T4345] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 118.407899][ T4345] usb 3-1: USB disconnect, device number 11 [ 118.742174][ T2858] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 118.984257][ T4345] usb 5-1: USB disconnect, device number 13 [ 119.086734][ T4282] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 119.106051][ T4282] usb 1-1: USB disconnect, device number 17 [ 119.265925][ T5510] nvme_fabrics: missing parameter 'traddr=%s' [ 119.285418][ T4279] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 119.581114][ T5526] overlayfs: failed to decode file handle (len=6, type=0, flags=0, err=-22) [ 119.592167][ T4345] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 119.623062][ T4206] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 119.634876][ T4206] CPU: 0 PID: 4206 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 119.642571][ T4206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 119.652638][ T4206] Workqueue: hci3 hci_rx_work [ 119.657677][ T4206] Call Trace: [ 119.661043][ T4206] [ 119.663990][ T4206] dump_stack_lvl+0x188/0x250 [ 119.668749][ T4206] ? show_regs_print_info+0x20/0x20 [ 119.673943][ T4206] ? load_image+0x410/0x410 [ 119.678469][ T4206] sysfs_create_dir_ns+0x26a/0x290 [ 119.683598][ T4206] ? sysfs_warn_dup+0xa0/0xa0 [ 119.688281][ T4206] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 119.694259][ T4206] ? do_raw_spin_unlock+0x11d/0x230 [ 119.699670][ T4206] kobject_add_internal+0x5ba/0xcd0 [ 119.704894][ T4206] kobject_add+0x160/0x230 [ 119.709309][ T4206] ? kobject_init+0x1c0/0x1c0 [ 119.713991][ T4206] ? __raw_spin_lock_init+0x41/0x100 [ 119.719274][ T4206] ? klist_children_get+0x50/0x50 [ 119.724292][ T4206] ? get_device_parent+0x121/0x3e0 [ 119.729421][ T4206] device_add+0x470/0x1050 [ 119.733864][ T4206] ? device_initialize+0x2a5/0x4d0 [ 119.738989][ T4206] hci_conn_add_sysfs+0xd1/0x1e0 [ 119.743927][ T4206] le_conn_complete_evt+0xc55/0x14d0 [ 119.749406][ T4206] ? cs_le_create_conn+0x5e0/0x5e0 [ 119.754517][ T4206] ? __mutex_trylock_common+0x15c/0x260 [ 119.760201][ T4206] hci_le_meta_evt+0x285/0x3ca0 [ 119.765139][ T4206] ? hci_event_packet+0x363/0x1310 [ 119.770240][ T4206] ? __lock_acquire+0x7d40/0x7d40 [ 119.775538][ T4206] ? hci_remote_host_features_evt+0x240/0x240 [ 119.781780][ T4206] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 119.787443][ T4206] ? mark_lock+0x94/0x320 [ 119.792104][ T4206] ? mutex_unlock+0x10/0x10 [ 119.798985][ T4206] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 119.805052][ T4206] ? lock_chain_count+0x20/0x20 [ 119.809897][ T4206] ? __rwlock_init+0x140/0x140 [ 119.814751][ T4206] hci_event_packet+0xe0b/0x1310 [ 119.819992][ T4206] ? _raw_spin_unlock+0x40/0x40 [ 119.825859][ T4206] ? rcu_lock_release+0x20/0x20 [ 119.831069][ T4206] ? hci_send_to_monitor+0x9c/0x4a0 [ 119.836310][ T4206] hci_rx_work+0x255/0xa10 [ 119.841006][ T4206] process_one_work+0x867/0xff0 [ 119.846089][ T4206] ? worker_detach_from_pool+0x240/0x240 [ 119.851865][ T4206] ? lockdep_hardirqs_off+0x70/0x100 [ 119.857168][ T4206] ? _raw_spin_lock_irq+0xb7/0xf0 [ 119.862471][ T4206] ? _raw_spin_lock_irqsave+0x100/0x100 [ 119.868005][ T4206] ? wq_worker_running+0x97/0x170 [ 119.873042][ T4206] worker_thread+0xad7/0x12a0 [ 119.877804][ T4206] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 119.883878][ T4206] kthread+0x42e/0x520 [ 119.887953][ T4206] ? rcu_lock_release+0x20/0x20 [ 119.892237][ T21] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 119.892791][ T4206] ? kthread_blkcg+0xd0/0xd0 [ 119.905428][ T4206] ret_from_fork+0x1f/0x30 [ 119.909854][ T4206] [ 119.916273][ T4206] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 119.930886][ T4206] Bluetooth: hci3: failed to register connection device [ 120.061973][ T4282] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 120.072572][ T4279] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 120.082067][ T4279] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.091000][ T4279] usb 2-1: Product: syz [ 120.096174][ T4279] usb 2-1: Manufacturer: syz [ 120.100813][ T4279] usb 2-1: SerialNumber: syz [ 120.107891][ T4279] usb 2-1: config 0 descriptor?? [ 120.112096][ T4345] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.123386][ T4345] usb 4-1: config 0 has no interfaces? [ 120.302081][ T4282] usb 3-1: Using ep0 maxpacket: 16 [ 120.333194][ T21] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 230, changing to 7 [ 120.344448][ T4345] usb 4-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=2d.d8 [ 120.353641][ T4345] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.362101][ T4345] usb 4-1: Product: syz [ 120.366283][ T4345] usb 4-1: Manufacturer: syz [ 120.370885][ T4345] usb 4-1: SerialNumber: syz [ 120.372121][ T4279] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 120.387919][ T4345] usb 4-1: config 0 descriptor?? [ 120.422081][ T4282] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.432554][ T4282] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 120.512108][ T4282] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 120.522217][ T4282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 120.530323][ T4282] usb 3-1: SerialNumber: syz [ 120.542129][ T23] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 120.572128][ T21] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 120.574425][ T4282] usb 3-1: 0:2 : does not exist [ 120.582089][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.595260][ T21] usb 5-1: Product: syz [ 120.599527][ T21] usb 5-1: Manufacturer: syz [ 120.605784][ T21] usb 5-1: SerialNumber: syz [ 120.647756][ T4345] usb 4-1: USB disconnect, device number 14 [ 120.791949][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 120.932124][ T23] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 120.940876][ T23] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 120.952397][ T23] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 120.962650][ T23] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 120.972863][ T23] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 120.986005][ T23] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 120.996280][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.230123][ T4206] Bluetooth: hci2: hcon ffff8880793f6000 sent 1 < count 65535 [ 121.239815][ T4206] Bluetooth: hci2: hcon ffff8880793f2000 sent 1 < count 3 [ 121.585282][ T5566] usbtmc 1-1:16.0: send_request_dev_dep_msg_in returned -90 [ 121.830613][ T4282] usb 3-1: USB disconnect, device number 12 [ 121.888999][ T5585] usbtmc 1-1:16.0: simple usb_control_msg returned 0 [ 121.909821][ T5591] device syzkaller0 entered promiscuous mode [ 121.912150][ T21] usb 5-1: 1:1 : format type 0 is detected, processed as PCM [ 121.928679][ T21] usb 5-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 121.951946][ T21] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 122.016275][ T21] usb 5-1: USB disconnect, device number 14 [ 122.093624][ T4345] usb 1-1: USB disconnect, device number 18 [ 122.194218][ T5611] INFO: trying to register non-static key. [ 122.200058][ T5611] The code is fine but needs lockdep annotation, or maybe [ 122.207162][ T5611] you didn't initialize this object before use? [ 122.213427][ T5611] turning off the locking correctness validator. [ 122.219753][ T5611] CPU: 1 PID: 5611 Comm: syz.4.377 Not tainted syzkaller #0 [ 122.227104][ T5611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 122.238086][ T5611] Call Trace: [ 122.241739][ T5611] [ 122.245171][ T5611] dump_stack_lvl+0x188/0x250 [ 122.249987][ T5611] ? show_regs_print_info+0x20/0x20 [ 122.255202][ T5611] ? load_image+0x410/0x410 [ 122.259737][ T5611] ? cpumask_next+0xb3/0xd0 [ 122.264274][ T5611] assign_lock_key+0x1ec/0x200 [ 122.269049][ T5611] ? SOFTIRQ_verbose+0x10/0x10 [ 122.273900][ T5611] ? mark_lock+0x94/0x320 [ 122.274822][ T5176] udevd[5176]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 122.278317][ T5611] register_lock_class+0x21d/0x880 [ 122.278345][ T5611] ? is_dynamic_key+0x1f0/0x1f0 [ 122.304196][ T5611] ? rcu_lock_release+0x5/0x20 [ 122.308978][ T5611] __lock_acquire+0x265/0x7d40 [ 122.314555][ T5611] ? __lock_acquire+0x12df/0x7d40 [ 122.322088][ T5611] ? stack_trace_save+0xf0/0xf0 [ 122.326961][ T5611] ? verify_lock_unused+0x140/0x140 [ 122.332561][ T5611] ? __might_sleep+0xf0/0xf0 [ 122.337824][ T5611] ? __might_fault+0xb7/0x110 [ 122.342534][ T5611] lock_acquire+0x19f/0x400 [ 122.347070][ T5611] ? gsmld_write+0x57/0x120 [ 122.351603][ T5611] ? __might_fault+0xb3/0x110 [ 122.356296][ T5611] ? read_lock_is_recursive+0x10/0x10 [ 122.361691][ T5611] ? _copy_from_iter+0x5bf/0x1160 [ 122.366731][ T5611] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 122.372218][ T5611] ? lockdep_hardirqs_off+0x70/0x100 [ 122.377520][ T5611] _raw_spin_lock_irqsave+0xb0/0x100 [ 122.382824][ T5611] ? gsmld_write+0x57/0x120 [ 122.387353][ T5611] ? _raw_spin_lock+0x40/0x40 [ 122.392098][ T5611] ? __virt_addr_valid+0x3c6/0x470 [ 122.397223][ T5611] gsmld_write+0x57/0x120 [ 122.401941][ T5611] file_tty_write+0x50c/0x8a0 [ 122.406650][ T5611] ? gsmld_read+0x10/0x10 [ 122.410997][ T5611] vfs_write+0x748/0xd70 [ 122.415258][ T5611] ? file_end_write+0x250/0x250 [ 122.420142][ T5611] ? __fget_files+0x402/0x470 [ 122.424836][ T5611] ? __fdget_pos+0x1e2/0x370 [ 122.429437][ T5611] ? ksys_write+0x70/0x260 [ 122.433865][ T5611] ksys_write+0x153/0x260 [ 122.438471][ T5611] ? __ia32_sys_read+0x80/0x80 [ 122.443249][ T5611] ? lockdep_hardirqs_on+0x94/0x140 [ 122.448601][ T5611] do_syscall_64+0x4c/0xa0 [ 122.453061][ T5611] ? clear_bhb_loop+0x30/0x80 [ 122.457761][ T5611] ? clear_bhb_loop+0x30/0x80 [ 122.462463][ T5611] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 122.468370][ T5611] RIP: 0033:0x7fece4396559 [ 122.473320][ T5611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.492936][ T5611] RSP: 002b:00007fece25ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 122.501378][ T5611] RAX: ffffffffffffffda RBX: 00007fece461cfa0 RCX: 00007fece4396559 [ 122.509413][ T5611] RDX: 000000000000000c RSI: 0000200000000700 RDI: 0000000000000003 [ 122.517850][ T5611] RBP: 00007fece442db20 R08: 0000000000000000 R09: 0000000000000000 [ 122.525838][ T5611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.533918][ T5611] R13: 00007fece461d038 R14: 00007fece461cfa0 R15: 00007ffeee570d78 [ 122.542065][ T5611] [ 122.592721][ T4182] udevd[4182]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 123.311989][ T4279] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32 [ 124.008320][ T4345] usb 2-1: USB disconnect, device number 14